From nobody Sun Jan 1 15:34:29 2017 Return-Path: X-Original-To: jose@ietfa.amsl.com Delivered-To: jose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E171129519 for ; Sun, 1 Jan 2017 15:34:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.894 X-Spam-Level: X-Spam-Status: No, score=-3.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, LOCALPART_IN_SUBJECT=1.107, RP_MATCHES_RCVD=-3.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BdmUgjSNAz9j for ; Sun, 1 Jan 2017 15:34:26 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD0CF1294A9 for ; Sun, 1 Jan 2017 15:34:25 -0800 (PST) Received: from hebrews (24.21.96.37) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 1 Jan 2017 15:53:50 -0800 From: Jim Schaad To: Date: Sun, 1 Jan 2017 15:34:11 -0800 Message-ID: <012d01d26487$8fb4d080$af1e7180$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdJj3G5A8Mg3MokbT1CbCGHSigaDpA== Content-Language: en-us X-Originating-IP: [24.21.96.37] Archived-At: Cc: jose@ietf.org Subject: [jose] draft-jones-cose-rsa X-BeenThere: jose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Javascript Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Jan 2017 23:34:27 -0000 Comments: 0. Should this be done in curdle rather than as AD sponsored? 1. As per previous mail, remove values assignments in tables 1, 2, and 3 unless you have cleared them with the appropriate registry experts. I am less worried about table 4 but you should clear that as well. 2. Kill RSAES-OAP w/ SHA-1. We are not doing SHA-1 currently with any of the CBOR algorithms. In section 3.1.1.1 - what are the properties that are needed here for SHA-1 so we can ensure that the statement is true. Also, rename this to be s/ SHA-1 not w/ Default. There are no defaults for COSE. 3. Text in 3.1.1.1 and 2.1.1 should be more consistent in how it is written. 4. in the abstract be more specific about which RSA algorithms are being supported. For example, you are not doing 1.5 or KEM. 5. Why does 3.1.1.1 have a size and 2.1.1 not have one. This should be consistent. 6. section 3.1.1.1 should be encryption operation not decryption operation. 7. Section 3.1.1.1 - this text does not make sense "One potential denial of service operation is to provide encrypted objects using either abnormally long or oddly sized RSA modulus values." Should probably refer to keys not encrypted objects. 8. There is a requirement of minimum encoding lengths - what purpose does this serve? Is there a security problem here or is it just a nice to have because of message size? 9. Missing some security considerations. 10 Section 2.1.1 s/hash functions are not truncated/hash function outputs are not truncated/ From nobody Mon Jan 2 18:33:43 2017 Return-Path: X-Original-To: jose@ietfa.amsl.com Delivered-To: jose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16CF9129521 for ; Mon, 2 Jan 2017 18:33:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AAjZWOQlRYJP for ; Mon, 2 Jan 2017 18:33:41 -0800 (PST) Received: from mail-qt0-x234.google.com (mail-qt0-x234.google.com [IPv6:2607:f8b0:400d:c0d::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 12C0A126BF6 for ; Mon, 2 Jan 2017 18:33:41 -0800 (PST) Received: by mail-qt0-x234.google.com with SMTP id c47so452697274qtc.2 for ; Mon, 02 Jan 2017 18:33:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=CZNrmN8HocOEOLRRpBZUaqZfdBhb6xqwtIau2Dykg8Y=; b=mgQo15czMkQD7qFJBP9rcljNFsraEHShcrPJK1oKNVinz8gBqrnoQb8aLy4v0Obo8x HHJQXnz74JQRm1ChlGfi3kW4lnrnvAvOHuyASHkZQVhEDPHPirC7Y7oNKUcqTXEaekkC NUvcGxS+iH5UgENXCOPzxwV8F5+fQqxPPkxPIsRWfBMBWfivqhRgJR2z8LeWJZgMMPVG jKR4Z9tEQu66P3YTLSmudzdrdeiGrMFwNPluikKLArYj/heTRJmOEGOc8WcUb78NW4Nx WcUV8nsbuMBWZ5lVQLDRU2hPlpIJGPIej2RxD6hpLTQs3MGH83KwyTUQiMZKngpo8m2V fNqA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=CZNrmN8HocOEOLRRpBZUaqZfdBhb6xqwtIau2Dykg8Y=; b=JCtvc59/ke+9wbN1wnW25QSerfMNvwsRXMqvlSiQsE4rkJWYvZLUN+QmQqcVrKC3Tw QacO0Itfd96KrLHqogszIKQqUeCMId7ck5qN7AFJVK/9/WWukqC9r6vM8zRUscPNtWR5 9IeQW1hG/mxznDvQFHWbs40dOACQuXrMGCYX6re7iXitwr6NC09v9EVqMpgNji0jMdZA B5oQPXeLJDFFMzc29FI60+1B2AbrUwXIPelVBfLcmphUrixrYrYeIwSa3wQ0aU5uJq5/ lfcLq7i2Cy7+bKuPEF0SlePKxBgfTwPne8tZnzMjofkxGfHhjw0JdAVbPtPb7T3xrNfL Heyw== X-Gm-Message-State: AIkVDXJFpT1baX/nM5JPlYiFs0xB4mVggSN6UROHKBYmWod89H5LaFpSNfO4dSxmR2HTN4cx7Ga9rAs4PTHxog== X-Received: by 10.237.44.161 with SMTP id g30mr56430694qtd.144.1483410820199; Mon, 02 Jan 2017 18:33:40 -0800 (PST) MIME-Version: 1.0 Received: by 10.140.38.233 with HTTP; Mon, 2 Jan 2017 18:33:39 -0800 (PST) In-Reply-To: References: From: Martin Thomson Date: Tue, 3 Jan 2017 13:33:39 +1100 Message-ID: To: Phillip Hallam-Baker Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "jose@ietf.org" Subject: Re: [jose] Using Jose as an encrypted document container. X-BeenThere: jose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Javascript Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jan 2017 02:33:42 -0000 On 29 December 2016 at 08:33, Phillip Hallam-Baker wrote: > To meet these needs I need to modify Jose to support the following > additional requirements that the RFCs currently don't. > > 1) Single pass processing for encoding and decoding operations. > 1a) Bounded state > 1b) Support streaming, i.e. length not known in advance > > 2) Reduce complexity and number of options. > > 3) Efficient encoding of bodies, i.e. no Base64 overhead. That's a set of requirements that are addressed by draft-ietf-httpbis-encryption-encoding The relationship to JOSE is described in an appendix. From nobody Fri Jan 13 14:56:54 2017 Return-Path: X-Original-To: jose@ietfa.amsl.com Delivered-To: jose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A5CC129F01 for ; Fri, 13 Jan 2017 14:56:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.022 X-Spam-Level: X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lHoCrjGq9HiB for ; Fri, 13 Jan 2017 14:56:51 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0100.outbound.protection.outlook.com [104.47.41.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBD4A129972 for ; Fri, 13 Jan 2017 14:56:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=lAi6+WpnVsQ0kPJ6RwlBYFBl8CISnU4rt1k+vr/pTN4=; b=fKULLuut4Fgx16AoVrRms6nwT0LmYnCZ5A57+Et+8PB4+c312t/d6teLFJI6Vp0AmKfGnwJ20IMq36mn7SR9bRWMnwX4NvN8TF0j8MiJS005bkBZB7v+2ypZsvKO1yz2iFdDMnGCMz3ZQv8NOSYHGi3vTMRCHAFN90UBrUuktGw= Received: from BN3PR03MB2355.namprd03.prod.outlook.com (10.166.74.150) by BN3PR03MB2355.namprd03.prod.outlook.com (10.166.74.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.845.12; Fri, 13 Jan 2017 22:56:50 +0000 Received: from BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) by BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) with mapi id 15.01.0845.013; Fri, 13 Jan 2017 22:56:50 +0000 From: Mike Jones To: Jim Schaad , "draft-jones-cose-rsa@tools.ietf.org" Thread-Topic: [jose] draft-jones-cose-rsa Thread-Index: AdJj3G5A8Mg3MokbT1CbCGHSigaDpAKE9UzA Date: Fri, 13 Jan 2017 22:56:49 +0000 Message-ID: References: <012d01d26487$8fb4d080$af1e7180$@augustcellars.com> In-Reply-To: <012d01d26487$8fb4d080$af1e7180$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:f::7c0] x-ms-office365-filtering-correlation-id: 6eea074a-a223-4320-637e-08d43c07758f x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN3PR03MB2355; x-microsoft-exchange-diagnostics: 1; BN3PR03MB2355; 7:ncMAt1RYF9ClM3NwRCkgbzuVA2lkpX5b00xB8Y8Rwg08gJX/5n6vzopyKSrHakG/8LGGdzGQkgCHUAxzJr5Fe9RFaoU/ojRnipDdJnEoGeqSN/3TlRltUXqbPuXZPzSKazx0g65iK6VRobGF7leBVwdZMnjwPeCWA868jiddLYsSSMRAbnVUrtM1kRn/4piL6r9t5sqHdJOOylidkR2NBcam7nexKd0yFymG35DsAGDZqqezb7viHabVzjYXO9zgS33nY9G1rJnTyLd3sTBWUmvLMB6QCa0wS89InL7mOgFE2tsLDrK1j23G5o46JdZPZPY4iQ6U7gW/zjEcZA8FDuodNThh0H+ofTZCEyGG9+acNfBNapzp1gM1acl9eJ4Xwv9U1xHkCw2Az2a4tZ9P6LSxNFpEruay6U/HrVljdok2vviUggNvM1QfDfcJ6dtF1mg65aUtpMrUMKVhlx8mdMimIR97rWmP/Uf1SGs8X3c= x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040375)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(61426038)(61427038)(6041248)(20161123562025)(20161123555025)(20161123564025)(20161123560025)(6072148)(6047074)(6042181); SRVR:BN3PR03MB2355; BCL:0; PCL:0; RULEID:; SRVR:BN3PR03MB2355; x-forefront-prvs: 018632C080 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(377454003)(199003)(189002)(69234005)(13464003)(97736004)(2900100001)(6306002)(99286003)(189998001)(68736007)(6436002)(38730400001)(55016002)(77096006)(5001770100001)(10090500001)(25786008)(92566002)(3280700002)(9686003)(5660300001)(229853002)(2906002)(81156014)(7736002)(2950100002)(305945005)(81166006)(86362001)(122556002)(6116002)(230783001)(4326007)(2501003)(3660700001)(33656002)(74316002)(5005710100001)(8936002)(101416001)(8990500004)(6506006)(8676002)(86612001)(102836003)(54356999)(50986999)(76176999)(106356001)(105586002)(7696004)(27001)(10290500002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR03MB2355; H:BN3PR03MB2355.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jan 2017 22:56:49.9130 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR03MB2355 Archived-At: Cc: "jose@ietf.org" Subject: Re: [jose] draft-jones-cose-rsa X-BeenThere: jose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Javascript Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jan 2017 22:56:53 -0000 FYI, I replied to this on the COSE mailing list. -- Mike -----Original Message----- From: jose [mailto:jose-bounces@ietf.org] On Behalf Of Jim Schaad Sent: Sunday, January 01, 2017 3:34 PM To: draft-jones-cose-rsa@tools.ietf.org Cc: jose@ietf.org Subject: [jose] draft-jones-cose-rsa Comments: 0. Should this be done in curdle rather than as AD sponsored? 1. As per previous mail, remove values assignments in tables 1, 2, and 3 u= nless you have cleared them with the appropriate registry experts. I am le= ss worried about table 4 but you should clear that as well. 2. Kill RSAES-OAP w/ SHA-1. We are not doing SHA-1 currently with any of = the CBOR algorithms. In section 3.1.1.1 - what are the properties that are= needed here for SHA-1 so we can ensure that the statement is true. Also, = rename this to be s/ SHA-1 not w/ Default. There are no defaults for COSE. 3. Text in 3.1.1.1 and 2.1.1 should be more consistent in how it is writte= n. 4. in the abstract be more specific about which RSA algorithms are being su= pported. For example, you are not doing 1.5 or KEM. 5. Why does 3.1.1.1 have a size and 2.1.1 not have one. This should be co= nsistent. 6. section 3.1.1.1 should be encryption operation not decryption operation= . 7. Section 3.1.1.1 - this text does not make sense "One potential denial o= f service operation is to provide encrypted objects using either abnormally long or oddly sized RSA modulus values." Should probably refer to keys not encrypted objects. 8. There is a requirement of minimum encoding lengths - what purpose does = this serve? Is there a security problem here or is it just a nice to have = because of message size? 9. Missing some security considerations. 10 Section 2.1.1 s/hash functions are not truncated/hash function outputs a= re not truncated/ _______________________________________________ jose mailing list jose@ietf.org https://www.ietf.org/mailman/listinfo/jose From nobody Sun Jan 22 02:49:25 2017 Return-Path: X-Original-To: jose@ietfa.amsl.com Delivered-To: jose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB6551295E3; Sun, 22 Jan 2017 02:49:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fvnRkezA-57J; Sun, 22 Jan 2017 02:49:16 -0800 (PST) Received: from mail-wm0-x22c.google.com (mail-wm0-x22c.google.com [IPv6:2a00:1450:400c:c09::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 761351295E0; Sun, 22 Jan 2017 02:49:16 -0800 (PST) Received: by mail-wm0-x22c.google.com with SMTP id f73so25724024wmf.1; Sun, 22 Jan 2017 02:49:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:subject:to:message-id:date:user-agent:mime-version :content-transfer-encoding; bh=GGPQR8/mOw72vTBBGKoI6qCBKV8k+1vwwm79Yei4ueo=; b=c/PD1q2zJYwniFGxCFsjVoLS+KJxoM9lL3gB6ghfMaDjZDXzKq39WHUnMaFeSa5If/ nOoMMBI+q6vhOD1uFNtyTYikj5RDU4+tnFEnWY6ah6ihKVnbosQDjAxA9/gIRt6V5F4C JwxlEq4sz/S88z/FykA0fNSB/VhH3PjZorQXwv4QuAPX0+g+C0fxi3717X+8KZg+U0gz bL8DJk8Z9xWByEdWWhMZgErX4oxt22kEMemFfFIIjRb1DlsY77qbGE1BRGKGtp86QRua E+8Im1+J+h7DnnCnact85EcReOt87OUa7iMrjGK9jcGbU7w0E9o5Qo7kM/DyGzszosZh K0OQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:subject:to:message-id:date:user-agent :mime-version:content-transfer-encoding; bh=GGPQR8/mOw72vTBBGKoI6qCBKV8k+1vwwm79Yei4ueo=; b=BFA2EiGYUb44FdQptRKV3s3cafL15wZEVLYYTnjw5hNigWRIZ4Fxsn1Ujkdg6XVKLB naHBuyaRU3QFRT5w7aT+DfUlQL32rxFTrcU4odsLW51DkPEHIrAeOyRWtVIVdvd3PCyN NKly7LhvhL/9+/6iFt82I0p48EgxUvKWlZIjoOKihVPxq5hOUv3HKCUElV2JvosZob4u +sdfuT9D2TE4lvAOEVBoZBcqEpQ+Im/CVJt9B9KDUiN7Lw1MLNtW2bixwQu7A2LlHo/m 238onnA1FCr0xf9E3NcYS08rAAiDue00tzzrYkObE6Covgoa+ULCli3Xl+/O/IcadoZg 0R4A== X-Gm-Message-State: AIkVDXJL/N2lt1Ec6YnlVOllqCzqnVCZBeA2mosGDFgaMczdFFXbPiXu/rUQDe7u885BxA== X-Received: by 10.28.161.2 with SMTP id k2mr5441596wme.122.1485082154749; Sun, 22 Jan 2017 02:49:14 -0800 (PST) Received: from [192.168.1.79] (124.25.176.95.rev.sfr.net. [95.176.25.124]) by smtp.googlemail.com with ESMTPSA id c202sm15244192wmd.10.2017.01.22.02.49.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 22 Jan 2017 02:49:14 -0800 (PST) From: Anders Rundgren To: "json@ietf.org" , "jose@ietf.org" Message-ID: <1c1f195d-5fb4-b9ea-9339-3bba6114e6ea@gmail.com> Date: Sun, 22 Jan 2017 11:49:11 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [jose] A Critical Analysis of REST APIs for "Transaction Systems" X-BeenThere: jose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Javascript Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Jan 2017 10:49:18 -0000 Maybe of some interest... https://cyberphone.github.io/doc/web/REST-in-peace.html Enjoy! Anders From nobody Tue Jan 24 16:48:22 2017 Return-Path: X-Original-To: jose@ietfa.amsl.com Delivered-To: jose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 876A21295DB; Tue, 24 Jan 2017 16:48:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.401 X-Spam-Level: X-Spam-Status: No, score=-7.401 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-3.199, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cO8BSRGL6X48; Tue, 24 Jan 2017 16:48:15 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 143CE1295E6; Tue, 24 Jan 2017 16:48:15 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 004A6B8111C; Tue, 24 Jan 2017 16:48:14 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org X-PHP-Originating-Script: 1005:ams_util_lib.php From: rfc-editor@rfc-editor.org Message-Id: <20170125004815.004A6B8111C@rfc-editor.org> Date: Tue, 24 Jan 2017 16:48:14 -0800 (PST) Archived-At: Cc: drafts-update-ref@iana.org, jose@ietf.org, rfc-editor@rfc-editor.org Subject: [jose] RFC 8037 on CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE) X-BeenThere: jose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Javascript Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Jan 2017 00:48:16 -0000 A new Request for Comments is now available in online RFC libraries. RFC 8037 Title: CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE) Author: I. Liusvaara Status: Standards Track Stream: IETF Date: January 2017 Mailbox: ilariliusvaara@welho.com Pages: 14 Characters: 24333 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-jose-cfrg-curves-06.txt URL: https://www.rfc-editor.org/info/rfc8037 DOI: 10.17487/RFC8037 This document defines how to use the Diffie-Hellman algorithms "X25519" and "X448" as well as the signature algorithms "Ed25519" and "Ed448" from the IRTF CFRG elliptic curves work in JSON Object Signing and Encryption (JOSE). This document is a product of the Javascript Object Signing and Encryption Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet Standards Track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the Official Internet Protocol Standards (https://www.rfc-editor.org/standards) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From nobody Fri Jan 27 12:13:18 2017 Return-Path: X-Original-To: jose@ietfa.amsl.com Delivered-To: jose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AA1B12987A; Fri, 27 Jan 2017 12:13:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2rIyxTq1qZGI; Fri, 27 Jan 2017 12:13:16 -0800 (PST) Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F363E129876; Fri, 27 Jan 2017 12:13:15 -0800 (PST) Received: by mail-wm0-x232.google.com with SMTP id r126so132875473wmr.0; Fri, 27 Jan 2017 12:13:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:subject:to:message-id:date:user-agent:mime-version :content-transfer-encoding; bh=Bu4maJe967+MzzhLptogpHu9NfFeISiCdo0xHIEF1gA=; b=KYqIaes5J608ZiSJOqhBw+EiqAzlxZoBHgXI2bZz/ql+8AHql400EgVjz9pp1uqPPk aXVeQQ8Gu5PaSlEskDv1KgLbQIt5XU2Q5+93a4vun7c8YiJVk2ePqWXGAL45a42HZ7g6 hi0ecqG4iPF5rOb2j4mJNsd1znzA3hUjKV06kmXiSX4YCxZLhO2nPlGYd0yFUmdLE3h9 magrYSA6maehguz1MaMyqxzA+b5onGTb6z+/fmTQ+0xuD9lCOBNNd1OOTRgaOdByhpgw KxYekpY6zU/CBaqQhv98+baqVZCKNy8VLljYHb1BFXSCeOZI0W7M5d6GUkUIoQgW7Eh2 5sjg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:subject:to:message-id:date:user-agent :mime-version:content-transfer-encoding; bh=Bu4maJe967+MzzhLptogpHu9NfFeISiCdo0xHIEF1gA=; b=NqlqfwVmqaT/lBj+X7IgL1oT7lCDwXBBNlMWOQEwo0dYmQAogLPolBy5+7vpyzxlQb W7H1PNxnuyQYNokmpDsYcWoxuPxjr2AIRU397/io/Zpv+w/v0ZCKCLw20INhxIb+0EzC pNAXUv/yOUWE1Pmx/jOZJJakKeYLIisQeswrhf4TZ4F0AbNZkCfh3Jxlz/er79gq6gvL O9wC6rUMYaiPns/ABrmqFM01uoHnLdmRghTTBwTs1cwQHBcKziaiOLW8gfVtlPxGMehW zZ+gZ2Irk/wruBbD0p6q0BcGaKBcEP2/dFoxVzXkiTlGCtlFyfT/rnLiVkt66k6RJwNe s4qw== X-Gm-Message-State: AIkVDXL2G2yQsz1xUWjIby7isoCn1wMU+DlU6G1yt6j7gnx+E7QgxL1gWCQZYxCVo4XUDA== X-Received: by 10.223.160.43 with SMTP id k40mr10114788wrk.24.1485547994064; Fri, 27 Jan 2017 12:13:14 -0800 (PST) Received: from [192.168.1.79] (124.25.176.95.rev.sfr.net. [95.176.25.124]) by smtp.googlemail.com with ESMTPSA id o42sm9516272wrb.18.2017.01.27.12.13.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 27 Jan 2017 12:13:13 -0800 (PST) From: Anders Rundgren To: "json@ietf.org" , "jose@ietf.org" Message-ID: <0000859e-843d-ef5d-e2e3-1a7b1e17baf2@gmail.com> Date: Fri, 27 Jan 2017 21:13:05 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [jose] YASMIN - Yet Another jSon Message notatIoN X-BeenThere: jose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Javascript Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Jan 2017 20:13:17 -0000 WebSocket [1] is claimed to be the most efficient communication method for interactive Web applications. REST [2] is essentially incompatible with WebSocket although some people try to merge them. That's IMO fairly pointless, since they are building on different concepts. YASMIN [3], OTOH was *designed from scratch* to support both event-based communication like WebSocket and postMessage(), as well as traditional request/response schemes. Anders 1] https://tools.ietf.org/rfc/rfc6455.txt 2] https://en.wikipedia.org/wiki/Representational_state_transfer https://cyberphone.github.io/doc/web/REST-in-peace.html 3] https://cyberphone.github.io/doc/web/yasmin.html