[P1619-1] Fwd: [STDS-P1619] [Fwd: NIST Special Publication 800-38D Released]

[Matt Ball <matt.ball@xxxxxxxx>]

Charlie beat me to the punch, but I want to make sure this gets to the right list!

I haven't had time to look this through completely yet, but here are a couple things I noticed about 800-38D (all good):

• Support for long IVs (128-bits or more) was added back in and is compatible with the original GCM spec.
• Language supporting more options with random IVs added in.  In particular, you can start with a random IV, then increment it for subsequent IVs (as it done in several GCM products).  Here's the text:

• The random field shall either consist of 1) an output string of r(i) bits from an approved RBG with a sufficient security strength, or 2) the result of applying the r(i)–bit incrementing function to the random field of the preceding IV for the given key.

• P1619.1/D24 is included as an informative reference.
  

I'm sure we'll hear some more discussion on this one!  Remember, IEEE takes final action on P1619.1 on December 4th.

Cheers,
-Matt

---------- Forwarded message ----------
From: Charles Martin
Date: Nov 26, 2007 9:23 PM
Subject: [STDS-P1619] [Fwd: NIST Special Publication 800-38D Released]
To: STDS-P1619@listserv.ieee.org


notice that this finalizes GCM

-------- Original Message --------
Subject:        NIST Special Publication 800-38D Released
Date:   Mon, 26 Nov 2007 14:55:07 -0500 (EST)
From:   Patrick O'Reilly <poreilly@email.nist.gov>
Reply-To:       poreilly@email.nist.gov
To:     Multiple recipients of list <compsecpubs@nist.gov>



NIST Computer Security Division Released Special Publication 800-38D:

NIST Special Publication 800-38D Recommendation for Block Cipher Modes
of Operation: Galois/Counter Mode (GCM) and GMAC has been finalized.
This Recommendation specifies and approves Galois/Counter Mode (GCM), an
authenticated encryption mode of the Advanced Encryption Standard (AES)
algorithm.

URL to view this document is:
http://csrc.nist.gov/publications/PubsSPs.html#800-38D


---------------------
To unsubscribe from this list send e-mail to _listproc@nist.gov_ and
type in the body of the e-mail message:
*        * unsubscribe compsecpubs

Reminder:  You need to make sure that you are unsubscribing from the
*original e-mail address* that you subscribed to this list from.  If
not, you will receive an error message.  If that is the case, send
patrick.oreilly@nist.gov an e-mail and I will have to manually delete
your email address from the listproc system.  To save time - please
provide me with your old email address that you subscribed to the list.
Thanks.
Pat O'Reilly
Computer Security Division
NIST

--
       Charles R. Martin | Sr Staff Engineer | Sun Microsystems
    When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.
               charles.martin@sun.com | +1 303 661 6532

-- 
Thanks!
Matt Ball
IEEE SISWG Chair
303-717-2717
http://www.linkedin.com/in/matthewvball