Re: [Cfrg] RGLC on draft-irtf-cfrg-chacha20-poly1305-01.txt

On Mon, October 6, 2014 1:13 am, Yoav Nir wrote:
> Hi.
>
> As co-author of the draft, it's no surprise that I think it's ready. So
> I'll just point out that:
>  - The algorithms described have been implemented multiple times, both by
> the authors and by others
>  - At least two implementations were done by following the draft (and the
> test vectors checked out)
>  - At least one browser (Google Chrome) has these algorithms running in
> production and used with the Google servers.
>
> So I guess we've got the "running code" part down.

  Very nice! It's good to see people with running code that implements
the proposals for which they are attempting to achieve rough consensus.
I guess we could call it "old school" :-)

  One suggestion is that since this takes a cipher and a separate MAC
function to create a composite, you should define this combined AEAD
mode to fit into the RFC 5116 AEAD abstraction. This will require a subtle
modification to section 2.8-- around formation of the AEAD, and
specification of maximal limits-- and the requisite IANA Considerations
in section 5.

  I understand that this is the CFRG and not any particular IETF WG
that produces standards for some protocol but given that you say your
running code includes some secure browser-to-server communication
it might be nice to include such a conversation (using, for example,
ssldump) as a separate test vector.

  regards,

  Dan.

> Yoav
>
> On Thu, Oct 2, 2014 at 3:45 PM, Alexey Melnikov
> <alexey.melnikov@isode.com>
> wrote:
>
>> The authors of "ChaCha20 and Poly1305 for IETF protocols",
>> draft-irtf-cfrg-chacha20-poly1305-01.txt believe the draft is ready for
>> a
>> RGLC.
>>
>> This starts a two week research group last call, to end on 17 Oct 2014.
>>
>> The draft is available at http://datatracker.ietf.org/
>> doc/draft-irtf-cfrg-chacha20-poly1305/
>>
>> Please do comment on the list, indicating whether you believe this draft
>> is ready for publication. Please send your comments, indication of
>> support
>> for the publication or objections to the publication to the mailing list
>> or
>> directly to the RG chairs (cfrg-chairs@tools.ietf.org).
>>
>> Alexey,
>> As a co-chair.
>>
>> _______________________________________________
>> Cfrg mailing list
>> Cfrg@irtf.org
>> http://www.irtf.org/mailman/listinfo/cfrg
>>
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> http://www.irtf.org/mailman/listinfo/cfrg
>