|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Des / 3des
i agree, we have tested Rijndael and it was faster and less costly in cpu cycles tha 3des -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of Crist Clark Sent: 17 May 2002 17:14 To: [email protected] Subject: Re: [FW-1] Des / 3des Russell Aspinwall wrote: > > Hi, > > 3DES is DES applied three times with a resultant 112 bit encryption. If > you have Strong Encryption then AES-128 or AES-256 is more secure than > 3DES however they appear to be significantly more CPU intensive. Err-uuh, no. DES was designed (back in the 70s) to be used done in hardware. When it comes to doing DES in software, it is actually quite suboptimal. Now, 3DES, which is one DES encryption, one DES decryption, followed by one more DES encryption, is pretty dang slow relative to a lot of other algorithms when done in software. (This is for several reasons, since DES is slow in software in the first place, and since you're only getting an effective protoction of 112-bits despite the fact you're doing calculations with 168-bits of keying material.) One of the main reasons, well probably _the_ main reason, Rijndael won the AES competition was because of its "speed." From the numbers I've seen (of course at the moment, I can't find any of the documents) a decent implementation of AES is several _times_ faster than 3DES. -- Crist J. Clark [email protected] Globalstar CommunicationsThe information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact [email protected] ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
