Re: [IPsec] Ben Campbell's No Objection on draft-ietf-ipsecme-chacha20-poly1305-11: (with COMMENT)

Yoav Nir <ynir.ietf@gmail.com> Wed, 08 July 2015 05:48 UTC

Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\))
From: Yoav Nir <ynir.ietf@gmail.com>
In-Reply-To: <20150708025103.26310.85795.idtracker@ietfa.amsl.com>
Date: Wed, 08 Jul 2015 08:48:19 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <3EB0C363-2CA1-4D95-8988-49C4FF71C084@gmail.com>
References: <20150708025103.26310.85795.idtracker@ietfa.amsl.com>
To: Ben Campbell <ben@nostrum.com>
Archived-At: <http://mailarchive.ietf.org/arch/msg/ipsec/nYDk5YNL-Ojz_76Z4MteyC5sIDc>
Cc: ipsecme-chairs@ietf.org, draft-ietf-ipsecme-chacha20-poly1305@ietf.org, Paul Hoffman <paul.hoffman@vpnc.org>, ipsec@ietf.org, The IESG <iesg@ietf.org>, draft-ietf-ipsecme-chacha20-poly1305.ad@ietf.org, draft-ietf-ipsecme-chacha20-poly1305.shepherd@ietf.org
Subject: Re: [IPsec] Ben Campbell's No Objection on draft-ietf-ipsecme-chacha20-poly1305-11: (with COMMENT)
Precedence: list

Hi, Ben.

See below

> On Jul 8, 2015, at 5:51 AM, Ben Campbell <ben@nostrum.com> wrote:
> 
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
> 
> This is easier than usual to read for this sort of draft :-) 
> 
> -- Section 1, 1st paragraph:
> I concur with Stephen's comment. Furthermore, this entire paragraph
> pretty much reads like advertising copy. Can it be toned down a bit?

As I replied to Stephen, I think the text is factual. Perhaps a more toned-down version could be something like this:

   The Advanced Encryption Standard (AES - [FIPS-197]) has become the
   go-to algorithm for encryption.  It is not the most commonly used 
   algorithm in many areas, including IPsec VPNs.  On most modern 
   platforms AES is anywhere from 4x to 10x as fast as the previous 
   popular cipher, 3-key Data Encryption Standard (3DES - [SP800-67]). 
   3DES also has a 64-bit block, which means that the amount of data 
   that can be encrypted before rekeying is required is not great.  
   These reasons make AES not only the best choice, but the only choice.

> -- 8.1 (Normative References)
> 
> The reference to [RFC7539]  is a normative downref. I don't see it on the
> downref registry, nor was it mentioned in the last call notice. (For the
> record, I think it's a reasonable downref.)

Yes, it should have been pointed out. RFC 7539 was written specifically to serve as a reference for this and the TLS document (and any future documents anyone might want to write about SSH, S/Mime, etc.)

Yoav

Re: [IPsec] Ben Campbell's No Objection on draft-… Yoav Nir
[IPsec] Ben Campbell's No Objection on draft-ietf… Ben Campbell