Re: draft-baushke-ssh-dh-group-sha2-01 (was Re: DH group exchange)

"Mark D. Baushke" <mdb@juniper.net> Fri, 12 February 2016 17:48 UTC

Return-Path: <bounces-ietf-ssh-owner-secsh-tyoxbijeg7-archive=lists.ietf.org@NetBSD.org>
X-Original-To: ietfarch-secsh-tyoxbijeg7-archive@ietfa.amsl.com
Delivered-To: ietfarch-secsh-tyoxbijeg7-archive@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6199A1A8733 for <ietfarch-secsh-tyoxbijeg7-archive@ietfa.amsl.com>; Fri, 12 Feb 2016 09:48:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZNoMykd-mh7D for <ietfarch-secsh-tyoxbijeg7-archive@ietfa.amsl.com>; Fri, 12 Feb 2016 09:48:41 -0800 (PST)
Received: from mail.netbsd.org (mail.NetBSD.org [IPv6:2001:470:a085:999::25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37E241A8731 for <secsh-tyoxbijeg7-archive@lists.ietf.org>; Fri, 12 Feb 2016 09:48:41 -0800 (PST)
Received: by mail.netbsd.org (Postfix, from userid 605) id 10B3685E82; Fri, 12 Feb 2016 17:48:40 +0000 (UTC)
Delivered-To: ietf-ssh@NetBSD.org
Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id E3A5684CFB for <ietf-ssh@NetBSD.org>; Fri, 12 Feb 2016 17:48:37 +0000 (UTC)
X-Virus-Scanned: amavisd-new at netbsd.org
Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id 2TdtMMpqH6zk for <ietf-ssh@netbsd.org>; Fri, 12 Feb 2016 17:48:37 +0000 (UTC)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0795.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc09::795]) by mail.netbsd.org (Postfix) with ESMTP id 8225384CE9 for <ietf-ssh@NetBSD.org>; Fri, 12 Feb 2016 17:48:33 +0000 (UTC)
Received: from BY1PR0501CA0034.namprd05.prod.outlook.com (10.162.139.44) by BLUPR05MB055.namprd05.prod.outlook.com (10.255.210.150) with Microsoft SMTP Server (TLS) id 15.1.396.15; Fri, 12 Feb 2016 17:48:31 +0000
Received: from BN1BFFO11FD018.protection.gbl (2a01:111:f400:7c10::1:152) by BY1PR0501CA0034.outlook.office365.com (2a01:111:e400:4821::44) with Microsoft SMTP Server (TLS) id 15.1.409.15 via Frontend Transport; Fri, 12 Feb 2016 17:48:31 +0000
Authentication-Results: spf=softfail (sender IP is 66.129.239.18) smtp.mailfrom=juniper.net; cs.auckland.ac.nz; dkim=none (message not signed) header.d=none;cs.auckland.ac.nz; dmarc=none action=none header.from=juniper.net;
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.18 as permitted sender)
Received: from p-emfe01a-sac.jnpr.net (66.129.239.18) by BN1BFFO11FD018.mail.protection.outlook.com (10.58.144.81) with Microsoft SMTP Server (TLS) id 15.1.415.6 via Frontend Transport; Fri, 12 Feb 2016 17:48:28 +0000
Received: from magenta.juniper.net (172.17.27.123) by p-emfe01a-sac.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.123.3; Fri, 12 Feb 2016 09:48:11 -0800
Received: from eng-mail01.juniper.net (eng-mail01.juniper.net [172.17.28.114]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id u1CHmAD99573; Fri, 12 Feb 2016 09:48:10 -0800 (PST) (envelope-from mdb@juniper.net)
Received: from eng-mail01.juniper.net (localhost [127.0.0.1]) by eng-mail01.juniper.net (Postfix) with ESMTP id B1E89114A5; Fri, 12 Feb 2016 09:48:09 -0800 (PST)
To: denis bider <ietf-ssh3@denisbider.com>
CC: Peter Gutmann <pgut001@cs.auckland.ac.nz>, ietf-ssh@NetBSD.org
Subject: Re: draft-baushke-ssh-dh-group-sha2-01 (was Re: DH group exchange)
In-Reply-To: <114857654-3608@skroderider.denisbider.com>
References: <114857654-3608@skroderider.denisbider.com>
Comments: In-reply-to: denis bider <ietf-ssh3@denisbider.com> message dated "Fri, 12 Feb 2016 11:52:46 +0000."
From: "Mark D. Baushke" <mdb@juniper.net>
Date: Fri, 12 Feb 2016 09:48:09 -0800
Message-ID: <89441.1455299289@eng-mail01.juniper.net>
MIME-Version: 1.0
Content-Type: text/plain
X-EOPAttributedMessage: 0
X-Microsoft-Exchange-Diagnostics: 1; BN1BFFO11FD018; 1:rA6QWyppfsV/pGnI4EC2R3cIt92l+6DTxvDqTYfk3jHb8oRFZkhHMp80DM3qQlMRxNe0+OKlfgi/HY+u5EYbCbzGC8vh7UjMQq79cuHVJFPH4vx5hsr4VzEfbQOn7ntwVbIfrjdO1fews0ybhMCXBagbzk8O33zqwxMUydElNEWdTUUeEWjI0ePF/9sO3/Z33y9uvLTfFdYAcaR8Bpp8S1fPzgl/nn54AV3sqcpNV4CegjSTrWnsSc2TUkKf5lslgwteF2JFLaIkdGmlS9eoKkABC48UVmHEgNqGfZi0jgbEWmeMY4bcQPt+QJFQsQuiwqG6SXscp4groiSq9Fm+CHrQ++Ko3ici0P4E2zxYlZ15RqGJEtGIIV+mjT6O0T0FFCv9yVMDlYDDTMri4l5bRL4DaLPuzE6fKYBGHzakV8M=
X-Forefront-Antispam-Report: CIP:66.129.239.18; CTRY:US; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(2980300002)(199003)(189002)(586003)(77096005)(54356999)(4326007)(15975445007)(230783001)(1220700001)(1096002)(189998001)(110136002)(76176999)(2950100001)(11100500001)(5001960100002)(6806005)(117636001)(2906002)(53416004)(106466001)(50986999)(19580395003)(2810700001)(5003600100002)(105596002)(86362001)(48376002)(87936001)(47776003)(76506005)(5003940100001)(50466002)(92566002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BLUPR05MB055; H:p-emfe01a-sac.jnpr.net; FPR:; SPF:SoftFail; MLV:sfv; A:1; MX:1; LANG:en;
X-Microsoft-Exchange-Diagnostics: 1; BLUPR05MB055; 2:tNRd11m5u2H/lXg4ReCJAqJevdbbNGgXM9xRS8tSao8nSaOSNB72RLYKBTFB+JHmvUMiE0KYCEp+J7xbtQO3Tk/2w9/b19biJ9oUtO2/Y5+3Uvw1EF1WzuDv0zsiln63CA4z31Zfk6S8ITiaimlfmw==; 3:eF/YPLRp20Gj8ST2cVjLx0y9fdBbSOZzsGWtLqWnNUg1oeWJLXEKiYkeFwSXtFXtLNJh6xZjSd/hbAMN5enavEnh+c0TBzLOLHkNHcDlSxYNTUNHr+hYt9kapAwv1gc80k91hSGCujgqFo6qzCxsCXyXithoTxk7uBApMxRkUpDN7bq80jCe7gp4hGoEFQJ6DhaTs6PI8sFrmtC5PE+YDfxCA4PS46uJAVwTSSF/jUU=; 25:1EHHuJrjQxZTQkQIPR+ahUMR9z+35gw2q6iNOJfvsn0H18Taj8M1D4i4SYsk42j7/Dbtet87B48GuD6BhiOkOpZBRboAiXfcqUQ/MmsH3RXtjEmtBlAuxHmBfNlqnkMziMF1P53NIvmwYrO5i8Opz4x4NFjjsq2QNYTDHbrQygGnPW1ZtrzmOnvpgHOZh2t6Y6ESOWftPyJHKVrAPXx/s+mvHt9ShWw4dYj6WVsBCL+s+3IeOuUD86IrKgfpDkUpGLhcrSNlujGHjM+vT+gTPWMSFkvz2MjrO9ArGcXvUwAVKw1bXUjBqYuXbK+1hJuz
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR05MB055;
X-MS-Office365-Filtering-Correlation-Id: 0382c29f-68a6-46c5-060d-08d333d4b753
X-Microsoft-Exchange-Diagnostics: 1; BLUPR05MB055; 20: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
X-Microsoft-Antispam-PRVS: <BLUPR05MB05575CB7A624230E188949DBFA90@BLUPR05MB055.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(13018025)(13017025)(13015025)(13023025)(13024025)(8121501046)(3002001)(10201501046); SRVR:BLUPR05MB055; BCL:0; PCL:0; RULEID:; SRVR:BLUPR05MB055;
X-Microsoft-Exchange-Diagnostics: 1; BLUPR05MB055; 4:8X9dXlSABzCuKE4gJDjeF16UYZCKLQ6HHues0xG1OzQuzfQQSgEyFOupKQhdTGOGGhIiKrrvj8LgoSljICN73efbuG36BrJuc1Oa6inGJM4sDHeuyScFixuoBi6iRfaWZjgg6kJkKgVIaZOZIPdsRgPHnweHQ26tULpqC8d97kVuLX29ptRxjM4eKVZbcTGrPzgnRtDooV2iDve45jb8yv3tmHJzSg4uIdjcvy6f8wsPs03a3fXhN094lu8Lr7MH5CHIJQoB2AbIgihP/fBd49rxltRaiFojIht9VSqKJegr9j5b7o7aUYBCHEKDJD/sqmsQ/U3KhdNekLcbSm2HNjhbPRoov2rECVULO28N9luKmoRqE0Jl0vmsaPC7xmdsFHhGx+09PHYpm/f/vElXnWWzn2/ZjKnPpDvAjvP9JZpTiy1kWwtA4ESEL3GICG8IxC7d/IvHnL9/2ly8oGJd3A==
X-Forefront-PRVS: 0850800A29
X-Microsoft-Exchange-Diagnostics: 1; BLUPR05MB055; 23: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
X-Microsoft-Exchange-Diagnostics: 1; BLUPR05MB055; 5:IvIdHr1M/tJNvcne1u8A85wEVAg3mAwZ6l1oHsrwISmxEC0N6ec0jth1OdtXzRNBx/6PXKcF84wEUBkhEAXyocctsmWfNF94LNH11t8l++4CMRVWI//Wq1ojrC4sPKM49yJdR2AIU3uJENG5WsPENA==; 24:QmvgR1BBfJ7alcDs2PeUTg0j8s4Bc0agJJHdmBVOyub8LVD1dRNNakc484afzc3HcmkQnpBmE4U3tyK/GxebOIWtiT0KbS8ZPkJBerBfypg=
SpamDiagnosticOutput: 1:23
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Feb 2016 17:48:28.7538 (UTC)
X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.18]; Helo=[p-emfe01a-sac.jnpr.net]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR05MB055
Sender: ietf-ssh-owner@NetBSD.org
List-Id: ietf-ssh.NetBSD.org
Precedence: list

Hi denis,

You have made some good points. I have updated my draft to -02 and it is
in the process of being uploaded to the ietf servers.

For now, you can see the latest edition here:

  https://datatracker.ietf.org/doc/draft-baushke-ssh-dh-group-sha2/

I think I have the normative vs informative references in their proper
locations, please let me know of any nits that still need to be
addressed.

	-- Mark