Kyle Hamilton wrote:
It was my mistake, I had misunderstood that DES itself was not allowed and therefore derivatives of it were not allowed either.
While 3DES is currently legal we can expect it to be phased out at some point just as plain DES has been, so AES is the better choice where you are free to choose between them.
Unfortunately some legacy software that you may need to interoperate with does not support AES.
-Steve M. -- Steve Marquess Veridical Systems, Inc. marqu...@veridicalsystems.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org