Re: [AVTCORE] Stephen Farrell's Discuss on draft-ietf-avtcore-srtp-aes-gcm-14: (with DISCUSS)

Martin Thomson <martin.thomson@gmail.com> Mon, 09 February 2015 23:39 UTC

Return-Path: <martin.thomson@gmail.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EDF51A8A8A; Mon, 9 Feb 2015 15:39:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wfWwxKiYBKt3; Mon, 9 Feb 2015 15:39:00 -0800 (PST)
Received: from mail-ob0-x22a.google.com (mail-ob0-x22a.google.com [IPv6:2607:f8b0:4003:c01::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94A4F1A6EE8; Mon, 9 Feb 2015 15:38:59 -0800 (PST)
Received: by mail-ob0-f170.google.com with SMTP id va2so28567129obc.1; Mon, 09 Feb 2015 15:38:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=e4vxyFc9+ev3io35MAbOqWpbfaZBHgOvMorfBQ2/Smk=; b=OYMIc4AhpvxdxDKlV0j05+3j9uZOfO7Kdv8ZYJGGYKZXBETaMip4xhLwI2+MNVxvtk g1JS059yDkA/ti82gT8TD7uPlLfCHw/AFkdqFfBY1O8eG6YyE/YK1TaOclu03JZ/4eoe Iicl0mAs2QG7tvzsH1Xzg55wFcV3lHIp9i2wnMWiiD6dBEpYb0BqpXVBKz8ArppxmMo7 CmkX+UR13u5Q1uLhx4+ZVt3zkZY0M/I9f1cdr6u0vdGMaOD7GuP6kS/12vkbo9+omBQS lIgUiGvOZArF7lHBBVizUPo1irnIwAEIHvgv3CWKFlWl4/5EGiv9YodT7s5C1PZTlolA FlpQ==
MIME-Version: 1.0
X-Received: by 10.60.92.5 with SMTP id ci5mr13450781oeb.26.1423525138830; Mon, 09 Feb 2015 15:38:58 -0800 (PST)
Received: by 10.202.225.135 with HTTP; Mon, 9 Feb 2015 15:38:58 -0800 (PST)
In-Reply-To: <54D93B9A.9090409@cs.tcd.ie>
References: <20141029122825.18943.78129.idtracker@ietfa.amsl.com> <3C4AAD4B5304AB44A6BA85173B4675CABC709A18@MSMR-GH1-UEA03.corp.nsa.gov> <545151F9.9050502@cs.tcd.ie> <B1821703-9D09-41C5-AAC1-5EBB9CE2ACC4@cisco.com> <54516572.8020601@cs.tcd.ie> <D825D4F3-26D3-49BE-9E32-0E4FFF89BC40@cisco.com> <5451737B.6060504@cs.tcd.ie> <2D4BE3ED-840A-444C-9D18-09BC3D937D64@cisco.com> <54CA135D.3020304@ericsson.com> <54D4D840.4080808@cs.tcd.ie> <54D8A297.9090505@ericsson.com> <54D93B9A.9090409@cs.tcd.ie>
Date: Tue, 10 Feb 2015 10:38:58 +1100
Message-ID: <CABkgnnV7XSdpUooRs2fqgvw7W29uP5t1GmAHzGrv7UnaS9dn8w@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/avt/iq2Q8zu0MeEhQvK7m0U8cRhuTC4>
Cc: Magnus Westerlund <magnus.westerlund@ericsson.com>, "draft-ietf-avtcore-srtp-aes-gcm@tools.ietf.org" <draft-ietf-avtcore-srtp-aes-gcm@tools.ietf.org>, David McGrew <mcgrew@cisco.com>, IETF AVTCore WG <avt@ietf.org>, "avtcore-chairs@tools.ietf.org" <avtcore-chairs@tools.ietf.org>, The IESG <iesg@ietf.org>
Subject: Re: [AVTCORE] Stephen Farrell's Discuss on draft-ietf-avtcore-srtp-aes-gcm-14: (with DISCUSS)
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Feb 2015 23:39:01 -0000

On 10 February 2015 at 09:58, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:
>
>           AEAD_AES_128_GCM    = {TBD, TBD }
>           AEAD_AES_128_GCM_12 = {TBD, TBD }

FWIW, I agree with Stephen here.  Other than knowing of its existence,
I haven't been following this work at all.  But I really don't want
SRTP cipher suite proliferation.

I'm personally uninterested in a suite with an abbreviated tag, given
that it's a mere 4 octets of savings.  I know that this was a big deal
in the past, but that gave us the _24 (bits) variants.  In this case,
either save bits by being more aggressive, or drop the _12 (bytes)
variant.

If you keep it, please be consistent and call it _96.