Re: [saag] AD review of draft-iab-crypto-alg-agility-06

[Stephen Farrell <[e-mail]>]

Hiya,

<hats-off>

On 27/07/15 20:40, Nico Williams wrote:
> The key thing is that weak crypto must not lead to real-time exploitable
> downgrade attacks.

I think this nicely captures a point where we can have a real
disagreement about OS.

I would prefer if we could agree that:

   OS use of weaker crypto must not allow feasible off-line
   deciphering of ciphertext, no matter the adversary within
   the likely duration for which the average plaintext is
   sensitive.

According to the above, 1DES and export ciphers would be completely
out of the question. And rc4 is getting really really close.

And that's completely different to your quoted text above.

<hat-back-on>

I'm not sure we'll reach rough consensus on either side of this
argument though so we may be reduced to silence on the hard part of
the question.

Cheers,
S.