[TLS] 'ECC Cipher Suites for TLS' (changes from ver 12)

This note is a follow up to a prior message

http://www1.ietf.org/mail-archive/web/tls/current/msg00489.html

describing some of the changes (from draft-ietf-tls-ecc-12.txt)
that will appear in the RFC.

Recently, we discovered another inconsistency in the latest
draft and have received permission from Eric and Russ to
fix it during AUTH48.

The change is as follows (further details included below):

         struct {
-           NamedCurve elliptic_curve_list<1..2^8-1>
+           NamedCurve elliptic_curve_list<1..2^16-1>
         } EllipticCurveList;

vipul

--------------------------------------------
[Eric's message]

> From: Eric Rescorla <ekr@networkresonance.com>
> Date: March 27, 2006 10:15:41 AM PST
> Subject: Re: 'ECC Cipher Suites for TLS' to Informational RFC
>
> This works for me.
>
> -Ekr

[Message from Russ (includes our original request and justification)]

> From: Russ Housley <housley@vigilsec.com>
> Date: March 29, 2006 6:36:04 AM PST
> Subject: Re: 'ECC Cipher Suites for TLS' to Informational RFC
>
> I see no problem making this correction.  However, please post a  
> message to the TLS WG mail list to notify everyone that this will  
> happen.
>
> Russ
>
> At 06:23 PM 3/24/2006, Vipul Gupta wrote:
>> Hi Eric, Pasi, Sam and Russ,
>>
>>   We (the authors and implementers on the cc list)
>> have recently become aware of an inconsistency
>> in the latest version of the specification and seek
>> your permission to fix it during the AUTH48 period.
>>
>> When going from draft-ietf-tls-ecc-10.txt to
>> draft-ietf-tls-ecc-11.txt, the encoding of named
>> curves was changed from 1 byte to 2 bytes in response
>> to WG feedback. However, the corresponding change
>> in the encoding of the EllipticCurveList length
>> from 1 to 2 bytes was reflected in the examples
>> but not in the EllipticCurveList definition. This
>> made the examples in Section 5.1.1 inconsistent
>> with the adjacent text. We propose fixing the text
>> as follows:
>>
>>         struct {
>> -           NamedCurve elliptic_curve_list<1..2^8-1>
>> +           NamedCurve elliptic_curve_list<1..2^16-1>
>>         } EllipticCurveList;
>>
>> This change is consistent with the implementation
>> plans for Microsoft, Redhat, Sun and OpenSSL.
>>
>> We'd appreciate a quick response so we can bring
>> this resolution to the attention of other folks who
>> might be implementing this specification. Thank you
>> for your time.
>>
>> vipul
>>

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls