Re: [kitten] Input on Paul's concerns about aes-cbc

Luke Howard <lukeh@padl.com> Tue, 08 October 2013 04:18 UTC

Return-Path: <lukeh@padl.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A436C21E8149 for <kitten@ietfa.amsl.com>; Mon, 7 Oct 2013 21:18:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uqmE5Rjookqc for <kitten@ietfa.amsl.com>; Mon, 7 Oct 2013 21:18:43 -0700 (PDT)
Received: from us.padl.com (us.padl.com [216.154.215.154]) by ietfa.amsl.com (Postfix) with ESMTP id 8405B21F9D0D for <kitten@ietf.org>; Mon, 7 Oct 2013 21:18:43 -0700 (PDT)
Received: by us.padl.com with ESMTP id r984ITur023726; Tue, 8 Oct 2013 00:18:32 -0400
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\))
From: Luke Howard <lukeh@padl.com>
In-Reply-To: <064ca7780d4943b1868670461c2c7184@BLUPR03MB279.namprd03.prod.outlook.com>
Date: Tue, 08 Oct 2013 15:18:28 +1100
Content-Transfer-Encoding: quoted-printable
Message-Id: <5FB494E4-FD47-48EF-B3E6-3831D5CAC27C@padl.com>
References: <tslob752llm.fsf@mit.edu> <524ECE01.3060401@mit.edu> <CAK3OfOger4OxBoBc=jCVBRZeXO2OeJa5mRoONij98gnRFPGMyw@mail.gmail.com> <064ca7780d4943b1868670461c2c7184@BLUPR03MB279.namprd03.prod.outlook.com>
To: Paul Miller <paumil@microsoft.com>
X-Mailer: Apple Mail (2.1510)
X-SMTP-Vilter-Version: 1.3.6
X-Spamd-Symbols: AWL,BAYES_00,RDNS_NONE,USER_IN_WHITELIST
X-SMTP-Vilter-Spam-Backend: spamd
X-Spam-Threshold: 5.0
X-Spam-Probability: -20.5
Cc: "kitten@ietf.org" <kitten@ietf.org>, Sam Hartman <hartmans-ietf@mit.edu>
Subject: Re: [kitten] Input on Paul's concerns about aes-cbc
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Oct 2013 04:18:48 -0000

> To reduce the application compatibility problem, I'd have to use the Rotate Right Count in the header to move padding into the header.  Up front, Kerberos on Windows would tell callers that they needed to allocate for

MIT scatter/gather APIs do this. There are not the same compatibility issues as there are (to my knowledge) few consumers. The only consumer I'm aware of, DCE RPC, can deal with extra bytes in the header, because its PDUs contain explicit lengths.

It's unfortunate about the documentation...

-- Luke