Re: [lamps] I-D Action: draft-ietf-lamps-cmp-algorithms-04.txt

["Brockhaus, Hendrik" <[e-mail]>]

Russ

Thank you for your comments.

> Von: Spasm <[e-mail]> Im Auftrag von Russ Housley
> 
> Typo in Section 5:  s/proofe-of-possession/proof-of-possession/

Thanks, will be changed

> 
> In Section 7, it says "following guidelines should be followed".  That is a bit
> awkward.  More importantly, the things that follow are the criteria, and then
> there is a SHOULD statement.  I thnk the sentence introducing the bullets could
> reflect this better.

I suggest the following change:

Old
"the following guidelines should be followed."

New
"the following criteria SHOULD guide the choice of algorithms used for managing certificates."

> 
> In Table 1, what mode of AES is used for PROT_SYM_ALG?  I think it should be
> CBC.

I will change from "AES" --> "AES-CBC" 

> 
> In section 9, I suggest a rewording of the AES-GMAC paragraph:
> 
>    AES-GMAC MUST NOT be used as the pseudo random function
>    in PBKDF2; the use of AES-GMAC more than once with the same
>    key and the same nonce will break the security.

Thank you for this suggestion. It reads much better.

Hendrik