Re: Resolving the newmodes algorithm list.

[Damien Miller <djm%mindrot.org@localhost>]

Peter Gutmann wrote:
> Bill Sommerfeld <sommerfeld%east.sun.com@localhost> writes:
>
>
> > Also, what do people think of boosting aes128-ctr to MANDATORY ?
>
> Given that AES-CTR's main feature is that it's building block for a variety of
> confidentiality+integrity modes (rather than a mode in and of itself) and that
> it's parallelisable (if you happen to be doing, say, Gbps link encryption in
> hardware), what would be the benefit of this?

There was a long discussions on problems with CBC modes on this list a 
while back. CTR mode was offered as not vulnerable to the same problems.

-d