[Top] [All Lists]

[openpgp] draft-irtf-cfrg-aead-limits lacks EAX and OCB

2021-07-31 00:09:36
Hi CFRG and OpenPGP folks--

In the CFRG meeting today, i noticed that the AEAD Limits draft does not
include a mention of EAX and OCB.

EAX and OCB are both candidates for inclusion in the forthcoming
cryptographic refresh of OpenPGP

I note that for OCB, RFC 7253 does include some suggestions of the kinds
of limits that are appropriate.

I'm not skilled enough with the kind of analysis that's happening in
these drafts to tell whether the guidance in 7253 translates into the
same sort of answers that draft-irtf-cfrg-aead-limits is trying to

If it is, and CFRG folks find the limits in 7253 plausible, perhaps a
new section in the AEAD limits draft could import the relevant figures
and reference 7253?

I don't know of any comparable analysis for EAX, but if anyone can point
to some, i'd be interested in seeing EAX analyzed as well.

Sorry to not have the chops to analyze this myself, but i'm hoping that
someone in CFRG have enough capacity to at least look into it and tell
me why it doesn't match.



Attachment: signature.asc
Description: PGP signature

openpgp mailing list
<Prev in Thread] Current Thread [Next in Thread>
  • [openpgp] draft-irtf-cfrg-aead-limits lacks EAX and OCB, Daniel Kahn Gillmor <=