IETF Logo Mail Archive

Re: [TLS] Simplifying signature algorithm negotiation

Eric Rescorla <ekr@rtfm.com> Mon, 21 March 2016 02:19 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7167B12D552 for <tls@ietfa.amsl.com>; Sun, 20 Mar 2016 19:19:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sG_dVyvuEWvG for <tls@ietfa.amsl.com>; Sun, 20 Mar 2016 19:19:19 -0700 (PDT)
Received: from mail-yw0-x235.google.com (mail-yw0-x235.google.com [IPv6:2607:f8b0:4002:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A440712D52F for <tls@ietf.org>; Sun, 20 Mar 2016 19:19:19 -0700 (PDT)
Received: by mail-yw0-x235.google.com with SMTP id g127so200872427ywf.2 for <tls@ietf.org>; Sun, 20 Mar 2016 19:19:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=y04j1E9Rv04u5iRdGqIk/EvH7wBAEndSc1gX9rvo3Kk=; b=PiQ9ZDDh9isdE7JhgaviCVGpcReovRlggzvI/ZYWf+KqL9CohsOFWnp8RjHQ0QBuw0 XxUW2B8fdq5slSUH8UphTBNZz75brgv79obJ5VjyT9FmxLg641q0+JhJvK2nJfjD9ui7 9mJlwTPaxKoEtlldGweiA8zJivZ1ESPRAW7mSS7BMHretT1BZ82LqW5uOUqNIw5bz1O8 EKy4FoCGluWGwaWevHU38OMwFoEzwWZJ07eeg2MqZ1DpB0oymj2QKanpr6uVqgnZorCc JiwJ7+oSEHs7ERIDV3dtWgqLlXt/QjsrvSVSrbDw2GUAFGYiRpqT8VsKgNnHvbS058VP 2qRQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=y04j1E9Rv04u5iRdGqIk/EvH7wBAEndSc1gX9rvo3Kk=; b=ODjW286aWfaABGs1ubRzuwtNdXQIqXSS88XeQ6zDhWMauBNgcRIYm/2dBIpUC3haw8 mqybhIEX3BvL+jterM2hXT+R53f/IKetp1uPOyKi3Py8KZSS09checE19KXrLx289U8n uXiBdpN8L5LRUVpbZ/uML5GskH9VSpv/7ipPJiN2EMxlVsvADGyek8+HS4gnIzGVyP/R TrGj91MmExqbe9SlMf1v5w19MY69eeY2S8TSMTGzujWBcK0Lp4o/nuGGsPxkuO8q+AI8 7ZBmSHrgJ9MJqeey37Ph3BLQDRaBafQInf+oZB+dadYHJIAkXnk40TvlutwwIIoreWes GH6Q==
X-Gm-Message-State: AD7BkJIEp7U6GFk4Pn92/LrPLM8S8bhjeyoi/r7eMDbAcBySkpE6zt71voyRUXd8AEuMvseZGt9lBiyKc93CKg==
X-Received: by 10.37.38.197 with SMTP id m188mr11927205ybm.162.1458526758791; Sun, 20 Mar 2016 19:19:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.13.249.5 with HTTP; Sun, 20 Mar 2016 19:18:39 -0700 (PDT)
In-Reply-To: <CAOgPGoAKHPSvgSO9O=FJDLD5EGmFcbfDBimbgPJyQdUUtNUCqw@mail.gmail.com>
References: <CAF8qwaCpYqs7ELDcRzXveLLjpL+d-CmBczkxPweh6_RVE1aDeA@mail.gmail.com> <201601152007.12464.davemgarrett@gmail.com> <CAF8qwaBPsLz-vuOvXGZgxzMpaKHwtZixu7NXzfFN4V_R6WT8Tg@mail.gmail.com> <CABcZeBNipj4oLU=FrTp3+CqTg5bh5vBnd04DoNt56=8BRjqobw@mail.gmail.com> <CAF8qwaDUbLmvzibuC7aedOR5TP6Fv3rNz6ft_v3bKu=FHatYgg@mail.gmail.com> <CABcZeBMGnma86M24hzQw6zmwftMte2Lr34TGuq2pUF0MTGZMUQ@mail.gmail.com> <CAF8qwaDdi9JNNKUCBsuQmw3AssaiKvMgSs_8bCebfmBRdzCAQw@mail.gmail.com> <20160317173436.GA19169@LK-Perkele-V2.elisa-laajakaista.fi> <CABcZeBP+WtXpXMkio+=QbZFrK02YTeKwMyqHcSOqWoFfCYOqLg@mail.gmail.com> <CAOgPGoAKHPSvgSO9O=FJDLD5EGmFcbfDBimbgPJyQdUUtNUCqw@mail.gmail.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Sun, 20 Mar 2016 19:18:39 -0700
Message-ID: <CABcZeBM+Rg99WxKvsgh1eUib6gdPj1v3MVXOwwShAU7oJk-C6A@mail.gmail.com>
To: Joseph Salowey <joe@salowey.net>
Content-Type: multipart/alternative; boundary="001a1143b77e5a9f3a052e85b946"
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/psYWiZ9NfwTmkIRXIgwY8Hz0pRY>
Cc: ekr <notifications@github.com>, "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] Simplifying signature algorithm negotiation
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Mar 2016 02:19:21 -0000

Acknowledged. This will be in draft-12.


On Sun, Mar 20, 2016 at 5:27 PM, Joseph Salowey <joe@salowey.net> wrote:

> No objection,  it looks good.  I don't see any objections on the list so I
> say merge it.
>
> On Sun, Mar 20, 2016 at 10:50 AM, Eric Rescorla <ekr@rtfm.com> wrote:
>
>> It sounds like we have general consensus here. Does anyone object to my
>> merging
>> this PR?
>>
>> -Ekr
>>
>>
>> On Thu, Mar 17, 2016 at 10:34 AM, Ilari Liusvaara <
>> ilariliusvaara@welho.com> wrote:
>>
>>> On Tue, Mar 15, 2016 at 05:37:20PM +0000, David Benjamin wrote:
>>> > On Mon, Mar 14, 2016 at 8:22 PM Eric Rescorla <ekr@rtfm.com> wrote:
>>> >
>>> >
>>> > I would probably characterize it less as suites vs orthogonality, but
>>> as
>>> > wanting to keep divisions in meaningful and universal places and not
>>> > splitting up tightly-coupled decisions. The flexibility from
>>> orthogonality
>>> > can be handy, but going too far---as I believe TLS 1.2 did with
>>> signature,
>>> > prehash, and curve---complicates everything. Imagine if negotiating
>>> > AES_128_GCM required separately negotiating block cipher AES-128, mode
>>> CTR,
>>> > and MAC GHASH.
>>>
>>> It isn't even orthogonal, it is coupled, which is way worse and quite
>>> difficult to implement correctly.
>>>
>>> I now consider the way TLS 1.3 draft / RFC4492bis draft currently does
>>> EdDSA negotiation a bad idea (what is proposed here is vast improvement).
>>>
>>>
>>> -Ilari
>>>
>>
>>
>> _______________________________________________
>> TLS mailing list
>> TLS@ietf.org
>> https://www.ietf.org/mailman/listinfo/tls
>>
>>
>

v2.23.0 | Report a Bug | By Email