Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
draft-ietf-tls-negotiated-ff-dhe-10
Revision differences
Document history
Date | Rev. | By | Action |
---|---|---|---|
2016-08-08
|
10 | (System) | RFC Editor state changed to AUTH48-DONE from AUTH48 |
2016-06-29
|
10 | (System) | RFC Editor state changed to AUTH48 from RFC-EDITOR |
2016-06-15
|
10 | (System) | RFC Editor state changed to RFC-EDITOR from EDIT |
2016-05-23
|
10 | (System) | RFC Editor state changed to EDIT from MISSREF |
2015-10-14
|
10 | (System) | Notify list changed from draft-ietf-tls-negotiated-ff-dhe.ad@ietf.org, tls-chairs@ietf.org, turners@ieca.com, draft-ietf-tls-negotiated-ff-dhe.shepherd@ietf.org, draft-ietf-tls-negotiated-ff-dhe@ietf.org to (None) |
2015-07-16
|
10 | Jean Mahoney | Closed request for Telechat review by GENART with state 'No Response' |
2015-06-22
|
10 | (System) | IANA Action state changed to RFC-Ed-Ack from Waiting on RFC Editor |
2015-06-19
|
10 | (System) | IANA Action state changed to Waiting on RFC Editor from Waiting on Authors |
2015-06-18
|
10 | (System) | IANA Action state changed to Waiting on Authors from In Progress |
2015-06-16
|
10 | (System) | IANA Action state changed to In Progress from Waiting on Authors |
2015-06-08
|
10 | (System) | IANA Action state changed to Waiting on Authors from In Progress |
2015-06-02
|
10 | Cindy Morgan | IESG state changed to RFC Ed Queue from Approved-announcement sent |
2015-06-02
|
10 | (System) | RFC Editor state changed to MISSREF |
2015-06-02
|
10 | (System) | Announcement was received by RFC Editor |
2015-06-01
|
10 | (System) | IANA Action state changed to In Progress |
2015-06-01
|
10 | Cindy Morgan | IESG state changed to Approved-announcement sent from Approved-announcement to be sent::Point Raised - writeup needed |
2015-06-01
|
10 | Cindy Morgan | IESG has approved the document |
2015-06-01
|
10 | Cindy Morgan | Closed "Approve" ballot |
2015-06-01
|
10 | Cindy Morgan | Ballot approval text was generated |
2015-06-01
|
10 | Cindy Morgan | Ballot writeup was changed |
2015-06-01
|
10 | Daniel Gillmor | IANA Review state changed to Version Changed - Review Needed from IANA OK - Actions Needed |
2015-06-01
|
10 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-10.txt |
2015-05-28
|
09 | Amy Vezza | IESG state changed to Approved-announcement to be sent::Point Raised - writeup needed from IESG Evaluation |
2015-05-28
|
09 | Alia Atlas | [Ballot Position Update] New position, No Objection, has been recorded for Alia Atlas |
2015-05-27
|
09 | Alvaro Retana | [Ballot Position Update] New position, No Objection, has been recorded for Alvaro Retana |
2015-05-27
|
09 | Kathleen Moriarty | [Ballot comment] Thank you for your work on this draft, it is very well written, easy-to-read, while solving an important problem. Thanks for the detailed … [Ballot comment] Thank you for your work on this draft, it is very well written, easy-to-read, while solving an important problem. Thanks for the detailed security considerations as well. |
2015-05-27
|
09 | Kathleen Moriarty | [Ballot Position Update] New position, Yes, has been recorded for Kathleen Moriarty |
2015-05-27
|
09 | Deborah Brungard | [Ballot Position Update] New position, No Objection, has been recorded for Deborah Brungard |
2015-05-27
|
09 | Ben Campbell | [Ballot Position Update] New position, No Objection, has been recorded for Ben Campbell |
2015-05-27
|
09 | Martin Stiemerling | [Ballot Position Update] New position, No Objection, has been recorded for Martin Stiemerling |
2015-05-26
|
09 | Spencer Dawkins | [Ballot Position Update] New position, No Objection, has been recorded for Spencer Dawkins |
2015-05-26
|
09 | Jari Arkko | [Ballot Position Update] New position, No Objection, has been recorded for Jari Arkko |
2015-05-26
|
09 | Barry Leiba | [Ballot comment] The intended status in the document text does, indeed, need to be changed to "Standards Track". The last call was issued as "Proposed … [Ballot comment] The intended status in the document text does, indeed, need to be changed to "Standards Track". The last call was issued as "Proposed Standard", and the IESG ballot is set up for that, so I think we're OK -- please just fix the text in the next document rev. |
2015-05-26
|
09 | Barry Leiba | [Ballot Position Update] New position, No Objection, has been recorded for Barry Leiba |
2015-05-26
|
09 | Benoît Claise | [Ballot comment] Not issue on the technical content and the publication of this document, but https://datatracker.ietf.org/doc/draft-ietf-tls-negotiated-ff-dhe/ and the write-up mention "Standard Track" while the draft … [Ballot comment] Not issue on the technical content and the publication of this document, but https://datatracker.ietf.org/doc/draft-ietf-tls-negotiated-ff-dhe/ and the write-up mention "Standard Track" while the draft status is Informational, as spotted by Linda in her OPS-DIR review below: This document is on the Informational Track to specify ways for client and server to establish common finite-field DH parameters with known structure and a mechanism for peers to negotiate support for these groups. The document is well written and very clear. A couple questions: 1) Why this document is not standard track? 2) Several sections requests range in reference of p, e.g. “p-1” or p (Section 5). But there are so many numbers that can be “p” (page 17). What is the significance of the range? |
2015-05-26
|
09 | Benoît Claise | Ballot comment text updated for Benoit Claise |
2015-05-26
|
09 | Benoît Claise | [Ballot comment] Not issue on the technical content, but https://datatracker.ietf.org/doc/draft-ietf-tls-negotiated-ff-dhe/ and the write-up mention "Standard Track" while the draft status is Informational, as spotted by … [Ballot comment] Not issue on the technical content, but https://datatracker.ietf.org/doc/draft-ietf-tls-negotiated-ff-dhe/ and the write-up mention "Standard Track" while the draft status is Informational, as spotted by Linda in her OPS-DIR review below: This document is on the Informational Track to specify ways for client and server to establish common finite-field DH parameters with known structure and a mechanism for peers to negotiate support for these groups. The document is well written and very clear. A couple questions: 1) Why this document is not standard track? 2) Several sections requests range in reference of p, e.g. “p-1” or p (Section 5). But there are so many numbers that can be “p” (page 17). What is the significance of the range? |
2015-05-26
|
09 | Benoît Claise | [Ballot Position Update] New position, No Objection, has been recorded for Benoit Claise |
2015-05-22
|
09 | Brian Haberman | [Ballot Position Update] New position, No Objection, has been recorded for Brian Haberman |
2015-05-22
|
09 | Stephen Farrell | Changed consensus to Yes from Unknown |
2015-05-21
|
09 | Jean Mahoney | Request for Telechat review by GENART is assigned to Tom Taylor |
2015-05-21
|
09 | Jean Mahoney | Request for Telechat review by GENART is assigned to Tom Taylor |
2015-05-19
|
09 | (System) | IANA Review state changed to IANA OK - Actions Needed from Version Changed - Review Needed |
2015-05-16
|
09 | Stephen Farrell | Placed on agenda for telechat - 2015-05-28 |
2015-05-16
|
09 | Stephen Farrell | IESG state changed to IESG Evaluation from Waiting for Writeup |
2015-05-16
|
09 | Stephen Farrell | Ballot has been issued |
2015-05-16
|
09 | Stephen Farrell | [Ballot Position Update] New position, Yes, has been recorded for Stephen Farrell |
2015-05-16
|
09 | Stephen Farrell | Created "Approve" ballot |
2015-05-16
|
09 | Stephen Farrell | Ballot writeup was changed |
2015-05-15
|
09 | Tero Kivinen | Request for Last Call review by SECDIR Completed: Ready. Reviewer: Klaas Wierenga. |
2015-05-12
|
09 | Daniel Gillmor | IANA Review state changed to Version Changed - Review Needed from IANA OK - Actions Needed |
2015-05-12
|
09 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-09.txt |
2015-04-26
|
08 | Gunter Van de Velde | Request for Last Call review by OPSDIR Completed: Has Nits. Reviewer: Linda Dunbar. |
2015-04-17
|
08 | (System) | IESG state changed to Waiting for Writeup from In Last Call |
2015-04-16
|
08 | (System) | IANA Review state changed to IANA OK - Actions Needed from IANA - Review Needed |
2015-04-16
|
08 | Amanda Baber | IESG/Authors/WG Chairs: IANA has reviewed draft-ietf-tls-negotiated-ff-dhe-08. Please see below and report any inaccuracies as soon as possible. IANA's reviewer has the following comments: IANA understands … IESG/Authors/WG Chairs: IANA has reviewed draft-ietf-tls-negotiated-ff-dhe-08. Please see below and report any inaccuracies as soon as possible. IANA's reviewer has the following comments: IANA understands that, upon approval of this document, there is a single action that IANA must complete. In the EC Named Curve Registry in the Transport Layer Security (TLS) Parameters registry at https://www.iana.org/assignments/tls-parameters/ A note will be added to the registry indicating that values from 256-511 (inclusive) are set aside for "Finite Field Diffie-Hellman groups," and that all other entries in the registry are "Elliptic curve groups." This document will be listed as an additional reference for the registry itself. In addition, the four highest codepoints in the Finite Field Diffie-Hellman group range (508-511, inclusive) will be marked "Reserved for Private Use." Finally, five new registration will be added the registry (along with the PRIVATE USE restriction) as follows: +---------------------+-------------+---------+-----------------+ | Value | Description | DTLS-OK | Reference | +---------------------+-------------+---------+-----------------+ | 256 | ffdhe2048 | Y | [ RFC-to-be ] | | 257 | ffdhe3072 | Y | [ RFC-to-be ] | | 258 | ffdhe4096 | Y | [ RFC-to-be ] | | 259 | ffdhe6144 | Y | [ RFC-to-be ] | | 260 | ffdhe8192 | Y | [ RFC-to-be ] | | 508-511 (inclusive) | Reserved for Private Use | - | [ RFC-to-be ] | +---------------------+-------------+---------+-----------------+ Note: The actions requested in this document will not be completed until the document has been approved for publication as an RFC. This message is only to confirm what actions will be performed. |
2015-04-09
|
08 | Jean Mahoney | Request for Last Call review by GENART is assigned to Tom Taylor |
2015-04-09
|
08 | Jean Mahoney | Request for Last Call review by GENART is assigned to Tom Taylor |
2015-04-09
|
08 | Tero Kivinen | Request for Last Call review by SECDIR is assigned to Klaas Wierenga |
2015-04-09
|
08 | Tero Kivinen | Request for Last Call review by SECDIR is assigned to Klaas Wierenga |
2015-04-05
|
08 | Gunter Van de Velde | Request for Last Call review by OPSDIR is assigned to Linda Dunbar |
2015-04-05
|
08 | Gunter Van de Velde | Request for Last Call review by OPSDIR is assigned to Linda Dunbar |
2015-04-03
|
08 | Amy Vezza | IANA Review state changed to IANA - Review Needed |
2015-04-03
|
08 | Amy Vezza | The following Last Call announcement was sent out: From: The IESG To: IETF-Announce CC: Reply-To: ietf@ietf.org Sender: Subject: Last Call: (Negotiated Finite Field Diffie-Hellman Ephemeral … The following Last Call announcement was sent out: From: The IESG To: IETF-Announce CC: Reply-To: ietf@ietf.org Sender: Subject: Last Call: (Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS) to Proposed Standard The IESG has received a request from the Transport Layer Security WG (tls) to consider the following document: - 'Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2015-04-17. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract Traditional finite-field-based Diffie-Hellman (DH) key exchange during the TLS handshake suffers from a number of security, interoperability, and efficiency shortcomings. These shortcomings arise from lack of clarity about which DH group parameters TLS servers should offer and clients should accept. This document offers a solution to these shortcomings for compatible peers by using a section of the TLS "EC Named Curve Registry" to establish common finite-field DH parameters with known structure and a mechanism for peers to negotiate support for these groups. The file can be obtained via http://datatracker.ietf.org/doc/draft-ietf-tls-negotiated-ff-dhe/ IESG discussion can be tracked via http://datatracker.ietf.org/doc/draft-ietf-tls-negotiated-ff-dhe/ballot/ No IPR declarations have been submitted directly on this I-D. |
2015-04-03
|
08 | Amy Vezza | IESG state changed to In Last Call from Last Call Requested |
2015-04-03
|
08 | Stephen Farrell | Last call was requested |
2015-04-03
|
08 | Stephen Farrell | Ballot approval text was generated |
2015-04-03
|
08 | Stephen Farrell | Ballot writeup was generated |
2015-04-03
|
08 | Stephen Farrell | IESG state changed to Last Call Requested from AD Evaluation |
2015-04-03
|
08 | Stephen Farrell | Last call announcement was generated |
2015-03-31
|
08 | Stephen Farrell | IESG state changed to AD Evaluation from Publication Requested |
2015-03-28
|
08 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-08.txt |
2015-03-16
|
07 | Amy Vezza | Notification list changed to tls@ietf.org, draft-ietf-tls-negotiated-ff-dhe.ad@ietf.org, tls-chairs@ietf.org, turners@ieca.com, draft-ietf-tls-negotiated-ff-dhe.shepherd@ietf.org, draft-ietf-tls-negotiated-ff-dhe@ietf.org from "Sean Turner" <turners@ieca.com> |
2015-03-16
|
07 | Sean Turner | 1. Summary This most excellent draft addresses a number of security, interoperability, and efficiency shortcomings that arise from the lack of clarity about which DH … 1. Summary This most excellent draft addresses a number of security, interoperability, and efficiency shortcomings that arise from the lack of clarity about which DH group parameters TLS servers should offer and clients should accept in their TLS handshakes. This draft is bound standards track not only because it’s describing protocol bits but it’s also updating existing standards track RFCs. Please note this draft applies to all version of TLS prior to 1.3. TLS 1.3 is going to also going to adopt this work directly into its draft. Sean Turner is the document shepherd and Stephen Farrell is our über Area Director! 2. Review and Consensus This draft (previous names include draft-gillmor-tls-negotiated-dl-dhe and draft-ietf-tls-negotiated-dl-dhe) has been discussed on the mailing list and at numerous TLS f2f meetings (regularly scheduled IETF meets and TLS interims). It’s been amended numerous times based on WG feedback and it accurately reflects the WG consensus. The WGLC was also forwarded to the CFRG. 3. Intellectual Property [Confirming this as of 2015-03-13] The shepherd has confirmed the author's direct, personal knowledge of any IPR related to this document has already been disclosed, in conformance with BCPs 78 and 79. 4. Other Points ***DOWNREF ALERT *** There is a DOWNRF to http://datatracker.ietf.org/doc/draft-bmoeller-tls-falsestart/. The WG will shortly be asked whether it is willing to adopt this draft. Seems quite likely it will be adopted. IANA Considerations: Note that this draft reuses/expands an existing registry to set aside a handful of specific codepoints for FFDHE groups, and a small "private use" range, but explicitly sets aside the entire range 0x0100 → 0x01FF exclusively for FFDHE (and indicates that no FFDHE will appear outside that range). The WG was queried numerous times about this point and they were okay with this approach. So, an IESG request to not reuse this existing registry is going to be meet with some pretty heavy opposition. The IANA considerations are clearly noted in the draft. |
2015-03-16
|
07 | Sean Turner | Responsible AD changed to Stephen Farrell |
2015-03-16
|
07 | Sean Turner | IETF WG state changed to Submitted to IESG for Publication from Waiting for WG Chair Go-Ahead |
2015-03-16
|
07 | Sean Turner | IESG state changed to Publication Requested |
2015-03-16
|
07 | Sean Turner | IESG process started in state Publication Requested |
2015-03-16
|
07 | Sean Turner | Changed document writeup |
2015-03-13
|
07 | Sean Turner | Changed document writeup |
2015-03-13
|
07 | Sean Turner | Intended Status changed to Proposed Standard from None |
2015-03-03
|
07 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-07.txt |
2015-03-02
|
06 | Sean Turner | Tag Revised I-D Needed - Issue raised by WGLC cleared. |
2015-03-01
|
06 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-06.txt |
2015-02-18
|
05 | Sean Turner | Tag Revised I-D Needed - Issue raised by WGLC set. Tag Revised I-D Needed - Issue raised by WG cleared. |
2015-02-17
|
05 | Sean Turner | Tag Revised I-D Needed - Issue raised by WG set. |
2015-02-17
|
05 | Sean Turner | IETF WG state changed to Waiting for WG Chair Go-Ahead from In WG Last Call |
2015-01-23
|
05 | Sean Turner | IETF WG state changed to In WG Last Call from WG Document |
2014-12-19
|
05 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-05.txt |
2014-12-05
|
04 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-04.txt |
2014-11-12
|
03 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-03.txt |
2014-11-04
|
02 | Sean Turner | Notification list changed to "Sean Turner" <turners@ieca.com> |
2014-11-04
|
02 | Sean Turner | Document shepherd changed to Sean Turner |
2014-10-10
|
02 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-02.txt |
2014-08-27
|
01 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-01.txt |
2014-07-22
|
00 | Daniel Gillmor | New version available: draft-ietf-tls-negotiated-ff-dhe-00.txt |