Re: Last Call: Telnet Authentication Option to Proposed Standard

[Johan Danielsson]

Jeffrey Altman <[EMAIL PROTECTED]> writes:

> You are questioning the use of Triple DES but not the use of
> CAST-128.

I'm questioning the use of DES3 in anything but EDE on outer CBC
mode. There is a paper by Eli Biham about other combinations, which
basically says that most of them are not much better than single DES.

Even though this paper doesn't talk about this specific use, it's not
obvious that it's more secure to use DES3 to generate random numbers
than it is to use single DES.

Has this case been analysed by anyone?

/Johan