[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Using blowfish keys with ipsec?
> also, 3des was championed by the nsa who are notorious for scary
> espionage tactics.
> blowfish is faster (like gunnar said, lighter) and more flexible as it
> allows for a variable key size.
> since you're just talking about key generation, it's not going to make
> much difference.
Right, at creation time there is not much worth considering on an
encryption scheme over another - Anyway, I would be more than willing to
wait a bit longer for generating a key if it would provide noticeably
better performance and/or security... But anyway, if you go with 3DES,
your VPN can become slower more easily.
...And yes, I agree with the lack of trust for the NSA :) Although 3DES
has been mathematically proven... I prefer not using it more as a boycott
than as a trust issue.
Gunnar Wolf - firstname.lastname@example.org - (+52-55)5623-1118
PGP key 1024D/8BB527AF 2001-10-23
Fingerprint: 0C79 D2D1 2C4E 9CE4 5973 F800 D80E F35A 8BB5 27AF