Re: [TLS] Requesting feedback on TACK draft

["Lewis, Nick" <[e-mail]>]

>While people are looking at that, there's also the encrypt-then-MAC draft,

>http://www.ietf.org/internet-drafts/draft-gutmann-tls-encrypt-then-mac-03.txt,

>which has been stable for about as long, has already been deployed by several vendors,

>and for which TLS extension 0x10 has been de facto claimed,

>so it'd be good to get this published to legitimise the use

>(and to document what's already being deployed in production).

As I recall there were three proposals for resolving the padding bug in TLS


1.       An extension for Pad First (i.e. padding before an otherwise standard TLS mode of operation)

2.       An extension for Encrypt-then-MAC (i.e. this draft)

3.       The replacement of each existing cipher suite with an equivalent AEAD one

Was any consensus achieved as to the best approach?

-- Nick


________________________________
The details of this company are as follows:
G4S Technology Limited, Registered Office: Challenge House, International Drive, Tewkesbury, Gloucestershire GL20 8UQ, Registered in England No. 2382338.

This communication may contain information which is confidential, personal and/or privileged.

It is for the exclusive use of the intended recipient(s).
If you are not the intended recipient(s), please note that any distribution, forwarding, copying or use of this communication or the information in it is strictly prohibited.

Any personal views expressed in this e-mail are those of the individual sender and the company does not endorse or accept responsibility for them.

Prior to taking any action based upon this e-mail message, you should seek appropriate confirmation of its authenticity.

This e-mail has been scanned for all viruses by MessageLabs.