IETF Logo Mail Archive

Re: [TLS] Negotiated Discrete Log DHE revision [was: Re: Confirming Consensus on removing RSA key Transport from TLS 1.3]

Fedor Brunner <fedor.brunner@azet.sk> Wed, 09 April 2014 12:44 UTC

Return-Path: <fedor.brunner@azet.sk>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D4E91A019E for <tls@ietfa.amsl.com>; Wed, 9 Apr 2014 05:44:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.267
X-Spam-Level:
X-Spam-Status: No, score=-0.267 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HELO_EQ_SK=1.35, HOST_EQ_SK=0.555, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.272, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DGATNpeZPCRX for <tls@ietfa.amsl.com>; Wed, 9 Apr 2014 05:44:40 -0700 (PDT)
Received: from smtp-01-out.s.azet.sk (smtp-07-out.s.azet.sk [91.235.53.32]) by ietfa.amsl.com (Postfix) with ESMTP id 900C11A0136 for <tls@ietf.org>; Wed, 9 Apr 2014 05:44:40 -0700 (PDT)
X-Virus-Scanned: by AntiSpam at azet.sk
Received: from [0.0.0.0] (tor.nordsupport.com [81.7.8.11]) (Authenticated sender: fedor.brunner@azet.sk) by smtp.azet.sk (Postfix) with ESMTPA id E57518B for <tls@ietf.org>; Wed, 9 Apr 2014 14:44:31 +0200 (CEST)
X-SenderID: Sendmail Sender-ID Filter v1.0.0 smtp.azet.sk E57518B
Authentication-Results: smtp.azet.sk; sender-id=fail (NotPermitted) header.from=fedor.brunner@azet.sk; auth=pass (PLAIN); spf=fail (NotPermitted) smtp.mfrom=fedor.brunner@azet.sk
Message-ID: <534540AC.9070404@azet.sk>
Date: Wed, 09 Apr 2014 14:44:28 +0200
From: Fedor Brunner <fedor.brunner@azet.sk>
MIME-Version: 1.0
To: tls@ietf.org
References: <AD51D38F-2CFE-4277-854D-C0E56292A336@cisco.com> <20140326211219.27D281AC7D@ld9781.wdf.sap.corp> <20140327095527.5335c7fa@hboeck.de> <533622F3.2090406@fifthhorseman.net> <87eh18xtrl.fsf@alice.fifthhorseman.net>
In-Reply-To: <87eh18xtrl.fsf@alice.fifthhorseman.net>
X-Enigmail-Version: 1.6
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="vj1jDx1HpkpHTreSB0hbQtjcHnnOCkrkH"
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/OLMEVASZu78axHMu8aLI7AjJbGQ
Subject: Re: [TLS] Negotiated Discrete Log DHE revision [was: Re: Confirming Consensus on removing RSA key Transport from TLS 1.3]
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Apr 2014 12:44:45 -0000

Are you refering to Java TLS clients in section 1. Introduction ?

" Some  widely-distributed TLS clients are not capable of DH groups
where p >  1024. "

This limitation has been fixed in Java 8

http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7044060
https://stackoverflow.com/questions/6851461/java-why-does-ssl-handshake-give-could-not-generate-dh-keypair-exception

Fedor


On 08.04.2014 07:41, Daniel Kahn Gillmor wrote:
> On Fri 2014-03-28 21:33:39 -0400, Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:
>> I've submitted an initial stab at a proposal for negotiated discrete log
>> diffie-hellman ciphersuites:
>>
>>  http://tools.ietf.org/html/draft-gillmor-tls-negotiated-dl-dhe-00
> Thanks to feedback from Watson Ladd and Samuel Neves over on the CFRG,
> i've updated the named groups in the above draft.
>
> I've also done another pass over the text:
>
>   https://tools.ietf.org/html/draft-gillmor-tls-negotiated-dl-dhe-01
>
> Comments, questions and critiques welcome.
>
>     --dkg
>
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls

v2.27.6 | Report a Bug | By Email | System Status