Re: [Ipsec] Comments about draft-solinas-ui-suites-00

FYI, we're updating draft-kelly-ipsec-ciph-sha2 to include sha-{384,512} 
  per Steve Bellovin's review comments. Hopefully, that will be 
available later this week.

Pasi.Eronen@nokia.com wrote:
> A couple of minor comments about this draft:
> 
> 1) The document needs a reference to draft-kelly-ipsec-ciph-sha2,
> which specifies how to use SHA-256 with IPsec.
> 
> 2) Currently draft-kelly-ipsec-ciph-sha2 specifies only SHA-256 
> based integrity/PRF algorithms, but not SHA-384 or SHA-512, so 
> "Suite-B-GCM-256" and "Suite-B-GMAC-256" are not actually
> implementable using currently existing documents.
> 
> 3) Given that SHA-384 is basically SHA-512 truncated to 384 bits 
> (and with different IV), do we really need e.g. a SHA-384 based 
> PRF for IKEv2? Wouldn't it be simpler just to use SHA-512?
> (There are applications where using SHA-384 may make sense, but 
> I'm not sure IKEv2 PRF is one of them...)
> 
> Best regards,
> Pasi
> 
> _______________________________________________
> Ipsec mailing list
> Ipsec@ietf.org
> https://www1.ietf.org/mailman/listinfo/ipsec
> 

_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec