Subject: [Ietf-krb-wg] Fwd: New Version Notification for draft-burgin-kerberos-aes-cbc-hmac-sha2-02.txt

From: Kelley Burgin <[email-masked]>
Date: Fri, 19 Oct 2012 16:54:56 -0400

This draft specifies an encryption type needed for the Suite B  
profile. We updated the draft to include the two following major  
changes:

1. The mode is CTS. After a lot of discussion last year with people on  
the mailing list we decided to switch from CBC+PKCS#5 padding

2. We mac the cipher text instead of the plaintext.

We'd appreciate any comments on the drafts.

Kelley

Begin forwarded message:

> From: [email-masked]
> Date: October 19, 2012 4:02:50 PM EDT
> To: [email-masked]
> Cc: [email-masked]
> Subject: New Version Notification for draft-burgin-kerberos-aes-cbc- 
> hmac-sha2-02.txt
>
>
> A new version of I-D, draft-burgin-kerberos-aes-cbc-hmac-sha2-02.txt
> has been successfully submitted by Kelley W. Burgin and posted to the
> IETF repository.
>
> Filename:	 draft-burgin-kerberos-aes-cbc-hmac-sha2
> Revision:	 02
> Title:		 AES Encryption with HMAC-SHA2 for Kerberos 5
> Creation date:	 2012-10-19
> WG ID:		 Individual Submission
> Number of pages: 9
> URL:             http://www.ietf.org/internet-drafts/draft-burgin-kerberos-aes-cbc-hmac-sha2-02.txt
> Status:          http://datatracker.ietf.org/doc/draft-burgin-kerberos-aes-cbc-hmac-sha2
> Htmlized:        http://tools.ietf.org/html/draft-burgin-kerberos-aes-cbc-hmac-sha2-02
> Diff:            http://www.ietf.org/rfcdiff?url2=draft-burgin-kerberos-aes-cbc-hmac-sha2-02
>
> Abstract:
>   This document specifies two encryption types and two corresponding
>   checksum types for Kerberos 5.  The new types use AES in CBC mode
>   with ciphertext stealing for confidentiality and HMAC with a SHA-2
>   hash for integrity.
>
>
>
>
> The IETF Secretariat
>

_______________________________________________
ietf-krb-wg mailing list
[email-masked]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg