From 40ff4bb4824226da0cedf13b3f9e03dd27791a4a Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Sun, 22 Nov 2009 22:36:03 +0000 Subject: [PATCH] new draft --- ...t => draft-ietf-dnsext-dnssec-gost-04.txt} | 23 ++++++++++--------- 1 file changed, 12 insertions(+), 11 deletions(-) rename doc/draft/{draft-ietf-dnsext-dnssec-gost-03.txt => draft-ietf-dnsext-dnssec-gost-04.txt} (96%) diff --git a/doc/draft/draft-ietf-dnsext-dnssec-gost-03.txt b/doc/draft/draft-ietf-dnsext-dnssec-gost-04.txt similarity index 96% rename from doc/draft/draft-ietf-dnsext-dnssec-gost-03.txt rename to doc/draft/draft-ietf-dnsext-dnssec-gost-04.txt index 061df67944..1733c7d50d 100644 --- a/doc/draft/draft-ietf-dnsext-dnssec-gost-03.txt +++ b/doc/draft/draft-ietf-dnsext-dnssec-gost-04.txt @@ -1,12 +1,12 @@ DNS Extensions working group V.Dolmatov, Ed. Internet-Draft Cryptocom Ltd. -Intended status: Standards Track November 10, 2009 -Expires: May 10, 2010 +Intended status: Standards Track November 22, 2009 +Expires: May 22, 2010 Use of GOST signature algorithms in DNSKEY and RRSIG Resource Records for DNSSEC - draft-ietf-dnsext-dnssec-gost-03 + draft-ietf-dnsext-dnssec-gost-04 Status of this Memo @@ -49,7 +49,7 @@ Abstract the Domain Name System Security Extensions (DNSSEC, RFC 4033, RFC 4034, and RFC 4035). -V.Dolmatov Expires May 10, 2010 [Page 1] +V.Dolmatov Expires May 22, 2010 [Page 1] Table of Contents @@ -106,7 +106,7 @@ Table of Contents "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119]. -V.Dolmatov Expires May 10, 2010 [Page 2] +V.Dolmatov Expires May 22, 2010 [Page 2] 2. DNSKEY Resource Records @@ -164,7 +164,7 @@ V.Dolmatov Expires May 10, 2010 [Page 2] GostAsn1: MEUCAQAwHAYGKoUDAgITMBIGByqFAwICIwEGByqFAwICHgEEIgQgV/S 2FXdMtzKJBehZvjF4lVSx6m66TwqSe/MFwKSH/3E= -V.Dolmatov Expires May 10, 2010 [Page 3] +V.Dolmatov Expires May 22, 2010 [Page 3] The following DNSKEY RR stores a DNS zone key for example.net @@ -229,7 +229,7 @@ V.Dolmatov Expires May 10, 2010 [Page 3] type {TBA2}. The wire format of a digest value is compatible with RFC 4490 [RFC4490], that is digest is in little-endian representation. -V.Dolmatov Expires May 10, 2010 [Page 4] +V.Dolmatov Expires May 22, 2010 [Page 4] The digest MUST always be calculated with GOST R 34.11-94 parameters identified by id-GostR3411-94-CryptoProParamSet [RFC4357]. @@ -296,9 +296,9 @@ V.Dolmatov Expires May 10, 2010 [Page 4] Currently, the cryptographic resistance of the GOST 34.10-2001 digital signature algorithm is estimated as 2**128 operations of multiple elliptic curve point computations on prime modulus - 2**256. + of order 2**256. -V.Dolmatov Expires May 10, 2010 [Page 5] +V.Dolmatov Expires May 22, 2010 [Page 5] Currently, the cryptographic resistance of GOST 34.11-94 hash algorithm is estimated as 2**128 operations of computations of a @@ -355,7 +355,7 @@ V.Dolmatov Expires May 10, 2010 [Page 5] Rose, "Resource Records for the DNS Security Extensions", RFC 4034, March 2005. -V.Dolmatov Expires May 10, 2010 [Page 6] +V.Dolmatov Expires May 22, 2010 [Page 6] [RFC4035] Arends R., Austein R., Larson M., Massey D., and S. Rose, "Protocol Modifications for the DNS Security @@ -448,7 +448,8 @@ Moscow, 117303, Russian Federation EMail: igus@cryptocom.ru -V.Dolmatov Expires May 10, 2010 [Page 8] +V.Dolmatov Expires May 22, 2010 [Page 8] +