Re: [TLS] Proposed text for IDEA/DES document

[Simon Josefsson <simon at josefsson.org>]

<Pasi.Eronen at nokia.com> writes:

> For single-DES, it's easy to explain why using it isn't a good 
> idea; for IDEA, I'd like to see some better text than mine...
> Does anyone know about e.g. cryptographic results for IDEA
> (like attacks more efficient than exhaustive key search)?

I believe weak keys is a sign of historical cipher designs, and both DES
and IDEA have weak keys.  A reference for IDEA is:

http://citeseer.ist.psu.edu/daemen93weak.html

I think there are even better results than that paper, but that was one
of the earliest.

One can debate how problematic weak keys are, but I haven't seen anyone
arguing that existence of weak keys improve the security or confidence
in a cipher.

/Simon
_______________________________________________
TLS mailing list
TLS at ietf.org
http://www.ietf.org/mailman/listinfo/tls