[TLS] Suite B compliance of TLS 1.2

[Wan-Teh Chang <[e-mail]>]

At the 2005 RSA Conference, the US National
Security Agency (NSA) announced Suite B Crytography
(http://www.nsa.gov/ia/industry/crypto_suite_b.cfm)
This suite of cryptographic algorithms includes AES,
ECDSA, ECDH, ECMQV, and SHA-256/SHA-384.

I'm interested in the Suite B compliance of TLS 1.2.
Simply put, it means the ability to do TLS 1.2 using
only Suite B algorithms.

The primary goal of TLS 1.2, to remove the protocol's
dependency on the MD5 and SHA-1 digest algorithms, is
in line with Suite B compliance.  I'd like to start
the discussion by proposing additional goals:
- merge in or reference RFC 4492
- add sha384 to the enumerated HashType
- define cipher suites whose MAC algorithm is Suite B
   compliant. Since Suite B doesn't include any MAC
   algorithms and the recent collision attack on SHA-1
   doesn't extend to HMAC-SHA-1, this goal may be
   controversial.

Wan-Teh Chang

_______________________________________________
TLS mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/tls