Re: [TLS] draft-badra-tls-psk-new-mac-aes-gcm as WG item

[Simon Josefsson <simon@xxxxxxxxxxxxx>]

badra@xxxxxxxx writes:

>> Badra, there is a problem in the current document.  It is the same
>> problem I pointed out for TLS-RSA-AES-GCM: The Galois Counter mode can
>> fail to decrypt, and the document needs to describe how that should be
>> handled by implementations.  I suggest to adopt the same fix made in
>>
>> http://www.ietf.org/internet-drafts/draft-ietf-tls-rsa-aes-gcm-03.txt
>>
>> specifically, to add:
>>
>>    Implementations MUST send TLS Alert bad_record_mac for all types of
>>    failures encountered in processing the AES-GCM algorithm.
>
> I adopted the same text, it is already included in section 2 (at the end).

Duh!  Then I don't have any remaining issues for now, but will review it
again if it is adopted by the WG and moves to WGLC.

Thanks,
Simon
_______________________________________________
TLS mailing list
TLS@xxxxxxxx
https://www.ietf.org/mailman/listinfo/tls