RE: Choice of ESP alg. for IPS/IPSec - 3DES-CBC vs. 3DES-CBC-I

["Bernard Aboba" <bernard_aboba@hotmail.com>]

>When AES-CTR is
>approved, AES-CTR becomes MUST and 3DES-CBC is demoted to MAY.

Doing that will create a problem in interoperation between iSCSI HBAs (which 
might have AES support) and software-only implementations, all of which now 
support 3DES-CBC. So it seems like 3DES-CBC has to be a MUST.

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp