Re: [TLS] draft-ietf-tls-rfc4346-04 available

["Yngve N. Pettersen" <yngve at opera.com>]

On Tue, 24 Jul 2007 18:28:41 +0200, Eric Rescorla  
<ekr at networkresonance.com> wrote:

> At Tue, 24 Jul 2007 17:25:00 +0200,
> Yngve Nysaeter Pettersen wrote:
> > I think this:
> >
> >   "The client SHOULD also verify that the DH public exponent appears to  
> > be
> > of adequate size."
> >
> > ought to be worded stronger, perhaps something like
> >
> >   "The client SHOULD also verify that the DH public exponent is of
> > equvalent cryptograhic strength as the key used to sign the public key."
>
> I actually do not agree with this position. There are valid reasons
> to use long signing keys and shorter key establishment keys.

Maybe.

Alternatively, I'd like some guidance about how to determine what  
"adequate size" is.


--
Sincerely,
Yngve N. Pettersen

********************************************************************
Senior Developer                     Email: yngve at opera.com
Opera Software ASA                   http://www.opera.com/
Phone:  +47 24 16 42 60              Fax:    +47 24 16 40 01
********************************************************************

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls