IETF Logo Mail Archive

Re: [TLS] TLS 1.3 - Support for compression to be removed

Kurt Roeckx <kurt@roeckx.be> Tue, 22 September 2015 20:59 UTC

Return-Path: <kurt@roeckx.be>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8883A1B2E3E for <tls@ietfa.amsl.com>; Tue, 22 Sep 2015 13:59:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6p7BwaRRbepl for <tls@ietfa.amsl.com>; Tue, 22 Sep 2015 13:59:33 -0700 (PDT)
Received: from defiant.e-webshops.eu (defiant.e-webshops.eu [82.146.122.140]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0E641A1B30 for <tls@ietf.org>; Tue, 22 Sep 2015 13:59:32 -0700 (PDT)
Received: from intrepid.roeckx.be (localhost [127.0.0.1]) by defiant.e-webshops.eu (Postfix) with ESMTP id CB8FD1C2132; Tue, 22 Sep 2015 22:59:30 +0200 (CEST)
Received: by intrepid.roeckx.be (Postfix, from userid 1000) id 9065C1FE00FD; Tue, 22 Sep 2015 22:59:30 +0200 (CEST)
Date: Tue, 22 Sep 2015 22:59:30 +0200
From: Kurt Roeckx <kurt@roeckx.be>
To: Jeffrey Walton <noloader@gmail.com>
Message-ID: <20150922205930.GA12442@roeckx.be>
References: <20150922132321.17789008.2591.24358@ll.mit.edu> <CAHOTMV+riEzyYQcDfh4mMRokivCD_6T=ErTKF+BP41xABWEG8A@mail.gmail.com> <56019B0F.3020208@trigofacile.com> <201509221423.38061.davemgarrett@gmail.com> <56019FEE.5010008@trigofacile.com> <a3e83d0bbb994343b6715c958422438f@ustx2ex-dag1mb1.msg.corp.akamai.com> <CAH8yC8kotbP2L8phU9inQ63aivq+KYfo414TGH-aT_Zczu8AGg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CAH8yC8kotbP2L8phU9inQ63aivq+KYfo414TGH-aT_Zczu8AGg@mail.gmail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/99zjB1qLreFbHGOZXza0JVBu9hg>
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] TLS 1.3 - Support for compression to be removed
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Sep 2015 20:59:34 -0000

On Tue, Sep 22, 2015 at 02:56:36PM -0400, Jeffrey Walton wrote:
> 
> If compression increases entropy, then one could argue its a desired
> service with security benefits.

Compression does not change the total amount of entropy.  It has
the same entropy but in less bits, so you increase the density.

The security should not depend on the entropy density.  After the
encryption you should not be able to tell what the density was.


Kurt

v2.30.2 | Report a Bug | By Email | System Status