Re: [hiprg] HIP DEX suggestion
Robert Moskowitz <rgm@htt-consult.com> Thu, 04 August 2011 14:28 UTC
Return-Path: <rgm@htt-consult.com>
X-Original-To: hiprg@ietfa.amsl.com
Delivered-To: hiprg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54D2E21F886C for <hiprg@ietfa.amsl.com>; Thu, 4 Aug 2011 07:28:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mev79a9KrE7x for <hiprg@ietfa.amsl.com>; Thu, 4 Aug 2011 07:28:28 -0700 (PDT)
Received: from klovia.htt-consult.com (klovia.htt-consult.com [208.83.67.149]) by ietfa.amsl.com (Postfix) with ESMTP id C902621F884E for <hiprg@irtf.org>; Thu, 4 Aug 2011 07:28:28 -0700 (PDT)
Received: from localhost (unknown [127.0.0.1]) by klovia.htt-consult.com (Postfix) with ESMTP id AFD8662ABB; Thu, 4 Aug 2011 14:28:16 +0000 (UTC)
X-Virus-Scanned: amavisd-new at localhost
Received: from klovia.htt-consult.com ([127.0.0.1]) by localhost (klovia.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a0xlxKInP3Z8; Thu, 4 Aug 2011 10:28:06 -0400 (EDT)
Received: from nc2400.htt-consult.com (nc2400.htt-consult.com [208.83.67.155]) (Authenticated sender: rgm@htt-consult.com) by klovia.htt-consult.com (Postfix) with ESMTPSA id 8FE0562A89; Thu, 4 Aug 2011 10:28:06 -0400 (EDT)
Message-ID: <4E3AAC76.8000203@htt-consult.com>
Date: Thu, 04 Aug 2011 10:28:06 -0400
From: Robert Moskowitz <rgm@htt-consult.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.18) Gecko/20110621 Fedora/3.1.11-1.fc14 Thunderbird/3.1.11
MIME-Version: 1.0
To: Ed Beroset <beroset@mindspring.com>
References: <25658028.1312464055269.JavaMail.root@mswamui-swiss.atl.sa.earthlink.net>
In-Reply-To: <25658028.1312464055269.JavaMail.root@mswamui-swiss.atl.sa.earthlink.net>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: "hiprg@irtf.org" <hiprg@irtf.org>
Subject: Re: [hiprg] HIP DEX suggestion
X-BeenThere: hiprg@irtf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Host Identity Protocol \(HIP\) Research Group" <hiprg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/hiprg>, <mailto:hiprg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/hiprg>
List-Post: <mailto:hiprg@irtf.org>
List-Help: <mailto:hiprg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/hiprg>, <mailto:hiprg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Aug 2011 14:28:29 -0000
On 08/04/2011 09:20 AM, Ed Beroset wrote: > Speaking of implementations, I have a suggestion about HIP DEX. Right now it specifies the use of AES-CBC but I would like to see if we could change that to either AES-CFB or AES-CTR. The reason is that for CBC, one must implement both the AES encrypt and decrypt functions. With CFB and CTR, one only need implement AES encrypt. This saves about 1.5k of code space on a typical small microprocessor for which HIP DEX is intended and has at least equivalent (and some say better) security properties. Very good point. Plus hardware that does AES-CCM should be able to do CTR 'easily'. But I have to look at what the counter would be. CBC was 'easy' in that there was a natural nonce.
- Re: [hiprg] HIP DEX suggestion Ed Beroset
- Re: [hiprg] HIP DEX suggestion Robert Moskowitz