Re: [TLS] WGLC for rsa-aes-gcm and ecc-new-mac

["Blumenthal, Uri" <uri at ll.mit.edu>]

And the point of mixing an RSA-based suite into an ECC-based draft would be..?   The idea is to move from RSA to ECC.

-----Original Message-----
From: tls-bounces at ietf.org [mailto:tls-bounces at ietf.org] On Behalf Of Bodo Moeller
Sent: Wednesday, February 13, 2008 12:52 AM
To: Pasi.Eronen at nokia.com
Cc: tls at ietf.org
Subject: Re: [TLS] WGLC for rsa-aes-gcm and ecc-new-mac

On Tue, Feb 12, 2008 at 02:42:03PM +0200, Pasi.Eronen at nokia.com wrote:

> This message starts a WG last call on the following two drafts:
>
>   draft-ietf-tls-rsa-aes-gcm-02
>   draft-ietf-tls-ecc-new-mac-04
>
> prior to sending them to the IESG for publication as Proposed
> Standard (rsa-aes-gcm) and Informational (ecc-new-mac).
>
> Please send your comments to the WG mailing list by Wednesday
> March 5th. [...]

Given the form of rfc4346-bis that has now evolved, the ecc-new-mac
specification really should include ECDHE_RSA versions of the
ciphersuites that it specifies -- i.e., ciphersuites relying on RSA
for server authentication (since this is what the current base of
installed certificates mostly offers) but on ECDH for forward secrecy.

(Using the RFC 4492 ciphersuite for this purpose would mean using
the legacy TLS PRF.)

For sake of completeness, one might also want to add ECDH_RSA to the
picture.

So I don't really agree with draft-ietf-tls-ecc-new-mac-## unless the
following ciphersuites are added, since I wouldn't really like to see
yet another boring ciphersuite specification just to cover these:

       CipherSuite TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256  = {0xXX,XX};
       CipherSuite TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384  = {0xXX,XX};

       CipherSuite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256  = {0xXX,XX};
       CipherSuite TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384  = {0xXX,XX};

... plus optionally:

       CipherSuite TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256   = {0xXX,XX};
       CipherSuite TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384   = {0xXX,XX};

       CipherSuite TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256   = {0xXX,XX};
       CipherSuite TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384   = {0xXX,XX};

, all with the obvious semantics.

Bodo

_______________________________________________
TLS mailing list
TLS at ietf.org
http://www.ietf.org/mailman/listinfo/tls
_______________________________________________
TLS mailing list
TLS at ietf.org
http://www.ietf.org/mailman/listinfo/tls