Re: [kitten] New EncTypes?

[Benjamin Kaduk <[e-mail]>]

On Wed, 18 Nov 2015, Henry B (Hank) Hotz, CISSP wrote:

> It seems to be time to do housecleaning on algorithms selections. Is anyone interested in adding a new enctype to Kerberos?
>
> Why (else)?  Speaking strictly for myself, I’d like to see a
> mandatory-to-implement enctype that shares *nothing* with the current
> aes-sha1-hmac stuff. I’m speaking purely strategically and not from any
> mathematical suspicion of weakness. If someone discovers something
> fundamentally wrong with the math behind SHA1 or AES, then it might take
> out SHA2 or Camellia as well.
>
> I have nothing specific against the “suite-B” proposal, but they’re not
> what I’d like to see. I assume the NSA is too busy riding the “post
> quantum” horse away from their DRBG fiasco to help finish it.
>
> Just to throw some straw (just straw, not an actual strawman) on the
> table, how about something that uses one of the European stream cipher
> finalists with SHA-3?

I had heard mutterings elsewhere about a chacha20-poly1305 sort of thing,
which seems potentially interesting to me.  The real question is whether
implementors would pick up such a thing, and whether we can get consensus
for MTI.

There are public commitments to funding at least one implementation of the
aes-cts-hmac-sha2 proposal, but I don't think I've heard anything one way
or the other about a completely novel enctype.


> Finally, is anyone interested in doing a die-die-die draft for triple-des, or rc4?

There is already
https://tools.ietf.org/html/draft-kaduk-kitten-des-des-des-die-die-die-00

-Ben