Hi. thanks for mail. the reason why SEED support give not so much impact is
SEED is not used alone but used with other crypto algorithms (hash, asymmetric...) SHA2 hash required in e-commerce transaction by the korean regulation. and which is also used in TLSv1.1+. SEED can be used under TLSv1.1+ environment. as we know, it is just now opened from box. regards mountie. On Tue, Oct 8, 2013 at 3:56 AM, Brian Smith <br...@briansmith.org> wrote: > Mountie Lee <moun...@paygate.net> wrote: > > SEED was adopted to encourage escaping ActiveX dependency in Korea > > e-commerce environment. > > Many people at Mozilla, including us platform engineers, want this > too. Our goal is to get rid of plugins on the internet completely. > And, also, personally I think it is a great idea for Mozilla to do > more to get Firefox working in South Korea. So, I think we all agree > on the goals. > > > at last year, "adding SEED to WebCrypto API" adopted as Action Item. > > the editor sent question "any user agent plan to implement SEED" > > > > I can not say "discussing terminating SEED support in mozilla" > > Whether SEED gets implemented to the WebCrypto API is a separate issue > from whether we continue to support SEED in TLS. If we want to add > SEED support to WebCrypto then we can do that even if we don't have > SEED in TLS. I am not going to promise that we will implement SEED as > part of the WebCrypto effort, but I do promise to give it serious > consideration. > > > minor algorithm itself has the meaning. > > it will be helpful for neutralizing or keeping possibilities. > > I agree that this is a concern. This is one of the reasons we are > looking into the Salsa/ChaCha algorithms, as a backup or replacement > for AES. > > Finally, software vendors, including Mozilla, need to work with the > Korean government to agree on what to do about the Korean crypto > regulations. Mozilla has been supporting SEED for TLS for a long time > and it seems to have had no positive impact. If in the future the > software industry and the Korean government decide that SEED in TLS is > the way forward, then we can add SEED back if we remove it now. > However, I am skeptical that the software industry is going to agree > that SEED in TLS is the right path forward. > > Cheers, > Brian > -- Mountie Lee PayGate CTO, CISSP Tel : +82 2 2140 2700 E-Mail : moun...@paygate.net ======================================= PayGate Inc. THE STANDARD FOR ONLINE PAYMENT for Korea, Japan, China, and the World -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
