Re: [TLS] Clarifications and questions: TLS1.3

On Tue, May 27, 2014 at 6:56 AM, Eric Rescorla <ekr@rtfm.com> wrote:
>
>
>
> On Tue, May 27, 2014 at 6:43 AM, Blumenthal, Uri - 0558 - MITLL
> <uri@ll.mit.edu> wrote:
>>
>> >...... Could someone confirm
>> >"removing static RSA" results in removing the use of  RSA as a key
>> >transport mechanism from 1.3 (e.g. as defined in section 7.4.7.1 of
>> >TLS1.2 - basically removing this section and prohibiting "rsa" and
>> >"rsa_psk"  as key exchange algorithms)?
>> >
>> >To go further and take this up from specific cryptography - will/should
>> >TLS 1.3 prohibit *any* Key Transport mechanism and retain only Key
>> >Agreement mechanisms for key exchange?
>>
>> What would be the consequences of this decision for embedded servers that
>> may not have a good source of randomness to meaningfully engage in
>> [EC]DH[E]?
>
>
> They will be in trouble. However, presumably if they have a place to store
> their private key, they can somehow store other random data there that
> they use to generate random values, no?

But then they can store an incrementing counter for use with AES with
a fixed key as a RNG. I don't see the problem here.
>
> -Ekr
>
>>
>> _______________________________________________
>> TLS mailing list
>> TLS@ietf.org
>> https://www.ietf.org/mailman/listinfo/tls
>>
>
>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>


-- 
"Those who would give up Essential Liberty to purchase a little
Temporary Safety deserve neither  Liberty nor Safety."
-- Benjamin Franklin

Re: [TLS] Clarifications and questions: TLS1.3 - Static RSA and AEAD