IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Key lengths for algorithms for variable-length keys



transport-23, in section 7.2, says:

   128 bits (16 bytes) MUST be used for algorithms with variable-length
   keys.  The only variable key length algorithm defined in this
   document is arcfour).

Apart from the mismatched parenthesis, this seems like a strange pair of sentences. The "arcfour" algorithm as specified in section 6.3 is defined to have a 128-bit key anyway. RC4 does generally support variable key lengths, but so do Blowfish and CAST-128, so why aren't they mentioned?

If this stipulation is meant to apply to all future algorithms, it seems like a particularly bad idea. Is it intended to prevent me defining "arcfour-256%bjh21.me.uk@localhost" to be RC4 with a 256-bit key, for instance? If not, what does it do?

--
Ben Harris



Home | Main Index | Thread Index | Old Index