Protocol Action: 'The Use of Galois/Counter Mode (GCM) in IPsec ESP' to Proposed Standard

[The IESG <iesg-secretary at ietf.org>]

The IESG has approved the following document:

- 'The Use of Galois/Counter Mode (GCM) in IPsec ESP '
   <draft-ietf-ipsec-ciph-aes-gcm-00.txt> as a Proposed Standard

This document is the product of the IP Security Protocol Working Group. 

The IESG contact persons are Russ Housley and Steve Bellovin.

Technical Summary

  This document describes the use of the Advanced Encryption Standard
  (AES) in Galois/Counter Mode (GCM) as an IPsec Encapsulating Security
  Payload (ESP) mechanism to provide confidentiality and data origin
  authentication.

Working Group Summary

  The IPsec Working Group reviewed this document, but it is progressing
  as an Individual submission.  All of the comments provided by IPsec
  Working Group participants were supportive.

Protocol Quality

  This document was reviewed by Russ Housley for the IESG.

RFC Editor Note

  In the first paragraph of section 1, please change "IPSec" to "IPsec"
  to use the normal spelling.

  OLD:

   This document describes the use of AES in GCM mode (AES-GCM) as an
   IPSec ESP mechanism ...

  NEW:

   This document describes the use of AES in GCM mode (AES-GCM) as an
   IPsec ESP mechanism ...

  Replace section 8.3.

  OLD:

   For IKE Phase 2 negotiations, IANA has assigned <TBD> as the ESP
   Transform Identifier for AES-GCM with an eight-byte explicit IV.

  NEW:

   For IKE Phase 2 negotiations, IANA has assigned four ESP Transform
   Identifiers for AES-GCM with an eight-byte explicit IV:

      <TBD1> for AES-GCM with a 4 octet ICV;
      <TBD2> for AES-GCM with an 8 octet ICV;
      <TBD3> for AES-GCM with a 12 octet ICV; and
      <TBD4> for AES-GCM with a 16 octet ICV.

  Replace section 12.

  OLD:

   Currently, no ESP transform numbers have been assigned for use with
   the AES-GCM transform.

  NEW:

   IANA has assigned four ESP Transform Identifiers for AES-GCM with
   an eight-byte explicit IV:

      <TBD1> for AES-GCM with a 4 octet ICV;
      <TBD2> for AES-GCM with an 8 octet ICV;
      <TBD3> for AES-GCM with a 12 octet ICV; and
      <TBD4> for AES-GCM with a 16 octet ICV.


_______________________________________________
IETF-Announce mailing list
IETF-Announce at ietf.org
https://www1.ietf.org/mailman/listinfo/ietf-announce