How to "activate" gpg.conf entries?

Werner Koch wk at gnupg.org
Wed Jul 11 23:41:21 CEST 2012


On Wed, 11 Jul 2012 21:41, rjh at sixdemonbag.org said:

> History has not been kind to the Merkle-Damgård construction.  The fact
> OpenPGP only contains Merkle-Damgårds has always bothered me: I'd feel
> much better if WHIRLPOOL had been standardized and included in the list.

On Phil’s request we tried to limit proliferation of algorithms and
tried to agree on a common and useful subset of the allowed algorithms.
Back then WHIRLPOOL doesn’t gave a clear improvement on the size of a
digest and thus we did not considered it as something useful.  Hash
algorithm research was kind of black magic and most of us assumed that
the NSA folks tried their best to come up with a solid hash design.
WHIRLPOOL was a bit of obscure back then.  That all happened 12 to 15
years ago.  The last discussion I recall was during the second AES
conference in 2000(?).


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.




More information about the Gnupg-users mailing list