IETF Logo Mail Archive

[TLS] Re: AD review of draft-ietf-tls-hybrid-design-12

Paul Wouters <paul.wouters@aiven.io> Wed, 28 May 2025 03:03 UTC

Return-Path: <paul.wouters@aiven.io>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 884D02DA5A8A for <tls@mail2.ietf.org>; Tue, 27 May 2025 20:03:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=aiven.io
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gZyWX3naYEzZ for <tls@mail2.ietf.org>; Tue, 27 May 2025 20:03:30 -0700 (PDT)
Received: from mail-ej1-x631.google.com (mail-ej1-x631.google.com [IPv6:2a00:1450:4864:20::631]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 95A862DA5A81 for <tls@ietf.org>; Tue, 27 May 2025 20:03:30 -0700 (PDT)
Received: by mail-ej1-x631.google.com with SMTP id a640c23a62f3a-ad89c32a7b5so96499666b.2 for <tls@ietf.org>; Tue, 27 May 2025 20:03:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aiven.io; s=google; t=1748401409; x=1749006209; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=hCpBWet61ipS8Eynlm91joG6pyywncMXLjRYAd0TgzE=; b=dus4bXxcdI+uIL7xUl9lyQwFI46OLl4AVOC5G/eJTdVrrgF0d11TB8eXiRJ5ceacQA mZlD9Cldd/Uo92jC9+DDSM3l6Dyn/VaAZB2JsirIfeb3SmA6KD/h/9Lbz9PssAjO1rd3 vxc8aVdYRiu2gZHmrmyXWHlh4yh/lo78cxnkg=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1748401409; x=1749006209; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=hCpBWet61ipS8Eynlm91joG6pyywncMXLjRYAd0TgzE=; b=hnS9yXOKSIZ4XQVkSL7mCkr7SM1z5b252F8PYyg/wvIapICSJC+zeL9UgD0+yRKFCF nE29/X6ATwlOIBYhqiX0nKqxO8y/VIAn8UsJV2BKOKvvzAQzy/OISp5UvyJlucs8bIrk D6bXQqhQaxsMsU4h7Kg1kRnahB8dKWRpGRlbLLWfRmzoz589Yq0lR5C9iQ/KwjlHuSQq K1D4mZYNH9hQqaK4ynUhDsYuNDv33zQDDg2SOz3CTQG7ew8PLv+ao2lznN2CPL8mABpL +1JjSdgZRX3bEfxlrfKjbLYEx/tiUTqwprtzYAa5KV4Jpnf0POkqH//OceEZ3vBbehAi +L+Q==
X-Gm-Message-State: AOJu0YyObFfCp0fKvcxM316Ih9UtQijM77oGuOQU9ccbSvSiSETYhEZY 51uhvW0UjhE7igUo1Wzq9QsUQOgkcJai/NAm6yyQbgcgFtiZGr7/6THak8RxrDIP4+ewo2NSmmX gx4EGoJDWWRTcjtNR7T7l8KLp6Vit4+RaugTUPiOD+g==
X-Gm-Gg: ASbGncvuDwCN8WqGFxw7H6ofF5GSRHLzyvz5M9qnguTtvgtRIWdYgbIRWweCyIUVNyO CClPk3dKEQDCZzTcXj4R/vdMwujpBw43ccUpDlmect3xOeca7Il3gSMbBuR2/HC4O9eLfZLsbCC J1xhGYJZY8ULYDM7MYrrt0bRZp2b/0HQLp+8w=
X-Google-Smtp-Source: AGHT+IE1I6IH3EiQnMprOefEfU4INSZW6hrmdeB1NkKlt7pcBT9FgZoBccESyY6z8ShYTXTlsNaOzgUpp/busWeCBrw=
X-Received: by 2002:a17:907:9404:b0:ad8:9a3b:b26e with SMTP id a640c23a62f3a-ad89a3bb37amr247323166b.56.1748401409662; Tue, 27 May 2025 20:03:29 -0700 (PDT)
MIME-Version: 1.0
References: <CAGL5yWY4EK00tJPhmtoFqVT4mmp=jUH5dZQ9YNwDRfR8QgPH2A@mail.gmail.com> <CABcZeBOGNJt=aC4mdfzFJOA1EyesPHZb7wXM6VAvEiwJoWdZYg@mail.gmail.com>
In-Reply-To: <CABcZeBOGNJt=aC4mdfzFJOA1EyesPHZb7wXM6VAvEiwJoWdZYg@mail.gmail.com>
From: Paul Wouters <paul.wouters@aiven.io>
Date: Tue, 27 May 2025 23:03:17 -0400
X-Gm-Features: AX0GCFvFTcKbP9SR-6_jp4aLLU_AZXpPsRx98JChSpmgA_RoQeWlk4ALEEs5iQA
Message-ID: <CAGL5yWa-SuVsoPBV_+NCQXWZOYaWFhCb+XDkUent1KrufsM2Cw@mail.gmail.com>
To: Eric Rescorla <ekr@rtfm.com>
Content-Type: multipart/alternative; boundary="000000000000f2c1850636296cad"
Message-ID-Hash: FYOWCGNAZUJADNKDNLLQD6MHRSS5VNYJ
X-Message-ID-Hash: FYOWCGNAZUJADNKDNLLQD6MHRSS5VNYJ
X-MailFrom: paul.wouters@aiven.io
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "<tls@ietf.org>" <tls@ietf.org>, dstebila@uwaterloo.ca, shay.gueron@gmail.com
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: AD review of draft-ietf-tls-hybrid-design-12
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/eARG6nHEby89wru_N_X1m5VSlS4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

On Tue, May 27, 2025 at 8:30 PM Eric Rescorla <ekr@rtfm.com> wrote:

>
>
> On Tue, May 27, 2025 at 3:27 PM Paul Wouters <paul.wouters=
> 40aiven.io@dmarc.ietf.org> wrote:
> >    Can we note that Finite-field DH is however, being deprecated in
> >    draft-ietf-tls-deprecate-obsolete-kex. Or perhaps just not even
> mention
> >    finite-field groups anymore?
>
> The terminology is a bit confusing here, because sometimes people use
> "FFDH" to mean static and ephemeral and sometimes they say "FFDH" for
> static and "FFDHE" for ephemeral. In any case,
> draft-ietf-tls-deprecate-obsolete-kex does not deprecate FFDHE for
> TLS 1.3:
>

Oh right. That is only for 1.2. Thanks for pointing that out.

Paul

v2.39.1 | Report a Bug | By Email | System Status