NSA's new mode of operation broken in less than 24 hours

[InfoSec News <isn () c4i org>]

Forwarded by: "Jay D. Dyson" <jdyson () treachery net>


-----BEGIN PGP SIGNED MESSAGE-----

Courtesy of Cryptography List.

Busy day.

- ---------- Forwarded message ----------
Date: Fri, 3 Aug 2001 10:50:34 -0400
From: "R. A. Hettinga" <rah () shipwright com>
To: Digital Bearer Settlement List <dbs () philodox com>, dcsb () ai mit edu,
    cryptography () wasabisystems com
Subject: NSA's new mode of operation broken in less than 24 hours


- --- begin forwarded text


Reply-To: <paulo.barreto () terra com br>
From: "Paulo S. L. M. Barreto" <paulo.barreto () terra com br>
To: <coderpunks () toad com>
Subject: NSA's new mode of operation broken in less than 24 hours
Date: Thu, 2 Aug 2001 22:40:32 -0300
Sender: owner-coderpunks () toad com

NSA has recently convinced NIST to include a new algorithm - something they
dubbed "Double Counter" mode after 18 months of development - for
consideration as a possible standard mode of operation for the AES. It's
described at <http://csrc.nist.gov/encryption/modes/proposedmodes/>, but I
wouldn't bother reading it now had I not done it already. The new mode seems
to have been reduced to bits by Phillip Rogaway, David Wagner and others.

Could it be that the NSA is losing its proverbial cryptologic skills? For
one can't help but conclude that, if they acted in good faith to provide a
useful mode, then they did a very poor job, and if they acted otherwise,
then they quite underestimate current public knowledge in the area.

Paulo Barreto.

- --- end forwarded text


- -- 
- -----------------
R. A. Hettinga <mailto: rah () ibuc com>
The Internet Bearer Underwriting Corporation <http://www.ibuc.com/>
44 Farquhar Street, Boston, MA 02131 USA
"... however it may deserve respect for its usefulness and antiquity,
[predicting the end of the world] has not been found agreeable to
experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'



- ---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo () wasabisystems com

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iQCVAwUBO2rxq7lDRyqRQ2a9AQGzKwP+Jysc0CnpAoclenz3Kzux0mvXEDdWzrVJ
1Nh/OwPjylIPfbP2jgaOj2aNkzRyUOgBQFliuZ4Ob6Ay+wLOlJ4mlICCGHP/k7jn
txUhB0eFNQdh40RL8VnBRRNLc7oy6hYn5+5QP2XhXzT2ZW1KwOflSKaqACvlUjg3
TJqH6NoPDRw=
=mlt6
-----END PGP SIGNATURE-----



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo () attrition org with 'unsubscribe isn' in the BODY
of the mail.