-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Janusz A. Urbanowicz wrote:
> On Sun, Jan 27, 2008 at 04:23:06PM -0500, John W. Moore III wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA512
>>
>> - Original Message
>> Subject: Re: How true can this be?
>> From: Janusz A.
After almost two years of neglect, I've got time enough to start working
on GPGee again. I was informed some time ago that work is underway to
replace it. I don't see a replacement yet, so I'm going to put out a
release that fixes some bugs and incorporates a French translation I was
given.
>Twofish is almost entirely abandoned nowadays, but it still exists in
>PGP and GnuPG. Once a bad decision is made in engineering, the
>engineers are stuck supporting it forever.
Is this statement really true or just opinion? Bruce Schneier is one
of my favorite cryptoanalysts.
Kevin Hilton wrote:
> Is this statement really true or just opinion? Bruce Schneier is one
> of my favorite cryptoanalysts.
Bruce recommends against using Twofish for crypto applications.
He has never backed off from either of two claims:
1. Twofish is a secure cipher that would have m
