Re: [IPsec] I-D on Using the ECC Brainpool Curves for IKEv2 Key Exchange

Johannes Merkle <johannes.merkle@secunet.com> Tue, 08 January 2013 10:22 UTC

Return-Path: <Johannes.Merkle@secunet.com>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B90CD21F84D9 for <ipsec@ietfa.amsl.com>; Tue, 8 Jan 2013 02:22:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level:
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vMlXJBWqP8dF for <ipsec@ietfa.amsl.com>; Tue, 8 Jan 2013 02:22:04 -0800 (PST)
Received: from a.mx.secunet.com (a.mx.secunet.com [195.81.216.161]) by ietfa.amsl.com (Postfix) with ESMTP id 8AF3A21F84D0 for <ipsec@ietf.org>; Tue, 8 Jan 2013 02:22:02 -0800 (PST)
Received: from localhost (alg1 [127.0.0.1]) by a.mx.secunet.com (Postfix) with ESMTP id A31FD1A0079; Tue, 8 Jan 2013 11:22:00 +0100 (CET)
X-Virus-Scanned: by secunet
Received: from mail-srv1.secumail.de (unknown [10.53.40.200]) by a.mx.secunet.com (Postfix) with ESMTP id 17E701A0076; Tue, 8 Jan 2013 11:21:58 +0100 (CET)
Received: from [10.208.1.73] ([10.208.1.73]) by mail-srv1.secumail.de with Microsoft SMTPSVC(6.0.3790.4675); Tue, 8 Jan 2013 11:21:57 +0100
Message-ID: <50EBF345.5020106@secunet.com>
Date: Tue, 08 Jan 2013 11:21:57 +0100
From: Johannes Merkle <johannes.merkle@secunet.com>
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:17.0) Gecko/17.0 Thunderbird/17.0
MIME-Version: 1.0
To: Andrey Jivsov <openpgp@brainhub.org>
References: <50E52E14.5080603@brainhub.org> <50E6C698.10809@secunet.com> <50E73A4F.2020403@brainhub.org> <50EAEF28.2040502@bbn.com> <50EB1474.1030702@brainhub.org>
In-Reply-To: <50EB1474.1030702@brainhub.org>
X-Enigmail-Version: 1.4.6
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-OriginalArrivalTime: 08 Jan 2013 10:21:57.0796 (UTC) FILETIME=[FD340640:01CDED89]
Cc: ipsec <ipsec@ietf.org>, Stephen Kent <kent@bbn.com>
Subject: Re: [IPsec] I-D on Using the ECC Brainpool Curves for IKEv2 Key Exchange
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Jan 2013 10:22:04 -0000

Andrey,

>
> For any new format / protocol / feature, RFC 6090 + http://tools.ietf.org/html/draft-jivsov-ecc-compact should be a more
> natural path.

Well, RFC 6090 is not always a good reference, at least it is very unfortunate that the signature scheme KT-I is not
fully compatible with ECDSA (Errata 2777).

> I agree that the statement was unclear. I was saying that because the certificates contain only one public key, the
> space saving is only size-of-the-curve+1 byte per certificate. Nonetheless, given that certificates need to be
> pre-processed and validated, and these results are often cached, the overhead of calculation of the 'y' is probably not
> material.

For X.509 certificates, the ANSI format is already well established, so the alternative method is hardly relevant there.
As you said, it is more a suggestion to consider for new specifications.


-- 
Johannes