[CFRG] IETF WG Interest in AES-GCM-SST

[Jonathan Lennox <[e-mail]>]

When AES-GCM-SST was presented at CFRG there were questions about whether
there were working groups in the IETF that would use this work, so I
thought I would provide one answer.

John Mattson also presented his work on AES-GCM-SST in AVTCore at the
Brisbane meeting.

There was substantial interest in the work, and if CFRG were to produce
work meeting this profile AVTCore would be very likely to adopt it to use
in SRTP.

Concretely, we are interested in an AEAD with safe short tags and
performance comparable to that of GCM.  We will of course leave it to CFRG
as to how best to accomplish this.

No one has used GCM-SST yet for SRTP as far as I am aware, so there is no
concern for any already-existing implementations in this space.

One member also asked a question about to what extent existing hardware
support for GCM could be re-used for short tags; this may also be a design
question for CFRG to consider.

Thanks!
Jonathan Lennox
AVTCore co-chair