[TLS] TLS WG Summary

The TLS WG met at 1:00 PM on Wed Mar 22.

Topics covered:

Brian Minard: draft-dugal-tls-ecmqv-00
Brian Minard presented an ECMQV cipher suite for TLS. ECMQV is
an authenticated elliptic curve key establishment protocol that
is part of NSA Suite B. Discussions centered around IPR issues
for ECMQV: Certicom has an IPR statement that includes some
royalty-free licensing, but it's not entirely clear what the
status of certificates containing these keys is. Minard to
check and report back.

Nagendra Modadugu: draft-ietf-tls-ctr-00 
TLS AES Counter Mode is already a work item of the WG. This
document is ready modulo a Security Considerations section.
A new draft will be generated and put out for WG Last Call.

Russ Housley: draft-housley-tls-authz-extns-00
This draft is a mechanism for negotiating the carriage of
some kinds of authentication data (Attribute Certs and
SAML Assertions, etc.) in the TLS handshake. Russ presented
a mechanism for a general payload type for all such data
and then a specific set of extensions for particular types.
This is also intended to resolve last call comments on
draft-santesson-tls-ume, which can use the same payload
type. Stefan Santesson will be drafting the draft for
this payload.

Yngve Petterson: Interoperability
Yngve Petterson presented on a bunch of interop problems 
people are seeing in TLS 1.1, TLS 1.0, and extensions. It's
a bit scary. There was some talk of him doing a draft on
this, but no commitment.

Magnus Westerland: draft-ietf-mmusic-rfc2326bis-12
RTSP makes some innovative uses of TLS. They would like
review. People committed.

EKR: draft-ietf-tls-rfc4346bis-00	
TLS has a charter item for TLS 1.2 which is hash replacements,
in particular for the PRF and digitally-signed messages.
There had been discussion on the mailing list of whether this
was a good idea. There was strong consensus in the room for
both doing TLS 1.2 *and* being able to negotiate new PRFs
such as NIST 800-56 and GOST. We agreed to confirm on the
mailing list. 

-Ekr

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls