Using gpg for french law

Werner Koch
Thu, 3 Aug 2000 15:12:27 +0200

On Thu, 3 Aug 2000, Bruno Vidal wrote:

> I've succeded to compil and use gpg, it works fine, but now I've a problem
> to use it in france. The law in france allow only 128bits key. So my question
> is: is it possible to use gpg with 128bits key ?
If you don't use Twofish (which is not yet in the standard) your maximum keylength is 128 bits. CAST5 and Blowfish are native 128 bit block ciphers where 3DES is a 168 bit cipher but it's effective key length is about 110 bits. You mixed up the length of the public key algorithm with those of the symmetric algorithm. You can't compare them. A 128 bit public key does NOT provide ANY security. Even the cracked French banking card uses more than 300 bits for the public key RSA algorithm. Werner -- Werner Koch GnuPG key: 621CC013 OpenIT GmbH -- Archive is at - Unsubscribe by sending mail with a subject of "unsubscribe" to