On Jun 17, 2012, at 4:13 PM, Sam Smith wrote: > Doesn't the IETF openPGP standard call for 256-bit key for TWOFISH? > > Could someone verify that the TWOFISH cipher uses 256-bit key length in GnuPG? Yes. See section 9.2 of RFC-4880 for confirmation. David