[secdir] secdir review of draft-ietf-openpgp-camellia-04

Jeffrey Hutzelman <jhutz@cmu.edu> Mon, 30 March 2009 17:52 UTC

Return-Path: <jhutz@cmu.edu>
X-Original-To: secdir@core3.amsl.com
Delivered-To: secdir@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 027DF3A6BBB; Mon, 30 Mar 2009 10:52:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.945
X-Spam-Level:
X-Spam-Status: No, score=-5.945 tagged_above=-999 required=5 tests=[AWL=0.654, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z3Mw5gSzQdwG; Mon, 30 Mar 2009 10:52:38 -0700 (PDT)
Received: from jackfruit.srv.cs.cmu.edu (JACKFRUIT.SRV.CS.CMU.EDU [128.2.201.16]) by core3.amsl.com (Postfix) with ESMTP id 4298B3A6BB4; Mon, 30 Mar 2009 10:52:38 -0700 (PDT)
Received: from MINBAR.FAC.CS.CMU.EDU (MINBAR.FAC.CS.CMU.EDU [128.2.216.42]) (authenticated bits=0) by jackfruit.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id n2UHrYG4016955 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 30 Mar 2009 13:53:34 -0400 (EDT)
Date: Mon, 30 Mar 2009 13:51:13 -0400
From: Jeffrey Hutzelman <jhutz@cmu.edu>
To: iesg@ietf.org, secdir@ietf.org, dshaw@jabberwocky.com, openpgp-chairs@tools.ietf.org
Message-ID: <00542A62F0B6A1F06B80B448@minbar.fac.cs.cmu.edu>
X-Mailer: Mulberry/4.0.8 (Linux/x86)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Scanned-By: mimedefang-cmuscs on 128.2.201.16
Subject: [secdir] secdir review of draft-ietf-openpgp-camellia-04
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Mar 2009 17:52:39 -0000

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

Abstract:
   This document presents the necessary information to use the Camellia
   symmetric block cipher in the OpenPGP protocol.

Camellia is described in RFC3713, OpenPGP in RFC4880.  Pretty much all this 
document does is allocate the algorithm identifiers required to use 
Camellia in OpenPGP.  It also calls out potential interoperability issues 
related to choosing a symmetric cipher for use in an OpenPGP message, and 
has a reasonable security considerations section suggesting steps to be 
taken when choosing an encryption algorithm.

I see no problems with this document.

-- Jeff