GOST Cipher Suites for Transport Layer Security (TLS) Protocol Version 1.2
draft-smyshlyaev-tls12-gost-suites-18

(Via drafts-eval@iana.org): IESG/Authors/ISE:

The IANA Functions Operator has completed its review of draft-smyshlyaev-tls12-gost-suites-13. If any part of this review is inaccurate, please let us know.

We understand that when this document is sent to us for processing, we will need to update the references to this document in the following registries at

https://www.iana.org/assignments/tls-parameters

TLS Cipher Suites:

+-------------+-----------------------------+---------+----------+
|    Value    |        Description        | DTLS-OK | Reference|
+-------------+-----------------------------+---------+----------+
| 0xC1, 0x00  |    TLS_GOSTR341112_256_    |    N    | this RFC |
|            |  _WITH_KUZNYECHIK_CTR_OMAC  |        |          |
+-------------+-----------------------------+---------+----------+
| 0xC1, 0x01  |    TLS_GOSTR341112_256_    |    N    | this RFC |
|            |    _WITH_MAGMA_CTR_OMAC    |        |          |
+-------------+-----------------------------+---------+----------+
| 0xC1, 0x02  |    TLS_GOSTR341112_256_    |    N    | this RFC |
|            |    _WITH_28147_CNT_IMIT    |        |          |
+-------------+-----------------------------+---------+----------+

TLS SignatureAlgorithm:

+-----------+---------------------+---------+----------+
|  Value  |      Description    | DTLS-OK | Reference|
+-----------+---------------------+---------+----------+
|    64    |  gostr34102012_256  |    Y    | this RFC |
+-----------+---------------------+---------+----------+
|    65    |  gostr34102012_512  |    Y    | this RFC |
+-----------+---------------------+---------+----------+

TLS Supported Groups:

+-----------+----------------+---------+------------+-----------+
|  Value  |  Description  | DTLS-OK | Recomended | Reference |
+-----------+----------------+---------+------------+-----------+
|    34    |    GC256A    |    Y    |      N    | this RFC  |
+-----------+----------------+---------+------------+-----------+
|    35    |    GC256B    |    Y    |      N    | this RFC  |
+-----------+----------------+---------+------------+-----------+
|    36    |    GC256C    |    Y    |      N    | this RFC  |
+-----------+----------------+---------+------------+-----------+
|    37    |    GC256D    |    Y    |      N    | this RFC  |
+-----------+----------------+---------+------------+-----------+
|    38    |    GC512A    |    Y    |      N    | this RFC  |
+-----------+----------------+---------+------------+-----------+
|    39    |    GC512B    |    Y    |      N    | this RFC  |
+-----------+----------------+---------+------------+-----------+
|    40    |    GC512C    |    Y    |      N    | this RFC  |
+-----------+----------------+---------+------------+-----------+

TLS ClientCertificateType Identifiers:

+-----------+---------------------+---------+----------+
|  Value  |      Description    | DTLS-OK | Reference|
+-----------+---------------------+---------+----------+
|    67    |    gost_sign256    |    Y    | this RFC |
+-----------+---------------------+---------+----------+
|    68    |    gost_sign512    |    Y    | this RFC |
+-----------+---------------------+---------+----------+

All of the entries listed above have already been registered.

We understand that no other actions are required.

Thank you,

Amanda Baber
Lead IANA Services Specialist

draft-smyshlyaev-tls12-gost-suites has been presented for publication as
an Informational RFC on the Independent Submission Stream.

==Purpose==

This document specifies three new cipher suites for TLS1.2 to support
the Russian cryptographic standard algorithms (called GOST algorithms).

This document forms part of a suite of related documents that present
the GOST algorithms in English and show how they can be used with IETF
standard protocols. In many cases, code points are assigned from
"specification required" registries to enable proper use in the field.

Please note that the reference to the obsolete RFC 5246 is deliberate.
While it is acknowledged that implementations should move to TL1.3,
there is still plenty of TLS1.2 deployed, and it is important to make
the GOST suites available for use with TLS1.2. A separate draft is
attending to GOST and TLS1.3.

== History==

This document has been a work in progress since June 2018.

This document was first brought to the ISE at revision -06 in October
2019.

==Non-IETF Work==

The Abstract and Introduction contain clear statements that the document
does not imply IETF endorsement of the cipher suites.

==IANA==

Code points have already been assigned by IANA (with appropriate Expert
Review) and referenced to this document as an Internet-Draft. This IANA
actions in this document simply update the registries to point to this
document as an RFC.

This document makes no request for IANA assignments from any registry
requiring IETF action.

==Reviews==

This document was reviewed for the ISE by Russ Housley and Rich Salz.
Both reviewers have become familiar with the GOST work and have
previously supported publication of GOST RFCs in the Independent Stream.

Russ and Rich found a number smallish issues which the authors resolved
in a new revision.

The ISE also performed to reviews of the document to check that it is
good shape for publication (although without any technical clue on the
content).

The Designated Experts for the associated IANA registries are Yoav Nir,
Rich Salz, and Nick Sullivan.

Details of the reviews are available on request.