Subject: Re: draft-baushke-ssh-dh-group-sha2-01 (was Re: DH group exchange)

From: denis bider <[email-masked]>
Date: Wed, 27 Jan 2016 18:43:08 +0000

Hello Mark,

appreciated, and agreed.

Given these recommendations, we should consider what to do about hmac-sha2-384.

In RFC 6668, we mentioned it, but did not actually define it.

It seems that there is now a need to define hmac-sha2-384 formally. It has the advantage of 16 fewer bytes being used for MAC.

On the other hand, I'm not sure that there's a need for rsa-sha2-384. I don't see advantages compared to rsa-sha2-512, which the current draft defines