Subject: [TLS] Clarify DH calculations

From: Eric Rescorla <[email-masked]>
Date: Sun, 03 Jun 2007 08:04:13 -0700

http://www3.tools.ietf.org/wg/tls/trac/ticket/35

Pasi writes:

	IMHO it probably would make sense for a TLS implementation
	to use one of the groups specified in RFC 4306 or 3526,
	instead of e.g.  generating a random prime p (generating
	random primes is kind of slow, and then you have to worry
	about RFC 2785 etc.).
	
	(Would others agree with this recommendation? Should we add
	it to the TLS 1.2 spec?)

This also seems like general crypto advice to me.

Proposed resolution: do nothing.

-Ekr

_______________________________________________
TLS mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/tls