Kyle Hamilton wrote:
It was my mistake, I had misunderstood that DES itself was not allowed
and therefore derivatives of it were not allowed either.

While 3DES is currently legal we can expect it to be phased out at some point just as plain DES has been, so AES is the better choice where you are free to choose between them.

Unfortunately some legacy software that you may need to interoperate with does not support AES.

-Steve M.

--
Steve Marquess
Veridical Systems, Inc.
marqu...@veridicalsystems.com
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to