Re: [TLS] Last Call: draft-ietf-tls-rfc4346-bis (The Transport Layer Security (TLS) Protocol Version 1.2) to Proposed Standard

[Eric Rescorla <ekr at networkresonance.com>]

At Tue, 4 Mar 2008 09:58:29 -0800,
Paul Hoffman wrote:
> 
> At 6:19 AM -0500 3/4/08, Rob Dugal wrote:
> >section 7.4.1.4.1
> >
> >Why is SHA-224 not supported as a HashAlgorithm? For completeness 
> >shouldn't TLS 1.2 support all the SHA-2 algorithms?
> 
> Not everyone agrees with the utility of SHA-224, particularly in a 
> protocol where AES-128 is mandatory to implement.


Indeed. 

If you want a MAC with effective algorithmic security the same as
SHA-256 but shorter, that's what truncated MACs are for.

-Ekr

_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls