"Jeroen C. van Gelderen" <jeroen(_at_)vangelderen(_dot_)org> writes:
In fact, there are those who feel safer with AES
at 128 than at
256.
Any particular reason(s)? Is there any merit to these reason(s)?
The difficulty in obtaining 256 bits of key entropy?
Hmm... if I read you correctly that would imply that AES-256 with a
key containing 128 bits of entropy is less secure than AES-128 with a
key containing 128 bits of entropy. Do you know of a document where
this would be explained?
I certainly did not say "less secure", did I? It's certainly
much SLOWER, and certainly is not MORE secure...
-derek
--
Derek Atkins
Computer and Internet Security Consultant
derek(_at_)ihtfp(_dot_)com www.ihtfp.com