NIST announces (proposed) withdrawal of DES

[Peter Gutmann]

For those who haven't seen the announcement:

-- Snip --

July 27, 2004 -- NIST has determined that the strength of the (single) Data
Encryption Standard (DES) algorithm is no longer sufficient to adequately
protect Federal government information. As a result, NIST proposes
withdrawing FIPS 46-3, which specifies the DES, and two related standards
(see http://csrc.nist.gov/Federal-register/July26-2004-FR-DES-Notice.pdf).
Future use of DES by Federal agencies is to be permitted only as a
component function of the Triple Data Encryption Algorithm (TDEA; see NIST
Special Publication 800-67 at
http://csrc.nist.gov/publications/nistpubs/800-67/SP800-67.pdf). TDEA may
be used for the protection of Federal information; however, NIST encourages
agencies to implement the faster and stronger algorithm specified by FIPS
197, Advanced Encryption Standard (AES) instead. Comments must be received
on or before September 9, 2004.

To submit comments, concerns or questions please forward them to:
descomments at nist.gov.

Elaine Barker
National Institute of Standards and Technology
100 Bureau Dr., Stop 8930
Gaithersburg, MD 20899-8930
Phone: 301-975-2911
Fax: 301-926-2733
Email: ebarker at nist.gov

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com