[TLS] Re:  draft-badra-tls-psk-new-mac-aes-gcm as WG item

badra@isima.fr Tue, 06 May 2008 15:57 UTC

Return-Path: <tls-bounces@ietf.org>
X-Original-To: tls-archive@ietf.org
Delivered-To: ietfarch-tls-archive@core3.amsl.com
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 383433A6B71; Tue, 6 May 2008 08:57:43 -0700 (PDT)
X-Original-To: tls@core3.amsl.com
Delivered-To: tls@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F239C3A6B71 for <tls@core3.amsl.com>; Tue, 6 May 2008 08:57:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.232
X-Spam-Level:
X-Spam-Status: No, score=-1.232 tagged_above=-999 required=5 tests=[AWL=0.565, BAYES_00=-2.599, HELO_EQ_FR=0.35, MIME_8BIT_HEADER=0.3, SARE_SUB_ENC_UTF8=0.152]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eCKbZ1X5g+g4 for <tls@core3.amsl.com>; Tue, 6 May 2008 08:57:42 -0700 (PDT)
Received: from sp.isima.fr (sp.isima.fr [193.55.95.1]) by core3.amsl.com (Postfix) with ESMTP id EDD133A6830 for <tls@ietf.org>; Tue, 6 May 2008 08:57:41 -0700 (PDT)
Received: from www.isima.fr (www-data@www.isima.fr [193.55.95.79]) by sp.isima.fr (8.13.8/8.13.8) with SMTP id m46GsGdT487552; Tue, 6 May 2008 17:54:16 +0100
Received: from 88.164.98.77 (SquirrelMail authenticated user badra) by www.isima.fr with HTTP; Tue, 6 May 2008 17:53:30 +0200 (CEST)
Message-ID: <51758.88.164.98.77.1210089210.squirrel@www.isima.fr>
In-Reply-To: <87bq3j62io.fsf@mocca.josefsson.org>
References: <1696498986EFEC4D9153717DA325CB727BC503@vaebe104.NOE.Nokia.com><48173B41.5000401@bolyard.com><20080429152618.B25AD5081A@romeo.rtfm.com><48174BB8.7080009@pobox.com><20080429202042.3E54E5081A@romeo.rtfm.com><4817BC5E.5000209@pobox.com><20080430003846.0FA015081A@romeo.rtfm.com><57263.137.194.192.227.1209578312.squirrel@www.isima.fr><1696498986EFEC4D9153717DA325CB72809B90@vaebe104.NOE.Nokia.com> <87bq3j62io.fsf@mocca.josefsson.org>
Date: Tue, 06 May 2008 17:53:30 +0200
From: badra@isima.fr
To: Simon� Josefsson� <simon@josefsson.org>
User-Agent: SquirrelMail/1.4.2
MIME-Version: 1.0
X-Priority: 3
Importance: Normal
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (sp.isima.fr [193.55.95.1]); Tue, 06 May 2008 17:54:16 +0100 (WEST)
Cc: pasi.eronen@nokia.com, � <tls@ietf.org>
Subject: [TLS] Re:  draft-badra-tls-psk-new-mac-aes-gcm as WG item
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: tls-bounces@ietf.org
Errors-To: tls-bounces@ietf.org

Dear Simon,

Thank you for your review.

> The document seems basically done to me, so I'm not sure anyone can
> provide much additional text to it.
>
> However, for the record, I have and will continue to review the
> document.
>
> Badra, there is a problem in the current document.  It is the same
> problem I pointed out for TLS-RSA-AES-GCM: The Galois Counter mode can
> fail to decrypt, and the document needs to describe how that should be
> handled by implementations.  I suggest to adopt the same fix made in
>
> http://www.ietf.org/internet-drafts/draft-ietf-tls-rsa-aes-gcm-03.txt
>
> specifically, to add:
>
>    Implementations MUST send TLS Alert bad_record_mac for all types of
>    failures encountered in processing the AES-GCM algorithm.

I adopted the same text, it is already included in section 2 (at the end).

>
> Thanks,
> Simon

Best regards,
Badra
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls