In message <[EMAIL PROTECTED]>, Richard Coleman writes:

>For instance, the NIST specification for AES and CCM mode (NIST Special 
>Publication 800-38C) specifically states that you must limit the number 
>of invocations of the block cipher (specifically AES) to 2^61.  Now, I 
>realize that is an upper bound.  But even after removing several orders 
>of magnitude, that leaves a huge amount of material you can encrypt with 
>a single key.
>
>Just throwing out a data point.

This would be much more interesting if you qouted the number they will
say ten and twenty years from now.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
[EMAIL PROTECTED]         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.
_______________________________________________
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to