>>>>> "Ken" == Ken Raeburn via RT writes: Ken> Our current string-to-key for des3 makes no checks or corrections Ken> for weak keys. [...] Ken> The current crypto draft says we don't do weak-key checks, but Ken> that's because I looked at our string-to-key and not the key Ken> scheduling code. Latest crypto draft says weak key checking is done. We should update the code. ---Tom