From nobody Fri May 1 08:09:08 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 946753A13CF for ; Fri, 1 May 2020 08:09:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uMuLPxFK7P7o for ; Fri, 1 May 2020 08:09:04 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B6603A13AC for ; Fri, 1 May 2020 08:09:04 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id E4246300B5D for ; Fri, 1 May 2020 11:09:01 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id PW0zf3x_bgnf for ; Fri, 1 May 2020 11:09:01 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id E96CE3004AF; Fri, 1 May 2020 11:09:00 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) From: Russ Housley In-Reply-To: <11381.1588286249@localhost> Date: Fri, 1 May 2020 11:09:02 -0400 Cc: LAMPS WG Content-Transfer-Encoding: quoted-printable Message-Id: References: <63B58892-60CB-42C9-8168-E5476E2F40CB@vigilsec.com> <4E7C3690-6F3F-45C1-817E-F9D4DB1B184E@vigilsec.com> <11381.1588286249@localhost> To: Michael Richardson X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-rfc7030est-clarify-02 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 May 2020 15:09:07 -0000 >> (2) Several errata are listed in the Introduction: >=20 >> This document deals with errata numbers [errata4384], [errata5107], >> [errata5108], and [errata5904]. >=20 > I asked that question... I thought that I heard that they should be = normative. I can imagine a sentence that would make a normative reference, but this = one does not seem that way to me. Do others have an opinion about this question? Russ From nobody Fri May 1 08:18:56 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 84C563A13B5 for ; Fri, 1 May 2020 08:18:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.1 X-Spam-Level: X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3C4v5B-Y6dXI for ; Fri, 1 May 2020 08:18:53 -0700 (PDT) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 57EDA3A13AF for ; Fri, 1 May 2020 08:18:53 -0700 (PDT) Received: from pps.filterd (m0122330.ppops.net [127.0.0.1]) by mx0b-00190b01.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 041FHPMf028617; Fri, 1 May 2020 16:18:52 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=Q9JSx2oeHtgtMxc1MFmdjQoSqfSrr6OYIM6AmZbf3+M=; b=hTDQUAg9y/uoIJ0L3cA2MGVyyApxeTNmOLZzu4YLw7b8JMLUrSZCfFMvFOEn0LgVnF7q UWvZIPDCrFrRsMahQ7BqTiYteNm/jru1vY0ObCt7RMT+yNTxJhXh0vmyb3stwk8nffi2 leFbyHeTvyd5bprqx15PPha8LULMJafe+fJJ1nPAmJzMKXglrNUD0TCyv0nkMvFSE6jI IxQBlELvmx5sjJ1nUwMLhfCopnHwiJwAKK7bb/bU8SiBv34K9P3nqc0nDPsPYGQtNiZr J3PmQQQl8kVPVLj3RU4BWtCS60mgYLNbVu2+BkUIQZNRiXFVEZRVvPgtyY/QFvE4Ak5m FQ== Received: from prod-mail-ppoint4 (a72-247-45-32.deploy.static.akamaitechnologies.com [72.247.45.32] (may be forged)) by mx0b-00190b01.pphosted.com with ESMTP id 30r7hmaj3r-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 01 May 2020 16:18:52 +0100 Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.16.0.27/8.16.0.27) with SMTP id 041FI205028942; Fri, 1 May 2020 11:18:51 -0400 Received: from email.msg.corp.akamai.com ([172.27.165.117]) by prod-mail-ppoint4.akamai.com with ESMTP id 30mghutet4-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 01 May 2020 11:18:51 -0400 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com (172.27.165.121) by ustx2ex-dag1mb6.msg.corp.akamai.com (172.27.165.124) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 1 May 2020 08:18:50 -0700 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com ([172.27.165.121]) by ustx2ex-dag1mb3.msg.corp.akamai.com ([172.27.165.121]) with mapi id 15.00.1497.006; Fri, 1 May 2020 10:18:50 -0500 From: "Salz, Rich" To: Russ Housley , Michael Richardson CC: LAMPS WG Thread-Topic: [lamps] WG Last Call for draft-ietf-lamps-rfc7030est-clarify-02 Thread-Index: AQHWHzXRz2e+B6h5RUq8Zs8Flx1wZaiSlUGAgAEVCgD//7+tgA== Date: Fri, 1 May 2020 15:18:49 +0000 Message-ID: References: <63B58892-60CB-42C9-8168-E5476E2F40CB@vigilsec.com> <4E7C3690-6F3F-45C1-817E-F9D4DB1B184E@vigilsec.com> <11381.1588286249@localhost> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.36.20041300 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.37.52] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-05-01_09:2020-05-01, 2020-05-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=778 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2002250000 definitions=main-2005010123 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-05-01_09:2020-05-01, 2020-05-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 priorityscore=1501 adultscore=0 bulkscore=0 mlxlogscore=764 clxscore=1015 impostorscore=0 phishscore=0 malwarescore=0 mlxscore=0 suspectscore=0 lowpriorityscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2003020000 definitions=main-2005010122 Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-rfc7030est-clarify-02 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 May 2020 15:18:55 -0000 PiAgICBJIGNhbiBpbWFnaW5lIGEgc2VudGVuY2UgdGhhdCB3b3VsZCBtYWtlIGEgbm9ybWF0aXZl IHJlZmVyZW5jZSwgYnV0IHRoaXMgb25lIGRvZXMgbm90IHNlZW0gdGhhdCB3YXkgdG8gbWUuDQoN CkkgYWdyZWUgdGhpcyBpc24ndCBhIG5vcm1hdGl2ZSByZWZlcmVuY2UsIGFuZCBJIGRvbid0IG9i amVjdCBpZiBpdCBpcyBtYWRlIHRvIGJlIHNvLg0KDQo= From nobody Fri May 1 12:45:36 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B41523A1B84 for ; Fri, 1 May 2020 12:45:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=digicert.com header.b=CBzJv4cs; dkim=pass (1024-bit key) header.d=digicert.com header.b=ItD7wLJb Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w1VyKhiThQop for ; Fri, 1 May 2020 12:45:29 -0700 (PDT) Received: from us-smtp-delivery-173.mimecast.com (us-smtp-delivery-173.mimecast.com [63.128.21.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08FD83A1B83 for ; Fri, 1 May 2020 12:45:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digicert.com; s=mimecast20190124; t=1588362326; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=tbxR7Jm/175sxbFIcvZyVnl++vtlF4nscSEWX1ft6Ck=; b=CBzJv4cs7dZoJfwBVuHxwF3iS9zuUZKGniUQZhuf1hFoMpfQYwoo6VyiYWX9zgzdqvfM/a SWCoGCMrIDSSakovP+I0/Gi14CZPQoE4Dm6iKk23+xEuhiAuZOMJLe52LDGDKjQbqlaPxe O7w6VsFKhIzzjTD5raDgm+Hg58V2QIM= Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11lp2170.outbound.protection.outlook.com [104.47.58.170]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-28-YV5xxQu-NV2aL_JtSRQ1xQ-1; Fri, 01 May 2020 15:45:22 -0400 X-MC-Unique: YV5xxQu-NV2aL_JtSRQ1xQ-1 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=cVvG1vUzXdnRopcn3cpaMhwqIpmCKkqJWWlao/WMmv/SDhetF6IwDGeYkupVXGMSEQlemHMNb7ghjIbqMrGvwxU9//M0KA3Ygp9PSSlJ8hRz2/Ouy2vhRJvBn7HiggwHobtH6BQJIxtCd7l9MKZdLwinASgto4PuNybZoSdiyOeszGN3V96jliCrzrn0ZUjYY1qtO7eDOftLU5t8Su0DP273soBZdAZU9zPTHKKiJCUoE/ja58HGPHrMfuR/Bb633mqrcg91o0JdSPdjRfz74NX3JPLeBwiJLTCjdCgIvGKMdSyLPoFpamcXcM5TvuEm7r5cMwz3aMObQvG4NkJ22g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tbxR7Jm/175sxbFIcvZyVnl++vtlF4nscSEWX1ft6Ck=; b=WsENH5ejTS88FaeCt7KcZgltPpqNYkFdlFIukRx0zZv3SwQjCip41XlYaDfOmD/eoOwQSWrjWduaTuYuF6vxDtihEq5ji+wx2WwRnKVaWEwyy8FVKDQuyXRbRrSL2FM+0ZV/yVqhTTA8KZ6fnec5lRMGFmLnFPwp6XR/cqXIWMXJAFCVQmFoQUeyY1BSs6sHgtQkbnldWJQAOfWQvAqatO/znSfzUGdn7buNf91ZdyW7WkXIAtF3UW7NjuoDx6r3xuGjBf0UlEwyKqGPnrIUTns/CldFfLuJSpiKEy9g2LLWVZnnEnfmnwhpDUXZJc9IMDeNO8tA3lS0OWI9FMOHWA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=digicert.com; dmarc=pass action=none header.from=digicert.com; dkim=pass header.d=digicert.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digicert.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tbxR7Jm/175sxbFIcvZyVnl++vtlF4nscSEWX1ft6Ck=; b=ItD7wLJbRf9C831n79fECLmyz5RRRY6lH46vJv653jSxGJ6ijBFsPKnmxRio5XGkH2rFV8Ud9q6j5Klfud8LWT+9xJnI8cc1K+bh+DAaErqkOpBeVPAU3AVATnCkMJ0yTNVbwB9yDjPrOcphIlJ1lTQ8bFx+L4R3r3HWFYLztsc= Received: from BY5PR14MB3270.namprd14.prod.outlook.com (2603:10b6:a03:1e4::24) by BY5PR14MB4099.namprd14.prod.outlook.com (2603:10b6:a03:20c::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2958.20; Fri, 1 May 2020 19:45:20 +0000 Received: from BY5PR14MB3270.namprd14.prod.outlook.com ([fe80::5d9a:c434:cd5b:8f44]) by BY5PR14MB3270.namprd14.prod.outlook.com ([fe80::5d9a:c434:cd5b:8f44%9]) with mapi id 15.20.2958.027; Fri, 1 May 2020 19:45:20 +0000 From: Tim Hollebeek To: SPASM Thread-Topic: WG Last Call for draft-ietf-lamps-cms-update-alg-id-protect Thread-Index: AdYf8KSSykcnQsXFRZy6I1/5Rblf8g== Date: Fri, 1 May 2020 19:45:20 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=digicert.com; x-originating-ip: [74.98.249.186] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c10145f7-d783-4df3-8c9c-08d7ee082e85 x-ms-traffictypediagnostic: BY5PR14MB4099: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-prvs: 0390DB4BDA x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR14MB3270.namprd14.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(136003)(366004)(39850400004)(346002)(376002)(396003)(33656002)(966005)(5660300002)(52536014)(64756008)(4744005)(66476007)(66946007)(66556008)(66616009)(66446008)(99936003)(6916009)(316002)(15650500001)(71200400001)(76116006)(478600001)(186003)(44832011)(86362001)(2906002)(26005)(7696005)(6506007)(8936002)(8676002)(9686003)(55016002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=2.16.840.1.101.3.4.2.1; boundary="----=_NextPart_000_0000_01D61FCF.61B324F0" MIME-Version: 1.0 X-OriginatorOrg: digicert.com X-MS-Exchange-CrossTenant-Network-Message-Id: c10145f7-d783-4df3-8c9c-08d7ee082e85 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 May 2020 19:45:20.2145 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf813fa1-bde5-4e75-9479-f6aaa8b1f284 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ooHDQYeDmUtYyd6d66j5p/j9saLLc7ijXuIi97JMJSdB14j14J3ZqsyzK93FUiyiqTr1tkj3/ka/EUPHVPWdDsZHeaci1QV8JLgGRzQo3b8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR14MB4099 Archived-At: Subject: [lamps] WG Last Call for draft-ietf-lamps-cms-update-alg-id-protect X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 May 2020 19:45:34 -0000 ------=_NextPart_000_0000_01D61FCF.61B324F0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0001_01D61FCF.61B324F0" ------=_NextPart_001_0001_01D61FCF.61B324F0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit This is the LAMPS WG Last Call for "Update to the Cryptographic Message Syntax (CMS) for Algorithm Identifier Protection" . Please review the document and send your comments to the list by 22 May 2020. The datatracker page for the document is https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-update-alg-id-protect/ -Tim ------=_NextPart_001_0001_01D61FCF.61B324F0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

This is the LAMPS WG Last Call for "Update to = the Cryptographic Message Syntax (CMS) for Algorithm Identifier = Protection” = <draft-ietf-lamps-cms-update-alg-id-protect-01>.  Please = review the document and send your comments to the list by 22 May = 2020.

 

The datatracker page for the document is https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-update= -alg-id-protect/

 

-Tim

 

 

 

------=_NextPart_001_0001_01D61FCF.61B324F0-- ------=_NextPart_000_0000_01D61FCF.61B324F0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCD0sw ggO3MIICn6ADAgECAhAM5+DlF9hG/o/lYPwb8DA5MA0GCSqGSIb3DQEBBQUAMGUxCzAJBgNVBAYT AlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAi BgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0wNjExMTAwMDAwMDBaFw0zMTEx MTAwMDAwMDBaMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsT EHd3dy5kaWdpY2VydC5jb20xJDAiBgNVBAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0OFc7kQ4BcsYfzt2D5cRKlrtwmlIiq9M71 IDkoWGAM+IDaqRWVMmE8tbEohIqK3J8KDIMXeo+QrIrneVNcMYQq9g+YMjZ2zN7dPKii72r7IfJS Yd+fINcf4rHZ/hhk0hJbX/lYGDW8R82hNvlrf9SwOD7BG8OMM9nYLxj+KA+zp4PWw25EwGE1lhb+ WZyLdm3X8aJLDSv/C3LanmDQjpA1xnhVhyChz+VtCshJfDGYM2wi6YfQMlqiuhOCEe05F52ZOnKh 5vqk2dUXMXWuhX0irj8BRob2KHnIsdrkVxfEfhwOsLSSplazvbKX7aqn8LfFqD+VFtD/oZbrCF8Y d08CAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFEXr oq/0ksuCMS1Ri6enIZ3zbcgPMB8GA1UdIwQYMBaAFEXroq/0ksuCMS1Ri6enIZ3zbcgPMA0GCSqG SIb3DQEBBQUAA4IBAQCiDrzf4u3w43JzemSUv/dyZtgy5EJ1Yq6H6/LV2d5Ws5/MzhQouQ2XYFwS TFjk0z2DSUVYlzVpGqhH6lbGeasS2GeBhN9/CTyU5rgmLCC9PbMoifdf/yLil4Qf6WXvh+DfwWdJ s13rsgkq6ybteL59PyvztyY1bV+JAbZJW58BBZurPSXBzLZ/wvFvhsb6ZGjrgS2U60K3+owe3WLx vlBnt2y98/Efaww2BxZ/N3ypW2168RJGYIPXJwS+S86XvsNnKmgR34DnDDNmvxMNFG7zfx9jEB76 jRslbWyPpbdhAbHSoyahEHGdreLD+cOZUbcrBwjOLuZQsqf6CkUvovDyMIIFOjCCBCKgAwIBAgIQ Di7WjgxCjxTrYbReNHesEzANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMM RGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2Vy dCBTSEEyIEFzc3VyZWQgSUQgQ0EwHhcNMTcxMTI4MDAwMDAwWhcNMjIwMjI1MTIwMDAwWjBWMQsw CQYDVQQGEwJVUzENMAsGA1UECBMEVXRhaDENMAsGA1UEBxMETGVoaTERMA8GA1UEChMIRGlnaUNl cnQxFjAUBgNVBAMTDVRpbSBIb2xsZWJlZWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKUTIS9F3d7CfkCjsf4my28pYoZJDkEAiXVqGP4jzbFkszUQNfW3PYpFUo1GnKQykl/tM0qnzw 05bfVLo1+ce0e9fyAwYfulr+HaAVCPqx+PZw9CDY6c0NYd7Fc7S0scONxKekNF4q1mUucfGuGapW sEsyix0CuR0NMuJ4I+w8qMn9MzjzI7bvduG+uVLmZIi0p6D8+2R5BOQFy0tVeQ/aLfS91fG1DTYF YkPF+a/6JlFxzywPzCth8KW2Po4w8JqQWtam/ADKrgMaOnEJs9csefTW/FWRDeGQk5t3rnyS19FP QfpyPPau4ChB5xokfRcg3VEwqfOoIIexjUhZY5X9AgMBAAGjggHzMIIB7zAfBgNVHSMEGDAWgBTn AiOAAE/Y17yUC9k/dDlJMjyKeTAdBgNVHQ4EFgQUjqBhf3GcBV6YGYSmp2iS4Wi/3N4wDAYDVR0T AQH/BAIwADAlBgNVHREEHjAcgRp0aW0uaG9sbGViZWVrQGRpZ2ljZXJ0LmNvbTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMEMGA1UdIAQ8MDowOAYKYIZIAYb9 bAQBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGIBgNVHR8E gYAwfjA9oDugOYY3aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFzc3VyZWRJ RENBLWcyLmNybDA9oDugOYY3aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFz c3VyZWRJRENBLWcyLmNybDB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0U0hBMkFzc3VyZWRJRENBLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAmOLw9+cVMHn8tJ0k 76baCfFZwkvfvxSAlCXo+Fcsv55/og0V065Rpb4HvVTi0e0qKCMbBxc71NWxhMvKJHt+sfSmVatX mAOPNDRvtVvJBkcd0bvzMut/r3npQqs1wezHLtAq+MlQZDjgiJB+DkNblnnphzEQSp7q/4K9oMoP KViRxBv+/kseA8GOfhHU6EVmeu9xQrBqexH1DPUrUSGpNGDyvtUaU+bBy8Kz2hQfOu6f/73wLqUx e583C9y2Gqn1xCB77yPxXqRSLLRC6FbrToJbKiFYQJ4znZZyhPYJHL0SOpWyXfVKp4PEO54A/xr5 oVyPhEQhOtasoIRCLtHZrzCCBk4wggU2oAMCAQICEASueWBmZpAaucV/pmxb3M0wDQYJKoZIhvcN AQELBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3 LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBSb290IENBMB4XDTEz MTEwNTEyMDAwMFoXDTI4MTEwNTEyMDAwMFowZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lD ZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgU0hB MiBBc3N1cmVkIElEIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PgRIz9qte/A J3kbLQWHohBDMd8O1BUbT3ekIs4+jHDwvgeO3ScqvAEdtiwKyt1pWB9B7WoFH9pjeFkeIiwr+Lp+ yTU7VvEffEJ+JbAjGcZFONc9RPkgfGCuHLBaGAS+jzv3qfCUmqYMY0m2QRdTQDK9T+ZQelAfJUXo 8Ymvzf9e/1Dz8BcR/73FifW9YrnY+45FBIVtmc3FSE39JqsCNkXqNtdfauIagkEK3OnZ9ZEXjsYh rTg8E+Yef2ac1U3ZRtr2z1KnfTskw7TBUTXGm+vU737kewPhRL16CzfgT8uCig1xGOSm4IksG/Oy czzBsJKeGH29q33FfQihLMKfcwIDAQABo4IC+DCCAvQwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNV HQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp Y2VydC5jb20wgYEGA1UdHwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9E aWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwME MIIBswYDVR0gBIIBqjCCAaYwggGiBgpghkgBhv1sAAIEMIIBkjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMA ZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0 AHUAdABlAHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMA ZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABh AHIAdAB5ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBpAHQAIABsAGkA YQBiAGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBvAHIAcABvAHIAYQB0AGUAZAAg AGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQByAGUAbgBjAGUALjAdBgNVHQ4EFgQU5wIjgABP 2Ne8lAvZP3Q5STI8inkwHwYDVR0jBBgwFoAUReuir/SSy4IxLVGLp6chnfNtyA8wDQYJKoZIhvcN AQELBQADggEBAE7UiSe5/R2Hd34PKAWQ8QovyTs+vZOckMav+pFRhzJUa+jKwXFRXJmOtfrgYhmZ pgeafBMn2+UCooQS2RX2CkRXxDSPbXMfOtagAT3e44LkRWuy6yX9gF4dOZC+W0L2zpFg4/mgVgxI EM4zaHvNk6vwastPWA+5e10bBIGepyLiV0kn7pKTCL5pCFMCOi5dyBn0UIBOAtmwXZG0k4f5lpaB VUCOZu2C2LsoX+1MYe0GWCgZUxFEvEcgKbIEbNiJVJk7ddtneCweknjGVT1YEhEybr1DDE0023vG QtvsvqubYUwGkuOO3yEqUFcEwGCiNdUknmY3CUnP1fhls+DibsIxggO/MIIDuwIBATB5MGUxCzAJ BgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xJDAiBgNVBAMTG0RpZ2lDZXJ0IFNIQTIgQXNzdXJlZCBJRCBDQQIQDi7WjgxCjxTrYbReNHes EzANBglghkgBZQMEAgEFAKCCAhcwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0B CQUxDxcNMjAwNTAxMTk0NDIxWjAvBgkqhkiG9w0BCQQxIgQgdZo2H2Plg+ydwGukjZlkQuEtvY1h ZcNWwn7Y8VGO5a4wgYgGCSsGAQQBgjcQBDF7MHkwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERp Z2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQg U0hBMiBBc3N1cmVkIElEIENBAhAOLtaODEKPFOthtF40d6wTMIGKBgsqhkiG9w0BCRACCzF7oHkw ZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2lj ZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgU0hBMiBBc3N1cmVkIElEIENBAhAOLtaODEKPFOth tF40d6wTMIGTBgkqhkiG9w0BCQ8xgYUwgYIwCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggq hkiG9w0DBzALBglghkgBZQMEAQIwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAsGCWCG SAFlAwQCATALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAcGBSsOAwIaMA0GCSqGSIb3DQEBAQUA BIIBAHTK9zumQVTQRqa9VT8r3fXiu1mV0pVkeOO4O/g9IbNBLnL8Dh1qzfKPA0zzrATH3G3zt9yG IruxNQmMWdTOmt5wDc58Fb7XIPdN2xZIa6ek+cEou1d9uPZeoldzPqyBvirkHtF1dPQgSWk23V9q CmV+tclObCTkCmiUw/hpxoty+qNjfl1SVbMKJOPvrQn1UNxMDHmp4WzL6zHYVJ/xE127mSSOvREk ko5dZXvrU/bHY89O+S+RSoP7ivMcXqf3NJXFW48EnV3pPEG3yY0QrMZiz9+19Ug4UTipvlzd6mz4 jXkcQWK03Rse4ZXWe9GJ2+rY5kjCnzD3gjxMf7bFbS4AAAAAAAA= ------=_NextPart_000_0000_01D61FCF.61B324F0-- From nobody Fri May 1 14:01:09 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60E4B3A1C9B for ; Fri, 1 May 2020 14:01:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IhAs3JiubEFd for ; Fri, 1 May 2020 14:01:05 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABAB63A1C98 for ; Fri, 1 May 2020 14:01:04 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id D651538983; Fri, 1 May 2020 16:59:01 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 212BBB6F; Fri, 1 May 2020 17:00:57 -0400 (EDT) From: Michael Richardson To: "Salz\, Rich" , Russ Housley , LAMPS WG In-Reply-To: References: <63B58892-60CB-42C9-8168-E5476E2F40CB@vigilsec.com> <4E7C3690-6F3F-45C1-817E-F9D4DB1B184E@vigilsec.com> <11381.1588286249@localhost> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 25.1.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-rfc7030est-clarify-02 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 May 2020 21:01:08 -0000 --=-=-= Content-Type: text/plain Salz, Rich wrote: >> I can imagine a sentence that would make a normative reference, but >> this one does not seem that way to me. > I agree this isn't a normative reference, and I don't object if it is made to be so. I'm agnostic! I had asked what the RFC-editor wanted, I thought I heard that it should be normative. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl6sjggACgkQgItw+93Q 3WVJuQf/ffsm5aDH2YyP7AR0Sfl4c3zWonW8J7w7BDtTrsfylkEtOn42jQGaaw4d 4yJQEmoNFV6IVI+bgf3SXGFZnEN/m4j+FLEGRxsyfmboqwnoK+nNndLYxVMvCdvd cF/yQAu3SfpgptKpR8ilwxDsuoU18ugQt2509Uw2Rf/c8O8Uo9jI+WMzfQ67EApy g/Lsee7rE0MPcKZfSSHALCLdMWSwRum1T9FpMugInpyuC/7eK7amblm0AcQpQ/6m UXFpOa3UtP7gu8a29/Kp/2LRfR2ih9LYo7SwuDldMiU3FgnxtK2hazLZgfHQDRN2 NHX/r5aBQ6vPy7EQknOC9CV9Nc67mQ== =dgWv -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue May 5 05:44:58 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B057C3A0404 for ; Tue, 5 May 2020 05:44:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RUiCxYmTgazQ for ; Tue, 5 May 2020 05:44:55 -0700 (PDT) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85EC13A0365 for ; Tue, 5 May 2020 05:44:50 -0700 (PDT) Received: from pps.filterd (m0050102.ppops.net [127.0.0.1]) by m0050102.ppops.net-00190b01. (8.16.0.42/8.16.0.42) with SMTP id 045Cf0tM017263; Tue, 5 May 2020 13:44:48 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : content-type : mime-version; s=jan2016.eng; bh=8iKYLm7mudYZ2Vf1t9ZWWOo9OHdrHb+AHV6cBfzPxFo=; b=gu1ysw821dtu9bxvJ7nggiEUxa6vlUiOc6knREVc3LwVr7hIl6boulohaharbFXdTVI5 0p4CctwETywCjpNqTnJrH9W6ozz/x03lB1EA5CrTsWDCku4ITNhseFXzpVma15lSmyM8 2cSfwtd0wWGbDnipQSn2WIGeJ1HjQq9h3nibYtZt0kWc2vQe2Dxc1BBmVDXkYdMT3Ogw CfPJIAZYhf7+YXfYf6VnYFzc5mLp2Rl7TX7mn7FwebETXrrSzAs2K96+qLfNhV6G1RzA TJ0qBua3zu5SjDcUEQrWqWljwP1csbvY3Jx6xAYHPk4k/X4neYPL6yA142cX4zR4qu/R 0w== Received: from prod-mail-ppoint7 (a72-247-45-33.deploy.static.akamaitechnologies.com [72.247.45.33] (may be forged)) by m0050102.ppops.net-00190b01. with ESMTP id 30rx1dnnk3-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 05 May 2020 13:44:47 +0100 Received: from pps.filterd (prod-mail-ppoint7.akamai.com [127.0.0.1]) by prod-mail-ppoint7.akamai.com (8.16.0.27/8.16.0.27) with SMTP id 045CWuB1004063; Tue, 5 May 2020 08:44:47 -0400 Received: from email.msg.corp.akamai.com ([172.27.165.116]) by prod-mail-ppoint7.akamai.com with ESMTP id 30twrqcp7k-2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 05 May 2020 08:44:47 -0400 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com (172.27.165.121) by ustx2ex-dag1mb5.msg.corp.akamai.com (172.27.165.123) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 5 May 2020 07:44:45 -0500 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com ([172.27.165.121]) by ustx2ex-dag1mb3.msg.corp.akamai.com ([172.27.165.121]) with mapi id 15.00.1497.006; Tue, 5 May 2020 07:44:45 -0500 From: "Salz, Rich" To: Tim Hollebeek , SPASM Thread-Topic: [lamps] WG Last Call for draft-ietf-lamps-cms-update-alg-id-protect Thread-Index: AQHWItr0wNX0bnkBOkCfBkkLa4kNvg== Date: Tue, 5 May 2020 12:44:45 +0000 Message-ID: <6241A781-C62B-4933-AF0E-89CA7D35B6E9@akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.36.20041300 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.39.153] Content-Type: multipart/alternative; boundary="_000_6241A781C62B4933AF0E89CA7D35B6E9akamaicom_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-05-05_08:2020-05-04, 2020-05-05 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=642 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2002250000 definitions=main-2005050100 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.138, 18.0.676 definitions=2020-05-05_08:2020-05-04, 2020-05-05 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxscore=0 lowpriorityscore=0 malwarescore=0 priorityscore=1501 bulkscore=0 suspectscore=0 impostorscore=0 clxscore=1011 adultscore=0 spamscore=0 mlxlogscore=629 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2003020000 definitions=main-2005050101 Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-cms-update-alg-id-protect X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 May 2020 12:44:57 -0000 --_000_6241A781C62B4933AF0E89CA7D35B6E9akamaicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 ICAqICAgVGhpcyBpcyB0aGUgTEFNUFMgV0cgTGFzdCBDYWxsIGZvciAiVXBkYXRlIHRvIHRoZSBD cnlwdG9ncmFwaGljIE1lc3NhZ2UgU3ludGF4IChDTVMpIGZvciBBbGdvcml0aG0gSWRlbnRpZmll ciBQcm90ZWN0aW9u4oCdIDxkcmFmdC1pZXRmLWxhbXBzLWNtcy11cGRhdGUtYWxnLWlkLXByb3Rl Y3QtMDE+LiAgUGxlYXNlIHJldmlldyB0aGUgZG9jdW1lbnQgYW5kIHNlbmQgeW91ciBjb21tZW50 cyB0byB0aGUgbGlzdCBieSAyMiBNYXkgMjAyMC4NCg0KDQoNCkkganVzdCByZS1yZWFkIHRoaXMg ZG9jdW1lbnQuICBJdOKAmXMgdmVyeSB3ZWxsLXdyaXR0ZW4sIHNob3VsZCBzYWlsIHRocm91Z2gg dGhlIGRpcmVjdG9yYXRlcyBhbmQgSUVTRyByZXZpZXcuICBTaGlwIGl0Lg0KDQo= --_000_6241A781C62B4933AF0E89CA7D35B6E9akamaicom_ Content-Type: text/html; charset="utf-8" Content-ID: <0A3CAE8A7906264981DC7AA20E85A7F4@akamai.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5Nc29QbGFpblRleHQsIGxpLk1zb1BsYWlu VGV4dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0 eWxlLWxpbms6IlBsYWluIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IlBsYWluIFRl eHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFp biBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWls U3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0 DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBh Z2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBp biAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30N Ci8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjczMjYyOTMy NjsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTE2MDcw MTUyMzggMTQ0MDI3NDY2MiA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5 ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNv LWxldmVsLXN0YXJ0LWF0OjA7DQoJbXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+DmDsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5 OldpbmdkaW5nczsNCgltc28tZmFyZWFzdC1mb250LWZhbWlseTpDYWxpYnJpOw0KCW1zby1iaWRp LWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBs MDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToi Q291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsOA0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3Qg bDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGlu Z3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47 fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIjMDU2M0Mx IiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8dWwgc3R5bGU9 Im1hcmdpbi10b3A6MGluIiB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvUGxhaW5UZXh0IiBz dHlsZT0ibXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPlRoaXMgaXMgdGhlIExBTVBTIFdHIExhc3Qg Q2FsbCBmb3IgJnF1b3Q7VXBkYXRlIHRvIHRoZSBDcnlwdG9ncmFwaGljIE1lc3NhZ2UgU3ludGF4 IChDTVMpIGZvciBBbGdvcml0aG0gSWRlbnRpZmllciBQcm90ZWN0aW9u4oCdICZsdDtkcmFmdC1p ZXRmLWxhbXBzLWNtcy11cGRhdGUtYWxnLWlkLXByb3RlY3QtMDEmZ3Q7LiZuYnNwOyBQbGVhc2Ug cmV2aWV3IHRoZSBkb2N1bWVudCBhbmQNCiBzZW5kIHlvdXIgY29tbWVudHMgdG8gdGhlIGxpc3Qg YnkgMjIgTWF5IDIwMjAuPG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPkkganVz dCByZS1yZWFkIHRoaXMgZG9jdW1lbnQuJm5ic3A7IEl04oCZcyB2ZXJ5IHdlbGwtd3JpdHRlbiwg c2hvdWxkIHNhaWwgdGhyb3VnaCB0aGUgZGlyZWN0b3JhdGVzIGFuZCBJRVNHIHJldmlldy4mbmJz cDsgU2hpcCBpdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_6241A781C62B4933AF0E89CA7D35B6E9akamaicom_-- From nobody Tue May 5 07:27:17 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75EB33A0538 for ; Tue, 5 May 2020 07:27:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id do5CwvAaE5FK for ; Tue, 5 May 2020 07:27:13 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8873C3A046E for ; Tue, 5 May 2020 07:27:13 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 354AF300B4F for ; Tue, 5 May 2020 10:27:11 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 9GS1_6uft3pe for ; Tue, 5 May 2020 10:27:09 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 730393004AF for ; Tue, 5 May 2020 10:27:09 -0400 (EDT) From: Russ Housley Content-Type: multipart/alternative; boundary="Apple-Mail=_BC5AF0A4-D756-43F0-AB1E-AD62C46319CC" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Message-Id: <798FE04D-D3F2-4370-B48D-F5B8E5F4E0D4@vigilsec.com> References: <158857581528.28405.17372040856513106617@ietfa.amsl.com> To: LAMPS WG Date: Tue, 5 May 2020 10:27:11 -0400 X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: [lamps] Survey on planning for possible online IETF meetings X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 May 2020 14:27:16 -0000 --Apple-Mail=_BC5AF0A4-D756-43F0-AB1E-AD62C46319CC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Please participate in this survey. The survey data will be very = important as we plan future IETF meetings. Thanks, Russ > From: IETF Executive Director > > Subject: Reminder: Survey on planning for possible online IETF = meetings > Date: May 4, 2020 at 3:03:35 AM EDT > To: "IETF Announcement List" > > Reply-To: ietf108planning@ietf.org >=20 > This is a reminder that we need the IETF community to help us plan for = the possibility that one or more upcoming IETF meetings in 2020 and = possibly 2021 may not be able to go ahead in person. You can help us = with this by filling out the following survey:=20 >=20 > https://www.surveymonkey.com/r/5328FFJ = >=20 > So far we have 114 responses and we would ideally like 500 or more. >=20 > The survey contains the following pages and will take 15-20 minutes to = complete: >=20 > 1. Welcome > 2. Online IETF 107 and the subsequent virtual interims > 3. Replacing a cancelled in-person meeting > 4. Online meeting format and timezone > 5. Replicating humming > 6. Replicating the hallway environment > 7. Fees > 8. Thanks and anything else >=20 > We run the survey in anonymous mode which means that we only see data = that you explicitly provide. >=20 > Thank you in advance for your help. >=20 > --=20 > Alissa Cooper, IETF Chair > Jay Daley, IETF Executive Director > Colin Perkins, IRTF Chair --Apple-Mail=_BC5AF0A4-D756-43F0-AB1E-AD62C46319CC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
Please participate in = this survey. The survey data will be very important as we plan future = IETF meetings.

Thanks,
Russ

From: = IETF Executive = Director <exec-director@ietf.org>
Subject: = Reminder: Survey = on planning for possible online IETF meetings
Date: = May 4, 2020 at 3:03:35 AM = EDT
To: = "IETF Announcement List" <ietf-announce@ietf.org>
Reply-To: = ietf108planning@ietf.org

This is a reminder that we = need the IETF community to help us plan for the possibility that one or = more upcoming IETF meetings in 2020 and possibly 2021 may not be able to = go ahead in person.  You can help us with this by filling out the = following survey:

https://www.surveymonkey.com/r/5328FFJ

So far we have 114 responses and we would ideally like 500 or = more.

The survey contains the following = pages and will take 15-20 minutes to complete:

1. Welcome
2. Online IETF 107 and the = subsequent virtual interims
3. Replacing a cancelled = in-person meeting
4. Online meeting format and timezone
5. Replicating humming
6. Replicating the = hallway environment
7. Fees
8. Thanks and = anything else

We run the survey in = anonymous mode which means that we only see data that you explicitly = provide.

Thank you in advance for your = help.

--
Alissa Cooper, IETF = Chair
Jay Daley, IETF Executive Director
Colin= Perkins, IRTF Chair

= --Apple-Mail=_BC5AF0A4-D756-43F0-AB1E-AD62C46319CC-- From nobody Wed May 6 02:43:03 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C15553A07A8 for ; Wed, 6 May 2020 02:43:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=siemens.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 68UpTVoiviOm for ; Wed, 6 May 2020 02:42:59 -0700 (PDT) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50070.outbound.protection.outlook.com [40.107.5.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBC963A07BB for ; Wed, 6 May 2020 02:42:58 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CF2pjnHChidI4S2sx86kCx7wUJqC7286HEo6wmWuS+1X+58SeE4iun5p9zKcX/pYm1tHxo7R/WzsOn93iTxGIkwjZ3UssKnNXQN3CPWQyEk6+reo4uTMCimxqxOTjhkAtDhxGY22Ghatwj3Br/nnocHYfDQiHJGoKkMFRAdlh3xgh3FTOukB9inE3LqpsZLfLIdXVXlPzPmviGsVX63dPdTVCImWP69UB5IoTnc8nj6idMYj67xa/36aGL3ZfDNJL4W1kLXX2Mbys1wtDIfuE9kLbP6LRN4QFTvQ6PqXTTS6o9s45V44TTgVmUAx6ZLiZF4YFR8kFG8boUtC4vUXBg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=slaZA22/wOt3WcQ+dJZ60EjZ728xxGaLGotTubxcCv4=; b=g0DzwY+aWiwGvHlf4zweK6ffKgzGGMZcxkLYHykFD/3nxeas3YoLzw2bcI6kZiKkt+EttLH5sUz72B85rtuzmIv7cD2sKq0dSLzmfrwBUf9ucPSfMyNKIaqZnyOnvPRdu9qcL0ilIocZ/NlWSbntgWOgUlzZjSp8/2FG8nMg3pWj1OctuAEqcBp7HA7rM+8QO82KK/pxZiLDWOD9YaP1wTN5n4M2Gi1xzxTcx/gn5lJl3tUIlhvjyYkPAOUcUmbpGaH+UcF+uxA12VIwvMl2KZip/PEus8o9Yj4ycNiVC1PsVL291SQV7jPIZCSxN9IY/YHA0pC+gbZY3Gjqke13ug== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.onmicrosoft.com; s=selector1-siemens-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=slaZA22/wOt3WcQ+dJZ60EjZ728xxGaLGotTubxcCv4=; b=EpM/GtDUmcU/kncrpofluVCs7pan2LC8tZSkuJE06nmc9/YaJnzM8XwyFgFHTnR0M/TkULciuuByIpL6T1+CQ+/7AsRY1EtENXYZpRz2B72kwV5Q0vdGsCBCGeSTyt+OISXPxF58b3AyzDahM1bVI2AhMO0eAOOIO5y1N+ufhdI= Received: from AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:e2::32) by AM0PR10MB3475.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:15d::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2979.28; Wed, 6 May 2020 09:42:56 +0000 Received: from AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM ([fe80::85a4:2ab:a6b9:e1a3]) by AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM ([fe80::85a4:2ab:a6b9:e1a3%6]) with mapi id 15.20.2958.030; Wed, 6 May 2020 09:42:56 +0000 From: "Brockhaus, Hendrik" To: LAMPS WG , Jim Schaad CC: "steffen.fries@siemens.com" Thread-Topic: draft-ietf-lamps-cmp-updates section 3.8 using pkcs-9-at-localKeyId containing a revocation passphrase hint Thread-Index: AdYjiqD70iVEvJBYSCuMsO7kBTpDbw== Date: Wed, 6 May 2020 09:42:56 +0000 Message-ID: Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=siemens.com; x-originating-ip: [165.225.200.175] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 2b25c15e-77f4-46e9-e700-08d7f1a1db3a x-ms-traffictypediagnostic: AM0PR10MB3475:|AM0PR10MB3475: x-ld-processed: 38ae3bcd-9579-4fd4-adda-b42e1495d55a,ExtAddr x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 03950F25EC x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(396003)(376002)(366004)(346002)(39860400002)(33430700001)(71200400001)(33656002)(5660300002)(478600001)(186003)(4744005)(33440700001)(19627235002)(7696005)(26005)(8936002)(8676002)(52536014)(64756008)(316002)(66556008)(66446008)(86362001)(66476007)(66946007)(76116006)(2906002)(55016002)(55236004)(4326008)(107886003)(9686003)(6506007)(110136005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/alternative; boundary="_000_AM0PR10MB2402173DFBD40DFF043AE839FEA40AM0PR10MB2402EURP_" MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2b25c15e-77f4-46e9-e700-08d7f1a1db3a X-MS-Exchange-CrossTenant-originalarrivaltime: 06 May 2020 09:42:56.4834 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: bNCAiteb2yJ2n6SDRMQJVcHsJRnz2yhFdWDx7T1giKUXR0d/gZmuqP+04NJwKhDQVzwH9dhRjCQ8d3bwk9RHLMtOFkebBzz1Xea0aIZN6pY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR10MB3475 Archived-At: Subject: [lamps] draft-ietf-lamps-cmp-updates section 3.8 using pkcs-9-at-localKeyId containing a revocation passphrase hint X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2020 09:43:01 -0000 --_000_AM0PR10MB2402173DFBD40DFF043AE839FEA40AM0PR10MB2402EURP_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable During IETF 107 we discussed whether to use pkcs-9-at-friendlyName or pkcs-= 9-at-localKeyId as specified in RFC 2985 section 5.5 in envelopedData to tr= ansport an identifier for the revocation passphrase. The WG seemed to prefer the localKeyId. @Jim, did you manage to take a look on this and do you have a different opi= nion? -- Hendrik --_000_AM0PR10MB2402173DFBD40DFF043AE839FEA40AM0PR10MB2402EURP_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

During IETF 107 we discussed wh= ether to use pkcs-9-at-friendlyName or pkcs-9-at-localKeyId as specified in= RFC 2985 section 5.5 in envelopedData to transport an identifier for the r= evocation passphrase.

The WG seemed to prefer the loc= alKeyId.

 

@Jim, did you manage to take a = look on this and do you have a different opinion?

 

-- Hendrik

--_000_AM0PR10MB2402173DFBD40DFF043AE839FEA40AM0PR10MB2402EURP_-- From nobody Wed May 6 07:28:17 2020 Return-Path: X-Original-To: spasm@ietf.org Delivered-To: spasm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A8873A09F3; Wed, 6 May 2020 07:27:07 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: spasm@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.129.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: spasm@ietf.org Message-ID: <158877522732.30984.15330377656359745639@ietfa.amsl.com> Date: Wed, 06 May 2020 07:27:07 -0700 Archived-At: Subject: [lamps] I-D Action: draft-ietf-lamps-rfc7030est-clarify-05.txt X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2020 14:27:08 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Limited Additional Mechanisms for PKIX and SMIME WG of the IETF. Title : Clarification of Enrollment over Secure Transport (EST): transfer encodings and ASN.1 Authors : Michael Richardson Thomas Werner Wei Pan Filename : draft-ietf-lamps-rfc7030est-clarify-05.txt Pages : 12 Date : 2020-05-06 Abstract: This document updates RFC7030: Enrollment over Secure Transport (EST) to resolve some errata that was reported, and which has proven to cause interoperability issues when RFC7030 was extended. This document deprecates the specification of "Content-Transfer- Encoding" headers for EST endpoints. This document fixes some syntactical errors in ASN.1 that was presented. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-lamps-rfc7030est-clarify/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-lamps-rfc7030est-clarify-05 https://datatracker.ietf.org/doc/html/draft-ietf-lamps-rfc7030est-clarify-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-lamps-rfc7030est-clarify-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed May 6 07:34:04 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 892933A07D5 for ; Wed, 6 May 2020 07:34:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xPtg3J0oSu8g for ; Wed, 6 May 2020 07:34:00 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2E723A0B25 for ; Wed, 6 May 2020 07:33:51 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 4535D300B2F for ; Wed, 6 May 2020 10:33:49 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id tsrFE1KyEhga for ; Wed, 6 May 2020 10:33:47 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id CDC1B3009FF; Wed, 6 May 2020 10:33:47 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) From: Russ Housley In-Reply-To: <158877522732.30984.15330377656359745639@ietfa.amsl.com> Date: Wed, 6 May 2020 10:33:49 -0400 Cc: LAMPS WG Content-Transfer-Encoding: quoted-printable Message-Id: <27233EB3-22D2-4C59-A0AA-4D67A2787F4B@vigilsec.com> References: <158877522732.30984.15330377656359745639@ietfa.amsl.com> To: Michael Richardson X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] I-D Action: draft-ietf-lamps-rfc7030est-clarify-05.txt X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2020 14:34:03 -0000 Michael: Thanks for the updates. I really like Appendix B. No need to make = another updates, but I want to share how I have resolved that problem in = the past. ~~~ Appendix A. ASN.1 Module This annex provides the normative ASN.1 definitions for the structures described in this specification using ASN.1 as defined in [X680] through [X683]. The ASN.1 modules makes imports from the ASN.1 modules in [RFC5212] and [RFC6268]. There is no ASN.1 Module in RFC 7030. This module has been created by combining the lines that are contained in the document body. ... ~~~ Enjoy, Russ > On May 6, 2020, at 10:27 AM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Limited Additional Mechanisms for = PKIX and SMIME WG of the IETF. >=20 > Title : Clarification of Enrollment over Secure = Transport (EST): transfer encodings and ASN.1 > Authors : Michael Richardson > Thomas Werner > Wei Pan > Filename : draft-ietf-lamps-rfc7030est-clarify-05.txt > Pages : 12 > Date : 2020-05-06 >=20 > Abstract: > This document updates RFC7030: Enrollment over Secure Transport = (EST) > to resolve some errata that was reported, and which has proven to > cause interoperability issues when RFC7030 was extended. >=20 > This document deprecates the specification of "Content-Transfer- > Encoding" headers for EST endpoints. This document fixes some > syntactical errors in ASN.1 that was presented. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-lamps-rfc7030est-clarify/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-lamps-rfc7030est-clarify-05 > = https://datatracker.ietf.org/doc/html/draft-ietf-lamps-rfc7030est-clarify-= 05 >=20 > A diff from the previous version is available at: > = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-lamps-rfc7030est-clarify-05= >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 >=20 > _______________________________________________ > Spasm mailing list > Spasm@ietf.org > https://www.ietf.org/mailman/listinfo/spasm From nobody Wed May 6 09:48:50 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1264D3A0953 for ; Wed, 6 May 2020 09:48:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8vdARed5yPQB for ; Wed, 6 May 2020 09:48:41 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CA023A0826 for ; Wed, 6 May 2020 09:48:31 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 1598E3818F; Wed, 6 May 2020 12:46:31 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 4EA538C; Wed, 6 May 2020 12:48:30 -0400 (EDT) From: Michael Richardson To: Russ Housley , LAMPS WG In-Reply-To: <27233EB3-22D2-4C59-A0AA-4D67A2787F4B@vigilsec.com> References: <158877522732.30984.15330377656359745639@ietfa.amsl.com> <27233EB3-22D2-4C59-A0AA-4D67A2787F4B@vigilsec.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [lamps] I-D Action: draft-ietf-lamps-rfc7030est-clarify-05.txt X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2020 16:48:49 -0000 --=-=-= Content-Type: text/plain Russ Housley wrote: > Thanks for the updates. I really like Appendix B. No need to make > another updates, but I want to share how I have resolved that problem > in the past. Thanks. I like your wording, and I have put in the document for next update. I still have the errata as normative reference. So far two ADs say normative, two say informative and Barry wants no reference. No answer from RFC-editor on their preference. I invoke Cunningshams' Law and leave it as it "wrong" so that someone will object. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl6y6l4ACgkQgItw+93Q 3WXdNQgAqZQz6EeeUkqc1VmPM7a2zv1drm4FjDezxWhf4tQMMssnqSLZSb9BOZ9z mVZdNVfrabhTn2Lz3VRPKWy4IHsTAfhDi+2rR6aW2H0OJFNrZpXW2IqUgLH36ybe 84eVmRR2QWAYe3iyUyVO1i4mkdsIYjmZBnHEuLWI0Xy5XM38N4DKpiNeYN0fcKUd HEcqRee8Q/E+5ZqofzSLU0J1IJga/Meis2waKImOnfDJ8Y6wAHwic7mS6eDWKZfO UV4PiaYWcAYEH1AceP+koftGhmDa+dVbTQDC4JE9K2Kn+Wp/YPgDuMdfFuoLj0Gg eb8HwI7PKhLEApjasK9RMs9m/eAFyw== =I69E -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed May 6 10:11:48 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 476C53A0844 for ; Wed, 6 May 2020 10:11:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S57Ys3QOJ_z6 for ; Wed, 6 May 2020 10:11:44 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C0E13A0842 for ; Wed, 6 May 2020 10:11:44 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 6 May 2020 10:11:33 -0700 From: Jim Schaad To: "'Brockhaus, Hendrik'" , 'LAMPS WG' CC: References: In-Reply-To: Date: Wed, 6 May 2020 10:11:30 -0700 Message-ID: <040401d623c9$64fa1d00$2eee5700$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0405_01D6238E.B89B9320" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQE4vfJ6kT+ggo2MKd1BIQ0zK6OTSqnWFcIA Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [lamps] draft-ietf-lamps-cmp-updates section 3.8 using pkcs-9-at-localKeyId containing a revocation passphrase hint X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2020 17:11:47 -0000 ------=_NextPart_000_0405_01D6238E.B89B9320 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I would generally prefer the use of pkcs-9-at-localKeyId due to the fact that it is an OCTET STRING. I don't like the use of BMPString for much of anything. The only worry that I have is this is not being used according to the description as this is not "locally in applications". I would interpret this as not leaving the local machine. Jim From: Brockhaus, Hendrik Sent: Wednesday, May 6, 2020 2:43 AM To: LAMPS WG ; Jim Schaad Cc: steffen.fries@siemens.com Subject: draft-ietf-lamps-cmp-updates section 3.8 using pkcs-9-at-localKeyId containing a revocation passphrase hint During IETF 107 we discussed whether to use pkcs-9-at-friendlyName or pkcs-9-at-localKeyId as specified in RFC 2985 section 5.5 in envelopedData to transport an identifier for the revocation passphrase. The WG seemed to prefer the localKeyId. @Jim, did you manage to take a look on this and do you have a different opinion? -- Hendrik ------=_NextPart_000_0405_01D6238E.B89B9320 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I would generally prefer the use of = pkcs-9-at-localKeyId due to the fact that it is an OCTET STRING.  I = don’t like the use of BMPString for much of anything.  The = only worry that I have is this is not being used according to the = description as this is not “locally in applications”.  = I would interpret this as not leaving the local machine.  =

 

Jim

 

 

From: Brockhaus, Hendrik = <hendrik.brockhaus@siemens.com>
Sent: Wednesday, May 6, = 2020 2:43 AM
To: LAMPS WG <spasm@ietf.org>; Jim Schaad = <ietf@augustcellars.com>
Cc: = steffen.fries@siemens.com
Subject: = draft-ietf-lamps-cmp-updates section 3.8 using pkcs-9-at-localKeyId = containing a revocation passphrase hint

 

During IETF = 107 we discussed whether to use pkcs-9-at-friendlyName or = pkcs-9-at-localKeyId as specified in RFC 2985 section 5.5 in = envelopedData to transport an identifier for the revocation = passphrase.

The WG seemed to prefer = the localKeyId.

 

@Jim, did = you manage to take a look on this and do you have a different = opinion?

 

-- Hendrik

------=_NextPart_000_0405_01D6238E.B89B9320-- From nobody Thu May 7 23:29:52 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 980783A07BB for ; Thu, 7 May 2020 23:29:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=siemens.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hqOP-pIS9G8Z for ; Thu, 7 May 2020 23:29:47 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2046.outbound.protection.outlook.com [40.107.22.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5B963A07B5 for ; Thu, 7 May 2020 23:29:45 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iS8jzOnC9eyAlJ9XbT54Lj6AdIDYUCO7ML1nfM7xeOYUIr/yapnxaQNM+4ZWWt+baiB8SnHk5qclH4W4ngaWPuiA/RsoH4XvD3xHgcflp7gaSD8Udut3Nak19KFZPmsQBjhweWvZSuyO2Gmb51xs+4lhrrrqDee7ZxfCxLoBrfO0Ix5AB4zqNPQHVaM2fH8VAUVmtjxmlZIuJA9PxJ+eZ805Xd/CFtMoxsOPF5IHxzMEQtVefnVGSihDxiAHDQ0sXmU+YdPcvyTzXDo0i0eETt6/bouiULyYJZwlLzKDkdWUW9bVPY13EbgQu3QtpJtTQRpDVN+FNfj6/PStx1AtUg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=75o1gt80OZAvmdgtwlfDqfYW7RerTX/ZOFf0wjbH8/U=; b=euXYlF+PrWIS+fgJD/wvcSqx7u1COCbB1cjeHhzFbgzlem9BIonwpxLsfMspxpD9mI0oKcfj69JhH506cDs0SChaxPSMWozwY46NGkb8YUtaNCugD7Inu5WddrmXDszkNKZnHwX8FP43I8QNUIf2Gl2qQFIJMKG7CswDDAyxij1VEF0lvP5V/+o+KnH0apwLaeW9ACfPEIUUB1DeRzdJtam5CwUe9fIJ+n01LxmbgkYIkNGjRW9ExqMSaEsst1vAmsXxWWEqlSUh8evFTktpI/JvnGEerwhyuy2n1s+UY4RLj2myW8229MXPNg8+NaRaT1qR0cSXLMa3m22pRP6m8Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.onmicrosoft.com; s=selector1-siemens-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=75o1gt80OZAvmdgtwlfDqfYW7RerTX/ZOFf0wjbH8/U=; b=Nn5Y//aR0QVrfFMhp7cFlYOd8Wnam2pdxyRRtdFpIrccKMI2cN0SuaquCCeUDMcgwyIdIw0282/H/y7AL1jGMTqjFS3DMAPGoB8WkozQSYMY3oN8yHp8gUd9wcC8ui5LvHfk4oysAFHGUYboOZh9d+NoBf6ybSSsE9QHIbhgyV0= Received: from AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:e2::32) by AM0PR10MB3650.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:153::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2979.28; Fri, 8 May 2020 06:29:42 +0000 Received: from AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM ([fe80::85a4:2ab:a6b9:e1a3]) by AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM ([fe80::85a4:2ab:a6b9:e1a3%6]) with mapi id 15.20.2958.034; Fri, 8 May 2020 06:29:42 +0000 From: "Brockhaus, Hendrik" To: Jim Schaad , 'LAMPS WG' CC: "steffen.fries@siemens.com" Thread-Topic: [lamps] draft-ietf-lamps-cmp-updates section 3.8 using pkcs-9-at-localKeyId containing a revocation passphrase hint Thread-Index: AdYjiqD70iVEvJBYSCuMsO7kBTpDbwAPsFkAAE34PwA= Date: Fri, 8 May 2020 06:29:42 +0000 Message-ID: References: <040401d623c9$64fa1d00$2eee5700$@augustcellars.com> In-Reply-To: <040401d623c9$64fa1d00$2eee5700$@augustcellars.com> Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-document-confidentiality: NotClassified authentication-results: augustcellars.com; dkim=none (message not signed) header.d=none;augustcellars.com; dmarc=none action=none header.from=siemens.com; x-originating-ip: [165.225.200.180] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: c03197f4-7da8-4d85-4533-08d7f31931a1 x-ms-traffictypediagnostic: AM0PR10MB3650:|AM0PR10MB3650: x-ld-processed: 38ae3bcd-9579-4fd4-adda-b42e1495d55a,ExtAddr x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 039735BC4E x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(39860400002)(346002)(396003)(366004)(376002)(33430700001)(9686003)(55016002)(316002)(8676002)(6506007)(66556008)(66446008)(52536014)(71200400001)(107886003)(83300400001)(8936002)(19627235002)(4326008)(83320400001)(83280400001)(66946007)(83310400001)(83290400001)(76116006)(110136005)(55236004)(26005)(186003)(7696005)(33440700001)(64756008)(66476007)(33656002)(478600001)(86362001)(15650500001)(5660300002)(2906002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: fis4W2UAATNu2k95Yycid+a+RlrY1jRSHg+taCRXIK7TU107bPFN8OdfzH5K0ixUsSjmMqJpHQIIw+J2XWn5luI0kdZ4B5S0FblJKi03Lp6KdPiNLZZ2iS1rjWrlPCTi5oBEGu9TLSqtt7AitOvnA9yUpAjybyEefdpQlNM31mD6ONUhx3Vyv6NAPoXkDd6Gg8QtkE6GW4jgvDEQSd8FMtaEyeRwKRXzrG+l+GjV/55uZo1P5XhsTcx5jpmkrNuzO5IaZCMYR0TG+qrgayf8PkPKsXPntF1xXXU64vO+G4r33rsLjXomNkkKqHbeNvA7Y4f50pqzZlmB6k+qckP/qaZ5Is08kREC/Bz4jK2hvpwgTbqZfDEC1Y1iwEk1/7P1r/OucI7We6yTfB19Ejuibbmnl4Oofw7Bl4MHWlC0MPJ036eQKyG8kVGsGRBrMNfhMd3qoBqKUSs/81eDZL866qj5hD93GLFU9s28epRdWkEsyT0TCN5j2AHA2tu2aM7e Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: c03197f4-7da8-4d85-4533-08d7f31931a1 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 May 2020 06:29:42.7949 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: tk9HNBVrV4l1hd+MzEWsEBv9sEVqxGGHtJFKf87rjYsOgq2q869k/d0NUMGjMsC976RxDhS+xWXx5IG/HoDjkC8IQD6xYZTQ0b173ASJw4E= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR10MB3650 Archived-At: Subject: Re: [lamps] draft-ietf-lamps-cmp-updates section 3.8 using pkcs-9-at-localKeyId containing a revocation passphrase hint X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 May 2020 06:29:50 -0000 > Von: Spasm Im Auftrag von Jim Schaad > Gesendet: Mittwoch, 6. Mai 2020 19:12 > > I would generally prefer the use of pkcs-9-at-localKeyId due to the fact = that it is an OCTET STRING.=A0=20 > I don't like the use of BMPString for much of anything.=A0 The only worry= that I have is this is not=20 > being used according to the description as this is not "locally in applic= ations".=A0 I would interpret this=20 > as not leaving the local machine.=A0=20 I see the issue. RFC2985 says: The localKeyId attribute type specifies an identifier for a particular key. It is only to be used locally in applications. I updated Appendix B of RFC4210 only for completeness of changing from Encr= yptedValue to=20 EncryptedKey. Therefore I tried to reuse existing OIDs instead of defining = new ones. Currently I see the=20 best fit with localKeyId for transporting the identifier of the revocation = passphrase and I regard the=20 extension of the scope as minor. What do others think? Would the use of localKeyId be acceptable despite the slide expansion of th= e scope? Does anyone sees a better solution? Or should I register an additional OID for this use case? -- Hendrik > > From: Brockhaus, Hendrik =20 > > Sent: Wednesday, May 6, 2020 2:43 AM > > > > During IETF 107 we discussed whether to use pkcs-9-at-friendlyName or p= kcs-9-at-localKeyId as=20 > > specified in RFC 2985 section 5.5 in envelopedData to transport an iden= tifier for the revocation=20 > > passphrase. > > The WG seemed to prefer the localKeyId. > >=20 > > @Jim, did you manage to take a look on this and do you have a different= opinion? From nobody Fri May 8 10:06:19 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9487A3A1044 for ; Fri, 8 May 2020 10:05:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iems6xyEZuoB for ; Fri, 8 May 2020 10:05:48 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CCBA3A0DDA for ; Fri, 8 May 2020 10:05:24 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id C46BA300B69 for ; Fri, 8 May 2020 13:05:21 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id cFieUuQc9xAk for ; Fri, 8 May 2020 13:05:19 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id C6BF1300A2E; Fri, 8 May 2020 13:05:19 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) From: Russ Housley In-Reply-To: Date: Fri, 8 May 2020 13:05:21 -0400 Cc: Jim Schaad , LAMPS WG Content-Transfer-Encoding: quoted-printable Message-Id: References: <040401d623c9$64fa1d00$2eee5700$@augustcellars.com> To: "Brockhaus, Hendrik" , "steffen.fries@siemens.com" X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] draft-ietf-lamps-cmp-updates section 3.8 using pkcs-9-at-localKeyId containing a revocation passphrase hint X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 May 2020 17:06:02 -0000 Hendrik: >> Von: Spasm Im Auftrag von Jim Schaad >> Gesendet: Mittwoch, 6. Mai 2020 19:12 >>=20 >> I would generally prefer the use of pkcs-9-at-localKeyId due to the = fact that it is an OCTET STRING. =20 >> I don't like the use of BMPString for much of anything. The only = worry that I have is this is not=20 >> being used according to the description as this is not "locally in = applications". I would interpret this=20 >> as not leaving the local machine. =20 >=20 > I see the issue. RFC2985 says: > The localKeyId attribute type specifies an identifier for a > particular key. It is only to be used locally in applications. >=20 > I updated Appendix B of RFC4210 only for completeness of changing from = EncryptedValue to=20 > EncryptedKey. Therefore I tried to reuse existing OIDs instead of = defining new ones. Currently I see the=20 > best fit with localKeyId for transporting the identifier of the = revocation passphrase and I regard the=20 > extension of the scope as minor. What do others think? >=20 > Would the use of localKeyId be acceptable despite the slide expansion = of the scope? I just reread that part of RFC 2985, and the meaning of "local" is not = scoped in any way. Since we are talking about a subject sending a = message to the CA or RA, I think we can consider that to be "local". > Does anyone sees a better solution? > Or should I register an additional OID for this use case? Let's just use the OID that has already been assigned in RFC 2985. Russ From nobody Mon May 11 00:05:26 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F8BD3A07DC for ; Mon, 11 May 2020 00:05:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.695 X-Spam-Level: X-Spam-Status: No, score=-1.695 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=x500.eu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GqDo5mg4wdK3 for ; Mon, 11 May 2020 00:05:17 -0700 (PDT) Received: from outscan1.mf.dandomain.dk (outscan1.mf.dandomain.dk [212.237.249.58]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E50913A07A1 for ; Mon, 11 May 2020 00:05:16 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by outscan1.mf.dandomain.dk (Postfix) with ESMTP id A231F40691F1 for ; Mon, 11 May 2020 09:05:13 +0200 (CEST) Received: from outscan1.mf.dandomain.dk ([127.0.0.1]) by localhost (outscan1.mf.dandomain.dk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B7Uqt-oKxsz7 for ; Mon, 11 May 2020 09:05:12 +0200 (CEST) Received: from mail-proxy.dandomain.dk (dilvs03.dandomain.net [194.150.112.64]) by outscan1.mf.dandomain.dk (Postfix) with ESMTPA id C3A3340691D2 for ; Mon, 11 May 2020 09:05:11 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=x500.eu; s=dandomain; t=1589180712; bh=gRxQAUWdHWZjaXCzGFTRH+aMkfcZiuTrKcH+csQ+K7k=; h=From:To:Subject:Date:From; b=KdDLPt90u/ev4QUxq0h9fXHpJupaaY2ml3yOkKe+5wcqP+JszzRKpJ1Cb72/YqMic CsiSqTSdmHGiyV5Yrw0G6kO0EE5fzpZzrAm+M7fKs9x3qzFx9bHvhAFYSivYJifLHT 9DOMxM3Mh3JQSEt50kCjSrTOz9vyvPn6a6EiCeU+nd46OjZrwvRHJN0Jcq9rITnejo 6CQMxUrPZx1FmnspcIeAuj7Ev54/qdzoN0O55WrTMMao/mMMTWXb1wNy2C5iCynkPN PM8/D0833Jfr2Y88KnUBEXNJmVbynds1COxx8LR++aBPaViALuF2NqcVT4+QVqV+3d 4177WGLf6LK5g== From: "Erik Andersen" To: "LAMPS" Date: Mon, 11 May 2020 09:05:11 +0200 Message-ID: <000001d62762$8385a360$8a90ea20$@x500.eu> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0001_01D62773.4710E460" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdYmysgWP4xsKPedQly3iSGlHws7SQ== Content-Language: en-gb Archived-At: Subject: [lamps] Problems with the current ALGORITHM information object class X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 May 2020 07:05:21 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0001_01D62773.4710E460 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0002_01D62773.4710E460" ------=_NextPart_001_0002_01D62773.4710E460 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit In our work with IEC 62351-4 and X.510 we have identified a limitation with the current ALGORITHM information object class. The current definition is ALGORITHM ::= CLASS { &Type OPTIONAL, &id OBJECT IDENTIFIER UNIQUE } WITH SYNTAX { [PARMS &Type] IDENTIFIED BY &id } The PARM field is used for defining parameters associated with the algorithms. However, the parameters are of two types: 1. Parameters that provide additional information about the procedure to be applied according to the algorithm. An example is ecPublicKey, where the parameter value is the elliptic curve to be used. 2. Parameters that specified the syntax of the value to be used when the algorithm is deployed. An example is the AES algorithms that require a value of the parameter transferred together with the encrypted data. This causes problems when negotiating the use of algorithms. When specifying ecPublicKey algorithms in such negotiation, the parameter value is relevant. When specifying AES-CBC in such a negotiation, the random value of some InitializationVector is not relevant. This make algorithm negotiation cumbersome. We have therefore suggested to extend the ALGORITHM information object class in the following way. ALGORITHM ::= CLASS { &Type OPTIONAL, &DynParms OPTIONAL, &id OBJECT IDENTIFIER UNIQUE } WITH SYNTAX { [PARMS &Type] [DYN-PARMS &DynParms] IDENTIFIED BY &id } A suggested update to the ALGORITHM information object class is attached. It also includes three derivative parameterized data types. By using those data types it has been possible to define the wrapper protocol without "hard coding" specific algorithm details, e.g., we have avoided a specific component for an initialization vector. This has allowed different cryptographic algorithms to be used for different communication instances make life a little more difficult for adversaries. Certain algorithms have to be redefined, which could cause some negative reactions. As an example the aes256-CBC algorithm must be changed from aes256-CBC ALGORITHM ::= { PARMS AES-InitializationVector IDENTIFIED BY { aes 42 } } To aes256-CBC ALGORITHM ::= { DYN-PARMS AES-InitializationVector IDENTIFIED BY { } } However, most algorithms do not need to be modified. The current version of X.510 may be found at https://www.dropbox.com/s/i7mizfvoy9uo21x/x510.docx?dl=0. Any comments? Best regards, Erik ------=_NextPart_001_0002_01D62773.4710E460 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

In our work with IEC 62351-4 and = X.510 we have identified a limitation with the current ALGORITHM = information object class. The current definition is =

 

ALGORITHM ::=3D CLASS {

  = &Type         = OPTIONAL,

  = &id           = OBJECT IDENTIFIER UNIQUE }

WITH SYNTAX {

  [PARMS        = &Type]

  IDENTIFIED BY &id }

 

The PARM field is used for defining parameters associated with the = algorithms. However, the parameters are of two = types:

 

1.       = Parameters that provide additional information about the procedure = to be applied according to the algorithm. An example is ecPublicKey, = where the parameter value is the elliptic curve to be used. =

2.       = Parameters that specified the syntax of the value to be used when = the algorithm is deployed. An example is the AES algorithms that require = a value of the parameter transferred together with the encrypted = data.

 

This causes problems when negotiating the use of algorithms. When = specifying  ecPublicKey algorithms in such negotiation, the = parameter value is relevant. When specifying AES-CBC in such a = negotiation, the random value of some InitializationVector is not = relevant. This make algorithm negotiation = cumbersome.

 

We have therefore suggested to extend the ALGORITHM information = object class in the following way.

 

ALGORITHM ::=3D CLASS = {

  = &Type         = OPTIONAL,

  = &DynParms     = OPTIONAL,

  = &id           = OBJECT IDENTIFIER UNIQUE }

WITH SYNTAX {

  [PARMS        = &Type]

  [DYN-PARMS    = &DynParms]

  IDENTIFIED BY &id }

 

A suggested update to the ALGORITHM = information object class is attached. It also includes three derivative = parameterized data types. By using those data types it has been possible = to define the wrapper protocol without “hard coding” = specific algorithm details, e.g., we have avoided a specific component = for an initialization vector. This has allowed different cryptographic = algorithms to be used for different communication instances make life a = little more difficult for adversaries.  

 

Certain algorithms have to be = redefined, which could cause some negative reactions. As an example the = aes256-CBC algorithm must be changed from

 

aes256-CBC ALGORITHM ::=3D { =

  PARMS       &= nbsp; AES-InitializationVector

  IDENTIFIED BY { aes 42 } = }

 

To

 

aes256-CBC ALGORITHM ::=3D {

  DYN-PARMS       = AES-InitializationVector

  IDENTIFIED BY { <some OID> } = }

 

However, most algorithms do not need to be = modified.

 

The current version of X.510 may be found at https= ://www.dropbox.com/s/i7mizfvoy9uo21x/x510.docx?dl=3D0.

 

Any comments?

 

Best = regards,

 

Erik

 

 

 

 

 

 

------=_NextPart_001_0002_01D62773.4710E460-- ------=_NextPart_000_0001_01D62773.4710E460 Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="algorithms.docx" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="algorithms.docx" UEsDBBQABgAIAAAAIQBTnFB7owEAADEIAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADE lU1PwzAMhu9I/IcqV7RmcEAIrePAxxGQGBLXLHG3iHwp8Tb273HXrUKwrROj4lIptf2+T5w2Htx8 WJPNISbtXcHO8z7LwEmvtJsU7HX00LtiWULhlDDeQcGWkNjN8PRkMFoGSBlVu1SwKWK45jzJKViR ch/AUaT00QqkZZzwIOS7mAC/6PcvufQOwWEPKw02HNxBKWYGs/sPel2TRDCJZbd1YuVVMBGC0VIg xfncqW8uvbVDTpWrnDTVIZ1RAuNbHarIboN13RO1JmoF2bOI+CgsZfGFj4orL2eWKvP9Mls4fVlq CU19pRail5AS9dyavIlYod2GfxuHnCX09s0arhHsc/QhnR+N04hWehBRQ9PDnb1wMzuGSPR/34xG uhUi4dJA+nuCWrfdHhCpoAuAtXIrwgLGL51RfBFvBSm9R+exi9NopFshwKmOGDbKrQhTEAri8f/k D4Ja+ED/i3/zL8lyJMYGuvgO1tKtEEgjCern8SexktlnSZmri5hGXPzFtjczrKruhYNu4MaRpI/e H1TjUYHa4s1XA3/4CQAA//8DAFBLAwQUAAYACAAAACEAHpEat+8AAABOAgAACwAIAl9yZWxzLy5y ZWxzIKIEAiigAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAKySwWrDMAxA74P9g9G9UdrBGKNOL2PQ2xjZBwhbSUwT29hq1/79PNjYAl3pYUfL 0tOT0HpznEZ14JRd8BqWVQ2KvQnW+V7DW/u8eACVhbylMXjWcOIMm+b2Zv3KI0kpyoOLWRWKzxoG kfiImM3AE+UqRPblpwtpIinP1GMks6OecVXX95h+M6CZMdXWakhbeweqPUW+hh26zhl+CmY/sZcz LZCPwt6yXcRU6pO4Mo1qKfUsGmwwLyWckWKsChrwvNHqeqO/p8WJhSwJoQmJL/t8ZlwSWv7niuYZ PzbvIVm0X+FvG5xdQfMBAAD//wMAUEsDBBQABgAIAAAAIQBvIAH7GA4AAM9OAAARAAAAd29yZC9k b2N1bWVudC54bWzMV99v4jgQfj/p/gcrD/e0Jb8D4QqrAG0XqbetCivd28kkBnJN7Mg2ULT3x984 Cb8a4FLQrZaH0jiez9/MfDNjbj+/pQlaEi5iRjua2TA0RGjIopjOOtq38f1NS0NCYhrhhFHS0dZE aJ+7v/5yu2pHLFykhEoEEFS0V1nY0eZSZm1dF+GcpFg00jjkTLCpbIQs1dl0GodEXzEe6ZZhGvl/ GWchEQLO62O6xEIr4cK3emgRxyswVoCOHs4xl+Rth2F+GMTVfb1VBbIuAAIPLbMKZX8YytMVqwqQ cxEQsKoguZchHXHOuwzJqiI1L0Oyq0ity5AqckqrAmcZofByyniKJTzymZ5i/rrIbgA4wzKexEks 14BpeBsYHNPXCxiB1RYhtaMPIzT1lEUksaMNCutoC07bpf3N1l5Rbxf25dfGgtfxvzAZlM0h91zn JIFYMCrmcbat8PRSNHg534AszzmxTJPNvlVm1iyXU+1pUIRyB1iHfhn/NCmYn0c0jRoZURBbizoU Ds/cMElBhbuDLwrNXnDNmg1kA2BVALwwrinpDUYRTfAHLPdwBPkYjLuBEet0V+qrbHadWh44W2Q7 tPg6tOGu9ldqCn8Aq1TdfiWI68iM5jiDlpCG7eGMMo4nCTACDSGQAcozoP5CVpAqOq0LV4UJi9bq O4M3TjvDHA8h296gZ/f9wNbyVWi0Uq061r3j9nsBrLbhWhK9dDTDaNqOYfe2SwMyxYtEVt887y3l Bz7z/Gsk1wnQai9x0tG+EKzuN7amd2/17Z4JY6+qd48kNH3YqvRoKFyKU3DwrzELHc+xbNP1msry uIX53sKzvZZpeactrPcWraZp+03jtIUK2J6F3fI912+VR+S+yO54TlDw+PD0Mhx/+QPFtOgI0IIR m/xNQonCBAuh3Jd5EA5CcEej7VFljKrZs/uB1Wz1B4fZa3p2ENy7dwfZu/OMXnA0e3Zgt6xtqvPs mXdmzymyl5PiRXoExdmYPXAlqyKNeYQU9WJD4fMpT1HIaEgyiWKBcCIYWggSIdiLIjKNKcgBhXyd STbjOJvHIWyaMR7Lefo+SHzfs57v9HyrIFuXp6rDtshwCPnLOBGEL4nWbSBFv8ZZm6VnfpwAP9B6 MPpqTlgSqavM+3ht9fFjPDydG8hJngXISEzrxODMKV7DaliITdELCT+h4fjbzRj92XANH/2DhqMn fXjXR77rOzetIuIiI2EM/a6kNUVyDnT2qcLjOUpQBoZ/X1DqhiyLSXSdB2hCErbKtUmwWCNOpoTD jzJyDtbwDN+ySxaNs3yh6srueIrAfymxhDhU4h7u/6PEGsTPKiye5nGUaMpZilImJGJyTvhJK6J0 AHoAkRAKU03OsUQYBEHVL+KQKLXkjxVz1WTOZqvp+na/zBa90unaB8V0yQqdX3liXiVk1yJrUziO x3GeBggvLctxrfoxRqCbxXkleq7h2u7GvwiyWxoLlhKoZDr7hJL4lag8kRu49CYIRxGcLA5rRD86 4rxW0B/4fTXT90dc+TkYceXUOiwJ33HtQT6t38+9w+2VuXcUpnBS1eaUJdAhlJtQVA3zrOy3c24v sqcmXZ2YOIEV9AZ9xf2DMant/tFLm2of+xe2Exlzevf3Lev9peSHsyu1utfZULvdQf3HYDRC32uE 2bYDo2f6P40jJzoB+g2n2e/jdUbQ9vP0PB4+fQ0eP9Vx0+sHvhEoh35+Nwdr+ox5KsDHfwEAAP// 3Fppb9tGGv4rA39YJEDqDG/RrYXlpVSLxFYtB20QFAuKHFncUCRLjmyrQf77vjOkKEqiaOqwrV1/ oMXzvZ73nEEIXQ9u+9dXxsd3v7x/uKBddkz5Men+Agf0IMgXiZu6ff/yTJAFS3Q0+4xfpeSRsqta 8QdXL9Is8G8uzzAWHMGUzfKSTcbuLKSbdwaVS5zgIOX/hnQeEnjm3g0vz4zhlXD2Pucqv88PFD1O w4sscT1yeZakJCPpPTnrIvQPd5r8HPio8ndt/suxblHfdq5u+72+c4M+X/V/++ygH23k7khYxKpy KnJ3f+/f/oqGX65ujT/Q9xYCYF3RNMFRT91wXwfGzadhaTRux9t5Qv5sIaNmmLrcMfSTl9H+cvXT Uk4uoz2PBm46zVAbQSVBVLSe7Zy6oKWv2cj8snTKNg6HVUOTVUd6RhGbeL+dELTCJRwWBAYp+xBW hY4j5B8qdLGhq1Ec+t7ETQudFc/RrvHxw/UNOPCndRJN2gyicZxOXRrEEYpH/yEeRV7oZhmauBmi wO84DsP4IYju0DggoZ9dtFCzYiiaiK31uGaYgiY7vedDEolm05Dc16Gp0FLogiDl0z99MNeV6L6t 017Lt91RcX44EFQNm3aBqF2BwD2iQYz2X2Ixchc0cYigIEOzjPgAnRRlCfGC8Zzhh07iDPAUPMIt hpQpoSRlIHMpctPtCmHqkHuaDJGpgXZEPJJlbjrf+E7DS4zDw8iuyEcQeXTBg5I09og/e0ImyxCx 3ss/zjg5jBHkkySM560JAscHEqzVc5dpwUvnCY3vUjeZBB5yw7s4DehkikaE6ckn4yAi/vmB5K9i gE0YbiOWoZT8NQvABtnMm1QA10jXdsSOqDfSZb5b4hykjZA7ykhEEWBpETTBsWbNxi8IrTp9hfrO rnr1+ePHtpJ13yFg1GfqmDJToNGcsx1EfnAf+DN3q1YLfw48njHWdPm+PhmYuoB1cS0ZyA6WDGyz TPzyyYB2R7VhPg/gW03/dNTu2aLq2PsZsFKwudNshyDWJuoehnl/HrlTgMEOTFUCfNuQVP8hnh5K qC696032FtEYQsqBspFHMEZ0x5yA0AcC7kwfYuTF0+ks4jAHHYJ3BzQgGXpg7t5ET7LFjpbXb1vo BdF9/I199DC2mR5qzdHd4rmNYU9VsCIpTfSeDrdtzdwt4vKB/CwwWQnsqA/Gm4AfeG6WI6UFjZdy 4B3Fy306mzCVA8bzFNMm3KrQQZi6Ia+GWwjCnU7vObu4xnDrPU+4lUzB0nM97metwN8hpNXEWQgR f81IOEeBz2LEOE+ja98cxfG3qZt+G1I3pcBawNIf0y0AGAj8+9fwm6QqMji8zphsch3emu3Ccjze xo0T+SUvOdWCxO61Wz0QFVtXDUkRVoF41F67TrPco6ualTXwtk5VxtZwq/s+m3WtW06TOewXBtm5 cV8o+Xc49Fl+WA+Om0ZTnxZoGRqDvwGvvktdRKGhWxgRTAqdfYnnIEJZQGd5YccyXZrHUP4K4Ggb MOD9LLiLIFDBR+ABAi8BguEeCmiGWL7Lq8V60GyKpuSirU3hNCxLYu/VR8T1WNc0UcEdXXxt7kov roHU93I+dDGcJUmcUuKXj2U/0MXFJRo6v312riyn1fBXFS3VEqWTEXrbvHAJ1fyv1MN5kQPefK9T yNs2KxeaI8iOrVqnroNKOY6+4j/XdcDmPPVa+P7PUn0/3u60qIMlR1FE82QWN7aphheS+ZQcfRU2 VLMYoR9dPT1D1LFx8uo5Pz9vNVpXDV2yNHut7jyqPE2M1hWL/HD8ZNyor205d3OcDi1mEkdQNmar s9p69coiFPaCvlZNyaqMod9sHKnnpbIuCqb4IrV+/QR9bTZey9yO5l39hmwoPVHKcbKrzUsfbibx NJvtm+DS+geTzHvECYiG3HINp+hHAqjE+AClvlE5Wq2vYtOyJBPv7vwvjc6mwd+JonOZuw/GSom6 d/koi99iZxUQlRO2jFX9PGbVLtmMZymv9FshCpoLwF/G2wB0y2c0C1aWQ46Cm5y1pvFNLi90BCz0 7aXTsuo5WKXlUGDBfZDzXrOwyiYGrZV0zZT7EGTkHbRR+wyCZNmwBNFZ80kRCx3oVlgf9UwFxt6D oGO6X5LG8dhJ2adY+r08yxIShryPX5uxHO6fywKyFRPQ6NaycGz33YbsNdeh3TftfaDbONZc+eqG oY+aS1dIFQNltox1MFGmvs3RcnteGtZxd+Jh2xT/qeBZ615b6LSMs6+8qHVwXD1CLBU6itXDynPu AWtSxvGbm35ZH+5ik1cYKLI5YjyjyAXMp8AJwN5nxelTY8W1XIg1W9Ix65P2q09lRaqsVR+nAy/t EsUDlikW93HVakyexf8aXPawaNm8cj6xueMSYEefO8p6RzGwtocx/3/mjqKqGj1RP/m9mtW5Y40O nmPuqPYcQ8V4j170NAdr2NYEB+uvPijcom3ZEhTTMVa5E1Us9Hp651UyY5XmSm22nLjtkvQ2l1Dz wwvn3mW2XdYv2WI7FiRKOCnroJVMuZR60c9vU1ix81SEdmjPRfVSxqNojE9gjzSAbVMlqJ0exqbI fKqCZdXAqi7ofN33f6fKO97kur64a3I6oaeYamOL8+Q+KtlUJaFxH1UdkHPxt9WVbAQP798H8SwL 5yAP8FDZA+myBWhepMYRG5SWBeZKyxGU+0rbbYIwnY5lG8+5CeKA4I1tUdGM00mVFeS2qBpbqF8T LBVLxh67BooNubLYM1mR9RoFwka11LwUuT5w2dxYwRuLuhtFO7J5Q1zwy25n0GsPVh39aZ0N4SV2 VXdEyVK5cibE9Ul6Q8bga5HH1JNPx8g9ic5Qygmnfb/YsrPt6XGQZrTyeLF3Krkb/g3PPIBQgo65 iSfwW+1IfMuVF/vwbvnsJ5fJQ+MEQCEyN7hIg7sJLc9GMaXxtDwNyXh5L2cMXFzlVMZxTCundzPK TwudJ25C0mHqsQcZ48AS36gUs8kEP+GPeXEInfICDIwQv0wDGpLBHf/tx96HNGAGCiFsDQLqgXyS yPcDvV8Yif8cxf6c/4BXZlMoALr/BQAA//8DAFBLAwQUAAYACAAAACEASa5pnUcBAABOBgAAHAAI AXdvcmQvX3JlbHMvZG9jdW1lbnQueG1sLnJlbHMgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAC0lUtPwzAQhO9I/IfId+I0QHmoSS8IqVcIElcn2TxEbEf2Bsi/Z9WqaUori4M57kSe +TReOav1t+yCTzC21SphizBiAahCl62qE/aWPV/ds8CiUKXotIKEjWDZOr28WL1AJ5AO2abtbUAu yiasQewfObdFA1LYUPeg6EuljRRIo6l5L4oPUQOPo2jJzdyDpUeewaZMmNmUlJ+NPfzFW1dVW8CT LgYJCs9E8AZECYYchakByXM7L0IyYvx8/rXPfItjRwVO+bvZFX/nMx5UqTTOAfaKCyH2iaAGmYOh 7TowTJILYuETohgsavlOaRNEGB5U3iJI51IsfdJUWuOva5kkZyVeO0E6CweC7bgTnU3c+mT4gvwV EGkVZl3MRGcbkd87UZiJvJs1Mkkuihuvr8VJF3vFhfDw/w9mvM/nR3+B9AcAAP//AwBQSwMEFAAG AAgAAAAhAA4uX7Z1AgAAZgoAABIAAAB3b3JkL2Zvb3Rub3Rlcy54bWzMlt+TmjAQx9870/+BybsG ENEy6k3nvHbu7abX/gExRGWO/Jgkiv733YCgLdZBfKkPIMnuJ/vd7AZmTweee3umTSbFHAVDH3lM UJlmYjNHv35+G0yRZywRKcmlYHN0ZAY9LT5/mhXJWkorpGXGA4YwSaHoHG2tVQnGhm4ZJ2bIM6ql kWs7pJJjuV5nlOFC6hSHfuCX/5SWlBkDCz4TsScGnXD00I2WalKAswNGmG6JtuxwZgR3Q8b4C562 QWEPECgMgzZqdDcqxi6qFijqBYKoWqRxP9IVcXE/UtgmTfqRRm3StB+pVU68XeBSMQGTa6k5sfCo N5gT/bFTAwArYrNVlmf2CEw/rjEkEx89IgKvhsBH6d2ECeYyZfkorSlyjnZaJCf/QePvQk8q/9Ot 9tBd9FcuS0l3nAlbKsea5ZALKcw2U02H8740mNzWkP0tEXue13aFCjq2y7+Op2WVyjOwS/in/PO8 ivw2MfA77IhDNB5dQvhzzToSDlV4XrhXai6SG3Q8QGpA2ALENOtY0jWjyiboAc8LjmH3YcY1xhz5 udULtXmsWr5ruVNnWvYY7fXc+4V7Dd/BOlXdZSeYx4J53xIFRwKnyetGSE1WOUQENeRBGXjlDrgr 7Irnmg4tLr4VvCKxRwXmhimiiZUawZDb+UFQGipwjRI39wqDcRBGk/jrGJWjcBJbNzo5/ZwrfLik P+bI96NpHC2DZmjJ1mSX2/bMmxsKw/glHFcLvml3M4pQkAZGKwbNAxH6CC9muDGorOqoqyldGZTX WuFVtVQKm4ldeQS+/63cvyI8mkTRyzJ4/l+EXxVwKwkXD2bxGwAA//8DAFBLAwQUAAYACAAAACEA aCVUb3QCAABgCgAAEQAAAHdvcmQvZW5kbm90ZXMueG1szJbNjtowEMfvlfoOke/gJEBgI2BVLW21 t1W3fQDjGIg2/pBtCLx9x/kgtKEohEs5JMGe+Xn+4xkn8+cjz7wD0yaVYoGCoY88JqhMUrFdoF8/ vw1myDOWiIRkUrAFOjGDnpefP83zmIlESMuMBwhh4lzRBdpZq2KMDd0xTsyQp1RLIzd2SCXHcrNJ KcO51AkO/cAvnpSWlBkD670QcSAGVTh67EZLNMnB2QHHmO6ItuzYMIK7IRP8hGdtUNgDBArDoI0a 3Y2KsIuqBRr3AkFULdKkH+mKuKgfKWyTpv1IozZp1o/UKifeLnCpmIDJjdScWPirt5gT/bFXAwAr YtN1mqX2BEw/qjEkFR89IgKvM4GPkrsJU8xlwrJRUlPkAu21iCv/wdnfhR6X/tWt9tBd9JcuK0n3 nAlbKMeaZZALKcwuVecO531pMLmrIYdbIg48q+1yFXRsl38dT6sylQ2wS/hV/nlWRn6bGPgddsQh zh5dQvhzzToSDlXYLNwrNRfJDToeIDUgbAEimnYs6ZpRZhP0gOcFx7D7MJMaY068afVcbR+rlu9a 7lVDSx+jvTa9n7u38B2squouO8E8Fsz7jig4EjiNX7dCarLOICKoIQ/KwCt2wF1hVzzXdGjZfCp4 eWxPCqwNU0QTKzWCIbfxg6CwU+A5jt3cKwyGke9Px7MpKkbhILZudFr9nCt8tiQ/Fsj3x7NovArO Qyu2IfvMtmfe3FAYRl/DSbngm3Y3owgFZWC0ZtA7EKGP8HKOzwalVR11OaVLg+JaCbymlUphU7Ev zr/3v3X7V2QHo6cvK/8l+l9kXxVwIwXNs1n+BgAA//8DAFBLAwQUAAYACAAAACEAMWZVdvgCAADR DAAAEAAAAHdvcmQvaGVhZGVyMS54bWy0l1tv2jAUgN8n7T9EeZxEnQu3RIWqA9b1oRpq2dteTGIg axxbtiFlv37HuQFKW4XQ8kDCsc/nc0+4vnmhsbEjQkYsGZn2lWUaJAlYGCXrkfl78aMzNA2pcBLi mCVkZO6JNG/GX79cp/4mFAZoJ9JPeTAyN0pxHyEZbAjF8opGgWCSrdRVwChiq1UUEJQyESLHsq3s jgsWECnhqAlOdliaBS54aUYLBU5BWQO7KNhgocjLgWGfDekhDw3rIKcFCDx07DrKPRvVR9qqGqjb CgRW1Ui9dqRXnOu3Izl10qAdya2Thu1ItXKi9QJnnCSwuGKCYgU/xRpRLJ63vANgjlW0jOJI7YFp 9UsMjpLnFhaBVkWgbng2YYAoC0nshiWFjcytSPxCv1Ppa9P9XL+4lBqiif+5ypQFW0oSlXmOBIkh FiyRm4hXHU7b0mBxU0J27zmxo3G5L+V2w3Z5azxN81AegE3ML+JP49zy94m21SAjGlFpNDHh9MzS EgpVeDi4VWiOgms3HCAlwKkB+kHUsKRLRh5N8Ac0jziSnIfplRi5p4dWT/n6smq5E2zLD7ToMtr9 ofdT/QA+g1VU3XEnyMuMedpgDiOBBv79OmECL2OwCGrIgDIwsgzob8iKoZvOHMNbAgdJ1+dY4HvI 8sCduDNrMjMzKQxYlUmLD0h9eBMJH0emZTmuM7n1KtFcaOF0CtJ+JZySFd7Gqr59rkWeaw++T3Mr 5iK7PKl9DDb6OxyPzJ8Eh0SYSK/8DUppAMOmlIpcTf4rF+2hXkDFCqrA4lUzGyBSX+nk+JLjAGLJ BZFE7Ig57hh6j8p3XnjEKg4n8DwzqrvFnsNhS7KGSVDsvPCIKJFKLCCfr3tjzG/vZobx55vxMHu8 m/349fhwu8g8rBQ/01NJdAEqcuJss+yMe5+eB5KEH5SFt6LfOfFBl23WDSet2fUGQ8/t6uY6ak3b 89xJz+m+15of14XachgzsLQk8CADJ6y327PsvtwdlP0hGf8HAAD//wMAUEsDBBQABgAIAAAAIQBU oCtw9wIAANEMAAAQAAAAd29yZC9oZWFkZXIyLnhtbLSXSW/iMBSA7yPNf4hyHIk6CXtUqFjaDodq UMvc5mISA5nGi2xDyvz6eSYLRWmrEFoOJDz7fX57wvXNC42tHZEq4mxgu1eObREW8DBi64H9e3HX 6NmW0piFOOaMDOw9UfbN8Pu368TfhNICbab8RAQDe6O18BFSwYZQrK5oFEiu+EpfBZwivlpFAUEJ lyHyHNc53AnJA6IUHDXBbIeVneGCl2q0UOIElA2whYINlpq8HBnu2ZA26qNeGeTVAIGHnltGNc9G dZCxqgRq1QKBVSVSux7pDec69UhemdStR2qWSb16pFI50XKBc0EYLK64pFjDT7lGFMvnrWgAWGAd LaM40ntgOp0cgyP2XMMi0CoItBmeTegiykMSN8Ocwgf2VjI/028U+sZ0P9XPLrmGrOJ/qjLlwZYS pg+eI0liiAVnahOJosNpXRosbnLI7iMndjTO9yXCrdgu742naRrKI7CK+Vn8aZxa/jHRdSpkxCAK jSomnJ6ZW0KhCo8H1wrNq+C6FQdIDvBKgE4QVSzpnJFGE/wBzVccRc7DtHOM2tNjqydifVm13Eu+ FUdadBltduz9xDyAz2BlVfe6E9RlxjxtsICRQAN/tmZc4mUMFkENWVAG1iED5huyYpmms4fwliBA 0vIFlngGWXZabsftT+Etw0hhwGoj7WYfkPrwJhI+wkbHa3qTUb8QzaURTqcg7RTCKVnhbazL2+dG 1G+63fE0tWIuD5cnvY/BRn+H44H9k+CQSBuZlb9BLg1g2ORSmaqpf/mi2zMLKFtBBVi+aWYFROJr kxxfCRxALIUkisgdsYcNy+zR6c4Lj1jF4QSeZ1Zxt9gLOGxJ1jAJsp0XHhExpeUC8vm2N9Z8dH9r WX9+WA+3j/e3d78eH0aLg4eF4ld6qogpQE1OnK2WnaH75XkgLPykLLwX/caJD6ZsD91w0prt8bg9 6fWbp63pdVrueHQ3+qg1P68LjeUwZmBpSeBBBk4477dn3n2pO+jwh2T4HwAA//8DAFBLAwQUAAYA CAAAACEAB7dAqiQGAACPGgAAFQAAAHdvcmQvdGhlbWUvdGhlbWUxLnhtbOxZTYsbNxi+F/ofhrk7 Htsz/ljiDeOxnbTZTUJ2k5KjPCPPKNaMjCTvrgmBkpx6KRTS0kMDvfVQSgMNNPTSH7OQ0KY/opLG Y49suUu6DoTSNaz18byvHr2v9EjjuXrtLMXWCaQMkaxr1644tgWzkEQoi7v2veNhpW1bjIMsAphk sGvPIbOv7X/80VWwxxOYQkvYZ2wPdO2E8+letcpC0QzYFTKFmegbE5oCLqo0rkYUnAq/Ka7WHadZ TQHKbCsDqXB7ezxGIbSOpUt7v3A+wOJfxplsCDE9kq6hZqGw0aQmv9icBZhaJwB3bTFORE6P4Rm3 LQwYFx1d21F/dnX/anVphPkW25LdUP0t7BYG0aSu7Gg8Whq6ruc2/aV/BcB8EzdoDZqD5tKfAoAw FDPNuZSxXq/T63sLbAmUFw2++61+o6bhS/4bG3jfkx8Nr0B50d3AD4fBKoYlUF70DDFp1QNXwytQ Xmxu4FuO33dbGl6BEoyyyQba8ZqNoJjtEjIm+IYR3vHcYau+gK9Q1dLqyu0zvm2tpeAhoUMBUMkF HGUWn0/hGIQCFwCMRhRZByhOxMKbgoww0ezUnaHTEP/lx1UlFRGwB0HJOm8K2UaT5GOxkKIp79qf Cq92CfL61avzJy/Pn/x6/vTp+ZOfF2Nv2t0AWVy2e/vDV389/9z685fv3z772oxnZfybn75489vv /+Sea7S+efHm5YvX3375x4/PDHCfglEZfoxSyKxb8NS6S1IxQcMAcETfzeI4Aahs4WcxAxmQNgb0 gCca+tYcYGDA9aAex/tUyIUJeH32UCN8lNAZRwbgzSTVgIeE4B6hxjndlGOVozDLYvPgdFbG3QXg xDR2sJblwWwq1j0yuQwSqNG8g0XKQQwzyC3ZRyYQGsweIKTF9RCFlDAy5tYDZPUAMobkGI201bQy uoFSkZe5iaDItxabw/tWj2CT+z480ZFibwBscgmxFsbrYMZBamQMUlxGHgCemEgezWmoBZxxkekY YmINIsiYyeY2nWt0bwqZMaf9EM9THUk5mpiQB4CQMrJPJkEC0qmRM8qSMvYTNhFLFFh3CDeSIPoO kXWRB5BtTfd9BLV0X7y37wkZMi8Q2TOjpi0Bib4f53gMoHJeXdP1FGUXivyavHvvT96FiL7+7rlZ c3cg6WbgZcTcp8i4m9YlfBtuXbgDQiP04et2H8yyO1BsFQP0f9n+X7b/87K9bT/vXqxX+qwu8sV1 XblJt97dxwjjIz7H8IApZWdietFQNKqKMlo+KkwTUVwMp+FiClTZooR/hnhylICpGKamRojZwnXM rClh4mxQzUbfsgPP0kMS5a21WvF0KgwAX7WLs6VoFycRz1ubrdVj2NK9qsXqcbkgIG3fhURpMJ1E w0CiVTReQELNbCcsOgYWbel+Kwv1tciK2H8WkD9seG7OSKw3gGEk85TbF9ndeaa3BVOfdt0wvY7k uptMayRKy00nUVqGCYjgevOOc91ZpVSjJ0OxSaPVfh+5liKypg0402vWqdhzDU+4CcG0a4/FrVAU 06nwx6RuAhxnXTvki0D/G2WZUsb7gCU5THXl808Rh9TCKBVrvZwGnK241eotOccPlFzH+fAip77K SYbjMQz5lpZVVfTlToy9lwTLCpkJ0kdJdGqN8IzeBSJQXqsmAxghxpfRjBAtLe5VFNfkarEVtV/N VlsU4GkCFidKWcxzuCov6ZTmoZiuz0qvLyYzimWSLn3qXmwkO0qiueUAkaemWT/e3yFfYrXSfY1V Lt3rWtcptG7bKXH5A6FEbTWYRk0yNlBbterUdnghKA23XJrbzohdnwbrq1YeEMW9UtU2Xk+Q0UOx 8vviujrDnCmq8Ew8IwTFD8u5EqjWQl3OuDWjqGs/cjzfDepeUHHa3qDiNlyn0vb8RsX3vEZt4NWc fq/+WASFJ2nNy8ceiucZPF+8fVHtG29g0uKafSUkaZWoe3BVGas3MLX69jcwFhKRedSsDzuNTq9Z 6TT8YcXt99qVTtDsVfrNoNUf9gOv3Rk+tq0TBXb9RuA2B+1KsxYEFbfpSPrtTqXl1uu+2/LbA9d/ vIi1mHnxXYRX8dr/GwAA//8DAFBLAwQUAAYACAAAACEAcsY8em0kAABQvAAAEQAAAHdvcmQvc2V0 dGluZ3MueG1sxH3bjlzHleX7APMPRD0PzbhfCqYacbXVbdmGKU8D85asSooJVWUWspKk2IP5916R VSWK4trdsj2CDcNmnZVxTpyIHTvWvsQ+v/2XH25vnr3fHu93h/3LC/0bdfFsu786XO/23728+Ou3 83m6eHZ/2uyvNzeH/fblxcft/cW/fPU//8dvP1zeb08n/Oz+GW6xv7+8vXp58fZ0urt88eL+6u32 dnP/m8Pddg/wzeF4uznhz+N3L243x+/f3T2/OtzebU6717ub3enjC6NUuHi8zeHlxbvj/vLxFs9v d1fHw/3hzWk1uTy8ebO72j7+31OL4y957kOTfrh6d7vdn85PfHHc3qAPh/39293d/dPdbv/euwF8 +3ST9//VS7y/vXn63QetfsHrfjgcr39s8Uu6txrcHQ9X2/t7TNDtzVMHd/tPD3Zf3OjHZ/8Gz358 xfOt0Fyr879+2nP/t93AfHGDcLW7/tvuER7v8QItf3Kf++3fdhv/dJv7j7fbH55udH/zS4b2AfrD 7vVxc3wQ3Mdxvb26/Pq7/eG4eX2D7mB8n2GInp17t/539fgrLJr/OBxun324vNseryA5WHFKXbxY wObqtHu//ffjbq2pV6ePN2h2ubm7++PmFvf75tW/n4Xgw+XNZq3M683z/m/rz/fb/fXh+HV/eRHc +vv65uZ/P63msC7sb9rb7dX3eNL662r9+3z3lxd/14O3++e/q//gg/Xf+eC/vvonPfi/f2P1Kwz1 m93z+fU/5cHH5+33/6QHz7/8Mx78i4Tr13jwL1rHv8aD798/fzX+/zwYO83hzavT5rQeeH+3vbk5 k4erm+1mv5p8d9zcYtt/uvLQ2dNpg1tdf7u9vbtZLY+XazM4fn39uEZxj4fH3J//vF///PNmv51n XTx3N6ftcfV+A63tnTl3fXNz89DksedX7+5Ph9vPLq1n7U9Pl85vdL71/df7v65t5Pyjt9vN4j+f /Wr/7vb19viTq+dfnpa2/+zK9e64vTo99HJNxJ/2f3m3l8E/b44bjM/dW/knf3x68mNPvvzFt6sX P740Bvn4CX1sdDrc2d9//lrnX7/f3e9+8grn327W2O4xUOerS3zOvz7Pw/X2zebdzQlPfIVbPk1A NI/w2493b7f7M6n6P6CLT7gz/gHfQtrK/vpP19erMxCz89WrtxiFKzz01d3mCj1sh/3peLh5an19 +OPh1EAYj+Azj8+5Pr56u7nb9ofu3H/128Pl/brw2L/7Z+8vtz9ge91e704gsHe769vNDy8vjHJ5 3eEFu8WHyzeHw2l/OG3/fPzpX+jHks3nj5L5s8vnN3/x87ZYVF/88bP7fH716TafNXxgyZ/+9eqB cS9xPC/qz1j0N4fr7Zq+d8fdL6dDZxlYg6wfZ4g/6AAL4bi73p4l7SwWE3P0avcfW8zmv2KZ7XDH 87T/Az34rzoAocKT/wQ+9u3Hu+3cbk7vIA2/0sPOAjdvdnff7I5H6Mb9NXTGr/aw3Zs32yMesMOK +waSuDsePpzH+XGJ/ErPfXe/XTsC6LD9Fqvv+3o4QVn+/tMC/gef++Kn4ov95Pq8wtY//oKV8vRT pYwJ40k9LPQTgv/UHjmidakCYptwNx3S44h8gURbBKQ7xxHrgtAD21rgiMtqCshUvNda58bbaD3b WZl9iRg7DEesTUNC5qMS/wKJQ3iO11G4W5ipcySq3ASkGj4/xkizYLyuVkCS4j0wMVv+HKtq5W/q TIx8tp2plY+bczHyXjs3HJcQF6wgBy6qwd/UxeqEHsRuE0W8Mpm38apXvha8GppLFZDC5QDTo/kK 9iYZ/j7e1CwgTpIQH7XiPQhKdT6iQWWhB0FNz9804EFcDoLPTeiBL0q4WzSOj3XU2XDpjboPLlXR jc57EH22fM1FXyKX+BhU4jIaQxW0WAy9C21iKVzeksaYcsT4wGc7hWR4DzL+y98nGzX4GGQzhZnL Njk+C9mZxntd7OhcqgqWPe91cV4Jd/NZkMSCseZruyqn+ZtWrQQ9WnXO/E2rs8K4VecF7VJdFuan +jj4c5oZQq+bl3bn5vvk49ZCE6S3han4GPS1ZwhI61yqukmNy2g3PfG+dWcF5oBdrvHZ7l5a9T1U Yf30OAeX66Ht5M8Zpni+Toc1g8/C8LXyMZjWGD6i01vPJWR6L/CD6bvlK2vGxpmQVjoHejetzFT0 blpZE6mMArGTzhzWlecsTavYIke08pXOqQZ/M3R+gEzP30c73XnfNPYsKgdAchXaBJPpzAHpfLa1 UXHycTOQRSo72hjHZRRDYCfvAcgtl0RtQkj8fUx0D4b/F4hVvfP5wRzwVQKq7DgP0dYVz+cUiPCm NkSuXTClNvO+OR2eDPYvkBboCtbOKc4ttQvYTijirRPkDQu489Hxtkz+pljalc+pj1GYuQCR42Md bKq81yEEzUc0hCj0IEQtjAEQzryBZEFCog2Kj1v00fM3jb4X4W6hc5amY5RWSYwz8TbJaMV7kEzL vAfgW5O/T/I28HEDF+M77UK4jaGzbsKIZqc6l4PsgzCiOUy+Y+gMeis8J/bB36eoWPkYFCPJTjGJ 20y6WBclpAm7THFF0NclOEFGqxqC5gMbHFwf1IDVLSCFWyxABrdCdY1OkJ1mCud8ujkrIR50UECS MAstJC8hndslusUusACwQc/HoKtZeK+7zcLK6s5zfq17SEF4TmyFzyksdG6bASmCHh26Oi5VQ3fD NfkwjjM7qEqICEecEXba4ULlYz1cl+7mbRR6EKzi4zZCEtbChLXJx2Cq2vndppqTr5KprecyOnUR tNg0QdDK01duL+gZuqVSZSAjhloFRplYaN+AJN5rIL0JiHOBSohR2ADpygKSpnC3aCPvNag3n20D 0teo7Bhsz4aueiCVazGjY+I8xGBdFd7G6MElxBiQWD4/BkuBrgU0MY6/qXGZM3wgZQgIFDnVLsYE wfMj++ONiYZ7zIAInm0gs/P5scpxf7yxOvI9GIMjaL5lLiihjZ2cERvrBE1hbBicJxqnKvd5GweW xMfNmTypFjMOHJa/z3K78Jlz3nBtaVzwg7+pCzlxxGuv+cx5Xbj/2njTEh8374zwph5qh8+PjyNz 6YUKyVwfBOe4fweI57zXgK1zHzGQypmqWR5NLgcxzML7FmPUfH5irDwuA5YIjsIRI9gYQIbn75Ns 5v4Dk6K0L2QVuN/SiJ5TIIF79022mvuvgXS+A5ocnOJjUHRsXEKK7pz7L6Tw1ViAcektVgUuO+DX wmosIQj7HGRK0NfVNmE3q05r4W7oAJ+fpqbh79Os4xayaa4k4W5e8AUACZnLW4tG2Oe6ysLa7tDy /G4dioePQQ8CrzI96spnu8fIWbQZK2YjIJ37D8ywNfPnwMrisQ8gLfHZnstxyBFtuT1nps0CP5hO 2p2nj5r3bfoi7AvgloK2nFEJ2n/Gzu1GC83D48FW2cD5AeiB4fs2kGoFxGcesVkrm+sQIIX70iz4 KI/TWq06HzerdeLeL6sdVgNHvPK8B9qPTiXEamyO/E11aHxfsCC+lurrhXCNZEEhOSNevn2uQ8Bg K4+KWBPqU77zz5EYuXcSyOCRFIvp5trSWm0Lfx+rs+O9Rue4drFo1IXnWCHGYqF6uRfHOhUM3UuW V5mvYBBVzzmFdTF6jqxIPu/BSprgkuh145FI643l/iogKfLRAVGdVFNAjXvuPwBSePwHyOBxQOuD 5nY9EM8janYFRfibBh14xgCQxFknkMJ3MxtM4JFVCw4b+SoJIXCPmY06Swh4AH8OEJ7rYSO6Tbk/ kCo8JynLeZVN1hXeg+Q0Z2lABvcE2wQRkRAn6Pjk6+AjmkIwXI+KGQML4VFFsOvK8ymACB4Z7Noq 8LEuUKS8TQEP4D0oNnHOtxDOhIB0nleDCQ2CPihR4Ja2QvdKSBDkrSqJH1TdOK+y1Qicz1brOp+F agOP7QIpAtuozkm9dkHQfNUrbjvbCmrJ5a3Gxr2tFmxd6HWzXtCjzQr+ENvc5JlKtvku9SCYyrVY C5lzWFgyJXKd2FXhFrLtOnm+ToFwtm47dhmhjRUyiGzHnPL56c5rPtbdJc7JbfdKYHbdO56FaHuI 3L9jhxIyMe3QSfMeAHlKtP8Cydz3ZIfRAn8bzgtaeerOMyTt9EYYa9gYjfcaNgaPDLmV8kl74JRX XI8CEfJ3oF8dz1lYmpf7UJxWJlN5c9oorg8c+DXf55xRjntxgAzOHED5lKMzt6w5nv3sjFXcEnfG D27TuuXv5e9jQBD4GJiYObd0YN6R9xrmFNfXQITdecX6uAXmLFgF7xuoHZd4h+nm+wKQyHmic9hP +Zs6m7l3H+zNcq0MpHHbeeX5OS6JXg2+y0BT5cAl3mNSubyt7Ayq+Ry4Mt8xVhKIsH6CGpPPXNCN R1JcAMMX2tjAs4Hcyq7lqwQ0vvK1EELjsQIX8T58RKNNgoREJ+zbLvoorLkYCmf4MM2MFdrExr3U 2H0En5BLJgk6EVyQ72YuBce9rS7rymMFLlshPwRIkdo4IZLvoEGE2c5xcL6DexVhnS6vLpfRYjz3 ObhiFT8RAiQJa7v4yO0SIJPb6K7AZuI9qNpw692BQfL4nKvB8ni9q3HyCJRri3hyRAsZ4A7c0vHn gFtyzufAE3mUB8I2OOdzHVsjl53uCs+QdB20V0Ci4PkBkhKf7QGx5qMzdBB2s7H8xxyxRZCQ4Spn nW54z32QbprMT9+46WExCEjnua1uBstjoW5Gx88IAGl8B4SNYzO920J4DuA6XsKj5eB1lsdLsDVm nk+OqdbcE+y1idyeA5J4nhCQzO16r73jGR3eqKjoKsEmF7KERB4T9yuUT6UK7FrxGBi2+sx1iDdR 8Op6qy33cfnlPuZzanXmmXHemsL3YA/Dla8Sb4Pl8gYkcs638nqEuzllLB9RpzPnyh70ietrIJnv wR6TEPgYeJv4OTCPLvCovF8P4mshKCP0IKjOz0kAmYnqXhC7ydk6mLLjOsQHW3h8zgdfeGapD1Dk XHZChCkuIIPvcz4qxbNewQUj9674aBXP1vIRe5PwHG94JMUndI/LaNJeGNFkJ88t8sk1niXqUyg8 yuNT9IJ2SbFVPgZ5bY8cMYnnrvjsM48h+xw8zwUFUnkGK5DG4zI+RyP1Omaef+CLlIfiixFO8Pmy whUciYWftQLSOUvzVUfuCQYyuVXtq0n8LIKvzvPTEEAGZwG+QlXwXoPzcSvHNyWcjgId9pP3uunO Y4e+wWDhPWi2cnvbNyexgAYmxMe6+cAzZX1Xiueu+K4Frgykcj4KZAhru2Pb5KPTred81HfnBV3V gxP2rKGUwGqG1twv5ofT3A4GEjnvxfLt3ALzA6qP922awa13P21xQhs7Cp/T6YRYm5/ecV/nQgRO MWG+0zZB6cHPTQWtJmcBQVvDveFAJvcrB+0q3wGDxnoUeuAF+yfoWDkLCEYZbrkCSdw3GIzkEwLS eFwmGCPkqQZjC4/Kh5UeyMfABMezdIK1tfE21jm+YwQbFD9VFlbQVWgTE7eQF5LoWghOZX4uJzin ud4JzituYwQXBK/70gY8ByPA4OcxMCB58HFDC+49BjKE2fZ2TqGNS5wJBe81j+UEHw3PmgBiHdWW AcuRZxQGmKdcHwQMNs+QDAE7OtXXIarK8+xgYQiVBEBUM/ehLITXcwAyhJlbh4n4iALhed5AhPoU IcbGY2AhwfzhEp/M4HGmkFznO0ZIofOYK5AptMlayKLCShB4b8gucWs3ZF+c0CYGvtMGaCpBrgts dD5uxSnujQglDu7jAiJkjYMPe2F+qh6Wy0G1kn6r1nGPMxDPPVlAMo/YAKk8igCkcbYRqjM8hylU b/npm1CD4TmAocbOuQuQIaztphL38wFp3OMMZPA4RmjWcta5EO4NXwj3/AAZ/AwUkCnIARB+ojc0 byxf9S04QXbAbgXZ6WbykzShW8cjuKG7IMx2d1HQ5ENXHpFeCPfvhAEdL7SxEt8ZtnAGCQRWE0ec 4VFs6LAhzMI0ErecJvK8JyCJx6rDdIZ7soBMnvMTxDNdQDq3wMIMnmcYA8nCXrKyeGnfopKyn+Oq MkDHAIhw0jYq63m2FpDC4+hxxTyFvjnB8xOVZPHH5Rmju0zUsHKojo/adm69R1hmfDcDkrkXB4hw MijqYIUx0GDRQg+icH4ByODaMhptuB8J7E0LvTbB8Ig0kBSodlkIj+VEK8UKol1nXDjilOVStRJi pTaWa5doveb6GojhWUdABGYXnVbcygHiuFUNJHHbLC4vNe8BXpTrayBGeB9nO/dgAJnCWnCx8bM8 0a/0CI7oKqx6DwOV92C56vkYwPoQpNe7Lt0tJl4FCfRa8f00BluE2YbZxm3AGMBHed9CFDhfhHrh VmhcwsP1DvZZHhOH1eh4nBZI5gwlRtjBfLaTGvwMe0zGCBKSbOYWP+ZA8TyHmJXlmXFAhDh6zFim XN6ysbzWUcyYOaFNmNyzHXPM0t2kHIxYlJBTAmTyPO9YjJAlGovzvL5YLF7IzogleM6vgQTOD4Bk fsYGSOVRkViwtoS+xcIzLWJViWc3xaq1oJGqc8IKri5wVhOr18JqbCpy1gmkC2uhmcT5dWxucrsk thWd4gi4A5+frjqvWhe7VDcPyOB+ithj5vW44oDJwOdnmCbonWEjt5nicFXYaYdX0nNCFNbPXOWw OGKssMtMMwV9MN2P30j4Aon8dG6cfgr7zwxWRIRabkAyj+WkVTmPSmJSJvK7pXUagWrypHxKVEKA DM42klrqnyIaq5G+adLG83gwkMa5f9LWcxadtK88VoBtKfEIVDKg13zcwNH4/CQjVW1IRlqNyWoh UwlI41KVrBEyF5O1mvtDgBju64TSsTw7I9ko6PjkVkqSgHiu35IzRXjT5d4R2ohz6oLhp9dAAjSv 97QQnhcNpPNoX/K6cO0CwidYlEAS5y5AhHOHQDpnNcnbyv3KCRxWkGvvBC6WFoflcoCthFcMTUEJ 2WcpGMPP5QCJvJoCkMljyDDmPN9PgRRuVcOQMbyuIRChEm6CwcCzZ1LSiefQpmQc97YCicK4JSf4 xVLymZ9aSilWQVPklWwuIJXvcylryyMPKVvHc8xSdppzZSCOe6WAZB6BStlrnqGScuj8VFnKUfHq rAvhcZlUjBDBBdJ59D8VK9T9SuskGpf4EjXnSKkqyzOvgFSe6ZfqShzkiJHGrZom6KrqAz91nqpU xxmI59Y7kMqjcGnl9/I3bdi4ed/Abvmpv9RWyRwBiTwfFohgN6YG1Sc8JwonqlLXRVj1XU9hN+vW 8CwDIIPH54BMQe90H4V1Cq7Oz72nHhU/3QFEC9p/aCFzJA3jePYmkMHPDAGZ/PRAGnbynO00nJbu FqagD6YuPHclTeN5fWUguQp3c0FgtzMOHrmD6o38OXnF/yVkcInP4L3c75/1OpTCEakeZDY68XNt 2ZjKfcQZypJb1dlEH6gcrII5nG0AiTyzFEjiVUKytY5XPARSeFQxW9/4+Z9sYVfzEbWwjejKys4I eRtACo8mLYTndWZnO2cB2DQnP92R3fISC4hwvh7baeZ+5bwCD1QfZHBLHkPO3gp50UAszyDKPhbh TWGzCW2CcjzLAIhQ9TEHLZyfAyKcVczBaK7jgSRuN+bghdMQIBuW5xIAETK8cnST+0Ny9EKmeY4h cu/XSjLgmcw5gbDzu6VFBDiiNbfngGS+b+dltvG1nULmcRkghUcVc1aFn3MF0rgHA4hQlSZDKfKo 4kL4CfKFCKOTl1ktIVLfYFIKd4uN72ZAJvdS56Icz3rNRcqYzsV6nnEDZHJLLxeXeLQvl+h4dmCu Shk+C1VNztJy1U3YNZuywog2VXm+f26wZbhU9VV6X0CE2gy5S7n7QBJn0bmbzH2QufvKOXkeSjj/ k4ex/CtMeXjh1EUeQXNeBSRwizKPqLgfCYjmteDzhFjzNnMdLRAQIaaXpxbOIedpFa8XkKcTzgPm 6S0/2ZBnEE5/lkX/6WyX9bElqkeBVF6HtiibudejrKoJdESLRg/oCsb257gcFG0U11VF28j9sEAq l3hQmqCFHnjFs9yKDp6z22J85T6hsmLvVEaLVUJFvWK15dqlLG4ptPGaa38gjmdZFwtKwccapibf nYtTjmcMAOn8FMn6kA7XFMV5zSu2AbFc9wIZQq9dqNwjU1wUKkmvIyk8y7qAoHAffgkQRT7bQcoY KFGqGFqiFeL1QCY/y4ONSXOGAqRzrlwi6CB/nxiCICExdM7wYYIKp3OBGGE1JuyafAySqlzzlWQi j17CLOrCzKVQeby+ZCXEWIAU7pUqWVue5VayLTx+WjLmR0BWajZHoue+NCCBx8RLUZ3XdwEyuUem FGd5RgcQz2PiQCY/b1aKF74lV0oIPEem1PWBQAHpgu4FwplDqV44D1jqMkwExHCLpTRluLcVSBGk qhmhohGQyPloabbys7GlOeHsZWnB8/w3mKCO2+ilK829BKVrx60CIEIlgQKNyL3HQCrPVCrdFx47 LD1WYbYHDFcJkfb6YYKwAw4jfGOnDGu57wmI45Z4Gc4JcjB85jGJAqbKK1KWEYM0BrEKmm9K8eAy beMe9DKdUBmuTDAHvrZnGPyEZZlRSXeLkr6esXM+WtdHU6kkAjFcruuqm0rlAMjkfoq6vn5A12kF H+Xnt6sGIaUSX7URamICCRISNN/R6/r6gdAGdgkd62rc4L6nakLg8ZJqtXDuvVrneZ5dtd4Ls2B9 4D6UakPkcbPq9OD1aqqzhjP8CgbJee/6qCH3ZK0DvTxLtLpoOVsHEvnZl+oxdXRl1VW2ga56IIPX cqveCZWtarCd20xAJo/x1+Ay94sBkdpgAxQkBAg/ywNk8rp5C+EZEDVCRrlcx6i57xaI4xG1upJn uLwlJZzlqUmKidesIz+PAUSo5FmzUTyfAohQx7lmV3llq4VwT0nNUfDm1bJO23JEC94iTGgSZhvG Ga8zV1eVUY7U9ZVejhjFbdoKhcAtcSCN77QL4ZUEKhYDtzVrU0K9ztq0595JIIGzNCBZ0GLNC19Y qy1qoW8dioK36V748iaQJqzGHhX3RQNxPLJaxwqdcURbfhYBSOCeHyCDV/atwwhVrutY9c4FxPIM lTr85NkMdcCs5nebuvFM5roqX/K7TakyT1PK8jMPbZWJorMNpHC/WFu1VulYL4TPaVPYaan0tvV9 Jio7QIToWFt5vLwHKyjC3xQIz0tr68QO75t2QoQQyORyDZNp8FXSrCp8b2wrb5D3wIK+UTlodgXb BMRxGx2I5zwRSOE7YHNmCjPngvBFJSDCafAG7sJPBjWvHI9VN280P0MIZHI22FZpEz4L3nVejbH5 0DgnB9K5jd58rNwPC0RgGw2rlOcAAmncN9iCEyrUwqgO/ExKi+uL4hyBVHG5jkbg10Aq9623aIW4 WVvn3nmvV/yUr8boE+fXLSnL42YL4ZkJLWmhasNCOO9tSaom15I1wvskUD7+PskVzryBCPZpS+sQ lIA0QSsnyRJvy2soIFrICwAifPOkZawf3oMcBmdPraxEN44YxeP1rVjF/YlALPdxtbNDXkAy30+B VM6iWwmWZ0Q1GNw8etmqSTyvplVbeBwQSOUZEK16L/UgCF+3BCJY1a3CXOBroa1gl4AIJ3pb08LX xVqTchrb2gL5+zQ7hH1BZKptKR4uo11FnjfYus6CXHfpuwhAhArcrYfJffitx8FzcdpQRdgXhp48 xtKGVcIKHlb4AmvDeAryNk0XnjONUHmsTet4lKdNl4TRmU7wH7SJzV5o4w33NAJp3IPelYo8D7Iv J63UZnBeBWrruFR17MDcw7QSE7hN21eFfzqiXeExQg8WfeKIV3x+ulYCh+2glnzVL3OO19/p2glf Tu86WM7sgExufXSzPugtIJHLQTda86oa3djGPTLdqsz1TgeL5ifegAzOvLt1wrnDjj2T+2q601V4 U2cyZ51AJvcNdgczmK6f7oLwBRUY4kKOc/d28opg3TvNNUX3XvMznkCEynBAMs9TBTJ47bO+4s58 3IIenF/3YAqvWNCDGzzO1MGVhTmNWqi0CqRzj1mPVth/gExuZ/V1AJb3OgbPrUMgTVj166ugQhs0 4jokRiE7vSfleC5bT9rw8z89mSG8aXKe56UBqYJOTK7zU2U9+SmsuQzLSEB8FSQkhyZoyxwbtyQ6 WDw/odyL8dzn0ItL/KvHQArft3vxmme0A3H8VBkQL+i3EoYwolVbvjv3isnmsw12y1lar7bxPK6O uRb2heom9xr26oegXWoQvtDRaxS+EtybqpzD9qabsBaw1XKrDUjh8azebeX2dh8qc9u5D12FnXas b/FyJE7uAezTaJ7rAWRwry4W3OCZfn36wGPVQAqvH9+n9B32cXaRCkjnfqShtCA7Q0k1CodyjmtL IIlXdRqrkid90wEawi1kIEIVl4VwCRl6HYcQkMAz1oaWopcDjItL7zBqcD46jHH85DCQySMcw7jB bfRhvFBrYpgoVKCDKWN41hGQzBnKsFpYWQvhjGvYOHm+8nAu8TMcw0WhzvbwevCzvsNb4csZA7yK VzQaPhjOvIFEYRZ8yNzKGUFVvv+MAILPRydItZ+BeH5SYyUl8zggaJ3iX9Ec0QxhZUUzud9/gFfx qO+I0DvC3YLmvHckKEwubwlWNe9Bgk3LZyG5yW3AgZ2R+7hGWjUPBWRKz4mT51eNrAw/Vz2yGZxT jGwnZ/gjuyD0LfvMv2QwchBqgAMpPENlFKgk/pxiha/vjJUMKrSBIHC9U5WQBT+qTjwGNqoJ3Lc+ qlP8ZOpYX07nb1p95TG9UYNQYwBIkHodC/dFL4T7+UYTJWRVshHa6Mr9IaMZz6uejGY9P6s4msvc eh/NV85DgAz+RZjRoPm4JLYo6dEWhbNJA8yOn5UfHeYcv1u3QnUiII2ftB0dNISPdQ9CFuLo0fEK JmPYJmiXYYU62wPqn/s2gAj1e4FMnnM6phJOngARvv05pvECf5vOCStrrhAhR7zwRYsxg+YZEGeE v+kMjcfN8KKZ850J6sJZAJDOd7O5Ku9TqZqrEiDtG5DE40xTm8qjsVO7yvX11F5z3xOQwuONE9yS n1CeOgo5JTA+LD9NNM36tCNHrPB9mWlc4TsghEqoCgCkctmZJmqe3TRXIqaAGGl+rO08B31aJ3w9 BMjkZ0Wm9ZXzxGmDEPGcbn0ajiPa8N0ZSOAeZyCZW8hzfWaIrxJnMtcH09nE80Ow6Af3VwERviaE QROqokFRTM53YMhY7oOc4OQ8g3XCzOJxTSCe68TpY+Q7OszgweNMM9jOI4QT9IDndQIRvqk+wbz5 2SQglleGAyLkNM5oDfegAxHqFs3ohIq76+Nv3M6aqxSV0LdV7VVAhO+KACncjzTT+qyTiHDZSevD vgJSuddjJilzcSYj1MWZyStBVyXvePQfSOI8BIjgxZmrPATvQTbC2VggjVsFM0OL8R6skgVcv2Uv VCqeOTZu7c6iHbcXgAh24yymcqYKI0sLcl1g6fExANfgtXSACGexZwmF13eZJQonxGbVmceDgTSe 9wRE2n+qk2SnQgyENl7gykAa99WcES7xNWhhbTdleY0OIINXDZrNZH5Ob4pV72cLTViNLXRhrIEI PehK4Neza8erwAKJwj7XQV74+3QTeCQFSBNYQPdClsHs0Qqrvsch9GBIXw2fwxTuaZzDJu4BBJL5 SdsJCslztoEMYeamEeyfOe3gmYtzuswrk05sqA969MUDdP/Vb28vbzent38+Pv1rHvanZ7cPLdrm 9vVxt3n2Da6vVreXr4/f193+CX+9fXM4bn+KvHr3+gl8/vwBuL/d3NzM4+bqCTgPwe3l9e7+rm/f nP99883m+N2n+z7+4kivXm/f/OuP97ra7k/b4++Oh3d3D+iH4+bu6/319tNL6MeC27eXu/3pD7vb p+v3716/emq13xw//gR6t7/+0/vjeZw+Dc+Hy9Pb7e12jc8fNvvvnkZ1u3/+u3qBv17vrncvLzbH 568eV83VzfHV1Wryzebubndu8fo7/fLiZvfd25NeTU7463pz/P78x+vvzCNmzph5wM5/bK7Wi+LX j//4dM08XfvJ7+zTNfvpmnu65j5d80/X/Kdr4elaWNfefrzbHm92++9fXvz4z3X9zeHm5vBhe/37 T/gXlx4G4f7t5m6Lad68uzlB2g4PF64fLzx7f7n94YRBvN6dLp7d3+2ubzc/vLww6oGJPP76ZvPx 8O702W8Xtn589/kdrjenDWb8PHOfNT5L/M/68gGidLWDdL76ePv6cPM0ob956PjN7v70anu3OW5O h+MT9r/OmHaX14err7Gw8K/zddOxZT19zEf7y6u3m+PpW8j895j3v2zf1M399voRe2rqH5r+X500 1GYqz02t9bkbST8vLaTnWjXnG/ZCZ83/e1yz99vTCXe8/+o/AQAA//8DAFBLAwQUAAYACAAAACEA 2A6BQfoAAACBAQAAHAAAAHdvcmQvX3JlbHMvc2V0dGluZ3MueG1sLnJlbHOM0E1rwzAMBuD7YP/B CHZsnfYwRolT2Bf0MAYjveWi2kpiGn8guyP99/MGhRV22FESeiTeeju7SXwSJxu8gtWyAkFeB2P9 oGDfvi4eQKSM3uAUPCk4U4Jtc3tTf9CEuSyl0cYkiuKTgjHnuJEy6ZEcpmWI5MukD+wwl5IHGVEf cSC5rqp7yb8NaK5MsTMKeGdWINpzpP/Yoe+tpuegT458/uOExJyx7JuWXCx9KjbyQFlBbycqunza dPtU4uiIsbtQqXvk00BsqLeemAzdrav3n2uLdMQDfWfDnQ7OBb80Ic8X+C2Y8vrLnIk9TiCbWl4F 13wBAAD//wMAUEsDBBQABgAIAAAAIQB6qHJ0xQAAADIBAAATACgAY3VzdG9tWG1sL2l0ZW0xLnht bCCiJAAooCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsj0FqwzAQRa8iZl/LzSIU YzsEkiyTgtusupHlsS2QZow0Kc7tK0KbE3Q5/Mf7f+rdGrz6xpgcUwOvRQkKyfLgaGrg8+P08gYq iaHBeCZsgBh2bd1XHd+ixaQ69GgFh07uPsdf+/d951aZj4OTrLyMo7N4Ie8IizV5UA/wbEKGMwvq +te9BZW3UKr6BmaRpdI62RmDSQUvSDkbOQYj+YyT5of4wPYWkERvynKre9d7x1M0y3z/lf2Lqq31 8+H2BwAA//8DAFBLAwQUAAYACAAAACEANciaIeEAAABVAQAAGAAoAGN1c3RvbVhtbC9pdGVtUHJv cHMxLnhtbCCiJAAooCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACckMFqwzAMhu+D vkPQ3bWbZiEtccrSLNDr2GBX13ESQ2wF2ykbY+8+h526407ik5C+H5WnDzMlN+W8Rstht2WQKCux 03bg8PbakgISH4TtxIRWcbAIp2rzUHb+2IkgfECnLkGZJDZ0rJeGw1fWZvvnps1Jmp4zkhX5E6nr HSPtge3zAyse6+L8DUlU23jGcxhDmI+UejkqI/wWZ2XjsEdnRIjoBop9r6VqUC5G2UBTxnIql6g3 72aCas3zu/2ien+Pa7TF6f9arvo6aRycmMdPoFVJ/6hWvntF9QMAAP//AwBQSwMEFAAGAAgAAAAh AAXvPzxrEwAApDUBABIAAAB3b3JkL251bWJlcmluZy54bWzsXd2O4zh2vg+QdygUUMDkYsrij0Sp sD0LWT/JBL2bINNBrt0uVZcx/inYrqrpu8W+wj5EHiHvkxfYV1iRkm3KliiRomx6in3R7jZFmvrO OeTHw8PDP/zxt8X85i1bb2ar5adbcO/c3mTL6epxtvz26fa/v6Q/+rc3m+1k+TiZr5bZp9vv2eb2 jz/98z/94f1h+br4mq3zB2/yNpabh/eX6afb5+325WE02kyfs8Vkc7+YTderzeppez9dLUarp6fZ NBu9r9aPI+gAh/3rZb2aZptN3k40Wb5NNrdlc9PfurX2uJ6855Vpg3g0fZ6st9lvhzaAdCPuKBj5 pw1BhYbyN4TgtCkk3ZQ3or06aQgrNZT36qQlV62lmpfz1FqCpy0RtZbQaUu+Wksn6rQ4VfDVS7bM C59W68Vkm/93/W20mKx/fX35MW/4ZbKdfZ3NZ9vveZuOt2tmMlv+qtCjvNa+hQV6lG6BjBarx2yO HnetrD7dvq6XD2X9H/f1adcfivrlx67Gusv7F1Xi1fR1kS237M1H62yeY7Fabp5nL3sLX6i2lhc+ 7xp5E73E22K+e+79BXQ0l6bhKS6gPDTYpfsl/ot50XNxi8DpIBHaxL5Gly5Uf3PXk0WuhYcfVoKG Axd0HEB2DcCTBrzprKNK79oo0MzfJ6/JtbPJ5Jpxd81svi8Opv7+8q2ftvzrevX6cmht1q+1nw+2 /06nYYm2Sq3jLWHTrzO/PE9e8iFhMX34+dtytZ58nec9ynXoJleDGyYB+nculRtqdLc/5Vxh8nWz XU+m2z+/Lm4q//s5F3rOOfKaD+ssJxpr+mVBK8KnbbYer7PJr/QR2spyQ9t8eJvMP92m7A+Jbke0 ZPE6384+Z2/Z/Mv3l2z3DO3sPGNfF49tFy/zXaGPIHSB7xQl8zdaMMs/dj/GOrN7GBRP5ZQnXey/ fMyms8WkbDqv+SX7bV92B+733//7dPftPHvaFl+//OeadSiHovzcPZP/Ro7Hw8sqlxLAAaTPjw5P zpYUAtpQWZz/73my/MYIG/LY64zK9kfs59knB3mrPEAPecTK8kBJkoQkwUbLAzqBSB60WL88qIxV 5ZGo2weIPRJ7oSZ5vPyy/T7f//Ln2aZ8ETSguALoCaRFS/ULC/UQVqosLEKciMTIH1hYbDAaSFge ZqrQICxaql9YWF1Yu4lDQVgORI4HYQ/L+vo6n2clukfC+Ptf/0/HQNdv4nl/WJcf6Wq53VDgN9NZ zoF++b74upqzqmGOaeWL2XJL1fBpkiNaNsZaUZSt20O2JegKso1jJwpBAZ6psu03iZkgWzpwq8q2 FI2CbBMc4chJ2JxiqGx7zXgmSJb0kGxJJVQk6waOh2OTJdtrejRBsn4PyZa8RkGyUW60SVxYxYDE qFbwenjRQZR1gqelAsEryopOAKqyYnOL2gowABHyUI8V4OBW2EsYJlgh6OFsScci0bJv5w3ja+hF kQPLxWhvKzyxMw2SxUhEeGkpL9nD0w2SbZVbFQagBYb7uwPvVEfCJSIOQUt5JA5P60EC6kLi/u7g WlAHg0CRwdNSHozD03rAQBrBuL87DKzqePgea6UBD1rK43F4Wg8ehTNZGx73d64GSIDjMH7SgAkr 5kHhnteDiqsdlfu7A2HqAQxwhU4EWlwB5vC8HmC8IYC5vyM6sIGBaJRlxRVsDs/rwYYMhM393cEJ 2cf/hEXjLiuuwHN4Xg88/nDw3N+VFLkfQq4vGolZcQWhw/OqCI0kqabSPpKTYoScuHSO1lPN5+9f 17PHPwkIJyTAS8dprT88/+f2ZT7Nx80o9FPohx1FPV+9Z+vP2XbbuNz7ly5yPRoCq1JqXTFI88r9 2zrY8RwHMN/eNltuJ9vZW9adeba+Pey02K28vU+Eb1//SmzOqLzSuM8r/ddqMVnWvxGqe6P17Ntz 8ytBNzgyu2KfQPxKzHfDv5KTKr6ScDjC0hJCCChIiFU5j9K50q+EHaTwSnQz4TxK58krHSZHo0gn pWP8YnilI9IScrHKsEAdx2dSOl/6lTxwNCx0eiW2bDiL0gXySucFR0NDg9LJkgalYAcnjX3SsiXb gTSMQ+x7LaQBOBD7qaeHH3YiDL08FKznT7P1Zvt5RgPHhqQX0eXpheZlhQIhoSBcmJC0gACB0InN inkQFChMdFkK0waAv3+jWgBosbQWVEnPoKbQjfS0gJC/VMtWhgIIVZo0pCl0pEktIGAkHDxZMQ+C ArEazBS6EasWAFxHOCCyYmktqFKxQU2hGxVrA4EIB0RWLA1ClbwNaQodyVsLCB4WDoqsmAdBE91T CpcEwRgBEgnjPdrpXkBgPsiRkjTysuPoXhIETkLjubrJ6gNuQFehqzLCIB/8CmYgr/YCKFcagOxJ BRuhjFav61m2vvlz9s7hefTtdHP6oOw26THOxdyrFee///V/NSAtyze7Iv0/+dP0nOqGw7n6nexm 6zGkhTJrhlTHKNCTwZ5hHKjSYYPHgZ48+NLjQJVxGz0OyJLtS40DVf5u9DjQk76fYRyorgUMHgd6 LgIuPQ5UlxtGjwOyK43zjQMjycWL0vEhEOGQ+LtzdaqLlzEm2IVh7TmTvSYQPwxD5HSNmhJI/kcN cpcLpesq9S+zRbahRnNTLJEPsq8rUV7MEAwTQtjuhGaj0gHtUIuZIcHlVjA+iTGKQWgmuEOtX4YE l1vLBCRJgIcSQ8EdaCUzJLjc2mbskDAJUUEZjQN3qLXNkOByC5oo8v00wIaOuUMtZ4YEl1/apE4U uXHBG40Dd6iFzZDgckudELpJELmRoeAOtNQZElxufZPmpDZFkaHgDrW60QvuSHKlo3SYHiIXgAgK T421r3T8AHtRAGrPju11IolAFIJx19NkmkJ521g5BOzXG1SBFUupwrUH/7bhFSAhXrRYgFc9CMaF C7cRYs8VgcCKeRCuL8C4jbQiIgKAFUtrgXEhyW3k0glEILBiaRCMC2JuA8EXjp+smAfh+sKe24ia KxwQWbG0FhgXKN1GqKBwQGTF0iAYF1rdBkIgHBRZMQ+CpugcpTw7ECUhAFjo4BYlC4hDHOH8rz1u e6nV0bvSAy5hmqUY+yklYSeHm8RB2FC7l8bhaV3ErptuniNbwGWRsNkCKixPHxh6sgVcFg8jswVc FhJjUwU4Qq8JK+Zx4Z7XA4zJqQIujY1NFdDimhwMHk2pAs6P0EiSaCql/YMRHjtOUE5Uqv5FMk68 cZnFqCpYzr+YjkkyRk50KuqyXlXUAh/z///lb11EWhGQdJaAZp9xNtlsw81sIulQpgFKWuMpyrV3 4Zg6fzBYBd6WNASN8F4k1JuidrnQroor8jjXgRmB2xSgywVsVl2V4uwJjQANFYZtisW15WC4tMWd OEoNsbiTRA9mhEibY3FtqSPOYHEn7lUjLK4tAcWlLe7EH2uIxZ1kuTA3GFkpvzKMfNKfQodj6BAY lB5fXq4chfbGIQzHbteFts22ZbNt2Wxb17i1LcP0OvIvm21L67azDGXqyHJsti3tW8JCHqJpg1cp 0T9MAUZxkcS4h98NhCGIiqy2VUlwpAEhGCIS1rhYy+0663cr+z8rOtaZnVzyKOb1et8ue7DyCrxv lz0ubbT3zRSLuy7vmzkWZ6j3zRyLM877ZorFXZf3zRyLux7vGwvbkSbSCKSBGyQ97q1LkZfzY123 mx1JTM8pGE98Hur4OBTcXXPXIGHtklO6pQBhHKPY67kEQgTi2I0YPsfi21skSjzfh6BrlMkgftOj 4QvvjxWrCqn6ttZv2vZK1m9q/abtr2T9pqpKZ/2mHWhqF/L4MfymUOmWAuS5AUzDcrqXPxjjJ17i Q4z3KOxlYA/G7IhEN02zB2M6I2EPxlTBsAdjTvCwB2PqILEHY5qBsQdjhNjYgzFt8HyUgzGQLroV iGaaAheUECn4FcOIeIGPa2/C6ibT82TYOSxQ6uRHS3nxNSxnZEVCFxTyIgmcACdRKBJJl7NKYeIm iThmIoh9b0yCmrNKtUsCzTETrjgdw6nJ2LNKEvBCKM5+0wjvRz+rFIgT5jTi1rqTRDHrs5l76lU1 JHyCyGYna9/MpVj93o4yYXEOnksbpKlHmVygOE8MbpDGnm3yFYf+oQzS0JNOruJI/8FPOhGkON4P YJCyjFwpOykKPQ+QoMwrqpydNA4iEEbi7KTEwVGISdhRsPbok93Ct1v4HV7HbuH3UDq7hW+38D/y Fr5Sbst8uZfAJCl3L+S38B2fhteCeI/CXgZnDNhU8JFW+6pvKpfub8s1UU0zuR7tRfK863gPqlN/ dexX/3CH5Xvbck9U0yysRxt+uHPle+yrXVOvRR9+uPOkO9x2W1TTFNpfIRQmSOiqWFvXXdEBpr+2 66Kapj8t6lA/uYlHX9jN4GTnNspR5Oe21PVBHAnntg4x7cEYg7ZcIA4KYQSJ1LiseUF8zss3iknf pAVx76s0ilcyaUHc+2IM9krmLIj7XnMxsNKpLIj7XloxrNKpLIh7X0ExoNIpLIh7XygxsNIpLIh7 Xw8xrNIpLYgHuewBKiUQw+k4duPinpY+CcSCCOLdnci8JPgEYr4H03FYs1CWzcHb6Z63fu7z9qiW L8/ZIlekxWy5Wv8b3TZhP2Az8Bq4Z2cz8LYAZGwQi83AWw+MzcCrZnE2A28bhbQZeOuBsRl41Szu inKAKCXTcyMPOWMQFQAoh6HA2Eni3Z1rvFw5Ag1B6mDg63J3gm5Ll5YQfld80ffxCQzpEzy5bUxe aAn75V3tzhQ5urzjTvMhFoXYFwqC4bfm0m2VZhBOdl0UomWiyzoH2wCgOx8CAJQ2RqrcdVBT0HJr bv5SIhBYsTQIVSo6pCloujUXCQ/SsmIeBIUYnsFMQc+tuY54SqHF0lpQJZWDmoKWW3NdIhwQWbE0 CFWOOKQpaLo1F4tzj9FiHgQ9jlREG5XngTFyXM+Li/dT5YF4HHp+ND7kr9jLjuOBABOYM86aA4K4 Tlb2gGCtMdgDgvaA4EdypQ5wHtCeALQnAK0rtRGgAQ782SN+9ojfFbhS2YgqTaE9kCDg7bKWyAfn B4kTRQGpPct3Kq9arvzx8uuVaMvAYPPrcUjY/HpVMGx+vRM8bH69Okhsfr1mYGx+PSE2Nr9eGzwf Jb8eUkrk7BGQ84m+qSNypopJ4JU7/7xgOV9tiIMkIbBmlLAX4Kn6au3Vdyq+Wnv1XYuv1l591+ir tVffqfhq7dV3Lb5ae/Vdo6/WXn2n4qu1V98pUGiqZvIUOsAY0OOGDABVCu04EEcwDffo7uXKU+go xOMoTE7leJXnxi5OoIsjq5ZAt6N2cmDeEugqQDyBLgCyBLqGQJtjcddEoE2yOCMJtEkWZxiBNsfi rolAm2RxV0SgaT/lCXTsI0BQSWGVMxGme1z3EtWTiVA+441KRLqWUwdsC0S2uyRg7G7fXYxYUIO4 uzqjBuSTPkF2dc2hy66D27useW9fvteEJSbhIjmKAB9xr/XvwMvnooNsc4nbUg86aMgg++TyfacD C9/3oBhoxH0faiu7f1q9453pJgIwUP8V8hYhgqvGyqy39RWG3RKWT/l1ctjsaIdXdcpUyvhPIE5I GCtPmfb+3TYyqG06vnokbHzgcBzi6vGw8YHn4T0aULHxgQZjY+MDW1wzg8HzYeIDlW6JyFd6DvDj ksUoxweGUQhdJI4PJGPPCXygR9Q6ruQF0GdjS4NMXY+5WZ9m683282yZ0ZfRqfN12Xu6QXOmbD2+ I4KHFfMq38kLdnXZelwoAoEV8yD87rL1IIhFALBiaS24umw9gScEgRZLg3B12Xo84XDJinkQfn/Z erBwQGTF0lpQjYUzP1uPB4QDIiuWBuHqsvX4wkGRFfMgaMrWQxuVZ3gRgd447Zm1MQYRTmlExQ69 vew4hhfkDA+l464+g77hay1CkvMS9Ah3a45oU2eELtWhNCyGR60b1Dqg7ZnI8SLgcswzDEM4hm4x 6hgHrmyCSBPA5Rit77lhjNKC4pkHbr/kkxcBl2PLiRc7KEgLXTYOXNQvqeVFwOVYuO8kHglN1VzZ ZJkmgMuxe+KBiBA3NBPcnok4LwIut3JwfdeDaRF9YiC4/RJ8XgRcbkVCgJsEiamaK5s49DLgjk5W Oku2wlkWK5sCy8pyZ/euxbmbEXv0pF6xdV1brwhqaKhX7PLW/94ueqiuXrGyqa3HNhkaqhU7hrXV dsvIumrFflptNVEni62m2mq7wIG6aoVfvrYaW/U1VCt81rXVdsFvddVAsVCtF4GonkBVRBIHIlUR 1ROoys6QausJVKVYRTdVFCgLFIkdCNQFCSEVKMwuNCg34v94y9br2SP1GZxEEnFlFUS5ak2tcMNo j1a4GJYerXDBHz1a4dwfPVrhogx6tMJtyfdohdu87tEKt/HXqZUmdRUMVLsYc6uuVl1NUVfBBIlE 8zEUzJBQNNVBwRQJRDMIFM2Rwq4KJkkoIkZQMEsWWSubKgpmSSTiVGV6ovquCiuKZkkRE4CC8QqI 5mUo0hwhuxVoDhCJA4nI1SG2s/fQ2vTzAv07x8+LtFjEEZFIi4UVRVxPxJ6RQIuBSIuRQIuhyMSR SIuFXRVpschusGj8YxUH1QYssoUz/LzIFs7w8yJbqAzMxWexEfnTPwAAAP//AwBQSwMEFAAGAAgA AAAhAC/0dsrsNwAAGlICAA8AAAB3b3JkL3N0eWxlcy54bWzsfU2P3Li22D5A/oPgAMF7yHhc3101 eb4X7rY9Nq7d0+PuuZOdoapSdWuskmokVbc9u7fIMkGAIEA2AbIJXhZZBlkEQRYv/yUfSO5/CD8l SjwUSYmqrm7PvcC4ix9H5Pkiz+Hh4d/88fM28m6DNAuT+PmT4beDJ14Qr5J1GF8/f/LT1eun8yde lvvx2o+SOHj+5EuQPfnjH/7hP/ibu++y/EsUZB4CEGffbVfPn9zk+e67Z8+y1U2w9bNvk10Qo8pN km79HP1Mr59t/fTTfvd0lWx3fh4uwyjMvzwbDQazJwxMagIl2WzCVfAyWe23QZyT/s/SIEIQkzi7 CXcZh3ZnAu0uSde7NFkFWYYmvY0ovK0fxgWY4UQCtA1XaZIlm/xbNBk2IgIKdR8OyF/bqAQwtQMw kgDMVuHaDsaMwXiGegpwssAOzJSDyb5sg89PvO3qu7fXcZL6ywhBQqjx0Ow8Ahj/F3/sD4g51snq ZbDx91Ge4Z/pRcp+sl/kn9dJnGfe3Xd+tgrDKzQYBHEbIuBvXsRZ+ATVBH6Wv8hCH6y8wX+ANass F4pPw3X45Bn+YvYbqrz1o+dPRiNecoZHUCmL/PialwXx0+9PxZGQop8ucdESwX3+xE+fXr7AHZ+x idF/henu6r/Ih3f+KiTf8Td5gPh+OBtgoFGIxWw0XfAfH/YY0f4+T9hHCAD6bwH2mYRxJA5IOC6p jKLaYPMuWX0K1pc5qnj+hHwLFf709iINkxTJ4fMnC/JNVHgZbMM34XodxELD+CZcBz/fBPFPWbAu y398TWSJFaySfYz+Hp/MCBdE2frV51Www5KJamMf0+Qcd4hw631Yfpx0/5UDGzJKQP1vAh+rJ2/Y HcQI98iE2cIw97W5k1ZWHxof6kOTQ31oeqgPzQ71oZNDfWh+qA8Ree7zQ2G8Dj5TQWzzGR3g1uKp A9xaHHWAW4ufDnBrcdMBbi1eOsCtxUkHuLX46AC3Fhc14DxZ9SEeGGwPwoHB9iAaGGwPgoHB9iAW GGwPQoHB9iASGGwPAoHB9iAOdOvnvUXiFufuwW+SJI+TPPDy4HMP4P0YASdWZk8fwOt2kPaDlz7g UrXJdhvuwa988rstYM9wE5NjU9ZLNt4mvN6nQeZ+IkF8G0TJLvD89Rp9QPGFNgDTIN+nCgy1EZw0 2ARpEK+CXqWnx69gi9mL99tlH/y+86/7Ax7E675JwD/Rj/Yq5Mjf5zcYSKiSJQugW3+VJp2h5Inf rKYsYL0LMwXyLIF4p/soChzBOu/ElZ6hqiSfUmw8bUes2GjaglFsLG3BKDaS7UjqCkUMmiNMMWiO EMagOcIbZd8+bBoRvCNEMmiOEMmgdUfkVZhHZNGQ8GUk22dRgg9AOg/jMryOfbQrUaxfFpCYO9u7 8FP/OvV3Nx4+MNCyiPV3TpP1F++qlzWxAN1o89iyzBlCQxjve9ghVMC7UmMFPEfyV8BzJIEFvO4y +B7t7vEm8U2DJWcjS/tlDkn10HzJvvSjPd12d5dHP+8u1KVEvA7TzJlcwGAdcPA53jBjcrrQjeUo e1jpSuDd5ayutxwgUgLpYJRRsvrUk+Z+82UXpMia/OQe9OskipK7YN3jJy7zNKH8KoIZESoaqY1X 292Nn4XEgGu3n+DxGd57f9eZ0heRH8YNlLYA9erp1g8jz9025c3V+3feVbLDpi9GjBuAp0meJ1tn MJnn9a9+DpZ/7WaAL5BhHn9xNNsXjhxjBNhZ6GCdopCStSNIaC8bxqGTZZjA+1PwZZn46doNtIs0 oCFReeAI4qW/3dF9iwPZQnryDqkfBxsqAu/PfhpiX5UrobpyAkzwj2b75S/BqruqO088J96qH/Y5 8auS3TLp7Q5c941FBVz3TQWhJloeMP86mGwFXPfJVsC5muxZ5GdZqDypbg3P1XQ5PNfz7W4/MnhJ lKSbfeQOgRygMwxygM5QmET7bZy5nDGB53DCBJ7r+TpkGQLPgduPwPs+DdfOiEGAuaIEAeaKDASY KxoQYE4JoIgbaQdMES3SDpgiRsQamKMtgADMFZ85Xf4dHS0JwFzxGQHmis8IMFd8RoC54rPxSy/Y bNAm2N0SI4B0xXMCSHcLTZwH212S+ukXRyBfRcG178DHSqFdpMkG35VJYhrE7wAkdnNHDjfbFJwr Iv8cLJ0NDcNyOS4HPlQ/ipKkybfWxQ9ZrkAyKF0vcrOn8/wuIn8V3CTROkgVc1T3RfbzJb2mUx89 GYZhyMT1Te5d3hQHCCKYWRMWaE9uwFe66T8IoXzG7zdB3d4H63C/5QOVL9fMxuadCYdXOk/0ncud RaXn1LCn/M2Zvme5a670PDHsKX9zbtiTyG2l56Kh50s//QQywkkT/xQ2n4L5Tpq4qOgMfraJkYqe EAueNHFRRVS8F6sVPj2QqWMmM+r+ZsKj7m8jRWooNuKkhmIsV2oQTQL2IbgN8UpvozTJ94qQjfrn xmRTbaQ5f9wn1I9fOcIiUelG/d+ijVScBR4IZ2x+kFXRMmo8GqsbNQhjvaMGYayA1CCMNJGyu5VK UkMx1k1qEMZKSg3CWlvJK4KdtpL722kruX8bbSVDaaOtOuwC1CCMtwNqENaCKoOwFtQOOwU1CCtB lbq3ElQZirWgyiCsBVUGYS2o8gbMTlDl/naCKvdvI6gylDaCKkOxFlQZhLWgyiCsBVUGYS2oMghr QW25t1d2byWoMhRrQZVBWAuqDMJaUMl+sYOgyv3tBFXu30ZQZShtBFWGYi2oMghrQZVBWAuqDMJa UGUQ1oIqg7ASVKl7K0GVoVgLqgzCWlBlENaCSg44Ogiq3N9OUOX+bQRVhtJGUGUo1oIqg7AWVBmE taDKIKwFVQZhLagyCCtBlbq3ElQZirWgyiCsBVUGYS2o5PCwg6DK/e0EVe7fRlBlKG0EVYZiLagy CGtBlUFYC6oMwlpQZRDWgiqDsBJUqXsrQZWhWAuqDMJaUGUQTfzJjixVUfdDe6+nCtTI/OiKDeqD eCFdBDU2B8VHpYZlfjXhNEk+eeBlxzGxN8yAhMsoTIiLWnHMLsIlIRJW554/nDVfGhKhE+LK0E2n wu5GkDNTCfjEtKfkU5k0sbzYUzLyJk2cLvaUdp2TJu0r9pSWwUmT0iVyyYNU0HIkdW5SM0LnoaJ7 k7YWussobtLRQkcZw02aWegoI7hJHwsdpx5WzvXeU0M8zYp4UwlCEzsKEE7UEJrYUqYVV8eyYJgS TQ3BlHpqCKZkVEOwoqcSjD1h1aCsKawG1Y7UspjZkrq9oKoh2JJahtCK1BKY9qSWQbUmtQyqHall xWhLahmCLanbK2c1hFaklsC0J7UMqjWpZVDtSC0vZbakliHYklqGYEvqjguyEkx7UsugWpNaBtWO 1PLmzpbUMgRbUssQbEktQ2hFaglMe1LLoFqTWgbVjtSSlWxNahmCLallCLakliG0IrUEpj2pZVCt SS2DaiI18aJUSG1FYaG73SZM6Gi3IAsd7ZSz0LGFtST0bmktCRBaWksyrTjN7awlkWhqCKbUU0Mw JaMaghU9lWDsCasGZU1hNah2pLazliBStxdUNQRbUttZS0pS21lLjaS2s5YaSW1nLalJbWctQaS2 s5YgUrdXzmoIrUhtZy01ktrOWmoktZ21pCa1nbUEkdrOWoJIbWctQaTuuCArwbQntZ211EhqO2tJ TWo7awkitZ21BJHazlqCSG1nLSlJbWctNZLazlpqJLWdtaQmtZ21BJHazlqCSG1nLUGktrOWlKS2 s5YaSW1nLTWS2s5aeo+6hA5SQl1u/TT3NPnkLOC98bOb3O+e7/CnOA2yJLoN1p7bqb6zmuWzu8pz aBg2ebwQtc8RznBid+G60pqmnWUAScO36+LZMtwZj8RjD8SxYjJgdlxL/k4zZFOzNoPB4tVofMaE lT0Al/tLMhL0L28XBRtiLu+S7PmTkwU7DFU1GA4XDFHKFtM5E05li8WcHJw+K8eT3AbpJkruLvbx Ki9mQMHgV+jwjdjg5StlzXm9Zv3LPss/YD32Ni5RQivLV/CWOAMZIsVwTESIPYpHbmmxJ/EmxY/q k3ho6MHn/EUUXsck3yD7wtLPAtyYTY9hHXx68PmTq3AbZN55cOd9SLY+4dLywT+gkjw9CNasMrmY TrV8e5BPXnx7kJQJTwgSvtNwasGbLNRgKHFn+VYe+SLGyfoHLEwS78Y4MydQjvUJL+efObvx0xYc /ykIdufoM6QM/0BSHGQKPpjMGZZCwjSYa6lMYOz78XWIHygtZCShOcDe3UYVBpPovqyTgvTviPaR Eu1M97tB++gQaB8PWfBGS7RzfatBO0FMR7SPlWhnU3CD9vEh0D6cMwltiXaOTxntHZE8USKZjaWG 5II2tmietESzjAvybeGd1DbTniqnzeKMXE172nLawO5hFQUIlGe6fVgMyNZfWPlF3sO1Iu+x1hC+ uQrtgm/6XCyEbzZtV/ieOWMzvm/qMu0T5bQZtl1N+8TZtEl9x2nPldNm21V42sxMtJj23Nm0uax0 mfZCOW02M3jabGWwmPbikEql2gI0SmpNIKuk1kQ2S0TlRAyBDc7zj9fUwpj4ZVVAQ3ZAwDAg05J8 XU/LFUKiv2JZhxVGIXuipEh3QR4oqVNZ8Y4JGV3pKuCtGfpKy5a2q9i1jeRUzyjHTouG2RCnRqOd S/0eqqEvGB/rx54vI8Zyy4hahXeMrHSk688+Y5FldBZE0Xuftk526qaYN2jtcEDS0NXqlzSjurJ/ SlxtSgCYF4XB0J/NHESfigtpDLjSrYD9SQC6yYWE7pi255IK36+Q7Z5sL3GD+sgr1mB9/KzSG3ql LqqpN1B2VCqNSUV1NqPR7NWIbcjuz7BfUkrUbEpcYm/eW+KemoQq3I8c4Z5ZsceM+94xTa1AFabH jjDNNnYPgss7OLEscU9NQxXuJ45wz6T2d9xXDeFG3E8d4Z5j+HfcV4ziRtzPHOGemQC/475qmTfi /sQR7pmV/zvuq+6BRtzPHeGe2aC/7yirPopG3C8c4Z5ZL48d97A36OqHM9kBlicrhfPL5Nii+2Hz yVB22xCDGDeJAvyaJbKEE8F9fEJpJbho5GMN4AhvNqZxGm19aQh78pkExh58HoGaA95SVApuOdr4 xIZzft9ZhdzRjLrNFN4sUo2Zlfva5zT8pAOG5KMxjKH2x2IPz3OopgZIr2ZWH/D0D1AP2mQ2JjrN VhrIYNAvAu35k+mseupyMuBQ23KCfJCFOQE+xCplpbM+GS945g+gRROOFTJC4JV4mk1JTHSBp+Fg 1FVk5EN8jCj4AB81B5zy3dBXZWPMCM1cPBzXdYrMcCNGgwrH4Y4i7tinOqBODjvBqLMLOSEUeHS6 BiLjQVTNnKFMpDxeVjylqum+6MiHmZgN4INMh6qGbygskCxvXaQdSokoSdeMaMxsB0zJp90YU/BJ t0NMTYcDdUxAC6WM4ImLl4SoUkW1QtTrJMFmSx1VG1qsUy6i1UEhlabLY1IxRWCGUmHMT+byWlzT KXWJ4DQrLLElrXVkbAoEqZOXVnW1MxnvANR+fN4VdcwBID044sBSeiikr0d6WPAAbzKZ8/sJ9uLT XVIE5NdJSatceGSOWVJ68EBW1FCMFEWZla6OY7zY4BZeWjSxQ3XtgF4tOwzDiJ/IK+G8EastsTDk p/ettAKfMXkJSzlZHE9vpSJEsCU/Gs/dcP8ymvK5KxYpAUs8xsfhglWZYB13vAF5Y8zF6lVQSY/K YxNUinwHi1kDQc7xmz51IpBCG77FHSwWNsDOgq8Z2Ee6mzJiMWJo7l35rsTfcTJYf+wUxPttFNzK noyiwoateKdurAWY8GRbhLHHbazxomKLFuSJfAKLjebpT5dVgvx28/Ts3C1jVuaswmJXBq1SQ7uY Hul2xSV5LBlc9nIWFRBVqvgGKCHcSdKyeIWR2ebd3Ua5MiDVJNX8J4ssNNtjVo5HzXfygVRR0UAN hm+AEsKlLDu+KwPL3fIdHB/IK7V8J8gRNNvf+c6W7179uvfJffM6SYoKiBpuzzxNnBiQh6KFA2K2 qJpG0IZiuCDeWnazGl+nFgShw9bVlCR5shpI5MCOb8Ykpods2tW/yyFbtQXgAAfwyrlcuqLCHOPa 6yqUmBA1QqcUeHF5Lu9wUeG38PaWXB0CtrcYDNZXrBe+h/8hWAcbNDlSYHbnSHAso/+e0Zuxh1cU bJJ1rIhz71VJHPdhJXjm3NDiZKBJSYFWLU1KitF8rBnoeDKQD0nNww+oUp2OGaGU6MCnWzqEcR1a aIfY310lJJ8m5woKQxENIgl8fQk/S/ZpGKR42cXfZSt0rRSvzmIR+WKcXKRJsqFfb/TNuHaWlfqh LlVE15DNEKxxzKxAosbMtIsGnSa7IRNcV5WYLeZ7U3sFRdCqKV8+xUsvfPFUf+bcXe8iJtjl5BGX +rhwzUdaBQ2uOV6N7G6EzloFbZWmgW2a4KumkixTrhA2VIZyZu4Drc24jkna4CNpYYjRFo4qlqnF 0qQqZnHhXwfn5KKkNP4dqvLoJUpLddGRb4vBvY3XwWdZj4W4uENSHcOTEQc7vhgN4TyhryXVZ0Eq P/LaY5O1E76tbidrPPTE1Zq226EdrozC3e4jLnfDnTaGvMJWpwNxPfVUMXVcflDBbB5mEK9DNbez +kaGr8hLR7Z3gPk0B5kuzR8H0xUTPUu2OHWb+hzej+MkJ36bg53EdzxybyArmia8XqOKhmW6ehNe 5EsMsDgqtvKHKlwTcs6MNnHoGhRAIQgEAybRB1azVCTScjcdJJHnCSin5yxFoeHCirr0tqAWGfWM FtSVv2OAetu/FpOFEPc1GwAW6wO4MiP0HdPKfOZHsoONFNqT15CoTnzzrfIUATwzYn61ukqCWMat wxeb0oBiIha2pWYq7fUexMpONVGxOoCC4mdFUXCNto4SGnn1R1avQ+cxO4ur50nD+VB/uwhK0EoE whMvARgfuBo77MPrfRooSEIrmwhyhRNYifW2Oqb7DMQh1CdA6kwZqrV6rAjnAzqimEwN2JJTSXWu aerutmNIBSv2R8OWmxNX81WZ2UwCD+xV0u3ZvOLcuzitNV5qXHPKXZjfIAML3voy9LE2h90FO0ai A3yRWzw/XshYIhUfUY0ONY/pgNbNVS/jm+q9C0Oa5Yo7fmIdRGH19S6AwpUHDUiF8IxB7fc5/V15 skAhEVzZgo8P8LcJJByyXas7NDKv0FLCIav4uGyhPgwx2y2PuYQbjQPSO02iNQEEeiFpNZ1rHxgO lRgOQQxXU/rZ45gLXVHLEGs/t2Im5DRLDgGmp1lwBLDD06yC3JXkJ/NO6drJjOTgUjqj9vlOusxo OqtsQLvz34UPehdxsa0Rj/sUniH3JjwWXbpBODZXI584iESVr6wJi/15GE1Q5wYh8A6UoOR4va8l jxlhqrJ56ZPDPgSrtQ/cSUPlH0nF/SLz6La5wv7TNBC2Qj7Hwck/7oMM+/JAGvJKNSE59TtS0gkb AmsFZkLLpUIw390KsVnc4yH3fgXyYI9GW0cGLRcDFwmk8qaH1dsMgKOrog3buND7C5cpZwpis+s9 QCVzPvIckgYKDJD+Qn0pVADVGRIX824H0VvVjylnoN6XoEkIldA8tBtfJ9pXFdmxarGnQr162q3b nWM7Vc5t1I4F/qFdPsa+7Sa/Gm3z8NyI4P6qgcZuD55FmatToxBmFUlEtocEudxp9SnJO8V2fvcg doHQsT8eu90S8AE/vnuY8ar0ZtNVALXOR/0Oou7ByFg8aFve5vzW+4gzBVtn98jWprtKPHoQ39mD jYe1IBwo0Zm1RGcHkmj2HWjI7SQ6O4hEk69Ag7aXaCpqPY/4EmMsieU7KqziY/tbKg960yPveWfc DLuHk39GDPnshVOp/enLI6OSnWXidtfKiAEoWk4mSyca69abQ9zxoYtja6wyexVGzaziB83klQDJ SRF+1mxjv0hDNHmv2GPQ3zWKjZnakO8PuyVksk+BSzms2F5xWR9s6Jyfo8ExHQVd7oIVIpYitoXV eq7CWwDOP+a0DoVcqDSSng7GTmgcS7tJg18lGpCaj6QKwn8Ho4Hy1iqJkpS3E2KBHDEYGT7O5KyY GKmCJkaqy/tVlfOeapXROkWWpqJVQf/mJK5zDbNp+ZW9VNCJoZkW7pnlp1NNnhKDXCdoVdK00GdD mfFcksoWLF9K486svtfwyJkM27KxHx/2mFs5x1vp4zJrhmNBAS8aUkFRXjUk1WIUvvG+rWhEay1P 4U0C3KvHfgIdhosaHYLPSE2KKDfEaIE/di8XzBYtXMm1zhctwC1PAjsnRTBdF+pfr8+M1TtJ5Sxi UD/Lx5Ry3UpGVbcJqJi2uUxQrpESTcQvWuSRtLLMxrO+Lx1Y7YLE2TbiuPPJvEjNo+VwuuIcmM8x SmQ3HcU67KQTDSwpNoct+g/PMu6w9bsnUwUS8GosouLCREEY+kHnwf+MEWCegl2KjA1hnuo96xf7 CjxgOF5bZHZpwIwbtGYZxnyFGI5pID9JSqfExgdNCbgYYBpz0IuL+kWa4+USfV+aC04owOug+fTu 7ekY3ObYv0OSBEHHRDShlm2kiZWfUxFP2Xe4OE+eBM6aJ1ZSTbzAV0cGcTCNy/NhmPtRuJJngVNT fmSV4CzMs07W9b7jpA7J/ha/DiNNAVd8JDU69ntMmwZzb0/zek5dyJIyMfbLuyVwCsZxEwqnZsHc j+30lolSz2cpzqkIn34VhHR0/PVAb340HP+6JvSyTm6+pDgys/HeTSIzKYSI2/GEwd2wb6AVnRQ6 HrZ4RLlJn77+4FbayEVQWNZIlfv0t8zy48bk4a5dFHPGMq7InIt9wPeSObeBRPXNnvwYBG3hkSae c4LVjAmtMiGeI0GZ0N8Etovz9hpeMJfGspedoYTVdsZG5Z3r6o7HBYFzwMFFHqbTB6E9tu1K5Vxm wX/UzmXqd+G5OqgyZn+pizBtZPcRoZgqIA2TmMpA7eHA1k+BDU4M31M3XdPK0cAzU/u4q+9BSjOE Zve1Pr4pO/EIclU5Fwq2seONyUlFJLoP/fKFnE0Il3VWT7IKWFSOgIC4RvVtZ+nZivHiajx7t/lN YI+yrM4BA8NdhdUJ3SaU39IiFR9xjQ59X0nwKryxEEhjaGPC+703qC7FSkkiRFlDJuFHISJFIf7/ +7/88//1X//u//zr//4//+V/+IZQ2JvOv/nLv/m3/+/f/ee//Iv/9n//7m//8rf/afQNavZH2u7v /5VUCy/gHeyBSojUAP3v9Wtav+eFGcIt3QHqEZZjTpSZFj/EA3OtR6qgOZHqrjxa8T9BLFpzYQEc Wm0BMWi1hcyflcRXxQwYi5QpsJQ15/WaSlqsWqUsDENkYnvCCZlnFS+0TPIbNuMASLCFiYYBmKnP 771iM2/05I/Q/sAvH6LpLqPij9MkXQcpZa5kVxMMzO2/IXOG/IEJxpBMJEtEKuaTtn0RGdCy0LY3 WeHadg4RLdbBm27d/9yuO5YiAf30p5vdKT5HWCbRGreXdBN9IAtXe6TesdK1f12MDqDG8H08GPaW nLyAu3aKFNqgTXxKv2ipZ6ZpZaMVqDj1oyhJYjDijtWRuDQQBapwOwGoykgTzRjzo0aupLUa+Mq/ QZpTQGZZQBQs/VXHJKNS5cU0x27bOmqacN41NkqkrYYEWjQaGZA949g8QmILZdXZ2nr3DBBEHP7v rwQkCCUYC/wnKLQ1NLAytoSXGEfr+PenXYScBYVe7pe/BKvGyNqMNYEQJYWWikaWVAkEpbLvl1y9 Dy/SMEnD/AtvuWDB51plYaATqLqkjyS6E2BgLnV88nhe1kYtxmBYshpx7ZF2f44ikQiiABwiApIn Dld4/4vM4d4/9re7f2p4AGDmWTBa3qoxu/ZPvbhjan8tm624DEKG6b4H4L+aDT4f8Gt0rWxwi8n5 GXBhHZV7pMLxLJ08qYsbhnH+/MmaDqQmTcUAaLkSsWYrTq/of3P1/t1Fill+6+d5sAZVJm7kia26 7n3qX9Xpzq7XJNq/m6xJ28bK5ONsT1TWbU+4lVTSU0irKZvIYbIHqJFkH98g+/rnmyD+CX1SQ6WH F1a24DtjpcNtPmYHQqoWo5OJxmk3ns00rsHJlIe+qlpMJwvNSGcT6ndWtzgZ0xhZdYv5aKIZKUKY ZqTDweBEh9TBYqEZK2KAgc4XOppzOVU2GZ8UCfxVTSazKbeENC7/O8tXAAyfJb+6CbboE9swTtI3 WIPhyiNWZV2WIHk/AK9BttuDPpeYOEsi39yrLLQ/5N270lTCL7gl8jHeipVDiDXZagMrgTq1rdFO HN+Xw4g2uD1nK3rLDgh8Fa9xeDXonAtonf1dWAGosAq3WVxN8NBdeOvjrSOC1TvxmIkIbyekD/O6 bIHs02T9BfYFo4oWjmAGriOjPbAzecwNNU3SbbnucAfA2C8tUkpJ/M4eac5e7YSrwIOJSBWN71WQ 5Gi3EpmqkLdmWRLi3toI0yZFY7lIMZ7IqftzeoUV/b5Dk3j+BOm/0wCfZOKi2xfx6gafU+78a1Jw wwvIsoMKvuD8KGwijjarSwoMISE6A5KGuT6QqaC1gViueP+Io/pMMO9USKJk9QlebnCN2XrzyP0C T8e6dDsjnU0/1xnbw/FCdxF+MdONYjrW2Lfjgc5xMJ7pTPrJaKRJTzTRRj9Nx7q5TBc6jM0mOrfB yWCmibE6mXGJUhJuqJvL/ESHscVY55pYzBcsilZJ/cFkqmOh4UA3m+FwqvW1jIbUBdLU5IQLs5qd Rwudr2U8185oMtE6dSYLbZjcdDrVydZsSF8Xamoy084IoUWHupN5sR9VNZmPgRc9a00WNGlUk7aY 6mY0Ggx0qBsNZtp8ZghzuvQbaNaSV22/26VBlr1AW5A3X3Zo6Wh8PKgaI74YkB0+CTXD4AsB7GeL L67AtQgBUtb5OtBF5Idw/A+psTf6CoAmTv6vwR4UWIhxDUu7Bgbnd+UkyE3Y7NitugmL3zXm44JW 2f7xuzkCQ679py//JH4ciDrtvm2vMpmac7vu2kvp0DByJ3fuUZICVhfvwqzEmYR4XOuV1Tq1IaOT 51awcuhWHv/lS9wKoRvRbe9H2M5FMmkuW4Y4abrmzDLrCKlG6qhiTTyxDYSvapIeh+EnQiKLJqTc fZfscxz6/u42KpjeLbZIwhZlnA7NcuMoTEeUbfGzpZrQYtI6YzqpcnWWUNEDruOi6wgxIUVXDVsl voYE9+4bqeG+poMdB7CdImUuZw6ipToBqLiecA8LDu+oJI1db8WwwCmqGesKTKgpzZgVJ6tP2p3l PfJVMSDOT1Vu6pfDCCYJHiUakKqPtE7HbKK2FVBvp0qP/VhWh0blAkYx2WEBIwDK3LJd0WoRd3q/ aMVT3iSJbJniio+kxgaNVvulB2lk2hGrEjX6+jW+FFvXQYYbDFOC5iQ/Oh5l/lkiKqn8Nv8WV3+L 6nWkNRKDI85LVWlS85RqHLKjkcanOKZC3cgzFS3gxov1JohugzxciTevyjLyAeketipU2R3Xsad/ yFIma2f+MJD9SmfFjPgE9TQN/E+nBP3HyZImOsbFMtEljxpxCbtjDp5NVG1+8nSjBgs4YMvYMkz3 GaHR+pnsmmHFZtwKcGb17OorTTFQ2ZCapBjQsv5hA8YY1fo0Kegaj7h+KMsSqSOvoHhDhmTItCPB JQ+bUY2NGTvFWbcOeyEbPYpopJ0nHFfUKCjS34yGlaOR4r2mhrxFjgw2aYqk9OM/AqfVaJsJewc7 4+xh7QDwewkCC/NdqosdQcsjTSvP5ljt0/TGam8Tc8DT3qSB5L5kiPjd1aQlgQr9jZiXpa7RpS9Q qpurU3v0Ufo9Kqh1hzQ/2t0g9ShhjZfrNJXFsVB9YRIP1fATeJjnkJCixlhJcwO1vcOhtP0c8xjM Yk0MxvQnHveHYI1Tz1H7rPPug7+EJ2jVozhrk6OSqRjCEckMS6zSpUftQSBLfmuFIostzDCyWOVB WEqU1Amyjz1BUvFvvaQeCpVTBSoZCiBrmiGyP3OZfOVDsFEdPH9w9ryK0al8dy+LI5TAp0IUJz37 yqRFqSnpue0itCR97HOimyJvFfn7LIBjPmid6EBqjSPFGY9wqONpnROGuUbu7bS9eDPewGmsdm24 iZdsoPgZjjQCcqnzcp2c2C8S7UJQjktO8JMkHwI5vAGXe6jC09vhj+wQj4VvQy+R2BKvs4P9AEJD yK84lCmYwGyl6SIwD4tHGt+rOSSXMGbtnUtuAd64/do0Q/0pdIkDijsmbb3Jjk/VhNA/iX6sjoQJ t6dWxSh6yqJ+RSRq73g4P8XBfY03QgSBBic2Ss9c77IXxPttFNzK5m9RAUkhq2T+oR7s37numtNk NNWET0xmE27dQjb0eDLld6AOY29d4TOEd8F1EK9V0WO0Vqv33JgTR6ccG0hJb9I0a0/OMC2Vo+t4 FJp4UkVvlpaygeAVdmlFdldzgH0EbAbqrRuZgFDdmWuLRkxZyjreqby+Rmx1l6SyW76ogGbt6CKH VkEenxsVoUWBLRWu3Ou06qYfisZqTuUCbrxPBuSlrcLbin+3UDVL+v3eYpxep2i3Iic8Y8U6/Lfh SHpkz1lycUIv8gos2cPFR731UhCYAOYELfFeBE06wvsGI1g+a2HF94z3Q0bv6RBf5D10iXj5rJkV d0b8PYdA9sKm8jafFT90bLlWpuR5V4Xbij79qt74CAcrjbhzMMrzl6/+2QgYISnvRfesg1WIAXh4 dfTXeNFcJ+JOvTjtV2/VR9yxX7XHyEJcrLIsuN2Qh7rjMiaICcl7MBJCaaXHarvj1Uos8Fsw7jg7 WkqzQ0W6KT1Sk7ORTR1EciqPtHr26gD2Wp9HuQ+XrvCGnwbxlqqo3b2Z+yP+0xEQTcaKISbobKJX n96tPoXtYELhU5ywVZ4RK4f5mlf0ZoMPWVYgeyVSzzT0kJgrBMig1SyPWIOARH3oGiSENQgtBjUI 44Hj0BSZSlWwJDvS4AU90iKY1vWT9zi/zkj25JC0OyPG48dymsaumf9+mlZQDiYcjz6uPqLMrdmv RnOC2pLdOCkDzx+atsxy1QaF18BkNtY5OmGeybJsv+2dWlnc9492P70OqEUuG+ykktnrHmyxVwx+ 0sCNkbs7XVOalW8rr5M9vomGR197JphMqfFtZXVf8rfmbWXbL1feVrb7NGYMNnWjgNP+gg4p7fbx mjxfL4slrffKBjol7JYxmihEHjdvoJCA5AP5xbCWkt3GuFRxNwJXtQ4MqXgEZ0Ua6ANNdb9dBil2 7wJxvrTSY7VqjhEbGPFHY5AiuGVTt7C3RzG2FWFR+Tu8M5PXiW7GTXcy4XYSeUihTo6/BkdWtyOX Cz/y8zBOCIHp1rsoIuDva7X/8adXl1dvfziXCF9UdCa+YRwuuybJbrLjXy3wviR9+lsCoZh7s3B7 ca0rUnOZazPjCwulLrNGnFM0gZfCMKp6vRLm4rgUnwv1Lnfq6H3zwH2HF+ec5rGzPm8urir1F1ON sPr28gcI2R9RuSJtBZZ2M4we7wLnbn+AsHF29vbqCkQiqVGjEeO+LW869gLyaZwnDRM551Zfh3Xv 0Vybab2g9LkSX746A/ctvFxHvtbKEzY3s5A8/o1HaGduKtH9EK7rZsk+XQFrGC0HaVBNS9ItpOMA 0bd0JnI0HC9/NFO8WV/LwZZCVcNEWWVnb+tkqrezmTltFT5inomm501fgU4VP5GqR8BSl7kfr30g ar2oMJtHq/tmoupESvoGpPThTs3YQn4Pp2Y5vinCrpTJp2ek9tuiGuI60oRnHCYN7D2P2q0OlK+3 2gJK2FttIWfsNQiBNOMJo2wMdZpz+I4IeYXp8DqMVffbUBVIv68yCI0CsdomCbfVDnN/nwjWLg3S 4FdYLj+ySh1VO8eJWt8H7Ipgx9cBiQAQd4kcnEKFg1R6cIRK2dsQnc3O4iJuzdEySvVvgLOBnin4 BNfilKJnDQqcADCcYNMRY/cJsWeblrIiYzUf4ZBps1yGLtaiw1y8HQ11OehHE04yZYsFj1lStRiP 6CuqjfJs9gSj+Ra6P2MzyoBIkAy2Mo898jYDwj0zON7zSEIAcbgN3izKG0lc49EqaPwW4TjiDEaD SasToJ5Xbo4G2VYu0ADbyiX+WuBiPOeC7IiauxFwX2U3emZwZcX1lkNt83e7I9IzI6B2cvgGKTTD kg4x956V5SzZp2GQYisHQzCxi2tdjjumlBRKFKSlkAywPQgTkG4uGC3yT5Pkk/cizsNf976A4Eox HWQxCPb7jPIEPcQM2S/lY0V7Xsj814dAPE5PhhcFReKycr14VBEnakkXnhJVtWApyho3cqN2F14s Dmt75ottdr1K1rJI8vLOPCHjjO99K0mApyQKs0wCXDzY3hde+9syf95GEjpx2dckXuNCLhQNZroG 5VUylXyWsqdqwe5vN7SY61qM2IWYhhYTbYsTXYtxsTYoW2gxOtaidKzF6USLU34nvqGFFqdTLU6n WpxOtTidMZw26m8n2ru2A1PvywT1EycXaZJsaqqIJ8UUd2ZD4rRwp55IRgfVy2EkV7b9c58tV4QH mCv7ijj3ml5Ntceew/dnaye1Lt+7wZh1h0eacU2BSJaOTY1JkQqtmNGBGLFH9uC06cUTfJqX91Rz 4P1THrfZ30QILoG4LMrNBjFZ4rglwnR2XBzxsVePj0spT8orh+EEcP8xs28vf1DE7eEozp6j9o40 2JoUXoV5Ggy/9/erm2Cw2l6kwTZMAzwi/FPCGOmDw4zTwBt6/8SjHf/+33/neQNvtfVI///xH1Et AeF9R4pB7JplZux2ZYmsJJswzXJMjZZ7JeoacYf3d/j6xlt8z/HXvax2Sa1XVNtorm546ybdBo8Q U9eSZqfo+JjXgMflg4l2TA6fYlS5vI19HO+35doh+XaPntvPyOsrEo5ZsZ1iqEqOE4wOR3NunEAo ZetjS6Q62WNCW0sQb3TL2awWum7Oh/wJgqM6U0EzB3fginsFBQIdXBci9jo05ZrrHP/P7aQ3hNzy vGk5OHEntu+juZ5QnA8en2mJaAgbZaii4SX0rzJuz5Pv3Lrzwhi8gcW3Mf3rOCTWQD5p6miwu0jq 9Fz+6zRveyb3Jgmju3ANXBvGNR6uUuRRcaXMNyn66AVm/jt8rXowxeO7uWSXk+ZkuHdoJiRE5TRA XyLXmG5fxKsbfGcJo5N04QVbP70OybH/Z4LmAvuo5AuePx2YnK5FfUeKjEmTcsWuN6YzH8H9sXr1 7IU/zq5qgLm8sUF5KV7RwPwouaHFyUDzFcR/uqlOae70JmSMded2COmaFpOB5ivjxUwDw+C9m2mx V1a1mBduIBVlhwPNV6Zjar80cofuKwuD+G2nu6UW3oMl+W/zsrv2n778E/ugIz1MtelQXndphTdU BS+62IlZ4bS/O/BgdEUZWuFXc+g5WJXQ6pbc4Yc806SIGi55uDH8bXhSxCWrNEgZuazUQtoWC12L cZmFR9VCO9KJdqQT7Ugn2pFO2Uj122zbxETD8YwwEkvN8nRKw8qPRFn0sGlb0fNy3ByQF3qWTio7 S8i9hQEoENunD/f9l7Nki6cj4fT9F49XdcboA7ZyqifmjjJPGbIClTTq2r+vXFSUzji5p2qVJnU6 FmlxZPKg2OTAaeEoapPb5qSPRb2OOuIuqpJqtIV4a1OCHl/aR3wNJJaQiEu/1d/hfaSMXEnbP5sQ NVXkLC6M5pab6ANtGTAFZR9+maO4trn+mu5rV5pUtqwm6ZWLMNBqCtNWa+O9cIV8L1mdMf/Aqav5 264V1LZ7DbvvC/MSEtk+oCZXOQ76+gYP/RuesuKr0qde7S66LRlb2Gj3u1t8mfp3CAuqbQmv7swJ SkPtcAkTMTqySuS2AvXucEwCQ1Wx2XZHVaSPNoa0Ad9FrJ0LjEMZJx2HZy+T9RcJc6Tw8akl9TKk Ta09HNFTD1Gzae+5OnWWGN3MOtCGgbLBaplE66F8xZwptZWH6z2eq6YLJz2Eew4xmVAWQpkHCD4y L9R779tr+MpN/PJgq61Tv49bIFdoMKpLILiuO3ZqAULdjOXVDZrcih0ZN8ztIk1WwRpHQdWnVtZA M3sZbPx9lF9wFGKB181ToRzMc4DhqWRwhzDO8QuvZFBswPS/pbOV8ZpxnIqegUyRvAvSbZhlYSK7 JYSqQ6C5jlwF7oqr7TXc2edfM0URNsv8LIYOD/PAIzUQfl5cng+xpsafaYkX4/t89YbmLCdwluFD 4qZoUzz62/DabweOgrnC3WROESGlqZBCxxOB6eRuInGyw9c9gcWUljueTnm71DVjkXeGslUCLA/s gSqhBTQrkRGPZWFQKbc9/10m6nCHT3+9xnpKQiMqJ1tNEHuoshNHS4vdvCkridPJKhQTnm6DcjKf sIqI9zPhdYBzAEqzZcWOxT3L0/ATPXZTJJ1xPTGQc2mVmnnFybfm30PONVr7O2mWpNAxAXvcgfS3 h0WGzqeFvD1jxT1jyMBbp8AH4Z8aU63BUov4dTmEQ9AvccKPaIPNJlgVthsvd0eSbezfktDhOlGK ikZsdx/AShFswsuPlSuUi0R/4sNimgBU0fLDqBhZvYAYcjftwjarz5u410qrre+9fe9eRZxcF065 C06w+jyZ/UE0m2z/N+fwGOuzKgcOzIqhW5yS2cXe7oMt8n/C0R80gaoHO1o65Q6djOdEjors9wvu b3cU0hIFileaWTk0o8rT8O7S97CYOXdzY7IuzY2Xm40Te0bJhZuXr4p2tEFZc16vWf+ChvUBh9y+ JeQUK/vJ+AlYqMavYejtXTJwg30M+GAGK2N6shzVbzdPz8hbT+60CvbaUSsQOPi8PP922GQj4s6G 6nFZoyk1Gpm7pFLndm44Hj+MgYwVdHJFNTS902T9pTxPQCz2SZw473qmd3caBrEM9QntBgNdJvXZ kHGPqsV4NNLceBrPddnYJ5MiOZr5MWYhvJQBxLeAx01ROJgqPNhSK9VWAcA8fWwlJ1wxXvLxp+wA rNnyqEksKbPY2Zhu4eps18zTXsGZxls6FY8bCvkBkyofFwErGqkg19UPZ2y/JVEKVXm8DiKRWZqh fXiRhkka5l947ZhdANzHN+E6+BlJ4U8ILin69TXuSUOJLfYabJk9IcHF0PNTBrlcTF9TkPjH3y6R 7SiyByupUL+yzI5n09fcCyIssxDNuwU52BynIVlSml/kVA1LLo1zUBpiBzlfE2RL42tpc3pW4OQy TxNAKlgxNHu1zpKFgN4kNOX4urHqlPj8wbGr4Fq2hHilR2rtZt3jCQ4kFN+fVhV4D2b728sfinlK qML57spaCFWPONJ1NBQNnvIH1cTBZ8SIRurUIvTLHVkpXZR3nGDvhQkxuwvn9u4pdpOAF33EOjeS 2R2VNGnKeXL6QRouy6dynnxElTqM9pFESebayRx8u7Tpya2Cc1nAqjsuJMFhJAURgDwaOUZqjwd9 7ZG3dIo5IV+wmu8acVfBvRsMFo2Y9qrbmJj3BNR0x8KHYAXKHc7FemxCZy1movqnm2J37PPjPsjy MIlB7PHKBhRyxLfCYfclAn1+HcjRQ5jsuFxDwV4E8gNiB5gVd4fHo/mgM8Wgs+MdNFFc4LDpimEv +LIqtBN/KFfYsa2y+NYLjK/iPsy9YcsaV91x8jJZITNvCZw3lzU6pIhuuaLXWeEHsPLslLMlCU5A xsAKq82iYKpVq3NQ4sUrp9jKg1lDsAuT2fUJEYxpXFJ/Ic6hoS0bY2/7MMMsDH+WD0W+PIzt/qKy 7RCND2DGM3pH+FnZFGd62ETJ3cU+XlEJE443a7/P6e/KUaZCERma9KK4LpOceT4OdgHMHc+d/fDy FRhTjis8ZWB5ma5LlGsOrHSbWWlAMU8XxefReIOg5FoGdxCrTcBUYbUmUAauWhMoBVe1CZgtrNZE PyMwX1itiX64YMawahMgZZgb6Y793VXyfSqwHRMnSezx+1teuQOhvzSBDMAJC0tNxj6zQqyMNMLe j/BA0QdNtEDnp7PgUzaN29gigMF0L1FRBmSUkHZp42KHVA6tuaeDUIEUS1OCaI49GQsdItIEL/M4 LEv2tZJFnlZBFHo0nv373ksc0b7BVLpvgBymuMxOkns4KMXDzqwuIpJ/b/04zG6KsdAmd8HyTbhe B8VMrKLEsl2w+rMM1pIGBcYvIsR+N0jVBSmJfapjX6j3lJetbU5rFyxkIQu2IUVDO5pZHnBWggbm A/z/Lmh7nURIsoP1G9QGp4b7JCFObmGHuRp+gAgPLcoqc15MJ69PRngS+U2wDc5orrgNPMo972Vz ZQuOikGKLPgsPyYf4mKP8XQLP7qUB7ELvpgmrKSFZQxiqEZbYWWqwAob1TFiZWKVt7MVVmYKrLB0 XseIlfIl3t6wcqLACoukPEKsCHZpb1iZK7DCdmtHghVgk0qdsQRX/hobh+tECLedjep+qQq74Qeo PeHSw6h/9lsoEM0W80eKaCzXB0a0KoKUohvHqKhiSFVIJ2B5hGQvOD7W9FwTSl11A/2TIzgQtrmF /kERBKTGZIBRV31PemScyt7OyFtSLuj2CEPBsFf4wC7Z0KAQ2Zmf42ov2Xj0sTe9Q1+lKh491zYq qcXghFvZkJLCPIx+MB8hTnDqCRqr5PBuGgu2gl7Fa3zR7UOwCdIgXsmunoA28NKiBcQDvRpBt0FK J85bZfsdzpuShjt+GtqK+SmD/hwspUnTGu+vUN1fa3ne2EB+FFzfqAOZf5z+xPeKWBPmJKp60cmv WiNI47W8eked2R3Y412Y5efkNFrOdIjrPFrpMb9tE4foCL9YDF4OGNOwycf7bfHH26Ipveb1TKhu OktoM2Pl9Tsy5cbbd01u38HrFy8eDGMf+pCpfsREmokrxFh+cbLfw2VPOr+onVZUb+J0P4YApK5J 6NqInPrI+dVi9GpALv9rxI9fgupN+ujsxo36hr3UdpAVafLyZMqvljYrJq67O6JGsUvZ7m78LJQ3 qEWFhsKnk8mr01dMNdHxFUmwjJgVHtdPMdoUJ9FtsH6PZA9KUVm28HgTiHoO3O9aWr6YT1++ZEoY ci/PBtNX0zMG+6boWGhL8W0SD18ajDABhi9fv3wJCzz/K/vD/wcAAP//AwBQSwMEFAAGAAgAAAAh ADw6fUDSAQAA6ggAABQAAAB3b3JkL3dlYlNldHRpbmdzLnhtbOyWS0/jMBDH7yvxHSLfaR5L0jSi RaoQaCX2oV3g7jhOa63tiWy3IXz6nTxKu5QDOcGhl3g89vw8k/9YyeXVk5LelhsrQM9JOAmIxzWD QujVnDzc35ynxLOO6oJK0HxOGm7J1eLsy2Wd1Tz/w53DndZDiraZYnOydq7KfN+yNVfUTqDiGhdL MIo6nJqVr6j5u6nOGaiKOpELKVzjR0GQkAFj3kOBshSMXwPbKK5dF+8bLpEI2q5FZXe0+j20GkxR GWDcWqxHyZ6nqNAvmPDiCKQEM2ChdBMsZsioQ2F4GHSWkntAPA4QHQESJopxjGRg+Bh5wLF8HCbe YWyj+BPxFMu+rTQYmksk4avxsDqvA7fP9rAFdkghtnYYvTprc4+SWRxGSZx26zkUzXW3tqUSu4/4 rRf7446XbucNXry/xWr9hvseqmPnEpwD9cqPeSwL01puH6OxrwlO7HO7rzUqyvhgM5CA7Ug3DnqE PMhsXGT+X0bjYs1h5WNC/X3RvflKjlmSpnEyDU5yfAY5vs7wfqQX8ewkx2eQYxpP43gaReFJjo+S ox+7jwhUTijxzG/ALA3Ulpv+NC6bn/rx+103o1JC/evHbU87+ENZ/AMAAP//AwBQSwMEFAAGAAgA AAAhAAvoFO2FAwAAQhYAABIAAAB3b3JkL2ZvbnRUYWJsZS54bWzcWGtv2jAU/T5p/yHK9zYPwlOl FbCxTeqqaWPaZxMcsBrbme2Usl+/6yQUaBJKKI9uiWiTa+fEPpx77MvVzSMNjQcsJOGsazqXtmlg 5vMJYdOu+XM0vGiZhlSITVDIGe6aCyzNm+v3767mnYAzJQ14nskO9bvmTKmoY1nSn2GK5CWPMIPG gAuKFNyKqUWRuI+jC5/TCCkyJiFRC8u17YaZwYhdUHgQEB9/4H5MMVPJ85bAISByJmckkku0+S5o cy4mkeA+lhLmTMMUjyLCnmAcLwdEiS+45IG6hMlkI0qg4HHHTq5ouAKoVwNwcwANn0yqYTQyDAue XMORuBpMfQkjFxQ/mgb1O1+mjAs0DgEJqDFgdkYCrP/ql11n2jDmHYYo9PqxoGMeJvEIMS6xA00P KOyadh1Ox9acNe0G/K/bTdPSHf0ZEhJrjLSjm4YDREm4WEYFp4ilDRFR/mwZf0CC6AGmTZJMoSGW YxtwssNMIw5IfjPi5vrUNiN+gtPajDhrfeCdVkpAjogRoVgad3hufE9GXsSIC2fDrgETHnxcuPKK GUne9HpGPsKY3d5wuGJkAJFmy6vlGGlvYyS5dVKc3RkZ8FgQLDQnJWw0gYF2wopmw6vEBuUTLIro CMgjnpRw8fFcXPwC/9G+K0syJXdUyBQUK/4PJcoAhWQsSIkkhokU9OmBONxKkpBzImXlBLHddVF4 EOgNniIrJpyXRdGuKIoeDKvYOl27D0bhZUwkbBydh/MZxTPrNPo8TFcaFKo76LEc/3OLTWdY4LEt kE4zWX+O77F6crVeq7mibp2W3ZMpvd+Lurez1hT4a71/krWm1h7VGrfBnyLdZHuU3We/r6Mus+WV Iki9psLkPxkrHeySM0dMBTgOlArthM0KqYBmMOKtdppmg7bVI9upU5QLDTufC+5LueBUz4VkWfk6 KmSi4NgrLxhXIxHj0SLCeWImOEBxqN5cmkAJyUNUZpdaIulmtPrOY5/NqN1YF4gODE+07/iMwwes iL89WU669zjbwvEN6R8XGE+o+C99sc/5vdFjivyOy75wL6vPtT/WTrJjst1D7Ziqij+rSksrUu8g FelWfywxhWzw53JHRKEqK1dIqg6tlKrmuN9ectMePRck423Yo7sjE5XtMStQjVsynanSMlWzcKoy taeHDB65xocO2M28RR4iY7ILef0XAAD//wMAUEsDBBQABgAIAAAAIQBVfw8hbgIAAI4EAAARAAgB ZG9jUHJvcHMvY29yZS54bWwgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACclE1v 2zAMhu8D9h8Inzagju20GVoncbF+AdlWNEMzbNhNlVhbqy0ZktzEwH78KCVxP9DTbiH56jFfisrs dNPU8IjGSq3mUTZKI0DFtZCqnEc/VlfxcQTWMSVYrRXOox5tdFq8fzfjbc61waXRLRon0QKRlM15 O48q59o8SSyvsGF2RApFxXttGuYoNGXSMv7ASkzGafopadAxwRxLPDBuB2K0Qwo+INvO1AEgeII1 NqicTbJRljxpHZrGvnkgVJ4pG+n6Ft+U7ouDemPlIFyv16P1YZBS/1ny6/rbbbAaS+VnxTEqZoLn TroaizNmsZYKweHGAQ0BNqNJekI2HfyFxe1Nsrg8h5PJyVGcZTks1HZOdB+wQl4pXeuyhxhuaIpg e+uwsaQiM1wrhTwoY1hVCBfSUKyNly+ZceCBdENOc12DbZHLe8kD24ZOLPLOIPiB77IffJrAlib7 cZYMLrwf2939IX4R0kNAv7lBRp8tzmTNlDyAL7prmGJBt6/5hXnAfq2NsMX3jinXNbFl93gA3PSt 06VhbdVPn0eSA6tLbaSrmikIWUrHyIcsFXPU9xTa7q6WPCYucL8zwR3lnwI/HNa5ykP6nBjW0Wp3 0lYoQLGGxMuviwNwprMO6O5IOYVHVksRDo9myfPGvVuBlhvZ+up2FC8SpK6Zddf0hO4lirO+uDTy AT4rQY8MVcC9EvgzBh+lf4PFOCiGcM9bGklXLopxOk7j9CgeH62yw3xynKfp74G5F812r2A7fDJK 25tvd31f+Xl4frG6ina8SZylgTfZ8l6dfwI2u67/m7gHFKHpl/8gxT8AAAD//wMAUEsDBBQABgAI AAAAIQCX5BmdgwIAAEYFAAAQAAgBZG9jUHJvcHMvYXBwLnhtbCCiBAEooAABAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAKRUTW/bMAy9D9h/IHzaDrHz1aYNFBVbsqIBNqRY3HZXTaYTYbZkSGqQ FPvxo+zEdddhh80nkqKfH58eza72ZQE7tE4ZPYsGcT8C1NJkSm9m0V163buIwHmhM1EYjbPogC66 4m/fsFtrKrReoQOC0G4Wbb2vpkni5BZL4WI61nSSG1sKT6ndJCbPlcSFkY8lap8M+/3zBPcedYZZ r2oBowZxuvP/CpoZGfi5+/RQER5nKZZVITxyacrS6Dgzfs+StspS40WRqhL5kMptwm7FBh0fsKQJ 2IOxmeNnI+pqQjbfCiukJwX5aDi+YEmnwD5UVaGk8CQu/6KkNc7kHlY1YwgALOm2MJpijfLRKn/g fZZ0U/ZZaWIwnLCkiYibFRsrqq3jk0CwzdhaigLnJADPReGQJc8FdoMiXO6tUIHgzk93KL2x4NQT Xe84gu/CYZBtFu2EVUL7qGlrkjouKuctT5UvCLvN67Db1o3VOKjYBH9tbLGx+H/sOqnno/jl5DV7 t8pJN/8HIYZdIWoOjQwNnY90VNAtgCf7ArkR9vFZ/5Is7OEnLNerZPlpDpdnl+PeYDCFpW4MS3cM KcqtNoXZHKAHK7IzuIPzWDrqItNIozXxCJ09SLcIC2VrXqE9cIUASOb2RpoCXIVS5Uf/uJqJC45B CMt0rL4LZQJ2tB/vu6I+y30a43qxXIPJ4SvKGJbpXS+Fb/GeRgtffD3aqxs6af2bunNTVkIfOCHS ghyT4Ogf7q5KzSLs4NGqL4ud9XpQfruuhCTrjyaTUXfROkdsTVXMaHNa77cFdkO3aYvwAXpXbzA7 9bw+CKt73/wW+eA87tNT7+qpRgvX/q/4LwAAAP//AwBQSwMEFAAGAAgAAAAhAHQ/OXrCAAAAKAEA AB4ACAFjdXN0b21YbWwvX3JlbHMvaXRlbTEueG1sLnJlbHMgogQBKKAAAQAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAACMz7GKwzAMBuD94N7BaG+c3FDKEadLKXQ7Sg66GkdJTGPLWGpp377mpit0 6CiJ//tRu72FRV0xs6dooKlqUBgdDT5OBn77/WoDisXGwS4U0cAdGbbd50d7xMVKCfHsE6uiRDYw i6RvrdnNGCxXlDCWy0g5WCljnnSy7mwn1F91vdb5vwHdk6kOg4F8GBpQ/T3hOzaNo3e4I3cJGOVF hXYXFgqnsPxkKo2qt3lCMeAFw9+qqYoJumv103/dAwAA//8DAFBLAQItABQABgAIAAAAIQBTnFB7 owEAADEIAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgA AAAhAB6RGrfvAAAATgIAAAsAAAAAAAAAAAAAAAAA3AMAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgA AAAhAG8gAfsYDgAAz04AABEAAAAAAAAAAAAAAAAA/AYAAHdvcmQvZG9jdW1lbnQueG1sUEsBAi0A FAAGAAgAAAAhAEmuaZ1HAQAATgYAABwAAAAAAAAAAAAAAAAAQxUAAHdvcmQvX3JlbHMvZG9jdW1l bnQueG1sLnJlbHNQSwECLQAUAAYACAAAACEADi5ftnUCAABmCgAAEgAAAAAAAAAAAAAAAADMFwAA d29yZC9mb290bm90ZXMueG1sUEsBAi0AFAAGAAgAAAAhAGglVG90AgAAYAoAABEAAAAAAAAAAAAA AAAAcRoAAHdvcmQvZW5kbm90ZXMueG1sUEsBAi0AFAAGAAgAAAAhADFmVXb4AgAA0QwAABAAAAAA AAAAAAAAAAAAFB0AAHdvcmQvaGVhZGVyMS54bWxQSwECLQAUAAYACAAAACEAVKArcPcCAADRDAAA EAAAAAAAAAAAAAAAAAA6IAAAd29yZC9oZWFkZXIyLnhtbFBLAQItABQABgAIAAAAIQAHt0CqJAYA AI8aAAAVAAAAAAAAAAAAAAAAAF8jAAB3b3JkL3RoZW1lL3RoZW1lMS54bWxQSwECLQAUAAYACAAA ACEAcsY8em0kAABQvAAAEQAAAAAAAAAAAAAAAAC2KQAAd29yZC9zZXR0aW5ncy54bWxQSwECLQAU AAYACAAAACEA2A6BQfoAAACBAQAAHAAAAAAAAAAAAAAAAABSTgAAd29yZC9fcmVscy9zZXR0aW5n cy54bWwucmVsc1BLAQItABQABgAIAAAAIQB6qHJ0xQAAADIBAAATAAAAAAAAAAAAAAAAAIZPAABj dXN0b21YbWwvaXRlbTEueG1sUEsBAi0AFAAGAAgAAAAhADXImiHhAAAAVQEAABgAAAAAAAAAAAAA AAAApFAAAGN1c3RvbVhtbC9pdGVtUHJvcHMxLnhtbFBLAQItABQABgAIAAAAIQAF7z88axMAAKQ1 AQASAAAAAAAAAAAAAAAAAONRAAB3b3JkL251bWJlcmluZy54bWxQSwECLQAUAAYACAAAACEAL/R2 yuw3AAAaUgIADwAAAAAAAAAAAAAAAAB+ZQAAd29yZC9zdHlsZXMueG1sUEsBAi0AFAAGAAgAAAAh ADw6fUDSAQAA6ggAABQAAAAAAAAAAAAAAAAAl50AAHdvcmQvd2ViU2V0dGluZ3MueG1sUEsBAi0A FAAGAAgAAAAhAAvoFO2FAwAAQhYAABIAAAAAAAAAAAAAAAAAm58AAHdvcmQvZm9udFRhYmxlLnht bFBLAQItABQABgAIAAAAIQBVfw8hbgIAAI4EAAARAAAAAAAAAAAAAAAAAFCjAABkb2NQcm9wcy9j b3JlLnhtbFBLAQItABQABgAIAAAAIQCX5BmdgwIAAEYFAAAQAAAAAAAAAAAAAAAAAPWmAABkb2NQ cm9wcy9hcHAueG1sUEsBAi0AFAAGAAgAAAAhAHQ/OXrCAAAAKAEAAB4AAAAAAAAAAAAAAAAArqoA AGN1c3RvbVhtbC9fcmVscy9pdGVtMS54bWwucmVsc1BLBQYAAAAAFAAUABkFAAC0rAAAAAA= ------=_NextPart_000_0001_01D62773.4710E460-- From nobody Mon May 11 09:35:23 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3F883A0A6A for ; Mon, 11 May 2020 09:35:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WRYfwBBRQtC7 for ; Mon, 11 May 2020 09:35:08 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06EEB3A0A51 for ; Mon, 11 May 2020 09:35:03 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id A403D300B43 for ; Mon, 11 May 2020 12:34:58 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 3dchtRWuWwxj for ; Mon, 11 May 2020 12:34:56 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 6CAB53004AF; Mon, 11 May 2020 12:34:56 -0400 (EDT) From: Russ Housley Message-Id: <97737DBD-54DB-4336-A387-E22C59E78B11@vigilsec.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_FE1B4487-24D4-45A2-8B3B-58997D4B7392" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Date: Mon, 11 May 2020 12:34:56 -0400 In-Reply-To: <000001d62762$8385a360$8a90ea20$@x500.eu> Cc: LAMPS To: Erik Andersen References: <000001d62762$8385a360$8a90ea20$@x500.eu> X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] Problems with the current ALGORITHM information object class X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 May 2020 16:35:22 -0000 --Apple-Mail=_FE1B4487-24D4-45A2-8B3B-58997D4B7392 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 If both parameter types are present, then interoperability will be = gravely impacted. Russ > On May 11, 2020, at 3:05 AM, Erik Andersen wrote: >=20 > In our work with IEC 62351-4 and X.510 we have identified a limitation = with the current ALGORITHM information object class. The current = definition is=20 > =20 > ALGORITHM ::=3D CLASS { > &Type OPTIONAL, > &id OBJECT IDENTIFIER UNIQUE } > WITH SYNTAX { > [PARMS &Type] > IDENTIFIED BY &id } > =20 > The PARM field is used for defining parameters associated with the = algorithms. However, the parameters are of two types: > =20 > 1. Parameters that provide additional information about the = procedure to be applied according to the algorithm. An example is = ecPublicKey, where the parameter value is the elliptic curve to be used.=20= > 2. Parameters that specified the syntax of the value to be used = when the algorithm is deployed. An example is the AES algorithms that = require a value of the parameter transferred together with the encrypted = data. > =20 > This causes problems when negotiating the use of algorithms. When = specifying ecPublicKey algorithms in such negotiation, the parameter = value is relevant. When specifying AES-CBC in such a negotiation, the = random value of some InitializationVector is not relevant. This make = algorithm negotiation cumbersome. > =20 > We have therefore suggested to extend the ALGORITHM information object = class in the following way. > =20 > ALGORITHM ::=3D CLASS { > &Type OPTIONAL, > &DynParms OPTIONAL, > &id OBJECT IDENTIFIER UNIQUE } > WITH SYNTAX { > [PARMS &Type] > [DYN-PARMS &DynParms] > IDENTIFIED BY &id } > =20 > A suggested update to the ALGORITHM information object class is = attached. It also includes three derivative parameterized data types. By = using those data types it has been possible to define the wrapper = protocol without =E2=80=9Chard coding=E2=80=9D specific algorithm = details, e.g., we have avoided a specific component for an = initialization vector. This has allowed different cryptographic = algorithms to be used for different communication instances make life a = little more difficult for adversaries. =20 > =20 > Certain algorithms have to be redefined, which could cause some = negative reactions. As an example the aes256-CBC algorithm must be = changed from > =20 > aes256-CBC ALGORITHM ::=3D {=20 > PARMS AES-InitializationVector > IDENTIFIED BY { aes 42 } } > =20 > To=20 > =20 > aes256-CBC ALGORITHM ::=3D {=20 > DYN-PARMS AES-InitializationVector > IDENTIFIED BY { } } > =20 > However, most algorithms do not need to be modified. > =20 > The current version of X.510 may be found at = https://www.dropbox.com/s/i7mizfvoy9uo21x/x510.docx?dl=3D0 = . > =20 > Any comments? > =20 > Best regards, > =20 > Erik > =20 > =20 > =20 > =20 > =20 > =20 > _______________________________________________ > Spasm mailing list > Spasm@ietf.org > https://www.ietf.org/mailman/listinfo/spasm = --Apple-Mail=_FE1B4487-24D4-45A2-8B3B-58997D4B7392 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 If = both parameter types are present, then interoperability will be gravely = impacted.

Russ


On May = 11, 2020, at 3:05 AM, Erik Andersen <era@x500.eu> wrote:

In our work with IEC 62351-4 and X.510 we have = identified a limitation with the current ALGORITHM information object = class. The current definition is 
 
ALGORITHM ::=3D CLASS {
  = &Type         OPTIONAL,
  = &id           = OBJECT IDENTIFIER UNIQUE }
WITH SYNTAX {
  = [PARMS        &Type]
  IDENTIFIED BY = &id }
 
The PARM field is used for defining parameters associated = with the algorithms. However, the parameters are of two types:
 
1.       Parameters that provide = additional information about the procedure to be applied according to = the algorithm. An example is ecPublicKey, where the parameter value is = the elliptic curve to be used. 
2.       Parameters that specified = the syntax of the value to be used when the algorithm is deployed. An = example is the AES algorithms that require a value of the parameter = transferred together with the encrypted data.
 
This causes problems when negotiating the use of algorithms. = When specifying  ecPublicKey algorithms in such negotiation, the = parameter value is relevant. When specifying AES-CBC in such a = negotiation, the random value of some InitializationVector is not = relevant. This make algorithm negotiation cumbersome.
 
We have therefore suggested to extend the ALGORITHM = information object class in the following way.
 
ALGORITHM = ::=3D CLASS {
  = &Type         OPTIONAL,
  &DynParms     OPTIONAL,
  = &id           = OBJECT IDENTIFIER UNIQUE }
WITH SYNTAX {
  = [PARMS        &Type]
  [DYN-PARMS    &DynParms]
  IDENTIFIED BY = &id }
 
A suggested update to the = ALGORITHM information object class is attached. It also includes three = derivative parameterized data types. By using those data types it has = been possible to define the wrapper protocol without =E2=80=9Chard = coding=E2=80=9D specific algorithm details, e.g., we have avoided a = specific component for an initialization vector. This has allowed = different cryptographic algorithms to be used for different = communication instances make life a little more difficult for = adversaries.  
 
Certain algorithms have to be = redefined, which could cause some negative reactions. As an example the = aes256-CBC algorithm must be changed from
 
aes256-CBC ALGORITHM ::=3D { 
  PARMS       &nbs= p; AES-InitializationVector
  = IDENTIFIED BY { aes 42 } }
 
To 
 
aes256-CBC ALGORITHM ::=3D { 
  DYN-PARMS       = AES-InitializationVector
  = IDENTIFIED BY { <some OID> } }
 
However, = most algorithms do not need to be modified.
 
The = current version of X.510 may be found at https://www.dropbox.com/s/i7mizfvoy9uo21x/x510.docx?dl=3D0.=
 
Any comments?
 
Best = regards,
 
Erik
 
 
 
 
 
 
<algor= ithms.docx>_______________________________________________
Spasm mailing list
Spasm@ietf.org
https://www.ietf.org/mailman/listinfo/spasm

= --Apple-Mail=_FE1B4487-24D4-45A2-8B3B-58997D4B7392-- From nobody Tue May 12 05:57:15 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE9AC3A0899 for ; Tue, 12 May 2020 05:57:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.696 X-Spam-Level: X-Spam-Status: No, score=-1.696 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=x500.eu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5iDrG3GYtQ8m for ; Tue, 12 May 2020 05:57:10 -0700 (PDT) Received: from outscan1.mf.dandomain.dk (outscan1.mf.dandomain.dk [212.237.249.58]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADE8D3A08C4 for ; Tue, 12 May 2020 05:57:09 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by outscan1.mf.dandomain.dk (Postfix) with ESMTP id 3724D4068ABC for ; Tue, 12 May 2020 14:57:06 +0200 (CEST) Received: from outscan1.mf.dandomain.dk ([127.0.0.1]) by localhost (outscan1.mf.dandomain.dk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kInOvkyc-E4e for ; Tue, 12 May 2020 14:57:04 +0200 (CEST) Received: from mail-proxy.dandomain.dk (dilvs03.dandomain.net [194.150.112.64]) by outscan1.mf.dandomain.dk (Postfix) with ESMTPA id B4BC84068AAA for ; Tue, 12 May 2020 14:57:04 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=x500.eu; s=dandomain; t=1589288224; bh=eDxglXav4zWnYUrOpOfVtuWyIfr4sZAUZSpsaAo1vLg=; h=From:To:References:In-Reply-To:Subject:Date:From; b=ncyIzwTwXiQNomC+ivZUv4eYpvSnMDwjUuhiyewRuwM5uW+Pxw3NiArDu/DeABJCs LYA+R1gTpbUcZl/Qpoty0zVTYi973alhNnDG9NIOpZPrF0RWY1WeLz9zU/pC7F5K2l weMG8NOh3+US5hABk0tAG26eFdJ89v1DRGJzu3fDA6q6zAAJJsB8QlLY9ZqWNeZp2E 5bPSyfxOokBzlsm4xlzqmrcSym4ahg1jUZ0sTW2ohLBkj/4BE+49sF6MqefAauBzZa NMYWfyM/RSHazxfE1GjdSBXPOAPrKI7OLRbyhis2rPkpmH62LTEgdnST5dnUvjCs1v RxgVdnRmebiBA== From: "Erik Andersen" To: "LAMPS" References: <000001d62762$8385a360$8a90ea20$@x500.eu> <97737DBD-54DB-4336-A387-E22C59E78B11@vigilsec.com> In-Reply-To: <97737DBD-54DB-4336-A387-E22C59E78B11@vigilsec.com> Date: Tue, 12 May 2020 14:57:04 +0200 Message-ID: <001f01d6285c$d614adb0$823e0910$@x500.eu> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0020_01D6286D.999FC7A0" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQGsSWEsGbi5WzyRcw86Ep3rBlnkMwIwrpU6qOaVcgA= Content-Language: en-gb Archived-At: Subject: Re: [lamps] Problems with the current ALGORITHM information object class X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 May 2020 12:57:13 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0020_01D6286D.999FC7A0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi Russ, =20 The problem was identified when a vendor was implementing IEC 62351-4, = where we were faced with the question: When negotiating e.g., symmetric = key algorithm, should we just specify the OID or should we also include = the parameters. The answer is that sometimes you should only use the OID = and in other cases you will also need to include the parameters. In some = other cases, like aes256-GCM, you shall include part of the parameter. = What do you then tell the implementor?=20 =20 aes256-GCM is an example with a mixture of parameters.: =20 aes256-GCM ALGORITHM ::=3D { PARMS GCMParameters IDENTIFIED BY id-aes256-GCM } =20 =20 GCMParameters ::=3D SEQUENCE { aes-nonce OCTET STRING, -- recommended size is 12 octets aes-ICVlen AES-GCM-ICVlen DEFAULT 12 } =20 AES-GCM-ICVlen ::=3D INTEGER (12 | 13 | 14 | 15 | 16) =20 An alternative algorithm should be defined as: =20 newAes256-GCM ALGORITHM ::=3D { PARMS AES-GCM-ICVlen DEFAULT 12, DYN-PARMS OCTET STRING IDENTIFIED BY } =20 Sure, there could be an interworking problem, but it can be handled. = Implementations of a standard specifying the original algorithm will = still interwork. Implementations of a standard specifying the modified = algorithm will also interwork. =20 For the sake of IEC 62351-4 and X.510, we need a solution. We can either = do it unilateral or we can find a common solution, like who defines the = alternative algorithms and allocate new OIDs.. =20 Erik From: Spasm On Behalf Of Russ Housley Sent: 11 May 2020 18:35 To: Erik Andersen Cc: LAMPS Subject: Re: [lamps] Problems with the current ALGORITHM information = object class =20 If both parameter types are present, then interoperability will be = gravely impacted. =20 Russ =20 On May 11, 2020, at 3:05 AM, Erik Andersen > wrote: =20 In our work with IEC 62351-4 and X.510 we have identified a limitation = with the current ALGORITHM information object class. The current = definition is=20 =20 ALGORITHM ::=3D CLASS { &Type OPTIONAL, &id OBJECT IDENTIFIER UNIQUE } WITH SYNTAX { [PARMS &Type] IDENTIFIED BY &id } =20 The PARM field is used for defining parameters associated with the = algorithms. However, the parameters are of two types: =20 1. Parameters that provide additional information about the = procedure to be applied according to the algorithm. An example is = ecPublicKey, where the parameter value is the elliptic curve to be used. = 2. Parameters that specified the syntax of the value to be used = when the algorithm is deployed. An example is the AES algorithms that = require a value of the parameter transferred together with the encrypted = data. =20 This causes problems when negotiating the use of algorithms. When = specifying ecPublicKey algorithms in such negotiation, the parameter = value is relevant. When specifying AES-CBC in such a negotiation, the = random value of some InitializationVector is not relevant. This make = algorithm negotiation cumbersome. =20 We have therefore suggested to extend the ALGORITHM information object = class in the following way. =20 ALGORITHM ::=3D CLASS { &Type OPTIONAL, &DynParms OPTIONAL, &id OBJECT IDENTIFIER UNIQUE } WITH SYNTAX { [PARMS &Type] [DYN-PARMS &DynParms] IDENTIFIED BY &id } =20 A suggested update to the ALGORITHM information object class is = attached. It also includes three derivative parameterized data types. By = using those data types it has been possible to define the wrapper = protocol without =E2=80=9Chard coding=E2=80=9D specific algorithm = details, e.g., we have avoided a specific component for an = initialization vector. This has allowed different cryptographic = algorithms to be used for different communication instances make life a = little more difficult for adversaries. =20 =20 Certain algorithms have to be redefined, which could cause some negative = reactions. As an example the aes256-CBC algorithm must be changed from =20 aes256-CBC ALGORITHM ::=3D {=20 PARMS AES-InitializationVector IDENTIFIED BY { aes 42 } } =20 To=20 =20 aes256-CBC ALGORITHM ::=3D {=20 DYN-PARMS AES-InitializationVector IDENTIFIED BY { } } =20 However, most algorithms do not need to be modified. =20 The current version of X.510 may be found at = = https://www.dropbox.com/s/i7mizfvoy9uo21x/x510.docx?dl=3D0. =20 Any comments? =20 Best regards, =20 Erik =20 =20 =20 =20 =20 =20 _______________________________________________ Spasm mailing list Spasm@ietf.org = https://www.ietf.org/mailman/listinfo/spasm =20 ------=_NextPart_000_0020_01D6286D.999FC7A0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Hi Russ,

 

The problem was identified when a = vendor was implementing IEC 62351-4, where we were faced with the = question: When negotiating e.g., symmetric key algorithm, should we just = specify the OID or should we also include the parameters. The answer is = that sometimes you should only use the OID and in other cases you will = also need to include the parameters. In some other cases, like = aes256-GCM, you shall include part of the parameter. =C2=A0What do you = then tell the implementor?

 

aes256-GCM is an example with a mixture of = parameters.:

 

aes256-GCM ALGORITHM ::=3D = {

=C2=A0 = PARMS=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = GCMParameters

=C2=A0 IDENTIFIED BY id-aes256-GCM = }

 

 

GCMParameters ::=3D = SEQUENCE {

=C2=A0 aes-nonce=C2=A0=C2=A0 OCTET STRING, -- recommended = size is 12 octets

=C2=A0 aes-ICVlen=C2=A0 = AES-GCM-ICVlen DEFAULT 12 }

 

AES-GCM-ICVlen ::=3D INTEGER (12 | 13 | 14 | 15 | = 16)

 

An alternative = algorithm should be defined as:

 

newAes256-GCM ALGORITHM ::=3D = {

=C2=A0 = PARMS=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 AES-GCM-ICVlen DEFAULT 12,

=C2=A0 DYN-PARMS=C2=A0 = =C2=A0=C2=A0=C2=A0OCTET STRING

=C2=A0 IDENTIFIED BY <some other = OID> }

 

Sure, there could be = an interworking problem, but it can be handled. Implementations of a = standard specifying the original algorithm will still interwork. = Implementations of a standard specifying the modified algorithm will = also interwork.

 

For the sake of IEC = 62351-4 and X.510, we need a solution. We can either do it unilateral or = we can find a common solution, like who defines the alternative = algorithms and allocate new OIDs..

 

Erik

From: Spasm = <spasm-bounces@ietf.org> On Behalf Of Russ = Housley
Sent: 11 May 2020 18:35
To: Erik Andersen = <era@x500.eu>
Cc: LAMPS = <spasm@ietf.org>
Subject: Re: [lamps] Problems with the = current ALGORITHM information object = class

 

If both = parameter types are present, then interoperability will be gravely = impacted.

 

Russ

 



On May 11, 2020, at 3:05 AM, Erik Andersen <era@x500.eu> = wrote:

 

In our work with IEC 62351-4 and = X.510 we have identified a limitation with the current ALGORITHM = information object class. The current definition is 

 

ALGORITHM ::=3D = CLASS {

  = &Type         = OPTIONAL,

  = &id           = OBJECT IDENTIFIER UNIQUE }

WITH = SYNTAX {

  = [PARMS        = &Type]

  = IDENTIFIED BY &id }

 

The PARM field is used for defining parameters associated = with the algorithms. However, the parameters are of two = types:

 

1.       Parameters that provide additional information about the = procedure to be applied according to the algorithm. An example is = ecPublicKey, where the parameter value is the elliptic curve to be = used. 

2.       Parameters that specified the syntax of the value to be = used when the algorithm is deployed. An example is the AES algorithms = that require a value of the parameter transferred together with the = encrypted data.

 

This causes problems when negotiating the use of = algorithms. When specifying  ecPublicKey algorithms in such = negotiation, the parameter value is relevant. When specifying AES-CBC in = such a negotiation, the random value of some InitializationVector is not = relevant. This make algorithm negotiation cumbersome.

 

We have therefore suggested to extend the ALGORITHM = information object class in the following way.

 

ALGORITHM ::=3D CLASS {

  = &Type         = OPTIONAL,

  &DynParms     = OPTIONAL,

  = &id           = OBJECT IDENTIFIER UNIQUE }

WITH = SYNTAX {

  = [PARMS        = &Type]

  [DYN-PARMS    = &DynParms]

  = IDENTIFIED BY &id }

 

A suggested update to the ALGORITHM information object = class is attached. It also includes three derivative parameterized data = types. By using those data types it has been possible to define the = wrapper protocol without =E2=80=9Chard coding=E2=80=9D specific = algorithm details, e.g., we have avoided a specific component for an = initialization vector. This has allowed different cryptographic = algorithms to be used for different communication instances make life a = little more difficult for adversaries. =  

 

Certain algorithms have to be = redefined, which could cause some negative reactions. As an example the = aes256-CBC algorithm must be changed = from

 

aes256-CBC ALGORITHM ::=3D { 

  PARMS       &= nbsp; AES-InitializationVector

  IDENTIFIED BY { aes 42 } = }

 

To 

 

aes256-CBC ALGORITHM ::=3D { 

  DYN-PARMS       = AES-InitializationVector

  IDENTIFIED BY { <some = OID> } }

 

However, most algorithms do not = need to be modified.

 

The current version of X.510 may be = found at https://www.dropbox.com/s/i7mizfvoy9uo21x/x510.do= cx?dl=3D0.

 

Any = comments?

 

Best = regards,

 

Erik

 

 

 

 

 

 

<algorithms.docx>____________= ___________________________________
Spasm mailing list
Spasm@ietf.org
<= a href=3D"https://www.ietf.org/mailman/listinfo/spasm">https://www.ietf.org/mailman/listinfo/spasm

 

------=_NextPart_000_0020_01D6286D.999FC7A0-- From nobody Tue May 12 07:19:04 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01BB93A0AC1 for ; Tue, 12 May 2020 07:19:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9p3jGLxxfiH4 for ; Tue, 12 May 2020 07:18:59 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FD913A0AB9 for ; Tue, 12 May 2020 07:18:52 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id AED5F300B3C for ; Tue, 12 May 2020 10:18:49 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id Ls6LD30pRIuY for ; Tue, 12 May 2020 10:18:47 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id EC861300A91; Tue, 12 May 2020 10:18:46 -0400 (EDT) From: Russ Housley Message-Id: <15833649-2B4C-49ED-9ACD-6F9AF9B41FFD@vigilsec.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_01B89F3D-5E2A-44D6-98ED-01FC6F31B4CF" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Date: Tue, 12 May 2020 10:18:48 -0400 In-Reply-To: <001f01d6285c$d614adb0$823e0910$@x500.eu> Cc: LAMPS To: Erik Andersen References: <000001d62762$8385a360$8a90ea20$@x500.eu> <97737DBD-54DB-4336-A387-E22C59E78B11@vigilsec.com> <001f01d6285c$d614adb0$823e0910$@x500.eu> X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] Problems with the current ALGORITHM information object class X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 May 2020 14:19:02 -0000 --Apple-Mail=_01B89F3D-5E2A-44D6-98ED-01FC6F31B4CF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 If I was going to make a change that was not backward compatible, that = is not the one that I would pick. In my view, a better answer would be: aes256-GCM-icv12 ALGORITHM ::=3D { PARMS GCMNonce IDENTIFIED BY aes256-GCM-icv12 } aes256-GCM-icv13 ALGORITHM ::=3D { PARMS GCMNonce IDENTIFIED BY aes256-GCM-icv13 } aes256-GCM-icv14 ALGORITHM ::=3D { PARMS GCMNonce IDENTIFIED BY aes256-GCM-icv14 } aes256-GCM-icv15 ALGORITHM ::=3D { PARMS GCMNonce IDENTIFIED BY aes256-GCM-icv15 } aes256-GCM-icv16 ALGORITHM ::=3D { PARMS GCMNonce IDENTIFIED BY aes256-GCM-icv16 } GCMNonce ::=3D OCTET STRING -- recommended size is 12 octets However, I do not advocate a change that breaks backward compatibiliy. Russ > On May 12, 2020, at 8:57 AM, Erik Andersen wrote: >=20 > Hi Russ, > =20 > The problem was identified when a vendor was implementing IEC 62351-4, = where we were faced with the question: When negotiating e.g., symmetric = key algorithm, should we just specify the OID or should we also include = the parameters. The answer is that sometimes you should only use the OID = and in other cases you will also need to include the parameters. In some = other cases, like aes256-GCM, you shall include part of the parameter. = What do you then tell the implementor?=20 > =20 > aes256-GCM is an example with a mixture of parameters.: > =20 > aes256-GCM ALGORITHM ::=3D { > PARMS GCMParameters > IDENTIFIED BY id-aes256-GCM } >=20 > =20 > =20 > GCMParameters ::=3D SEQUENCE { > aes-nonce OCTET STRING, -- recommended size is 12 octets > aes-ICVlen AES-GCM-ICVlen DEFAULT 12 } > =20 > AES-GCM-ICVlen ::=3D INTEGER (12 | 13 | 14 | 15 | 16) >=20 > =20 >=20 > An alternative algorithm should be defined as: >=20 > =20 >=20 > newAes256-GCM ALGORITHM ::=3D { > PARMS AES-GCM-ICVlen DEFAULT 12, > DYN-PARMS OCTET STRING >=20 > IDENTIFIED BY } >=20 > =20 >=20 > Sure, there could be an interworking problem, but it can be handled. = Implementations of a standard specifying the original algorithm will = still interwork. Implementations of a standard specifying the modified = algorithm will also interwork. >=20 > =20 >=20 > For the sake of IEC 62351-4 and X.510, we need a solution. We can = either do it unilateral or we can find a common solution, like who = defines the alternative algorithms and allocate new OIDs.. >=20 > =20 >=20 > Erik >=20 > From: Spasm > = On Behalf Of Russ Housley > Sent: 11 May 2020 18:35 > To: Erik Andersen > > Cc: LAMPS > > Subject: Re: [lamps] Problems with the current ALGORITHM information = object class > =20 > If both parameter types are present, then interoperability will be = gravely impacted. > =20 > Russ > =20 >=20 >=20 >> On May 11, 2020, at 3:05 AM, Erik Andersen > wrote: >> =20 >> In our work with IEC 62351-4 and X.510 we have identified a = limitation with the current ALGORITHM information object class. The = current definition is=20 >> =20 >> ALGORITHM ::=3D CLASS { >> &Type OPTIONAL, >> &id OBJECT IDENTIFIER UNIQUE } >> WITH SYNTAX { >> [PARMS &Type] >> IDENTIFIED BY &id } >> =20 >> The PARM field is used for defining parameters associated with the = algorithms. However, the parameters are of two types: >> =20 >> 1. Parameters that provide additional information about the = procedure to be applied according to the algorithm. An example is = ecPublicKey, where the parameter value is the elliptic curve to be used.=20= >> 2. Parameters that specified the syntax of the value to be used = when the algorithm is deployed. An example is the AES algorithms that = require a value of the parameter transferred together with the encrypted = data. >> =20 >> This causes problems when negotiating the use of algorithms. When = specifying ecPublicKey algorithms in such negotiation, the parameter = value is relevant. When specifying AES-CBC in such a negotiation, the = random value of some InitializationVector is not relevant. This make = algorithm negotiation cumbersome. >> =20 >> We have therefore suggested to extend the ALGORITHM information = object class in the following way. >> =20 >> ALGORITHM ::=3D CLASS { >> &Type OPTIONAL, >> &DynParms OPTIONAL, >> &id OBJECT IDENTIFIER UNIQUE } >> WITH SYNTAX { >> [PARMS &Type] >> [DYN-PARMS &DynParms] >> IDENTIFIED BY &id } >> =20 >> A suggested update to the ALGORITHM information object class is = attached. It also includes three derivative parameterized data types. By = using those data types it has been possible to define the wrapper = protocol without =E2=80=9Chard coding=E2=80=9D specific algorithm = details, e.g., we have avoided a specific component for an = initialization vector. This has allowed different cryptographic = algorithms to be used for different communication instances make life a = little more difficult for adversaries. =20 >> =20 >> Certain algorithms have to be redefined, which could cause some = negative reactions. As an example the aes256-CBC algorithm must be = changed from >> =20 >> aes256-CBC ALGORITHM ::=3D {=20 >> PARMS AES-InitializationVector >> IDENTIFIED BY { aes 42 } } >> =20 >> To=20 >> =20 >> aes256-CBC ALGORITHM ::=3D {=20 >> DYN-PARMS AES-InitializationVector >> IDENTIFIED BY { } } >> =20 >> However, most algorithms do not need to be modified. >> =20 >> The current version of X.510 may be found at = https://www.dropbox.com/s/i7mizfvoy9uo21x/x510.docx?dl=3D0 = . >> =20 >> Any comments? >> =20 >> Best regards, >> =20 >> Erik >> =20 >> =20 >> =20 >> =20 >> =20 >> =20 >> _______________________________________________ >> Spasm mailing list >> Spasm@ietf.org >> https://www.ietf.org/mailman/listinfo/spasm = > =20 > _______________________________________________ > Spasm mailing list > Spasm@ietf.org > https://www.ietf.org/mailman/listinfo/spasm = --Apple-Mail=_01B89F3D-5E2A-44D6-98ED-01FC6F31B4CF Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
If I was going to make a change that was not backward = compatible, that is not the one that I would pick.  In my view, a = better answer would be:

aes256-GCM-icv12 ALGORITHM ::=3D = {
  PARMS         = GCMNonce
  IDENTIFIED BY aes256-GCM-icv12 = }

aes256-GCM-icv13 = ALGORITHM ::=3D {
  PARMS         = GCMNonce
  IDENTIFIED BY aes256-GCM-icv13 }

aes256-GCM-icv14 ALGORITHM ::=3D = {
  PARMS         = GCMNonce
  IDENTIFIED BY aes256-GCM-icv14 }

aes256-GCM-icv15 ALGORITHM ::=3D = {
  PARMS         = GCMNonce
  IDENTIFIED BY aes256-GCM-icv15 }

aes256-GCM-icv16 ALGORITHM ::=3D = {
  PARMS         = GCMNonce
  IDENTIFIED BY aes256-GCM-icv16 }

GCMNonce ::=3D OCTET STRING  -- recommended = size is 12 octets

However, I do not advocate = a change that breaks  backward compatibiliy.

Russ


On May = 12, 2020, at 8:57 AM, Erik Andersen <era@x500.eu> wrote:

Hi Russ,
 
The problem was identified = when a vendor was implementing IEC 62351-4, where we were faced with the = question: When negotiating e.g., symmetric key algorithm, should we just = specify the OID or should we also include the parameters. The answer is = that sometimes you should only use the OID and in other cases you will = also need to include the parameters. In some other cases, like = aes256-GCM, you shall include part of the parameter.  What do you = then tell the implementor? 
 
aes256-GCM is an example with a = mixture of parameters.:
 
aes256-GCM ALGORITHM ::=3D {
  PARMS         = GCMParameters

  IDENTIFIED BY = id-aes256-GCM }

 
 
GCMParameters ::=3D SEQUENCE {
  aes-nonce   OCTET STRING, -- recommended = size is 12 octets
  aes-ICVlen  AES-GCM-ICVlen DEFAULT = 12 }
 

AES-GCM-ICVlen ::=3D = INTEGER (12 | 13 | 14 | 15 | 16)

 

An alternative algorithm should be defined as:

 

newAes256-GCM ALGORITHM ::=3D {
  = PARMS         AES-GCM-ICVlen DEFAULT 12,

  = DYN-PARMS     OCTET STRING

  IDENTIFIED BY <some = other OID> }

 

Sure, there could be an interworking problem, but it can be = handled. Implementations of a standard specifying the original algorithm = will still interwork. Implementations of a standard specifying the = modified algorithm will also interwork.

 

For the sake of IEC 62351-4 and X.510, we need a = solution. We can either do it unilateral or we can find a common = solution, like who defines the alternative algorithms and allocate new = OIDs..

 

Erik

From: Spasm <spasm-bounces@ietf.org> On Behalf = Of Russ Housley
Sent: 11 May 2020 18:35
To: Erik Andersen <era@x500.eu>
Cc: LAMPS= <spasm@ietf.org>
Subject: Re: [lamps] Problems with = the current ALGORITHM information object class
 
If both parameter types are present, then interoperability = will be gravely impacted.
 
Russ
 


On May 11, 2020, at 3:05 AM, Erik = Andersen <era@x500.eu> wrote:
 
In our = work with IEC 62351-4 and X.510 we have identified a limitation with the = current ALGORITHM information object class. The current definition = is 
 
ALGORITHM ::=3D CLASS = {
  = &Type         = OPTIONAL,
  = &id           = OBJECT IDENTIFIER UNIQUE }
WITH SYNTAX {
  = [PARMS        &Type]
  IDENTIFIED BY &id }
 
The PARM field is used for defining parameters associated = with the algorithms. However, the parameters are of two types:
 
1.       Parameters that provide additional information about the = procedure to be applied according to the algorithm. An example is = ecPublicKey, where the parameter value is the elliptic curve to be = used. 
2.       Parameters that specified the syntax of the value to be used = when the algorithm is deployed. An example is the AES algorithms that = require a value of the parameter transferred together with the encrypted = data.
 
This = causes problems when negotiating the use of algorithms. When = specifying  ecPublicKey algorithms in such negotiation, the = parameter value is relevant. When specifying AES-CBC in such a = negotiation, the random value of some InitializationVector is not = relevant. This make algorithm negotiation cumbersome.
 
We have = therefore suggested to extend the ALGORITHM information object class in = the following way.
 
ALGORITHM ::=3D CLASS {
  = &Type         = OPTIONAL,
  &DynParms     = OPTIONAL,
  = &id           = OBJECT IDENTIFIER UNIQUE }
WITH SYNTAX {
  = [PARMS        &Type]
  [DYN-PARMS    = &DynParms]
  IDENTIFIED BY &id }
 
A suggested update to the ALGORITHM information object class = is attached. It also includes three derivative parameterized data types. = By using those data types it has been possible to define the wrapper = protocol without =E2=80=9Chard coding=E2=80=9D specific algorithm = details, e.g., we have avoided a specific component for an = initialization vector. This has allowed different cryptographic = algorithms to be used for different communication instances make life a = little more difficult for adversaries.  
 
Certain algorithms have to be = redefined, which could cause some negative reactions. As an example the = aes256-CBC algorithm must be changed from
 
aes256-CBC ALGORITHM ::=3D = { 
  PARMS       &nbs= p; AES-InitializationVector
  IDENTIFIED BY { aes 42 } }
 
To 
 
aes256-CBC ALGORITHM ::=3D = { 
  DYN-PARMS       = AES-InitializationVector
  IDENTIFIED BY { <some OID> } }
 
However, most algorithms do = not need to be modified.
 
The current version of X.510 may be found at https://www.dropbox.com/s/i7mizfvoy9uo21x/x510.docx?dl=3D0.
 
Any comments?
 
Best regards,
 
Erik
 
 
 
 
 
 
<algorithms.docx>_______________________________________________
Spasm mailing list
Spasm@ietf.org
https://www.ietf.org/mailman/listinfo/spasm
 
_______________________________________________
Spasm mailing list
Spasm@ietf.org
https://www.ietf.org/mailman/listinfo/spasm

= --Apple-Mail=_01B89F3D-5E2A-44D6-98ED-01FC6F31B4CF-- From nobody Tue May 12 07:57:37 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 097393A0BD5 for ; Tue, 12 May 2020 07:57:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.26 X-Spam-Level: X-Spam-Status: No, score=-2.26 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.173, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TnqTVGVzmqs5 for ; Tue, 12 May 2020 07:57:29 -0700 (PDT) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 17C8E3A0CF6 for ; Tue, 12 May 2020 07:57:16 -0700 (PDT) Received: from pps.filterd (m0050102.ppops.net [127.0.0.1]) by m0050102.ppops.net-00190b01. (8.16.0.42/8.16.0.42) with SMTP id 04CEuDiB020635; Tue, 12 May 2020 15:57:16 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=6YXdmAoWX1FVt3Erwz0gsMCjeO9B2GF7KN1GRGQWtxY=; b=ZlmefbIlPHfvx3UE8ZPsv+xASpHMAWm5HlEET1yf0bAa2dW/DnhFzwB5jOpZu8ZLhP2H ztnu8bnOyH5BT/TJiaR9FT5/NwI425DCPNTzhUaKPm5Kl1u90pRG20hYB6zryEEUqoY1 mUKQrEumyZ+72L9wKlVfaZNlEldSTbWSaWiA23dP6V+IsZ/o/L0c+SlI6aZlwR9BE+Yr y6na951dJRqkMFdjSoHi6DL88HSXSE19TX0/tJhEyzcui/nOo0FrThJk6mVue5s6i5/p tR9jTjsLlITRQkSrCBQ/EL08g1mD/5BuUx28IiDj+949BJGaiGIh2RdSmYy+WgMBiV52 Eg== Received: from prod-mail-ppoint7 (a72-247-45-33.deploy.static.akamaitechnologies.com [72.247.45.33] (may be forged)) by m0050102.ppops.net-00190b01. with ESMTP id 30whkjq7xx-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 12 May 2020 15:57:15 +0100 Received: from pps.filterd (prod-mail-ppoint7.akamai.com [127.0.0.1]) by prod-mail-ppoint7.akamai.com (8.16.0.27/8.16.0.27) with SMTP id 04CElCiR014648; Tue, 12 May 2020 10:57:14 -0400 Received: from email.msg.corp.akamai.com ([172.27.165.116]) by prod-mail-ppoint7.akamai.com with ESMTP id 30ywdu088u-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 12 May 2020 10:57:09 -0400 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com (172.27.165.121) by ustx2ex-dag1mb3.msg.corp.akamai.com (172.27.165.121) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 12 May 2020 09:56:30 -0500 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com ([172.27.165.121]) by ustx2ex-dag1mb3.msg.corp.akamai.com ([172.27.165.121]) with mapi id 15.00.1497.006; Tue, 12 May 2020 09:56:30 -0500 From: "Salz, Rich" To: Russ Housley , Erik Andersen CC: LAMPS Thread-Topic: [lamps] Problems with the current ALGORITHM information object class Thread-Index: AdYmysgWP4xsKPedQly3iSGlHws7SQBETt4AACquuQAAAtrBAP//x3mA Date: Tue, 12 May 2020 14:56:29 +0000 Message-ID: References: <000001d62762$8385a360$8a90ea20$@x500.eu> <97737DBD-54DB-4336-A387-E22C59E78B11@vigilsec.com> <001f01d6285c$d614adb0$823e0910$@x500.eu> <15833649-2B4C-49ED-9ACD-6F9AF9B41FFD@vigilsec.com> In-Reply-To: <15833649-2B4C-49ED-9ACD-6F9AF9B41FFD@vigilsec.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.37.20051002 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.36.167] Content-Type: multipart/alternative; boundary="_000_B9ABCF64ABE3423D8CE22BE79A6D1DF8akamaicom_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-12_04:2020-05-11, 2020-05-12 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2002250000 definitions=main-2005120112 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-12_04:2020-05-11, 2020-05-12 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 lowpriorityscore=0 clxscore=1015 bulkscore=0 impostorscore=0 mlxlogscore=999 spamscore=0 phishscore=0 malwarescore=0 priorityscore=1501 suspectscore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2003020000 definitions=main-2005120113 Archived-At: Subject: Re: [lamps] Problems with the current ALGORITHM information object class X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 May 2020 14:57:35 -0000 --_000_B9ABCF64ABE3423D8CE22BE79A6D1DF8akamaicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCiAgKiAgIEhvd2V2ZXIsIEkgZG8gbm90IGFkdm9jYXRlIGEgY2hhbmdlIHRoYXQgYnJlYWtz ICBiYWNrd2FyZCBjb21wYXRpYmlsaXkuDQoNCiAgKiAgIFN1cmUsIHRoZXJlIGNvdWxkIGJlIGFu IGludGVyd29ya2luZyBwcm9ibGVtLCBidXQgaXQgY2FuIGJlIGhhbmRsZWQuIEltcGxlbWVudGF0 aW9ucyBvZiBhIHN0YW5kYXJkIHNwZWNpZnlpbmcgdGhlIG9yaWdpbmFsIGFsZ29yaXRobSB3aWxs IHN0aWxsIGludGVyd29yay4gSW1wbGVtZW50YXRpb25zIG9mIGEgc3RhbmRhcmQgc3BlY2lmeWlu ZyB0aGUgbW9kaWZpZWQgYWxnb3JpdGhtIHdpbGwgYWxzbyBpbnRlcndvcmsuDQoNCg0KU28gYWxn b3JpdGhtcyB0aGF0IHdhbnQgdG8gdXNlIHRoZSBuZXcgY29uc3RydWN0cywgKmV2ZW4gaWYgdGhl eSBhcmUgdGhlIHNhbWUgc3VjaCBhcyBBRVMgMTI4IEdDTSogd2lsbCB1c2UgYSBuZXcgT0lEPyAg SWYgc28sIHRoYXTigJlzIG9rYXkgd2l0aCBtZS4NCg== --_000_B9ABCF64ABE3423D8CE22BE79A6D1DF8akamaicom_ Content-Type: text/html; charset="utf-8" Content-ID: <36D84C56B9C2044BBEB5025739085348@akamai.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29M aXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6 MzQ7DQoJbWFyZ2luLXRvcDowaW47DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9t OjBpbjsNCgltYXJnaW4tbGVmdDouNWluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250 LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnAuY29k ZWJvbGQsIGxpLmNvZGVib2xkLCBkaXYuY29kZWJvbGQNCgl7bXNvLXN0eWxlLW5hbWU6Y29kZWJv bGQ7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5 bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJ e21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2Ug V29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAx LjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8q IExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjE0NzAxMjQxMjU7 DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjE3NDY1MzYx MzIgLTIwOTExMjIxMjggNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2 OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1s ZXZlbC1zdGFydC1hdDowOw0KCW1zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvg5g7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpX aW5nZGluZ3M7DQoJbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7DQoJ bXNvLWJpZGktZm9udC1mYW1pbHk6Q2FsaWJyaTt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxl dmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30N CkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6 U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2 ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpv Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9 DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5 OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90 dG9tOjBpbjt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9 ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNz PSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxl dmVsMSBsZm8xIj5Ib3dldmVyLCBJIGRvIG5vdCBhZHZvY2F0ZSBhIGNoYW5nZSB0aGF0IGJyZWFr cyZuYnNwOyZuYnNwO2JhY2t3YXJkIGNvbXBhdGliaWxpeS48bzpwPjwvbzpwPjwvbGk+PC91bD4N CjwvZGl2Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdp bi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHR5cGU9 ImRpc2MiPg0KPGxpIGNsYXNzPSJjb2RlYm9sZCIgc3R5bGU9Im1hcmdpbi10b3A6MGluO21hcmdp bi1ib3R0b206MTAuMHB0O21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjxzcGFuIGxhbmc9IkVO LUdCIj5TdXJlLCB0aGVyZSBjb3VsZCBiZSBhbiBpbnRlcndvcmtpbmcgcHJvYmxlbSwgYnV0IGl0 IGNhbiBiZSBoYW5kbGVkLiBJbXBsZW1lbnRhdGlvbnMgb2YgYSBzdGFuZGFyZCBzcGVjaWZ5aW5n IHRoZSBvcmlnaW5hbCBhbGdvcml0aG0gd2lsbCBzdGlsbCBpbnRlcndvcmsuIEltcGxlbWVudGF0 aW9ucyBvZiBhIHN0YW5kYXJkIHNwZWNpZnlpbmcgdGhlIG1vZGlmaWVkIGFsZ29yaXRobSB3aWxs IGFsc28gaW50ZXJ3b3JrLjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2xldHRlci1zcGFjaW5nOi0uMXB0Ij48 bzpwPjwvbzpwPjwvc3Bhbj48L2I+PC9saT48L3VsPg0KPHAgY2xhc3M9ImNvZGVib2xkIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6LjVpbjttYXJnaW4tYm90dG9t OjEwLjBwdDttYXJnaW4tbGVmdDowaW4iPg0KPHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5TbyBhbGdvcml0aG1zIHRoYXQgd2FudCB0byB1c2UgdGhlIG5ldyBjb25z dHJ1Y3RzLCAqPGI+ZXZlbiBpZiB0aGV5IGFyZSB0aGUgc2FtZSBzdWNoIGFzIEFFUyAxMjggR0NN PC9iPiogd2lsbCB1c2UgYSBuZXcgT0lEPyZuYnNwOyBJZiBzbywgdGhhdOKAmXMgb2theSB3aXRo IG1lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_B9ABCF64ABE3423D8CE22BE79A6D1DF8akamaicom_-- From nobody Tue May 12 08:00:18 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FDC63A0BFE for ; Tue, 12 May 2020 08:00:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kbN2gTqovC5P for ; Tue, 12 May 2020 08:00:15 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A62A33A0C03 for ; Tue, 12 May 2020 08:00:15 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 0C47D300B39 for ; Tue, 12 May 2020 11:00:13 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id qnu24PpWiv-R for ; Tue, 12 May 2020 11:00:11 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 1E1F3300A91; Tue, 12 May 2020 11:00:11 -0400 (EDT) From: Russ Housley Message-Id: <697D575A-B0BA-4BA5-B5F6-10ACF3E6C6B4@vigilsec.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_79903C38-CFD5-43B5-86A3-E7A56B56E72F" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Date: Tue, 12 May 2020 11:00:12 -0400 In-Reply-To: Cc: Erik Andersen , LAMPS To: Rich Salz References: <000001d62762$8385a360$8a90ea20$@x500.eu> <97737DBD-54DB-4336-A387-E22C59E78B11@vigilsec.com> <001f01d6285c$d614adb0$823e0910$@x500.eu> <15833649-2B4C-49ED-9ACD-6F9AF9B41FFD@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] Problems with the current ALGORITHM information object class X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 May 2020 15:00:17 -0000 --Apple-Mail=_79903C38-CFD5-43B5-86A3-E7A56B56E72F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On May 12, 2020, at 10:56 AM, Salz, Rich wrote: >=20 > =20 > However, I do not advocate a change that breaks backward = compatibiliy. >> Sure, there could be an interworking problem, but it can be handled. = Implementations of a standard specifying the original algorithm will = still interwork. Implementations of a standard specifying the modified = algorithm will also interwork. >> =20 >>=20 >=20 > So algorithms that want to use the new constructs, *even if they are = the same such as AES 128 GCM* will use a new OID? If so, that=E2=80=99s = okay with me. New OIDs would be needed in my suggestions, otherwise there would be = confusion about the parameter structure. Russ --Apple-Mail=_79903C38-CFD5-43B5-86A3-E7A56B56E72F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On May 12, 2020, at 10:56 AM, Salz, Rich <rsalz@akamai.com> = wrote:

 
  • However, I = do not advocate a change that breaks  backward = compatibiliy.
  • Sure, = there could be an interworking problem, but it can be handled. = Implementations of a standard specifying the original algorithm will = still interwork. Implementations of a standard specifying the modified = algorithm will also interwork.

 

So algorithms that want to use the new = constructs, *even if they are the same such as AES 128 = GCM* will use a new OID?  If so, that=E2=80=99s okay with = me.

New OIDs = would be needed in my suggestions, otherwise there would be confusion = about the parameter structure.

Russ


= --Apple-Mail=_79903C38-CFD5-43B5-86A3-E7A56B56E72F-- From nobody Tue May 12 08:59:01 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F6BA3A0B95 for ; Tue, 12 May 2020 08:58:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.696 X-Spam-Level: X-Spam-Status: No, score=-1.696 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=x500.eu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uEtXPXveewKT for ; Tue, 12 May 2020 08:58:57 -0700 (PDT) Received: from outscan1.mf.dandomain.dk (outscan1.mf.dandomain.dk [212.237.249.58]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C63053A0C19 for ; Tue, 12 May 2020 08:58:54 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by outscan1.mf.dandomain.dk (Postfix) with ESMTP id 2092F4068AB9; Tue, 12 May 2020 17:58:53 +0200 (CEST) Received: from outscan1.mf.dandomain.dk ([127.0.0.1]) by localhost (outscan1.mf.dandomain.dk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J4lGTsPuQjCH; Tue, 12 May 2020 17:58:51 +0200 (CEST) Received: from mail-proxy.dandomain.dk (dilvs03.dandomain.net [194.150.112.64]) by outscan1.mf.dandomain.dk (Postfix) with ESMTPA id 8267E4068AAC; Tue, 12 May 2020 17:58:49 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=x500.eu; s=dandomain; t=1589299131; bh=ATRLkyaMO2hpGu+142+Grmife5pk5U4RVFUHqWCCXUg=; h=From:To:Cc:References:In-Reply-To:Subject:Date:From; b=msUYkEJI7IkeHrS+cQivfFb3CUYVMrX4aTe+6MJUqkhSymEKmK9Abis0a31w1KJSL VUIJtnT8fCihiuy/VgRNCR7r+3gaVdmvaHr5+CQ9D5xB83pDeGcS9PtYsC/omt7V/g /bmqbbTcRwmskaumH9NQbSvH33051G1sVIq0dRkOA9QIbV8YPxx9LVwt1RYBYmiLB+ y2OKDh4AMi3swZiqmuDkAk6UC5OfhFP8hJ415iFvda1sWVnAKfPRGzRqGeaOuNMAVC 07CF7typ/1DeSEEhJEd8lbFnAKdIP5MDPXneQP86tcCU2RDwwvS1tU7pSNccHh8xq/ 1eD7lgL2P9J3A== From: "Erik Andersen" To: "'Russ Housley'" , "'Rich Salz'" Cc: "'LAMPS'" References: <000001d62762$8385a360$8a90ea20$@x500.eu> <97737DBD-54DB-4336-A387-E22C59E78B11@vigilsec.com> <001f01d6285c$d614adb0$823e0910$@x500.eu> <15833649-2B4C-49ED-9ACD-6F9AF9B41FFD@vigilsec.com> <697D575A-B0BA-4BA5-B5F6-10ACF3E6C6B4@vigilsec.com> In-Reply-To: <697D575A-B0BA-4BA5-B5F6-10ACF3E6C6B4@vigilsec.com> Date: Tue, 12 May 2020 17:58:48 +0200 Message-ID: <002301d62876$3b1f5750$b15e05f0$@x500.eu> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0024_01D62886.FEAA7140" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQGsSWEsGbi5WzyRcw86Ep3rBlnkMwIwrpU6Ai4BHRYB4xM3wQG2KIYmAjRDVbKopvOS4A== Content-Language: en-gb Archived-At: Subject: Re: [lamps] Problems with the current ALGORITHM information object class X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 May 2020 15:59:00 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0024_01D62886.FEAA7140 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Thanks for your replies. We have OID structure that potentially could be = used: { joint-iso-itu-t ds(5) algo(42) }. This gives rather short OIDs, = although a couple of more levels will be needed for organizing the OIDs = in a structured way.=20 =20 Erik =20 From: Russ Housley =20 Sent: 12 May 2020 17:00 To: Rich Salz Cc: Erik Andersen ; LAMPS Subject: Re: [lamps] Problems with the current ALGORITHM information = object class =20 =20 On May 12, 2020, at 10:56 AM, Salz, Rich > wrote: =20 =20 * However, I do not advocate a change that breaks backward = compatibiliy. * Sure, there could be an interworking problem, but it can be handled. = Implementations of a standard specifying the original algorithm will = still interwork. Implementations of a standard specifying the modified = algorithm will also interwork. =20 So algorithms that want to use the new constructs, *even if they are the = same such as AES 128 GCM* will use a new OID? If so, that=E2=80=99s = okay with me. =20 New OIDs would be needed in my suggestions, otherwise there would be = confusion about the parameter structure. =20 Russ =20 =20 ------=_NextPart_000_0024_01D62886.FEAA7140 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Thanks for your = replies. We have OID structure that potentially could be used: { = joint-iso-itu-t ds(5) algo(42) }. This gives rather short OIDs, although = a couple of more levels will be needed for organizing the OIDs in a = structured way.

 

Erik

 

From: Russ Housley = <housley@vigilsec.com>
Sent: 12 May 2020 = 17:00
To: Rich Salz <rsalz@akamai.com>
Cc: = Erik Andersen <era@x500.eu>; LAMPS = <spasm@ietf.org>
Subject: Re: [lamps] Problems with the = current ALGORITHM information object = class

 

 



On May 12, 2020, at 10:56 AM, Salz, Rich <rsalz@akamai.com> = wrote:

 

 

  • However, I do not advocate a change that = breaks  backward = compatibiliy.
  • Sure, there could be an interworking problem, = but it can be handled. Implementations of a standard specifying the = original algorithm will still interwork. Implementations of a standard = specifying the modified algorithm will also = interwork.

 

So algorithms that want to use the new constructs, = *even if they are the same such as AES 128 GCM* will use a new = OID?  If so, that=E2=80=99s okay with = me.

 

New OIDs would be needed in my suggestions, otherwise = there would be confusion about the parameter = structure.

 

Russ

 

 

------=_NextPart_000_0024_01D62886.FEAA7140-- From nobody Tue May 12 09:22:44 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E4F33A00C1 for ; Tue, 12 May 2020 09:22:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.271 X-Spam-Level: X-Spam-Status: No, score=-2.271 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.173, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GsdTEhtOq8Sj for ; Tue, 12 May 2020 09:22:41 -0700 (PDT) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF4EA3A00C0 for ; Tue, 12 May 2020 09:22:41 -0700 (PDT) Received: from pps.filterd (m0050095.ppops.net [127.0.0.1]) by m0050095.ppops.net-00190b01. (8.16.0.42/8.16.0.42) with SMTP id 04CGM27a032616; Tue, 12 May 2020 17:22:40 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=j9WTJsaXp8V8ZIQGgpgTHddPqTo0giTSP0hfAkCLA54=; b=IwBNP8vW6wYIjrKscub6eFWXKfNeuMYtkkQnj0kqvt2j3R3e27F2VkkTy7HAWTK/LcsY AtobKl87+y1ODwwF/+WUgRnGl0/AcRyuiMLIYDUwlPlxdz8CD7EuZ63g/+MzLpFN86VN 2YsAvDqFAdQWqAFvZ90ndzkCIOcdAMm4wQYgQfnQAhHlIvn6fOXMZMLxbJ2JQ07hUV9q bXAptgFePlikNT5z3rWVyFOH8yO82ULjq6P9A1dbznPlneAO9aosISqETpN2pH/9pbuh 5SMv6aScNwYdlT2a1PG+fZV4cDWrlD4XydbtwukELjM0a3eKWBVfGSr+JQAGa3MqX8W5 Eg== Received: from prod-mail-ppoint5 (prod-mail-ppoint5.akamai.com [184.51.33.60] (may be forged)) by m0050095.ppops.net-00190b01. with ESMTP id 30y2dfu4ts-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 12 May 2020 17:22:40 +0100 Received: from pps.filterd (prod-mail-ppoint5.akamai.com [127.0.0.1]) by prod-mail-ppoint5.akamai.com (8.16.0.27/8.16.0.27) with SMTP id 04CGI9Kx001752; Tue, 12 May 2020 09:22:38 -0700 Received: from email.msg.corp.akamai.com ([172.27.165.117]) by prod-mail-ppoint5.akamai.com with ESMTP id 30wtg8ha2g-9 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 12 May 2020 09:22:36 -0700 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com (172.27.165.121) by ustx2ex-dag1mb2.msg.corp.akamai.com (172.27.165.120) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 12 May 2020 11:20:30 -0500 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com ([172.27.165.121]) by ustx2ex-dag1mb3.msg.corp.akamai.com ([172.27.165.121]) with mapi id 15.00.1497.006; Tue, 12 May 2020 11:20:29 -0500 From: "Salz, Rich" To: Erik Andersen , 'Russ Housley' CC: 'LAMPS' Thread-Topic: [lamps] Problems with the current ALGORITHM information object class Thread-Index: AdYmysgWP4xsKPedQly3iSGlHws7SQBETt4AACquuQAAAtrBAP//x3mAgABEGACAABBfAP//wwAA Date: Tue, 12 May 2020 16:20:29 +0000 Message-ID: <63E46AF5-CA96-4406-9C42-129944383641@akamai.com> References: <000001d62762$8385a360$8a90ea20$@x500.eu> <97737DBD-54DB-4336-A387-E22C59E78B11@vigilsec.com> <001f01d6285c$d614adb0$823e0910$@x500.eu> <15833649-2B4C-49ED-9ACD-6F9AF9B41FFD@vigilsec.com> <697D575A-B0BA-4BA5-B5F6-10ACF3E6C6B4@vigilsec.com> <002301d62876$3b1f5750$b15e05f0$@x500.eu> In-Reply-To: <002301d62876$3b1f5750$b15e05f0$@x500.eu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.37.20051002 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.36.167] Content-Type: multipart/alternative; boundary="_000_63E46AF5CA9644069C42129944383641akamaicom_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-12_05:2020-05-11, 2020-05-12 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=893 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2002250000 definitions=main-2005120124 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-12_05:2020-05-11, 2020-05-12 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 impostorscore=0 mlxscore=0 lowpriorityscore=0 clxscore=1015 spamscore=0 adultscore=0 malwarescore=0 priorityscore=1501 bulkscore=0 phishscore=0 mlxlogscore=879 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2003020000 definitions=main-2005120124 Archived-At: Subject: Re: [lamps] Problems with the current ALGORITHM information object class X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 May 2020 16:22:43 -0000 --_000_63E46AF5CA9644069C42129944383641akamaicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SnVzdCB0byBtYWtlIGl0IGNsZWFyIHNpbmNlIEnigJltIG5vdCBzdXJlIEkgdW5kZXJzdG9vZCB5 b3VyIGxhc3Qgbm90ZTogIHlvdSB3aWxsIG5vdCByZS11c2UgT0lE4oCZcyBhbHJlYWR5IGRlZmlu ZWQgdGhhdCB1c2UgdGhlIG9sZGVyIHN5bnRheCwgYnV0IHdpbGwgZGVmaW5lIG5ldyBPSUTigJlz IGZvciBhbGdvcml0aG1zIHRoYXQgd2FudCB0byB1c2UgdGhlIG5ldyBwYXJhbWV0ZXIgY2xhcmlm aWNhdGlvbnMsIGV2ZW4gaWYgdGhlIG1lY2hhbmlzbSBpcyB0aGUgc2FtZT8NCg== --_000_63E46AF5CA9644069C42129944383641akamaicom_ Content-Type: text/html; charset="utf-8" Content-ID: <9DCFB344C2A51C4DB0D5D050071D5CB8@akamai.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNv bmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndp bmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7 DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAx MS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlv bjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3Qg bDANCgl7bXNvLWxpc3QtaWQ6MTkxNDU2NzE4Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMTAz MzMzNzIyNjt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1z by1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGww OmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZTox MC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZl bC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1p bHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpi dWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyLjBpbjsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0K CW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0 IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6 ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1m YW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozLjVp bjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBs aXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDo0LjBpbjsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQt c2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsOQ0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1z by1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjIzNjQ3OTcwODsNCglt c28tbGlzdC10ZW1wbGF0ZS1pZHM6MTI3MzE0MDg2NDt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1m YW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxLjBp bjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBs aXN0IGwxOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQt c2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNA0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1z by1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoy LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwxOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZv bnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNw0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0K CW1zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDo0LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwxOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNp LWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwyDQoJe21z by1saXN0LWlkOjYwOTQzMDU4NTsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTE1NzA2MzUzMjA7 fQ0KQGxpc3QgbDI6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1m b250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDIN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsMjpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5z aS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZl bDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0 Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDYNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28t YW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjps ZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMjpsZXZlbDkNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5 OlN5bWJvbDt9DQpAbGlzdCBsMw0KCXttc28tbGlzdC1pZDo5OTI2Nzc5Nzk7DQoJbXNvLWxpc3Qt dGVtcGxhdGUtaWRzOjE3NjExMDMzMjY7fQ0KQGxpc3QgbDM6bGV2ZWwxDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsMzpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28t YW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMzps ZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMzpsZXZlbDQNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5 OlN5bWJvbDt9DQpAbGlzdCBsMzpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglt c28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBs MzpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMzpsZXZlbDcNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFt aWx5OlN5bWJvbDt9DQpAbGlzdCBsMzpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlz dCBsMzpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNp emU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBp bjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJv ZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkp1c3QgdG8gbWFrZSBpdCBjbGVh ciBzaW5jZSBJ4oCZbSBub3Qgc3VyZSBJIHVuZGVyc3Rvb2QgeW91ciBsYXN0IG5vdGU6Jm5ic3A7 IHlvdSB3aWxsIG5vdCByZS11c2UgT0lE4oCZcyBhbHJlYWR5IGRlZmluZWQgdGhhdCB1c2UgdGhl IG9sZGVyIHN5bnRheCwgYnV0IHdpbGwgZGVmaW5lIG5ldyBPSUTigJlzIGZvciBhbGdvcml0aG1z IHRoYXQgd2FudCB0byB1c2UgdGhlIG5ldyBwYXJhbWV0ZXIgY2xhcmlmaWNhdGlvbnMsIGV2ZW4N CiBpZiB0aGUgbWVjaGFuaXNtIGlzIHRoZSBzYW1lPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2JvZHk+DQo8L2h0bWw+DQo= --_000_63E46AF5CA9644069C42129944383641akamaicom_-- From nobody Tue May 12 09:25:52 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 711233A00E0 for ; Tue, 12 May 2020 09:25:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.696 X-Spam-Level: X-Spam-Status: No, score=-1.696 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=x500.eu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5W5Br3MelRJM for ; Tue, 12 May 2020 09:25:49 -0700 (PDT) Received: from outscan1.mf.dandomain.dk (outscan1.mf.dandomain.dk [212.237.249.58]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2008B3A00D8 for ; Tue, 12 May 2020 09:25:48 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by outscan1.mf.dandomain.dk (Postfix) with ESMTP id 5EE414068C3A; Tue, 12 May 2020 18:25:47 +0200 (CEST) Received: from outscan1.mf.dandomain.dk ([127.0.0.1]) by localhost (outscan1.mf.dandomain.dk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id To6szkAP1oAZ; Tue, 12 May 2020 18:25:46 +0200 (CEST) Received: from mail-proxy.dandomain.dk (dilvs03.dandomain.net [194.150.112.64]) by outscan1.mf.dandomain.dk (Postfix) with ESMTPA id 4C6684068AA9; Tue, 12 May 2020 18:25:44 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=x500.eu; s=dandomain; t=1589300746; bh=SmkF/B7I7ZK6uqlAUQxNoopqWpcqysrtpQ7VgTU3UIM=; h=From:To:Cc:References:In-Reply-To:Subject:Date:From; b=lP2+nlmoI6XWI2tP8bsRCN6VL503bzMxPbBTzDzGSlEl0oDdbxY0uDOXDXWYSS00M DnRamNks6Zc6s82adFHYE2vSoWQFkeHmksnAGr2qh3ZEIuIJPgKu5Khvv+3OPgimzX 3RmbVYLaUs7MGKdzjQVYSPlpFs9LPp/IMkrxXKrbuaC5Ia2116ox9biea7To5eQoor n5G0Ikpcc7mIuXRsGKkpVZYYCfG8Rgl6JtRiNR5XWvYMGCMZl+UviSLTF7Ak/Fw0zi k5uqxFp1Ws7vyEVmwFBHp+ttVXuwEsoVdr0No5fdpGdynkpCVcjolSmoQitYy2U0xb sGNflfy7mtKGg== From: "Erik Andersen" To: "'Salz, Rich'" , "'Russ Housley'" Cc: "'LAMPS'" References: <000001d62762$8385a360$8a90ea20$@x500.eu> <97737DBD-54DB-4336-A387-E22C59E78B11@vigilsec.com> <001f01d6285c$d614adb0$823e0910$@x500.eu> <15833649-2B4C-49ED-9ACD-6F9AF9B41FFD@vigilsec.com> <697D575A-B0BA-4BA5-B5F6-10ACF3E6C6B4@vigilsec.com> <002301d62876$3b1f5750$b15e05f0$@x500.eu> <63E46AF5-CA96-4406-9C42-129944383641@akamai.com> In-Reply-To: <63E46AF5-CA96-4406-9C42-129944383641@akamai.com> Date: Tue, 12 May 2020 18:25:43 +0200 Message-ID: <003a01d62879$fd9ae8f0$f8d0bad0$@x500.eu> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_003B_01D6288A.C1242E20" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQGsSWEsGbi5WzyRcw86Ep3rBlnkMwIwrpU6Ai4BHRYB4xM3wQG2KIYmAjRDVbICBSPYSAGOl1uYqIphsyA= Content-Language: en-gb Archived-At: Subject: Re: [lamps] Problems with the current ALGORITHM information object class X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 May 2020 16:25:52 -0000 This is a multipart message in MIME format. ------=_NextPart_000_003B_01D6288A.C1242E20 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Right, to avoid interworking problems =20 Erik =20 From: Spasm On Behalf Of Salz, Rich Sent: 12 May 2020 18:20 To: Erik Andersen ; 'Russ Housley' Cc: 'LAMPS' Subject: Re: [lamps] Problems with the current ALGORITHM information = object class =20 Just to make it clear since I=E2=80=99m not sure I understood your last = note: you will not re-use OID=E2=80=99s already defined that use the = older syntax, but will define new OID=E2=80=99s for algorithms that want = to use the new parameter clarifications, even if the mechanism is the = same? ------=_NextPart_000_003B_01D6288A.C1242E20 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Right, to avoid = interworking problems

 

Erik

 

From: Spasm = <spasm-bounces@ietf.org> On Behalf Of Salz, = Rich
Sent: 12 May 2020 18:20
To: Erik Andersen = <era@x500.eu>; 'Russ Housley' = <housley@vigilsec.com>
Cc: 'LAMPS' = <spasm@ietf.org>
Subject: Re: [lamps] Problems with the = current ALGORITHM information object = class

 

Just to make it clear since I=E2=80=99m not sure I = understood your last note:  you will not re-use OID=E2=80=99s = already defined that use the older syntax, but will define new = OID=E2=80=99s for algorithms that want to use the new parameter = clarifications, even if the mechanism is the = same?

------=_NextPart_000_003B_01D6288A.C1242E20-- From nobody Wed May 13 07:38:57 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D5943A0B99 for ; Wed, 13 May 2020 07:38:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CG6vf05jeJ4k for ; Wed, 13 May 2020 07:38:53 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77B813A0B2E for ; Wed, 13 May 2020 07:38:53 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id D11C1300B1A for ; Wed, 13 May 2020 10:38:50 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id a3WVirCmqyrv for ; Wed, 13 May 2020 10:38:49 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id B5785300A01 for ; Wed, 13 May 2020 10:38:49 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Message-Id: Date: Wed, 13 May 2020 10:38:51 -0400 To: LAMPS X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: [lamps] shepherd writeup: draft-ietf-lamps-rfc7030est-clarify X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2020 14:38:55 -0000 h= ttps://datatracker.ietf.org/doc/draft-ietf-lamps-rfc7030est-clarify/shephe= rdwriteup/ Please review and comment. Russ From nobody Wed May 13 08:54:45 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D9433A0A19 for ; Wed, 13 May 2020 08:54:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.272 X-Spam-Level: X-Spam-Status: No, score=-2.272 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.173, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NjGv34l_vARA for ; Wed, 13 May 2020 08:54:41 -0700 (PDT) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F2CD3A0E5C for ; Wed, 13 May 2020 08:54:39 -0700 (PDT) Received: from pps.filterd (m0050093.ppops.net [127.0.0.1]) by m0050093.ppops.net-00190b01. (8.16.0.42/8.16.0.42) with SMTP id 04DFsM9B022680; Wed, 13 May 2020 16:54:39 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=BqbZAi3uhPT193p+mwZ3bvtI52DofoTWPPKBt0rV7/c=; b=X5ntYf7jAir1zjqJc3b+coJfzlskJuhiRZIwoEgJz/lDfhTxOG7UG/3722N89OJZ879+ WPbdPiXKs4eUBLqF/HTN611ihqrcISzJc+YJmT6tV7NYelS5wzugIwcNudRz3KsUInb5 xnCEl2cv8W/9C9G03g18hbkt+kqQOhHcp4f2mkHgWSjwQvDG92k+m68ono3VHpkJbKRI pvPsK5zhufqMjDFGfywv0urOK+6zpM7rScqPfeqoy4qUyyGh7d1OXyOHub3Wn60QvM2P oKNiMfdDnN5/WvIgJd9Wm/HO/juFpGXQBZv6Tw210SQFdzVTzIjYiAZmM/ODQjHpxBCu Zw== Received: from prod-mail-ppoint4 (a72-247-45-32.deploy.static.akamaitechnologies.com [72.247.45.32] (may be forged)) by m0050093.ppops.net-00190b01. with ESMTP id 3100wt2xbc-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 13 May 2020 16:54:39 +0100 Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.16.0.27/8.16.0.27) with SMTP id 04DFWeX7003697; Wed, 13 May 2020 11:54:37 -0400 Received: from email.msg.corp.akamai.com ([172.27.165.115]) by prod-mail-ppoint4.akamai.com with ESMTP id 31016c6hre-8 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 13 May 2020 11:54:36 -0400 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com (172.27.165.121) by ustx2ex-dag1mb3.msg.corp.akamai.com (172.27.165.121) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 13 May 2020 10:53:56 -0500 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com ([172.27.165.121]) by ustx2ex-dag1mb3.msg.corp.akamai.com ([172.27.165.121]) with mapi id 15.00.1497.006; Wed, 13 May 2020 10:53:56 -0500 From: "Salz, Rich" To: Russ Housley , LAMPS Thread-Topic: [lamps] shepherd writeup: draft-ietf-lamps-rfc7030est-clarify Thread-Index: AQHWKTRAIA+KjsSXykezAHuZUjeMpaimO8MA Date: Wed, 13 May 2020 15:53:55 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.37.20051002 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.41.37] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-13_07:2020-05-13, 2020-05-13 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=943 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2004280000 definitions=main-2005130138 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-13_07:2020-05-13, 2020-05-13 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 cotscore=-2147483648 lowpriorityscore=0 spamscore=0 malwarescore=0 mlxlogscore=935 clxscore=1015 phishscore=0 suspectscore=0 bulkscore=0 mlxscore=0 adultscore=0 priorityscore=1501 impostorscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2004280000 definitions=main-2005130139 Archived-At: Subject: Re: [lamps] shepherd writeup: draft-ietf-lamps-rfc7030est-clarify X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2020 15:54:44 -0000 V293LCB0aGF0J3Mgd2F5IG1vcmUgY29tcGxldGUgdGhhbiBteSB3cml0ZXVwcyA6KSAgTG9va3Mg Z29vZC4NCg0K77u/T24gNS8xMy8yMCwgMTA6MzkgQU0sICJSdXNzIEhvdXNsZXkiIDxob3VzbGV5 QHZpZ2lsc2VjLmNvbT4gd3JvdGU6DQoNCiAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L2RvYy9kcmFmdC1pZXRmLWxhbXBzLXJmYzcwMzBlc3QtY2xhcmlmeS9zaGVwaGVyZHdyaXRldXAv DQoNCiAgICBQbGVhc2UgcmV2aWV3IGFuZCBjb21tZW50Lg0KDQogICAgUnVzcw0KDQogICAgX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICBTcGFzbSBt YWlsaW5nIGxpc3QNCiAgICBTcGFzbUBpZXRmLm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vc3Bhc20NCg0K From nobody Wed May 13 14:15:40 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8EAF23A092E for ; Wed, 13 May 2020 14:15:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G8bTkFAeRoiB for ; Wed, 13 May 2020 14:15:37 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64BE63A092B for ; Wed, 13 May 2020 14:15:37 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id C7E05300AEB for ; Wed, 13 May 2020 17:15:34 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id haFJZbQHl7P0 for ; Wed, 13 May 2020 17:15:33 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 1BF763009FF for ; Wed, 13 May 2020 17:15:33 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Date: Wed, 13 May 2020 17:15:34 -0400 References: <31FF8CDA-9A6B-4C16-ABD0-800E06325748@vigilsec.com> To: LAMPS WG In-Reply-To: <31FF8CDA-9A6B-4C16-ABD0-800E06325748@vigilsec.com> Message-Id: <7997C1B6-AC24-42B5-86DC-ED01443C3A89@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-ocsp-nonce-01 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2020 21:15:40 -0000 I do not see any concerns raised that were not explained on list. I = will start the shepherd write-up. Russ > On Apr 27, 2020, at 10:56 AM, Russ Housley = wrote: >=20 > This is the LAMPS WG Last Call for "OCSP Nonce Extension=E2=80=9D = . Please review the document and send = your comments to the list by 12 May 2020. >=20 > The datatracker page for the document is = https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ >=20 > Thanks, > Russ & Tim From nobody Wed May 13 15:46:33 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3896D3A065A for ; Wed, 13 May 2020 15:46:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h9LJNGA72XoP for ; Wed, 13 May 2020 15:46:25 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 036253A078F for ; Wed, 13 May 2020 15:46:25 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 799FE300B3F for ; Wed, 13 May 2020 18:46:22 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id AZ8uXNE3IDhl for ; Wed, 13 May 2020 18:46:21 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 40948300A01 for ; Wed, 13 May 2020 18:46:21 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Date: Wed, 13 May 2020 18:46:22 -0400 References: <31FF8CDA-9A6B-4C16-ABD0-800E06325748@vigilsec.com> To: LAMPS WG In-Reply-To: <31FF8CDA-9A6B-4C16-ABD0-800E06325748@vigilsec.com> Message-Id: <89A15B08-A362-4240-B2E7-677343AF5AFB@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-ocsp-nonce-01 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2020 22:46:32 -0000 A few things need to be changed based on the detailed review that I did = for the shepherd writeup. 1) The upper left of the title page needed to include "Updates: 6960 (if = approved)" 2) I do not think that reference [1] is needed. I do not find it = harmful, but IDnits thinks it is a normative reference, and of course, = it is not. 3) The IANA Considerations should say: "This document does not call for = any IANA actions." Russ > On Apr 27, 2020, at 10:56 AM, Russ Housley = wrote: >=20 > This is the LAMPS WG Last Call for "OCSP Nonce Extension=E2=80=9D = . Please review the document and send = your comments to the list by 12 May 2020. >=20 > The datatracker page for the document is = https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ >=20 > Thanks, > Russ & Tim From nobody Wed May 13 16:59:30 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CEE293A0823 for ; Wed, 13 May 2020 16:59:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R1x41sz_ezaO for ; Wed, 13 May 2020 16:59:26 -0700 (PDT) Received: from mail-io1-xd29.google.com (mail-io1-xd29.google.com [IPv6:2607:f8b0:4864:20::d29]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 172CD3A0822 for ; Wed, 13 May 2020 16:59:26 -0700 (PDT) Received: by mail-io1-xd29.google.com with SMTP id x5so99607ioh.6 for ; Wed, 13 May 2020 16:59:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Q9PbZrV0M5g03uUXxBC12P6T9CaUP0fL0uw2zuWn4ko=; b=EHPiUR9v1Wy0D5y5sEKnoMB2TPmuU+Ow8N7VciTYmgfGVC+C7jQELG0zE/Aom5JoLL vgvYVsCwXMwY4CojnNEh6i9y0J2TPhIyj+CA1QE3hU1ao2mxWFHo25+QGlpFKbqw6zTU KFxGrc0IrGkywjkToxDdX31wCMJAShS5YkrwemPBpV0swgTjuxP9BTAllSFyH8A2rjyU qCY4tcvYfBjFSKuWzC9L5ttHOG4etLb+bXXDmAqZ1mEB6TJvnf9iYc24YEQ0H1cqWqmB 2DrgTzn/g4fGCfg06Gmn4KXi9znHrGcU2K8l2ei08606DICE7xpImLzUcJC9+0oVxEFc 0s8g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Q9PbZrV0M5g03uUXxBC12P6T9CaUP0fL0uw2zuWn4ko=; b=P/nA7zVXDGDyLfdvyB/aDJnFayt4m3N4V0z8tjEkPc99cA0LGuS/9N+jLh8MEQlP25 VRCEvp5pJZGLDs3Wdv2a7KeCK/lOk6K63oDw0rAGSUJHxb+IeZ/72gj7A1JBEYRM4v2p zZ88bOQMBqPmXeVPypDUcKCOU9AuJGMiyp6dGoq3MmUV1QCTmgm5kSwDQ85f1WZ54az8 6xYbyvIikGWPGdNaVdFdGWen+TviJ773aLfCsfk/o0XWrBNbMWlSIUurSfpazm4u3rNJ zW6ZpikR0Ct90hMi+1+HJmWbYBaWdd/inZ4Ub9jlUCe1iJASOlfiYUzUBaDjb4jMmhFn CYCw== X-Gm-Message-State: AOAM531qRN0iq6dr+DDiBOzAsSy6LrX6D+1JS13qPCZ8ukduHVWe9ofU aIy0JHqfDywM2nSlQS99YqO8aZ83con+kPb42FkDFw== X-Google-Smtp-Source: ABdhPJwRYxbHCLK1PiPIzuBLVPJVLUzkGi9FNZnHSCpmpb0ph6voM2GsoJa59Gp7MvqxRteWExAMY7fjI5XFs+NSiVQ= X-Received: by 2002:a6b:8f85:: with SMTP id r127mr1656983iod.209.1589414365195; Wed, 13 May 2020 16:59:25 -0700 (PDT) MIME-Version: 1.0 References: <31FF8CDA-9A6B-4C16-ABD0-800E06325748@vigilsec.com> <89A15B08-A362-4240-B2E7-677343AF5AFB@vigilsec.com> In-Reply-To: <89A15B08-A362-4240-B2E7-677343AF5AFB@vigilsec.com> From: Mohit Sahni Date: Wed, 13 May 2020 16:59:14 -0700 Message-ID: To: Russ Housley Cc: LAMPS WG Content-Type: multipart/alternative; boundary="000000000000a3768905a5905e91" Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-ocsp-nonce-01 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2020 23:59:28 -0000 --000000000000a3768905a5905e91 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks Russ I will update the draft with this information. On Wed, May 13, 2020 at 3:46 PM Russ Housley wrote: > A few things need to be changed based on the detailed review that I did > for the shepherd writeup. > > 1) The upper left of the title page needed to include "Updates: 6960 (if > approved)" > > 2) I do not think that reference [1] is needed. I do not find it harmful= , > but IDnits thinks it is a normative reference, and of course, it is not. > > 3) The IANA Considerations should say: "This document does not call for > any IANA actions." > > Russ > > > On Apr 27, 2020, at 10:56 AM, Russ Housley wrote= : > > > > This is the LAMPS WG Last Call for "OCSP Nonce Extension=E2=80=9D > . Please review the document and send yo= ur > comments to the list by 12 May 2020. > > > > The datatracker page for the document is > https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ > > > > Thanks, > > Russ & Tim > > _______________________________________________ > Spasm mailing list > Spasm@ietf.org > https://www.ietf.org/mailman/listinfo/spasm > --000000000000a3768905a5905e91 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks Russ I will update the draft with this inform= ation.=C2=A0


On Wed, May 13, 2020 at = 3:46 PM Russ Housley <housley@vi= gilsec.com> wrote:
A few th= ings need to be changed based on the detailed review that I did for the she= pherd writeup.

1) The upper left of the title page needed to include "Updates: 6960 (= if approved)"

2) I do not think that reference [1] is needed.=C2=A0 I do not find it harm= ful, but IDnits thinks it is a normative reference, and of course, it is no= t.

3) The IANA Considerations should say: "This document does not call fo= r any IANA actions."

Russ

> On Apr 27, 2020, at 10:56 AM, Russ Housley <housley@vigilsec.com> wrote:
>
> This is the LAMPS WG Last Call for "OCSP Nonce Extension=E2=80=9D= <draft-ietf-lamps-ocsp-nonce-01>.=C2=A0 Please review the document a= nd send your comments to the list by 12 May 2020.
>
> The datatracker page for the document is https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ >
> Thanks,
> Russ & Tim

_______________________________________________
Spasm mailing list
Spasm@ietf.org
https://www.ietf.org/mailman/listinfo/spasm
--000000000000a3768905a5905e91-- From nobody Wed May 13 23:40:13 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 935AD3A0BC7 for ; Wed, 13 May 2020 23:40:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wPS5xJU7r1ot for ; Wed, 13 May 2020 23:40:08 -0700 (PDT) Received: from mail.amsl.com (c8a.amsl.com [4.31.198.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3DC73A0B79 for ; Wed, 13 May 2020 23:40:08 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by c8a.amsl.com (Postfix) with ESMTP id 2236720488B; Wed, 13 May 2020 23:38:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com Received: from c8a.amsl.com ([127.0.0.1]) by localhost (c8a.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3MSXpZVUbAH3; Wed, 13 May 2020 23:38:30 -0700 (PDT) Received: from [10.0.1.18] (unknown [47.144.156.55]) by c8a.amsl.com (Postfix) with ESMTPA id 9AC6B20488A; Wed, 13 May 2020 23:38:30 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Megan Ferguson In-Reply-To: <20200424234307.GA27494@kduck.mit.edu> Date: Wed, 13 May 2020 23:40:08 -0700 Cc: RFC System , Russ Housley , "Roman D. Danyliw" , Tim Hollebeek , spasm@ietf.org Content-Transfer-Encoding: 7bit Message-Id: <8E897E88-C87C-4F02-AE96-B3D226244DB3@amsl.com> References: <20200424233725.E1502F4070B@rfc-editor.org> <20200424234307.GA27494@kduck.mit.edu> To: Benjamin Kaduk X-Mailer: Apple Mail (2.1878.6) Archived-At: Subject: Re: [lamps] [Technical Errata Reported] RFC8649 (6129) X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 May 2020 06:40:12 -0000 Greetings, FYI - this report has been deleted as requested. Thank you. RFC Editor/mf On Apr 24, 2020, at 4:43 PM, Benjamin Kaduk wrote: > RFC Editor, please delete this empty report. > > Thanks, > > Ben > > On Fri, Apr 24, 2020 at 04:37:25PM -0700, RFC Errata System wrote: >> The following errata report has been submitted for RFC8649, >> "Hash Of Root Key Certificate Extension". >> >> -------------------------------------- >> You may review the report below and at: >> https://www.rfc-editor.org/errata/eid6129 >> >> -------------------------------------- >> Type: Technical >> Reported by: Becca Sanderson X >> >> Section: RFC2119 >> >> Original Text >> ------------- >> >> >> Corrected Text >> -------------- >> >> >> Notes >> ----- >> >> >> Instructions: >> ------------- >> This erratum is currently posted as "Reported". If necessary, please >> use "Reply All" to discuss whether it should be verified or >> rejected. When a decision is reached, the verifying party >> can log in to change the status and edit the report, if necessary. >> >> -------------------------------------- >> RFC8649 (draft-ietf-lamps-hash-of-root-key-cert-extn-07) >> -------------------------------------- >> Title : Hash Of Root Key Certificate Extension >> Publication Date : August 2019 >> Author(s) : R. Housley >> Category : INFORMATIONAL >> Source : Limited Additional Mechanisms for PKIX and SMIME >> Area : Security >> Stream : IETF >> Verifying Party : IESG > From nobody Fri May 15 00:36:31 2020 Return-Path: X-Original-To: spasm@ietf.org Delivered-To: spasm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EA2C3A07E1; Fri, 15 May 2020 00:36:13 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: spasm@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.130.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: spasm@ietf.org Message-ID: <158952817345.30713.1285990486891101764@ietfa.amsl.com> Date: Fri, 15 May 2020 00:36:13 -0700 Archived-At: Subject: [lamps] I-D Action: draft-ietf-lamps-ocsp-nonce-02.txt X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 May 2020 07:36:14 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Limited Additional Mechanisms for PKIX and SMIME WG of the IETF. Title : OCSP Nonce Extension Author : Mohit Sahni Filename : draft-ietf-lamps-ocsp-nonce-02.txt Pages : 6 Date : 2020-05-15 Abstract: This document specifies the updated format of the Nonce extension in Online Certificate Status Protocol (OCSP) request and response messages. OCSP is used to check the status of a certificate and the Nonce extension is used in the OCSP request and response messages to avoid replay attacks. This document updates the RFC 6960 The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-lamps-ocsp-nonce-02 https://datatracker.ietf.org/doc/html/draft-ietf-lamps-ocsp-nonce-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-lamps-ocsp-nonce-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri May 15 00:43:13 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 936FF3A0807 for ; Fri, 15 May 2020 00:43:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gtJ0cJe8Utk6 for ; Fri, 15 May 2020 00:43:07 -0700 (PDT) Received: from mail-io1-xd31.google.com (mail-io1-xd31.google.com [IPv6:2607:f8b0:4864:20::d31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B61123A07C5 for ; Fri, 15 May 2020 00:43:07 -0700 (PDT) Received: by mail-io1-xd31.google.com with SMTP id k6so1650609iob.3 for ; Fri, 15 May 2020 00:43:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=gNd5s/cUSsF+JxJVR8LKjAj6+eUcsoAhPj+IL6Cubjc=; b=pvKM/a2KkWroYqntM/mbGgU3FaOcom6n7DbSWwc3yZYgXb+6FLc6AfVzdZKMaYxLpq MZfu1KIbJUmJ0+7XbmJVvAMEEcpCBfB9ITElngz2NG6KQGEH2ny0yPKQIpmI12FzuGtl hvqCdqUmzmCh7nl05T1ferRvdN+DniIDDgE5bOurpBq8ingHt9gG6Li5Erlp/GBpN2// 5RDt2vwTlKIyM8lh6mvtn5i7MDmbnCfW0OV+q/1xrmFsG1YIR1I8UNkD0RvR3dhvlbhj nt3O8hMGSm38LX1GLUIT6sNzpRbpblA9itzRWchDimdUVu/mIytNAOG6MNHmBJxZu61p XPlg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=gNd5s/cUSsF+JxJVR8LKjAj6+eUcsoAhPj+IL6Cubjc=; b=JRAiKz6q7Gii0gOSWb+TnUW+XLuW1squkN0e8gZK4OzHluJINZYhEgHzKYYHymKnYy QT0wx04qaEEMdfeRgRav1/nJrqZqoc1pPhVD19DD9rivXgfFSPOK75b3PVhvrs/xe8SA VLtoRU71v1za/MpFo5rat1jUM1jDRP/0Vyu/rDj8b6qBcY3wSKUciZkY7lOB+/lzEmpW bgjOgyMF3EwohB5JkKx3Xd8gz67LBP1DY9WfcQiwHbAZ8dnghgEzkMVw5A5Z9pYkMleH HNekGi37gu3lwNE6lKSpXyzbNw1iJZnCZj3TpfHYWwVmkYP2t5lQc0CtAPWXvHRyJVdS SF5A== X-Gm-Message-State: AOAM532xS5uFTml1eZvrGpPusoXQVkzxf9hDhcQeAHWs3x8YMFjGRTNS TKHf9jvO7lhJBcKF6oG/1Z0sHicAs1sVy3tkhJpi4soQ X-Google-Smtp-Source: ABdhPJx+2HTHlLWLWglbMwoEGX2yDZXg4XJGx5odKS+AmmJtdalcPnfAjbVksuOLCA/BgE3ZaL2cSMDE/9ic5honNXA= X-Received: by 2002:a5d:9604:: with SMTP id w4mr1826019iol.105.1589528586886; Fri, 15 May 2020 00:43:06 -0700 (PDT) MIME-Version: 1.0 References: <31FF8CDA-9A6B-4C16-ABD0-800E06325748@vigilsec.com> <89A15B08-A362-4240-B2E7-677343AF5AFB@vigilsec.com> In-Reply-To: From: Mohit Sahni Date: Fri, 15 May 2020 00:42:55 -0700 Message-ID: To: Russ Housley Cc: LAMPS WG Content-Type: multipart/alternative; boundary="000000000000c8223e05a5aaf6fa" Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-ocsp-nonce-01 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 May 2020 07:43:12 -0000 --000000000000c8223e05a5aaf6fa Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Russ, I have submitted the draft-ietf-lamps-ocsp-nonce-02.txt after making changes suggested by you. It can be found at https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ . Thanks Mohit On Wed, May 13, 2020 at 4:59 PM Mohit Sahni wrote: > Thanks Russ I will update the draft with this information. > > > On Wed, May 13, 2020 at 3:46 PM Russ Housley wrote= : > >> A few things need to be changed based on the detailed review that I did >> for the shepherd writeup. >> >> 1) The upper left of the title page needed to include "Updates: 6960 (if >> approved)" >> >> 2) I do not think that reference [1] is needed. I do not find it >> harmful, but IDnits thinks it is a normative reference, and of course, i= t >> is not. >> >> 3) The IANA Considerations should say: "This document does not call for >> any IANA actions." >> >> Russ >> >> > On Apr 27, 2020, at 10:56 AM, Russ Housley >> wrote: >> > >> > This is the LAMPS WG Last Call for "OCSP Nonce Extension=E2=80=9D >> . Please review the document and send y= our >> comments to the list by 12 May 2020. >> > >> > The datatracker page for the document is >> https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ >> > >> > Thanks, >> > Russ & Tim >> >> _______________________________________________ >> Spasm mailing list >> Spasm@ietf.org >> https://www.ietf.org/mailman/listinfo/spasm >> > --000000000000c8223e05a5aaf6fa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Russ,
I have submitted the draft-ietf-lamps-o= csp-nonce-02.txt after making changes suggested by you. It can be found at= =C2=A0https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/=C2= =A0.=C2=A0

Thanks
Mohit=C2=A0

<= div class=3D"gmail_quote">
On Wed, May= 13, 2020 at 4:59 PM Mohit Sahni <mohit06jan@gmail.com> wrote:
Thanks Russ I will update the = draft with this information.=C2=A0

<= div>
On= Wed, May 13, 2020 at 3:46 PM Russ Housley <housley@vigilsec.com> wrote:
=
A few things need to be c= hanged based on the detailed review that I did for the shepherd writeup.
1) The upper left of the title page needed to include "Updates: 6960 (= if approved)"

2) I do not think that reference [1] is needed.=C2=A0 I do not find it harm= ful, but IDnits thinks it is a normative reference, and of course, it is no= t.

3) The IANA Considerations should say: "This document does not call fo= r any IANA actions."

Russ

> On Apr 27, 2020, at 10:56 AM, Russ Housley <housley@vigilsec.com> wrote:
>
> This is the LAMPS WG Last Call for "OCSP Nonce Extension=E2=80=9D= <draft-ietf-lamps-ocsp-nonce-01>.=C2=A0 Please review the document a= nd send your comments to the list by 12 May 2020.
>
> The datatracker page for the document is https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ >
> Thanks,
> Russ & Tim

_______________________________________________
Spasm mailing list
Spasm@ietf.org
https://www.ietf.org/mailman/listinfo/spasm
--000000000000c8223e05a5aaf6fa-- From nobody Fri May 15 06:10:09 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 454543A09C1 for ; Fri, 15 May 2020 06:10:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uvC-bqjaERQp for ; Fri, 15 May 2020 06:10:05 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 160BF3A0976 for ; Fri, 15 May 2020 06:10:05 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 5261E300B50 for ; Fri, 15 May 2020 09:10:02 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 65IbezTMMpuX for ; Fri, 15 May 2020 09:09:57 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id DA5F6300A31; Fri, 15 May 2020 09:09:56 -0400 (EDT) From: Russ Housley Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_6D3669B6-6994-40ED-B19A-888045345B7F" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Date: Fri, 15 May 2020 09:09:59 -0400 In-Reply-To: Cc: LAMPS WG To: Mohit Sahni References: <31FF8CDA-9A6B-4C16-ABD0-800E06325748@vigilsec.com> <89A15B08-A362-4240-B2E7-677343AF5AFB@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-ocsp-nonce-01 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 May 2020 13:10:07 -0000 --Apple-Mail=_6D3669B6-6994-40ED-B19A-888045345B7F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Thanks. =20 > On May 15, 2020, at 3:42 AM, Mohit Sahni wrote: >=20 > Hi Russ, > I have submitted the draft-ietf-lamps-ocsp-nonce-02.txt after making = changes suggested by you. It can be found at = https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ = .=20 >=20 > Thanks > Mohit=20 >=20 > On Wed, May 13, 2020 at 4:59 PM Mohit Sahni > wrote: > Thanks Russ I will update the draft with this information.=20 >=20 >=20 > On Wed, May 13, 2020 at 3:46 PM Russ Housley > wrote: > A few things need to be changed based on the detailed review that I = did for the shepherd writeup. >=20 > 1) The upper left of the title page needed to include "Updates: 6960 = (if approved)" >=20 > 2) I do not think that reference [1] is needed. I do not find it = harmful, but IDnits thinks it is a normative reference, and of course, = it is not. >=20 > 3) The IANA Considerations should say: "This document does not call = for any IANA actions." >=20 > Russ >=20 > > On Apr 27, 2020, at 10:56 AM, Russ Housley > wrote: > >=20 > > This is the LAMPS WG Last Call for "OCSP Nonce Extension=E2=80=9D = . Please review the document and send = your comments to the list by 12 May 2020. > >=20 > > The datatracker page for the document is = https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ = > >=20 > > Thanks, > > Russ & Tim >=20 > _______________________________________________ > Spasm mailing list > Spasm@ietf.org > https://www.ietf.org/mailman/listinfo/spasm = --Apple-Mail=_6D3669B6-6994-40ED-B19A-888045345B7F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Thanks.  

On May 15, 2020, at 3:42 AM, = Mohit Sahni <mohit06jan@gmail.com> wrote:

Hi Russ,
I have submitted the = draft-ietf-lamps-ocsp-nonce-02.txt after making changes suggested by = you. It can be found at https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/ . 

Thanks
Mohit 

On Wed, May 13, 2020 at 4:59 PM Mohit Sahni <mohit06jan@gmail.com> wrote:
Thanks Russ I will update the draft with this = information. 


On Wed, May = 13, 2020 at 3:46 PM Russ Housley <housley@vigilsec.com> wrote:
A = few things need to be changed based on the detailed review that I did = for the shepherd writeup.

1) The upper left of the title page needed to include "Updates: 6960 (if = approved)"

2) I do not think that reference [1] is needed.  I do not find it = harmful, but IDnits thinks it is a normative reference, and of course, = it is not.

3) The IANA Considerations should say: "This document does not call for = any IANA actions."

Russ

> On Apr 27, 2020, at 10:56 AM, Russ Housley <housley@vigilsec.com> wrote:
>
> This is the LAMPS WG Last Call for "OCSP Nonce Extension=E2=80=9D = <draft-ietf-lamps-ocsp-nonce-01>.  Please review the document = and send your comments to the list by 12 May 2020.
>
> The datatracker page for the document is https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/
>
> Thanks,
> Russ & Tim

_______________________________________________
Spasm mailing list
Spasm@ietf.org
https://www.ietf.org/mailman/listinfo/spasm

= --Apple-Mail=_6D3669B6-6994-40ED-B19A-888045345B7F-- From nobody Fri May 15 12:30:18 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 867163A080B for ; Fri, 15 May 2020 12:30:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jkPhy3wckhc0 for ; Fri, 15 May 2020 12:30:15 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D503D3A0811 for ; Fri, 15 May 2020 12:30:14 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 04D75300A51 for ; Fri, 15 May 2020 15:22:47 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id FM1EhkTQPue1 for ; Fri, 15 May 2020 15:22:41 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 9771E300A31 for ; Fri, 15 May 2020 15:22:41 -0400 (EDT) From: Russ Housley Content-Type: multipart/alternative; boundary="Apple-Mail=_1C8D7C48-2075-4016-96A7-C22C4A6F2C3E" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Message-Id: <489F0DDD-FDED-4BE8-8760-E7C39AF074D8@vigilsec.com> References: <83D4CBCE-E464-4CCC-8679-592531EF7448@ietf.org> To: LAMPS WG Date: Fri, 15 May 2020 15:22:43 -0400 X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: [lamps] Fwd: IETF 108 will be an online meeting X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 May 2020 19:30:17 -0000 --Apple-Mail=_1C8D7C48-2075-4016-96A7-C22C4A6F2C3E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Just in case you do not read the IETF-Announce mail list... Russ > From: IETF Chair > > Subject: IETF 108 will be an online meeting > Date: May 14, 2020 at 4:07:47 PM CDT > To: IETF-Announce >, irtf-announce@irtf.org = , IETF > > Reply-To: IETF > >=20 > The Internet Engineering Steering Group (IESG), the IETF LLC Board of = Directors, and the Internet Research Task Force (IRTF) Chair have = decided to replace the in-person IETF 108 Madrid meeting with an online = meeting. This decision is based on the IETF Executive Director=E2=80=99s = recommendation, which was made after conducting an assessment of local = conditions using the criteria set out in the assessment framework [1] = developed with community input. >=20 > The recommendation and full assessment are available at: = https://www.ietf.org/media/documents/IETF_108_Madrid_go_no-go_assessment.p= df = >=20 > The online IETF 108 meeting will take place 27-31 July from 11:00 to = 16:00 UTC each day. The end time of 16:00 UTC is approximate; some days = may be shorter depending on scheduling. These time blocks were chosen = based on the survey feedback [2] we received. >=20 > Further details about the online meeting will be shared as they become = available. >=20 > Sincerely, > Alissa Cooper, IETF Chair > Colin Perkins, IRTF Chair > Jason Livingood, IETF LLC Board Chair >=20 > [1] = https://www.ietf.org/blog/assessment-criteria-decision-personvirtual-ietf-= 108/? = > [2] = https://www.ietf.org/media/documents/survey-planning-possible-online-meeti= ngs-responses.pdf = --Apple-Mail=_1C8D7C48-2075-4016-96A7-C22C4A6F2C3E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Just = in case you do not read the  IETF-Announce mail list...

Russ


From: IETF Chair <chair@ietf.org>
Subject: IETF 108 will be an online meeting
Date: = May 14, 2020 at 4:07:47 PM = CDT
To: = IETF-Announce <ietf-announce@ietf.org>, irtf-announce@irtf.org, IETF <ietf@ietf.org>
Reply-To: = IETF <ietf@ietf.org>

The= Internet Engineering Steering Group (IESG), the IETF LLC Board of = Directors, and the Internet Research Task Force (IRTF) Chair have = decided to replace the in-person IETF 108 Madrid meeting with an online = meeting. This decision is based on the IETF Executive Director=E2=80=99s = recommendation, which was made after conducting an assessment of local = conditions using the criteria set out in the assessment framework [1] = developed with community input.

The = recommendation and full assessment are available at: https://www.ietf.org/media/documents/IETF_108_Madrid_go_no-go_a= ssessment.pdf

The online IETF 108 = meeting will take place 27-31 July from 11:00 to 16:00 UTC each day. The = end time of 16:00 UTC is approximate; some days may be shorter depending = on scheduling. These time blocks were chosen based on the survey = feedback [2] we received.

Further details = about the online meeting will be shared as they become available.

Sincerely,
Alissa Cooper, IETF = Chair
Colin Perkins, IRTF Chair
Jason = Livingood, IETF LLC Board Chair

[1] https://www.ietf.org/blog/assessment-criteria-decision-personvi= rtual-ietf-108/?
[2] https://www.ietf.org/media/documents/survey-planning-possible-o= nline-meetings-responses.pdf

= --Apple-Mail=_1C8D7C48-2075-4016-96A7-C22C4A6F2C3E-- From nobody Sat May 16 11:21:06 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD9CD3A0061 for ; Sat, 16 May 2020 11:21:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.003 X-Spam-Level: X-Spam-Status: No, score=0.003 tagged_above=-999 required=5 tests=[SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6GxveHVis6hI for ; Sat, 16 May 2020 11:21:02 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41AEC3A005B for ; Sat, 16 May 2020 11:21:02 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id A16A3300B2B for ; Sat, 16 May 2020 14:20:59 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id JV0Ot6KHrlpj for ; Sat, 16 May 2020 14:20:58 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 423DF300A31 for ; Sat, 16 May 2020 14:20:58 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Message-Id: <79037008-09ED-4E31-BA8C-1DC4F24E1687@vigilsec.com> Date: Sat, 16 May 2020 14:20:59 -0400 To: LAMPS X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: [lamps] shepherd writeup: draft-ietf-lamps-ocsp-nonce/ X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 May 2020 18:21:05 -0000 https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/shepherdwriteup/ Please review and comment. Russ From nobody Sat May 16 11:22:37 2020 Return-Path: X-Original-To: spasm@ietf.org Delivered-To: spasm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C1D83A017E; Sat, 16 May 2020 11:22:35 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Russ Housley via Datatracker To: X-Test-IDTracker: no X-IETF-IDTracker: 6.130.0 Auto-Submitted: auto-generated Precedence: bulk Cc: Russ Housley , housley@vigilsec.com, spasm@ietf.org, iesg-secretary@ietf.org, lamps-chairs@ietf.org Message-ID: <158965335549.6143.16116245495178251965@ietfa.amsl.com> Date: Sat, 16 May 2020 11:22:35 -0700 Archived-At: Subject: [lamps] Publication has been requested for draft-ietf-lamps-rfc7030est-clarify-05 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 May 2020 18:22:35 -0000 Russ Housley has requested publication of draft-ietf-lamps-rfc7030est-clarify-05 as Proposed Standard on behalf of the LAMPS working group. Please verify the document's state at https://datatracker.ietf.org/doc/draft-ietf-lamps-rfc7030est-clarify/ From nobody Mon May 18 07:56:53 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F237F3A0789 for ; Mon, 18 May 2020 07:56:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.2 X-Spam-Level: X-Spam-Status: No, score=-0.2 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ib5t8Sc_CpXl for ; Mon, 18 May 2020 07:56:49 -0700 (PDT) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F38E23A041E for ; Mon, 18 May 2020 07:56:48 -0700 (PDT) Received: from pps.filterd (m0122331.ppops.net [127.0.0.1]) by mx0b-00190b01.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 04IEZ2nn020701; Mon, 18 May 2020 15:56:47 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=V4u788/X7j0CpocQbuZNj/J2wWkhkQtNI7KakyxBFu4=; b=TCINNMNi9l9g6eC18byg+oQKnzhHFnuU2ehPl8WKJvQweR2DVkCplGNChQFWya3PeY+U /VLWQARWIeEga/5C+syPdfeSJqr0Vs7sdqmYsCBJ2FRkXlBRrZHcNH0rny1oJOFk5E57 iU1rvQo1RTfO0q0UaDgExPsKvNe43y+A8hQcroh/wIcPvnCUqx2xp+/fPPUBrIgIY0fj NQwi9uqu2qosyJVgak6qAjhSqZRCucjFhlp6LP08txnc0knGp5QYGG3iSfBiY1E+ouBf 7XZI5pw0banCd+LW4pV/VG38OXiQgHybVMjyRNqis3Em3erwDD84jfgqQ7HEyhR6kczJ Fw== Received: from prod-mail-ppoint4 (a72-247-45-32.deploy.static.akamaitechnologies.com [72.247.45.32] (may be forged)) by mx0b-00190b01.pphosted.com with ESMTP id 31251yhq1a-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 18 May 2020 15:56:47 +0100 Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.16.0.27/8.16.0.27) with SMTP id 04IElB1P025920; Mon, 18 May 2020 10:56:46 -0400 Received: from email.msg.corp.akamai.com ([172.27.165.115]) by prod-mail-ppoint4.akamai.com with ESMTP id 312bgu9fxu-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 18 May 2020 10:56:46 -0400 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com (172.27.165.121) by ustx2ex-dag1mb4.msg.corp.akamai.com (172.27.165.122) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 18 May 2020 09:56:45 -0500 Received: from USTX2EX-DAG1MB3.msg.corp.akamai.com ([172.27.165.121]) by ustx2ex-dag1mb3.msg.corp.akamai.com ([172.27.165.121]) with mapi id 15.00.1497.006; Mon, 18 May 2020 09:56:45 -0500 From: "Salz, Rich" To: Russ Housley , LAMPS Thread-Topic: [lamps] shepherd writeup: draft-ietf-lamps-ocsp-nonce/ Thread-Index: AQHWK67GhOV9Wvk4AUqgAId2zcKrSaiuAnyA Date: Mon, 18 May 2020 14:56:44 +0000 Message-ID: <16418846-B43A-45E5-BB28-B89169AE6523@akamai.com> References: <79037008-09ED-4E31-BA8C-1DC4F24E1687@vigilsec.com> In-Reply-To: <79037008-09ED-4E31-BA8C-1DC4F24E1687@vigilsec.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.37.20051002 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.116.114] Content-Type: text/plain; charset="utf-8" Content-ID: <27CED24A85AAB546985F94D0F58F289B@akamai.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-18_06:2020-05-15, 2020-05-18 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=662 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2004280000 definitions=main-2005180129 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.216, 18.0.676 definitions=2020-05-18_06:2020-05-15, 2020-05-18 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxscore=0 adultscore=0 priorityscore=1501 malwarescore=0 suspectscore=0 spamscore=0 cotscore=-2147483648 lowpriorityscore=0 clxscore=1015 mlxlogscore=651 phishscore=0 bulkscore=0 impostorscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2004280000 definitions=main-2005180129 Archived-At: Subject: Re: [lamps] shepherd writeup: draft-ietf-lamps-ocsp-nonce/ X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 May 2020 14:56:52 -0000 SXMgdGhlIGFuc3dlciB0byAjMTEgYSBub24tc2VxdWl0dXJlPyAgKEhvd2V2ZXIgeW91IHNwZWxs IGl0LikNCg0KSXQgYWxzbyBzcGVjaWZpZXMgYSByZWNvbW1lbmRhdGlvbiBmb3IgbWluaW11bSwg aXMgdGhhdCB3b3J0aCBtZW50aW9uaW5nPw0KDQoNCu+7v09uIDUvMTYvMjAsIDI6MjEgUE0sICJS dXNzIEhvdXNsZXkiIDxob3VzbGV5QHZpZ2lsc2VjLmNvbT4gd3JvdGU6DQoNCiAgICBodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWxhbXBzLW9jc3Atbm9uY2Uvc2hl cGhlcmR3cml0ZXVwLw0KDQogICAgUGxlYXNlIHJldmlldyBhbmQgY29tbWVudC4NCg0KICAgIFJ1 c3MNCg0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQogICAgU3Bhc20gbWFpbGluZyBsaXN0DQogICAgU3Bhc21AaWV0Zi5vcmcNCiAgICBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NwYXNtDQoNCg== From nobody Mon May 18 10:02:39 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CC163A0905 for ; Mon, 18 May 2020 10:02:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.003 X-Spam-Level: X-Spam-Status: No, score=0.003 tagged_above=-999 required=5 tests=[SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ksy3KKaEeH66 for ; Mon, 18 May 2020 10:02:35 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30F953A08EA for ; Mon, 18 May 2020 10:02:35 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 85E78300B05 for ; Mon, 18 May 2020 13:02:32 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 02Bl_7aVBxun for ; Mon, 18 May 2020 13:02:31 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 0B8D4300A26; Mon, 18 May 2020 13:02:31 -0400 (EDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) From: Russ Housley In-Reply-To: <16418846-B43A-45E5-BB28-B89169AE6523@akamai.com> Date: Mon, 18 May 2020 13:02:32 -0400 Cc: LAMPS Content-Transfer-Encoding: quoted-printable Message-Id: References: <79037008-09ED-4E31-BA8C-1DC4F24E1687@vigilsec.com> <16418846-B43A-45E5-BB28-B89169AE6523@akamai.com> To: Rich Salz X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] shepherd writeup: draft-ietf-lamps-ocsp-nonce/ X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 May 2020 17:02:38 -0000 Thanks for catching my failure to answer the proper question. Now = fixed: (11) Identify any ID nits the Document Shepherd has found in this document. (See http://www.ietf.org/tools/idnits/ and the = Internet-Drafts Checklist). Boilerplate checks are not enough; this check needs to be thorough. IDnits reports: -- The draft header indicates that this document updates RFC6960, but = the abstract doesn't seem to directly say this. It does mention = RFC6960 though, so this could be OK. The Abstract includes "This document updates the RFC 6960". This warning seems to be the result of "the" or a missing period. Russ > On May 18, 2020, at 10:56 AM, Salz, Rich = wrote: >=20 > Is the answer to #11 a non-sequiture? (However you spell it.) >=20 > It also specifies a recommendation for minimum, is that worth = mentioning? >=20 >=20 > =EF=BB=BFOn 5/16/20, 2:21 PM, "Russ Housley" = wrote: >=20 > = https://datatracker.ietf.org/doc/draft-ietf-lamps-ocsp-nonce/shepherdwrite= up/ >=20 > Please review and comment. >=20 > Russ From nobody Wed May 20 09:41:07 2020 Return-Path: X-Original-To: spasm@ietf.org Delivered-To: spasm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 69BCF3A09E9; Wed, 20 May 2020 09:41:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: rdd@cert.org, spasm@ietf.org, lamps-chairs@ietf.org, housley@vigilsec.com X-Test-IDTracker: no X-IETF-IDTracker: 7.0.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <158999286374.6567.10261029191053402304@ietfa.amsl.com> Date: Wed, 20 May 2020 09:41:04 -0700 Archived-At: Subject: [lamps] lamps - New Meeting Session Request for IETF 108 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 May 2020 16:41:05 -0000 A new meeting session request has just been submitted by Russ Housley, a Chair of the lamps working group. --------------------------------------------------------- Working Group Name: Limited Additional Mechanisms for PKIX and SMIME Area Name: Security Area Session Requester: Russ Housley Number of Sessions: 1 Length of Session(s): 100 Minutes Number of Attendees: 45 Conflicts to Avoid: Chair Conflict: ipwave suit stir Technology Overlap: acme cfrg ace Key Participant Conflict: oauth secdispatch saag sipbrandy tls mls teep emu People who must be present: Russ Housley Rich Salz Sean Turner Alexey Melnikov Michael Richardson Roman Danyliw Bernie Hoeneisen Jim Schaad Tim Hollebeek Hendrik Brockhaus Resources Requested: Special Requests: --------------------------------------------------------- From nobody Fri May 22 06:08:51 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 421FE3A0BED for ; Fri, 22 May 2020 06:08:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TpXnnfU6MWiu for ; Fri, 22 May 2020 06:08:47 -0700 (PDT) Received: from mail-ed1-x530.google.com (mail-ed1-x530.google.com [IPv6:2a00:1450:4864:20::530]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B7F83A0BF6 for ; Fri, 22 May 2020 06:08:46 -0700 (PDT) Received: by mail-ed1-x530.google.com with SMTP id f13so8611321edr.13 for ; Fri, 22 May 2020 06:08:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=bKfxVpWlF4zqEjtFW3HMJsBdAIDqkJ8FbAJfYXJlVig=; b=SmzZohLM/U/IbRnAkwtPv/jHI+SLHRp0WfidPJS5i2h60Ovz5Yr4Y5alzuITEGusbh rJ0qWkNz1u/ZqraqRur2q6Kt2DZ9cmyAhPQbBo08ohlMl0SY6LoeoVH1S4GQf03S7Qdj TXtN8tjGNZYgPkD3EHmxGfJVRI6bk5yh8nNB8BjTfCxT66EvHTRgxSs6f1Sje/bBYy9J yYV+UZXI82g3TLQM11HLbBy4nyMvxOsS9U0oR9bsWIBtYRifQtRFb4Woe05dEmwJv1jK uP1XC9cFABmA7RBHeGCP7pLzj1cBiQjKxY7L4RQEOBPwpduR49odXdi8lYnX8Ht/kAOB /qLg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=bKfxVpWlF4zqEjtFW3HMJsBdAIDqkJ8FbAJfYXJlVig=; b=KeCmnzNoPkp6cvEkpFFK3gcMx+sjG8ZRX7m9WHP2FfVcEXE16cxI7XQ8QnRW9mpt0Y xtezXOc57CVY7VkQwkmZLBWFPM7N1s4+ceaL0G4LteJOFS2I0BcTeyt5PM3hvAz6xY0u XMthocwV4/uQfz03D80x33TcFepLyrNw+Cj1PDQFmNTVeIT1CmrW1jqRBw+tTw6SBdjF 84qKqg/p1ZoG/qGSyCDNtncE2aFpO8IuvB9nmtSGeywz3q3KYsly2PD8AAoNjT0oBdkV 4TuNkkgfpTZDEHEVBhrZj42q1FBAbnPLt2CP9bmQTg3BaIQbaPWx1BNpdO1hksiCyMaP q0OQ== X-Gm-Message-State: AOAM531cFzZbL8XkS/5obX8HvDmMhs1YyxZ1KvmxTal15JfFpIqVM1x1 zD9u+3qyFA7LZE3roRtsi4FE7t9fXKa0jyQwGsk= X-Google-Smtp-Source: ABdhPJxUJ/bIZjzBEAVTkRlQqslmgNteM1MEYvZrMOPf0ehtdeJOCmZzfnsk8HsRYq5XEygvhkerZc23jY+77NY9zyo= X-Received: by 2002:a05:6402:1d06:: with SMTP id dg6mr2961912edb.314.1590152925349; Fri, 22 May 2020 06:08:45 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Jonathan Hammell Date: Fri, 22 May 2020 09:08:34 -0400 Message-ID: To: Tim Hollebeek Cc: SPASM , housley@vigilsec.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-cms-update-alg-id-protect X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 May 2020 13:08:50 -0000 I have reviewed this document for WGLC and I just have one minor editorial nit in the second paragraph of the Security Considerations: "The CMSAlgorithmProtection attribute [RFC6211] offers protection the algorithm identifiers..." I think it is missing a preposition and could be fixed as follows: "The CMSAlgorithmProtection attribute [RFC6211] offers protection for th= e algorithm identifiers..." Otherwise, I think it is ready for publication. Thanks, Russ, for writing this document. Best regards, Jonathan On Fri, May 1, 2020 at 3:45 PM Tim Hollebeek w= rote: > > This is the LAMPS WG Last Call for "Update to the Cryptographic Message S= yntax (CMS) for Algorithm Identifier Protection=E2=80=9D . Please review the document and send your co= mments to the list by 22 May 2020. > > > > The datatracker page for the document is https://datatracker.ietf.org/doc= /draft-ietf-lamps-cms-update-alg-id-protect/ > > > > -Tim > > > > > > > > _______________________________________________ > Spasm mailing list > Spasm@ietf.org > https://www.ietf.org/mailman/listinfo/spasm From nobody Fri May 22 06:36:51 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E53043A0916 for ; Fri, 22 May 2020 06:36:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1N8YgPrjhxZb for ; Fri, 22 May 2020 06:36:40 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA8123A0811 for ; Fri, 22 May 2020 06:36:40 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 48F63300B6B for ; Fri, 22 May 2020 09:36:38 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id kNcfJI6EGYnN for ; Fri, 22 May 2020 09:36:37 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id E2917300A01; Fri, 22 May 2020 09:36:36 -0400 (EDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) From: Russ Housley In-Reply-To: Date: Fri, 22 May 2020 09:36:38 -0400 Cc: Tim Hollebeek , SPASM Content-Transfer-Encoding: quoted-printable Message-Id: <82A731DE-EE0F-40E0-B94D-DD5F28C0F5F6@vigilsec.com> References: To: Jonathan Hammell X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] WG Last Call for draft-ietf-lamps-cms-update-alg-id-protect X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 May 2020 13:36:50 -0000 Thanks. I have fixed this in my edit buffer. I'll post an update to = address all of the WG Last Call comments. Russ > On May 22, 2020, at 9:08 AM, Jonathan Hammell = wrote: >=20 > I have reviewed this document for WGLC and I just have one minor > editorial nit in the second paragraph of the Security Considerations: >=20 > "The CMSAlgorithmProtection attribute [RFC6211] offers protection = the > algorithm identifiers..." >=20 > I think it is missing a preposition and could be fixed as follows: >=20 > "The CMSAlgorithmProtection attribute [RFC6211] offers protection = for the > algorithm identifiers..." >=20 > Otherwise, I think it is ready for publication. Thanks, Russ, for > writing this document. >=20 > Best regards, > Jonathan >=20 >=20 > On Fri, May 1, 2020 at 3:45 PM Tim Hollebeek = wrote: >>=20 >> This is the LAMPS WG Last Call for "Update to the Cryptographic = Message Syntax (CMS) for Algorithm Identifier Protection=E2=80=9D = . Please review the = document and send your comments to the list by 22 May 2020. >>=20 >>=20 >>=20 >> The datatracker page for the document is = https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-update-alg-id-protec= t/ >>=20 >>=20 >>=20 >> -Tim >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> Spasm mailing list >> Spasm@ietf.org >> https://www.ietf.org/mailman/listinfo/spasm >=20 > _______________________________________________ > Spasm mailing list > Spasm@ietf.org > https://www.ietf.org/mailman/listinfo/spasm From nobody Fri May 22 07:43:48 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 230B23A0B00 for ; Fri, 22 May 2020 07:43:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.44 X-Spam-Level: X-Spam-Status: No, score=-0.44 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FsIMEcAm5ZM6 for ; Fri, 22 May 2020 07:43:44 -0700 (PDT) Received: from tuna.sandelman.ca (unknown [209.87.249.16]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 351103A0A04 for ; Fri, 22 May 2020 07:43:43 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 7F68A38A68; Fri, 22 May 2020 10:41:28 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id DogOgNfCwPwm; Fri, 22 May 2020 10:41:28 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 0412238A67; Fri, 22 May 2020 10:41:28 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 875B957; Fri, 22 May 2020 10:43:40 -0400 (EDT) From: Michael Richardson To: spasm@ietf.org cc: max pritikin X-Attribution: mcr X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: [lamps] SHOULD vs MUST for CSR Attributes in RFC7030/CTE clarifications X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 May 2020 14:43:47 -0000 --=-=-= Content-Type: text/plain Eliot wants to propose some additional updates in this document which are not in the form of errata, and he will propose text by Monday. I think that it's too late; he should write another document updating RFC7030. In the process of discussing this, he pointed at this text, originally in 4.5.2, and not changed in the updated text: The structure of the CSR Attributes Response **SHOULD**, to the greatest extent possible, reflect the structure of the CSR it is requesting. Requests to use a particular signature scheme (e.g. using a particular hash function) are represented as an OID to be reflected in the SignatureAlgorithm of the CSR. Requests to use a particular The question is, why SHOULD? Why not MUST? What is the exception case? What does "greatest extent possible"? I.e. when does the Registrar fail to accomplish this? I don't know, but I'm not particularly bothered by SHOULD. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl7H5RwACgkQgItw+93Q 3WXknwgAuBK2w7vEGYcCsHazRwUmPCZNKe55GD1LPIQs0asYW+ZYYDPDhHvCooGM 1f30WxIPs2f30Nu/4mOdVAeXm/lM2vZo76ISwCp3y2eQymR7UGjjgoZ608AfPSeb 1FPx3ILkR2/0oGrxK8h4v9ZsslFpwxsCSk+ZWLFiBeRzuAGexfby/zjKu42ZB/zl 6cBa1Gqsh9cGCgmvdx86XTzxgw2B2xl1KOAe/gYFBrpgYq673/NdvK7ld2RR/0IU l27wOnIehsTIUuwpq3pFXGw6hg83uH4rcizlD2EN55I3vv4qAKlZ+nMljvzItWmN TjuSkYUblaEUmIU9ahyIP6gfxV5iIA== =HOSx -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue May 26 08:09:27 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0EEB3A00D5 for ; Tue, 26 May 2020 08:06:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.061 X-Spam-Level: X-Spam-Status: No, score=-1.061 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, CTE_8BIT_MISMATCH=0.839, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wj5pzTduxkJ1 for ; Tue, 26 May 2020 08:06:16 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 583F23A0484 for ; Tue, 26 May 2020 08:05:15 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 22651F40724; Tue, 26 May 2020 08:05:04 -0700 (PDT) To: pkampana@cisco.com, quynh.dang@nist.gov, rdd@cert.org, kaduk@mit.edu, housley@vigilsec.com, tim.hollebeek@digicert.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: pkampana@cisco.com, spasm@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20200526150504.22651F40724@rfc-editor.org> Date: Tue, 26 May 2020 08:05:04 -0700 (PDT) Archived-At: Subject: [lamps] [Technical Errata Reported] RFC8702 (6188) X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 15:06:25 -0000 The following errata report has been submitted for RFC8702, "Use of the SHAKE One-Way Hash Functions in the Cryptographic Message Syntax (CMS)". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid6188 -------------------------------------- Type: Technical Reported by: Panos Kampanakis Section: 3.4 Original Text ------------- When calculating the KMAC output, the variable N is 0xD2B282C2, S is an empty string, and L (the integer representing the requested output length in bits) is 256 or 512 for KmacWithSHAKE128 or KmacWithSHAKE256, respectively, in this specification. Corrected Text -------------- When calculating the KMAC output, the variable N is “KMAC” as defined in NIST SP800-185, S is an empty string, and L (the integer representing the requested output length in bits) is 256 or 512 for KmacWithSHAKE128 or KmacWithSHAKE256, respectively, in this specification. Notes ----- The originally described 0xD2B282C2 is the hex value of the binary representation (LSB first) of the string "KMAC" as defined in SP800-185. As it was pointed out to us, that representation was confusing and incorrect because NIST's KAT values include "KMAC" in hex format. Showing "KMAC" in binary (LSB first) is different than showing it in hex (MSB first). So, it is more accurate to keep the text generic as "KMAC" and point implementers to SP800-185. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC8702 (draft-ietf-lamps-cms-shakes-18) -------------------------------------- Title : Use of the SHAKE One-Way Hash Functions in the Cryptographic Message Syntax (CMS) Publication Date : January 2020 Author(s) : P. Kampanakis, Q. Dang Category : PROPOSED STANDARD Source : Limited Additional Mechanisms for PKIX and SMIME Area : Security Stream : IETF Verifying Party : IESG From nobody Tue May 26 12:07:26 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB6653A0EED for ; Tue, 26 May 2020 12:07:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PfY9_moM-ksf for ; Tue, 26 May 2020 12:07:24 -0700 (PDT) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ED3873A0EEA for ; Tue, 26 May 2020 12:07:23 -0700 (PDT) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 04QJ7MiG047732 for ; Tue, 26 May 2020 15:07:22 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu 04QJ7MiG047732 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1590520042; bh=zC8W6fXRm3loSJTB9Q9nABTL+3yUClIJ8JDVUOh7Dag=; h=From:To:Subject:Date:From; b=GhgxpEAnIXlxwFulgbC4mnBld3uGpppCCsPUuVcjTZBN5BVqdjuEoXhmKoTcNRr1S 31+0RVSZHfnXgJK6xEh0C67nyOeUEloHlVDCY5k0CRj66VYaZKgV3VITvY2DeeM4R7 dDcF1z/bQgUKwSOZSDw4rRjCypeOZzR1AlqYK7aw= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id 04QJ7L17018247 for ; Tue, 26 May 2020 15:07:21 -0400 Received: from MURIEL.ad.sei.cmu.edu (147.72.252.47) by CASSINA.ad.sei.cmu.edu (10.64.28.249) with Microsoft SMTP Server (TLS) id 14.3.487.0; Tue, 26 May 2020 15:07:21 -0400 Received: from MORRIS.ad.sei.cmu.edu (147.72.252.46) by MURIEL.ad.sei.cmu.edu (147.72.252.47) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1847.3; Tue, 26 May 2020 15:07:20 -0400 Received: from MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb]) by MORRIS.ad.sei.cmu.edu ([fe80::555b:9498:552e:d1bb%22]) with mapi id 15.01.1847.007; Tue, 26 May 2020 15:07:20 -0400 From: Roman Danyliw To: LAMPS WG Thread-Topic: AD review of draft-ietf-lamps-rfc7030est-clarify-05 Thread-Index: AdYzkAx0m2ssZAMLTjWn2jugw7dc+A== Date: Tue, 26 May 2020 19:07:20 +0000 Message-ID: <7cba97541fbd435b94192d23f966b363@cert.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.203.21] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [lamps] AD review of draft-ietf-lamps-rfc7030est-clarify-05 X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 19:07:26 -0000 Hi! I conducted an AD review of draft-ietf-lamps-rfc7030est-clarify-05. Thanks= for the work on this document to address issues that had arisen in RFC7030= . Below is my feedback:=20 (1) From idnits: =3D=3D The 'Updates: ' line in the draft header should list only the _num= bers_ of the RFCs which will be updated by this document (if approved); it should not include the word 'RFC' in the list. This is likely an artifact of the document build chain you are using, but c= an you please recompile it to spit out the following s/Updates: RFC7030/Upd= ates: 7030/ (2) From idnits: =3D=3D Unused Reference: 'RFC8179' is defined on line 377, but no explici= t reference was found in the text =3D=3D Unused Reference: 'X681' is defined on line 385, but no explicit reference was found in the text =3D=3D Unused Reference: 'X682' is defined on line 389, but no explicit reference was found in the text (3) Section 1. Editorial. =20 "[RFC7030] defines the Enrollment over Secure Transport, or EST protocol= . This specification defines a number ..." Because of the paragraph break, I initially read "This specification define= s a ..." to mean this document when you really mean RFC7030. (4) Section 1. Per "Changes to [RFC7030] to bring it inline with typical H= TTP processing risk changes the on-wire protocol in a way that is not back= wards compatible. However, reports ..." -- I had difficulty parsing this first sentence due to the use of "changes"= twice. -- Calling something "typical HTTP processing" begs for a reference describ= ing that baseline behavior. Maybe saying something like:=20 Any updates to [RFC7030] to bring it inline with HTTP processing per [RFC72= 31] risks changing the on-wire protocol in a way that is not backwards comp= atible. (5) Section 1. Editorial. There is no canonical set of implementers (so t= he definite article shouldn't suggest that). s/However, reports from the i= mplementers .../However, reports from implementers/ (6) Section 1. Typo. s/extranous/extraneous/ (7) Section 1. Editorial. Per "This document deals with errata numbers [er= rata4384], [errata5107], [errata5108], and [errata5904]", this is helpful t= o point out that these errata are getting addressed. They are even cited a= s normative references. However, by my read, the text only every explains = how [errata5108] is being addressed. The other three are not mentioned in = the text at all. Please make the text more explicit on which changes are a= ddressing which errata. (8) Section 3, 4, and 5. I found it confusing that each section used a dif= ferent patch style. Is there a reason to do that? ** Section 3 summarizes the behavior of 4.1.3, 4.3.1, 4.3.2, 4.4.2 and 4.5.= 2 without providing specific references to exact text, and then provides a = general updated behavior (again without providing exact text updates) ** Section 4. Provides an outright new blob of text to drop into a section= with high redundancy to the original ** Section 5. Uses an OLD vs. NEW convention. =20 Minimally, since the style of Section 4 and 5 are similar and are precise, = I'd recommend making Section 3 look like one of these style (i.e., being cl= ear on exactly what text is being updated/deprecated).=20 (9) Section 3. The updated guidance on handling the "Content-Transfer-Enco= ding" header isn't clear to me. My confused is likely related to comment (= 8). The following sections/text seem to contain related guidance/commentar= y: (a) Section 1. "However, reports from the implementers suggest that many i= mplementations do not send the Content-Transfer-Encoding, and many of them = ignore it. The consequence is that simply deprecating the header would rem= ain compatible with current implementations." - this commentary suggests th= at dropping the header would cause no issues if that approach is taken. (b) Section 3. "This document updates [RFC7030] to require the POST reques= t and payload response of all endpoints use Base64 encoding as specified in= Section 4 of [RFC4648]." - this updated guidance doesn't explicitly rule o= ut the use of the header (c) Section 3. "This format is to be used regardless of any Content-Transfe= r-Encoding header, and any value in such a header MUST be ignored." - this = doesn't say anything about sending the header, only that it should be ignor= ed on processing; this seems important for backwards compatibility. (d) Section 4. The text removes the reference to "Content-Transfer-Encodin= g" in a patch to Section 4.5.2 of [RFC7030] (e) [RFC7030] Sections 4.1.3 (CA Certificates Response, /cacerts), 4.3.1/4.= 3.2 (Full CMC, /fullcmc), and 4.4.2 (Server-Side Key Generation) still cont= ain a reference to Content-Transfer-Encoding even after applying my read o= n how this document "patches" RFC7030. For example: ** [RFC7030] Section 4.1.3. "The Simple PKI Response is sent with a Content= -Transfer-Encoding of "base64" [RFC2045]." ** [RFC7030] Section 4.3.1/4.3.2. "The body of the message is the binary va= lue of the encoding of the XXXX with a Content-Transfer-Encoding of "base64= " [RFC2045]." ** An "application/pkcs8" part consists of the base64-encoded DER-encoded [= X.690] PrivateKeyInfo with a Content-Transfer-Encoding of "base64" [RFC2045= ]. Why drop the header from one section per (d) but not from the others per (e= )? Under what circumstances should a header be sent - specifically, if (c)= says the header should be dropped, why do we still send it per (e)? (10) Section 3.1. Per "This specification clarifies that despite [RFC2616],= that white space including CR, LF, spaces (ASCII 32) and, tabs (ASCII 9) s= hould be tolerated by receivers", is there a reason that there isn't a norm= ative SHOULD here? (11) Section 4. "Section 4.5.2 of [RFC7030] is to be replaced with the following text: 4.1. CSR Attributes Response" ** Editorial. I suspect there is a tool chain rendering issue. The section= header to drop into RFC7030 needs to read "4.5.2 CSR Attributes Response" = (not 4.1 which is the next section of this document). Editorial alternativ= e would be to drop the header entirely or following convention used in Sect= ions 5.1 and 5.2. ** Editorial. It might also be valuable to explain what is getting changed = instead of just providing an updated blob. ** Editorial. Given that the changes are confined to paragraph 2 and 3, why= reproduce the rest of the content here - i.e., there is over a page worth = of text that isn't changed but is reproduced here. Other updates, describe= d in section 5, only reproduced the updated paragraphs. (12) Section 4. Editorial. For consistency with RFC7090, consider s/[X609]= /[X.609]/. (13) Section 5. The updates here drop the normative MUST to a "must" regar= ding the "response data must ...". The Errata text explains that "Note tha= t the MUST was reduced to a must because no content-type is specified" but = I'm still not following why we lost the normative MUST. What am I missing? (14) Section 8. Typo. s/doucment/document/ (15) Section 8. Typo. s/doducment/document/ Regards, Roman From nobody Tue May 26 12:55:24 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 775323A0FC3; Tue, 26 May 2020 12:55:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6SCuIQDrHOM0; Tue, 26 May 2020 12:55:18 -0700 (PDT) Received: from mail-pj1-x102d.google.com (mail-pj1-x102d.google.com [IPv6:2607:f8b0:4864:20::102d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EC603A0FC0; Tue, 26 May 2020 12:55:18 -0700 (PDT) Received: by mail-pj1-x102d.google.com with SMTP id fs4so260404pjb.5; Tue, 26 May 2020 12:55:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=XIkIGp7oU+0ih+TCWgQ2SDkfQIGFc7awg+BQSwLn460=; b=ppldLC2TBvmLB3JKXCRYIlRTUYdTO1lEKfMCsauYyyT5aa7p6lRINppOsyIY2sH0uP z2irb6He4pu8PEHSpMDtHkZI7mCiuK1cY/hwsBkTNdlxZXMt3wH4ceLKxPyFFFnjCle4 UhuVb+yXOifCLHUlnDoQL6YIQqLwwR/SQsz0qqA0Y0vC2W3CYRRWrseAooFFmcacUkoO kfe06UCU1tllvy1PXJI9oOGAz7GbVADf07Zq6LZoczqn0E9y6z6lBd9V2vd/5se94DRl dRleASgQMW1R54MlCw/fUSK+VU/8vZ+fNA2i9D9kxJj6eZO/mNEGtEFYGwsAxOiTW9tU dKrA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=XIkIGp7oU+0ih+TCWgQ2SDkfQIGFc7awg+BQSwLn460=; b=j9VQQ8aXPlHrefZ7kquS5SnoDkpNpulbMfwp8IVt5iG7BbNKKeJHCnIqfvL/xpLZVb JLuQfrmAoaQJIWYn7q0dBmOsjIfERn2iRhAcygKSD3tDRqzl8TF6Tl7ay9bR9WmtKqXr ysBMvLAc4DdYKLt0gYUZzcoPXHr2SD8XIr1Xd2D00rVfHUE0p8UBnsou4zjaBMwAcfKS Wt5kGax5Y4Ma8KSaPasnkF/0usBvBDEmyHDiM0qF4tQVmJ7ru4U8bOX7CE7BQm8bOvya HxIyJ3MJTzKcsnvJNn1u9OatHUo8mwiM/RRkO69AxHTBm4yVjscvPqzjRK+AlgyAv5Qb Ohjw== X-Gm-Message-State: AOAM531iEA0UReEWDU1LSxi1L1Ffc85dGyzJjkH08Qd8CQGbA4KSAX3H DRiUeKSizDm3JsONb4zwffs7MG2hRLDaOMoZXPcV9zroMak= X-Google-Smtp-Source: ABdhPJzVnMfdXAha4vjs7rj/g6KCtOpxHV9ksUAGYMeyJ3PbeGGjSM48lAKIT/hLOxmlL4MA2+G+vUJ5q0G7qkZLujs= X-Received: by 2002:a17:90a:2ec1:: with SMTP id h1mr900168pjs.145.1590522916784; Tue, 26 May 2020 12:55:16 -0700 (PDT) MIME-Version: 1.0 From: Dmitry Baryshkov Date: Tue, 26 May 2020 22:55:04 +0300 Message-ID: To: spasm@ietf.org, curdle@ietf.org Cc: Werner Koch Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [lamps] Looking for contemporary CMS samples (X25519/Ed25519/AES-GCM) X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 19:55:20 -0000 Hello, While working on CMS support, it was noticed that there are no known public CMS test vectors covering recent (or not so recent) additions. In particular we were looking for X25519/Ed25519 and AES-GCM/AES-CCM examples. Do you have any known-good samples that can be used in open source projects? Thank you! -- With best wishes Dmitry From nobody Tue May 26 14:00:04 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB7F13A07C5 for ; Tue, 26 May 2020 14:00:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bl6HfqrFIc4J for ; Tue, 26 May 2020 14:00:01 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 845543A07C2 for ; Tue, 26 May 2020 14:00:01 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 11554300B65 for ; Tue, 26 May 2020 16:59:59 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id vBEi2sh_D6hJ for ; Tue, 26 May 2020 16:59:57 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 16E24300A51; Tue, 26 May 2020 16:59:57 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) From: Russ Housley In-Reply-To: Date: Tue, 26 May 2020 16:59:58 -0400 Cc: SPASM , curdle@ietf.org, Werner Koch Content-Transfer-Encoding: 7bit Message-Id: <0DF58640-3CC8-4675-BEDC-6CF52FDA8707@vigilsec.com> References: To: Dmitry Baryshkov X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] Looking for contemporary CMS samples (X25519/Ed25519/AES-GCM) X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 May 2020 21:00:03 -0000 RFC 8591 has an example of authEnvelopedData with RSA and AES-GCM. Russ > On May 26, 2020, at 3:55 PM, Dmitry Baryshkov wrote: > > Hello, > > While working on CMS support, it was noticed that there are no known > public CMS test vectors covering recent (or not so recent) additions. > In particular we were looking for X25519/Ed25519 and AES-GCM/AES-CCM > examples. Do you have any known-good samples that can be used in open > source projects? > > Thank you! > > -- > With best wishes > Dmitry > > _______________________________________________ > Spasm mailing list > Spasm@ietf.org > https://www.ietf.org/mailman/listinfo/spasm From nobody Thu May 28 11:47:56 2020 Return-Path: X-Original-To: spasm@ietf.org Delivered-To: spasm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A84113A0AF7; Thu, 28 May 2020 11:47:49 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: spasm@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.1.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: spasm@ietf.org Message-ID: <159069166961.13237.6036957088592596078@ietfa.amsl.com> Date: Thu, 28 May 2020 11:47:49 -0700 Archived-At: Subject: [lamps] I-D Action: draft-ietf-lamps-cms-update-alg-id-protect-02.txt X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2020 18:47:50 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Limited Additional Mechanisms for PKIX and SMIME WG of the IETF. Title : Update to the Cryptographic Message Syntax (CMS) for Algorithm Identifier Protection Author : Russ Housley Filename : draft-ietf-lamps-cms-update-alg-id-protect-02.txt Pages : 8 Date : 2020-05-28 Abstract: This document updates the Cryptographic Message Syntax (CMS) specified in RFC 5652 to ensure that algorithm identifiers in signed- data and authenticated-data content types are adequately protected. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-update-alg-id-protect/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-lamps-cms-update-alg-id-protect-02 https://datatracker.ietf.org/doc/html/draft-ietf-lamps-cms-update-alg-id-protect-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-lamps-cms-update-alg-id-protect-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu May 28 11:49:10 2020 Return-Path: X-Original-To: spasm@ietfa.amsl.com Delivered-To: spasm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 490D13A0B0B for ; Thu, 28 May 2020 11:49:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4WvC1OTUTR70 for ; Thu, 28 May 2020 11:49:06 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1BD03A0AF7 for ; Thu, 28 May 2020 11:49:06 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 07EED300ABD for ; Thu, 28 May 2020 14:49:04 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 5Fm1Qy0aCyyi for ; Thu, 28 May 2020 14:49:02 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id C5D05300A91 for ; Thu, 28 May 2020 14:49:02 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) Date: Thu, 28 May 2020 14:49:04 -0400 References: <159069166981.13237.9926427396440453466@ietfa.amsl.com> To: SPASM In-Reply-To: <159069166981.13237.9926427396440453466@ietfa.amsl.com> Message-Id: <142676E8-A1B4-4A09-988C-4F655F26489E@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [lamps] New Version Notification for draft-ietf-lamps-cms-update-alg-id-protect-02.txt X-BeenThere: spasm@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 May 2020 18:49:08 -0000 This revision addresses all of the WG Last Call comments. Russ > On May 28, 2020, at 2:47 PM, internet-drafts@ietf.org wrote: >=20 >=20 > A new version of I-D, = draft-ietf-lamps-cms-update-alg-id-protect-02.txt > has been successfully submitted by Russ Housley and posted to the > IETF repository. >=20 > Name: draft-ietf-lamps-cms-update-alg-id-protect > Revision: 02 > Title: Update to the Cryptographic Message Syntax (CMS) = for Algorithm Identifier Protection > Document date: 2020-05-28 > Group: lamps > Pages: 8 > URL: = https://www.ietf.org/internet-drafts/draft-ietf-lamps-cms-update-alg-id-pr= otect-02.txt > Status: = https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-update-alg-id-protec= t/ > Htmlized: = https://tools.ietf.org/html/draft-ietf-lamps-cms-update-alg-id-protect-02 > Htmlized: = https://datatracker.ietf.org/doc/html/draft-ietf-lamps-cms-update-alg-id-p= rotect > Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-lamps-cms-update-alg-id-pro= tect-02 >=20 > Abstract: > This document updates the Cryptographic Message Syntax (CMS) > specified in RFC 5652 to ensure that algorithm identifiers in = signed- > data and authenticated-data content types are adequately protected. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 >=20