Recall CAST-128

• 1997, Entrust Technologies

• RFC 2144

• Extensively reviewed

• Variable key length, 40-128 bits

• Used in PGP