[Hipsec] Proposed new list for DIFFIE_HELLMAN

Robert Moskowitz <rgm@htt-consult.com> Wed, 06 January 2010 15:16 UTC

Return-Path: <rgm@htt-consult.com>
X-Original-To: hipsec@core3.amsl.com
Delivered-To: hipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 548413A68C7 for <hipsec@core3.amsl.com>; Wed, 6 Jan 2010 07:16:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.001, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dXa5sBc2+VZB for <hipsec@core3.amsl.com>; Wed, 6 Jan 2010 07:16:20 -0800 (PST)
Received: from klovia.htt-consult.com (klovia.htt-consult.com [208.83.67.149]) by core3.amsl.com (Postfix) with ESMTP id 30E873A67D9 for <hipsec@ietf.org>; Wed, 6 Jan 2010 07:16:20 -0800 (PST)
Received: from localhost (unknown [127.0.0.1]) by klovia.htt-consult.com (Postfix) with ESMTP id AC3D968B8D for <hipsec@ietf.org>; Wed, 6 Jan 2010 16:13:54 +0000 (UTC)
X-Virus-Scanned: amavisd-new at localhost
Received: from klovia.htt-consult.com ([127.0.0.1]) by localhost (klovia.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NPFVden7FK1T for <hipsec@ietf.org>; Wed, 6 Jan 2010 11:13:46 -0500 (EST)
Received: from nc2400.htt-consult.com (unknown [IPv6:2607:f4b8:3:1:21b:77ff:fe43:978]) (Authenticated sender: rgm@htt-consult.com) by klovia.htt-consult.com (Postfix) with ESMTPSA id F127D68B21 for <hipsec@ietf.org>; Wed, 6 Jan 2010 11:13:45 -0500 (EST)
Message-ID: <4B44A92F.9080305@htt-consult.com>
Date: Wed, 06 Jan 2010 10:15:59 -0500
From: Robert Moskowitz <rgm@htt-consult.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.5) Gecko/20091209 Fedora/3.0-4.fc12 Thunderbird/3.0
MIME-Version: 1.0
To: HIP <hipsec@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: [Hipsec] Proposed new list for DIFFIE_HELLMAN
X-BeenThere: hipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "This is the official IETF Mailing List for the HIP Working Group." <hipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hipsec>
List-Post: <mailto:hipsec@ietf.org>
List-Help: <mailto:hipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Jan 2010 15:16:21 -0000

Proposed new list for DIFFIE_HELLMAN:

       Group Value  Source
       Reserved 0
       384-bit group 1
       OAKLEY well-known group 1 2      Appendex E
       1536-bit MODP group 3      RFC3526
       3072-bit MODP group 4      RFC3526
       6144-bit MODP group 5      RFC3526
       8192-bit MODP group                                     6      
RFC3526
       1024-bit MODP Group with 160-bit Prime Order Subgroup   7      
RFC5114
       2048-bit MODP Group with 224-bit Prime Order Subgroup   8      
RFC5114
       2048-bit MODP Group with 256-bit Prime Order Subgroup   9      
RFC5114
       192-bit Random ECP Group                                10     
RFC5114
       224-bit Random ECP Group                                11     
RFC5114
       256-bit Random ECP Group                                12     
RFC5114
       384-bit Random ECP Group                                13     
RFC5114
       521-bit Random ECP Group                                14     
RFC5114


Currently Groups 1 and 3 are MUST implement.  How does Group 1 compare 
to 13?  Can we drop 1 and Appendix D and just make 13 and 3 MUST?  
Should 7 replace 3 for the MUST?

Note that 12-14 were first defined in 4753, which is referenced in 5114, 
so I just want to keep all the ECP's together...