Re: New 12288 and 16384 bit groups

Alan Barrett <apb@cequrux.com> Mon, 17 March 2003 11:25 UTC

Received: from lists.tislabs.com (portal.gw.tislabs.com [192.94.214.101]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA10558 for <ipsec-archive@lists.ietf.org>; Mon, 17 Mar 2003 06:25:14 -0500 (EST)
Received: by lists.tislabs.com (8.9.1/8.9.1) id EAA09047 Mon, 17 Mar 2003 04:05:42 -0500 (EST)
Date: Mon, 17 Mar 2003 11:08:40 +0200
From: Alan Barrett <apb@cequrux.com>
To: ipsec@lists.tislabs.com
Subject: Re: New 12288 and 16384 bit groups
Message-ID: <20030317090840.GF24659@apb.cequrux.com>
References: <5.2.0.9.0.20030313161341.02e2bd30@postoffice.pacbell.net> <15987.33466.200314.637791@tero.kivinen.iki.fi>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <15987.33466.200314.637791@tero.kivinen.iki.fi>
Sender: owner-ipsec@lists.tislabs.com
Precedence: bulk

On Sat, 15 Mar 2003, Tero Kivinen wrote:
> All the groups in the draft-ietf-ipsec-ike-modp-groups-05 are proven
> to be safe primes (i.e both the p and the (p - 1) / 2 are proven to be
> prime). The ECPP/primo certificates can be found at
> http://ftp.ssh.com/pub/ietf/ecpp-certificates/ (that url used to be in
> the draft, but was removed because url's are not stable enough to be
> used as references (that url is going to be stable :-)). 

Perhaps the IANA or the RFC Editor (or both) would be willing to keep
stable copies of supporting documentation that's too large (or otherwise
inconvenient) for inclusion in an RFC.

If so, then I'd suggest keeping the "ftp.ssh.com" URL in the draft, with a
note saying that it should be changed to an "iana.org" or "rfc-editor.org"
URL before publication as an RFC.

--apb (Alan Barrett)