Re: [secdir] Secdir review of draft-herzog-static-ecdh-05

[Stephen Farrell <[e-mail]>]

I had a quick look at the -06 version.

It still doesn't call out what I think is the real functional
difference between static-static (s-s) and ephemeral-static (e-s)
which is that with centrally generated private values s-s allows
an outbound application layer gateway to decrypt and filter
traffic before it leaves the "key generating" domain. With e-s
and signing keys, which are the alternative, that is not possible.

Some people would like exactly that as a feature. Others would
consider it anathema. I think this ought be explicitly called out
in the text so that someone who cares doesn't pick the scheme
the don't like by accident.

S.

On 16/03/11 23:58, Sean Turner wrote:
> On 3/10/11 4:02 PM, Herzog, Jonathan - 0668 - MITLL wrote:
>>
>> On Mar 9, 2011, at 5:49 PM, Stephen Farrell wrote:
> 
> ..snip
> 
>> Sean Turner has graciously agreed to step in and handle the IPR issues
>> of this draft, so I'll let him address this.
> 
> I submitted a 3rd party IPR statement at 6pm.  I should have done it but
> forgot.  It's the same ol' Certicom IPR.  I submitted the same 3rd party
> earlier on another draft that mentioned EC algs.
> 
> spt
>