carrick, Blowfish & the NSA

[Perry E. Metzger]

"Mark M." writes:
> > I was unaware that PGPPhone used Blowfish, but if it does that was a
> > stupid idea in the first place.
> 
> Blowfish is unpatented, free for commercial use, and very fast so I don't see
> how the use of Blowfish could be considered stupid.  IDEA and triple-DES may
> be more secure, but I think that they are too slow for voice communication.

Huh?

Voice communication is typically under 20kbps. Using Phil Karn's
latest code, a pentium can do about 10Mbps for single DES, and
presumably about 3Mbps for 3DES. Thats orders of magnitude larger than
you need. 3DES is unencumbered.

Perry