Re: [saag] AD review of draft-iab-crypto-alg-agility-06

[Viktor Dukhovni <[e-mail]>]

On Wed, Sep 02, 2015 at 05:18:10PM -0400, Russ Housley wrote:

> How about:
> 
>    It may seem as if the ability to use an algorithm of one's own
>    choosing is very desirable; however, the selection is often better
>    left to experts.  When there are choices, end-users might select
>    between configuration profiles that have been defined by experts.

Super.

>    Further, experts need not specify each and every cryptographic
>    algorithm alternative.  Specifying all possible choices will not lead
>    to them being available in every implementation.

That's fine.

> I suggest:
> 
>    In addition, inclusion of too many alternatives may
>    add complexity to algorithm selection or negotiation.  Specification
>    of  too many alternatives will likely hamper interoperability and may
>    hamper security as well.  When specifying new algorithms or suites,
>    protocol designers would be prudent to consider whether existing
>    ones can be deprecated.

Fine.

-- 
	Viktor.