From 71642210718c505a31dfcf0d39cf8d674e3cd52b Mon Sep 17 00:00:00 2001 From: sobrado Date: Thu, 15 Jan 2015 11:54:31 +0000 Subject: [PATCH] tell the truth about DES. joint work with djm@ and jsing@ ok djm@ --- sbin/iked/iked.conf.5 | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/sbin/iked/iked.conf.5 b/sbin/iked/iked.conf.5 index fb0ab5e182e..7faa2288948 100644 --- a/sbin/iked/iked.conf.5 +++ b/sbin/iked/iked.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: iked.conf.5,v 1.36 2015/01/02 18:28:23 sobrado Exp $ +.\" $OpenBSD: iked.conf.5,v 1.37 2015/01/15 11:54:31 sobrado Exp $ .\" .\" Copyright (c) 2010 - 2014 Reyk Floeter .\" Copyright (c) 2004 Mathieu Sauve-Frankel All rights reserved. @@ -15,7 +15,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: January 2 2015 $ +.Dd $Mdocdate: January 15 2015 $ .Dt IKED.CONF 5 .Os .Sh NAME @@ -778,8 +778,8 @@ not encryption: .It Li null Ta "" Ta "[ESP only]" .El .Pp -Use of DES as an encryption algorithm is not recommended (except for -backwards compatibility) due to the short key length. +Use of DES as an encryption algorithm is considered to be insecure +since brute force attacks are practical due its short key length. .Pp DES requires 8 bytes to form a 56-bit key and 3DES requires 24 bytes to form its 168-bit key. -- 2.20.1