Re: [jose] Choice for WG: Use a KDF with AES CBC or use a longer key

John Bradley <ve7jtb@ve7jtb.com> Mon, 12 November 2012 00:27 UTC

Content-Type: text/plain; charset="windows-1252"
Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E11500331CA9@WSMSG3153V.srv.dir.telstra.com>
Date: Sun, 11 Nov 2012 21:27:16 -0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <8D4A85A2-07DD-4E34-89D9-1640F5ED9BEA@ve7jtb.com>
References: <BAY171-W32DD53461B3DF4235F053DB7680@phx.gbl> <255B9BB34FB7D647A506DC292726F6E11500331CA9@WSMSG3153V.srv.dir.telstra.com>
To: "Manger, James H" <James.H.Manger@team.telstra.com>
Cc: Michael Jones <michael_b_jones@hotmail.com>, "jose@ietf.org" <jose@ietf.org>
Subject: Re: [jose] Choice for WG: Use a KDF with AES CBC or use a longer key
Precedence: list

I think that is largely the effect of making the proposed change.  The remaining question if we do it is if we want to take a dependency on draft-mcgrew-aead-aes-cbc-hmac-sha2 or incorporate it.

If it is a ID taking a dependency on it is problematic proceduraly.

I am personally in favour of sending the concatenation of the two values rather than use a KDF.  I think it will reduce interoperability issues.

What we call it needs to be determined.

John B.

On 2012-11-11, at 7:23 PM, "Manger, James H" <James.H.Manger@team.telstra.com> wrote:

>> So I’d like to explicitly ask the working group.  Do you want us to:
>> 
>> (1) Use the concatenation of random CEK and CIK values as the CMK for AES CBC, resulting in a longer CMK?
>> (2) Continue to use a KDF to generate the CEK and CIK from a shorter CMK?
> 
> 
> 1. Use draft-mcgrew-aead-aes-cbc-hmac-sha2
> 
> --
> James Manger
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose

[jose] Choice for WG: Use a KDF with AES CBC or u… Michael Jones
Re: [jose] Choice for WG: Use a KDF with AES CBC … Axel Nennker
Re: [jose] Choice for WG: Use a KDF with AES CBC … Michael Jones
Re: [jose] Choice for WG: Use a KDF with AES CBC … Manger, James H
Re: [jose] Choice for WG: Use a KDF with AES CBC … Manger, James H
Re: [jose] Choice for WG: Use a KDF with AES CBC … John Bradley
Re: [jose] Choice for WG: Use a KDF with AES CBC … Manger, James H
Re: [jose] Choice for WG: Use a KDF with AES CBC … Michael Jones
Re: [jose] Choice for WG: Use a KDF with AES CBC … John Bradley
Re: [jose] Choice for WG: Use a KDF with AES CBC … John Bradley
Re: [jose] Choice for WG: Use a KDF with AES CBC … Michael Jones
Re: [jose] Choice for WG: Use a KDF with AES CBC … Stephen Farrell
[jose] Choice for WG: Use a KDF with AES CBC or u… David McGrew (mcgrew)
Re: [jose] Choice for WG: Use a KDF with AES CBC … Michael Jones
Re: [jose] Choice for WG: Use a KDF with AES CBC … Richard L. Barnes
Re: [jose] Choice for WG: Use a KDF with AES CBC … Mike Jones