Re: [TLS] Suite B compliance of TLS 1.2

Wan-Teh Chang <wtchang@redhat.com> writes:
> At the 2005 RSA Conference, the US National
> Security Agency (NSA) announced Suite B Crytography
> (http://www.nsa.gov/ia/industry/crypto_suite_b.cfm).
> This suite of cryptographic algorithms includes AES,
> ECDSA, ECDH, ECMQV, and SHA-256/SHA-384.
>
> I'm interested in the Suite B compliance of TLS 1.2.
> Simply put, it means the ability to do TLS 1.2 using
> only Suite B algorithms.
>
> The primary goal of TLS 1.2, to remove the protocol's
> dependency on the MD5 and SHA-1 digest algorithms, is
> in line with Suite B compliance.  I'd like to start
> the discussion by proposing additional goals:
> - merge in or reference RFC 4492

Well, I don't mind having an Informative reference
to RFC 4492, but merging it in really isn't appropriate,
since it's at Informational status and TLS 1.2 is of
course Standards Track.

> - add sha384 to the enumerated HashType

This was already decided on at IETF.

> - define cipher suites whose MAC algorithm is Suite B
>    compliant. Since Suite B doesn't include any MAC
>    algorithms and the recent collision attack on SHA-1
>    doesn't extend to HMAC-SHA-1, this goal may be
>    controversial.

I'm not that familiar with Suite B, but if it, as you
say, it doesn't include a MAC algorithm, I'm not sure
what you're suggesting for message integrity.

-Ekr

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls