Subject: [Tls-reg-review] Continue to use the one-byte registry for TLSHashAlgorithm identifier

From: "Joe Clarke (jclarke)" <[email-masked]>
Date: Sun, 16 Jan 2022 19:05:51 +0000

Hello, experts.  Opsawg has adopted work to add (D)TLS 1.3 support for SNMP.  One of the pending items in the draft is to see if the one-byte hash registry at https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-18 can continue to be used for the TLSHashAlgorithm identifier?

I know RFC8447 stipulates that this registry is for TLS versions prior to 1.3 whereas TLS 1.3 should use the two-byte SignatureScheme.  However, the current  SNMP-TLS-TM-MIB defines the fingerprint to be one byte hash identifier.  If we can continue to assign hashes one-byte identifiers, this would greatly simplify the currently proposed work.  And there does seem to be quite a bit of space left in the TLS HashAlgorithm registry.

Any expert insight you can provide would be appreciated.

Joe