Re: triple algorithms



Guy Macon <http://www.guymacon.com/> writes:
There exist ciphers (Akelarre, FEAL-4...) that were at one time thought
to be strong but later found to be badly broken.

Thought by who?

RC4 was designed in 1987, posted to the cypherpunks mailing list in
1994, and used in the design of WEP in 1999, only to have WEP be
broken in 2001. It *can* happen.

WEP was bungled from the outset. My guess is some engineer who didn't
know anything about cryptography saw how simple RC4 was and said "hey,
I can code this". Was it ever reviewed by cryptographers before
standardization? Note that SSL/TLS has used RC4 a lot longer and not
had such problems, despite the known attacks against RC4.
.



Relevant Pages