Re: DES and IDEA in the kernel _very_ broken! (was: DES code in the kernel)

Ian Goldberg (iang@cs.berkeley.edu)
Sat, 20 Jul 1996 09:21:47 -0700 (PDT)


-----BEGIN PGP SIGNED MESSAGE-----

> Why not use blowfish? AFAIK, IDEA requires a license (at least, in order to
> be used legally).

AFAIK, this is true only in some parts of the world. Hopefully, by the
time I'm done massaging this code, you should be able to just plug in
any encryption algorithm you want...

> And why not use OFB? Our Secure Comm group here (at Motorola) is switching
> to OFB mode for our new products. And the APCO-25 standard specifies OFB.

It sounds like you're doing encrypted communications. OFB makes sense for
that. It doesn't make so much sense for stored, blocked data. You would
need to reinitialize the OFB for each block, anyway, to permit random access,
and you would want to do it with different values, to prevent identical
blocks from being encrypted identically.

> I was planning to look into blowfish after I'm done fixing the (still
> existant) deadlock bug with the loop driver.

Maybe that's the problem I'm having with layering stego on top of crypto...
Could you describe it in more detail?

- Ian

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMfEHl0ZRiTErSPb1AQGY5wP/fU8Y6VWmF638Jr0mKG9SUMDUPjKEYLzI
qZ9R6+oKLuyklSBn2G98rK+F2KtYNpEMhN4NeI73gsUjGj4duYsckFJRc5eZYHWA
WEE4k5MIPQ1RTIFOvgz4nbO5YQI/ntLfSwrlzzW1DgdKOu1bCzbS8fx42vw1Yx/L
DRzw0niuC2Q=
=NjJt
-----END PGP SIGNATURE-----