Steve,
You wrote:
My preference would be to go with a single standard (even at the risk
of phasing-out current use of single-DES) which balances security,
ease of implementation, and (my favorite) export issues. (Have we
forgotten our place in the global Internet community ? Shall we doom
all US PEM manufacturers to the "support multiple versions or don't sell
outside the US" curse ?)
I agree with this list. However, this thread is discussing how to get
an algorithm that is noticeably stronger than DES, so I've assumed
we're foregoing all possibility of export. Do see any hope of
choosing an algorithm in the EDE2 range or better that will be
exportable?
Steve