Re: Triple DES on PEM WG Agenda

IV's again...

Wish I could be there; I'm sure it will be fun.  I just wanted to respond to a 
new issue raised in this debate: even if you do DES-CBC with three loopbacks, 
there is no security reason to have three IVs.  The one IV should be used going 
into the first round and the other two should have an 
IV of zero.

Don't add more cybercrud to the header where it's not needed...

        --Charlie
        (kaufman(_at_)zk3(_dot_)dec(_dot_)com)