Re: [Uta] Artart last call review of draft-ietf-uta-rfc7525bis-09

Peter Saint-Andre <stpeter@stpeter.im> Sat, 30 July 2022 19:41 UTC

Return-Path: <stpeter@stpeter.im>
X-Original-To: uta@ietfa.amsl.com
Delivered-To: uta@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A1E4C15791D; Sat, 30 Jul 2022 12:41:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.811
X-Spam-Level:
X-Spam-Status: No, score=-2.811 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=stpeter.im header.b=jFy4oPfE; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=usAnLfEU
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uF7JY4ELnW_0; Sat, 30 Jul 2022 12:40:58 -0700 (PDT)
Received: from wout4-smtp.messagingengine.com (wout4-smtp.messagingengine.com [64.147.123.20]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87B61C14CF13; Sat, 30 Jul 2022 12:40:58 -0700 (PDT)
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.west.internal (Postfix) with ESMTP id 30983320014C; Sat, 30 Jul 2022 15:40:56 -0400 (EDT)
Received: from mailfrontend2 ([10.202.2.163]) by compute1.internal (MEProxy); Sat, 30 Jul 2022 15:40:56 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=stpeter.im; h=cc :cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to; s=fm1; t=1659210055; x= 1659296455; bh=oOFz6E85ELyiXVZGhmoExxyyKrClVbU6ODcFXkcPDUM=; b=j Fy4oPfEpsqegBlcuIcDpr3ygM8f1L80ZyhZ+aa8JQo1RiAmq//JmN99vjttuiUhT pAxKc/EiXqakM8673S41+iRCexq9Viug8ETGZRbCLjJU9KMQumGaCCd0+2QTeZ4/ cu5RWFTQXu/3EE8AgCWEl8qAksR+0ifewxdLnai/sBTYPjTNKO6e6fZtaQAd5cqt WJx9Hmg2jjpO111A4SLgsuZLgZTa0iCXxq12TFtHUMJmEvfY4LXQ9qSXG/gygA2j pNb25wJKI9nH0ARo9HKxqvF4QYu9/7x+e1AugjfSC+AhlQzEGaWilMhXKRp5uzRN Bd3XbHnMsIusPkAUdWhTw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1659210055; x= 1659296455; bh=oOFz6E85ELyiXVZGhmoExxyyKrClVbU6ODcFXkcPDUM=; b=u sAnLfEUORqp+7pH9isikulTetWtYGHgeILV59BhMadNjpb8sOWTWROSjWdCeJaLi h2a5O7I/uk8s55R0vJnhqAbkD3j1rdkzMl4QLDH+nKH1Gut2XVONrgE4/rMF52/t +eeKKbY+lhcuMbtiaPJFwMrqPJ3VIxY6kiaSsyzEPdUe2Bvbv3vK+Dc7bAwtxH5b IcLfYzPLkNIPcvr9wwFPjWfEwFe/v+v98VTV+F6K4r+W4o8WtQEPaEBcziXOCEmf pVHtyAghPE7Rtey797P+SkyB3jSPHl2yQJSRA5RxSebZAqU2zQ3J2a7WMAf50P3K +U0TVa2mtNAnzksP+XDgA==
X-ME-Sender: <xms:R4nlYqD0zAZecz0KHHcGqnUIr6x9STA1jI_UPx_8EcfB8URuduCvaQ> <xme:R4nlYkgEgpQfrk5wV4yut1TtnPwDspR_EQVLJQeuepxz7-OvnPduk46JJ8jBsyfkY nRwN3Wn-2pogRTkbQ>
X-ME-Received: <xmr:R4nlYtna9GQmuAk1YnpzDedjDeElh28xmcF3YQiSX2UXUcYDQXGo1VdmOfoliuYK>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvfedrvdduledgudegvdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepkfffgggfhffvvehfufgjtgfgse htjeertddtfeejnecuhfhrohhmpefrvghtvghrucfurghinhhtqdetnhgurhgvuceoshht phgvthgvrhesshhtphgvthgvrhdrihhmqeenucggtffrrghtthgvrhhnpedvudegffeuie duffejkedtgfdthfffudeutdekkefggeeuteeltdekfeffvdetheenucevlhhushhtvghr ufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehsthhpvghtvghrsehsthhpvg htvghrrdhimh
X-ME-Proxy: <xmx:R4nlYoyQzyv1AyB8yLehWjkbNyMNdLTTIhsprdOu8pHJ6s9el9B6Jg> <xmx:R4nlYvQXkgiWokToUGsbGJlhpH1njFZasTEmqmUuZtDyVqBoiekahQ> <xmx:R4nlYjYHkBXzoRcB4bijSYgm7CFoGgCTbzSemawdaY7POaATStum_g> <xmx:R4nlYtOiKHQ5uoKNq0EY8aNcKwxlSPOQuXyyTQAabnUiYCMN-fouJw>
Feedback-ID: i24394279:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 30 Jul 2022 15:40:54 -0400 (EDT)
Message-ID: <e7b17bbe-0b6b-2a54-2100-b220a9afa92e@stpeter.im>
Date: Sat, 30 Jul 2022 13:40:52 -0600
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.11.0
Content-Language: en-US
From: Peter Saint-Andre <stpeter@stpeter.im>
To: Cullen Jennings <fluffy@iii.ca>, draft-ietf-uta-rfc7525bis.all@ietf.org
Cc: "art@ietf.org" <art@ietf.org>, last-call@ietf.org, uta@ietf.org
References: <165728991008.45773.10659091812976572509@ietfa.amsl.com> <4c7fcbfe-5055-d33d-e1d1-27e85592551a@stpeter.im> <A0DD6035-C9D1-4FEC-A5E7-7D95FFC55602@iii.ca> <9c9922a8-93b5-611f-6433-dbac122dcc4f@stpeter.im>
In-Reply-To: <9c9922a8-93b5-611f-6433-dbac122dcc4f@stpeter.im>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/uta/OpNZryOHzpddbiGEziy8BQ1iXio>
Subject: Re: [Uta] Artart last call review of draft-ietf-uta-rfc7525bis-09
X-BeenThere: uta@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: UTA working group mailing list <uta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/uta>, <mailto:uta-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/uta/>
List-Post: <mailto:uta@ietf.org>
List-Help: <mailto:uta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/uta>, <mailto:uta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 30 Jul 2022 19:41:03 -0000

On 7/30/22 10:10 AM, Peter Saint-Andre wrote:
> On 7/30/22 9:30 AM, Cullen Jennings wrote:
>>
>>
>>> On Jul 14, 2022, at 1:13 PM, Peter Saint-Andre <stpeter@stpeter.im 
>>> <mailto:stpeter@stpeter.im>> wrote:
>>>
>>>>
>>>> Given the requirements for crypto agility, I think this there should 
>>>> be at
>>>> least one MTI algorithm that does not rely on EC. Pinning all your 
>>>> hopes on a
>>>> single algorithm surely is not the best security advice the IETF can 
>>>> provide.
>>>> If a EC did have a problem, clearly we would want something already 
>>>> build and
>>>> deployed that we could switch too.
>>>
>>> The authors will discuss this and reply again.
>>
>> I just wanted to see if there were any update on this one. I think it 
>> is the most serious concern raised in my review.
> 
> I think the authors might have missed this one in our work on -10. 

Hi again,

The authors have conferred on this and at this time we don't think that 
we can recommend anything other than EC ciphers, for several reasons:

1. DHE negotiation is broken.

2. Static RSA is out of the question.

3. Post-quantum (PQ) methods aren't ready yet.

Our forecast is that a few years from now the PQ methods will be ready 
for recommending in 7525ter, but for now EC is the best we can do.

Peter