Re: [TLS] Suite B compliance of TLS 1.2

Brian Minard <bminard@certicom.com> writes:

> On Tue, Jul 25, 2006 at 09:32:28PM -0700, Eric Rescorla wrote:
>
>> Wan-Teh Chang <wtchang@redhat.com> writes:
>>
>> > - define cipher suites whose MAC algorithm is Suite B
>> > compliant. Since Suite B doesn't include any MAC algorithms
>> > and the recent collision attack on SHA-1 doesn't extend to
>> > HMAC-SHA-1, this goal may be controversial.
>>
>> I'm not that familiar with Suite B, but if it, as you say,
>> it doesn't include a MAC algorithm, I'm not sure what you're
>> suggesting for message integrity.
>
> I don't entirely understand these statements. Is there a reason
> why new cipher suites supporting SHA-256, -384, or -512, couldn't
> be defined using the existing HMAC? 
>
> Why doesn't this solve the message integrity issue?

I was wondering the same thing... I.e., why Wan-Teh called
the issue "controversial". Anyway, I was expecting that
there would eventually be HMAC-XXX cipher suites.

-Ekr

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls