Re: [TLS] Inclusion of OCB mode in TLS 1.3

[Nico Williams <[e-mail]>]

On Wed, Jan 21, 2015 at 04:28:07PM +0000, Salz, Rich wrote:
> > If you don't need to support them all, what's the cost (assuming
> > they are all secure)?
> 
> That's a pretty weighty assumption.  And how do you decide which ones
> you have to support, which are MTI, etc?  How do you advise customers

None would be required to implement.

> to use OCB over their favorite national cipher, like GOST or SEED?  Or
> Camellia?

We wouldn't.  Customers who have to give preference to national
ciphers... would, and presumably the legislation and regulations they
are subject to would say something about cipher modes (or, if not, then
what modes they prefer seems irrelevant since it's just a preference and
the negotiation should just work).

Nico
--