[gnutls-devel] GnuTLS | WIP: Support for GOST-CTR ciphersuites from draft-smyshlyaec-tls12-gost-suites (!1144)

[Development of GNU's TLS library]

Dmitry Eremin-Solenikov commented:


@nmav This MR manifests a crypto-api issue.

CTR-ACPKM (CTR with internal rekeying, see [RFC 8645](https://www.rfc-editor.org/rfc/rfc8645.html) modes are defined with an integer parameter called section size. It is the amount of data to be encrypted using a single key before rekeying. This parameter is a part of encryption scheme, but it is not fixed. So e.g. TLS 1.2 will use 1024 bytes for MAGMA-CTR-ACPKM and 4096 bytes for KYZNYECHIK-CTR-ACPKM. However provided test vectors use sections of 256 bits (32 bytes). While this looks like a lesser problem (one can regenerate test vectors big enough to actually test rekeying transformation), this is actually only a partial solution. For example CMS files are going to use 256-KBytes sections.

OpenSSL solved this by adding a "control" to set section size. However GnuTLS lacks such "controls".

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/1144#note_265608844
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20191229/594619b0/attachment.html>