[Cryptography] From Nicaragua to Snowden - why no national standards should be considered in cryptosec

[james hughes]

> On Feb 28, 2016, at 6:18 AM, ianG <iang at iang.org> wrote:
>   Just as an aside... Belgians designed the algorithm, the code was written by a Brazilian, the Java test rig was created by an Australian.  The Dutch in Anguilla did something too, can't quite recall what tho.  The other 4 contenders (or 29) were from many countries and spent a lot of time analysing the 5 leaders.  All 5 leaders were thought to be state of the art of the time.
> 
>   Seems non-national to me :)


Agree. 

Maybe the point should be that AES went through a crazy hard PUBLIC gauntlet, far more than any other algorithm ever, including DES, before it got its “national” moniker. That can not be said for the other “national” algorithms. Emphasis on PUBLIC gauntlet. 

Given that the IETF can not muster the level of scrutiny to any other algorithm that was spent on AES, the IETF seems to be the tail on this dog. 

Be careful what you ask for. The IETF choosing some random non-national cipher could be the NSA’s dream. Through NIST, they can mandate what they want for the military and banks, and read the rest. 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20160228/ee01e549/attachment.html>