[TLS] FW: New Version Notification for draft-mattsson-tls-ecdhe-psk-aead-03.txt

John Mattsson <john.mattsson@ericsson.com> Tue, 08 December 2015 09:04 UTC

From: John Mattsson <john.mattsson@ericsson.com>
To: "TLS@ietf.org" <TLS@ietf.org>
Thread-Topic: New Version Notification for draft-mattsson-tls-ecdhe-psk-aead-03.txt
Thread-Index: AQHRMZRg1HPJxqsFKU+gu59ZioJKOJ7Ay4GA
Date: Tue, 08 Dec 2015 09:03:38 +0000
Message-ID: <D28C5A1F.41F4B%john.mattsson@ericsson.com>
References: <20151208084228.3383.88998.idtracker@ietfa.amsl.com>
In-Reply-To: <20151208084228.3383.88998.idtracker@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
user-agent: Microsoft-MacOutlook/14.5.8.151023
Content-Type: text/plain; charset="utf-8"
Content-ID: <E83A80EA58412944BF8DCFFF77ED6878@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/-6rUlJr0Ftn2HgK7k4CowwjbqKE>
Subject: [TLS] FW: New Version Notification for draft-mattsson-tls-ecdhe-psk-aead-03.txt
Precedence: list

Hi,

We have uploaded version 03 of draft-mattsson-tls-ecdhe-psk-aead. Russ
pointed out that the document was totally pointed to TLS 1.2 and that it
made sense to cover both TLS 1.2 and TLS 1.3. We agreed.

The updated version refers to TLS 1.3 [I-D.ietf-tls-tls13] as well as DTLS
1.2 [RFC6347]. It points out the relevant changes between TLS 1.2 and TLS
1.3, i.e. the key derivation and the nonce construction. Am I missing
something else?

“When used in TLS 1.2, the keying material is derived as described in
[RFC5489] and [RFC5246] and nonces are constructed as described in
[RFC5288], and [RFC6655]. When used in TLS 1.3, the keying material
is derived as described in [I-D.ietf-tls-tls13], and the nonces are
constructed as described in [I-D.ietf-tls-tls13].”

3GPP now formally has a dependency on draft-mattsson-tls-ecdhe-psk-aead,
or at least the cipher suites TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 and
TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384.

Cheers,
John

------------------------------------------------------------------
JOHN MATTSSON
MSc Engineering Physics, MSc Business Administration and Economics
Ericsson IETF Security Coordinator
Senior Researcher, Security

On 08/12/15 09:42, "internet-drafts@ietf.org" <internet-drafts@ietf.org>
wrote:

>
>A new version of I-D, draft-mattsson-tls-ecdhe-psk-aead-03.txt
>has been successfully submitted by John Mattsson and posted to the
>IETF repository.
>
>Name:		draft-mattsson-tls-ecdhe-psk-aead
>Revision:	03
>Title:		ECDHE_PSK with AES-GCM and AES-CCM Cipher Suites for Transport
>Layer Security (TLS)
>Document date:	2015-12-08
>Group:		Individual Submission
>Pages:		6
>URL:            
>https://www.ietf.org/internet-drafts/draft-mattsson-tls-ecdhe-psk-aead-03.
>txt
>Status:         
>https://datatracker.ietf.org/doc/draft-mattsson-tls-ecdhe-psk-aead/
>Htmlized:       
>https://tools.ietf.org/html/draft-mattsson-tls-ecdhe-psk-aead-03
>Diff:           
>https://www.ietf.org/rfcdiff?url2=draft-mattsson-tls-ecdhe-psk-aead-03
>
>Abstract:
>   This document defines several new cipher suites for the Transport
>   Layer Security (TLS) protocol.  The cipher suites are all based on
>   the Ephemeral Elliptic Curve Diffie-Hellman with Pre-Shared Key
>   (ECDHE_PSK) key exchange together with the Authenticated Encryption
>   with Associated Data (AEAD) algorithms AES-GCM and AES-CCM.  PSK
>   provides light and efficient authentication, ECDHE provides perfect
>   forward secrecy, and AES-GCM and AES-CCM provides encryption and
>   integrity protection.
>
>                  
>        
>
>
>Please note that it may take a couple of minutes from the time of
>submission
>until the htmlized version and diff are available at tools.ietf.org.
>
>The IETF Secretariat
>

[TLS] FW: New Version Notification for draft-matt… John Mattsson