Capwap Mailing List: Re: crypto algorithms for DTLS

[Eric Rescorla (ekr]

Charles Clancy <clancy [at] cs.umd.edu> writes:

> Abhijit,
>
> Due to the use of DTLS, we're stuck with TLS ciphersuites.  Use of 
> something like GCM would require a TLS GCM ciphersuite.  There is work 
> on a GCM ciphersuite now, but it requires ECC rather than RSA.  I don't 
> think we're quite ready to make ECC mandatory to implement.  Maybe once 
> draft-ietf-tls-ctr is done, we could consider some CTR encryption modes.

Assuming there's support for GCM in general, we'll probably do 
GCM with other key exchange mechanisms not too far in the future...

-Ekr