Re: [TLS] I-D Action: draft-ietf-tls-negotiated-ff-dhe-02.txt

[Daniel Kahn Gillmor <[e-mail]>]

On 10/11/2014 12:49 AM, [e-mail] wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
>  This draft is a work item of the Transport Layer Security Working Group of the IETF.
> 
>         Title           : Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS
>         Author          : Daniel Kahn Gillmor
> 	Filename        : draft-ietf-tls-negotiated-ff-dhe-02.txt
> 	Pages           : 24
> 	Date            : 2014-10-10
> 
> Abstract:
>    Traditional finite-field-based Diffie-Hellman (DH) key exchange
>    during the TLS handshake suffers from a number of security,
>    interoperability, and efficiency shortcomings.  These shortcomings
>    arise from lack of clarity about which DH group parameters TLS
>    servers should offer and clients should accept.  This document offers
>    a solution to these shortcomings for compatible peers by using a
>    section of the TLS "EC Named Curve Registry" to establish common DH
>    parameters with known structure and a mechanism for peers to
>    negotiate support for these groups.


This update pushed the proposed syntactic changes to the ff-dhe draft,
dropping the explicit extension and making reuse of the NamedCurves
registry for finite field groups as well.

I'd appreciate any comments or suggestions, and particularly review
related to the IANA considerations would be great.

The xml2rfc source for the draft can be found (among other places) on
github:

 https://github.com/dkg/tls-negotiated-ff-dhe

patches welcome,

	--dkg