[TLS] Clarify DH calculations

[Eric Rescorla <ekr at networkresonance.com>]

http://www3.tools.ietf.org/wg/tls/trac/ticket/35

Pasi writes:

	IMHO it probably would make sense for a TLS implementation
	to use one of the groups specified in RFC 4306 or 3526,
	instead of e.g.  generating a random prime p (generating
	random primes is kind of slow, and then you have to worry
	about RFC 2785 etc.).
	
	(Would others agree with this recommendation? Should we add
	it to the TLS 1.2 spec?)

This also seems like general crypto advice to me.

Proposed resolution: do nothing.

-Ekr



_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls