twofish keysize

[Werner Koch]

On Thu, 22 Apr 2004 00:11:40 +0200, Malte Gell said:

> Isn't this issue one of the reasons why OpenPGP compresses data before 
> encrypting it? If a large cleartext chunk contains much redundant data, 
> compression may reduce it and helps to reduce such patterns.  So 

OTOH, compressed data has a well known structure and you know also
that there is not much entropy in the text.  This also gives hints for
cryptanalysis.

Both, AES and Twofish solve the problem with very large files in a
simple and efficient way.  You don't need a 256 bit key but well that
is what the standard says for OpenPGP's Twofish.  Actually it was more
a marketing reason that NAI at the time used the 256 bit version.


Shalom-Salam,

   Werner