[BBLISA] 3des vs blowfish for ssh?

Dean Anderson dean at av8.com
Wed Jan 12 16:19:55 EST 2005


I don't think we have any genuine encryption experts, so its hard to say
which is really better.  3des is still used by banks.  If I recall,
Blowfish (or perhaps its IDEA or both) is patented.  Although, now that 
you bring up the point, it is kind of funny that AES isn't in the list for 
ssh....

I can almost see DES decryptions not being too much work. I have the DES
cracker book, and using current generation FPGA, its probably a lot
cheaper than the $200K claimed of many years ago. By contrast, 3DES is
quite a bit harder to crack, and has 168 bits of key, and effectively 48
rounds instead of 16 rounds.

If someone is breaking 3des, "you don't need to know". ;-)

Some things still use DES, like AFS.  

		--Dean

On Wed, 12 Jan 2005, Scott Ehrlich wrote:

> Hello to all:
> 
> When using ssh, which encryption method is considered more secure - 3des
> or blowfish?   I've always used 3des.
> 
> Thanks for educating me.
> 
> Scott
> 
> _______________________________________________
> bblisa mailing list
> bblisa at bblisa.org
> http://www.bblisa.org/mailman/listinfo/bblisa
> 
> 

-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 344 9000   





More information about the bblisa mailing list