Subject: Re: [Ipsec] Comment about 3664bis-01

From: "The Purple Streak, Hilarie Orman" <[email-masked]>
Date: Tue, 19 Apr 2005 16:02:05 -0600

You are correct in observing that there are some undesirable properties
in the method for deriving a 128-bit key from more than 128 bits.  It
would be better to use the hash itself with a zero key than to encrypt
individual blocks.  My preference would be to forbit the longer keys
on the grounds that user who does that must have some unreasonable
expectations about security.

Hilarie

_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec