Re: [TLS] 4492bis table 1

Peter Yee <peter@akayla.com> Wed, 22 July 2015 08:56 UTC

User-Agent: Microsoft-MacOutlook/14.5.2.150604
Date: Wed, 22 Jul 2015 01:56:35 -0700
From: Peter Yee <peter@akayla.com>
To: Martin Thomson <martin.thomson@gmail.com>, "tls@ietf.org" <tls@ietf.org>
Message-ID: <D1D4A7A1.12207%peter@akayla.com>
Thread-Topic: [TLS] 4492bis table 1
References: <CABkgnnVq7xFUMwMpc=n4d_cWCgAbcJOpG=OfiCxPmLChFLj_nQ@mail.gmail.com>
In-Reply-To: <CABkgnnVq7xFUMwMpc=n4d_cWCgAbcJOpG=OfiCxPmLChFLj_nQ@mail.gmail.com>
Mime-version: 1.0
Content-type: text/plain; charset="UTF-8"
Content-transfer-encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/ioX-EBSzeX26efh-eF3ylL0WcdQ>
Subject: Re: [TLS] 4492bis table 1
Precedence: list

The current recommendations in NIST SP 800-57 Part 1, Table 2 suggest that
256-bit symmetric strength is matched by ECC strength of 512+ bits.  All
of the ECC sizes given in Table 2 are slightly different than given below,
and most are given as ranges, not single values.

http://csrc.nist.gov/publications/nistpubs/800-57/sp800-57_part1_rev3_gener
al.pdf  (see page 64)

			-Peter

On 7/22/15, 1:36 AM, "TLS on behalf of Martin Thomson"
<tls-bounces@ietf.org on behalf of martin.thomson@gmail.com> wrote:

>Is table 1 correct?
>
>                     +-----------+-----+------------+
>                     | Symmetric | ECC | DH/DSA/RSA |
>                     +-----------+-----+------------+
>                     |     80    | 163 |    1024    |
>                     |    112    | 233 |    2048    |
>                     |    128    | 283 |    3072    |
>                     |    192    | 409 |    7680    |
>                     |    256    | 571 |   15360    |
>                     +-----------+-----+------------+
>
>Aren't we dropping 571?  Can we use values that match up.
>
>Or, drop the table.
>
>_______________________________________________
>TLS mailing list
>TLS@ietf.org
>https://www.ietf.org/mailman/listinfo/tls
>