Re: [Cfrg] RFC 7664 on Dragonfly Key Exchange

[Andy Lutomirski <[e-mail]>]

On Nov 12, 2015 10:33 PM, "Dan Harkins" <[e-mail]> wrote:
>
>
>
> On Thu, November 12, 2015 12:43 pm, Tony Arcieri wrote:
> > On Thu, Nov 12, 2015 at 4:51 AM, Dan Harkins <[e-mail]>
wrote:
> >
> >>   It is nothing of the sort. That comment refers to the -00
> >> version of the draft which was rushed to get out before an I-D
> >> cut-off date-- to see how rushed, note the "Acknowledgements"
> >> section of the draft is the xml2rfc boilerplate. In my haste
> >> I failed to include a check to validate received elements (note
> >> that EAP-pwd which uses the exchange and was published before
> >> the draft was written includes element validation so it was
> >> part of the exchange, just not included in the -00 version).
> >
> >
> > That section also claims that Dragonfly was proven under the random
oracle
> > model, then goes on to describe a version that wasn't... don't you think
> > that's misleading?
>
>   No, that section describes exactly what was proven secure
> under the random oracle model.
>
>   Give it a rest dude.

It's a security claim in a paper from a security group, and the claim was
not, by any stretch of the imagination, reviewed by the group.

--Andy