symmetric key algorithms

[Adam Shostack]

| Could anyone comment on the acceptability and reliability of the 
| SAFER algorithm, in comparison with other algorithms such as IDEA,
| Triple-DES, DES, RC4, ....  Has there been any comparison paper 
| written on the pros and cons of the different symmetric key algorithms?

	There was a weakness shown in SAFER K-64 by Lars Knudsen at
Crypto '95.  It involved a related key chosen plaintext attack, which
derived from SAFER's XOR'ing the data with the key too often.

	It would make me nervous about using SAFER, but I'm just an
amateur at the crypto stuff.

Adam

-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume