Re: [TLS] Ala Carte Cipher suites - was: DSA should die

[Ilari Liusvaara <[e-mail]>]

On Mon, Apr 06, 2015 at 11:18:12PM -0700, Tony Arcieri wrote:
> On Mon, Apr 6, 2015 at 10:51 PM, Yoav Nir <[e-mail]> wrote:
> 
> > This is about UI, not about wire format.
> >
> 
> On Mon, Apr 6, 2015 at 11:09 PM, Brian Smith <[e-mail]> wrote:
> 
> > As far as I understand, that problem doesn't have much to do with the
> > syntax of cipher suites in the ClientHello, because that problem is
> > about describing to your web server software which cipher suites to
> > enable on the server.
> 
> 
> I think some are trying to argue that the problem is deeper than just the
> user interface, but you're both correct in saying that's where the problem
> starts.

Also, the certificate format negotiation is supposedly both via
ciphersuites and an extension. And when you have the same thing in
two places, the relevant question is "which is definitive?".

Also, consider if new signature algorithm needs to be added (e.g.
CFRG picks something EdDSA-like for new signature algorithm).

Also, it is not like existing TLS stacks don't have tables mapping
ciphersuites into their component algorithms, since otherwise
there would be plenty of code duplication.


As for "components are fine but combination is insecure", that would
likely require very odd algorithms, and would likely point to TLS
key derivation being bad anyway.


-Ilari