4 ms·
The rationale for preferring 128-bit AES over 256-bit AES is given later in the doc.
by hsivonen 13y ago
The rationale for preferring 128-bit AES over 256-bit AES is given later in the doc.
- e12e 13y agoI was kind of arguing against including both, on the basis that it is unlikely(?) that a client that enable 256bit aes suites disables 128bit -- and so if indeed 128bit might be more secure (see the note on timing attacks) -- why leave 256 bits enabled? Has anyone seen clients in the wild that disable 128bit and enable 256? Especially end-user clients, and/or "permanent" deployments/appliances, where the new cipher-suite isn't a result of power-user tinkering, but a decision that's taken out of the end-users hands?