Bill Sommerfeld wrote:
how about listing the combined mode cipher in both the "cipher" and the "mac" lists? that avoids the unambiguity problem -- if you know what it is, you'll know to accept it on an all-or-none basis; if you don't know what it is, you'll reject both instances of it.
I was going to suggest the same thing. And if someone worked up a draft for the cipher, the draft could say if the MAC "blahblah" is chosen, the cipher "blahblah" MUST be chosen. If the cipher "blahblah" is chosen, the MAC "blahblah" SHOULD be chosen.
-- Jon Bright Silicon Circus Ltd. http://www.siliconcircus.com