Re: New version of rsa-sha2-256 draft: Back to PKCS#1 v1.5

[nisse%lysator.liu.se@localhost (Niels Möller)]

denis bider <ietf-ssh3%denisbider.com@localhost> writes:

> Alright - points taken. :-)
>
> The feedback I've received appears to be as follows:
>
> - 1 count of support with caveats (Terra)
> - 1 count of neutral feedback (received from Thierry; my summary: deterministic intuitively better than probabilistic; but then again, this is probably not a problem with PSS)
> - 1 count of strong opposition (Peter)

Like Peter, I oppose making pss mandatory at this time (i.e., no choice
if you want to use sha2). I have no objection to specifying optional
methods with pss, if there are people who think migration towards pss is
desirable.

Regards,
/Niels

-- 
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.