[IPsec] ChaCha20 + Poly1305 for IKE and IPsec

Yoav Nir <ynir.ietf@gmail.com> Tue, 24 February 2015 11:21 UTC

Return-Path: <ynir.ietf@gmail.com>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2A6E1A07BD for <ipsec@ietfa.amsl.com>; Tue, 24 Feb 2015 03:21:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qySosbUzufTp for <ipsec@ietfa.amsl.com>; Tue, 24 Feb 2015 03:21:34 -0800 (PST)
Received: from mail-wi0-x236.google.com (mail-wi0-x236.google.com [IPv6:2a00:1450:400c:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEC101A079D for <ipsec@ietf.org>; Tue, 24 Feb 2015 03:21:33 -0800 (PST)
Received: by mail-wi0-f182.google.com with SMTP id l15so24238169wiw.3 for <ipsec@ietf.org>; Tue, 24 Feb 2015 03:21:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:subject:message-id:date:to:mime-version; bh=i06Mkq2edSnIA0O4eW3z+WT0+ybsntI085htqpcEOZk=; b=BqnA4PTr7j340OtYlL0Jvw7a/y9esjaI3KM3YjVUkIlBLonCv2A+JQg+mroW+ZSAd2 yfGQli96xWT4qDO77k5Z//uoJij5+P9nhhFCebulsJu/51Ae7aMLCP9Wejcfw3MlPNAJ 8I82QoXNYCLU1mBaCBZT9ILcedo+KxxwT+M2TJqtULNGn0hQOkyBJ0LUsndG/yGarLO7 TGuiK0DeWZZSKGXLaMxPmglKwMxpVy+rkDia28IEHJwbJQAunPGtlDBQIPHHC6jnYUnP QFUeFQtfYZA+ame4KNpO8172sbOOm7NYi9yEWk9bLzkNDs2qG6eNbM8uodeAd2m6ct3g AgJA==
X-Received: by 10.180.72.98 with SMTP id c2mr29719677wiv.87.1424776892669; Tue, 24 Feb 2015 03:21:32 -0800 (PST)
Received: from [172.24.251.208] (dyn32-131.checkpoint.com. [194.29.32.131]) by mx.google.com with ESMTPSA id hi6sm59771851wjc.34.2015.02.24.03.21.31 for <ipsec@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 24 Feb 2015 03:21:31 -0800 (PST)
From: Yoav Nir <ynir.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_0E3E7D4C-CDDE-4381-853B-BF204DCF2C95"
Message-Id: <798DAF77-94CB-4AF4-AECC-5039808F147F@gmail.com>
Date: Tue, 24 Feb 2015 13:21:29 +0200
To: IPsecME WG <ipsec@ietf.org>
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\))
X-Mailer: Apple Mail (2.2070.6)
Archived-At: <http://mailarchive.ietf.org/arch/msg/ipsec/lyhoRGLmYs05JLFwctj0TknIBn8>
Subject: [IPsec] ChaCha20 + Poly1305 for IKE and IPsec
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec/>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Feb 2015 11:21:35 -0000

Hi

A little over a year ago I proposed to define the ChaCha20 cipher and Poly1305 authenticators for IKE and IPsec both as standalone documents and as an AEAD. At the same time Adam Langley proposed the same to the TLS working group.

We were told two things: First, the groups preferred only the AEAD, and second, we were requested to get CFRG’s stamp of approval.

This resulted in a CFRG document defining the algorithms, and offering implementation advice and test vectors. This document has just been approved and has been sent to the RFC editor [1].

In the meantime, I have updated my draft to only define the AEAD. Since we not have CFRG’s “stamp of approval” if not yet an RFC number, I would like to renew my request to have the ChaCha20+Poly1305 for IKE and IPsec document [2] accepted by this working group with the intent of having it published as a standard-track document.

Thanks

Yoav

[1] https://datatracker.ietf.org/doc/draft-irtf-cfrg-chacha20-poly1305/history/ <https://datatracker.ietf.org/doc/draft-irtf-cfrg-chacha20-poly1305/history/>
[2] https://tools.ietf.org/html/draft-nir-ipsecme-chacha20-poly1305-05 <https://tools.ietf.org/html/draft-nir-ipsecme-chacha20-poly1305-05>