Re: [TLS] Are the AEAD cipher suites a security trade-off win with TLS1.2?

Colm MacCárthaigh <colm@allcosts.net> Wed, 16 March 2016 16:54 UTC

MIME-Version: 1.0
In-Reply-To: <CA+cU71mRGgRqFvT85ascQ6FmSuubNSifVLpw131GHBO5qf2M7g@mail.gmail.com>
References: <CAAF6GDekw3stfYGd1q+Zzde--g5M0h9ZTWrVLVJxEwp+frQTHQ@mail.gmail.com> <CA+cU71mRGgRqFvT85ascQ6FmSuubNSifVLpw131GHBO5qf2M7g@mail.gmail.com>
Date: Wed, 16 Mar 2016 12:54:05 -0400
Message-ID: <CAAF6GDdzE8_uxtJ0TOmje4Uh2VdXEyiUDBmpaXZjwZUpeAQJxA@mail.gmail.com>
From: Colm MacCárthaigh <colm@allcosts.net>
To: Tom Ritter <tom@ritter.vg>
Content-Type: multipart/alternative; boundary="001a114e3f989b99b7052e2d5c7e"
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/3L4JlDUlpEhfiSTbGwzUas_si38>
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] Are the AEAD cipher suites a security trade-off win with TLS1.2?
Precedence: list

On Wed, Mar 16, 2016 at 12:45 PM, Tom Ritter <tom@ritter.vg> wrote:

> If a site wants to actively do something to make length-hiding harder
> - to the point where they're go in and prefer CBC ciphersuites - why
> not just add 5 lines of code to a header template, to insert some
> random data in a HTML comment?
>

Length hiding is a game of costs, doing more can always help. But one of
the benefits of being able to do it at the TLS layer  is that it also helps
you hide the length of the request.

I'm one of the biggest proponents for padding in TLS 1.3... and hope
> to see it used to make deployments of length-hiding and traffic
> analysis harder, so the HTML comment or similar tricks would be
> easier, more robust, and not require site modifications.  But I don't
> think going back to CBC mode is a good idea.
>

Why?

-- 
Colm

[TLS] Are the AEAD cipher suites a security trade… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Tom Ritter
Re: [TLS] Are the AEAD cipher suites a security t… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Alexandre Anzala-Yamajako
Re: [TLS] Are the AEAD cipher suites a security t… Paterson, Kenny
Re: [TLS] Are the AEAD cipher suites a security t… Adam Langley
Re: [TLS] Are the AEAD cipher suites a security t… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Salz, Rich
Re: [TLS] Are the AEAD cipher suites a security t… Benjamin Beurdouche
Re: [TLS] Are the AEAD cipher suites a security t… Martin Rex
Re: [TLS] Are the AEAD cipher suites a security t… Martin Rex
Re: [TLS] Are the AEAD cipher suites a security t… Peter Gutmann
Re: [TLS] Are the AEAD cipher suites a security t… Harlan Lieberman-Berg
Re: [TLS] Are the AEAD cipher suites a security t… Eric Rescorla
Re: [TLS] Are the AEAD cipher suites a security t… Peter Gutmann