Re: [TLS] AES-OCB in TLS [New Version Notification for draft-zauner-tls-aes-ocb-03.txt]

[Hubert Kario <[e-mail]>]

On Monday 01 June 2015 14:37:16 Aaron Zauner wrote:
> Hi Ekr,
> 
> Eric Rescorla wrote:
> > On Mon, Jun 1, 2015 at 5:06 AM, Aaron Zauner <[e-mail]
> > 
> > <mailto:[e-mail]>> wrote:
> >      * I'd also like to get rid of ECDSA ciphersuites alltogether, ideally
> >      
> >        leaving a few real-world, high-performance ciphersuites to use
> > 
> > I don't understand this point: ECDSA cipher suites are the ones with the
> > best performance at present.
> 
> Firstly, as far as I know it's also quite difficult to get ECDSA
> certificates in the wild. Has this changed significantly over the past
> couple of months? 

yes, it has. If you ask specifically for them, you can get ECDSA certs signed 
by ECDSA roots. About 5% of servers in Alexa top 1 million use ECDSA certs 
trusted by Firefox.

> Second - there's a current draft on EdDSA, which I'd
> prefer over ECDSA, if somehow possible. I'm more about minimizing the
> list of cipher-suites this draft introduces than to point out that I
> dislike a particular signature schemes.

for now it looks like it will use ECDSA codepoints, it will just use signature 
algorithms extension to switch ECDSA to EdDSA.

-- 
Regards,
Hubert Kario
Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic