Re: [saag] The use of AES-192 and AES-256 in Secure RTP

[Stephen Kent <kent at bbn.com>]

At 3:25 PM -0700 5/3/06, Lakshminath Dondeti wrote:
> Hi Steve,
>
> It all started with David's notes copy-pasted below:
>
> ++++++++
> there has been some interest in using AES with larger key sizes in
> Secure RTP, and some implementations have gone in this direction in
> advance of any specification.  I wrote up an internet draft to fill
> this gap (after trying unsuccessfully to get someone else to write
> it :-) and to provide usage guidance and (eventually) test vectors.
> +++++++
>
> It looks like all we are doing at the IETF is to specify; business 
> as usual :-).  We could add a recommendation along the lines you 
> propose below.
>
> regards,
> Lakshminath

If we decide that we need to specify how to use 256-bit keys, then 
we at least owe it to users to explain why they might not wish to 
take advantage of that capability. So, yes, adding suitable text 
would make me feel more comfortable.

thanks,

Steve