S-Box changes

Lazarus Long lazarus at overdue.ompages.com
Sat Sep 25 01:33:38 CEST 1999


On Fri, Sep 24, 1999 at 01:02:36AM +0200, Michael Roth wrote:
> > Why are S-boxes being changed?  Forgive my suspicious sounding question
> > here, but I'm sure you can understand how this can be a sensitive matter.
> 
> You mean the latest Tripple-DES changes, do you? So, take a look at the
> ChangeLog file in the same directory:

Yes, that is what I meant.  I had only time to briefly scan the diff file,
and saw those changes, and had not heard discussion of them on this list,
hence my query.  (I also didn't want to apply the diff until an answer,
so I didn't quite "have" the changelog at hand, even though I'm sure it
was buried in the same diff had I bothered.)

> In reality the S-Boxes are exactly equal. They just _look_ different.

:-)

> However, if you don't trust me, the advantages of Open-Source crypto
> plays the game: Just choose a Tripple-DES implementation of your choice
> and compare its results with the Tripple-DES implementation used in
> GnuPG.

Yes, that is the largest benefit of OSS crypto, IMO.  Peer Review is an
absolute necessity with crypto if it is to be credible, again IMO.

(I trust you will understand the "sensitive" nature of S-Boxes and not
misinterpret my question as reflecting on you personally, Michael.)

-- 
Please encrypt all mail whenever possible.  The following Public Keys
for Lazarus Long <lazarus at overdue.ompages.com> are available upon request:

  Type    Bits/KeyID    Fingerprint        (GnuPG (GPG) is preferred.)
GPG/ELG: 2048g/DE3E078A 0023 E86F A45A C46D 8243  1A7F 6FF2 84C1 3F5B F7CD
GPG/DSA: 1024D/3F5BF7CD (none for DSA keys)
PGP5/DH: 2048/D367A17F  A85A 6A13 B154 6F1C CEF8  F22A 59AE DCC5 D367 A17F
PGP/DSS: 1024/7C998C69  348E FD86 F86C 05FA 6BE1  FE89 C636 2AC9 7C99 8C69
PGP/RSA: 2048/BEBB2EA5  7B EA 8D CB 10 82 F2 30  05 B3 AE E4 08 69 58 E5
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 252 bytes
Desc: not available
Url : /pipermail/attachments/19990925/7b292fd1/attachment.bin


More information about the Gnupg-devel mailing list