Re: [DNSOP] New Version Notification for draft-schmidt-brainpool-dnssec-00.txt

Schmidt, Jörn-Marc <Joern-Marc.Schmidt@secunet.com> Mon, 24 March 2014 09:15 UTC

From: "Schmidt, Jörn-Marc" <Joern-Marc.Schmidt@secunet.com>
To: Olafur Gudmundsson <ogud@ogud.com>
Thread-Topic: [DNSOP] New Version Notification for draft-schmidt-brainpool-dnssec-00.txt
Thread-Index: AQHPRNdRaow9KWgLMkSY4jnZinBlKprrJVqQgAB5NQCABDSTIA==
Date: Mon, 24 Mar 2014 09:15:10 +0000
Message-ID: <38634A9C401D714A92BB13BBA9CCD34F0559AA@mail-essen-01.secunet.de>
References: <20140321072940.3738.9013.idtracker@ietfa.amsl.com> <38634A9C401D714A92BB13BBA9CCD34F05516F@mail-essen-01.secunet.de> <8D85D970-10CE-4156-89C2-229836A910A3@ogud.com>
In-Reply-To: <8D85D970-10CE-4156-89C2-229836A910A3@ogud.com>
Accept-Language: de-DE, en-US
Content-Language: de-DE
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/dnsop/k9Qbt5Aq1VrQHPiohG3U8ctnPhI
Cc: "dnsop@ietf.org" <dnsop@ietf.org>
Subject: Re: [DNSOP] New Version Notification for draft-schmidt-brainpool-dnssec-00.txt
Precedence: list

Olafur,

the advantage of Brainpool curves is the fact that all  parameters are generated in a verifiably pseudo-random way. 
This topic has already been an issue in other WGs, see e.g. https://www.ietf.org/mail-archive/web/tls/current/msg10054.html 

>Why are you defining 3 curves ? 

Again, I'm looking at it from a security perspective: 256/384 bit ECC is fine for the next couple of years (NSA requires using 384 bit for "top secret" data today, see http://www.nsa.gov/ia/programs/suiteb_cryptography/index.shtml). In my opinion, having an additional curve with a security margin ready for use is worth sacrificing one out of 230 code points.

>Defining more algorithms decreases interoperability as code bases need to pick up all algorithms. 
>While you talk about German regulations wanting some curve, that does not mean that they can mandate any domain to use it. Thus the issue of what german regulations use for health care cards is orthogonal to what is used by DNSSEC. 
>If all you want is to publish German health Insurance Card keys in DNS then ask for a "Gesundheit" record to publish the keys, and then the consumption of these records only affects the those that need to process the keys. 

True, the German regulations cannot mandate anything to this WG and it's also true that they could have a special "Gesundheit" standard/extension that has to be used within the German infrastructure.  
However, I don't think it would help the interoperability issue to add a parallel definition for signatures. Further, I believe that having a comprehensible set of curve parameters might be a welcome option for others. 

Best, Jörn

[DNSOP] WG: New Version Notification for draft-sc… Schmidt
Re: [DNSOP] New Version Notification for draft-sc… Olafur Gudmundsson
Re: [DNSOP] New Version Notification for draft-sc… Schmidt