Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 02 May 1999 11:30:44 +0200
From:      Poul-Henning Kamp <phk@critter.freebsd.dk>
To:        "Jeroen C. van Gelderen" <jeroen@vangelderen.org>
Cc:        Robert Watson <robert+freebsd@cyrus.watson.org>, The Tech-Admin Dude <geniusj@phoenix.unacom.com>, Brian Beaulieu <brian@capital-data.com>, freebsd-security@FreeBSD.ORG
Subject:   Re: Blowfish/Twofish 
Message-ID:  <2570.925637444@critter.freebsd.dk>
In-Reply-To: Your message of "Sun, 02 May 1999 11:25:09 %2B0200." <372C19F5.625BB2B@vangelderen.org> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <372C19F5.625BB2B@vangelderen.org>, "Jeroen C. van Gelderen" writes:
>Robert Watson wrote:
>[...]
>> I'd recommend against using Blowfish--go for Twofish.
>
>Regardless of what you think about Blowfish, recommending Twofish
>is a very, very bad move.

Considering that the concept for passwords is a "kleenex-model",
it doesn't matter.  We can change the algorithm at the first hint
of trouble and ask people to change passwords and we're in safe
water.

--
Poul-Henning Kamp             FreeBSD coreteam member
phk@FreeBSD.ORG               "Real hackers run -current on their laptop."
FreeBSD -- It will take a long time before progress goes too far!


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2570.925637444>