Re: [TLS] Clarifications and questions: TLS1.3 - Static RSA and AEAD
Eric Rescorla <ekr@rtfm.com> Tue, 27 May 2014 13:57 UTC
Return-Path: <ekr@rtfm.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 338FD1A0137 for <tls@ietfa.amsl.com>; Tue, 27 May 2014 06:57:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level:
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eAictp8Mlwn7 for <tls@ietfa.amsl.com>; Tue, 27 May 2014 06:57:38 -0700 (PDT)
Received: from mail-wi0-f180.google.com (mail-wi0-f180.google.com [209.85.212.180]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 194661A014C for <tls@ietf.org>; Tue, 27 May 2014 06:57:37 -0700 (PDT)
Received: by mail-wi0-f180.google.com with SMTP id hi2so1764172wib.13 for <tls@ietf.org>; Tue, 27 May 2014 06:57:31 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=qUadrVg+O46nSoBQXw/w3aUTkbiBP7koDB8wIbPNI54=; b=bOKIeox7+oetwH5gezR3epXRv2/Dg9D0I7i4gVhRKKwA+jRON7w9vvV5Q2fv07lTZP HTiV6G5e2SvI1YMCcd9C67084blp0uGH05Ajpkew1RDFE+S0BIrFpF3isSwZeWi83qO4 jXSoVG9GEzKB54MCrlbznPGU/w47slWDl91p7ge8PQEs17JuOV/ONDwaVYOF00kgnJNO 28Cnmig5XrKW1IhCaTLpZp0uyhLurLH9+1I75bRAu6KXkW0mVF8HYSfyFjaWSkkEY9YI /wK7gZ99/VYS1fg5na68pWMU+nJyb8dyZA5Cfvv7DrMkEn8cs4ZCupx9T+oSILbjsyQd BXXA==
X-Gm-Message-State: ALoCoQlSu+yvrUrviuFdlBqvvTYG5lRt6L8h0dT6WC5ZJ8aXPKAYur4LxWDmeCkuJbxShVeGX0sX
X-Received: by 10.194.187.107 with SMTP id fr11mr38127569wjc.70.1401199050622; Tue, 27 May 2014 06:57:30 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.216.218.198 with HTTP; Tue, 27 May 2014 06:56:50 -0700 (PDT)
X-Originating-IP: [74.95.2.168]
In-Reply-To: <CFAA0E43.15C3B%uri@ll.mit.edu>
References: <5383F02F.4050706@nthpermutation.com> <CFAA0E43.15C3B%uri@ll.mit.edu>
From: Eric Rescorla <ekr@rtfm.com>
Date: Tue, 27 May 2014 06:56:50 -0700
Message-ID: <CABcZeBNJkq6us9=1HM28jwNbBDYak=4NiE5QXetJoLZxjSXQ2w@mail.gmail.com>
To: "Blumenthal, Uri - 0558 - MITLL" <uri@ll.mit.edu>
Content-Type: multipart/alternative; boundary="047d7bb03f60ac215c04fa621309"
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/ng4141F9IuWrjWjgcdccpnl9Y6U
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] Clarifications and questions: TLS1.3 - Static RSA and AEAD
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 27 May 2014 13:57:40 -0000
On Tue, May 27, 2014 at 6:43 AM, Blumenthal, Uri - 0558 - MITLL < uri@ll.mit.edu> wrote: > >...... Could someone confirm > >"removing static RSA" results in removing the use of RSA as a key > >transport mechanism from 1.3 (e.g. as defined in section 7.4.7.1 of > >TLS1.2 - basically removing this section and prohibiting "rsa" and > >"rsa_psk" as key exchange algorithms)? > > > >To go further and take this up from specific cryptography - will/should > >TLS 1.3 prohibit *any* Key Transport mechanism and retain only Key > >Agreement mechanisms for key exchange? > > What would be the consequences of this decision for embedded servers that > may not have a good source of randomness to meaningfully engage in > [EC]DH[E]? > They will be in trouble. However, presumably if they have a place to store their private key, they can somehow store other random data there that they use to generate random values, no? -Ekr > _______________________________________________ > TLS mailing list > TLS@ietf.org > https://www.ietf.org/mailman/listinfo/tls > >
- [TLS] Clarifications and questions: TLS1.3 - Stat… Michael StJohns
- Re: [TLS] Clarifications and questions: TLS1.3 - … Eric Rescorla
- Re: [TLS] Clarifications and questions: TLS1.3 - … Michael StJohns
- Re: [TLS] Clarifications and questions: TLS1.3 - … Eric Rescorla
- Re: [TLS] Clarifications and questions: TLS1.3 - … Blumenthal, Uri - 0558 - MITLL
- Re: [TLS] Clarifications and questions: TLS1.3 - … Blumenthal, Uri - 0558 - MITLL
- Re: [TLS] Clarifications and questions: TLS1.3 - … Alyssa Rowan
- Re: [TLS] Clarifications and questions: TLS1.3 - … Eric Rescorla
- Re: [TLS] Clarifications and questions: TLS1.3 - … Blumenthal, Uri - 0558 - MITLL
- Re: [TLS] Clarifications and questions: TLS1.3 - … Watson Ladd
- Re: [TLS] Clarifications and questions: TLS1.3 - … Blumenthal, Uri - 0558 - MITLL
- Re: [TLS] Clarifications and questions: TLS1.3 - … Eric Rescorla
- Re: [TLS] Clarifications and questions: TLS1.3 - … Jakob Breier
- Re: [TLS] Clarifications and questions: TLS1.3 - … Dan Brown
- Re: [TLS] Clarifications and questions: TLS1.3 - … Jakob Breier
- Re: [TLS] Clarifications and questions: TLS1.3 - … Dan Brown
- Re: [TLS] Clarifications and questions: TLS1.3 - … Watson Ladd
- [TLS] IV Generation was: Clarifications and quest… Michael StJohns
- Re: [TLS] Clarifications and questions: TLS1.3 - … Michael StJohns
- Re: [TLS] Clarifications and questions: TLS1.3 - … Blumenthal, Uri - 0558 - MITLL
- Re: [TLS] Clarifications and questions: TLS1.3 - … Michael StJohns
- Re: [TLS] Clarifications and questions: TLS1.3 - … Michael StJohns
- Re: [TLS] Clarifications and questions: TLS1.3 - … Michael StJohns
- Re: [TLS] Clarifications and questions: TLS1.3 - … Michael StJohns
- Re: [TLS] Clarifications and questions: TLS1.3 - … Blumenthal, Uri - 0558 - MITLL
- Re: [TLS] Clarifications and questions: TLS1.3 - … Alyssa Rowan
- Re: [TLS] Clarifications and questions: TLS1.3 - … Andy Lutomirski
- Re: [TLS] Clarifications and questions: TLS1.3 - … Blumenthal, Uri - 0558 - MITLL
- Re: [TLS] IV Generation was: Clarifications and q… Martin Rex
- Re: [TLS] IV Generation was: Clarifications and q… Michael StJohns
- Re: [TLS] IV Generation was: Clarifications and q… Martin Rex
- Re: [TLS] IV Generation was: Clarifications and q… Michael StJohns
- Re: [TLS] IV Generation was: Clarifications and q… Blumenthal, Uri - 0558 - MITLL
- Re: [TLS] IV Generation was: Clarifications and q… Michael StJohns