Re: [Dnsmasq-discuss] Remove ECC-GOST (GOST R 34.10-2001) algorithm as this is set to status MUST NOT implement in RFC 8624
On Sun, Mar 1, 2020 at 9:32 PM Vladislav Grishenko wrote: > > Hi Simon, > > Thank you for the DSA update. > According https://tools.ietf.org/html/rfc8624 ECC-GOST must not be > implemented too: > >ECC-GOST (GOST R 34.10-2001) has been superseded by GOST R 34.10-2012 >in [RFC7091]. GOST R 34.10-2012 hasn't been standardized for use in >DNSSEC. > > Maybe worth to drop it too and save a couple of bytes? > Looks like a good idea to me. > Thank you and > Best Regards, Vladislav Grishenko > > > > ___ > Dnsmasq-discuss mailing list > Dnsmasq-discuss@lists.thekelleys.org.uk > http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
Re: [Dnsmasq-discuss] Remove ECC-GOST (GOST R 34.10-2001) algorithm as this is set to status MUST NOT implement in RFC 8624
Indeed. Note that this (and ED448) will not actually be compiled in until Nettle 3.6, which add support for them, is released and installed. Cheers, Simon. On 02/03/2020 11:16, Vladislav Grishenko wrote: > Sorry, overlooked it (along with GOST R 34.11-94) must not be used for > signing/delegation, but still may - for validation. > Please ignore previous mail. > > Best Regards, Vladislav Grishenko > > -Original Message- > From: Vladislav Grishenko > Sent: Sunday, March 1, 2020 10:00 PM > To: 'Simon Kelley' ; > dnsmasq-discuss@lists.thekelleys.org.uk > Subject: Remove ECC-GOST (GOST R 34.10-2001) algorithm as this is set to > status MUST NOT implement in RFC 8624 > > Hi Simon, > > Thank you for the DSA update. > According https://tools.ietf.org/html/rfc8624 ECC-GOST must not be > implemented too: > >ECC-GOST (GOST R 34.10-2001) has been superseded by GOST R 34.10-2012 >in [RFC7091]. GOST R 34.10-2012 hasn't been standardized for use in >DNSSEC. > > Maybe worth to drop it too and save a couple of bytes? > > Thank you and > Best Regards, Vladislav Grishenko > > > > ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
Re: [Dnsmasq-discuss] Remove ECC-GOST (GOST R 34.10-2001) algorithm as this is set to status MUST NOT implement in RFC 8624
Sorry, overlooked it (along with GOST R 34.11-94) must not be used for signing/delegation, but still may - for validation. Please ignore previous mail. Best Regards, Vladislav Grishenko -Original Message- From: Vladislav Grishenko Sent: Sunday, March 1, 2020 10:00 PM To: 'Simon Kelley' ; dnsmasq-discuss@lists.thekelleys.org.uk Subject: Remove ECC-GOST (GOST R 34.10-2001) algorithm as this is set to status MUST NOT implement in RFC 8624 Hi Simon, Thank you for the DSA update. According https://tools.ietf.org/html/rfc8624 ECC-GOST must not be implemented too: ECC-GOST (GOST R 34.10-2001) has been superseded by GOST R 34.10-2012 in [RFC7091]. GOST R 34.10-2012 hasn't been standardized for use in DNSSEC. Maybe worth to drop it too and save a couple of bytes? Thank you and Best Regards, Vladislav Grishenko ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
