Re: [TLS] draft-ietf-tls-rfc4346-04 available

[Eric Rescorla <ekr at networkresonance.com>]

At Tue, 24 Jul 2007 17:25:00 +0200,
Yngve Nysaeter Pettersen wrote:
> 
> On Sun, 08 Jul 2007 16:50:51 +0200, Eric Rescorla  
> <ekr at networkresonance.com> wrote:
> 
> > I just submitted draft-ietf-tls-rfc4346-04.
> >
> > Until it's in the repository, you can find it at:
> > https://svn.resiprocate.org/rep/ietf-drafts/ekr/tls/tls.txt
> >
> > The changes are:
> >
> >      - Added some guidance about checking DH groups and exponents.
> >      [Issues 15 and 43]
> 
> I think this:
> 
>   "The client SHOULD also verify that the DH public exponent appears to be  
> of adequate size."
> 
> ought to be worded stronger, perhaps something like
> 
>   "The client SHOULD also verify that the DH public exponent is of  
> equvalent cryptograhic strength as the key used to sign the public key."

I actually do not agree with this position. There are valid reasons
to use long signing keys and shorter key establishment keys.

-Ekr

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls