Reclassification of Suite B Documents to Historic Status
draft-housley-suite-b-to-historic-05

Document Type Active Internet-Draft (individual)
Last updated 2018-05-29 (latest revision 2018-04-30)
Stream IETF
Intended RFC status Informational
Formats plain text pdf html bibtex
Reviews
Stream WG state (None)
Document shepherd Sean Turner
Shepherd write-up Show (last changed 2018-02-15)
IESG IESG state RFC Ed Queue
Consensus Boilerplate Yes
Telechat date
Responsible AD Eric Rescorla
IESG note Here is what I propose for an IESG note to clarify IESG review comments

"Suite B algorithms are defined to support two minimum levels of
security: 128 and 192 bits. It is believed that the Suite B
algorithms continue to meet these security goals. The algorithm
identifiers for all of the Suite B algorithms remain available for
anyone that wants to use them."
Send notices to (None)
IANA IANA review state IANA OK - No Actions Needed
IANA action state No IC
RFC Editor RFC Editor state EDIT
Network Working Group                                         R. Housley
Internet-Draft                                            Vigil Security
Intended status: Informational                                L. Zieglar
Expires: November 1, 2018                       National Security Agency
                                                          April 30, 2018

        Reclassification of Suite B Documents to Historic Status
                  draft-housley-suite-b-to-historic-05

Abstract

   This document reclassifies the RFCs related to the U.S.  National
   Security Agency (NSA) Suite B cryptographic algorithms as Historic,
   and it discusses the reasons for doing so.  This document moves seven
   informational RFCs to Historic Status: RFC 5759, RFC 6239, RFC 6318,
   RFC 6379, RFC 6380, RFC 6403, and RFC 6460.  In addition, this
   document moves three obsolete informational RFCs to Historic Status:
   RFC 4869, RFC 5008, and RFC 5430.

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at https://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on November 1, 2018.

Copyright Notice

   Copyright (c) 2018 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (https://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must

Housley & Zieglar       Expires November 1, 2018                [Page 1]
Internet-Draft             Suite B to Historic                April 2018

   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   2
   2.  Rationale . . . . . . . . . . . . . . . . . . . . . . . . . .   2
   3.  The RFCs Related to Suite B . . . . . . . . . . . . . . . . .   2
   4.  Documents that Reference the Suite-B-related RFCs . . . . . .   3
     4.1.  Documents that Reference RFC 4869 . . . . . . . . . . . .   3
     4.2.  Documents that Reference RFC 5759 . . . . . . . . . . . .   4
     4.3.  Documents that Reference RFC 6379 . . . . . . . . . . . .   4
     4.4.  Documents that Reference RFC 6403 . . . . . . . . . . . .   4
     4.5.  Documents that Reference RFC 6460 . . . . . . . . . . . .   4
   5.  Impact of Reclassifying the Suite-B-related RFCs to Historic    5
   6.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .   5
   7.  Security Considerations . . . . . . . . . . . . . . . . . . .   5
   8.  References  . . . . . . . . . . . . . . . . . . . . . . . . .   5
     8.1.  Normative References  . . . . . . . . . . . . . . . . . .   5
     8.2.  Informative References  . . . . . . . . . . . . . . . . .   6
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .   7

1.  Introduction

   Several RFCs profile security protocols for use with the National
   Security Agency (NSA) Suite B Cryptography.  Suite B is no longer
   supported by NSA, and the web pages that specify the cryptographic
   algorithms are no longer available.

   In July 2015, NSA published the Committee for National Security
   Systems Advisory Memorandum 02-15 as the first step in replacing
   Suite B with NSA's Commercial National Security Algorithm (CNSA)
   Suite.  Information about the CNSA Suite can be found in [CNSA].

2.  Rationale

   As indicated in [CNSA], NSA is transitioning from Suite B to the CNSA
   Suite.  As a result, the profiles of the security protocols for the
   Suite B algorithms are now only of historic interest.

3.  The RFCs Related to Suite B

   Between 2007 and 2012, several Suite-B-related RFCs were published to
   profile security protocols for use with the Suite B algorithms.  They
   are:

Housley & Zieglar       Expires November 1, 2018                [Page 2]
Internet-Draft             Suite B to Historic                April 2018

   o  [RFC4869], "Suite B Cryptographic Suites for IPsec" (Obsoleted by
      RFC 6379)

   o  [RFC5008], "Suite B in Secure/Multipurpose Internet Mail
      Extensions (S/MIME)" (Obsoleted by RFC 6318)
Show full document text