Re: [secdir] Sector review of draft-josefsson-scrypt-kdf-03

Hi Joseph.  Thanks for your review, and sorry for the delay in answering
this.  In the new version [1] I have added a new section to discuss
scrypt parameters.

/Simon

[1] https://tools.ietf.org/html/draft-josefsson-scrypt-kdf-04

Joseph Salowey <joe@salowey.net> writes:

> I have reviewed this document as part of the security directorate's ongoing
> effort to review all IETF documents being processed by the IESG.  These
> comments were written primarily for the benefit of the security area
> directors and document authors.
>
> I think this document is ready with issues.   The document describes a
> password to key function, scrypt, based on memory hard functions to make it
> more expensive and difficult to develop specialized hardware to obtain the
> password from a recovered key.  I'd like to see this document published.  A
> few issues are listed below.
>
> First, I think Paul Kyzivat's GenArt review.
> http://mailarchive.ietf.org/arch/msg/gen-art/fToZiioHo-6x5ZRQWNcTr-aUYVk
> <https://mailarchive.ietf.org/arch/msg/gen-art/fToZiioHo-6x5ZRQWNcTr-aUYVk>,
> raised
> some points that could help the readability of the document.
>
> Second, the script algorithm has several parameters, but the document has
> very little discussion on how to choose those parameters or what they
> affect (this is also pointed out in Paul's message).  It would be good to
> have some discussion or guidance for parameter selection in the security
> considerations.
>
> Cheers,
>
> Joe
> _______________________________________________
> secdir mailing list
> secdir@ietf.org
> https://www.ietf.org/mailman/listinfo/secdir
> wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview
>

Re: [secdir] Sector review of draft-josefsson-scrypt-kdf-03

Attachment: signature.asc