[Cryptography] Which big-name ciphers have been broken in living memory?

[Ryan Carboni]

On Mon, 2014-08-25 at 05:22 +1200, Peter Gutmann wrote:
> Werner Koch <wk at gnupg.org> writes:

> (Oh, and I filed a request to move to AES as the default in 2011, subject
"Why
> does GPG still default to the 15-year-old CAST5 for everything?", so
people
> have asked for this to be fixed).

Is there any evidence that CAST5 is in any way inadequate?

People are upset with use of an "Antique" algorithm?  Why?

I would be upset with the use of an "Insecure" algorithm or
an "Untested" algorithm.  Into neither of which classes
CAST5 falls.

So, I say the burden of evidence falls on those requesting a
change here.  What is wrong with CAST5 that people want to get
rid of it?


64-bit blocks. CAST5 is only suitable for files no greater than 4 GB.
Although I haven't seen much cryptanalysis on an electronic codebook attack.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20140826/d1bf9cae/attachment.html>