[Cryptography] Guaranteeing that no distinct keys produce indistinguishable results

[Richard Outerbridge]

> On 2015-05-27 (147), at 22:41:21, Jonathan Thornburg <jthorn at astro.indiana.edu> wrote:

[….]

> The reason to use EDE rather than EEE when doing 3DES is to allow
> backward-compatability with single-DES when all three keys are the same.

Correct.
__outer