Derek Atkins wrote:
As for 128-bit keys, it sounds like we have a rough consensus that it
is not crazy to have them. How about if we discuss them seriously?
To me it certainly sounds like there are more people who say
they'd like 128-bit or "don't care" than those who say that they
definitely do NOT want 128-bit. So I think there's rough consensus
to have 128- and 256-bit Camellia keys.
To clarify the discussion on 128-bit Camelia cipher, there
is rough consensus to have it, or at least my arguments
shouldn't be seen as any vote against a rough consensus.
iang