Subject: [Cfrg] New Version Notification for draft-wood-cfrg-aead-limits-00.txt

From: "Christopher Wood" <[email-masked]>
Date: Wed, 20 May 2020 10:01:17 -0700

Based on recent discussions in the QUIC [1] and TLS [2] working groups, Martin, Felix, and I felt it would be useful if we documented the confidentiality and integrity bounds of AEADs used in those protocols. This is more or less pulling together results documented elsewhere, such as [3], with some additional work for AEAD_AES_128_CCM and AEAD_AES_128_CCM_8 based on [4]. We're also re-examining the AEAD_CHACHA20_POLY1305 bounds offline.

We plan to add more content going forward, including limit simplifications for different protocol scenarios (with different q and v values). 

Do folks think this is work worth continuing? As always, any and all feedback is welcome!

Thanks,
Chris

[1] https://mailarchive.ietf.org/arch/msg/quic/28W4-5HxqHSf62PTICnxKU3izks/
[2] https://mailarchive.ietf.org/arch/msg/tls/QpV0KZILrwUxeEZ3_QUoz74r-P8/
[3] https://www.isg.rhul.ac.uk/~kp/TLS-AEbounds.pdf
[4] https://doi.org/10.1007/3-540-36492-7_7

----- Original message -----
From: [email-masked]
To: "Christopher A. Wood" <[email-masked]>, Christopher Wood <[email-masked]>, Martin Thomson <[email-masked]>, "Felix Günther" <[email-masked]>, Felix Gunther <[email-masked]>
Subject: New Version Notification for draft-wood-cfrg-aead-limits-00.txt
Date: Wednesday, May 20, 2020 7:17 AM

A new version of I-D, draft-wood-cfrg-aead-limits-00.txt
has been successfully submitted by Christopher Wood and posted to the
IETF repository.

Name:		draft-wood-cfrg-aead-limits
Revision:	00
Title:		Usage Limits on AEAD Algorithms
Document date:	2020-05-20
Group:		Individual Submission
Pages:		10
URL:            https://www.ietf.org/internet-drafts/draft-wood-cfrg-aead-limits-00.txt
Status:         https://datatracker.ietf.org/doc/draft-wood-cfrg-aead-limits/
Htmlized:       https://tools.ietf.org/html/draft-wood-cfrg-aead-limits-00
Htmlized:       https://datatracker.ietf.org/doc/html/draft-wood-cfrg-aead-limits

Abstract:
   An Authenticated Encryption with Associated Data (AEAD) algorithm
   provides confidentiality and integrity.  Excessive use of the same
   key can give an attacker advantages in breaking these properties.
   This document provides simple guidance for users of common AEAD
   functions about how to limit the use of keys in order to bound the
   advantage given to an attacker.

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat