Re: [IPsec] I-D Action: draft-ietf-ipsecme-rfc4307bis-06.txt

2016-04-07 Thread Valery Smyslov
After re-reading the draft I think that I'm also a bit unhappy with the way the last table (Section 4.2) is introduced. The draft says that this table is: Recommendation of Authentication Method described in [RFC7427] notation. However, the values from this table are just examples in RFC742

Re: [IPsec] I-D Action: draft-ietf-ipsecme-rfc4307bis-06.txt

2016-04-07 Thread Tero Kivinen
Valery Smyslov writes: > After re-reading the draft I think that I'm also a bit unhappy with > the way the last table (Section 4.2) is introduced. The draft says > that this table is: > >Recommendation of Authentication Method described in [RFC7427] >notation. > > However, the values from

Re: [IPsec] I-D Action: draft-ietf-ipsecme-rfc4307bis-06.txt

2016-04-07 Thread Valery Smyslov
After re-reading the draft I think that I'm also a bit unhappy with the way the last table (Section 4.2) is introduced. The draft says that this table is: Recommendation of Authentication Method described in [RFC7427] notation. However, the values from this table are just examples in RFC74

Re: [IPsec] EdDSA Signatures in IKE

2016-04-07 Thread Yoav Nir
No responses yet... Tero: What would it take to register an “identity” hash function for use with the EdDSA? Yoav > On 5 Apr 2016, at 11:09 AM, Yoav Nir wrote: > > Replying to myself... > > I’ve been told off-list that it didn’t make sense to introduce the hot, new > algorithm as a MAY. The

Re: [IPsec] I-D Action: draft-ietf-ipsecme-rfc4307bis-06.txt

2016-04-07 Thread Paul Wouters
Fine with me Sent from my iPhone > On Apr 7, 2016, at 11:09, Tero Kivinen wrote: > > Valery Smyslov writes: >> After re-reading the draft I think that I'm also a bit unhappy with >> the way the last table (Section 4.2) is introduced. The draft says >> that this table is: >> >> Recommendation

[IPsec] I-D Action: draft-ietf-ipsecme-rfc4307bis-07.txt

2016-04-07 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IP Security Maintenance and Extensions of the IETF. Title : Algorithm Implementation Requirements and Usage Guidance for IKEv2 Authors : Yoav Nir

Re: [IPsec] I-D Action: draft-ietf-ipsecme-rfc4307bis-07.txt

2016-04-07 Thread Paul Wouters
On Thu, 7 Apr 2016, internet-dra...@ietf.org wrote: A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IP Security Maintenance and Extensions of the IETF. Title : Algorithm Implementation Requirements and Usage Gui

Re: [IPsec] EdDSA Signatures in IKE

2016-04-07 Thread Tero Kivinen
Yoav Nir writes: > Tero: What would it take to register an “identity” hash function for > use with the EdDSA? I assume you mean new value for the RFC7427 Hash Algorithm registry? That registry is by expert review, but as "identity" is not necessarely clear enough for the implementors, I would sugg

Re: [IPsec] EdDSA Signatures in IKE

2016-04-07 Thread Yoav Nir
> On 7 Apr 2016, at 6:12 PM, Tero Kivinen wrote: > > Yoav Nir writes: >> Tero: What would it take to register an “identity” hash function for >> use with the EdDSA? > > I assume you mean new value for the RFC7427 Hash Algorithm registry? > That registry is by expert review, but as "identity" is