1996-04-14 - Re: carrick, Blowfish & the NSA

Header Data

From: “Perry E. Metzger” <perry@piermont.com>
To: “Mark M.” <markm@voicenet.com>
Message Hash: 419159fb4e03e51b728b8a6e30825c921cd45b54157a53241952f7e621aa86a9
Message ID: <199604141933.PAA05457@jekyll.piermont.com>
Reply To: <Pine.LNX.3.92.960414121820.358A-100000@gak>
UTC Datetime: 1996-04-14 23:00:23 UTC
Raw Date: Mon, 15 Apr 1996 07:00:23 +0800

Raw message

From: "Perry E. Metzger" <perry@piermont.com>
Date: Mon, 15 Apr 1996 07:00:23 +0800
To: "Mark M." <markm@voicenet.com>
Subject: Re: carrick, Blowfish & the NSA
In-Reply-To: <Pine.LNX.3.92.960414121820.358A-100000@gak>
Message-ID: <199604141933.PAA05457@jekyll.piermont.com>
MIME-Version: 1.0
Content-Type: text/plain

"Mark M." writes:
> > I was unaware that PGPPhone used Blowfish, but if it does that was a
> > stupid idea in the first place.
> Blowfish is unpatented, free for commercial use, and very fast so I don't see
> how the use of Blowfish could be considered stupid.  IDEA and triple-DES may
> be more secure, but I think that they are too slow for voice communication.


Voice communication is typically under 20kbps. Using Phil Karn's
latest code, a pentium can do about 10Mbps for single DES, and
presumably about 3Mbps for 3DES. Thats orders of magnitude larger than
you need. 3DES is unencumbered.