> It's Jacob, not Jack. Whoops. Silly. Thanks. > I'm really not sure how much credence I give crypto comments from Appelbaum. In this case it isn't a crypto

> It's Jacob, not Jack. Whoops. Silly. Thanks. > I'm really not sure how much credence I give crypto comments from Appelbaum. In this case it isn't a crypto comment as much as it is a forensic one. His suggestion comes from experience working with and reversing US malware. We do know that some US malware samples did use RC6, but that's hardly enough to say with confidence that this is a ubiquitous choice for all US malware. My guess would be that it is not. > With RC6 you don't even get good open source library support. I'm not sure how worried they are about this.