RE: IPS security draft: SRP groups (resend)

[Black_David@emc.com]

Vince,

> If we cannot prove the primality of our chosen moduli I 
> thought why not use moduli, such as the well known groups 
> from RFC 2412, whose primality has been proven. Tom Wu told 
> me that would not be a problem provided we found generators 
> other than 2 (the generator that is given in RFC 2412), 
> because 2 in not useful (for these moduli) in SRP (I don't 
> know why such is the case).

Tom's already posed the required generators for the IKE groups
to the list.  In addition, Tero Kivinen was in the process of
proving the primality of Tom's SRP primes last night.  With
luck we'll have a post to the list with pointers to the proof
certificates soon.

Thanks,
--David
---------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 42 South St., Hopkinton, MA  01748
+1 (508) 249-6449            FAX: +1 (508) 497-8018
black_david@emc.com       Mobile: +1 (978) 394-7754
---------------------------------------------------