Recently the State Department has released a document saying that AES and DES are unsafe for classified material. This statement from the State Department may be alluding to an attack against these algorithms that is not publicly known.

Under no circumstances should DES- or AES-equipped radios be used for the transmission of classified information, as defined by Executive Order 12958.

AES and 3DES are still on the list of approved algorithms by NIST. However, so is SHA-1, in the case of SHA-1 this is probably because even though it is very broken no one has generated a collision.

So what should a security conscious developer use instead of AES? Why should someone use this algorithm? Are there regulations that govern this alternative (HIPAA,PCI-DSS...)?

Edit
Report