Re: [Cfrg] Re: [saag] Bad day at the hash function factory

[Michael Richardson <mcr at sandelman.ottawa.on.ca>]

>>>>> "dee3" == dee3  <dee3 at pothole.com> writes:
    dee3> See draft-ietf-ipsec-esp-ah-algorithms-01.txt.

  yeah, I forgot about that one.
  QQQQ = AES-CBC here.

    >> In doing so, however, I want to start commonly deploying another hash
    >> as well.
    >> I.e. it is not enough to deprecate HMAC-MD5 (which I understand is not
    >> know to be vulnerable), and make HMAC-SHA1 the default. I want to make
    >> HMAC-SHA1 + QQQQ the new set of algorithms.
    >> having that "spare" out there is pretty useful.
    >> 

--
]     "Elmo went to the wrong fundraiser" - The Simpson         |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [

_______________________________________________
Cfrg mailing list
Cfrg at ietf.org
https://www1.ietf.org/mailman/listinfo/cfrg