Subject: RE: [TLS] Numbers used in TLS (AKA IANA considerations)

From: [email-masked]
Date: Thu, 28 Oct 2004 12:54:33 +0300

Thanks! I've updated the list and placed it at 
<http://people.nokia.net/~pasi/tls-numbers.txt>

Best regards,
Pasi

> -----Original Message-----
> From: ext Vipul Gupta [mailto:[email-masked]]
> Sent: Friday, October 22, 2004 1:00 AM
> To: [email-masked]
> Cc: Eronen Pasi (Nokia-NRC/Helsinki)
> Subject: Re: [TLS] Numbers used in TLS (AKA IANA considerations)
> 
> 
> Bodo's comments are also true for another open source
> cryptographic library (NSS: Netscape Security Services)
> which powers the Mozilla/Firefox/Netscape browsers.
> NSS versions 3.8 and 3.9 implement the same ECC ciphersuites
> as the OpenSSL snapshots but ECC support in NSS is also
> turned off by default. Once the ECC in TLS draft is
> finalized, the ECC code in NSS will be updated accordingly.
> 
> So the footnote could be further modified to read:
> 
> "Used by some OpenSSL development snapshots and NSS 3.8/3.9,
> obsoleted by [ecc-06]"
> 
> vipul
> 
> Bodo Moeller wrote:
> > [email-masked] wrote:
> > 
> >> TLS CIPHERSUITE NUMBERS
> >> =======================
> > 
> > 
> >> 00,47                                                   [*2]
> > 
> > [......]
> > 
> >> 00,4F                                                   [*2]
> >> 00,50   (reserved for ongoing work)                     
> [srp-08], [*3]
> > 
> > [......]
> > 
> >> 00,58   (reserved for ongoing work)                     
> [srp-08], [*3]
> >> 00,59                                                   [*2] 
> > 
> > [......]
> > 
> >> 00,5C                                                   [*2]
> > 
> > 
> >> 00,77   (reserved for ongoing work)                     
> [openpgp-05] 
> >> [*3,16]
> >> 00,78   (reserved for ongoing work)                     
> [openpgp-05] 
> >> [*3,16]
> > 
> > 
> >> [*2]            Some versions of OpenSSL have used these numbers
> >>                 for elliptic curve ciphersuites.
> >>
> >> [*3]            Some versions of OpenSSL have used these numbers
> >>                 for elliptic curve ciphersuites, but the same
> >>                 numbers are used for other purposes, too.
> > 
> > 
> > 
> > Thanks for preparing the long list of ciphersuite and other numbers!
> > 
> > There is no actual *version* of OpenSSL using these ciphersuites,
> > just daily snapshots of work in progress; and because the ECC
> > ciphersuites are not yet official, they are disabled by default.
> > 
> > In the current TLS ECC draft, the rule for computing the premaster
> > secret is incompatible with the earliest drafts.  The OpenSSL
> > development snapshosts currently implement the intermediate drafts,
> > which are compatible with the earliest drafts and a Certicom
> > implementation for smaller curves, and with the current draft for
> > large curves.  Once the TLS ECC specification is assigned actual
> > ciphersuite numbers, the OpenSSL implementation can be updated
> > accordingly.  There is no reason to keep the ciphersuite 
> numbers that
> > are found in earlier TLS ECC drafts or in OpenSSL 
> development snapshots
> > because the ciphersuites will not interoperate anyway.
> > 
> > So the footnote could read "Used by some OpenSSL 
> development snapshots;
> > obsoleted by [ecc-06]".

_______________________________________________
TLS mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/tls