Re: [TLS] Inclusion of OCB mode in TLS 1.3

[Aaron Zauner <[e-mail]>]

Nikos Mavrogiannopoulos wrote:
> On Thu, 2015-01-22 at 17:47 +0100, Aaron Zauner wrote:
>> Hi Nikos,
>>
>> Nikos Mavrogiannopoulos wrote:
>>> It will not. However, there will be no PFS fallback if for some reason
>>> there is some attack on ECDHE that is not applicable on DHE. In any case
>>> I don't find the issue critical. Even if removed it's only 2
>>> ciphersuites saved, and we are nowhere close to believing that the
>>> ciphersuite space is close to an end.
>> Yes I agree. The issue I see is that confined/embedded might not have
>> DHE as fallback in any case, because they probably opt to not support it
>> because if plattform constraints.
> 
> Hi,
>  I don't think you should associate TLS-PSK with embedded systems only.
> In RFC7360 you'll see DTLS used with PSK for the radius protocol, which
> is implemented in a bigger variety of systems than embedded.
> 
Did not know this RFC. Thanks for pointing it out.

In the edited/updated ID I've left all the PSK ciphersuites untouched.

Aaron