[6113] in cryptography@c2.net mail archive
AES design questions
daemon@ATHENA.MIT.EDU (David Honig)
Tue Nov 23 12:42:05 1999
Message-Id: <3.0.5.32.19991123072842.00899570@pop.sprynet.com>
Date: Tue, 23 Nov 1999 07:28:42 -0800
To: cypherpunks@algebra.com
From: David Honig <honig@sprynet.com>
Cc: cryptography@c2.net
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
1. Why does AES require 128 bit blocks? Any other reason
than to make ECB codebook attacks tougher?
2. Why does AES require >128 bit keylength support? 2^128
is not practically breakable. What am I missing? Is this
simple "overengineering" aka "safety margins" (plus "bits are cheap, but
not so cheap that using minimal-128 isn't worth it
sometimes")?