IETF Logo Mail Archive

Re: [tcpinc] Eric Rescorla's Discuss on draft-ietf-tcpinc-tcpeno-13: (with DISCUSS and COMMENT)

Eric Rescorla <ekr@rtfm.com> Sun, 12 November 2017 07:39 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: tcpinc@ietfa.amsl.com
Delivered-To: tcpinc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24C9712711D for <tcpinc@ietfa.amsl.com>; Sat, 11 Nov 2017 23:39:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XA26qw-u6Mjx for <tcpinc@ietfa.amsl.com>; Sat, 11 Nov 2017 23:39:56 -0800 (PST)
Received: from mail-yw0-x231.google.com (mail-yw0-x231.google.com [IPv6:2607:f8b0:4002:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A19D61293D9 for <tcpinc@ietf.org>; Sat, 11 Nov 2017 23:39:54 -0800 (PST)
Received: by mail-yw0-x231.google.com with SMTP id x20so4244993ywg.4 for <tcpinc@ietf.org>; Sat, 11 Nov 2017 23:39:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=9VXFm7SQe2OkQQfH0v9JClp5wVfX+FtHydhs11C7O18=; b=0mTEb8MZ1MTA4L5m17BgbR7XX1+kkZgyzQ0azM5BTyXDVprIgZlPBGzVtg2HP96CdJ SVBeNGVtw4ZbltxD/aphKHhzdQ/XqDF5HIjQLLA2oAmotOXlsXMZiThgCB/Izdk1Ed0B X2edvq9r71RSdaMkzEI1U8M366Pxr/hF4fDDyBW5q14mYuZRUhGassQaFWZtavHx2Ozn HmAHAe34wj8LaYEs1/o6g+MZenY6+tel0V5bcYeFPlbLaE0wDqNDBH6bnx5KD6obeIhL eVf9kAQPyif5Z5OlIP6kTSmdsXakrvhjQqhw6hJ0GPRLsCAfJyLt7cNyPrm47asRmlp4 bExw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=9VXFm7SQe2OkQQfH0v9JClp5wVfX+FtHydhs11C7O18=; b=YDpNbE1cw1lYZm6HQEd/SjfzIFRJamVOCvuld8IFggPZlZ1nr3UFvHdEhSrL9P4bFd MuPM6zofs6W6x5WeOsmLhMD2/jmsZlCz2xyxKEPuRR5gmS0UzBv6SKweSWyajKJCrvgL D4aKizvPsBh40d+NTtDtKyNJzdnk10mod1pgCCqMC+LEmCt7bauJwao+q+o+jeHcKPjb iuXURlOwWfBBoUXFv5wmq7778bBvq1IZKqZbBpqcTfduv8suFGCwkhTn5/mJBbdSGOba ZcUp2xu84GdeUQc/679LgNRrhzp5a6UT3fUJb8tMPigrdgAgsnF/t5K2ssvFhCEUgktf JmIQ==
X-Gm-Message-State: AJaThX51uCyPBc1p5hbfpkEa5S4Xr4ke/hMU2RpY0laLPr/9Sy38kbIg dfmYjgUtS+F8OtH6c0stgkqLO5zBIn12eQe+4TNz6Q==
X-Google-Smtp-Source: AGs4zMYvq8ZUGU5odyVGwwZfBruMXq8OrRQ/2WGDVpmoZdGjezkbZNQPmeOJyr5VCiscHMNkBKrod9biQK/Jeb0sgII=
X-Received: by 10.37.20.193 with SMTP id 184mr3342660ybu.400.1510472393896; Sat, 11 Nov 2017 23:39:53 -0800 (PST)
MIME-Version: 1.0
Received: by 10.129.61.12 with HTTP; Sat, 11 Nov 2017 23:39:13 -0800 (PST)
In-Reply-To: <CABcZeBO0TD0KnpTfe6CbHUoiS=FmGiGW6r_mFMH_9bYFWKqKLA@mail.gmail.com>
References: <151036581280.449.10740505473540594433.idtracker@ietfa.amsl.com> <CE03DB3D7B45C245BCA0D243277949362FD495EF@MX307CL04.corp.emc.com> <CABcZeBPfk6Pi=_UPvTBaS9jQBYjExUdqkdX5Q--iUuyCv_qZtw@mail.gmail.com> <CAJU8_nWpVhm4oTT+SLyG-nk=ww7nBU-DaVe86rUU-LGGqJvHvQ@mail.gmail.com> <CABcZeBO0TD0KnpTfe6CbHUoiS=FmGiGW6r_mFMH_9bYFWKqKLA@mail.gmail.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Sun, 12 Nov 2017 07:39:13 +0000
Message-ID: <CABcZeBNp=1c1cx0+nJezjWy_Q4N9-PUeQuqOU_k7A7KhRj18EQ@mail.gmail.com>
To: Kyle Rose <krose@krose.org>
Cc: "Black, David" <David.Black@dell.com>, The IESG <iesg@ietf.org>, "draft-ietf-tcpinc-tcpeno@ietf.org" <draft-ietf-tcpinc-tcpeno@ietf.org>, "tcpinc-chairs@ietf.org" <tcpinc-chairs@ietf.org>, "tcpinc@ietf.org" <tcpinc@ietf.org>
Content-Type: multipart/alternative; boundary="001a113e72b67b4f11055dc44261"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tcpinc/kS0xaRu_7aRsDdaiM4RYBJBXr5c>
Subject: Re: [tcpinc] Eric Rescorla's Discuss on draft-ietf-tcpinc-tcpeno-13: (with DISCUSS and COMMENT)
X-BeenThere: tcpinc@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Working group mailing list for TCP Increased Security \(tcpinc\)" <tcpinc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tcpinc>, <mailto:tcpinc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tcpinc/>
List-Post: <mailto:tcpinc@ietf.org>
List-Help: <mailto:tcpinc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpinc>, <mailto:tcpinc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 12 Nov 2017 07:39:57 -0000

Sorry, "not an unreasonable desire"

On Sun, Nov 12, 2017 at 7:21 AM, Eric Rescorla <ekr@rtfm.com> wrote:

>
>
> On Sun, Nov 12, 2017 at 7:19 AM, Kyle Rose <krose@krose.org> wrote:
>
>> On Sun, Nov 12, 2017 at 1:13 PM, Eric Rescorla <ekr@rtfm.com> wrote:
>> > On Sun, Nov 12, 2017 at 5:08 AM, Black, David <David.Black@dell.com>
>> wrote:
>> >> - Encryption: The intent is - don't use anything weaker than AES-128,
>> >> e.g., don't even think about using 3DES.  The concern is how to write
>> that
>> >> requirement in a way that would survive hypothetical discovery of a
>> >> catastrophic cryptanalytic attack on AES-128.
>> >
>> >
>> > Or even a small one. I mean, what does this say about Curve25519 or 4Q.
>>
>> I think this is actually the issue driving the vagueness of the
>> requirement: e.g., if some hypothetical attack against AES-128 reduced
>> security by a few bits. The intent, as David suggests, is to prohibit
>> the use of something like DES, not to prohibit a 128-bit cipher with
>> only (say) 125 bits of security.
>>
>
> That's not a reasonable desire, but this is an RFC 2119 requirement, so it
> really does need to be unambiguous.
>
> -Ekr
>
>

v2.23.0 | Report a Bug | By Email