Re: [Curdle] [Technical Errata Reported] RFC9142 (7799)

On Feb 7, 2024, at 11:20, mbaushke ietf <mbaushke.ietf@gmail.com> wrote:
> 
> The suggested revision is correct.
> 
> The nistp521 curve provides 256 bits of estimate security strength.
> 
> Please approve the update.
> 
>        -- M. Baushke (author of RFC9142)

Done. Thanks all!

Paul

> 
> 
>> On Feb 7, 2024, at 7:13 AM, RFC Errata System <rfc-editor@rfc-editor.org> wrote:
>> 
>> The following errata report has been submitted for RFC9142,
>> "Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH)".
>> 
>> --------------------------------------
>> You may review the report below and at:
>> https://www.rfc-editor.org/errata/eid7799
>> 
>> --------------------------------------
>> Type: Technical
>> Reported by: Ben S <ben.s3@ncsc.gov.uk>
>> 
>> Section: 1.2.1
>> 
>> Original Text
>> -------------
>> +============+=============================+
>> | Curve Name | Estimated Security Strength |
>> +============+=============================+
>> | nistp256   | 128 bits                    |
>> +------------+-----------------------------+
>> | nistp384   | 192 bits                    |
>> +------------+-----------------------------+
>> | nistp521   | 512 bits                    |
>> +------------+-----------------------------+
>> | curve25519 | 128 bits                    |
>> +------------+-----------------------------+
>> | curve448   | 224 bits                    |
>> +------------+-----------------------------+
>> 
>> Corrected Text
>> --------------
>> +============+=============================+
>> | Curve Name | Estimated Security Strength |
>> +============+=============================+
>> | nistp256   | 128 bits                    |
>> +------------+-----------------------------+
>> | nistp384   | 192 bits                    |
>> +------------+-----------------------------+
>> | nistp521   | 256 bits                    |
>> +------------+-----------------------------+
>> | curve25519 | 128 bits                    |
>> +------------+-----------------------------+
>> | curve448   | 224 bits                    |
>> +------------+-----------------------------+
>> 
>> Notes
>> -----
>> P-521 has approximately 256 bits of security (rather than 512), as per Table 1 of Section 6.1.1 of FIPS 186-5, and Section 9 Paragraph 5 of RFC 5656.
>> 
>> Instructions:
>> -------------
>> This erratum is currently posted as "Reported". (If it is spam, it
>> will be removed shortly by the RFC Production Center.) Please
>> use "Reply All" to discuss whether it should be verified or
>> rejected. When a decision is reached, the verifying party  
>> will log in to change the status and edit the report, if necessary.
>> 
>> --------------------------------------
>> RFC9142 (draft-ietf-curdle-ssh-kex-sha2-20)
>> --------------------------------------
>> Title               : Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH)
>> Publication Date    : January 2022
>> Author(s)           : M. Baushke
>> Category            : PROPOSED STANDARD
>> Source              : CURves, Deprecating and a Little more Encryption
>> Area                : Security
>> Stream              : IETF
>> Verifying Party     : IESG
>> 
>> _______________________________________________
>> Curdle mailing list
>> Curdle@ietf.org
>> https://www.ietf.org/mailman/listinfo/curdle
> 