Re: [TLS] Comments on various things on agenda (Was: Re: TLS Interim - update and agenda)

[Dave Garrett <[e-mail]>]

On Sunday, March 08, 2015 02:03:10 pm Ilari Liusvaara wrote:
> MTI cipher suites:
> ------------------
> I see there being only two realistic AEAD ciphers:
> 
> - AES-GCM (if you have hardware support)
> - Chacha20-Poly1305-AEAD (no need for hardware support)

On this topic, a thought to consider:
If Chacha20-Poly1305-AEAD were made MTI for TLS 1.3, that would greatly increase roll-out of the new cipher. AES-GCM could be listed as SHOULD support. Existing TLS 1.2 implementations generally support it already, so this would most likely provide two cipher suites that most can be expected to have available. On the other hand, if AES-GCM were chosen as MTI, then we would have to rely on merely encouraging implementations to consider alternatives.


Dave