Re: [TLS] Revised hybrid key exchange draft

Mon, 24 Jan 2022 07:20:05 -0800 

I don't see much benefit in the revised construction.

--
Regards,
Uri
 
There are two ways to design a system. One is to make it so simple there are 
obviously no deficiencies.
The other is to make it so complex there are no obvious deficiencies.
                                                                                
                                                     -  C. A. R. Hoare
 

On 1/24/22, 10:14, "TLS on behalf of D. J. Bernstein" <[email protected] on 
behalf of [email protected]> wrote:

    Nimrod Aviram writes:
    > To summarize, we recommend using our new proposed construction. It’s 
fast,
    > easy to implement, and provides provable security.

    The baseline construction is faster and is easier to implement, so
    you're saying it doesn't provide "provable security"? Can you please
    clarify what precisely you mean by "provable security" here? 

    ---Dan

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
TLS mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/tls

Reply via email to