[TLS] Question for TLS1.2 AEAD cipher

Dana Zhao <dzhao@certicom.com> Fri, 06 July 2007 15:48 UTC

Return-path: <tls-bounces@lists.ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6q37-0005Lz-6H; Fri, 06 Jul 2007 11:48:49 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6q35-0005Aa-VQ for tls@lists.ietf.org; Fri, 06 Jul 2007 11:48:47 -0400
Received: from mail.ca.certicom.com ([38.113.160.197]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I6q31-0005W4-Kl for tls@lists.ietf.org; Fri, 06 Jul 2007 11:48:47 -0400
Received: from spamfilter.certicom.com (localhost.localdomain [127.0.0.1]) by mail.ca.certicom.com (Postfix) with ESMTP id 5E4AB10027FEB for <tls@lists.ietf.org>; Fri, 6 Jul 2007 07:49:34 -0400 (EDT)
Received: from mail.ca.certicom.com ([127.0.0.1]) by spamfilter.certicom.com (storm.certicom.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sta7Yavv1-5G for <tls@lists.ietf.org>; Fri, 6 Jul 2007 07:49:32 -0400 (EDT)
Received: from domino1.certicom.com (domino1.certicom.com [10.0.1.24]) by mail.ca.certicom.com (Postfix) with ESMTP for <tls@lists.ietf.org>; Fri, 6 Jul 2007 07:49:32 -0400 (EDT)
To: tls@lists.ietf.org
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.5.5 November 30, 2005
Message-ID: <OF98D418BC.30F1E60D-ON85257310.00560B28-85257310.0056DCEE@certicom.com>
From: Dana Zhao <dzhao@certicom.com>
Date: Fri, 06 Jul 2007 11:45:01 -0400
X-MIMETrack: Serialize by Router on Certicom1/Certicom(Release 7.0.2FP1|January 10, 2007) at 07/06/2007 11:44:44 AM, Serialize complete at 07/06/2007 11:44:44 AM
X-Spam-Score: 0.3 (/)
X-Scan-Signature: 52f7a77164458f8c7b36b66787c853da
Subject: [TLS] Question for TLS1.2 AEAD cipher
X-BeenThere: tls@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/tls>
List-Post: <mailto:tls@lists.ietf.org>
List-Help: <mailto:tls-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============0134221707=="
Errors-To: tls-bounces@lists.ietf.org

Hi Tim and Eric,

I have some questions in draft-ieft-tls-rfc4346-bis-03.txt, TLS version 
1.2,  6.2.3.3 AEAD ciphers.

1. "opaque IV[SecurityParameters.iv_length]". Is IV encrypted? If so, how 
can the receiver use the IV to decrypt? I guess IV is in plain text, 
right?

2. The additional data for encryption and decryption should be the same. 
While we find that the additional data for encryption contains seq_num and 
the additional data for decryption does not contain seq_num.

3. IV length and Tag length. Is there standard IV length and Tag length? 
If not, when the receiver get the message, how does he know which part is 
IV and which part is aead_output? Also, the receiver needs to know the tag 
length for decryption.

4. On page 22, "Note that in many cases it is appropriate to use the 
partially implicit nonce technique of S 3.2.1 of AEAD", there is not such 
section 3.2.1 in Authenticated Encryption draft-mcgrew-auth-enc-00.txt.

5. How to choose the IV? Is IV of the following format?
    |--- client(server)_write_iv-----|------counter----------|

Thank you very much!

Dana
_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls