Re: Genart last call review of draft-ietf-curdle-ssh-ed25519-ed448-07

Viktor Dukhovni <ietf-dane@dukhovni.org> Tue, 06 August 2019 22:58 UTC

Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3811F12008B for <ietf@ietfa.amsl.com>; Tue, 6 Aug 2019 15:58:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JNsXtnwfUHqr for <ietf@ietfa.amsl.com>; Tue, 6 Aug 2019 15:58:05 -0700 (PDT)
Received: from straasha.imrryr.org (straasha.imrryr.org [100.2.39.101]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AD1A120099 for <ietf@ietf.org>; Tue, 6 Aug 2019 15:58:05 -0700 (PDT)
Received: by straasha.imrryr.org (Postfix, from userid 1001) id 2E48D1A3C6B; Tue, 6 Aug 2019 18:58:04 -0400 (EDT)
Date: Tue, 06 Aug 2019 18:58:04 -0400
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
To: ietf@ietf.org
Subject: Re: Genart last call review of draft-ietf-curdle-ssh-ed25519-ed448-07
Message-ID: <20190806225804.GP24255@straasha.imrryr.org>
Reply-To: ietf@ietf.org
References: <154683304030.17040.15801682371972802372@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <154683304030.17040.15801682371972802372@ietfa.amsl.com>
User-Agent: Mutt/1.11.4 (2019-03-13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/r49CI9tTwB9PtSfbXFXCQZfW6Ig>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Aug 2019 22:58:07 -0000

On Sun, Jan 06, 2019 at 07:50:40PM -0800, Linda Dunbar wrote:

> This document proposes two names for public key algorithms (which are specified
> by other RFCs): ssh-ed25519 & ssh-ed448
> 
> Major issues:
> 
> There is no "Standard" being specified by this document. The document has a few
> sentences to explain "public key algorithm for use with SSH in accordance with
> RFC4253, RFC4251" and give a name. and One sentence to say "Signatures are
> generated according to the procedure in RFC8032".

I've been doing some work on a fork of OpenSSH 8.0p1 lately, enhancing
GSS Key Exchage support, adding modern GSS KEX algorithms, ... and from
my perspective there is indeed a relevant standards action here, namely
this defines a "standard meaning" of those names in the context of SSH
to be the use of the corresponding hostkey algorithms (where the
mechanics of computing the associated signature are already defined
elsewhere).

FWIW, IMHO the new gss key exchange algorithms (gss-group14-sha256-*,
gss-curve25519-sha256-*, ...) in draft-ietf-curdle-gss-keyex-sha2-10
are similary worthy of that draft's "Standards Track" designation.
I have assumed that draft will also become an RFC in the not too
distant future, and those code points are already implemented in
my fork.

-- 
	Viktor.