From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham
	autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fb57f,9d00a7db22818139
X-Google-Attributes: gidfb57f,public
X-Google-Thread: 103376,9d00a7db22818139
X-Google-Attributes: gid103376,public
X-Google-ArrivalTime: 2001-02-26 15:22:20 PST
Path: 
 supernews.google.com!sn-xit-03!supernews.com!cyclone-sf.pbi.net!63.208.208.143!feed2.onemain.com!feed1.onemain.com!dc1.nntp.concentric.net!newsfeed.concentric.net!feed2.news.rcn.net!rcn!dispose.news.demon.net!news.demon.co.uk!demon!extropy.demon.co.uk!not-for-mail
From: "Julian Morrison" <julian@extropy.demon.co.uk>
Newsgroups: comp.lang.ada,sci.crypt
Subject: Re: Arcfour in Ada
Date: Mon, 26 Feb 2001 23:20:23 +0000
Message-ID: <983229612.3178.0.nnrp-10.9e98cc46@news.demon.co.uk>
References: <983158039.27320.0.nnrp-08.9e98cc46@news.demon.co.uk>
 <3A9ADBAE.EFF0B8AC@multiweb.nl>
NNTP-Posting-Host: extropy.demon.co.uk
X-NNTP-Posting-Host: extropy.demon.co.uk:158.152.204.70
X-Trace: news.demon.co.uk 983229612 nnrp-10:3178 NO-IDENT
 extropy.demon.co.uk:158.152.204.70
X-Complaints-To: abuse@demon.net
User-Agent: Pan/0.9.3 (Unix)
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Tranfer-Encoding: 8bit
X-No-Productlinks: Yes
Xref: supernews.google.com comp.lang.ada:5549 sci.crypt:19035
Date: 2001-02-26T23:20:23+00:00
List-Id: <comp.lang.ada>

"Thomas Boschloo" <nospam@multiweb.nl> wrote:

> Why did you decide to go for arcfour and not the AES
> http://www.nist.gov/aes ?
> [...]
> 
> AES seems so much more secure in the long run than RC4!

AFAIK, the AES cypher is more secure in that you can safely reuse keys.
It's also newer, though, and new crypto is less trustable. AES is also a
very gread deal more CPU churn and overhead than Arcfour. Since you can
only encrypt in blocks of four bytes, you need extraneous header info to
show where the contents end, and you need to CBC the blocks together. If
you're encrypting a lot of small things (such as in Fling's routeballs)
the overheads will add up.

>From what I've understood from older messages here, Arcfour is "good
enough" for the task at hand. Of course, if anyone knows I got this
wrong, please do say.