[gnukeyring-discuss] Keyring crypto

[XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX]

{continued from forum thread:}
[quote]
Date: 2002-04-29 19:31
Sender: hoenicke
Logged In: YES 
user_id=18252

Keyring is currently using only 112 bit keys for des (the 
key for third DES is the same as the one for the first. In 
openssl this is called des_ecb2.

I'm thinking about changing the encryption in the future, 
but as this means another incompatible database format 
this is a change that I don't want to do ad hoc. 

Another drawback of the current encryption scheme is the 
use of simple ecb instead of ofb or cfb mode.  The effect 
is that one can determine which records match on parts of 
the data, e.g which have the same account.

As I now changed to pilotSSLeay there is no reason to 
stick to 3DES at all. We could use other faster encryption 
routines.  If you want to discuss this, we can do this on 
the keyring-discuss mailing list.
[/quote]

Hello hoenicke,

I wasnt sure if 3DES had a keylength of 112 bits or 168 bits; Thanks
for clearing that up :)

I dont really see any need to change the cipher. Maybe if you wanted
to give users an option of selecting what cypher they like. 3DES is
considered by many to be the most secure algorithm, but you might
think of CAST for its speed while still being a 128bit cypher.

Does the change to the pilotSSLeay library mean that there will be
more ciphers to choose from, or is there a speed difference?


Cheers,

/Tony

http://messenger.yahoo.com.au - Yahoo! Messenger
- A great way to communicate long-distance for FREE!