[Cfrg] RE: Where's the beef?

David,

At 12:39 PM 8/30/2002 -0700, David A. Mcgrew wrote:
>>
>> You side-stepped my budget question.  So I assume no money is available.
>
>this is the IRTF.  If you're expecting us to solicit or disburse money, I'm
>afraid that you'll be disappointed.  If you're unfamiliar with the IRTF, the
>guidelines and procedures are outlined in RFC 2014.
>

I am unfamiliar with it.  Let me read it before getting back to you.

And to answer an earlier question, yes I do have something in mind but
I hesitate.

>> This is a pity, because the best minds in the crypto world will not work
>> for free, unlike the usual university or corporate lab network programmer
>> in an IETF WG.  This will make it difficult to produce anything useful
>> here.  As a practical matter we will need to back up our RFC's with
>> outside analysis.
>
>The idea of CFRG is that the RG members can provide this kind of review, and
>that the results of crypto analysis relevant to the Internet can be
>disseminated and discussed.
>

No.  I disagree.  Anything serious must go through very thorough "private"
review first.  You cannot put stuff out publicly until you are sure it 
will fly from a crypto/security point of view.  Otherwise you will damage
our reputation to the point that you might as well disband.

To me "private" means we have the best cryptanalysts possible review our
RFCs before we put them out for public review (say a couple of months 
before first call).  Unless the various RG members have the credentials
(only 2-3 are probably needed per type of RFC) AND are willing to sign
the review, you *will* have to pay for this type of review, and it is not
cheap (although the best are not the most expensive).  In any case it is
good professional form to have neutral 3rd parties review them, our RG
members will probably develop biases while working on or discussing a
technology/RFC.

- Alex

--

Alex Alten
Alten@ATTBI.com

_______________________________________________
Cfrg mailing list
Cfrg@ietf.org
https://www1.ietf.org/mailman/listinfo/cfrg