RE: [TLS] Issue 56: AES as MTI

["Joseph Salowey \(jsalowey\)" <jsalowey at cisco.com>]

I'm in favor of having AES as the MTI.  I'd have to think a bit more
about whether CBC or GCM is appropriate, but either should be fine.
Initially, I was thinking AES-CBC, because of the reason Eric mentioned.


Joe

> -----Original Message-----
> From: Eric Rescorla [mailto:ekr at networkresonance.com] 
> Sent: Wednesday, September 12, 2007 4:27 PM
> To: Yee, Peter
> Cc: tls at ietf.org
> Subject: Re: [TLS] Issue 56: AES as MTI
> 
> At Wed, 12 Sep 2007 19:27:17 -0400,
> Yee, Peter wrote:
> > 
> > Just AES in general or a specific key size and mode?  I'd generally 
> > favor the move, although I recognize that AES will probably 
> be slower 
> > than RC4 so there will be those who would resist the move.  Despite 
> > that, I'd be in favor of AES-GCM as MTI as it's a whole lot better 
> > than 3DES_EDE_CBC.
> 
> The current algorithm is 3DES_EDE_CBC. I would imagine we 
> would use AES_128_CBC. It's a much easier substitution than 
> GCM and most TLS stacks already support AES-CBC.
> 
> -Ekr
> 
> _______________________________________________
> TLS mailing list
> TLS at lists.ietf.org
> https://www1.ietf.org/mailman/listinfo/tls
> 

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls