Re: [saag] Discuss at SAAG? was Re: nation state crypto profiles - draft-jenkins-cnsa-cmc-profile-00 (fwd)

Michael Richardson <mcr+ietf@sandelman.ca> Tue, 02 October 2018 23:29 UTC

Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7ECEF1310B7 for <saag@ietfa.amsl.com>; Tue, 2 Oct 2018 16:29:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qAU5q_SSNbnm for <saag@ietfa.amsl.com>; Tue, 2 Oct 2018 16:29:45 -0700 (PDT)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 86ECD1310A7 for <saag@ietf.org>; Tue, 2 Oct 2018 16:29:45 -0700 (PDT)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 52D3820090; Tue, 2 Oct 2018 19:29:43 -0400 (EDT)
Received: by sandelman.ca (Postfix, from userid 179) id 159AC230F; Tue, 2 Oct 2018 19:29:44 -0400 (EDT)
Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 11D25AA4; Tue, 2 Oct 2018 19:29:44 -0400 (EDT)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Dmitry Belyavsky <beldmit@gmail.com>
cc: paul@nohats.ca, "saag@ietf.org" <saag@ietf.org>
In-Reply-To: <CADqLbzLwnsAAQAqcp7g1WzzHkBHmfaSPkpcoVveP9gg1mb0+yA@mail.gmail.com>
References: <alpine.LRH.2.21.1810021055160.25461@bofh.nohats.ca> <CADqLbzLwnsAAQAqcp7g1WzzHkBHmfaSPkpcoVveP9gg1mb0+yA@mail.gmail.com>
X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Date: Tue, 02 Oct 2018 19:29:44 -0400
Message-ID: <31613.1538522984@localhost>
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/t0HWnJMraoBtPW3CrpZrhxdx_PI>
Subject: Re: [saag] Discuss at SAAG? was Re: nation state crypto profiles - draft-jenkins-cnsa-cmc-profile-00 (fwd)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Oct 2018 23:29:47 -0000

Dmitry Belyavsky <beldmit@gmail.com> wrote:
    > One of the problems causing an interest of publishing national
    > standards as RFCs is the necessity to be registered in various IANA
    > registries (e.g. TLS ciphersuites identifiers) to use them for
    > national-wide purposes along with "first class" algorithms.

If I understand what you are saying, you said it backwards.

   I think you are saying that national standards feel that they must publish as
   RFCs in order to be able to acquire IANA numbers for protocols.

But, for IPsec, this certainly isn't true.

https://www.iana.org/assignments/ikev2-parameters/ikev2-parameters.xhtml
shows "Expert Review" for almost all values.

That's a pretty low bar.

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-