Subject: Re: PKINIT change request

From: "Douglas E. Engert" <[email-masked]>
Date: Mon, 20 Aug 2001 14:50:26 -0500

Good questions.  It was in a simi-WG last call, as it was waiting
for the Kerberos Revisions and basicly done.  But a new version Since a new 
draft has come out with changes we would still have to have a WG Last call at 
with the final draft. 
 
I am forwarding your note on to the WG and the authors on the list who should 
address your concerns.    

Francois Leclerc wrote:
> 
> Douglas, Jeffrey and Marcus,
> 
> Can you explain to me why in PKINIT draft 8 has no mention of RSA
> exclusion, and why in draft 14 it is excluded from the required list ?
> 
> "3.2.4. Required Algorithms
> 
>     Not all of the algorithms in the PKINIT protocol specification have
>     to be implemented in order to comply with the proposed standard.
>     Below is a list of the required algorithms:
> 
>     * Diffie-Hellman public/private key pairs
>         * utilizing Diffie-Hellman ephemeral-ephemeral mode
>     * SHA1 digest and DSA for signatures
>     * SHA1 digest also for the Checksum in the PKAuthenticator
>     * 3-key triple DES keys derived from the Diffie-Hellman Exchange
>     * 3-key triple DES Temporary and Reply keys"
> 
> My understanding is purely historical, as RSA was encumbered at
> some point.
> 
> How do you use a RSA smart card to initiate PKINIT in a standard
> fashion if the required algorithms are DH and DSA ?
> The requirement from IAB is to use "non-uncumbered algorithms" in
> required implementations.
> 
> DSA has its cryptographic weakness in large use.
> http://www.entrust.com/news/files/02_07_01_696.htm
> RSA is no longer uncumbered. FIPS 186-2 authorize RSA for some
> government applications. The smartcard market is more open on RSA
> than on DSA: if you want 2-factor authentication, with PKI/Kerberos,
> don't you want RSA for cost effectiveness ?
> 
> Currently Schlumberger's smartcard & software does work with both
> Cybersafe's and Microsoft's implementations of the PKINIT drafts.
> 
> Can the PKINIT draft be updated accordingly and add in the required
> algorithms
> "    * SHA1 digest and RSA for signatures" ?
> 
> I understand the draft may be in last call.
> Looking forward to reading you,
> 
> With Regards,
> --FL, CISSP

-- 

 Douglas E. Engert  <[email-masked]>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444