Re: [TLS] GOST in TLS (Re: Inclusion of OCB mode in TLS 1.3)

[Dmitry Belyavsky <[e-mail]>]

Hello Martin,

On Thu, Jan 22, 2015 at 6:33 AM, Martin Rex <[e-mail]> wrote:

> Salz, Rich wrote:
> >
> >> BTW: Amazed to find out that GOST is still in use (and still mandatory
> for
> >> russian gov./banking?).
> >
> > Still in use, and a new version just came out and an OpenSSL ticket filed
> > to support it.
>
> The closest thing to a public specification is a long expired I-D:
>
>   https://tools.ietf.org/html/draft-chudov-cryptopro-cptls-04
>
> with essentially one TLS cipher suite TLS_GOSTR341001_WITH_28147_CNT_IMIT
> that uses an officially deprecated/retired algorithm (R 34.10-2001)
> and lacks the code point assignments that would be necessary for use
> with TLSv1.2.
>
>
> Googling just now, I found what might be a potential spec update:
>
>
> https://www.cryptopro.ru/sites/default/files/products/csp/rus-popov-tls-gost-00-rf.pdf
>
> but I don't understand russian.
>
> The TLS parameters code point assignments in the new document seem to
> be from the private use areas (cptls-04 had kidnapped the cipher suite
> ids).
>
>
Yes, it's a new specification updated for using new GOST signature and
digest alorithms. It does not take into account TLS 1.3 specification at
all.
The R 34.10-2001 algorithm is not deprecated yet but will be deprecate soon.


-- 
SY, Dmitry Belyavsky