[Cryptech Tech] Use case for AES-192?

Russ Housley housley at vigilsec.com
Mon Jul 21 20:38:38 UTC 2014


I do not know anyone that is making use of AES-192, but AES-128 and AES-256 are in heavy use.

Russ


On Jul 21, 2014, at 4:35 PM, Joachim Strömbergson wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> Aloha!
> 
> The recent discussion on ietf-cfrg maillist regarding the key strengths
> for asymmetric vs symmetric algorithms (and requirements in Suite B) [1]
> got me thinking.
> 
> Are there any of our primary use cases that would require AES-192? Or
> would AES-128 and AES-256 suffice? (Say yes, please. ;-)
> 
> There isn't that big additional complexity to support AES-192, but there
> is some and needs to be tested. I would prefer only having 128 and 256 keys.
> 
> 
> [1] This discussion highlighted the fact that AES often is used with 256
> bit keys, but asymmetric primitives (EC) use 384 bit key lengths, or 192
> equivalent strength. The reason for this seemed to be that Suite B
> called for 192 bit strength, but no AES implementation implemented 192
> bits, only 128 and 256. Thus 256 is used.
> 
> - -- 
> Med vänlig hälsning, Yours
> 
> Joachim Strömbergson - Alltid i harmonisk svängning.
> ========================================================================
> Joachim Strömbergson          Secworks AB          joachim at secworks.se
> ========================================================================
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iQIcBAEBCAAGBQJTzXmsAAoJEF3cfFQkIuyNn+EP/ijK3+GQQHAa5/qimIHwv9Sm
> 1a4VCEsGe+fL2U4Ae/aRK46oqkF58eNrj4WiQUN1UfCXZ6rL1rf2Dsenmkwr+tsS
> X+AqaJVOTDDMTjb2MYSLDxuvDsbR7PUUPttFVGJprFfdCZ/lYkUEeoTbTesgLMi1
> 2K6GIPbjNZ9Rud4/LHtSJu7hnULw1qU938k/7AIj3L/5ARVlo6WJYMUG6sR/SEk+
> pLQ3yfTDt8SUYGsKiNgIINXlt5WAwMbg/pypRuFJtkQiLN3v6KyJjrfPElRvU/Dg
> ipeYuOVh50ii21x9PSAYlaBTjInGidc7m+o8ZxVc6yCKh6kzXKEjlP1A1zYqgklV
> eLF29Kcymcy8ZalMA9cdbL1AfbyQz/q55rOSWFZev2T4tyB5jnrXvmZNtltCJ/Dn
> EJ/L+XnxabuhG9SSSf1HfkwhjCHZJYUZumqHUn9k9qEqomJ0f5prfHIpBDvXg7pS
> rMOcTVhtVnp7UXlXpLPWpyiQ/UUu7t3kAyzqCx2LsjhALGzu5wngJ3K7B+xOCyxI
> eNxYoU3e8FN9oJFKmKLbctQDaSQLMnf2MlRq3JzfHFjtJLa4Be5AKbI+mDh+UMFT
> FaVCnlCfJUREOTFuHrKDCIpHlMThfZD/HtXx3n+gJsMvw4Kl8EhpW1uXB6oXjVo3
> SPS8reYSjkK3KR2HDlIK
> =TGjA
> -----END PGP SIGNATURE-----
> _______________________________________________
> Tech mailing list
> Tech at cryptech.is
> https://lists.cryptech.is/listinfo/tech



More information about the Tech mailing list