Re: [TLS] Confirming Consensus on supporting only AEAD ciphers

[[e-mail] (Martin Rex)]

Fedor Brunner wrote:
> 
> The Mandatory Cipher Suite for TLS 1.2 was TLS_RSA_WITH_AES_128_CBC_SHA.
> What is the mandatory cipher in TLS 1.3 ?
> 
> Maybe TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 using Curve25519 for
> ECDHE ?

Support for ECC is/was a mere option in TLSv1.2.
The specification of Curve25519 for use with rfc4492 is not yet
standardized, same for ChaCha and Poly1035.

What you're asking for is something that has very little in common
with any prior version of TLS, and in particular ZERO interop with
the currently installed base.

TLSv1.2 (rfc5246) had the intention to be backwards-interoperable
with the installed base (otherwise they would have not added the
silly definition of an (md5,rsa) digital signature to TLSv1.2
(you may want to remove that bogosity from the v1.3 draft),
but the amount of interoperability problems with the installed
base was significantly enough to deter adoption of the protocol
for >4 years.


Looking at the amount of changes that are being considered and
discussed here for TLSv1.3, I would not be surprised if the
resulting adoption rate for TLSv1.3 would make the IPv6 adoption rate
appear blazing fast...


-Martin