Re: [TLS] GOST in TLS (Re: Inclusion of OCB mode in TLS 1.3)

[[e-mail] (Martin Rex)]

Dmitry Belyavsky wrote:
> 
> Martin Rex <[e-mail]> wrote:
>>
>> The closest thing to a public specification is a long expired I-D:
>>
>>   https://tools.ietf.org/html/draft-chudov-cryptopro-cptls-04
>>
>> with essentially one TLS cipher suite TLS_GOSTR341001_WITH_28147_CNT_IMIT
>> that uses an officially deprecated/retired algorithm (R 34.10-2001)
>> and lacks the code point assignments that would be necessary for use
>> with TLSv1.2.
>>
>>
>> Googling just now, I found what might be a potential spec update:
>>
>> https://www.cryptopro.ru/sites/default/files/products/csp/rus-popov-tls-gost-00-rf.pdf
>>
>> but I don't understand russian.
>>
>> The TLS parameters code point assignments in the new document seem to
>> be from the private use areas (cptls-04 had kidnapped the cipher suite
>> ids).
>
>
> Yes, it's a new specification updated for using new GOST signature and
> digest alorithms.  It does not take into account TLS 1.3 specification at
> all.

The 2009 spec precluded that a TLS client could offer TLSv1.2 and
GOST in the same ClientHello (due to the lack of code point assignments)


It would really facilitate interop (and review/feedback) when the
new/updated specification could be translated and published in English.


>
> The R 34.10-2001 algorithm is not deprecated yet but will be deprecate soon.

This is how I read and understood this:

  https://tools.ietf.org/html/rfc7091#section-1.1

   GOST R 34.10-2001 is superseded by GOST R 34.10-2012 from 1 January
   2013.  That means that all new systems that are presented for
   certification MUST use GOST R 34.10-2012 and MAY use
   GOST R 34.10-2001 also for maintaining compatibility with existing
   systems.  Usage of GOST R 34.10-2001 in current systems is allowed at
   least for a 5-year period.


Reality does not always follow plans -- similar to the planned published
sunset date (end of 2010) for SHA1-based digital signatures in
US NISTs SP800-57 Part1 rev2 (March 2007)...


-Martin