Re: [IPsec] IKEv2 Diffie-Hellman Elliptic curve mess (RFC4753, RFC5114, RFC4869, and draft-solinas-rfc4753bis-01)

"Jerome A. Solinas" <jasolin@orion.ncsc.mil> Thu, 18 February 2010 14:57 UTC

Return-Path: <jasolin@orion.ncsc.mil>
X-Original-To: ipsec@core3.amsl.com
Delivered-To: ipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 048783A72CD for <ipsec@core3.amsl.com>; Thu, 18 Feb 2010 06:57:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8idaFxZBMLHL for <ipsec@core3.amsl.com>; Thu, 18 Feb 2010 06:57:33 -0800 (PST)
Received: from msux-gh1-uea01.nsa.gov (msux-gh1-uea01.nsa.gov [63.239.67.1]) by core3.amsl.com (Postfix) with ESMTP id 2D4C33A711D for <ipsec@ietf.org>; Thu, 18 Feb 2010 06:57:32 -0800 (PST)
Received: from tarius.tycho.ncsc.mil (localhost [127.0.0.1]) by msux-gh1-uea01.nsa.gov (8.12.10/8.12.10) with ESMTP id o1IEx2J2013080 for <ipsec@ietf.org>; Thu, 18 Feb 2010 14:59:02 GMT
Received: from [144.51.26.44] (moss-warsteiner [144.51.26.44]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id o1IExESq022847 for <ipsec@ietf.org>; Thu, 18 Feb 2010 09:59:14 -0500
Message-ID: <4B7D55C2.3010507@orion.ncsc.mil>
Date: Thu, 18 Feb 2010 09:59:14 -0500
From: "Jerome A. Solinas" <jasolin@orion.ncsc.mil>
User-Agent: Thunderbird 1.5.0.12 (X11/20090624)
MIME-Version: 1.0
To: ipsec@ietf.org
References: <19243.32427.247190.77844@fireball.kivinen.iki.fi> <p06240800c756c4a8ed30@[10.20.30.249]> <4B59F2F1.9030107@orion.ncsc.mil> <19293.25053.902474.678053@fireball.kivinen.iki.fi>
In-Reply-To: <19293.25053.902474.678053@fireball.kivinen.iki.fi>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [IPsec] IKEv2 Diffie-Hellman Elliptic curve mess (RFC4753, RFC5114, RFC4869, and draft-solinas-rfc4753bis-01)
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Feb 2010 14:57:34 -0000

Tero Kivinen wrote:
> Jerome A. Solinas writes:
>   
>> We would recommend keeping the same numbers (19, 20, 21) since it 
>> appears that all existing implementations have made the correction.
>>     
>
> Not true.
>   

So at least a couple of vendors are still doing the x-and-y 
implementation. Nevertheless, the IANA numbers 19, 20, and 21 have 
referred for years to the x-only implementation as decribed in the RFC 
4753 Errata. It appears that those who have been following the standard 
correctly do not want their IANA numbers changed, and that is 
reasonable. So we would like to leave RFC 4753-bis the way it is.

-- j