Re: [TLS] WGLC for rsa-aes-gcm and ecc-new-mac

[Bodo Moeller <bmoeller at acm.org>]

On Tue, Feb 12, 2008 at 02:42:03PM +0200, Pasi.Eronen at nokia.com wrote:

> This message starts a WG last call on the following two drafts:
> 
>   draft-ietf-tls-rsa-aes-gcm-02
>   draft-ietf-tls-ecc-new-mac-04
> 
> prior to sending them to the IESG for publication as Proposed 
> Standard (rsa-aes-gcm) and Informational (ecc-new-mac).
> 
> Please send your comments to the WG mailing list by Wednesday 
> March 5th. [...]

Given the form of rfc4346-bis that has now evolved, the ecc-new-mac
specification really should include ECDHE_RSA versions of the
ciphersuites that it specifies -- i.e., ciphersuites relying on RSA
for server authentication (since this is what the current base of
installed certificates mostly offers) but on ECDH for forward secrecy.

(Using the RFC 4492 ciphersuite for this purpose would mean using
the legacy TLS PRF.)

For sake of completeness, one might also want to add ECDH_RSA to the
picture.

So I don't really agree with draft-ietf-tls-ecc-new-mac-## unless the
following ciphersuites are added, since I wouldn't really like to see
yet another boring ciphersuite specification just to cover these:

       CipherSuite TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256  = {0xXX,XX};
       CipherSuite TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384  = {0xXX,XX};

       CipherSuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256  = {0xXX,XX};
       CipherSuite TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384  = {0xXX,XX};

... plus optionally:

       CipherSuite TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256   = {0xXX,XX};
       CipherSuite TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384   = {0xXX,XX};

       CipherSuite TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256   = {0xXX,XX};
       CipherSuite TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384   = {0xXX,XX};

, all with the obvious semantics.

Bodo

_______________________________________________
TLS mailing list
TLS at ietf.org
http://www.ietf.org/mailman/listinfo/tls