IETF Logo Mail Archive

Re: [TLS] Inclusion of OCB mode in TLS 1.3

Aaron Zauner <azet@azet.org> Tue, 20 January 2015 19:18 UTC

Return-Path: <azet@azet.org>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4AC01B2ADC for <tls@ietfa.amsl.com>; Tue, 20 Jan 2015 11:18:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_52=0.6, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eOFh9O3-zAQC for <tls@ietfa.amsl.com>; Tue, 20 Jan 2015 11:18:14 -0800 (PST)
Received: from mail-wi0-f174.google.com (mail-wi0-f174.google.com [209.85.212.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C9D91ACDB2 for <tls@ietf.org>; Tue, 20 Jan 2015 11:18:14 -0800 (PST)
Received: by mail-wi0-f174.google.com with SMTP id n3so6818030wiv.1 for <tls@ietf.org>; Tue, 20 Jan 2015 11:18:12 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:references :mime-version:content-type:content-disposition:in-reply-to :user-agent; bh=mOlRhzVSdEa35QgfNO57CrOmQ4qWd1ELBc7sMwKvcOo=; b=l+aXHEJFy7dtG1fT1CMN5LVXJuOwuIdAJZjJnX60EGWUQu8/jmVdCrdJo5Eh2yUXaV 2508Ow/3HK/+fa4fqmB44ORexTqNUAvPKkQzJsDCLz6tRY4819sf7eoPRY8IIwMyry/Q Rs5ZT2ft2tXEd+v8mZ9JOz6Y8keZgp4IUIrRD2Q2kEFw0CnxOuxH9msCoBujIRIGvB24 dIgdTTYrxCpWraQWVdw/zgtC5llFHYuFzD4uHWBKMJix2XO+gyLe6FfS1L22yITojb8i CcqPjjpZdGkBQrSO+ZF0610mQgUBA1HNSupguG4PhrBin046w6FsdJv7d4mk7z9m54Y2 4jNA==
X-Gm-Message-State: ALoCoQmzCbFQWtTshQMUV/rOMWm80tF/azNF/XWQ1UBLa6UcDqhBoTu6VdcY5hhb8E2y4PbFPngG
X-Received: by 10.180.20.177 with SMTP id o17mr35841535wie.20.1421781490668; Tue, 20 Jan 2015 11:18:10 -0800 (PST)
Received: from typhoon.azet.org (chello080108032135.14.11.univie.teleweb.at. [80.108.32.135]) by mx.google.com with ESMTPSA id hn2sm22470737wjc.5.2015.01.20.11.18.08 for <tls@ietf.org> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 20 Jan 2015 11:18:09 -0800 (PST)
Date: Tue, 20 Jan 2015 20:18:21 +0100
From: Aaron Zauner <azet@azet.org>
To: TLS Mailing List <tls@ietf.org>
Message-ID: <20150120191819.GA8165@typhoon.azet.org>
References: <54B5501A.4070402@azet.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="VS++wcV0S1rZb1Fb"
Content-Disposition: inline
In-Reply-To: <54B5501A.4070402@azet.org>
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/eaENzdpfR2o9pd2aFJ-s-tgC-Gc>
Subject: Re: [TLS] Inclusion of OCB mode in TLS 1.3
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Jan 2015 19:18:16 -0000

Hi TLS-WG,

The Internet Draft can be found over here:
https://datatracker.ietf.org/doc/draft-zauner-tls-aes-ocb/

Further discussion very welcome.

One of the things I have in mind, right now there're two PSK
ciphersuites defined (that I defined because they're in CCM and GCM
as well) that do not make much sense in my opinion. These are PSK
with DHE. For embedded devices the use of ECDHE is for sure more
suitable. So removing those would be an option. Right now this ID
would add twelve (12) new ciphersuites to the TLS ciphersuite
registry, if we /can/ get rid of these two we're down to ten (10).

As always; any input appreciated,
Aaron

v2.23.0 | Report a Bug | By Email