[jose] Point of curiosity on A256CBC-HS512

Brian Campbell <bcampbell@pingidentity.com> Mon, 29 July 2013 12:04 UTC

Return-Path: <bcampbell@pingidentity.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0031921F9A2E for <jose@ietfa.amsl.com>; Mon, 29 Jul 2013 05:04:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.588
X-Spam-Level:
X-Spam-Status: No, score=-5.588 tagged_above=-999 required=5 tests=[AWL=0.389, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12eCAH+vAf1A for <jose@ietfa.amsl.com>; Mon, 29 Jul 2013 05:04:11 -0700 (PDT)
Received: from na3sys009aog127.obsmtp.com (na3sys009aog127.obsmtp.com [74.125.149.107]) by ietfa.amsl.com (Postfix) with ESMTP id 539A921F9D11 for <jose@ietf.org>; Mon, 29 Jul 2013 05:04:05 -0700 (PDT)
Received: from mail-oa0-f43.google.com ([209.85.219.43]) (using TLSv1) by na3sys009aob127.postini.com ([74.125.148.12]) with SMTP ID DSNKUfZaMpYRP0x/Qj257605SUGId5t5yBHW@postini.com; Mon, 29 Jul 2013 05:04:06 PDT
Received: by mail-oa0-f43.google.com with SMTP id i10so7710953oag.30 for <jose@ietf.org>; Mon, 29 Jul 2013 05:04:02 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:from:date:message-id:subject:to:content-type :x-gm-message-state; bh=Y47f5j86ofoi8Ne99azntwHaHD0GjsE4b67HBKmJKSI=; b=X8xGTdkdcyjbxyabJJ238osdvqZBILPKwG/hlmkR70xhKSjfgYtODFQCivLObLmSWI tj6xV4du9y7vFURi+jChKrsWUi3f/QAcvybsYDubi2AI/BX2u7k7VI+4ODgMKKp0Z1lm kqpCrSd4ANO+ZZ/C70KLAui5Q/QA6TK08eFZo3xCpccttXB7bIDqdA/hOYrxUKf4JLVZ 3cZhn6yVvLio/19HhX2Klbix3LaO/ZoN8jgFdkhxRfAgMNfxmQA281dX+c5QPCS9/B/5 xVNVzXz9F8xbrczyHWGIkP7AtMWAILhCEt9dFxJUhT6PmJdO5D/NA5QlfAc1iAydOQ4G xBxw==
X-Received: by 10.50.65.42 with SMTP id u10mr951187igs.47.1375099442547; Mon, 29 Jul 2013 05:04:02 -0700 (PDT)
X-Received: by 10.50.65.42 with SMTP id u10mr951178igs.47.1375099441424; Mon, 29 Jul 2013 05:04:01 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.64.41.34 with HTTP; Mon, 29 Jul 2013 05:03:31 -0700 (PDT)
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Mon, 29 Jul 2013 14:03:31 +0200
Message-ID: <CA+k3eCTj1c=Xa9XuND+51OxTaj1zAkweQBre2fD1sbaF7q2y4w@mail.gmail.com>
To: "jose@ietf.org" <jose@ietf.org>
Content-Type: multipart/alternative; boundary="047d7b414330bcc36604e2a5499f"
X-Gm-Message-State: ALoCoQmBdyYP3OlddUCkQHQeMbzN7+877nxREkh+oFK36mG2OyMmM6W1JbkzlH+aQ42vo+Z48WzqEUJ0ce5BeeYgBrEQ1jtFX7iXUfxmWfF7gPhLi0Rg9Fn5QIm5/cwNiZwULIOIihhI
Subject: [jose] Point of curiosity on A256CBC-HS512
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Jul 2013 12:04:16 -0000

Is there a specific reason that AES_256_CBC_HMAC_SHA_512 / A256CBC-HS512
[1] uses SHA-512 and truncates to 32 octets rather than just using the 32
octets of SHA-256 outright? I was working on implementing it yesterday and
it just struck me as kind of odd - so wanted to ask if there was more to it
than my surface level observation.


[1]
http://tools.ietf.org/html/draft-ietf-jose-json-web-algorithms-13#section-4.10.4