Re: [AVTCORE] Suite B Profile for DTLS-SRTP Internet-Draft

[Magnus Westerlund <[e-mail]>]

On 2011-05-31 14:24, Igoe, Kevin M. wrote:
> Magnus:
> 
>   Thanks for your input.  We'll put this under avtcore per your request.
> As to allowing keying methods other than DTLS, we have no objections
> (obviously) to non-Suite B implementations using them, but in an
> effort to maximize interoperability betwixt Suite B SRTP implementations
> policy dictates that only DTLS keying will be allowed in Suite B mode.
> If another keying methods is used, it is by definition not Suite B compliant.

Ok, so SuiteB also contains beyond the crypto algorithms also usage
rules that affects key management. Are these rulse also forbidding use
cases like Broadcast or multicast where using DTLS-SRTP is in fact
impossible?

> 
> If you think it would be helpful, we could mention the existence of the MIKEY 
> and Security description keying mechanisms, but only with the caveat that their 
> use is forbidden when running in Suite B mode.

My immediate reaction is if one can define profiles that are not SuiteB
but use the same encryption and authentication algorithm so they are bit
compatible, but not policy compatible?

Independent I think you need to make it clear in the document that
SuiteB does contain these policy rules.

Cheers

Magnus Westerlund

----------------------------------------------------------------------
Multimedia Technologies, Ericsson Research EAB/TVM
----------------------------------------------------------------------
Ericsson AB                | Phone  [phone]
Färögatan 6                | Mobile [phone]
SE-164 80 Stockholm, Sweden| mailto: [e-mail]
----------------------------------------------------------------------