[tor-talk] time to disable 3DES?
ler762 at gmail.com
Tue Oct 8 05:17:12 UTC 2013
On 10/8/13, Yawning Angel <yawning at schwanenlied.me> wrote:
> * Lee <ler762 at gmail.com> [2013-10-07 21:49:29 -0400]:
>> On 10/7/13, Yawning Angel <yawning at schwanenlied.me> wrote:
>> > * Lee <ler762 at gmail.com> [2013-10-07 15:58:19 -0400]:
>> >> Isn't it time to quit using DES?
>> >> Finally gave TBB a try (version 2.3.25-13), seems to me that the
>> >> firefox component needs a lot of hardening.
>> > DES != 3DES, and supporting 3DES suites is standard across major
>> > browsers.
>> Right. But is it still safe to use?
> Why wouldn't it be?
It's old, NIST ran a competition to find a successor to DES/3DES &
selected AES about 13 years ago & I haven't read anything
_recommending_ the use of 3DES in I don't know how many years.
To get back on-topic -- isn't it time to disable 3DES in TBB?
If not, why not?
More information about the tor-talk