Re: [TLS] TLS1.3

["Dan Harkins" <[e-mail]>]

On Thu, February 7, 2013 7:00 am, Lewis, Nick wrote:
> My only slight concern is the use of the term AEAD for this which implies
> the use of the same key for MAC and crypt. From a TLS perspective it may
> look like AEAD but the ported cipher suites themselves need to take care
> not to use a single key inappropriately

  RFC 5116 defines a uniform interface for cipher modes that use the term
AEAD and RFC 5297 is an AEAD scheme that takes a double-wide key (half
for cipher, half for mac) and fits into the uniform interface (with the
assigned
numbers 15, 16, and 17). Your concern is misplaced; we're already doing
this.

  Dan.