[TLS] Summary of MTI discussion

[Joseph Salowey <[e-mail]>]

Below is a summary of the current state of the MTI discussions.   I expect
the details will evolve over time, but some of the main actions are a call
for adoption for the ChaCha20 and Curve25519 drafts and removal of non
elliptic curve DSA from TLS 1.3.  The call for adoptions will come in
separate messages.

Thanks,

J&S

o Symmetric:
        AES-GCM 128 - Consensus  to Support MUST
        ChaCha20-Poly1305 - Consensus seems to be somewhere between a
SHOULD and a MUST
        AES-GCM-256 -  rough consensus for SHOULD to match UTA draft


o Hash:
        SHA-256 - Consensus for MUST
        SHA-384 - rough consensus for SHOULD to match UTA draft


o Key Agreement: ECDH
        P-256 - Consensus for MUST
        25519 - Consensus seems to be somewhere between a SHOULD and a MUST

o Signature:
        DSA - consensus to remove
        RSA - consensus for a MUST but need more detail on hash and
signature algorithms  Perhaps RSA-PSS with SHA-256 and SHA-384
        ECDSA P-256 - seems as if there is a consensus for a MUST, need
more detail on hash and signature algorithms - ECDSA with SHA-256 and
SHA-384
        Other signature algorithms are TBD

Cheers,

Joe