Re: [Dtls-iot] Latest dice profile draft

[Spencer Dawkins at IETF <[e-mail]>]

Hi, Thomas,

On Mon, Oct 19, 2015 at 4:53 AM, FOSSATI, Thomas (Thomas) <
[e-mail]> wrote:

> Hi everybody,
>
> We think we've addressed all IESG comments:
>
>
> https://datatracker.ietf.org/doc/draft-ietf-dice-profile/ballot/#ben-campbell
>
> https://datatracker.ietf.org/doc/draft-ietf-dice-profile/ballot/#spencer-dawkins
>
> https://datatracker.ietf.org/doc/draft-ietf-dice-profile/ballot/#barry-leiba
>
> (thank you Ben, Spencer and Barry),  and submitted a new version of the
> profile draft.
>
> Please, check the diff from –16 at
> https://www.ietf.org/rfcdiff?url2=draft-ietf-dice-profile-17
>

I'm happy, but just to make sure you didn't break anything making me happy
...

I asked about providing a reference for "constant time" in this text:

   For use with this profile the PSK identities
   SHOULD NOT assume a structured format (such as domain names,
   Distinguished Names, or IP addresses) and a constant time bit-by-bit
   comparison operation MUST be used by the server for any operation
   related to the PSK identity.


The -17 corresponding text substituted "byte-by-byte" for "bit-by-bit",
which I don't have an opinion about, but "constant time" simply
disappeared.

Was that intentional?

Thanks,

Spencer


> This is the version that will be sent to the RFC editor.
>
> Cheers and thanks very much to *all* of you for the great work,
>
> Thomas & Hannes.
>