Re: [secdir] secdir review of draft-ietf-alto-protocol

["Dan Harkins" <[e-mail]>]

On Sun, February 2, 2014 11:33 am, Jeffrey Hutzelman wrote:
> On Sat, 2014-02-01 at 10:54 -0800, Dan Harkins wrote:
>>   - 8.3.5, encryption and integrity protection go hand-in-hand,
>>      they cannot be "and/or".
>
> Huh?  That's not true.  Confidentiality and integrity are separable, and
> it is common to want one without the other.  As it turns out, neither
> TLS nor SSH generally gives you that option, but the and/or is about
> which features you need, not what is practical.

  They may be separable but you don't want to separate them. You
never want to do encryption without integrity protection. You can
do integrity protection without encryption though and there are
TLS ciphersuites to give you that-- TLS_RSA_WITH_NULL_SHA256--
but there are none that give you encryption without also giving you
integrity protection.

  You can address the comment by swapping terms, i.e. say "integrity
protection and/or encryption".

  Dan.