At 03:16 PM 10/29/97 -0800, Jon Callas wrote:
I'd also like to note that the principle of "no weak crypto" is in the
charter, so I'm not including any weak algorithms, period.
There is a difference between not _including_ weak crypto in the standard,
and specifically _prohibiting_ weak crypto.
I would prefer that the standard explicitly state that a compliant
implementation MAY NOT support any encryption with less than "n" bits of key.
I'm open to discussion of the appropriate value of "n", but 40 certainly
isn't it. Sorry, Dr. Freeh.
--
David Hayes
David(_dot_)Hayes(_at_)MCI(_dot_)Com
Switch Systems Engineering voice: 972-918-7236
MCI Communications, Inc. VNET: 777-7236
--If these thoughts were MCI's official opinions, the line above would
--read "MCI - Law & Public Policy Department".