At 05:54 PM 10/28/97 -0800, you wrote:
Questions:
There are presently three symmetric algorithms used in PGP. They are IDEA,
Triple-DES, and CAST5.
Ideally, there would be only one MUST algorithm, and the other two are
SHOULD algorithms -- because you lose some compatibility with PGP 5 if you
don't do them, but there are reasons not to do IDEA, for example (it's
patented, and you need a license).
So here are the questions:
(1) Which algorithm is the MUST algorithm?
3DES.
Well understood. Well reviewed. Free. Timeless.
(2) Should there be more than one MUST algorithm, and if so, which ones?
Please note that arguing for IDEA being a MUST algorithm could lead to the
standard getting bogged down.
No.
(3) Should any remaining algorithms from the original suite be SHOULD or MAY?
(4) What other algorithm(s) do you want to see as MAY algorithms?
SHOULD:
IDEA, CAST (Let's define WHICH CAST precisely though, yes?), Blowfish.
MAY:
Others.. (SAFER?)
Now, when are we going to see larger than 1024 DSS keys?