Paranoid Encryption Standard (was Re: Rijndael & Hitachi)

[Damien Miller]

On Thu, 26 Oct 2000, Arnold G. Reinhold wrote:

> simple way to combine the AES finalists and take advantage of all the 
> testing that each has already undergone.  And, IMHO, it is an 
> interesting theoretical question as well.  Even if the answer is 
> "yes," I am not advocating that it be used in most common 
> applications, e.g network security, because there are so many greater 
> risks to be dealt with. But it might make sense in some narrow, high 
> value, applications.
 
What threat model do you propose that would require this?

I can't think of anything that isn't contrived and couldn't be served 
by using 3DES.

-d

-- 
| ``We've all heard that a million monkeys banging on | Damien Miller -
| a million typewriters will eventually reproduce the | <djm at mindrot.org>
| works of Shakespeare. Now, thanks to the Internet, / 
| we know this is not true.'' - Robert Wilensky UCB / http://www.mindrot.org