Subject: Re: [TLS] AES-OCB in TLS [New Version Notification for draft-zauner-tls-aes-ocb-03.txt]

From: Peter Gutmann <[email-masked]>
Date: Tue, 2 Jun 2015 08:25:35 +0000

Yaron Sheffer <[email-masked]> writes:

> PAKE means password-authenticated key exchange, and TLS-PSK is not suitable
> for use with (short, memorable) passwords. See
> https://tools.ietf.org/html/rfc4279#section-7.2

Sure, but then neither is OpenPGP, S/MIME, WPA2, or pretty much anything else
for that matter, which is why you use a salted iterated hash for all of them.
One of the PHC docs, which talks about implementation suggestions for use with
other protocols, will address use with TLS.

Peter.