[jose] 192 bit AES keys

Mike Jones <Michael.Jones@microsoft.com> Thu, 18 July 2013 21:18 UTC

Received-SPF: pass (mail192-db8: domain of microsoft.com designates 131.107.125.8 as permitted sender) client-ip=131.107.125.8; envelope-from=Michael.Jones@microsoft.com; helo=TK5EX14HUBC104.redmond.corp.microsoft.com ; icrosoft.com ;
From: Mike Jones <Michael.Jones@microsoft.com>
To: "jose@ietf.org" <jose@ietf.org>
Thread-Topic: 192 bit AES keys
Thread-Index: Ac6D/C12cBeywWJlQkC7ZUVSucIBIQ==
Date: Thu, 18 Jul 2013 21:17:16 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B6EC698@TK5EX14MBXC284.redmond.corp.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739436B6EC698TK5EX14MBXC284r_"
MIME-Version: 1.0
Subject: [jose] 192 bit AES keys
Precedence: list

Richard had previously requested that we register algorithm identifiers for AES using 192 bit keys.  As he previously pointed out, "It seems like if we're going to support AES, then we should support AES.  Every AES library I know of supports all three key lengths, so it's not like there's extra cost besides the registry entry."  (I'll note that we already have algorithm identifiers for the "mid-size" HMAC and signature functions "HS384", "RS384", and "ES384".)

I heard no objections at the time.  I'm therefore thinking that we should register algorithm identifiers for these key sizes as well.  Specifically, we would add:
"A192KW", "ECDH-ES+A192KW", "A192GCMKW", "PBES2-HS256+A192KW", "A192CBC-HS384", and "A192GCM".  Support for these algorithms would be optional.

What do people think?

                                                            -- Mike

[jose] 192 bit AES keys Mike Jones
Re: [jose] 192 bit AES keys Matt Miller (mamille2)
Re: [jose] 192 bit AES keys John Bradley
Re: [jose] 192 bit AES keys Richard Barnes
Re: [jose] 192 bit AES keys Jim Schaad
Re: [jose] 192 bit AES keys Richard Barnes
Re: [jose] 192 bit AES keys John Bradley
Re: [jose] 192 bit AES keys Richard Barnes
Re: [jose] 192 bit AES keys Jim Schaad
Re: [jose] 192 bit AES keys Richard Barnes
Re: [jose] 192 bit AES keys Mike Jones
Re: [jose] 192 bit AES keys Richard Barnes