Re: migration paradigm (was: Is PGP broken?)

[Paul Crowley]

Bram Cohen <[EMAIL PROTECTED]> writes:
> > Is there a reason not to use AES block cipher in a hashing mode
> > if you need a secure digest of some data? 
> 
> Hashing modes of block ciphers require a re-key for every block, and hence
> are really, really slow.

Well, Rijndael can re-key faster than it can encrypt, so it's less of
a problem than with other block ciphers.  Of course, there are not
unrelated worries that Rijndael's key schedule may not offer the
strength required for hashing modes, though the designers are
confident that the strength of the round function ensures everything
will be OK.
-- 
  __
\/ o\ [EMAIL PROTECTED]
/\__/ http://www.cluefactory.org.uk/paul/