[Cryptech Tech] AES SIV mode for key wrapping?

[Joachim Strömbergson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Aloha!

Fredrik Thulin wrote:
> Not taking a stance for either SIV or KEY-WRAP here, but the good
> thing with an open design is that everyone can make any changes they
> find necessary - such as adding KEY-WRAP support before FIPS
> certifying a derivate. Actually, someone might just contribute
> KEY-WRAP support and we'll have both.

Good point. We decide on a first key wrapping mechamism that we belive
have the properties we want. If somebody else wants something different
they can either:

(1) Use their own in their implementation.
(2) Contribute another mechanism.
(3) Ask us to implement another mechanism later.

The question is really which one we want to use now to be able to move
forward. And hopefully not select something that is b0rked.

- -- 
Med vänlig hälsning, Yours

Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
 Joachim Strömbergson          Secworks AB          joachim at secworks.se
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBCAAGBQJVCUG6AAoJEF3cfFQkIuyNFhAP/R3j3FEOKk2MNordV6nh97pv
ezkrheiiZVHZt1Agc9GmdPdPQdN4tj/AEQbzPN88ZWMp71A+F7vJ2spej8QiLvLT
lo0CD6cUQRyntT047exRmT0mrjxqi+ZMiebRVxbnK2wMniYvIxvevo/c04G+kkch
1cFr/dwq6wpWqMj5T0ncVgxgh1HQtAUz6OLO57JN5O6fae1LY755+H+dxbtZ3OW2
fY01nZlAHx6T72TqOUXm4O15SqWom+OYKnxEPb3bTj5nA4AdWoKheKCVZpjtn001
PJaRlSW41lBzfiy7ofshrfrL2BC6+jKrh4EqNxm5duL7sAD8g5RHyIS9TDqupO3a
ezKXTwdUavDqsMNh33A/qR8KDeVM+BNav+Au7uD1bee+mpkskGn66LDHqRDO1yaU
Vd/MkJzyILyFHXV7rX9bKM4arfEHIXNFEejx7w6bu5ZP4VZplXO4nhbktuDrfM0C
w/G++TRz2WKzl+6+ZblzKfg+tW5oDZp7EszW5CmC7Nmg9tBn6jsNMCd29qsiQvHG
CmoyPBIvwoIEzqUW9dPSMC66zE6W1j4TukHRIwFSE8jwqbqTgVqUm8/aCuMPyu/J
f2ZkT4fJdxg5oXyn2yvh+H0XWXMTq3Xtr2/ugiJGmbYlyp5unH84oMpbGhdxJkCi
L1pLduRwZAzkmFGi0iUb
=bTcE
-----END PGP SIGNATURE-----