Carl,
I agree with your characterization of the problem. I also
believ it is a bad idea to adopt multiple versions of a triple-DES
mode. So, if this topic is discussed in Amsterdam and if there is
agreement to add a triple DES option, the result shuld be selection of
a single defintion of how PEM could make use of triple-DES, not the
creation of a menu of several options. This is the same perspective
Steve Crocker stated some time ago and we are in strong agreement about
the need to avoid proliferation of crypto modes in PEM.
Steve