Re: [AVTCORE] Stephen Farrell's Discuss on draft-ietf-avtcore-srtp-aes-gcm-14: (with DISCUSS)

[Stephen Farrell <[e-mail]>]

We seem to have opinions all over the map on this one. Sorry for
making life difficult;-) I guess we'll be discussing it on the
informal telechat this Thursday though, so just picking some set
then would seem like the best approach. (I'll still briefly argue
for the minimal set, but I accept we should just pick something
then and be done with this.)

S.


On 19/02/15 16:01, Magnus Westerlund wrote:
> On 2015-02-15 15:09, David McGrew wrote:
>>
>> My opinion is: it would be best to preserve the existing specification
>> and implementation work, and retain all ten crypto suite definitions.  
>> But if we want to make SRTP-AEAD be the first instance in which the IETF
>> will  prioritize simplicity over variety and diversity, I’m good with
>> that, because I certainly see the value of simplicity; then my
>> recommendation would be to eliminate the four 12-octet authentication
>> versions.  That would leave just six crypto suites, with two different
>> modes of operation, two different key sizes, and two different tag
>> lengths (but not all tag lengths for all modes), like this:
>>
>>       srtp-crypto-suite-ext = "AEAD_AES_128_GCM"    /
>>                               "AEAD_AES_256_GCM"    /
>>                               "AEAD_AES_128_CCM"    /
>>                               "AEAD_AES_256_CCM"    /
>>                               "AEAD_AES_128_CCM_8"  /
>>                               "AEAD_AES_256_CCM_8"  /
>>
> 
> Stephen, WG
> 
> Having looked at the feedback provided in this discussion so far, I
> think the above set of 6 are a reasonable selection without unduly
> limiting functionality, but removing the four least necessary profiles.
> 
> My proposal is that if no one is disagreeing with this in the next week
> (Prior to Feb 26 at 16:30 UTC) we use it. If someone disagrees we hold a
> discussion at the informal IESG telechat on how to proceed.
> 
> Cheers
> 
> Magnus Westerlund
> 
> ----------------------------------------------------------------------
> Services, Media and Network features, Ericsson Research EAB/TXM
> ----------------------------------------------------------------------
> Ericsson AB                 | Phone  [phone]
> Färögatan 6                 | Mobile [phone]
> SE-164 80 Stockholm, Sweden | mailto: [e-mail]
> ----------------------------------------------------------------------
>