Re: [TLS] Proposed text for IDEA/DES document

["Bodo Moeller" <bmoeller at acm.org>]

On Sat, Feb 9, 2008 at 7:35 AM, Mike <mike-list at pobox.com> wrote:

> > 3DES still is frequently used, for historical
>  > reasons on the one hand, and probably because not everyone likes AES
>  > all that much on the other hand.

>  What don't people like about AES?  Is their dislike of it
>  technically justified, or is it based on personal preference?

This is a question I'd like to answer 20 years from now, then putting
hindsight to use ;-)

I guess you could say that some people have a personal preference to
think that their dislike of AES is technically justified.  Take a look
here, for example: http://www.cryptosystem.net/aes/  A rather
confusing page (not even just about AES even though it pretends so at
first sight), but then the author *is* a cryptanalysis expert, so his
concerns probably shouldn't be ignored lightly.

Others have complained about AES because its internal structure is
rather prone to side-channel attacks.

I'm not sure who really would recommend 3DES over AES for reasons like
these, but 3DES certainly appears to be fine as long as you don't have
to handle too large an amount of data (the small block length isn't an
issue then), and it has been around for longer -- so arguably we can
expect fewer cryptanalytic surprises regarding 3DES than regarding
AES.

Bodo
_______________________________________________
TLS mailing list
TLS at ietf.org
http://www.ietf.org/mailman/listinfo/tls