Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 049E61A1A8D; Fri, 17 Oct 2014 08:18:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.91 X-Spam-Level: X-Spam-Status: No, score=-6.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 58MCi83nSdK5; Fri, 17 Oct 2014 08:18:14 -0700 (PDT) Received: from emvm-gh1-uea08.nsa.gov (emvm-gh1-uea08.nsa.gov [63.239.67.9]) by ietfa.amsl.com (Postfix) with ESMTP id 47C301A19FC; Fri, 17 Oct 2014 08:17:21 -0700 (PDT) X-TM-IMSS-Message-ID: <5f09853c00161d74@nsa.gov> Received: from MSHT-GH1-UEA01.corp.nsa.gov ([10.215.227.18]) by nsa.gov ([63.239.67.9]) with ESMTP (TREND IMSS SMTP Service 7.1; TLSv1/SSLv3 AES128-SHA (128/128)) id 5f09853c00161d74 ; Fri, 17 Oct 2014 11:18:06 -0400 Received: from MSMR-GH1-UEA08.corp.nsa.gov (10.215.225.3) by MSHT-GH1-UEA01.corp.nsa.gov (10.215.227.18) with Microsoft SMTP Server (TLS) id 14.2.347.0; Fri, 17 Oct 2014 11:17:09 -0400 Received: from MSMR-GH1-UEA03.corp.nsa.gov ([10.215.224.3]) by MSMR-GH1-UEA08.corp.nsa.gov ([10.215.225.3]) with mapi id 14.02.0347.000; Fri, 17 Oct 2014 11:17:09 -0400 From: "Igoe, Kevin M." To: 'Matthew Lepinski' , "iesg@ietf.org" , "secdir@ietf.org" , "draft-ietf-avtcore-srtp-aes-gcm.all@tools.ietf.org" Thread-Topic: SECDIR Review of draft-ietf-avtcore-srtp-aes-gcm-14 Thread-Index: AQHP6YFNtpm/N9j1sU+S8vxUOrLX7Zw0UM9g Date: Fri, 17 Oct 2014 15:17:07 +0000 Message-ID: <3C4AAD4B5304AB44A6BA85173B4675CABC6E1809@MSMR-GH1-UEA03.corp.nsa.gov> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.215.228.46] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/secdir/fV6x6epqQOeniVKCoAbq_fXBnYc X-Mailman-Approved-At: Fri, 17 Oct 2014 08:19:38 -0700 Subject: Re: [secdir] SECDIR Review of draft-ietf-avtcore-srtp-aes-gcm-14 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Oct 2014 15:18:18 -0000 SSBoYXZlIG5vIHByb2JsZW1zIHdpdGggdGhlIGNoYW5nZXMgeW91IHN1Z2dlc3QuICANCg0KQXMg dG8gdGhlIHVzZSBvZiBhIHNlY3JldCBzYWx0LCBzY3Rpb24gMy4yLjEgb2YgUkZDIDM3MTEgc2F5 cyB0aGUgDQptYXN0ZXIgc2FsdCBtYXkgYmUgZWl0aGVyIHB1YmxpYyBvciBzZWNyZXQuICBBbm5v eWluZ2x5LCBpdCBuZXZlciANCmFnYWluIG1lbnRpb25zIGFueSBkaXN0aW5jdGlvbiBiZXR3aXh0 IHB1YmxpYyBhbmQgc2VjcmV0IG1hc3RlciBrZXlzLg0KDQpOZWl0aGVyIG15c2VsZiBub3IgbXkg Y29sbGVhZ3VlcyBjb3VsZCBjb21lIHVwIHdpdGggYSBzb3VuZCBzZWN1cml0eSANCnJlYXNvbiBm b3IgdXNpbmcgYSBzZWNyZXQgbWFzdGVyIHNhbHQsIGJ1dCBhbGwgc2VjcmV0IHZzbHVlcyBuZWVk IHRvDQpiZSBwcm9wZXJseSBlcmFzZWQuICBJIHNlZSB0aHJlZSAoMykgb3B0aW9uczoNCg0KYSkg Y2hhbmdlIHRoZSBmaXJzdCBidWxsZXQgb2Ygc2VjdGlvbiAxNC4xIHRvIHJlYWQ6DQoNCiIgIC0g VGhlIG1hc3RlciBzYWx0IE1VU1QgYmUgcHJvcGVybHkgZXJhc2VkIHdoZW4gaXQgaXMgbm8gbG9u Z2VyIG5lZWRlZC4iDQoNCg0KYikgIEFkZGluZyB0aGUgZm9sbG93aW5nIHR3byAoMikgc2VudGVu Y2VzIHRvIHRoZSBlbmQgb2YgdGhlIGZpcnN0IA0KcGFyYWdyYXBoIG9mIHNlY3Rpb24gMTQuMS4N Cg0KICAiUkZDIDM3MTEgcHJvdmlkZXMgZm9yIHRoZSB1c2Ugb2YgZWl0aGVyIGEgcHVibGljIG1h c3RlciBzYWx0IG9yIGEgDQogIHNlY3JldCBtYXN0ZXIgc2FsdC4gIFdoZW4gdGhlcmUgaXMgYW55 IGRvdWJ0IGFzIHRvIHdoaWNoIG9wdGlvbiBoYXMgDQogIGJlZW4gc2VsZWN0ZWQsIGZvciB0aGUg cHVycG9zZXMgb2YgdGhpcyBzZWN0aW9uIHRoZSBtYXN0ZXIgc2FsdCBzaG91bGQgDQogIGJlIHRy ZWF0ZWQgYXMgaWYgaXQgd2FzIHNlY3JldC4iIA0KDQpjKSBQdXQgYXQgdGhlIGVuZCBvZiB0aGUg Zmlyc3QgYnVsbGV0Og0KDQogICJXaGVuIGluIGRvdWJ0IGFzIHRvIHdoZXRoZXIgdGhlIG1hc3Rl ciBzYWx0IGlzIHB1YmxpYyBvciBzZWNyZXQsDQogICBpdCBzaG91bGQgYmUgZXJhc2VkIGFzIGlm IGl0IHdhcyBzZWNyZXQuIg0KDQoNCk5vIHJlYWwgcHJlZmVyZW5jZSwgYnV0IG9wdGlvbiBhKSBp cyB0aGUgZWFzaWVzdCB0eXBvZ3JhcGhpY2FsbHkuDQoNCi0tLS0tLS0tLS0tLS0tLS0rLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCktldmluIE0uIEln b2UgICB8ICJXZSBjYW4ndCBzb2x2ZSBwcm9ibGVtcyBieSB1c2luZyB0aGUgc2FtZSBraW5kDQpr bWlnb2VAbnNhLmdvdiAgfCBvZiB0aGlua2luZyB3ZSB1c2VkIHdoZW4gd2UgY3JlYXRlZCB0aGVt LiIgDQogICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgLSBBbGJlcnQgRWluc3RlaW4gLQ0K LS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogTWF0dGhldyBM ZXBpbnNraSBbbWFpbHRvOm1sZXBpbnNraS5pZXRmQGdtYWlsLmNvbV0gDQpTZW50OiBUaHVyc2Rh eSwgT2N0b2JlciAxNiwgMjAxNCA0OjM5IFBNDQpUbzogaWVzZ0BpZXRmLm9yZzsgc2VjZGlyQGll dGYub3JnOyBkcmFmdC1pZXRmLWF2dGNvcmUtc3J0cC1hZXMtZ2NtLmFsbEB0b29scy5pZXRmLm9y Zw0KU3ViamVjdDogU0VDRElSIFJldmlldyBvZiBkcmFmdC1pZXRmLWF2dGNvcmUtc3J0cC1hZXMt Z2NtLTE0DQoNCkkgaGF2ZSByZXZpZXdlZCB0aGlzIGRvY3VtZW50IGFzIHBhcnQgb2YgdGhlIHNl Y3VyaXR5IGRpcmVjdG9yYXRlJ3Mgb25nb2luZyBlZmZvcnQgdG8gcmV2aWV3IGFsbCBJRVRGIGRv Y3VtZW50cyBiZWluZyBwcm9jZXNzZWQgYnkgdGhlIElFU0cuICBUaGVzZSBjb21tZW50cyB3ZXJl IHdyaXR0ZW4gcHJpbWFyaWx5IGZvciB0aGUgYmVuZWZpdCBvZiB0aGUgc2VjdXJpdHkgYXJlYSBk aXJlY3RvcnMuIERvY3VtZW50IGVkaXRvcnMgYW5kIFdHIGNoYWlycyBzaG91bGQgdHJlYXQgdGhl c2UgY29tbWVudHMganVzdCBsaWtlIGFueSBvdGhlciBsYXN0IGNhbGwgY29tbWVudHMuDQoNClRo aXMgZG9jdW1lbnQgc3BlY2lmaWVzIHRoZSB1c2Ugb2YgdGhlIEFkdmFuY2VkIEVuY3J5cHRpb24g U3RhbmRhcmQNCihBRVMpIGluIGJvdGggR2Fsb2lzIENvdW50ZXIgTW9kZSAoR0NNKSBhbmQgQ0JD IENvdW50ZXIgTW9kZSAoQ0NNKSBhcyBhbiBBdXRoZW50aWNhdGVkIEVuY3J5cHRpb24gd2l0aCBB ZGRpdGlvbmFsIERhdGEgKEFFQUQpIGNpcGhlci1zdWl0ZSBmb3IgdGhlIFNSVFAgcHJvdG9jb2wu IFRoaXMgaXMgdGhlIGZpcnN0IEFFQUQgc3BlY2lmaWNhdGlvbiBmb3IgU1JUUC4NCkhvd2V2ZXIs IHRoaXMgc3BlY2lmaWNhdGlvbiBpcyBjb25zaXN0ZW50IHdpdGggb3RoZXIgQUVBRCB3b3JrIGlu IHRoZSBJRVRGIChpLmUuLCBSRkMgNTExNikuDQoNCkkgZm91bmQgbm8gc2lnbmlmaWNhbnQgaXNz dWVzIGluIHRoZSByZXZpZXcgb2YgdGhpcyBkb2N1bWVudCBhbmQgYmVsaWV2ZSB0aGF0IGl0IGlz IHJlYWR5IGZvciBwdWJsaWNhdGlvbi4NCg0KTml0cyAoY29uc2lkZXIgdGhlIGZvbGxvd2luZyBz dWdnZXN0aW9ucyk6DQoNClNlY3Rpb24gM2I6IHMvKGFzIHdlbGwgb25lIG9yIG1vcmUgLyhhcyB3 ZWxsIGFzIG9uZSBvciBtb3JlIC8NCg0KU2VjdGlvbiA2OiBzL1hPUmVkIHRvIHRoZSBwbGFpbnRl eHQgdG8gZm9ybSAvWE9SZWQgd2l0aCB0aGUgcGxhaW50ZXh0IHRvIGZvcm0gLw0KDQpTZWN0aW9u IDkuMTogcy9YT1JlZCB0byB0aGUgMTItb2N0ZXQgc2FsdCB0byBmb3JtIC9YT1JlZCB3aXRoIHRo ZSAxMi1vY3RldCBzYWx0IHRvIGZvcm0gLw0KDQpTZWN0aW9uIDEwLjE6IHMvWE9SZWQgdG8gdGhl IDEyLW9jdGV0IHNhbHQgdG8gZm9ybSAvWE9SZWQgd2l0aCB0aGUgMTItb2N0ZXQgc2FsdCB0byBm b3JtIC8NCg0KU2VjdGlvbiAxMTogcy9hY2NlcHQgaW5wdXRzIHdpdGggdmFyeWluZyBsZW5ndGhz IC9hY2NlcHQgaW5wdXRzIG9mIHZhcnlpbmcgbGVuZ3RocyAvDQoNClNlY3Rpb24gMTQuMTogWW91 IHVzZSB0aGUgcGhyYXNlICJJZiB0aGUgbWFzdGVyIHNhbHQgaXMgdG8gYmUga2VwdCBzZWNyZXQi LiBIb3dldmVyLCBJIGFtIG5vdCBzdXJlIGhvdyBhbiBpbXBsZW1lbnRlciBpcyBzdXBwb3NlZCB0 byBkZWNpZGUgd2hldGhlciBvciBub3QgdG8ga2VlcCB0aGUgbWFzdGVyIHNhbHQgc2VjcmV0LiBJ ZiB5b3UgaGF2ZSBhbnkgcmVmZXJlbmNlIG9uIHRoZSByYW1pZmljYXRpb25zIG9mIGtlZXBpbmcg LyBub3Qta2VlcGluZyB0aGUgbWFzdGVyIHNhbHQgc2VjcmV0LCBpdCB3b3VsZCBiZSBoZWxwZnVs IHRvIGluY2x1ZGUgc3VjaCBhIHJlZmVyZW5jZS4NCg0KU2VjdGlvbiAxNC4yOiBzL2F1dGhlbnRp Y2F0aW9uIHZhbHVlIHVudGlsIGJ5IGNoYW5jZSB0aGV5IGhpdCBhIHZhbGlkIC9hdXRoZW50aWNh dGlvbiB2YWx1ZSB1bnRpbCwgYnkgY2hhbmNlLCB0aGV5IGhpdCBhIHZhbGlkIC8NCg==