IETF Logo Mail Archive

Re: [Curdle] comments on draft-ietf-curdle-rsa-sha2-03.txt

Peter Gutmann <pgut001@cs.auckland.ac.nz> Mon, 27 March 2017 00:41 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: curdle@ietfa.amsl.com
Delivered-To: curdle@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5D83127337 for <curdle@ietfa.amsl.com>; Sun, 26 Mar 2017 17:41:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=auckland.ac.nz
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cbNjKuRObf19 for <curdle@ietfa.amsl.com>; Sun, 26 Mar 2017 17:41:31 -0700 (PDT)
Received: from mx4.auckland.ac.nz (mx4.auckland.ac.nz [130.216.125.248]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 93564126C89 for <curdle@ietf.org>; Sun, 26 Mar 2017 17:41:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=auckland.ac.nz; i=@auckland.ac.nz; q=dns/txt; s=mail; t=1490575290; x=1522111290; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=Pio8/qVcVASuTiybAn4v3IfjU5y63ob2qRbFbugGyqk=; b=OBQCErusZIqgsZ1UTRILXY+5gs1obMr3z9oRYzKJiATxfCjksEh9WzwA cX3m6NssfQWONnI4LbOQyh/IDtYH6VhfVHAHAiV/Wv0VKVyr30pv9Ujf/ FGfEwlusU6Wr4IOJPrw4ri+wvNiUmQe1WhmIhrds8yU3JQ25k/DMwqSd6 5ienrX8eTS01xA4ntflAOkQtHu4HoMhlOcl0VG7e7E7Q4/H4xh0pS+wZu HOtQepIk2ig7laZk8CdoCmR1M62dAVYhkSZYGrSfHSJTYFYf42nJh0T2t 7zAqUBKqmLGZ2Qy8cV5RsmnBW+kTYRehn7BmiXB904UFe5QflSFfRtA3x g==;
X-IronPort-AV: E=Sophos;i="5.36,229,1486378800"; d="scan'208";a="145816975"
X-Ironport-HAT: MAIL-SERVERS - $RELAYED
X-Ironport-Source: 10.6.3.9 - Outgoing - Outgoing
Received: from uxcn13-tdc-e.uoa.auckland.ac.nz ([10.6.3.9]) by mx4-int.auckland.ac.nz with ESMTP/TLS/AES256-SHA; 27 Mar 2017 13:41:29 +1300
Received: from uxcn13-ogg-d.UoA.auckland.ac.nz (10.6.2.5) by uxcn13-tdc-e.UoA.auckland.ac.nz (10.6.3.9) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Mon, 27 Mar 2017 13:41:28 +1300
Received: from uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.25]) by uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.25]) with mapi id 15.00.1263.000; Mon, 27 Mar 2017 13:41:28 +1300
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: "denis bider (Bitvise)" <ietf-ssh3@denisbider.com>, Daniel Migault <daniel.migault@ericsson.com>, curdle <curdle@ietf.org>
Thread-Topic: [Curdle] comments on draft-ietf-curdle-rsa-sha2-03.txt
Thread-Index: AQHSpcEzJRcP16zDJU+R0iPNB50hdaGmjxQAgAFKygQ=
Date: Mon, 27 Mar 2017 00:41:27 +0000
Message-ID: <1490575273244.74198@cs.auckland.ac.nz>
References: <CADZyTkm43WWxb_DiZ1K9gRwzqmTCJ=Q-no53t9D__mDPERCyqw@mail.gmail.com>, <374ADF9BE1924B7889C64CEC7D51FEF8@Khan>
In-Reply-To: <374ADF9BE1924B7889C64CEC7D51FEF8@Khan>
Accept-Language: en-NZ, en-GB, en-US
Content-Language: en-NZ
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [130.216.158.4]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/LxfdDLwx6hVEftUaogVYC6g_Sjg>
Subject: Re: [Curdle] comments on draft-ietf-curdle-rsa-sha2-03.txt
X-BeenThere: curdle@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "List for discussion of potential new security area wg." <curdle.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/curdle>, <mailto:curdle-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/curdle/>
List-Post: <mailto:curdle@ietf.org>
List-Help: <mailto:curdle-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/curdle>, <mailto:curdle-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Mar 2017 00:41:33 -0000

denis bider (Bitvise) <ietf-ssh3@denisbider.com> writes:

>An early version of the spec called for PSS. After strong objections - most
>prominently Peter Gutmann's; it is possible there were others - I changed
>back to PKCS1v1.5. The main objections were:
>
>- PSS is not as universally available;
>- adding a new type of padding would impose costs on highly resource-
>constrained implementations who would now have to support both.

A third point is that there's no security advantage to using PSS.  It has a
more rigorous design than PKCS #1 1.5, but there's no indcation that 1.5 is
less secure.  So it's something that offers no obvious benefit but requires
implementing and supporting yet another new crypto mechanism.

I don't mind if it's there as a MAY for people who really feel the need to
make that particular fashion statement, as long as 1.5 is still there as a
MUST.

Peter.

v2.23.0 | Report a Bug | By Email