DES-CBC?

Simon Josefsson jas@extundo.com
Mon, 10 Jun 2002 12:00:04 +0200


Werner Koch <wk@gnupg.org> writes:

> On Fri, 07 Jun 2002 21:36:56 +0200, Simon Josefsson said:
>
>> Any plans to add DES-CBC?  Calling
>
> 3-key-EDE-DES in CBC mode should work.  If you need plain old DES I
> will implement it.

Unfortunately I need plain old DES.  Thanks.

>> gcry_cipher_open(GCRY_CIPHER_DES_SK, GCRY_CIPHER_MODE_CBC, 0)
>
> DES/SK is not implemented because it is marked as an reserved
> algorithm in OpenPGP and not further specified.

My uses isn't OpenPGP related at all.  Is this a problem?

I have looked at Nettle and MCrypt/MHash (GnuTLS) as well, but I just
became a bit confused -- all three looks good, free license, at least
some documentation, on the surface the design differences seem minor,
etc.  Mcrypt/Mhash seem to support most algorithms/modes.  Has GNU
adopted either one of them?  I'd rather not start using one of them
and then change to another one if they merge into a official GNU
project one day...

>> The mode of operation seem to be implemented in the same file as the
>> encryption algorithms.  Would it make sense to separate the encryption
>
> No, the encryption algorithm should just do an ECB and we build on
> that in cipher/cipher.c to implement CFB and CBC using a generic
> method.  This is not the fastest way of doing so but saves us a lot of
> work and code.

Ok.