[pycrypto] RSA exportKey question

[Yaron Sheffer]

Actually-not-so-old meaning more than 10 years? (See "Changes between 
0.9.6h and 0.9.7  [31 Dec 2002]" under 
http://www.openssl.org/news/changelog.html. Or is Python OpenSSL support 
so much behind mainline OpenSSL?

Thanks,
	Yaron

On 2013-07-05 13:10, Legrandin wrote:
> Hi Paul,
>
> In the back of my mind, I was referring to practical purposes *in the
> context of key wrapping*.
> For key wrapping, you deal with very small payloads and the key is
> salted: speed and birthdays paradox are not real concerns,
> and the security marging 3DES (with 112 bits of ) is large enough.
> I am suggesting to stick to "PBKDF2WithHMAC-SHA1AndDES-EDE3-CBC" as
> default PKCS#8 wrapping algorithm for export
> because there are more chances the receiver (e.g. some
> actually-not-so-old openssl versions) will be able to unwrap it.
> If I had to pick a more future proof value (regardless of
> compatibility) I would agree that AES is better, but only in
> combination with scrypt as KDF.
>
> 2013/7/4  <Paul_Koning at dell.com>:
>>
>> On Jul 3, 2013, at 5:26 PM, Legrandin wrote:
>>
>>> I find 3DES is as good as AES for most practical purposes.
>>
>> I'm curious what your metrics are for that conclusion.
>>
>> By way of comparison, the new draft for the RFC covering storage protocol security (successor to RFC 3723) switches from 3DES to AES for clearly stated reasons, one of which is the fact that 64 bit blocks and large quantities of data don't go well together.  If you're dealing with small quantities of data, 3DES might still be good enough, but I still don't see an obvious reason to stick with a rather ancient cipher when a well-vetted replacement is available.
>>
>>          paul
>>
>>
>> _______________________________________________
>> pycrypto mailing list
>> pycrypto at lists.dlitz.net
>> http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto
> _______________________________________________
> pycrypto mailing list
> pycrypto at lists.dlitz.net
> http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto
>