Re: [TLS] Are the AEAD cipher suites a security trade-off win with TLS1.2?

Alexandre Anzala-Yamajako <anzalaya@gmail.com> Wed, 16 March 2016 16:59 UTC

MIME-Version: 1.0
In-Reply-To: <CA+cU71mRGgRqFvT85ascQ6FmSuubNSifVLpw131GHBO5qf2M7g@mail.gmail.com>
References: <CAAF6GDekw3stfYGd1q+Zzde--g5M0h9ZTWrVLVJxEwp+frQTHQ@mail.gmail.com> <CA+cU71mRGgRqFvT85ascQ6FmSuubNSifVLpw131GHBO5qf2M7g@mail.gmail.com>
From: Alexandre Anzala-Yamajako <anzalaya@gmail.com>
Date: Wed, 16 Mar 2016 17:58:51 +0100
Message-ID: <CAHE9jN2pMFocMwFFocFApRh2eb2PUrdYOP5ibzr7yYhtQVoa-A@mail.gmail.com>
To: Tom Ritter <tom@ritter.vg>
Content-Type: multipart/alternative; boundary="001a1144294cf9b183052e2d6f62"
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/WyID52Bmz8BbNPTU9uzA-rt9-aI>
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] Are the AEAD cipher suites a security trade-off win with TLS1.2?
Precedence: list

IMO, the layer creating the plaintext shouldn't have to pad it for security
that's the job of the TLS layer.
the TLS library should be parameterized by a size range and any plaintext
larger than the range would get chunked up to smaller pieces while anything
smaller would be padded.
The actual value of the range could then be left to be chosen by the caller
since this has an impact not only in security but also in performance.
IIRC this how things are done in MiTLS (https://mitls.org/)


-- 
Alexandre Anzala-Yamajako

[TLS] Are the AEAD cipher suites a security trade… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Tom Ritter
Re: [TLS] Are the AEAD cipher suites a security t… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Alexandre Anzala-Yamajako
Re: [TLS] Are the AEAD cipher suites a security t… Paterson, Kenny
Re: [TLS] Are the AEAD cipher suites a security t… Adam Langley
Re: [TLS] Are the AEAD cipher suites a security t… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Colm MacCárthaigh
Re: [TLS] Are the AEAD cipher suites a security t… Salz, Rich
Re: [TLS] Are the AEAD cipher suites a security t… Benjamin Beurdouche
Re: [TLS] Are the AEAD cipher suites a security t… Martin Rex
Re: [TLS] Are the AEAD cipher suites a security t… Martin Rex
Re: [TLS] Are the AEAD cipher suites a security t… Peter Gutmann
Re: [TLS] Are the AEAD cipher suites a security t… Harlan Lieberman-Berg
Re: [TLS] Are the AEAD cipher suites a security t… Eric Rescorla
Re: [TLS] Are the AEAD cipher suites a security t… Peter Gutmann