From nobody Sun Nov 1 02:21:58 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 764E41B78B1 for ; Sun, 1 Nov 2015 02:21:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dQspEJPMz2JN for ; Sun, 1 Nov 2015 02:21:54 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext5.iad.github.net [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00D471B78B0 for ; Sun, 1 Nov 2015 02:21:53 -0800 (PST) Date: Sun, 01 Nov 2015 02:21:52 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373312; bh=6z+H3UT0HBDfTmhEyura5qF9vZIdqdEF+6VO9VmUty4=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=gdGMAyrmxLhdyFsWd0fvP548SS2qd08jTOnJj1sI4Nlk7FKETGhSw22GIzWGHoDCL OxF22Fp0D1gTvsfMCETrDDcJXpGvSEm+C6Oop22iM4lNSO2Y+9Ispi1tZsW6HStR3Z QRJbN/2djIqyeu1H+78fQ1gVIpOfIhITSl2p+XT4= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e7c08cfe2_29a93f7e5f0f72c01491971"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] [cose-issues] Inconsistency between COSE key_ops and WebCrypto API and JOSE key_ops (#17) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:21:55 -0000 ----==_mimepart_5635e7c08cfe2_29a93f7e5f0f72c01491971 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable The COSE key_ops list in Section 7 (COSE Key Common Parameters) is missin= g the =E2=80=9CderiveKey=E2=80=9D and =E2=80=9CderiveBits=E2=80=9D operat= ions defined by WebCrypto and JOSE and adds the =E2=80=9Ckey agree=E2=80=9D= operation not present in either of the related specs. Please change the= COSE key_ops to align with WebCrypto and JOSE. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/17= ----==_mimepart_5635e7c08cfe2_29a93f7e5f0f72c01491971 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

The COSE key_ops list in Section 7 (COSE Key Common Parameters) is mis= sing the =E2=80=9CderiveKey=E2=80=9D and =E2=80=9CderiveBits=E2=80=9D ope= rations defined by WebCrypto and JOSE and adds the =E2=80=9Ckey agree=E2=80= =9D operation not present in either of the related specs. Please change = the COSE key_ops to align with WebCrypto and JOSE.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e7c08cfe2_29a93f7e5f0f72c01491971-- From nobody Sun Nov 1 02:22:30 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8C621B78BE for ; Sun, 1 Nov 2015 02:22:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qOep79SbeDvg for ; Sun, 1 Nov 2015 02:22:25 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C50161B78B6 for ; Sun, 1 Nov 2015 02:22:25 -0800 (PST) Date: Sun, 01 Nov 2015 02:22:25 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373345; bh=jFm1TjES5pUem3ndpRl+sKpQd/NlGWQdLHta28VdiBI=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=xqEQXXjdUGXQ+iPCSj+X4HxdQHp65ttfM5hTDAfXks3r8xJaVEVzBsIzrXJzS1lgj vcD5XytsPoM3z8kmZpU71/hgHkXbqOUQUi4fyTYf9vXQyQciTGNIUSG3ModVucBOkE EatLT3nvYYOrJyk9KZFPrMwUxvqX4fzYLsQtwVws= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e7e11e085_43a13fb87c4332c08117f0"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] [cose-issues] Fix GCM IV size at 96 bits (#18) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:22:28 -0000 ----==_mimepart_5635e7e11e085_43a13fb87c4332c08117f0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable NIST SP 800-38D, which defines GCM, states: =E2=80=9CFor IVs, it is recom= mended that implementations restrict support to the length of 96 bits, to= promote interoperability, efficiency, and simplicity of design.=E2=80=9D= Please add this restriction to the description of how COSE uses GCM in = Section 10.1 (AES GCM). --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/18= ----==_mimepart_5635e7e11e085_43a13fb87c4332c08117f0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

NIST SP 800-38D, which defines GCM, states: =E2=80=9CFor IVs, it is re= commended that implementations restrict support to the length of 96 bits,= to promote interoperability, efficiency, and simplicity of design.=E2=80= =9D Please add this restriction to the description of how COSE uses GCM = in Section 10.1 (AES GCM).

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e7e11e085_43a13fb87c4332c08117f0-- From nobody Sun Nov 1 02:22:50 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5AC891B78C4 for ; Sun, 1 Nov 2015 02:22:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HcwbmFU2rcHo for ; Sun, 1 Nov 2015 02:22:47 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext5.iad.github.net [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DCBAF1B78BE for ; Sun, 1 Nov 2015 02:22:46 -0800 (PST) Date: Sun, 01 Nov 2015 02:22:46 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373366; bh=c4rA/YDmBH2RWSDRlADyo4yRdvgjljVGojORQAQrwa8=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=2c6l43I1znUK/Aa0Nz/rcvQ3PIGXKCIrp8PBbyjpsZrcpTsd1opZ7+QxWqbKx6aqs bkFBq8J2JlqgrAxkUR/FLlP3D9Hz6jVC1XZjRHuGYDAbvDNLcvB1nkTZSQku2tWFEZ +5Upf6Xm5S8ApNh71DHMKaOxnwYLnNyeT22jb9nE= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e7f63a45c_57e63fc3a3eeb2bc116825"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] [cose-issues] Describe rule determining when zero length fields are used versus when nil is used (#19) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:22:48 -0000 ----==_mimepart_5635e7f63a45c_57e63fc3a3eeb2bc116825 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Zero length bit fields are used for some omitted content (such as for an = unused =E2=80=9Cprotected=E2=80=9D field in Section 3 (Header Parameters)= whereas nil values are used for others (such as for the =E2=80=9Cciphert= ext=E2=80=9D field in 12.1 (Direct Encryption)). The specification shoul= d include a clear statement of the rule used to make these choices and cl= ear rationale for the rule. If the specification currently doesn=E2=80=99= t obey the rule in all particulars, please make appropriate changes. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/19= ----==_mimepart_5635e7f63a45c_57e63fc3a3eeb2bc116825 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Zero length bit fields are used for some omitted content (such as for = an unused =E2=80=9Cprotected=E2=80=9D field in Section 3 (Header Paramete= rs) whereas nil values are used for others (such as for the =E2=80=9Cciph= ertext=E2=80=9D field in 12.1 (Direct Encryption)). The specification sh= ould include a clear statement of the rule used to make these choices and= clear rationale for the rule. If the specification currently doesn=E2=80= =99t obey the rule in all particulars, please make appropriate changes.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e7f63a45c_57e63fc3a3eeb2bc116825-- From nobody Sun Nov 1 02:25:41 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16D9D1B78F3 for ; Sun, 1 Nov 2015 02:25:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.908 X-Spam-Level: X-Spam-Status: No, score=-5.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BPuG7YmGsftl for ; Sun, 1 Nov 2015 02:25:38 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0ADDE1B78F2 for ; Sun, 1 Nov 2015 02:25:37 -0800 (PST) Date: Sun, 01 Nov 2015 02:25:37 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373537; bh=jKK1Xuqp4nKjKHgEhizAF8f3rN0hSYLg6SfL/LXz5Jk=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=kmcYLi0spJOt/bCA9GFaXevUGvTtAHlNiHofxJ8Sgkt8nXEIBk4KwbzeJv1NqY1/S F0L/q2NrcXHvg0tRSLcf+AHV8/QFU3Ihg2W1pb7v/ClwJ4+COE79nj5SmCS3U1+COo ptZdSpEmmUPXt3ByD6yTmUeDla2vgc9VGiUPIwHI= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e8a122b76_50db3f7e5f0f72c0182421"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] [cose-issues] Add symbolic annotations to all examples (#24) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:25:40 -0000 ----==_mimepart_5635e8a122b76_50db3f7e5f0f72c0182421 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable As described in slide 15 of the =E2=80=9CCOSE Key Issues And Choices=E2=80= =9D presentation at https://www.ietf.org/proceedings/93/slides/slides-93-= cose-7.pdf, please add symbolic descriptions of all parameters used in ex= amples, as well as retaining their numeric and binary representations. C= urrently the examples are unintelligible without huge amounts of manual l= abor, pouring through CBOR and COSE constant definitions and encodings! For instance, use this: { 1 (typ): 3 (MAC), 2 (protected): h'a1016f4145532d434d41432d3235362f3634', ({1 (alg): =E2=80=9CAES-CMAC-256/64=E2=80=9D}) Rather than just this: { 1: 3, 2: h'a1016f4145532d434d41432d3235362f3634', --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/24= ----==_mimepart_5635e8a122b76_50db3f7e5f0f72c0182421 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

As described in slide 15 of the =E2=80=9CCOSE Key Issues And Choices=E2= =80=9D presentation at https://www.ietf.org/proceedings/93/slides/slid= es-93-cose-7.pdf, please add symbolic descriptions of all parameters = used in examples, as well as retaining their numeric and binary represent= ations. Currently the examples are unintelligible without huge amounts o= f manual labor, pouring through CBOR and COSE constant definitions and en= codings!

For instance, use this:

{
1 (typ): 3 (MAC),
2 (protected): h'a1016f4145532d434d41432d3235362f3634',
({1 (alg): =E2=80=9CAES-CMAC-256/64=E2=80=9D})

Rather than just this:

{
1: 3,
2: h'a1016f4145532d434d41432d3235362f3634',

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e8a122b76_50db3f7e5f0f72c0182421-- From nobody Sun Nov 1 02:26:08 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BACA21B7901 for ; Sun, 1 Nov 2015 02:26:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fsIZQvvat6h5 for ; Sun, 1 Nov 2015 02:26:04 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext8.iad.github.net [192.30.252.199]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E78651B78F5 for ; Sun, 1 Nov 2015 02:26:03 -0800 (PST) Date: Sun, 01 Nov 2015 02:26:03 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373563; bh=asRk9LWCaevCCw6ltVrb+lN9eNU16BPqRQuVD1CpSE4=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=WIXSEN/JIeC8tKuPIfjRfZ51/IAre8pp9twM2wEo4MP4ADn9EGwaiHqUUOwXU4M3E XuYwzk6w91CPBWRTWgy+suy5FkaHiWwxc/OLeOtUiIHXHGJZ0qyE7BsBZYFFItX2c9 uPBlAIOKe+Ye7vLChjjIM6OElOEwvbo7u7uUIPGU= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e8bb43ed5_36f23f7e5f0f72c038022a"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] [cose-issues] Acknowledgements Missing (#25) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:26:07 -0000 ----==_mimepart_5635e8bb43ed5_36f23f7e5f0f72c038022a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Please add an Acknowledgements section acknowledging by name those who have made significant contributions to the specification. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/25 ----==_mimepart_5635e8bb43ed5_36f23f7e5f0f72c038022a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Please add an Acknowledgements section acknowledging by name those who have made significant contributions to the specification.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_5635e8bb43ed5_36f23f7e5f0f72c038022a-- From nobody Sun Nov 1 02:26:36 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E92C1B790E for ; Sun, 1 Nov 2015 02:26:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YOTAdYrBp7Zw for ; Sun, 1 Nov 2015 02:26:33 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E5CC91B790C for ; Sun, 1 Nov 2015 02:26:32 -0800 (PST) Date: Sun, 01 Nov 2015 02:26:32 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373592; bh=8Mlf2S2k3ED1m8ZTIUkKVcme4zCkxa0hNvsXAHFQ7uE=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=GoT9t4xvHm+JY67nIFNTcvH6wCr9wBVXV6fb+ebF6T/n9+lgn+xzwe6bEFJMhj+bB J+iVSys4nmDUt0V70lLR0+/7PEgSO7JVNLI4HIBsAb9mYSo3E4MgS1tqflOoHJRTCc wlA04mBqsVhRS73LUHznKYVlJ/cF11GAFMZPOlHg= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e8d842cec_29e63fc3a3eeb2bc4348a"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] =?utf-8?q?=5Bcose-issues=5D_Change_=E2=80=9CSenders_SHOULD?= =?utf-8?b?IGVuY29kZeKAnSB0byDigJxTZW5kZXJzIE1VU1QgZW5jb2Rl4oCdICgjMjYp?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:26:34 -0000 ----==_mimepart_5635e8d842cec_29e63fc3a3eeb2bc4348a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable The description of the =E2=80=9Cprotected=E2=80=9D field in Section 3 say= s =E2=80=9CSenders SHOULD encode an empty protected map as a zero length = binary object (it is shorter).=E2=80=9D Such uses of =E2=80=9CSHOULD=E2=80= =9D will result in interoperability problems. Therefore, please change t= he =E2=80=9CSHOULD=E2=80=9D to a =E2=80=9CMUST=E2=80=9D. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/26= ----==_mimepart_5635e8d842cec_29e63fc3a3eeb2bc4348a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

The description of the =E2=80=9Cprotected=E2=80=9D field in Section 3 = says =E2=80=9CSenders SHOULD encode an empty protected map as a zero leng= th binary object (it is shorter).=E2=80=9D Such uses of =E2=80=9CSHOULD=E2= =80=9D will result in interoperability problems. Therefore, please chang= e the =E2=80=9CSHOULD=E2=80=9D to a =E2=80=9CMUST=E2=80=9D.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e8d842cec_29e63fc3a3eeb2bc4348a-- From nobody Sun Nov 1 02:27:04 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 381761B791B for ; Sun, 1 Nov 2015 02:27:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hjqNStiDsRnj for ; Sun, 1 Nov 2015 02:27:00 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext8.iad.github.net [192.30.252.199]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 825981B78FF for ; Sun, 1 Nov 2015 02:27:00 -0800 (PST) Date: Sun, 01 Nov 2015 02:26:59 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373619; bh=jAS4wHGZj0KI9CPc8gNLFfXU5kaT+WOjp6KOZlphgYc=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=ruBtdOBHUTwUfdqUOjCXNQdw8b3uhvFmweedF6tMdzK0wkMKrGmUsqLulRv+YGcQo R9EttqkRSLeLX9pmGqNmU7mvGn8AmrwQ0doLF58Wtrg7defbB8qTaAMHPJVgVAWYxP 4fGvPax1tUlzJeLY6BaSKG+BcmDCbuZ6ZGGjasoE= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e8f3d4145_8f33f966b0eb2bc11979c"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] [cose-issues] Separate the nonce and IV header parameters (#27) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:27:02 -0000 ----==_mimepart_5635e8f3d4145_8f33f966b0eb2bc11979c Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable The description of the =E2=80=9Cnonce=E2=80=9D header parameter in Sectio= n 3.1 says that =E2=80=9CThis parameter holds either a nonce or Initializ= ation Vector value.=E2=80=9D Is there a well-understood reason why both = a nonce and an initialization vector will never both be needed in the sam= e set of header parameters. Unless such a reason can be documented, plea= se create separate header parameters for =E2=80=9Cnonce=E2=80=9D and =E2=80= =9CIV=E2=80=9D. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/27= ----==_mimepart_5635e8f3d4145_8f33f966b0eb2bc11979c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

The description of the =E2=80=9Cnonce=E2=80=9D header parameter in Sec= tion 3.1 says that =E2=80=9CThis parameter holds either a nonce or Initia= lization Vector value.=E2=80=9D Is there a well-understood reason why bo= th a nonce and an initialization vector will never both be needed in the = same set of header parameters. Unless such a reason can be documented, p= lease create separate header parameters for =E2=80=9Cnonce=E2=80=9D and =E2= =80=9CIV=E2=80=9D.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e8f3d4145_8f33f966b0eb2bc11979c-- From nobody Sun Nov 1 02:27:30 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8664E1B791B for ; Sun, 1 Nov 2015 02:27:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JVIE0AZucJG2 for ; Sun, 1 Nov 2015 02:27:25 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A28081B7921 for ; Sun, 1 Nov 2015 02:27:25 -0800 (PST) Date: Sun, 01 Nov 2015 02:27:24 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373645; bh=YH3z96Qf1RnRPY/LV4+LMN9K2288Yu2Z6IdDo6B/0uY=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=wvZGtCZlDa9bJdN9mhntQUqrN2RgscTe7gCG9wet06qqnd+foF3RdDECIVNE50FvK 5nA1SkAi+QT3gSm+U3qZItlhDxihmK/uVJCiS6o44zK4QJ6ephnpftBXi7OkGZJ0T+ hUGE9w1qKnqwuJU5wdBLS8uXwoQ1+nD/lQaqBkjw= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e90cefb4e_93d3f966b0eb2bc133147a"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] =?utf-8?q?=5Bcose-issues=5D_Use_of_undefined_terms_?= =?utf-8?b?4oCcYm9keSBwcm90ZWN0ZWQgYXR0cmlidXRlc+KAnSwgZXRjLiAoIzI4KQ==?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:27:27 -0000 ----==_mimepart_5635e90cefb4e_93d3f966b0eb2bc133147a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Section 4.2 (Signing and Verification Process) uses the term =E2=80=9Cbod= y protected attributes=E2=80=9D without first defining it. I eventually = figured out what it had to mean, but it was initially puzzling. The same= problem exists for the terms =E2=80=9Csignature protected attributes=E2=80= =9D and =E2=80=9Cexternal protected attributes=E2=80=9D. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/28= ----==_mimepart_5635e90cefb4e_93d3f966b0eb2bc133147a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Section 4.2 (Signing and Verification Process) uses the term =E2=80=9C= body protected attributes=E2=80=9D without first defining it. I eventual= ly figured out what it had to mean, but it was initially puzzling. The s= ame problem exists for the terms =E2=80=9Csignature protected attributes=E2= =80=9D and =E2=80=9Cexternal protected attributes=E2=80=9D.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e90cefb4e_93d3f966b0eb2bc133147a-- From nobody Sun Nov 1 02:27:48 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 614EC1B7928 for ; Sun, 1 Nov 2015 02:27:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GQBmsC3A3qni for ; Sun, 1 Nov 2015 02:27:43 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext6.iad.github.net [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9ACB1B7925 for ; Sun, 1 Nov 2015 02:27:43 -0800 (PST) Date: Sun, 01 Nov 2015 02:27:43 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373663; bh=WgV7ID1fyQaqSztbNYeiOQ0H+J/dQE6CiPdougCLiCk=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=VkUptwew02l0opbM4zEoAqDKX1o4EqRK9fsH1cbGchDtIBxrit+V1/bMQc9unTu4H tw8QZXtg0d0zlXzS4W+Nte9Rps+PmMLX34rQwiqQrc4sIRpMTrvNC76szrZ4nufWWz cXqO8VxKQ3xpZpLP1eHpsiD7NUb9StJAKSOv7fxQ= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e91f14041_6a3a3fb2b3e5f2b84804c3"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] =?utf-8?q?=5Bcose-issues=5D_Inconsistency_between_?= =?utf-8?b?4oCcbm9uZeKAnSBhbmQg4oCcZGlyZWN04oCdIHRlcm1pbm9sb2d5ICgjMjkp?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:27:45 -0000 ----==_mimepart_5635e91f14041_6a3a3fb2b3e5f2b84804c3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I think that what is called =E2=80=9Cnone=E2=80=9D in 5.1.1 (Recipient Al= gorithm Classes) is called =E2=80=9Cdirect=E2=80=9D in 12.1 (Direct Encry= ption). I=E2=80=99d recommend consistently going with the =E2=80=9Cdirec= t=E2=80=9D terminology. I=E2=80=99d review the other terms in these list= s for consistency as well. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/29= ----==_mimepart_5635e91f14041_6a3a3fb2b3e5f2b84804c3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

I think that what is called =E2=80=9Cnone=E2=80=9D in 5.1.1 (Recipient= Algorithm Classes) is called =E2=80=9Cdirect=E2=80=9D in 12.1 (Direct En= cryption). I=E2=80=99d recommend consistently going with the =E2=80=9Cdi= rect=E2=80=9D terminology. I=E2=80=99d review the other terms in these l= ists for consistency as well.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e91f14041_6a3a3fb2b3e5f2b84804c3-- From nobody Sun Nov 1 02:29:39 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A67461B793A for ; Sun, 1 Nov 2015 02:29:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.049 X-Spam-Level: X-Spam-Status: No, score=-5.049 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_08=1.651, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F09M_0awE2tq for ; Sun, 1 Nov 2015 02:29:36 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5EE511B7938 for ; Sun, 1 Nov 2015 02:29:36 -0800 (PST) Date: Sun, 01 Nov 2015 02:29:35 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373775; bh=ZN941CGr19MWye/JClw/8sTbUdbre/oFxrAPSHZzNcs=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=PPqjbVypGYjr5l96/ZktBQYugj0QPRzur3SaWhDwE2JlJftapO67O/2ksQEEasRBo VU0Jk1FlDg0TOvKQZI8R4uo6Mgdiv1erT01dDmpYhiUl+bUNKCRiBJsa11swMfEDO/ 806D3D3e01h6DRSf7p98R8150BN3GcAyWe9E9mZw= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e98fa7ff7_8f63f966b0eb2bc30231f"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] =?utf-8?q?=5Bcose-issues=5D_Replace_uses_of_=E2=80=9CXXX?= =?utf-8?q?=E2=80=9D_with_intended_content_=28=2334=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:29:37 -0000 ----==_mimepart_5635e98fa7ff7_8f63f966b0eb2bc30231f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Table 10 (HKDF algorithms) contains =E2=80=9CXXX=E2=80=9D for some entrie= s. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/34= ----==_mimepart_5635e98fa7ff7_8f63f966b0eb2bc30231f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Table 10 (HKDF algorithms) contains =E2=80=9CXXX=E2=80=9D for some ent= ries.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e98fa7ff7_8f63f966b0eb2bc30231f-- From nobody Sun Nov 1 02:30:03 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FDBC1B793E for ; Sun, 1 Nov 2015 02:30:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SvBD4_D1i3GB for ; Sun, 1 Nov 2015 02:29:59 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDDA61B793C for ; Sun, 1 Nov 2015 02:29:59 -0800 (PST) Date: Sun, 01 Nov 2015 02:29:59 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373799; bh=+H+e/q/4gwweX4W/MHWm4WMZKrTC0j88jxuTZtMQ0EQ=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=j0HRpZVT02K9W2nxNMndPXvdSEDk6mT8WvRZVKIywzdce2LyRCN7VB6/eHNpPUtT6 SFg/u24lF5aVG0DQ/57ByK2VbwQhwjuGNk9yFeVrx8h2O1whfRVQU/4LiUB9609mY8 vabGxWtwY8sZUq+s63mRR/MuQ6MP2REe81kvujFc= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e9a719e84_46fc3f866e9e729c6327f3"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] =?utf-8?q?=5Bcose-issues=5D_Elaborate_on_=E2=80=9Cif_it_is?= =?utf-8?q?_not_used_in_the_computation_of_the_content_key=E2=80=9D_=28=23?= =?utf-8?b?MzUp?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:30:02 -0000 ----==_mimepart_5635e9a719e84_46fc3f866e9e729c6327f3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Section 12.1 (Direct Encryption) says =E2=80=9CThe 'protected' field MUST= be a zero length item if it is not used in the computation of the conten= t key.=E2=80=9D It would probably be helpful to implementers to say when= the =E2=80=9Cprotected=E2=80=9D field is and is not used in this computa= tion when performing direct encryption. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/35= ----==_mimepart_5635e9a719e84_46fc3f866e9e729c6327f3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Section 12.1 (Direct Encryption) says =E2=80=9CThe 'protected' field M= UST be a zero length item if it is not used in the computation of the con= tent key.=E2=80=9D It would probably be helpful to implementers to say w= hen the =E2=80=9Cprotected=E2=80=9D field is and is not used in this comp= utation when performing direct encryption.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e9a719e84_46fc3f866e9e729c6327f3-- From nobody Sun Nov 1 02:30:26 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF09A1B2AC2 for ; Sun, 1 Nov 2015 02:30:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ty4z5nLjHqPW for ; Sun, 1 Nov 2015 02:30:22 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79C301A6FDF for ; Sun, 1 Nov 2015 02:30:22 -0800 (PST) Date: Sun, 01 Nov 2015 02:30:21 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373821; bh=ft8YzI5hXZeZ3qD1OkdIty1Fgqyo320VU6z16muTaow=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=0fWeF0XbxhaeqpH7Y0C5qnBJZt/2TfZxkAl9+GC9GQrE8XR00Sbgj9KPHJCuAi95T ruKtlieLnRCQ2GeRB0/SBGgH3NRBEq5tq4a9QY12o7h7wEt+UO98x5dI5nI/IbzRqz AV3ZL+zqfgc2H12M+i68y9v3CNS0VZ+L7xNBicCs= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e9bdcbdd8_6e233f866e9e729c2863fc"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] =?utf-8?b?W2Nvc2UtaXNzdWVzXSBJcyBhIOKAnGRpcmVjdCBrZXnigJ0g?= =?utf-8?q?sent_in_the_clear=3F_=28=2336=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:30:24 -0000 ----==_mimepart_5635e9bdcbdd8_6e233f866e9e729c2863fc Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Please state whether direct keys, as defined in 12.1.1 (Direct Key), are = sent in the clear as part of the COSE message or not. I couldn=E2=80=99t= easily tell. If they are, please state what rules need to be followed t= o use them securely. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/36= ----==_mimepart_5635e9bdcbdd8_6e233f866e9e729c2863fc Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Please state whether direct keys, as defined in 12.1.1 (Direct Key), a= re sent in the clear as part of the COSE message or not. I couldn=E2=80=99= t easily tell. If they are, please state what rules need to be followed = to use them securely.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e9bdcbdd8_6e233f866e9e729c2863fc-- From nobody Sun Nov 1 02:30:55 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7AD91B365A for ; Sun, 1 Nov 2015 02:30:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e48qvL13GwcX for ; Sun, 1 Nov 2015 02:30:52 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext1.iad.github.net [192.30.252.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C2C01B3659 for ; Sun, 1 Nov 2015 02:30:52 -0800 (PST) Date: Sun, 01 Nov 2015 02:30:51 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373851; bh=Rmrp8LpUCFcyeecCeSSTGm1UoBreiME/Y0GHO0v78ng=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=ef20YtA2/qa2HhGW1Y6xQBRNHW+QyS3IC68h/DFptkY1QSa2YcBpok2cncNgzRA+l VajqPjpKwq6jrwYYOd0YXIx7olPPDjsg+Kp7iEeWtrd4d9weCU1YqV8mP4Z0G9g8dZ 51IutSw4vt3wq05/J6dr7JX4y07Kz47z/GN8YwSA= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e9db8f8c8_7c023f966b0eb2bc56893b"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] =?utf-8?q?=5Bcose-issues=5D_Add_reference_to_definition_of?= =?utf-8?b?IOKAnHBlcmZlY3QgZm9yd2FyZCBzZWN1cml0eeKAnSAoIzM3KQ==?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:30:53 -0000 ----==_mimepart_5635e9db8f8c8_7c023f966b0eb2bc56893b Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Please add a citation to the definition of the term =E2=80=9Cperfect forw= ard security=E2=80=9D where you use it in Section 12.4 (Direct Key Agreem= ent). --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/37= ----==_mimepart_5635e9db8f8c8_7c023f966b0eb2bc56893b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Please add a citation to the definition of the term =E2=80=9Cperfect f= orward security=E2=80=9D where you use it in Section 12.4 (Direct Key Agr= eement).

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e9db8f8c8_7c023f966b0eb2bc56893b-- From nobody Sun Nov 1 02:31:15 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADF1C1B365A for ; Sun, 1 Nov 2015 02:31:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oFPWLnpi_Sdf for ; Sun, 1 Nov 2015 02:31:13 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext5.iad.github.net [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F7F71B365C for ; Sun, 1 Nov 2015 02:31:13 -0800 (PST) Date: Sun, 01 Nov 2015 02:31:12 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373872; bh=qT1muFunlI6HUAX8BjZ5SmfEuQAPDOiZDLAitSW6D2Y=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=ZP+rDt6SFuiOKFPew+9tdOUhfpdp/MSG2ogS14JugpkIFjxt2dtMapzUwcRVznMwa wgPALkFlgtAWiM4xB8HId2Sgi1FAKFaQlQNHf3rPY/eEm0pIJ0m+X7ZdHex82bYd/I khc9XHAb6OmnRb6S080UTj577DG7+moJNBnnhEKI= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635e9f0bff86_75a23f7e5f0f72c01180f2"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] =?utf-8?q?=5Bcose-issues=5D_Clarify_statement_about_sign_o?= =?utf-8?b?ZiDigJx54oCdIHZhbHVlcyAoIzM4KQ==?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:31:14 -0000 ----==_mimepart_5635e9f0bff86_75a23f7e5f0f72c01180f2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable The description of =E2=80=9Cy=E2=80=9D in Section 13 (Keys) contains: =E2= =80=9CFor the sign bit, the value is true if the value of y is positive.=E2= =80=9D I really have no idea what this means, or how to act on it as an = implementer. Please clarify. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/38= ----==_mimepart_5635e9f0bff86_75a23f7e5f0f72c01180f2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

The description of =E2=80=9Cy=E2=80=9D in Section 13 (Keys) contains: = =E2=80=9CFor the sign bit, the value is true if the value of y is positiv= e.=E2=80=9D I really have no idea what this means, or how to act on it a= s an implementer. Please clarify.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635e9f0bff86_75a23f7e5f0f72c01180f2-- From nobody Sun Nov 1 02:32:01 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 332CA1B3663 for ; Sun, 1 Nov 2015 02:32:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.908 X-Spam-Level: X-Spam-Status: No, score=-5.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LVta5SmlDZk2 for ; Sun, 1 Nov 2015 02:31:58 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext5.iad.github.net [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 98EDF1B3662 for ; Sun, 1 Nov 2015 02:31:58 -0800 (PST) Date: Sun, 01 Nov 2015 02:31:57 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446373917; bh=QBK5UfzSKGX/gwkPe2cAQdZOjMaMpfjlWZrFpXimZqU=; h=From:Reply-To:To:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=RnsY7UJUn44jTqZHqPs4rvpHbFG9hdVxhQVgB02tYcnGbB4Nq22EnsRCPJWiXgY/L e6BAVvVjgwpnlAQKw1/7mFATbR8HuhJThHEMYXEqJWKm0qAjlQtsfViISRbbf6cM8K xW3zLhNV6eDTAH4eDikA0v2b8l1TORNYTt86yfkY= From: Mike Jones To: cose-wg/cose-issues Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635ea1dded06_6dd13f966b0eb2bc275299"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: [COSE] [cose-issues] Require publicly visible stable specifications for IANA registrations (#39) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:32:00 -0000 ----==_mimepart_5635ea1dded06_6dd13f966b0eb2bc275299 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable The COSE Header Parameter Registry in Section 15.2 describes the =E2=80=9C= specification=E2=80=9D registration parameter as =E2=80=9CThis contains a= pointer to the specification defining the header field (where public).=E2= =80=9D It=E2=80=99s not reasonable for people to be able reserve values = in our registries without providing a publicly visible stable specificati= on defining the meaning of the value. Please delete the =E2=80=9C(where = public)=E2=80=9D and similar phrases such as =E2=80=9C(if publicly availa= ble)=E2=80=9D and =E2=80=9Cif one exists=E2=80=9D from all the registries= . --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/39= ----==_mimepart_5635ea1dded06_6dd13f966b0eb2bc275299 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

The COSE Header Parameter Registry in Section 15.2 describes the =E2=80= =9Cspecification=E2=80=9D registration parameter as =E2=80=9CThis contain= s a pointer to the specification defining the header field (where public)= .=E2=80=9D It=E2=80=99s not reasonable for people to be able reserve val= ues in our registries without providing a publicly visible stable specifi= cation defining the meaning of the value. Please delete the =E2=80=9C(wh= ere public)=E2=80=9D and similar phrases such as =E2=80=9C(if publicly av= ailable)=E2=80=9D and =E2=80=9Cif one exists=E2=80=9D from all the regist= ries.

&m= dash;
Reply to this email directly or view it on GitHub.3D""

----==_mimepart_5635ea1dded06_6dd13f966b0eb2bc275299-- From nobody Sun Nov 1 02:39:57 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B3721B36CC for ; Sun, 1 Nov 2015 02:39:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w1WRjZcyIqHA for ; Sun, 1 Nov 2015 02:39:52 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0126.outbound.protection.outlook.com [65.55.169.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 676551B36CB for ; Sun, 1 Nov 2015 02:39:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=DyLNAqKytSBqljrnIzcFJW0BtROFapn7V5BGMQ5o/1A=; b=hJ4PDdRFlzNrHD3DmPFUpcrVHZ5Myk/XPjVf9RUn+ClxoHDhfZeySK6idSR5Uz7MZKfnZqsymXEERMERNAEAFuP80kL5HUuCyfBRwQ+UogDPPFuVG7WLUwCau7mUELK182cotiWc70bWTa4M7max7RFs3CpPPL6+kNh/HrxFWKQ= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 10:39:49 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 10:39:49 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Make_=93recipients=94_field_optional_(#10)?= Thread-Index: AdEUkaBKm6xcTy/iREebS2oafuvOfQ== Date: Sun, 1 Nov 2015 10:39:47 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB442; 5:bLm+DWz8bP6a2R9C1ISTEIUel10EroBqy8ll4+ZQv27dEuxq6aSBDLDq/ZnXtNUwa448Wv9a08H+tTnoseMRmBmagqzIcgunTPtHXbg6EZ70KmjRxYtmkfqMCmSopaHHArCDViwkc33KdcXJTPVJgA==; 24:v27+5/VZ9q6rYolxIqHWMTWZRu7yHqL9Q87JIAIizc+OROLsyyyxoSXO33nlpOnVag7mZ9IcN/kgG2pxJRfLKglQbbHXXz1/RS3iOXPJL5M=; 20:q589IQ+X1yZ93fqQ1BWuVkOf9DrdolWYzxu07kjv6tdNd8vZT9RONexqLpjKv8ikSs/Bv2y92RoHZv61KrB6wA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB442; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(520078)(5005006)(8121501046)(10201501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB442; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB442; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(189002)(199003)(2900100001)(76576001)(122556002)(15975445007)(5003600100002)(16236675004)(5001960100002)(40100003)(33656002)(86612001)(19300405004)(105586002)(86362001)(101416001)(5008740100001)(74316001)(189998001)(10090500001)(19580395003)(110136002)(107886002)(19625215002)(5002640100001)(77096005)(99286002)(5005710100001)(81156007)(66066001)(5001920100001)(5007970100001)(50986999)(229853001)(97736004)(19617315012)(106356001)(10290500002)(450100001)(8990500004)(102836002)(11100500001)(87936001)(10400500002)(54356999)(5004730100002)(92566002)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB442; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB442ACA519E21C8077C83232F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 10:39:47.6097 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB442 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Make_=93recipients=94_f?= =?windows-1252?q?ield_optional_=28=2310=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:39:55 -0000 --_000_BY2PR03MB442ACA519E21C8077C83232F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable This was a size optimization and simplification proposed in the presentatio= n =93ACE/CORE requirements on COSE=94 https://www.ietf.org/proceedings/93/s= lides/slides-93-cose-6.pdf on slide 7, and illustrated by additional slides= . I=92ll note that draft -06 is already part way down this road by defining= a Direct Encryption mode in Section 12.1. Also define Direct Signature and= Direct HMAC data structures in which no =93recipients=94 field is present,= and that will go a long way towards making the simple cases simpler (and s= maller). Note that this is issue is related to the =93Allow single wrapping for symm= etric key encryption + signature=94 requirement from ACE/CORE on the same s= lide and the =93include a key management structure only when needed=94 issu= e on slide 6 of the =93COSE Key Issues And Choices=94 presentation at https= ://www.ietf.org/proceedings/93/slides/slides-93-cose-7.pdf. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/10 --_000_BY2PR03MB442ACA519E21C8077C83232F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

This was a size optimization an= d simplification proposed in the presentation =93ACE/CORE requirements on C= OSE=94 https://www.ietf.org/proceedings/93/slides/slides-93-cose-6.pdf on sli= de 7, and illustrated by additional slides. I=92ll note that draft -06 is a= lready part way down this road by defining a Direct Encryption mode in Section 12.1. Also define Direct Signature and= Direct HMAC data structures in which no =93recipients=94 field is present,= and that will go a long way towards making the simple cases simpler (and s= maller).

Note that this is issue is rela= ted to the =93Allow single wrapping for symmetric key encryption + sign= ature=94 requirement from ACE/CORE on the same slide and the =93include a key management structure only when needed=94 issue on slide 6 of the =93= COSE Key Issues And Choices=94 presentation at https://www.ietf.org/proceedings/93/slides/slides-93-cose-7.pdf.<= /o:p>

View it on GitHub at https://github.com/cose-wg/cose= -issues/issues/10

--_000_BY2PR03MB442ACA519E21C8077C83232F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 02:41:39 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D2071B36DD for ; Sun, 1 Nov 2015 02:41:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vu6zDzuiPJTp for ; Sun, 1 Nov 2015 02:41:37 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0126.outbound.protection.outlook.com [65.55.169.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 244FC1B36DC for ; Sun, 1 Nov 2015 02:41:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=M0qs6fisj11Qj96gVweefIrjOxrihn84lWXcJqEmrZQ=; b=UR7MOEtgAzOFStc0dPihO1fN9845LW7ME1u4/aHeaq/OqqVHbA+224mN/pNuxmzRZbP0+gXJ8ZiMvyb9UevNZhcANjUdMsYjOmsn55ZYjPFGovs351ES/FIaZb2WFEcTTIQ+bu5MrnPLiv4p2KmqgZXTw7YBxsme0MxFcG3/F9Y= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 10:41:34 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 10:41:34 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Retain_text_marked_=93Text_from_here_to_st?= =?Windows-1252?Q?art_of_next_section_to_be_removed=94_(#11)?= Thread-Index: AdEUkd/+HT2sTgc8TX+cl9tJTgxqaQ== Date: Sun, 1 Nov 2015 10:41:33 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB442; 5:7hNAPKc8mLOQ+LqUjoTbekTaC07xZ4BgbBJPR05v8uF2KUC8tWb697Merq6tUWKKb7pJ11D4IiuPUL3xsOd3FXroA4zhJGJuMjqI4oirGBg0oQMNG2gxf0y/OxScyCyJTKi/YzZHZgVH869g9rGfnA==; 24:JdbLseImYjO7wD2xvJJxL1MWZx8SA7Y6Z9jotyTYEE9VfKZjrQJfY1sfAYZJ8Jkuae0aOwMbFyBQT98uK/ff2E89n9naCq5aMIPzEu+X4gk=; 20:q5bDgdXYW8qIVPnHangfqrBObxnoH3m56os/7dVnYZ6WvfdoxAfOZ/QBjxZQdPWVUb8QmQ6c/8gJsXrgBFCU8Q== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB442; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(520078)(5005006)(8121501046)(10201501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB442; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB442; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(189002)(229853001)(97736004)(5007970100001)(50986999)(106356001)(81156007)(5005710100001)(99286002)(77096005)(66066001)(92566002)(54356999)(5004730100002)(450100001)(10290500002)(102836002)(87936001)(10400500002)(11100500001)(8990500004)(5001960100002)(40100003)(5003600100002)(16236675004)(33656002)(86612001)(76576001)(122556002)(2900100001)(15975445007)(74316001)(189998001)(107886002)(110136002)(19625215002)(5002640100001)(19580395003)(10090500001)(19300405004)(86362001)(5008740100001)(101416001)(105586002)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB442; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB442C54FFC903E1FD014E875F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 10:41:33.9399 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB442 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Retain_text_marked_=93T?= =?windows-1252?q?ext_from_here_to_start_of_next_section_to_be_removed=94_?= =?windows-1252?q?=28=2311=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:41:38 -0000 --_000_BY2PR03MB442C54FFC903E1FD014E875F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable What follows text marked =93Text from here to start of next section to be r= emoved=94 is typically a BNF-like specification of what the text in the sec= tion specified. This is valuable reference material that aids in the unders= tanding of the specification. Rather than removing this text, retain it, an= d preface it with appropriate introductory text such as =93The following de= scribes the syntax of the data structures defined by this section:=94. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/11 --_000_BY2PR03MB442C54FFC903E1FD014E875F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

What follow= s text marked =93Text from here to start of next section to be removed=94 i= s typically a BNF-like specification of what the text in the section specified. This is valuable reference material that aids in the understand= ing of the specification. Rather than removing this text, retain it, and pr= eface it with appropriate introductory text such as =93The following descri= bes the syntax of the data structures defined by this section:=94.

 

View it on GitHub at https://github.com/cose-wg/cose= -issues/issues/11

--_000_BY2PR03MB442C54FFC903E1FD014E875F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 02:43:32 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC85D1B36EA for ; Sun, 1 Nov 2015 02:43:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4K6xJii82Z-7 for ; Sun, 1 Nov 2015 02:43:27 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0130.outbound.protection.outlook.com [65.55.169.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 248041B7942 for ; Sun, 1 Nov 2015 02:43:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=OEpYCSbYXg0lKi775e1GrUD5o62UYaj/mQNfuZMb07o=; b=YAwlllYX1Z6NhYIz9i2eBwiM5gDDXgta46qL3WSwlTZLJh4NHPFYhYzfYJQAmx5HK7i/nVp2TG5cEOzZ0YEP0iT/zF9f6WBhiFxF80Pin+dOJNR09pJ9e/mEzqtilPxNq2CgZKgxc/O0942mHVsBHSfNE1xzK8Bxbpvk2mTrHkw= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 10:43:22 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 10:43:22 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Remove_=93counter_signature=94_header_para?= =?Windows-1252?Q?meter_(#12)?= Thread-Index: AdEUkiBkY59YTgynSA25FCa8v9vTxg== Date: Sun, 1 Nov 2015 10:43:21 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB442; 5:dqqytZnEQy6D0iUKFGAq5EVMdgRQdWgP1LgZkYc9+QqQIh4avQLo2sVKYOZVEugbPf4jENk6xel5vcVVkpRJUPkZebGwZKmi0uYNnXyxCX7TqtBopo24RZTkqJmU7+3e/Kx3U71nxYISPJZIe+FQ8A==; 24:9jd9YPjUs9vfyCPk2M06nBiON7zmc/uii5OZLsVkgK24hy+vJB6I5d4vDlP5FmOAqxh5lsPlAaOIePLgXwgXmfGUjbCfNKQ1oEd0Heqp8lg=; 20:ByiYfUPdnocvEQp6kQuLKVvOQ9iRIV5JE+qq9TCr1o2CLnBxegCHwGfe5mn24sAY4e0PE7Xj8tjL2vWBqMuuCg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB442; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(520078)(5005006)(8121501046)(10201501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB442; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB442; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(199003)(189002)(229853001)(97736004)(5007970100001)(50986999)(19617315012)(106356001)(81156007)(5005710100001)(99286002)(77096005)(66066001)(92566002)(54356999)(5004730100002)(450100001)(10290500002)(102836002)(87936001)(10400500002)(11100500001)(8990500004)(5001960100002)(40100003)(5003600100002)(16236675004)(33656002)(86612001)(76576001)(122556002)(2900100001)(15975445007)(74316001)(189998001)(107886002)(110136002)(19625215002)(5002640100001)(19580395003)(10090500001)(19300405004)(86362001)(5008740100001)(101416001)(105586002)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB442; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB44277F8995527CAB9B0B927F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 10:43:21.8688 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB442 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Remove_=93counter_signa?= =?windows-1252?q?ture=94_header_parameter_=28=2312=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:43:28 -0000 --_000_BY2PR03MB44277F8995527CAB9B0B927F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable The =93counter signature=94 header parameter in Section 3.1 seems like an u= nnecessary feature in a spec that should aspire to be minimal and light-wei= ght. If the spec needs to talk about counter-signatures at all, it should d= o so by recommending that applications take the original COSE object and us= e it as a payload in another one to implement a counter-signature. I haven= =92t seen a common use case for this discussed on the list, and it certainl= y doesn=92t seem to satisfy the 80/20 rule for whether it merits inclusion.= Section 4.3 (Counter Signatures) also either needs to be deleted as part o= f this edit or modified to say that you compute a counter signature by usin= g a COSE object as a signature payload. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/12 --_000_BY2PR03MB44277F8995527CAB9B0B927F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

The =93coun= ter signature=94 header parameter in Section 3.1 seems like an unnecessary = feature in a spec that should aspire to be minimal and light-weight. If the spec needs to talk about counter-signatures at all, it should do so= by recommending that applications take the original COSE object and use it= as a payload in another one to implement a counter-signature. I haven=92t = seen a common use case for this discussed on the list, and it certainly doesn=92t seem to satisfy the 80/20 rule for= whether it merits inclusion. Section 4.3 (Counter Signatures) also either = needs to be deleted as part of this edit or modified to say that you comput= e a counter signature by using a COSE object as a signature payload.

 

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/12

 

--_000_BY2PR03MB44277F8995527CAB9B0B927F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 02:45:08 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F9E41B7961 for ; Sun, 1 Nov 2015 02:45:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2KbzWGOxANuF for ; Sun, 1 Nov 2015 02:45:06 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0136.outbound.protection.outlook.com [65.55.169.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B32CC1B795E for ; Sun, 1 Nov 2015 02:45:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=PYSy1SyzBB9gVbaY3CSsntU45cCowJTwypqvbV40DuE=; b=a6SzAO+nKscFXnJF+JpQ3TGEISyVuO/B64fbPKvvg+Xgn4JQIgddnF8Wl/IAuKkibTxhX+cpozVLk3d10UwhF/OCg35WayiMnSeZC49sakITG6z2pvDqfQBqNAbsm0vFOugx+CCE3jIEDOFnhLWjcPmD0UNXWNE8eE7HlAMPzbY= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 10:45:03 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 10:45:03 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Move_=93creation_time=94_value_to_the_payl?= =?Windows-1252?Q?oad_(#13)?= Thread-Index: AdEUklzT2ypN2+94S1iyObNNK4fu2A== Date: Sun, 1 Nov 2015 10:45:03 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB442; 5:77xDC07dyyYjkVHlD2tkiqXPbzKc2TCiSGSBQPvxADVvyfYfjkp3MyfxGFRiydiGn7VIftwRdLT5XBsBjXgunO/vH1L+GRroOC5CuxMFBhBu9Z28g2A6Ste+eFXHO0hOiEmn6yQwMlBylDid7BQ5ng==; 24:kEDI02DJ1ci6kUl4j0+JTNX2eeM3NBtpQn931HVfR+DNy1ofZwGPfX6emoW12fQ3WvtpcYMtmGNG8gKdfLghnWoU2O/tDwQWDdcVo1R508w=; 20:SDBk83QLfwvSBqhklQWJopnqy/WBBYp6S1cX3CSjrKiIwwP2nwKjIGSmpeMTV+7AyvI3FZbnZlpSNkAqaQg+Yw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB442; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(520078)(5005006)(8121501046)(10201501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB442; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB442; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(199003)(189002)(229853001)(97736004)(5007970100001)(50986999)(19617315012)(106356001)(81156007)(5005710100001)(99286002)(77096005)(66066001)(92566002)(54356999)(5004730100002)(450100001)(10290500002)(102836002)(87936001)(10400500002)(11100500001)(8990500004)(5001960100002)(40100003)(5003600100002)(16236675004)(33656002)(86612001)(76576001)(122556002)(2900100001)(15975445007)(74316001)(189998001)(107886002)(110136002)(19625215002)(5002640100001)(19580395003)(10090500001)(19300405004)(86362001)(5008740100001)(101416001)(105586002)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB442; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB44246CFC0FCBD3B62309AA4F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 10:45:03.3270 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB442 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Move_=93creation_time?= =?windows-1252?q?=94_value_to_the_payload_=28=2313=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:45:07 -0000 --_000_BY2PR03MB44246CFC0FCBD3B62309AA4F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable The =93creation time=94 header parameter in Section 3.1 is one of several a= ttributes that are being proposed as a header parameter, whereas it is actu= ally unrelated to the cryptographic operations being performed and should b= e part of the application-defined payload, if needed. If the working group = believes that having common definitions for some payload fields such as =93= creation time=94 would be a good idea, they should be defined in a differen= t, related specification. Note that this payload content specification would fill the same role for C= BOR payloads that the JSON Web Token (JWT) [RFC 7519] specification fills f= or JSON payloads. Cryptographic parameters belong in the COSE spec. Non-cry= ptographic application-level parameters, such as this one, belong in this c= ompanion specification, if anywhere. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/13 --_000_BY2PR03MB44246CFC0FCBD3B62309AA4F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

The =93creation time=94 header = parameter in Section 3.1 is one of several attributes that are being propos= ed as a header parameter, whereas it is actually unrelated to the cryptographic operations being performed and should be part of the app= lication-defined payload, if needed. If the working group believes that hav= ing common definitions for some payload fields such as =93creation time=94 = would be a good idea, they should be defined in a different, related specification.

Note that this payload content = specification would fill the same role for CBOR payloads that the JSON Web = Token (JWT) [RFC 7519] specification fills for JSON payloads. Cryptographic parameters belong in the COSE spec. Non-cryptographic applic= ation-level parameters, such as this one, belong in this companion specific= ation, if anywhere.

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/13

 

--_000_BY2PR03MB44246CFC0FCBD3B62309AA4F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 02:52:15 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7FAD1B799C for ; Sun, 1 Nov 2015 02:52:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E9nBtGCB6-gh for ; Sun, 1 Nov 2015 02:52:12 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0123.outbound.protection.outlook.com [207.46.100.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 289961B79BD for ; Sun, 1 Nov 2015 02:52:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=OGrqXCBMQRrxDvSK6gmQLiLAAX79H6XiE2apzZARLcQ=; b=X0GkbWvpZbatBXPhdvFv++qiySVHVMlflDi2vqX4cxHczvZKdwbI3tFS06BgqVjACLy57QQXfYRRxA9dYsUhvZwyScj5ZJrq623YDk/iUdd9NQMxvgmJFzR4B1iAuEiuwhI3uglMmOrQm8Ogpgyn5CnaAlbvmowiUMLCC2P/R0I= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB441.namprd03.prod.outlook.com (10.141.141.142) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 10:52:09 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 10:52:09 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Change_=93SHOULD=94_to_=93MUST=94_in_state?= =?Windows-1252?Q?ment_about_parsers_rejecting_duplicate_labels_(#20)?= Thread-Index: AdEUk1rxANpRbEEUQtaF0LVW7SatcA== Date: Sun, 1 Nov 2015 10:52:09 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB441; 5:pkpgGGYjXkQKzIBREV1nGWjcoRhO3wE134piUXG0d9q3EYoAaay9eobquRDBEVXfrnL3cdOuowvrJRj0DVKmOr2ghYxKZojW5odRVntZ5w44Bj20m66qOHf7kM7kOcSzxUvnFQ06l0KUDNcw53lf6A==; 24:TmBsArlM6NrOdZ7i0EvOadiYZ487whNNPtHdkzo/MpcQafO94L+24QsrtsbXm39J05X5Hb/SBPARdPZaLNrRP1LgizOFqcNqheM2hVSHgTQ=; 20:ErCuxcG8LkEWKmq5UBXg4pCkf3yARIlBA6w+q++h42qjczPLXAeeRozcXJmehQdZlewJ2aDjIPfHUS7bV/FSYQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB441; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(8121501046)(520078)(5005006)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB441; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB441; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(189002)(199003)(54356999)(5005710100001)(19580395003)(92566002)(86612001)(5002640100001)(50986999)(87936001)(86362001)(5001960100002)(74316001)(105586002)(189998001)(107886002)(5003600100002)(229853001)(106356001)(5008740100001)(11100500001)(122556002)(110136002)(10400500002)(10290500002)(40100003)(8990500004)(5007970100001)(5004730100002)(5001920100001)(33656002)(102836002)(15975445007)(10090500001)(99286002)(97736004)(101416001)(77096005)(450100001)(16236675004)(81156007)(66066001)(19625215002)(19617315012)(19300405004)(2900100001)(76576001)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB441; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB442D91D043A6FB90C98741FF52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 10:52:09.6321 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB441 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Change_=93SHOULD=94_to_?= =?windows-1252?q?=93MUST=94_in_statement_about_parsers_rejecting_duplicat?= =?windows-1252?q?e_labels_=28=2320=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:52:13 -0000 --_000_BY2PR03MB442D91D043A6FB90C98741FF52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Please change the =93SHOULD=94 to =93MUST=94 in this sentence in Section 14= (CBOR Encoder Restrictions): =93All parsers used SHOULD fail on both parsi= ng and generation if the same label is used twice as a key for the same map= .=94 Allowing duplicate keys would result in interop and security problems. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/20 --_000_BY2PR03MB442D91D043A6FB90C98741FF52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

Please chan= ge the =93SHOULD=94 to =93MUST=94 in this sentence in Section 14 (CBOR Enco= der Restrictions): =93All parsers used SHOULD fail on both parsing and generation if the same label is used twice as a key for the same map.=94 A= llowing duplicate keys would result in interop and security problems.

 

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/20

 

--_000_BY2PR03MB442D91D043A6FB90C98741FF52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 02:54:36 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C9FE1B79E3 for ; Sun, 1 Nov 2015 02:54:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QL2khzSJ0LFl for ; Sun, 1 Nov 2015 02:54:33 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0123.outbound.protection.outlook.com [207.46.100.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DF801B79E1 for ; Sun, 1 Nov 2015 02:54:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=i/+LsiSnp3DspU1qn5tdA8fUOi+ebg27LgTWz19Gmgs=; b=B4Of8MYviOV1FVCwF7mjPySPDoaX0XGj2V2TWbp8PHxlUx69Sfmx9epcQcHd62kzRrhLNSMX1TEIekzSBTpQwxbvGTa1bwKMX2B1OM+t6IlHEZJgzAStWR25oMkEdZY9gg84d49mOexb53zTreBH1bdCcKiQYYofFA01u6N9hq8= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB441.namprd03.prod.outlook.com (10.141.141.142) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 10:54:30 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 10:54:30 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Restore_RSA-PSS_and_the_=93RSA=94_key_type?= =?Windows-1252?Q?_(#21)?= Thread-Index: AdEUk661VqOLRDPYTvmLelVSkvrAxA== Date: Sun, 1 Nov 2015 10:54:30 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB441; 5:arj9DWceOUpd/3X45LkYeyGGCl0jkic6WfykpaEEDZfGrxUmgDZlAXHAj6JdnSj+ui2r57F7j0ze9p1MIxsnKVKOPY7E46QahcCEjKKcU0R9JSfxGTqMUfgUTONJkU25FiRoaVPW2Uz4/MP75nCDDg==; 24:EDuFISLVZBwwSNkyrJWe/e7mibSHplEJe+8AQCf3+8YKxqJ4INEW9pu/AuroO1/wEOv9WhH8uxtg05oBJfu+CrBaIAjEN2I1kI6I56vDgcY=; 20:WDu4ZvDkzrBgxux6qEeKUTFNTIvNzrkQtD9CVAMndJKJ4tuKvGWTdM01eSCphLpXWhyfgZRAR3DLS/NV95L75Q== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB441; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(8121501046)(520078)(5005006)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB441; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB441; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(199003)(189002)(450100001)(77096005)(101416001)(66066001)(19625215002)(16236675004)(81156007)(97736004)(33656002)(102836002)(8990500004)(5007970100001)(5004730100002)(15975445007)(99286002)(10090500001)(2900100001)(76576001)(19300405004)(19617315012)(92566002)(86612001)(54356999)(5005710100001)(19580395003)(86362001)(50986999)(5002640100001)(87936001)(122556002)(110136002)(5008740100001)(11100500001)(40100003)(10400500002)(10290500002)(189998001)(107886002)(74316001)(5001960100002)(105586002)(229853001)(106356001)(5003600100002)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB441; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB44206F0435C984D92F1A652F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 10:54:30.2724 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB441 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Restore_RSA-PSS_and_the?= =?windows-1252?q?_=93RSA=94_key_type_=28=2321=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:54:34 -0000 --_000_BY2PR03MB44206F0435C984D92F1A652F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable RSA cryptography remains the mostly commonly used in many applications. Ple= ase restore the descriptions of the RSA-PSS algorithm and the =93RSA=94 key= type. Note that if this isn=92t done, you should say that there are three key typ= e values defined in Table 18, not four. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/21 --_000_BY2PR03MB44206F0435C984D92F1A652F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

RSA cryptography remains the mo= stly commonly used in many applications. Please restore the descriptions of= the RSA-PSS algorithm and the =93RSA=94 key type.

Note that if this isn=92t done,= you should say that there are three key type values defined in Table 18, n= ot four.

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/21

 

--_000_BY2PR03MB44206F0435C984D92F1A652F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 02:56:25 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32D971B798C for ; Sun, 1 Nov 2015 02:56:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RRNvqt9CJN55 for ; Sun, 1 Nov 2015 02:56:21 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0756.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::756]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68C611B79F9 for ; Sun, 1 Nov 2015 02:56:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=TkcHM1jBA2E6oxM6AY2q7hgLY/SI/VxwGulIGh/DqC4=; b=gQvnUiTFc4HgF7PgJFJut8ssD49HHetIpRBtaEDQ1YB1/RjPgrCsWPSIFnALpua/9gsXbiwOqyYhA17XotEIUr2rmoH/9aQdKKvGlXDU2wWJb4SrJaMRQSUrOvSf0bgRT74xQhXHMs9akRuQ2wUg3mbvI0rgOumPkK/w4rsDoTw= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 10:56:16 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 10:56:16 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: [cose-issues] Restore compression header parameter (#22) Thread-Index: AdEUk+3eVzsL2VEHSOCYcELSNzfe6A== Date: Sun, 1 Nov 2015 10:56:16 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:RgFPv1m1B9PIGvadf95vjyeM8U9keatGRmjFZv1NGhxdZ5jBJJZdqa+N1+1K9788C3QO+NKSSh/2c1sOWlaV9V7gMB0ae3atzmMotp2ErpEAdH3m0KkF9UKv7y/eXlmi6knQ0+Yedw7uHDY/W0hXiQ==; 24:qPLn8RVZd8NG9o2Bxqo7+rJZeSg7/fH6M75XVgu4OO8Am8Io86DFkYmaAY8NSY5Dx7blK5doxuQ/sJeaMYrSRhPPwvQ5ZoG0qOv/VvZSboc=; 20:D7mSkeP1gNHyeCp0VVSj21zbNz5KYBj8CFtJjcs8t2omH30p0PI4QV2bCQCA85uwerYa93+q1zzcD2nX0VXrCA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(8121501046)(520078)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(189002)(199003)(19609705001)(19617315012)(66066001)(5008740100001)(122556002)(86612001)(105586002)(86362001)(5007970100001)(5002640100001)(15975445007)(19625215002)(40100003)(19300405004)(77096005)(87936001)(10090500001)(229853001)(2900100001)(99286002)(450100001)(107886002)(5004730100002)(11100500001)(19580395003)(74316001)(10290500002)(76576001)(106356001)(33656002)(54356999)(5001960100002)(16236675004)(189998001)(97736004)(10400500002)(5003600100002)(81156007)(110136002)(5005710100001)(101416001)(92566002)(8990500004)(102836002)(50986999)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB442588988CE277DE3510D44F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 10:56:16.0873 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: [COSE] [cose-issues] Restore compression header parameter (#22) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 10:56:24 -0000 --_000_BY2PR03MB442588988CE277DE3510D44F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Please restore the "zip" header parameter definition. Having a standard way= to compress the plaintext before encryption is an important capability. I = didn't see a compelling motivation for its removal when it was briefly disc= ussed on the mailing list. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/22 --_000_BY2PR03MB442588988CE277DE3510D44F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Please rest= ore the “zip” header parameter definition. Having a standard wa= y to compress the plaintext before encryption is an important capability. I didn’t see a compelling motivation for its removal when it was bri= efly discussed on the mailing list.

 

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/22

 

--_000_BY2PR03MB442588988CE277DE3510D44F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 03:00:56 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D87CD1B7A3D for ; Sun, 1 Nov 2015 03:00:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S3FO1N-HwXUp for ; Sun, 1 Nov 2015 03:00:53 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0771.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::771]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3C031B7A3C for ; Sun, 1 Nov 2015 03:00:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=LehcYpm06U8ThlzyHKh7/IC8OhAUInHN831BnoTAOTA=; b=SvPgP7jyS5h0dczL464CR8Ty8GVP1VqEukMiBWv2DCYRP2RdqnDyIQ3oSRRVTcShGw/Agxkaf5y30pkqtfOr3drFbR8Wx36w8I0r3bgnsBuvxPT3agB54C0urtDj7jMcruzwqzyBVDeJokR7O8MvQ4WwF9W/3uHJqqNusJc8Tx8= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 11:00:32 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 11:00:32 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Restore_=93use=94_COSE_key_parameter_descr?= =?Windows-1252?Q?iption_(#23)?= Thread-Index: AdEUlISfnoe00JqeSwS9r9oAjbMuvw== Date: Sun, 1 Nov 2015 11:00:32 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:309qe+VIrkbG3Cc20inBZEvqY+Cj/PumHfGwGkcqyTjJyYy+Gsuw9sI4/tCOlWIiss56FNkJZ8QtQZyHNvuaZbfscjDeAMa0McXL8hgutFHsP6u2L86dNGk0pguKrZ2ip3B8lqdxrG5upZre3MSekQ==; 24:2OzfMW661QUeTzxmtWBQ+vF4wRxdEi55vqQtvDkqjM0lO2SzRWTdr5lDyqk+yRlFA92myV64DCJWQRGYVHerf/fggci252iB4oHD9wB1Rvs=; 20:iUS7cnexV+YTVe6ctZmhs1aXFo9yxfw+PCDeuYtM9oEL1N21ve8dluEeJ/CaYgb9dOts29Xs4sk67SeV7QnXaw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(8121501046)(520078)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(189002)(199003)(19617315012)(66066001)(5008740100001)(122556002)(86612001)(105586002)(86362001)(5007970100001)(5002640100001)(15975445007)(19625215002)(40100003)(19300405004)(77096005)(87936001)(10090500001)(229853001)(2900100001)(99286002)(450100001)(107886002)(5004730100002)(11100500001)(19580395003)(74316001)(10290500002)(76576001)(106356001)(33656002)(54356999)(5001960100002)(16236675004)(189998001)(97736004)(10400500002)(5003600100002)(81156007)(110136002)(5005710100001)(101416001)(92566002)(8990500004)(102836002)(50986999)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB4426DF09F3838787288CAA2F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 11:00:32.6552 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Restore_=93use=94_COSE_?= =?windows-1252?q?key_parameter_description_=28=2323=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 11:00:55 -0000 --_000_BY2PR03MB4426DF09F3838787288CAA2F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable When characterizing key usage for public keys, the two-valued =93use=94 par= ameter does the job. (The two values are =93sign=94 and =93encrypt=94.) Res= toring it would give COSE functional parity with XML DSIG, JOSE, and the We= bCrypto API in this regard. The more complicated and array-valued key_ops i= s only needed when describing private key usage, which many applications ne= ver do. This issue was previously described on slide 14 of the =93COSE Key Issues A= nd Choices=94 presentation at https://www.ietf.org/proceedings/93/slides/sl= ides-93-cose-7.pdf. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/23 --_000_BY2PR03MB4426DF09F3838787288CAA2F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

When characterizing key usage f= or public keys, the two-valued =93use=94 parameter does the job. (The two v= alues are =93sign=94 and =93encrypt=94.) Restoring it would give COSE functional parity with XML DSIG, JOSE, and the WebCrypto API in this regar= d. The more complicated and array-valued key_ops is only needed when descri= bing private key usage, which many applications never do.=

This issue was previously descr= ibed on slide 14 of the =93COSE Key Issues And Choices=94 presentation at https://www.ietf.org/proceedings/93/slides/slides-93-cose-7.pdf.

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/23

 

--_000_BY2PR03MB4426DF09F3838787288CAA2F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 03:03:55 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87C021B7A61 for ; Sun, 1 Nov 2015 03:03:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TeygcLk4gIS8 for ; Sun, 1 Nov 2015 03:03:51 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0703.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:703]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F00D81B7A5C for ; Sun, 1 Nov 2015 03:03:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=OzUG9JUYNtQ+MasUPnvxSTTrmadpdjmo65xeJDEmDHY=; b=mPgA7HugIOPKS15Vm8nl2JXHKW4/r8W4JOs4HPw41ltef1O3QHGvfGMbQ/XzTFYR5P5UhtlvtYkyaMDCjJyAweXi4ufsjXZWy8KpEjvWrEtlxKz4pvDnxoSjognF2Oiv1hsSNa77eUgIJYTcrGevSDiJl8WFAbprl0IrzuQXGEU= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 11:03:31 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 11:03:31 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Wording_=93binding_of_identity=94_confusin?= =?Windows-1252?Q?g_(#30)?= Thread-Index: AdEUlPEQtyQjSsBMQxOftVf371kc6g== Date: Sun, 1 Nov 2015 11:03:31 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:5apBihHE3pXyXznt5TZ68/9Ms+CYfCkExjrTJib291t6nar6c7JReXrwEz0yIZxYpQLpFr0jWWpE9ylYNzwkBlydMbCG2bNUkXi33nq5F78zMweXbu+F+3mgTp8OFfd0YlvPcTGO3FSkSZ7YvCtzMQ==; 24:+ylbPxXMnlBqv2+r0BxtgLOFH/95hO8lKEg15tFeqHrzAd9OLN7MBsNzHswVKvyqgjBBGN8QTsvvoAqr9IUcRkGA2OJIDTkfloNvuL5C8R8=; 20:ZcQg28bO0Inq4HNK6AhaduQL9rGy8hXuBCmmA4A4U1QEErSFcLzo5s9eeV4EducHBex2T6o8Ujs+RwO4lXYoDQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(8121501046)(520078)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(189002)(199003)(19617315012)(66066001)(5008740100001)(122556002)(86612001)(105586002)(86362001)(5007970100001)(5002640100001)(15975445007)(19625215002)(40100003)(19300405004)(77096005)(87936001)(10090500001)(229853001)(2900100001)(99286002)(450100001)(107886002)(5004730100002)(11100500001)(19580395003)(74316001)(10290500002)(76576001)(106356001)(33656002)(54356999)(5001960100002)(16236675004)(189998001)(97736004)(10400500002)(5003600100002)(81156007)(110136002)(5005710100001)(101416001)(92566002)(8990500004)(102836002)(50986999)(491001)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB442DDEB1BA94B7A870985C9F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 11:03:31.0805 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Wording_=93binding_of_i?= =?windows-1252?q?dentity=94_confusing_=28=2330=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 11:03:54 -0000 --_000_BY2PR03MB442DDEB1BA94B7A870985C9F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable This sentence in Section 6 (MAC objects) is confusing, since it introduces = the term =93identity=94 without defining it: =93(The binding of identity as= sumes that there are only two parties involved and you did not send the mes= sage yourself.)=94. I would reword this to eliminate this terminology. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/30 --_000_BY2PR03MB442DDEB1BA94B7A870985C9F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

This senten= ce in Section 6 (MAC objects) is confusing, since it introduces the term = =93identity=94 without defining it: =93(The binding of identity assumes that there are only two parties involved and you did not send the message = yourself.)=94. I would reword this to eliminate this terminology.

 

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/30

 

--_000_BY2PR03MB442DDEB1BA94B7A870985C9F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 03:06:01 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE8521B7A7C for ; Sun, 1 Nov 2015 03:06:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CmIBh91owagE for ; Sun, 1 Nov 2015 03:05:59 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0711.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:711]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C982E1B7A79 for ; Sun, 1 Nov 2015 03:05:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=X6hfxgn0Vp6/sUovIlZg+N7Gn+7MusaoyFVjshdiMno=; b=FwSzEG8uCh2p8qG0DYeswuYJ4StlGgB2Nm3A5kBEO3AVqrOBNjwtFqmQO/3gENDdorZ0lYTdRqhIvNizATU7FVz/43e32lcT0HA8q9qn6cEDMQW08/IXZRw38xOSViSG8sofOczuHNNdsZZ6S3fWHSGNNlYAoO2u57Wz0Z6KHoQ= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 11:05:38 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 11:05:38 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Consider_moving_the_description_of_=93sign?= =?Windows-1252?Q?ature_with_message_recovery=94_to_a_non-normative_append?= =?Windows-1252?Q?ix_(#31)?= Thread-Index: AdEUlTzj4KdKI+oRR2GDDO29yQomRw== Date: Sun, 1 Nov 2015 11:05:38 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:orD/MOZoJhn4/QhrXcZdlu02FUgG7Lj4PfseR6iSMpiSAV4sFFpMqXrBpJLI68m33m9i/F4WUQgfmAO08wYYLgmHNOwAXauiDia1TGgKapI98vm7F9e3KaL3wDZHidmRTXCfeiNQx1TI8NsquvXdbQ==; 24:qvxMB81weL2lqX+wsNyWH8T++JpwSXabdAud2rv/q4rX8w5jhnhezWfysGtfhto2MqnFnj9lguRIFWFw6Gpn11s3WisjNi6kylC6+qfpROA=; 20:YdYnrLRBD752dPcXU/XTi1QVI/gaW7eOiBEuCuJekH6e5+AuGGYfABqvVLN7l7AiS0iWjIQQMlr5MVidsRQ1lA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(8121501046)(520078)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(199003)(189002)(5001960100002)(189998001)(16236675004)(10290500002)(19580395003)(7110500001)(74316001)(33656002)(54356999)(106356001)(76576001)(50986999)(102836002)(97736004)(10400500002)(81156007)(5003600100002)(8990500004)(101416001)(92566002)(2420400006)(10710500006)(5005710100001)(110136002)(105586002)(86612001)(122556002)(558084003)(5008740100001)(86362001)(66066001)(19617315012)(10090500001)(229853001)(40100003)(19625215002)(19300405004)(77096005)(87936001)(107886002)(450100001)(11100500001)(5004730100002)(2900100001)(99286002)(5007970100001)(5002640100001)(15975445007)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB442B4453277C3FF5FEC4BDBF52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 11:05:38.2392 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Consider_moving_the_des?= =?windows-1252?q?cription_of_=93signature_with_message_recovery=94_to_a_n?= =?windows-1252?q?on-normative_appendix_=28=2331=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 11:06:00 -0000 --_000_BY2PR03MB442B4453277C3FF5FEC4BDBF52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Given that COSE doesn=92t specify any algorithms using =93signature with me= ssage recovery=94, I would suggest moving the description of it from Sectio= n 8 (Signature Algorithms) to a non-normative appendix. View this on GitHub at https://github.com/cose-wg/cose-issues/issues/31 --_000_BY2PR03MB442B4453277C3FF5FEC4BDBF52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

Given that = COSE doesn=92t specify any algorithms using =93signature with message recov= ery=94, I would suggest moving the description of it from Section 8 (Signature Algorithms) to a non-normative appendix.

 

View this on GitHub at https://github.com/cose-wg/cose-issues/issues/31

 

--_000_BY2PR03MB442B4453277C3FF5FEC4BDBF52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 03:07:43 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0EDC1B7A8A for ; Sun, 1 Nov 2015 03:07:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.701 X-Spam-Level: X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eB89CKlv-uEq for ; Sun, 1 Nov 2015 03:07:40 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0728.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::728]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BC231B7A87 for ; Sun, 1 Nov 2015 03:07:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ONMo7fwzdU3Q6M6trSJDuAILEeYWkgRW40Xc9PKdVzc=; b=L2m3hszr6xtnJVkcfh9GOdlNOMZj/BQVsbgFOjFMma3t/AVIxVPi4XifoNsUZIF/CrDoTp0HRBXIrfEDFXbogVuOVEWFMm5HLrtTz/tIuppkrRh+k5Tj2z3qX/cHNK9xkHy0RvT/jMBbXZEP2O8ai4FNeX9lJ8ry6x03lmap7fo= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 11:07:19 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 11:07:19 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: =?Windows-1252?Q?[cose-issues]_Use_of_undefined_value_=91k=92_(#32)?= Thread-Index: AdEUlXjfuXj/ZOFVQnS8myMOgYKcRQ== Date: Sun, 1 Nov 2015 11:07:18 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:oaBhX40yRF7YnYZAZhR7gi8RkbWZu0CArjL4wce+RiXyOyPLO4W72uanm5vaGY6QWrjjpDIEe62kiPAd1A8McYAJ/07ZuhKHOCBQt3cjcJiDKJ7FgXUrEUd0DBxTpTml7w4vkQBy84cx8aFVm9VS1g==; 24:gb25c7JBs3QqgYnFjoLT/LMKqy4IFBZfruGuKU7v6ktW1gCUtemgFfL/25Q23FHI5sbPt+gDBTYkRPJWZf5yuCPIB0EdGoQ5vMB09fQMSuE=; 20:nlBIzzhofNS1FJj4pSJEVnVlBBUToGpP9G4o18CJlGj9VveaGA2EMjuQjOcjCbjqEDscJysCezOz/JSXb/vMZA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(8121501046)(520078)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(199003)(189002)(5001960100002)(189998001)(16236675004)(10290500002)(19580395003)(74316001)(33656002)(54356999)(106356001)(76576001)(50986999)(102836002)(97736004)(10400500002)(81156007)(5003600100002)(8990500004)(101416001)(92566002)(5005710100001)(110136002)(105586002)(86612001)(122556002)(558084003)(5008740100001)(86362001)(66066001)(19617315012)(10090500001)(229853001)(40100003)(19625215002)(19300405004)(77096005)(87936001)(107886002)(450100001)(11100500001)(5004730100002)(2900100001)(99286002)(5007970100001)(5002640100001)(15975445007)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB442C425059FC959358F7770F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 11:07:18.9756 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: [COSE] =?windows-1252?q?=5Bcose-issues=5D_Use_of_undefined_value_?= =?windows-1252?q?=91k=92_=28=2332=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 11:07:41 -0000 --_000_BY2PR03MB442C425059FC959358F7770F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Section 8.1.1 (Security Considerations) uses the undefined value =91k=92 in= this sentence: =93Systems that have poor random number generation can leak= their keys by signing two different messages with the same value of 'k'.= =94 View it on GitHub at https://github.com/cose-wg/cose-issues/issues/32 --_000_BY2PR03MB442C425059FC959358F7770F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

Section 8.1= .1 (Security Considerations) uses the undefined value =91k=92 in this sente= nce: =93Systems that have poor random number generation can leak their keys by signing two different messages with the same value of 'k'.= =94

 

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/32

 

--_000_BY2PR03MB442C425059FC959358F7770F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 03:10:14 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 002F41B7AA4 for ; Sun, 1 Nov 2015 03:10:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bVLKE7nB2sVD for ; Sun, 1 Nov 2015 03:10:10 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0779.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::779]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F4BB1B7AA2 for ; Sun, 1 Nov 2015 03:10:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=9MU09DozgJRgFlFvXxKQO1BvuuLqsyTefI+YLbq7Y1U=; b=EUGgWHlaGmimkxW9S4GIvR6KrWQxnC7Vz2Wz+Wl2FF5gv0ffTwlgtpqpUPWs8upQ38JUgrBHQl7uapnbUKhlTW1dTtCDCpStrIrvbmMe5CVzPjmxbPL+DqR6lxBQVMSvdMxph+yyLnslIZXBBrQ7UGaJlrYytNLs70uou5gI2Zk= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 11:09:49 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 11:09:49 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: [cose-issues] Add reference documenting reasons for odd CCM nonce lengths (#33) Thread-Index: AdEUldJQSrn8VldxRISBv924Umd6HQ== Date: Sun, 1 Nov 2015 11:09:48 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:UcFeOBi7IYhwJw7bIwZxALrB93LPFNYazxgGM4cS6+RcRc8nnaM0Hu599xuQXD8Y/OjrEIwhTxa2tgOKVlchKgBLQQlXfwNQiGmsxDR/r7jNlAC4Gwo+u+h0BU5HbfD4OdAUMxgtxkdSpU69zoZLjA==; 24:iof1jL5zzr4Ge7vwO1veYJFhRQmd0kwQ3AMRQ8cCt0t0G+bEgaWaZQZ8RRuF98Tli8JezFuZcKYPPmavJQ6DsChcP3cyCk0+v9dxtKjr/Wg=; 20:nIsnapBmfVykkeAURvtEv6i485Ld5KwO0q03yUe//m+k+vf9iQuN6inuX/2O+5qeGZJAEKoYHFT1gVYZwK5Xww== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(8121501046)(520078)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(199003)(189002)(5001960100002)(189998001)(16236675004)(10290500002)(19580395003)(74316001)(33656002)(54356999)(106356001)(76576001)(50986999)(102836002)(97736004)(10400500002)(81156007)(5003600100002)(8990500004)(101416001)(92566002)(5005710100001)(110136002)(105586002)(86612001)(122556002)(558084003)(5008740100001)(86362001)(66066001)(19609705001)(19617315012)(10090500001)(229853001)(40100003)(19625215002)(19300405004)(77096005)(87936001)(107886002)(450100001)(11100500001)(5004730100002)(2900100001)(99286002)(5007970100001)(5002640100001)(15975445007)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB4427EE8D30C25FF1E4066D4F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 11:09:48.9885 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: [COSE] [cose-issues] Add reference documenting reasons for odd CCM nonce lengths (#33) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 11:10:12 -0000 --_000_BY2PR03MB4427EE8D30C25FF1E4066D4F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Please add a reference to the base document that specified that the odd 13 = and 7 byte nonce lengths should be used. There must be a reason for these c= hoices, but the spec currently leaves it a mystery. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/33 --_000_BY2PR03MB4427EE8D30C25FF1E4066D4F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Please add = a reference to the base document that specified that the odd 13 and 7 byte = nonce lengths should be used. There must be a reason for these choices, but the spec currently leaves it a mystery.

 

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/33

 

--_000_BY2PR03MB4427EE8D30C25FF1E4066D4F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 03:14:41 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AFCB1B2A79 for ; Sun, 1 Nov 2015 03:14:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mzTHK2Hef_fx for ; Sun, 1 Nov 2015 03:14:36 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0741.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::741]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D9FD1A0222 for ; Sun, 1 Nov 2015 03:14:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=cPiB9lgW/o/0v7QeK1DDiuU7sjRMEeD4CDCnkQ8vcOw=; b=eOttCOrC27QUnSQsfYn42stfjekLHXY2UyvVSscpByRBD5GlZBnFLOFWtznrpQOjo1VPP2jnlTNjXLL4ndTtZ2U+udEbYLro2N2vcjkK63vX/9q/5R5xpTGy/enw4He6YwVyPSYy9ED2SIbY+snOsd6wKCQ2EqZqicJtPgxpSg4= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.306.13; Sun, 1 Nov 2015 11:14:14 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0306.003; Sun, 1 Nov 2015 11:14:14 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: [cose-issues] Order appendices by importance (#40) Thread-Index: AdEUlnBFJ4QMDG+7TRaeFqhAYPL4sw== Date: Sun, 1 Nov 2015 11:14:13 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [115.125.248.66] x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:GurSU0y6pV8Vv84Dq2PZnK2eJzqXWq1UdpVzO4OZ3N+zndJdvacosxEWfBC9gGdGXqJ1D5nAerFehL7AH3s7pyyj5oogupr/hrtMqXhV+wR7fnky3VdWJZ6qTWr7cxZDYjGPKXJDwgQPIHkF2gfr4A==; 24:L4rXPDLPHPTX4eOFr9Ns9uTqu5IWNNBnDB4snMnmAXjqySgP/VbeDRtSAXnFcJJuLNEpVFzimVr5GYa5Uj6BapksRKLsZ/Kc+NG55z8PN9s=; 20:5yxie4/X8nM1r/XWCsWxYm36ZmJGAclXUmHKkyOVhgraYsJ+hdIBkRCO6/578xUcUfC1+eBWpRUvN2M/LSJEsw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(8121501046)(520078)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 07473990A5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(199003)(189002)(5001960100002)(189998001)(16236675004)(10290500002)(19580395003)(74316001)(33656002)(54356999)(106356001)(76576001)(50986999)(102836002)(97736004)(10400500002)(81156007)(5003600100002)(8990500004)(101416001)(92566002)(5005710100001)(110136002)(105586002)(86612001)(122556002)(558084003)(5008740100001)(86362001)(66066001)(19609705001)(19617315012)(10090500001)(229853001)(40100003)(19625215002)(19300405004)(77096005)(87936001)(107886002)(450100001)(11100500001)(5004730100002)(2900100001)(99286002)(5007970100001)(5002640100001)(15975445007)(491001); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB44295A05B9E8AFA60648811F52D0BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2015 11:14:14.0111 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: [COSE] [cose-issues] Order appendices by importance (#40) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 11:14:40 -0000 --_000_BY2PR03MB44295A05B9E8AFA60648811F52D0BY2PR03MB442namprd_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I would place the Examples appendix first (changing it from C to A), follow= ed by CDDL Grammar (changing it from A to B), and move Three Levels of Reci= pient Information (currently B) to the end. View it on GitHub at https://github.com/cose-wg/cose-issues/issues/40 --_000_BY2PR03MB44295A05B9E8AFA60648811F52D0BY2PR03MB442namprd_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I would pla= ce the Examples appendix first (changing it from C to A), followed by CDDL = Grammar (changing it from A to B), and move Three Levels of Recipient Information (currently B) to the end.

 

View it on GitHub at https://github.com/cose-wg/cose-issues/issues/40

 

--_000_BY2PR03MB44295A05B9E8AFA60648811F52D0BY2PR03MB442namprd_-- From nobody Sun Nov 1 03:46:33 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BAB91A87D7 for ; Sun, 1 Nov 2015 03:46:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.608 X-Spam-Level: X-Spam-Status: No, score=-5.608 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CMNC9kb09_hu for ; Sun, 1 Nov 2015 03:46:30 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext5.iad.github.net [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E77D1A87C4 for ; Sun, 1 Nov 2015 03:46:30 -0800 (PST) Date: Sun, 01 Nov 2015 03:46:28 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446378388; bh=+au9PGB2YiNdzNoGESuK8AWsY+KO8xFv/oh+xOxDdSo=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=x2E0vAwkg6p7lhq2GvUdSAczlk8UOmgvT7/MP9ZAf5HVFUlGv3tJ6yi8S4ytOOn+S Q4UobSrYK1DSTZRRGkq4Bx92Uf9C00e1ZHs+7Z5cg/6jT5RlDM+NrtFPzdEZFeC4Km SQKpGvIxzLWiCMsJZBT2uhEEbNPUFCHCmQkVeg7w= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635fb94d86ed_63383fb2b3e5f2b8160176d"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Change_=E2=80=9CSenders_SHOULD?= =?utf-8?b?IGVuY29kZeKAnSB0byDigJxTZW5kZXJzIE1VU1QgZW5jb2Rl4oCdICgjMjYp?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 11:46:32 -0000 ----==_mimepart_5635fb94d86ed_63383fb2b3e5f2b8160176d Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit There are two options that can be used here for encoding a protected header with no entries. It can be either a zero length binary string that is encoded, or it can be a zero length map that is encoded. There is no interopability issue as both of these are valid. The first is dealt with as a special case while the second just falls out from the normal case of there being any items in the map (i.e. the code to parse a map with 1 item or with 0 items is identical). This is a recommendation that one method ought to be used. This is the correct usage of a SHOULD. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/26#issuecomment-152820864 ----==_mimepart_5635fb94d86ed_63383fb2b3e5f2b8160176d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

There are two options that can be used here for encoding a protected header with no entries. It can be either a zero length binary string that is encoded, or it can be a zero length map that is encoded. There is no interopability issue as both of these are valid. The first is dealt with as a special case while the second just falls out from the normal case of there being any items in the map (i.e. the code to parse a map with 1 item or with 0 items is identical). This is a recommendation that one method ought to be used. This is the correct usage of a SHOULD.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_5635fb94d86ed_63383fb2b3e5f2b8160176d-- From nobody Sun Nov 1 03:55:42 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B00511B3785 for ; Sun, 1 Nov 2015 03:55:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2E0-jaQ5BhfE for ; Sun, 1 Nov 2015 03:55:38 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext5.iad.github.net [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24D251B377F for ; Sun, 1 Nov 2015 03:55:38 -0800 (PST) Date: Sun, 01 Nov 2015 03:55:37 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446378937; bh=6yX+fEiSUyqNe4dUm+KYZDCes6Y8ENfaXTQ8ehsRiT0=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=aijfX8uGauJBHdOz7hpAcRBj8iPWXzmpoU7EHKFrA1hJ6IdIziWABTAN2bk+uQtE+ kAExHF3slISznOBX/YVUYd+B4MPxeHXHccj9oCx+wnSzl46usaC19K5MrikkTjJFyD ZY5H6tMI8DJl9VFIX3Z+pw3t3Arvza2jn3ZxW8r0= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5635fdb976e16_19903fb2b3e5f2b81056886"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Add reference documenting reasons for odd CCM nonce lengths (#33) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 11:55:39 -0000 ----==_mimepart_5635fdb976e16_19903fb2b3e5f2b81056886 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit This is covered in RFC 3610 - the description of CCM. There is already a reference to that document here. Not sure why an additional reference to the same document would be useful. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/33#issuecomment-152821598 ----==_mimepart_5635fdb976e16_19903fb2b3e5f2b81056886 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

This is covered in RFC 3610 - the description of CCM. There is already a reference to that document here. Not sure why an additional reference to the same document would be useful.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_5635fdb976e16_19903fb2b3e5f2b81056886-- From nobody Sun Nov 1 10:01:17 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64CB31B8A9C for ; Sun, 1 Nov 2015 10:01:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WvjlcV7YORNW for ; Sun, 1 Nov 2015 10:01:15 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31F6B1B8A9B for ; Sun, 1 Nov 2015 10:01:15 -0800 (PST) Date: Sun, 01 Nov 2015 10:01:14 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446400874; bh=OEDLas3sEXtrLzMPbulKqacBJZVn0vAp7oUWBnFyaog=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=nfItXYYxL7+cAZ+dLgNYlPCKmRHsbPICHsO4F9yK1x8N/HaTWZLJ7BYed7/P14et1 BWoDPyf4++sqIeidSYPYvSjy7TkzekjF+S+GM2UDr3ZCn9xludiusg5ezNXBij4qPk 4Um1ZGUrcfQalB6o/EaA/KxWrrihyW7LU+ipZ51U= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5636536a2370d_3ed33f7e5f0f72c017046a"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?b?W2Nvc2UtaXNzdWVzXSBNYWtlIOKAnHJlY2lwaWVudHPigJ0g?= =?utf-8?q?field_optional_=28=2310=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 18:01:16 -0000 ----==_mimepart_5636536a2370d_3ed33f7e5f0f72c017046a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Reopened #10. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/10#event-451399909 ----==_mimepart_5636536a2370d_3ed33f7e5f0f72c017046a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Reopened #10.

&m= dash;
Reply to this email directly or view it on GitHub.

----==_mimepart_5636536a2370d_3ed33f7e5f0f72c017046a-- From nobody Sun Nov 1 10:13:41 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41D4F1B8AB9 for ; Sun, 1 Nov 2015 10:13:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m9ZPPD2Q_AUb for ; Sun, 1 Nov 2015 10:13:38 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1839B1B8ABB for ; Sun, 1 Nov 2015 10:13:37 -0800 (PST) X-AuditID: 1209190c-f79b76d000007c4e-61-563656503843 Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 6A.5D.31822.05656365; Sun, 1 Nov 2015 13:13:36 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id tA1IDZqQ007780 for ; Sun, 1 Nov 2015 13:13:36 -0500 Received: from [100.117.11.61] (104.98.142.210.ap.mvno.net [210.142.98.104]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tA1IDV3u006485 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for ; Sun, 1 Nov 2015 13:13:34 -0500 Date: Mon, 02 Nov 2015 03:13:30 +0900 Message-ID: Importance: normal From: Justin Richer To: cose@ietf.org MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--_com.android.email_92301887352950" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrOIsWRmVeSWpSXmKPExsUixG6nrhsQZhZm8P2ujMW0rVNZHRg9liz5 yRTAGMVlk5Kak1mWWqRvl8CVsWvJU9aCHUIVS7ZOYmtgfCTYxcjJISFgInF+wSMWCFtM4sK9 9WwgtpDAYiaJZwe0uhi5gOwjjBLbnu5ghnDuMEmsPXcbrIpFQFVibeMDRhBbWEBSYnpbE1ic V8BN4uvxRtYuRg4OTgEhia5dEiBhNqDy6WtamEDCIgKCEnc7zSGqBSVOznwCdgOzQLDE0Y2r mSYw8s5CkpqFJAVhq0v8mXeJGcJWlJjS/ZB9FtBUZgE1iWWtSsjCCxjZVjHKpuRW6eYmZuYU pybrFicn5uWlFuka6uVmluilppRuYgSFI6ckzw7GNweVDjEKcDAq8fAe8DQLE2JNLCuuzD3E KMnBpCTK+9gZKMSXlJ9SmZFYnBFfVJqTWnyIUYKDWUmE97UXUI43JbGyKrUoHyYlzcGiJM67 6QdfiJBAemJJanZqakFqEUxWhoNDSYL3UQhQo2BRanpqRVpmTglCmomDE2Q4D9Bw/VCQ4cUF ibnFmekQ+VOMmlLivO9BmgVAEhmleXC9oHSRUsptC6Iv9SVlvGIUB3pJmPcnSDUPMPXATXkF tIAJaEH4NlOQBSWJCCmpBsbgNfVnWgRm37ESct5mwPMicJV6V92lrvet9ZLyzscvFtz88X5d VmLyIfZA4wN/KuM64+fkTTaovPnA/1pITUGco1L5hzuPHBafeK+yuGMF5xMblX+bi3/bHnrm Ic5aFCS5XvZGXFfQxMx1c3srhB6tu59r4Sawoz050drW1ujUvwdPDT7q+imxFGckGmoxFxUn AgB+4YLc+gIAAA== Archived-At: Subject: [COSE] New issues filed X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 18:13:40 -0000 ----_com.android.email_92301887352950 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 CiAgICAKQXMgSSdtIHN1cmUgbW9zdCBvZiB5b3UgaGF2ZSBzZWVuLCB3ZSBoYXZlIGEgZmxvb2Qg b2YgbmV3IGlzc3VlcyBmaWxlZCBpbiB0aGUgR2l0SHViIHRyYWNrZXIsIGFzIHdhcyByZXF1ZXN0 ZWQuIFdlJ2xsIGJlIGRpc2N1c3NpbmcgYWxsIG9mIHRoZXNlIGluIHRoZSBmYWNlIHRvIGZhY2Us IHNvIHBsZWFzZSB0YWtlIGEgZmV3IG1pbnV0ZXMgdG8gcmVhZCB0aHJvdWdoIHRoZW0gYmVmb3Jl IGhhbmQuwqAKQXMgYSByZW1pbmRlciwgd2UgaGF2ZSBhIDkwIG1pbnV0ZSBzZXNzaW9uIG9uIFR1 ZXNkYXkgYWZ0ZXJub29uLCAzOjIwIHBtIGluIHJvb20gNDEzLiBXZSBoYXZlIHR3byBwcmVzZW50 YXRpb25zIG9uIEFDRSB1c2VzIGZvciBvdXIgd29yayBhbmQgdGhlIHJlbWFpbmRlciBvZiB0aGUg dGltZSB3aWxsIGJlIGdpdmVuIHRvIGRpc2N1c3Npb24gb2YgdGhlIGN1cnJlbnQgc3RhdGUgb2Yg dGhlIGRyYWZ0IGFuZCBvcGVuIGlzc3Vlcy7CoApUaGFua3MsIGFuZCBJIGhvcGUgdG8gc2VlIG1h bnkgb2YgeW91IHNvb24uwqAtLSBKdXN0aW4sIHlvdXIgQ09TRSBjaGFpcgovIFNlbnQgZnJvbSBt eSBwaG9uZSAv ----_com.android.email_92301887352950 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0 L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPjwvaGVhZD48Ym9keT4KICAgIAo8ZGl2PkFzIEknbSBzdXJl IG1vc3Qgb2YgeW91IGhhdmUgc2Vlbiwgd2UgaGF2ZSBhIGZsb29kIG9mIG5ldyBpc3N1ZXMgZmls ZWQgaW4gdGhlIEdpdEh1YiB0cmFja2VyLCBhcyB3YXMgcmVxdWVzdGVkLiBXZSdsbCBiZSBkaXNj dXNzaW5nIGFsbCBvZiB0aGVzZSBpbiB0aGUgZmFjZSB0byBmYWNlLCBzbyBwbGVhc2UgdGFrZSBh IGZldyBtaW51dGVzIHRvIHJlYWQgdGhyb3VnaCB0aGVtIGJlZm9yZSBoYW5kLiZuYnNwOzwvZGl2 PjxkaXY+PGJyPjwvZGl2PjxkaXY+QXMgYSByZW1pbmRlciwgd2UgaGF2ZSBhIDkwIG1pbnV0ZSBz ZXNzaW9uIG9uIFR1ZXNkYXkgYWZ0ZXJub29uLCAzOjIwIHBtIGluIHJvb20gNDEzLiBXZSBoYXZl IHR3byBwcmVzZW50YXRpb25zIG9uIEFDRSB1c2VzIGZvciBvdXIgd29yayBhbmQgdGhlIHJlbWFp bmRlciBvZiB0aGUgdGltZSB3aWxsIGJlIGdpdmVuIHRvIGRpc2N1c3Npb24gb2YgdGhlIGN1cnJl bnQgc3RhdGUgb2YgdGhlIGRyYWZ0IGFuZCBvcGVuIGlzc3Vlcy4mbmJzcDs8L2Rpdj48ZGl2Pjxi cj48L2Rpdj48ZGl2PlRoYW5rcywgYW5kIEkgaG9wZSB0byBzZWUgbWFueSBvZiB5b3Ugc29vbi4m bmJzcDs8L2Rpdj48ZGl2IGlkPSJjb21wb3Nlcl9zaWduYXR1cmUiPjxtZXRhIGh0dHAtZXF1aXY9 IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PVVURi04Ij48ZGl2PCBk aXY9IiI+PGRpdj48ZGl2Pi0tIEp1c3RpbiwgeW91ciBDT1NFIGNoYWlyPC9kaXY+PGRpdj48YnI+ PC9kaXY+PGRpdj4vIFNlbnQgZnJvbSBteSBwaG9uZSAvPC9kaXY+PC9kaXY+PGRpdj48L2Rpdj48 L2Rpdjw+PC9kaXY+PC9ib2R5PjwvaHRtbD4= ----_com.android.email_92301887352950-- From nobody Sun Nov 1 10:34:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4FCDF1B8B00 for ; Sun, 1 Nov 2015 10:33:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.608 X-Spam-Level: X-Spam-Status: No, score=-5.608 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9kKPM-ZYeMPp for ; Sun, 1 Nov 2015 10:33:57 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7FF051B8AFF for ; Sun, 1 Nov 2015 10:33:57 -0800 (PST) Date: Sun, 01 Nov 2015 10:33:56 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446402836; bh=yVhP0ohS9FdEgaWOjslsNlIg/mbyX1bKB6OK0YNRgqU=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=CzscZzxqQVg5OKToTfoxIaTC5w+bX20Jb5UcRLwPV3v8iZBxeA07WAgNBnk3BsU+n S1Fy7IALHuenNNoSCu6C4X4U7smY5KfrAMVB86ZyCWKTpQYJqr+Sjf/UZ0IxvWFpX0 rWo1uBy7H1JVH2q4fLntxjifjOWhRDoqfFnI6UcE= From: obgm To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_56365b1466357_20993fb87c4332c050014"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: obgm X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Remove_=E2=80=9Ccounter_signat?= =?utf-8?b?dXJl4oCdIGhlYWRlciBwYXJhbWV0ZXIgKCMxMik=?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Nov 2015 18:33:59 -0000 ----==_mimepart_56365b1466357_20993fb87c4332c050014 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Concur. I presume that the counter signature was introduced to handle the case of intermediaries that (legally) change options of CoAP messages when forwarding them (e.g. forwarding proxy that creates a Uri-* options from a Proxy-Uri options). The solution to deal with changeable CoAP options such as Max-Age, Observe, etc. will most likely require encapsulating the original CoAP message into a COSE object and transfer this as a payload in one of the proposed CoAP-over-COSE messaging mechanisms anyway. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/12#issuecomment-152850855 ----==_mimepart_56365b1466357_20993fb87c4332c050014 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Concur. I presume that the counter signature was introduced to handle the case of intermediaries that (legally) change options of CoAP messages when forwarding them (e.g. forwarding proxy that creates a Uri-* options from a Proxy-Uri options).
The solution to deal with changeable CoAP options such as Max-Age, Observe, etc. will most likely require encapsulating the original CoAP message into a COSE object and transfer this as a payload in one of the proposed CoAP-over-COSE messaging mechanisms anyway.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_56365b1466357_20993fb87c4332c050014-- From nobody Sun Nov 1 16:30:52 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C8C51B3D76 for ; Sun, 1 Nov 2015 16:30:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p9BYqN8NQQVK for ; Sun, 1 Nov 2015 16:30:50 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E26E61ACC8B for ; Sun, 1 Nov 2015 16:30:49 -0800 (PST) Date: Sun, 01 Nov 2015 16:30:48 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446424248; bh=qyingfgucntGwa1xbajHvzzS9IcbOSJNFmhzvDkUN8E=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=sGdG9ruIIcz/LeozmIrGM07zaVon7FURFKAZnsNDHVDhYSiwncp+VHH7Gsun+amR6 zjsfuzjaistcTTIKFXuvdILk3xjwE7R3QK/fbCZks++S+OQkYYQlMG1/AtHalQhdUc KD84Mtw4Dq25ICpSxtDjUovpwjw6JHE83kCp32kw= From: Mike Jones To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5636aeb86950a_1e8e3f7f4c7a72bc25513e"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?b?W2Nvc2UtaXNzdWVzXSBNYWtlIOKAnHJlY2lwaWVudHPigJ0g?= =?utf-8?q?field_optional_=28=2310=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 00:30:51 -0000 ----==_mimepart_5636aeb86950a_1e8e3f7f4c7a72bc25513e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Jim, if you believe that this was addressed by the addition of the encrypted data structure, then please add examples to the draft of a signature with no recipients field and a MAC with no recipients field, demonstrating to implementers what those look like. Those examples will be simpler than the current ones in C.3.1 and C.1.1, which do contain "recipients" information. Thanks. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/10#issuecomment-152881864 ----==_mimepart_5636aeb86950a_1e8e3f7f4c7a72bc25513e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Jim, if you believe that this was addressed by the addition of the encrypted data structure, then please add examples to the draft of a signature with no recipients field and a MAC with no recipients field, demonstrating to implementers what those look like. Those examples will be simpler than the current ones in C.3.1 and C.1.1, which do contain "recipients" information. Thanks.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_5636aeb86950a_1e8e3f7f4c7a72bc25513e-- From nobody Sun Nov 1 16:50:43 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CE2A1A00E2 for ; Sun, 1 Nov 2015 16:50:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.908 X-Spam-Level: X-Spam-Status: No, score=-5.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pRSeJfrAivy6 for ; Sun, 1 Nov 2015 16:50:25 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B75BB1B3E79 for ; Sun, 1 Nov 2015 16:50:23 -0800 (PST) Date: Sun, 01 Nov 2015 16:50:23 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446425423; bh=9ImG7TDYGBczrOiCfOgEoyCK4sAJCpY9kdvzUmTNQBs=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=llBj19d57UN5C9xqziK3VLUvL18lm/CvggqtahQWhn2xnwoSjEHy0A+AFsE5yUc91 eZX3KwDLOB5qYQZeYJFSJHhbhQjeg39YZPSCGkI8jwAse6sKeVg7BalX3qsxL5xuo6 AJpStUYgr7P6+uCQbsIfPnypgw57cKrHajn5Nfk4= From: Mike Jones To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5636b34f10a93_68f33fe2c815d2a014674"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Add reference documenting reasons for odd CCM nonce lengths (#33) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 00:50:32 -0000 ----==_mimepart_5636b34f10a93_68f33fe2c815d2a014674 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit In JOSE, I was often asked as editor to make references to the specific sections of specs defining particular features that are used. I would think that a reference something like this would be help implementers understand the rationale behind the choices made. "The nonce length of 13 bytes is used because the Section 2.1 of [RFC3610] specifies a nonce length in octets of N=15-L, where L is the number of octets in the length field, and L=2 in this case." --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/33#issuecomment-152883978 ----==_mimepart_5636b34f10a93_68f33fe2c815d2a014674 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

In JOSE, I was often asked as editor to make references to the specific sections of specs defining particular features that are used. I would think that a reference something like this would be help implementers understand the rationale behind the choices made.

"The nonce length of 13 bytes is used because the Section 2.1 of [RFC3610] specifies a nonce length in octets of N=15-L, where L is the number of octets in the length field, and L=2 in this case."

—
Reply to this email directly or view it on GitHub.

----==_mimepart_5636b34f10a93_68f33fe2c815d2a014674-- From nobody Sun Nov 1 17:52:25 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88EF71B40FB for ; Sun, 1 Nov 2015 17:52:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TtdalDK7GwbK for ; Sun, 1 Nov 2015 17:52:22 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 252E11B40F9 for ; Sun, 1 Nov 2015 17:52:22 -0800 (PST) Date: Sun, 01 Nov 2015 17:52:21 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446429141; bh=zb4r6pQEcjL1FeUrdsR0XxkW8xV3xQAk7/fKQWqYVhM=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=TRTyQpuTEM85y9kzqMwm00yezVnexbRlVHM+0pgPAVwahFTKEeQ0ib28/giQVWsxQ b06xdqA0Xu1jWo3Rm2P6P9jnwEBSG46mw0vF6iPxxdsrl3NHskrd0UzQRWupzhgtOh Qlk0HIuq3VLU7aKNviORnTjeOJICF7DcMNe5M3og= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5636c1d5366b_4f513ffa6f1792c011958c"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Create COSE Token (#42) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 01:52:23 -0000 ----==_mimepart_5636c1d5366b_4f513ffa6f1792c011958c Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit I believe that this is more appropriate for the OAuth working group. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/42#issuecomment-152888006 ----==_mimepart_5636c1d5366b_4f513ffa6f1792c011958c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

I believe that this is more appropriate for the OAuth working group.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_5636c1d5366b_4f513ffa6f1792c011958c-- From nobody Sun Nov 1 18:11:12 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89B1E1B4168 for ; Sun, 1 Nov 2015 18:11:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.908 X-Spam-Level: X-Spam-Status: No, score=-5.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6pYDl1CO8_xk for ; Sun, 1 Nov 2015 18:11:09 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA2151B41DB for ; Sun, 1 Nov 2015 18:11:08 -0800 (PST) Date: Sun, 01 Nov 2015 18:11:08 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446430268; bh=a3egi6J0G3Zq9EvWG6jy8G1DtuvQcXu1lUxtutRBecw=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=zZ+oRldmBRQgiWQxt3IZZDTG4h1xEallkQ5/OcJMC1LRB8DXCHxPyG2ZvYNuFcRYQ HMaW9btjrn22urTXOhhtcKmnoQthk/B3x+kG3ReX7cIUup8oaj0YICYJJWWdW9A0k1 awxBa8bGDulFTnViI9pmL/uYAyUfV+6lGNHlcUGE= From: Mike Jones To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5636c63c35d9a_5a003fc14f91729c1720ca"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Create COSE Token (#42) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 02:11:10 -0000 ----==_mimepart_5636c63c35d9a_5a003fc14f91729c1720ca Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable No matter what working group the CBOR Token work would land in, it's clea= r that COSE and that work should closely coordinate. These COSE issues p= oint out that the COSE and CBOR Token work are already highly related, an= d that COSE needs a CBOR Token companion spec: Issue #13 Move =E2=80=9Ccreation time=E2=80=9D value to the payload Issue #14 Move =E2=80=9Csequence number=E2=80=9D value to the payload I look forward to working group discussions of the topic. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/42#issuecomment-152890467= ----==_mimepart_5636c63c35d9a_5a003fc14f91729c1720ca Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

No matter what working group the CBOR Token work would land in, it's c= lear that COSE and that work should closely coordinate. These COSE issue= s point out that the COSE and CBOR Token work are already highly related,= and that COSE needs a CBOR Token companion spec:

Issue #13 Move =E2=80=9Ccreation time=E2=80=9D value to the pa= yload
Issue #14 Move =E2=80=9Csequence number=E2=80=9D value to the pay= load

I look forward to working group discussions of the topic.

&m= dash;
Reply to this email directly or view it on GitHub= .3D""

----==_mimepart_5636c63c35d9a_5a003fc14f91729c1720ca-- From nobody Mon Nov 2 04:13:54 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 657741A86E8 for ; Mon, 2 Nov 2015 04:13:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.6 X-Spam-Level: X-Spam-Status: No, score=-1.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IauSbA8ZfOiU for ; Mon, 2 Nov 2015 04:13:51 -0800 (PST) Received: from mail-pa0-x22c.google.com (mail-pa0-x22c.google.com [IPv6:2607:f8b0:400e:c03::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07D621A86DD for ; Mon, 2 Nov 2015 04:13:51 -0800 (PST) Received: by pasz6 with SMTP id z6so147763058pas.2 for ; Mon, 02 Nov 2015 04:13:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics_se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=a6VdBrrgVQ8iYWP9uiFoYq06atAJL8o7OFmgBnSa83Q=; b=eZGXLDoJieNIxQ2HQQM5fGMZxIhoYIgeg5ZjGcQnhj+GSbHLgfbXFllPpskMHcRbpG tacLpLKq78riNxMwmTGZzBIPU1m+JFkkx0yY2KNSz2FFJOFzvXKc+0uDJSXqSD2yxvhR U0hm5IG8B93h2tM+xvJiEjxylulqj4aCkMVg4V6j+EZBKXS8rXQb+0lIfpIXPpcwOU/h AQfKp8cZOuhXrsQC01fXVpdn+Fm5zGQhPd6Z6P14wg6MFC5drSdCazcBzAw4lwaU7tB9 wNeXiq1VaIW+BRRURsdcrELnfq/pRK9mbEf2mfaIyvV5COXpEGhzMryFNw0z/3z4igqP 80rw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=a6VdBrrgVQ8iYWP9uiFoYq06atAJL8o7OFmgBnSa83Q=; b=GlAF8MjuR8Ee/peLqK9ZGj2GU1rgWVD6HS8UWH3sS29PAy3DZgvjktSxCcg9gDVdyb 6ANxJNHLUE5EtL9U8M7WK2rsblmQC7zdM9+qjI6VONMH5NoKixrSgzRUMH8eqVJwgGHU EWejMubFirKvfkyYNLMe2I2Wmth27x0+N9/7mZ6iA90VZrjt9RBUxB+TFjxiijwLXNPn +5v4zIYp83g60Wcetdy8vXLc20lMWlLT4iRJizrWI4PpQ3V70jSJ8ovdTYF5OBHrTO6j 0JlO2ZJzMNDdW6EBNNIti+uuF8NwjAP5xbGo/TKzuuxWOVPTmGCzxlwiw+PrdwyxfT/L S2DQ== X-Gm-Message-State: ALoCoQkpvnxf/Z+WadYifwZQfon3eFcZ7FBAdZFhW72/4lSmjSLhBMMRQx2h69lzwzARTNYNW9Tp X-Received: by 10.66.236.37 with SMTP id ur5mr27276496pac.66.1446466430639; Mon, 02 Nov 2015 04:13:50 -0800 (PST) Received: from [10.10.10.32] (pb6abf7fa.kngwff01.ap.so-net.ne.jp. [182.171.247.250]) by smtp.gmail.com with ESMTPSA id k5sm23725729pbq.74.2015.11.02.04.13.48 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 02 Nov 2015 04:13:49 -0800 (PST) To: cose@ietf.org References: From: Ludwig Seitz Message-ID: <5637536E.5090706@sics.se> Date: Mon, 2 Nov 2015 13:13:34 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms060406020207000004070206" Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Move_=E2=80=9Csequence_number?= =?utf-8?b?4oCdIHZhbHVlIHRvIHRoZSBwYXlsb2FkICgjMTQp?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 12:13:52 -0000 This is a cryptographically signed message in MIME format. --------------ms060406020207000004070206 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 2015-11-01 07:17, Mike Jones wrote: > Like =93creation time=94, the =93sequence number=94 header parameter de= fined in > Section 3.1 is a non-cryptographic application-defined attribute, and s= o > should be defined in a companion CBOR payload definitions specification= , > if at all. Only cryptographic-relevant header parameters should be > defined by COSE. The text =93The use of this parameter is application > specific=94 is the giveaway that this doesn=92t belong here. > > =97 > Reply to this email directly or view it on GitHub > . > > What if I use the sequence number to construct my IV for the AEAD algorit= hm? /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms060406020207000004070206 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTEwMjEyMTMzNFowLwYJKoZI hvcNAQkEMSIEINl9ILs2Rf9hs9U/RDTnjG/ImrUebhz6kJJDF4xAPjo3MGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQAot1vL29lXAlqA6zmtXkCYbLPLnZirREPLJsAo9lOy B0aOBn80NiQDhC6QJxrqFVWc6cKUOVTGTLCG+v7QJqDPSW2caFZRIO6C0fZbjDQdjkzZkHv6 yiwkGoYDCn90CydfxRVVDL6Exz1PdCRE0gNJuWAbJfYgjlBc/7U34IMwhNMXur28O3RJrG5p aqZir5nUqn3TZwRYqYAQs4rokqU8xLhczqBX21KNMntZ+9sNCwtLCt7Oc7chlDNMwJBYbvJa Irg37Nrm2NeUf752JItH69hYVP9YXZJG0nAfNQ4lNyLo8MzxszT1+r98CdP/EEUQcSsIQB/E jEZduuN1uoHIAAAAAAAA --------------ms060406020207000004070206-- From nobody Mon Nov 2 04:18:13 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 424D31A8737 for ; Mon, 2 Nov 2015 04:18:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aV-x7_mwFBvy for ; Mon, 2 Nov 2015 04:18:11 -0800 (PST) Received: from mail-pa0-x22c.google.com (mail-pa0-x22c.google.com [IPv6:2607:f8b0:400e:c03::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDB031A8732 for ; Mon, 2 Nov 2015 04:18:10 -0800 (PST) Received: by pabfh17 with SMTP id fh17so23821269pab.0 for ; Mon, 02 Nov 2015 04:18:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics_se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=jPdXU/y8jG8FVTHUg7ZXqRqCLupceH/75yO9zPErnBg=; b=trzGhwIpg0A5ip1qgmOfchaRzAKRog+HJrqD/vAYeAOkUm76j9UP3xv0t4rNSPKc1V TweDEXqwBZDsY95EOYYSHvG+U9nQKqgD5hI2/Zfdbc3+IpnxM0+sy5rxrNuvKmd/xQai YRxHKBe6ikm071VqwMGsbGsfFBR53tvWDH+KSLyn+z6USYo122butembHq3b2fsOh+pT UX0X5H+IXobvJKE4ZSiPthc/4Sf7n8hkRvLAb1pnSSJGv3Z84uWXz7OBiTm9ZfL/9oP3 P05ytU//WB/v0TCpxYrq7JmVLtWoJ3lf+TRQS+0iPgOuYAashuGU5BANPVsyD2wrZcQm ndxw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=jPdXU/y8jG8FVTHUg7ZXqRqCLupceH/75yO9zPErnBg=; b=IIwLrxpg21cpbgkrbLaifTrOneQqzzkfa/C1TalcheN+fY09eIlRzgClxF4N6X/80J sFnTw4Ab//D/35ueEzkSAXb9Z1akV05AtZNPKakaBsN7vQ9QDSpm0qQnExFPPwhR939L aPJQUAyc/w5Lp8EfQX9JCoJiJ3yB3hrhw+Cn9P1Pwb2nECkRu5v1tdt0EyxN7bU+/egb d3oYrMUlQ2MpBjFQc6Y9Hiqkzvta8Y9g5rGF4Lqu2PUQBSIE/HEn1CXwcxUf7iAvCRU6 vO9qcxiXW+222KKa47HlSE+4z8Sf7vVc1281EUVJgN7k/XSGIwE/k7C02ovfAx12Mm9A Roow== X-Gm-Message-State: ALoCoQl5RcC8OmoEBTkFcMel9Z1CEAPXXzPIhwPdCpC1Vq5WgVp5R+SExmBA1+x7zjj1QiYXeEAG X-Received: by 10.68.65.104 with SMTP id w8mr26939971pbs.48.1446466690472; Mon, 02 Nov 2015 04:18:10 -0800 (PST) Received: from [10.10.10.32] (pb6abf7fa.kngwff01.ap.so-net.ne.jp. [182.171.247.250]) by smtp.gmail.com with ESMTPSA id tt7sm23865281pab.45.2015.11.02.04.18.08 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 02 Nov 2015 04:18:09 -0800 (PST) To: cose@ietf.org References: From: Ludwig Seitz Message-ID: <5637547F.1050603@sics.se> Date: Mon, 2 Nov 2015 13:18:07 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030708050707040609080407" Archived-At: Subject: Re: [COSE] [cose-issues] Are there enough use cases for external_aad to warrant its inclusion? (#16) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 12:18:12 -0000 This is a cryptographically signed message in MIME format. --------------ms030708050707040609080407 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 2015-11-01 07:19, Mike Jones wrote: > The =93external_aad=94 field appears in the Sig_structure, Enc_structur= e, > and MAC_structure. Many other cryptographic specs have gotten along fin= e > without this, and are simpler as a result. Is its inclusion warranted b= y > common use cases, or is this an edge case not satisfying the 80/20 rule= > for inclusion? The simpler way of achieving this is to include these > values as part of the payload. > > Note also that some places in the spec prohibit supplying this value. > For instance, 5.4 (Encryption algorithm for AE algorithms) includes the= > instruction =93Verify that there was no external additional authenticat= ed > data supplied for this operation.=94 That makes me think that having > external_aad at all is a likely source of implementation and usage > errors and interoperability problems. > Actually external AAD is a very useful feature to keep message size=20 small, for example if you have parameters that are part of the=20 application layer protocol (like the URI-* options or the RESTful method = header in a CoAP message) that you want to integrity protect, without=20 having to duplicate them in the COSE message. /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms030708050707040609080407 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTEwMjEyMTgwN1owLwYJKoZI hvcNAQkEMSIEIBrXTkVa6MW8Hxdl0BMAg+kGjM+4i2E0yjQwq4ydb5zEMGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQBfVqaQTmggnzNHnirb9tG7Ls9rJc1UWuVGSCNel+Bj c1yO9uLdRSs237WCqN6/ulOpdi1man9O3brsJaVb6zuK5DHCb2v0RCICaCPChfFnTMCgnG9a 9LWNZMChWjBwJQ6itNLfNjkHpNbe3e+AXKoIMqJ+CyCySFmMvBrphxEEHgtFptvfRJg49e/F qw3ZVWONm6RdHXnIAlTywSuqjCbnrKRiWZQTuyGew4Y5x2QLvWFrIIy3z+p1xEHgj0iW6m+S fsVWbW7s6Zj+sjOx1w8MhL1AdAAq8VblNT8j7vbsb94crI+CTvr7V+8cpDTO/XiYmdTDmGsF t6EGuErNiZpgAAAAAAAA --------------ms030708050707040609080407-- From nobody Mon Nov 2 04:23:32 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B78B1A8737 for ; Mon, 2 Nov 2015 04:23:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.6 X-Spam-Level: X-Spam-Status: No, score=-1.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a5tGwdZnd_uH for ; Mon, 2 Nov 2015 04:23:30 -0800 (PST) Received: from mail-pa0-x230.google.com (mail-pa0-x230.google.com [IPv6:2607:f8b0:400e:c03::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 245351A8799 for ; Mon, 2 Nov 2015 04:23:30 -0800 (PST) Received: by padec8 with SMTP id ec8so38836847pad.1 for ; Mon, 02 Nov 2015 04:23:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics_se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=u4o2cte/L++CcWKnAvQTA2CJ46nMWLYGT3r+Js66cyk=; b=DuoHrbNhQKoXfiri9OREPgQ48J0TQWQdl2C5gPEqYN+0/DwJrardXHAHt7W3kw0cMx JydxsY9La6WI/aErmtBxj/1ADCbb6JQ3eodOjS8B+mdaSno++qyGOuHZi7XCaqOVP0Fv ypuspPyjI9iLohLwZgpl/JtoseLSBV0Pa8AqbmI2OWPflpB4jcHT3M25pwa4Oy4zF8ll fg9baUPsVIPVoCyl9YZyBG+KFYnoYAgaTMszh902cVNewB4/APeRe0rzKubzhOEE9dQJ yoF2Cf/aNR+LweRyYcym17EopXYP/Z+CXaiVnBJgQHi3awnJCroF2hkJjeThrLodARek Mb4g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=u4o2cte/L++CcWKnAvQTA2CJ46nMWLYGT3r+Js66cyk=; b=NZybAL8hEqiy+YVWHr9CVIr3d8cI87DFSz+NxTJP8JOI9HI3hZ+Q3P4Lq0YgrATAI3 QErVPLnByKfH2OiSY/a9Tak1YnbW13kr+zzxbpRnUswcejv1LgErme657KpR81Uvxlm+ NfvOAcvN8MygEy7t3Rxb/tpW4LVG6H8otSbM5QacGQDNQXkwPBdZbQvzseIA/qa/e/nh ew1JdwWi9IdQTedBhrEWK2tCZhqsfn80HmVUZhwZ2YSzJ+1S62av69lX0FLLcCa50PjT yPckNRf6yHc3n8Pm8FFZUX9hTBrOS6p6+1ixxkZZ7MrMn7uSgQTfbzTNGZHdGLqfeDdr PVEg== X-Gm-Message-State: ALoCoQnuonVV1d/yqgne6lJSW0Jv/AVLpQr38NUOKqfj2fuN8AKW3sJScqXQMNzwqxqCfL/0j6cz X-Received: by 10.66.129.137 with SMTP id nw9mr26441886pab.107.1446467009753; Mon, 02 Nov 2015 04:23:29 -0800 (PST) Received: from [10.10.10.32] (pb6abf7fa.kngwff01.ap.so-net.ne.jp. [182.171.247.250]) by smtp.gmail.com with ESMTPSA id ea5sm23759803pbc.92.2015.11.02.04.23.28 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 02 Nov 2015 04:23:28 -0800 (PST) To: cose@ietf.org References: From: Ludwig Seitz Message-ID: <563755BE.9060100@sics.se> Date: Mon, 2 Nov 2015 13:23:26 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms080007010903070802090305" Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Remove_=E2=80=9Ccounter_signat?= =?utf-8?b?dXJl4oCdIGhlYWRlciBwYXJhbWV0ZXIgKCMxMik=?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 12:23:31 -0000 This is a cryptographically signed message in MIME format. --------------ms080007010903070802090305 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 2015-11-01 19:33, obgm wrote: > Concur. I presume that the counter signature was introduced to handle > the case of intermediaries that (legally) change options of CoAP > messages when forwarding them (e.g. forwarding proxy that creates a > Uri-* options from a Proxy-Uri options). > The solution to deal with changeable CoAP options such as Max-Age, > Observe, etc. will most likely require encapsulating the original CoAP > message into a COSE object and transfer this as a payload in one of the= > proposed CoAP-over-COSE messaging mechanisms anyway. > Encapsulating CoAP messages in COSE objects and sending them as the=20 payload of a new CoAP message seems like a very bad idea if your main=20 goal is to reduce the over-the-wire message sizes. Also counter signatures could be used in a publish-subscribe scenario=20 with a message broker (as described in draft-koster-core-coap-pubsub)=20 where the message broker provides the counter signature. /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms080007010903070802090305 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTEwMjEyMjMyNlowLwYJKoZI hvcNAQkEMSIEIENBdeWSuW2IQN5vNB9X4dM3aAe10NIMFXYRQk6KhKG+MGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQApp53E/BTN4OTe8Mk47dB2euWfsTgo6g5h1/h8mxuS gxYYKX0MaA1O/IMMW/w4mzQ8sropSI4v8Am+PaJCl5FpNSgS92ouRpCsNNcvj9t43tlNH2Xt EvoRQzs+RVHinUZoXezGfOA3TZfygroZssas9li/hFuUcpV6dQdhZs5naYFa+mZyR2PUj+q/ uZx1qqAj5t+ZqssajHijP+ZBWLZeU1yOA7jWHn6vA7IlXblOdaN/GYa6a8JaW5wA7C/dULTP eTiUEK07NXo05cJcTgXvBsHAJCM3VwXu/wo5FYvWjCqsoQKuF2/Ok75YJ7r/jL8hYOf6pd3S CiS3loQGmONqAAAAAAAA --------------ms080007010903070802090305-- From nobody Mon Nov 2 06:06:26 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EC6E1B36DB for ; Mon, 2 Nov 2015 06:06:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.781 X-Spam-Level: X-Spam-Status: No, score=-0.781 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_FR=0.35, SPF_NEUTRAL=0.779, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t_1ngpAK35ep for ; Mon, 2 Nov 2015 06:06:23 -0800 (PST) Received: from shiva.imag.fr (mx1.imag.fr [IPv6:2001:660:5301:6::5]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68FC61B36DA for ; Mon, 2 Nov 2015 06:06:23 -0800 (PST) Received: from globule.imag.fr (globule.imag.fr [129.88.34.238]) by shiva.imag.fr (8.13.8/8.13.8) with ESMTP id tA2E6JZS011585 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Mon, 2 Nov 2015 15:06:19 +0100 Received: from [192.168.1.21] (8.55.31.93.rev.sfr.net [93.31.55.8]) (authenticated bits=0) by globule.imag.fr (8.13.8/8.13.8) with ESMTP id tA2E6KLU011459 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Mon, 2 Nov 2015 15:06:20 +0100 Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Malisa Vucinic In-Reply-To: <5637547F.1050603@sics.se> Date: Mon, 2 Nov 2015 15:06:19 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <40C74ABC-DBB6-409D-80BA-9B2435EA256A@imag.fr> References: <5637547F.1050603@sics.se> To: Ludwig Seitz X-Mailer: Apple Mail (2.2104) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0.1 (shiva.imag.fr [129.88.30.5]); Mon, 02 Nov 2015 15:06:19 +0100 (CET) X-IMAG-MailScanner-Information: Please contact MI2S MIM for more information X-MailScanner-ID: tA2E6JZS011585 X-IMAG-MailScanner: Found to be clean X-IMAG-MailScanner-SpamCheck: X-IMAG-MailScanner-From: malisa.vucinic@imag.fr MailScanner-NULL-Check: 1447077979.9999@tPlUvc0fOwSG3I2uoCQ+6A Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] [cose-issues] Are there enough use cases for external_aad to warrant its inclusion? (#16) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 14:06:25 -0000 +1. This is an important feature for any environment with limited MTU = sizes. Said that, the argument that COSE should deal only with UDP = payload size is not very helpful in energy-constrained environments = where packet loss is significant, as we try to avoid fragmentation at = all costs. =20 Mali=9Aa > On 02 Nov 2015, at 13:18, Ludwig Seitz wrote: >=20 > Actually external AAD is a very useful feature to keep message size = small, for example if you have parameters that are part of the = application layer protocol (like the URI-* options or the RESTful method = header in a CoAP message) that you want to integrity protect, without = having to duplicate them in the COSE message. From nobody Tue Nov 3 04:19:50 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82B461B32C6 for ; Tue, 3 Nov 2015 04:19:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id urTxTpRQ0U2B for ; Tue, 3 Nov 2015 04:19:48 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext8.iad.github.net [192.30.252.199]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 038CB1B32CD for ; Tue, 3 Nov 2015 04:19:48 -0800 (PST) Date: Tue, 03 Nov 2015 04:19:46 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446553186; bh=a9Pwr1EyLglQKYprup28+f+VSyA2bQjLloke8QnhmLI=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=b2Gdc7/sG54lCRo8NACw/dP97odMp5SoF4C31tCeoATazg6vpCGg1+q5CvCssK66L HsOyajmI+2pC43bYqyOFrRnDpkpPnGYvtawuXT9rpKwq9uSEpm9rZ2tyNEdtEvz7So WkJHuLRFQkrJo575wbyfzhm6N0XxHAFYyjWiptrA= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5638a66297535_4b3b3f8dedf772bc362159a"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Are there enough use cases for external_aad to warrant its inclusion? (#16) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2015 12:19:49 -0000 ----==_mimepart_5638a66297535_4b3b3f8dedf772bc362159a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Per discussion at the f2f meeting: This is a required feature for the CoAP world so that headers in the message can be integrity protected without having to duplicate them --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/16#issuecomment-153336418 ----==_mimepart_5638a66297535_4b3b3f8dedf772bc362159a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Per discussion at the f2f meeting: This is a required feature for the CoAP world so that headers in the message can be integrity protected without having to duplicate them

—
Reply to this email directly or view it on GitHub.

----==_mimepart_5638a66297535_4b3b3f8dedf772bc362159a-- From nobody Tue Nov 3 04:50:16 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95E8E1B3325 for ; Tue, 3 Nov 2015 04:50:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.908 X-Spam-Level: X-Spam-Status: No, score=-5.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PPfMGR5lKLrW for ; Tue, 3 Nov 2015 04:50:10 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext5.iad.github.net [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6B2A1B3326 for ; Tue, 3 Nov 2015 04:50:10 -0800 (PST) Date: Tue, 03 Nov 2015 04:50:09 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446555009; bh=Eb0Ma8vd70BDo4mT/ogXoJUYhdH6DFV5FkDEGr07Sks=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=MDOdysCEAllrduBaPyyrrtJ9VSRIQkdOzFNi8+nV4ezYRGQUc/ioe/zM4YW7kQIDD 8hiqRjafPL+kJ4QsJxWIYcBSUE+ucunYRdLa8u0DbPCFXuCH4bvEefIv2LZ9gm1euc V//lmMAd9d46Y0S5El05ikpZt7OfRsEjuL9uLZNo= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5638ad81c3508_44883fcec33d52bc356937a"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Require publicly visible stable specifications for IANA registrations (#39) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2015 12:50:15 -0000 ----==_mimepart_5638ad81c3508_44883fcec33d52bc356937a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit The range for first come, first serve, which is where I would expect this to be generally done, starts with the > 65536 range. The private range works for testing, but not for deployment except for closed systems. Numbers in the lower positive range could be issued on a early basis in which case the specification might not be immediately required. Again a case where the spec is not registered. There is no real shortage of points to register in and there would be more careful monitoring of the smaller number range. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/39#issuecomment-153341875 ----==_mimepart_5638ad81c3508_44883fcec33d52bc356937a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

The range for first come, first serve, which is where I would expect this to be generally done, starts with the > 65536 range. The private range works for testing, but not for deployment except for closed systems. Numbers in the lower positive range could be issued on a early basis in which case the specification might not be immediately required. Again a case where the spec is not registered. There is no real shortage of points to register in and there would be more careful monitoring of the smaller number range.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_5638ad81c3508_44883fcec33d52bc356937a-- From nobody Tue Nov 3 15:23:39 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6B651B3597 for ; Tue, 3 Nov 2015 15:23:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.378 X-Spam-Level: X-Spam-Status: No, score=-1.378 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AD2FKFImFp8c for ; Tue, 3 Nov 2015 15:23:35 -0800 (PST) Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8759E1B3596 for ; Tue, 3 Nov 2015 15:23:35 -0800 (PST) Received: by iofz202 with SMTP id z202so36126852iof.2 for ; Tue, 03 Nov 2015 15:23:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:from:date:message-id:subject:to:content-type; bh=EuPIkzvrE5kB9YjP3nbe44QFKtmmP2Q9VSZcFcaC/Rs=; b=i+iKeh9Z4Ll9xAr28BhUrCdxsW9+3P6OARewKPE+x6mA8Z2/ir0TISSZ8axeZqorhD Svc1s7M8PVFJBf4/pKK7AEr4gO2NJQHg44/tUeoPnuWZsjFtKi/nZIx43NUerD6pLMDg qybzBZ4noXOkpTK403XsnaMSDx92uunqumY20= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-type; bh=EuPIkzvrE5kB9YjP3nbe44QFKtmmP2Q9VSZcFcaC/Rs=; b=WyARAEzTcT+v7iDojc1WORlfLUxCNLJxPkfU5aRpYUXCiSdpQYKhFCVXVEVgqifO1I oqvnCBe82YpQmqPPj4A39rTwyt2L3nhwZTfdBPsY1T/Q5s5q1WzUMspkRj23ok7l1v0/ AjdNnZh5ao2EzGcDVAyk0nJvnRMkoXe+GW1Y6aeZmjtvIjtX/APYpWpkT6J1E3Ylr4qt zytyUB34FZC/04g83Am+UU9H6/AwBJXj61dKUb/UiBXE7rvbwFu6S5e9+I+KDkj7NnQN FpoELph9MTJBQp2GnkJetSpKyhAG6eppJ4vAv834OW/aWNcMtxV1zRWaPbFOqXh9ZJ+k 6vDg== X-Gm-Message-State: ALoCoQk7sUKFjonVAezBBH+1NaOUY87pqZXdoF9fY8SpN+j2cGd7NeUyKhk9REWIAD7tH2z9Jp8d X-Received: by 10.107.3.212 with SMTP id e81mr36999961ioi.129.1446593014879; Tue, 03 Nov 2015 15:23:34 -0800 (PST) MIME-Version: 1.0 Received: by 10.64.117.132 with HTTP; Tue, 3 Nov 2015 15:23:05 -0800 (PST) From: Brian Campbell Date: Tue, 3 Nov 2015 16:23:05 -0700 Message-ID: To: cose@ietf.org Content-Type: multipart/alternative; boundary=001a113dfbd6c9703a0523ab2e2e Archived-At: Subject: [COSE] MAC n Cipher? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2015 23:23:36 -0000 --001a113dfbd6c9703a0523ab2e2e Content-Type: text/plain; charset=UTF-8 The sentence, "Implementations creating and validating MAC values MUST validate that ..." shows up in a number of places that don't seem quite right - like 10.1 AES GCM , 10.2 AES CCM, 10.3 ChaCha20 and Poly1305 , and 12.2.1 AES Key Wrapping . Is this a copy/paste issue, or am I confused here? --001a113dfbd6c9703a0523ab2e2e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
The sentence, "Implementations creating and vali= dating MAC values MUST validate that ..." shows up in a number of plac= es that don't seem quite right - like 10.1 AES GCM, 10.2 AES CCM,= 10.3=C2=A0 ChaCha20 and Poly1305, and 12.2.1 AES Key Wrapping<= /a>. Is this a copy/paste issue, or am I confused here?
--001a113dfbd6c9703a0523ab2e2e-- From nobody Tue Nov 3 15:34:06 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 598961B3608 for ; Tue, 3 Nov 2015 15:34:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.378 X-Spam-Level: X-Spam-Status: No, score=-1.378 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 53IU9iKk62I7 for ; Tue, 3 Nov 2015 15:34:03 -0800 (PST) Received: from mail-ig0-x233.google.com (mail-ig0-x233.google.com [IPv6:2607:f8b0:4001:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0225F1B2E97 for ; Tue, 3 Nov 2015 15:34:02 -0800 (PST) Received: by igpw7 with SMTP id w7so79361810igp.1 for ; Tue, 03 Nov 2015 15:34:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:from:date:message-id:subject:to:content-type; bh=2gZOC2v1okRcxQ4ptGY/OL2nwu4XS70U3TWJdobcNSA=; b=EZ2qb7SQco0JV0VZvZIwtAdp+ucra0HCc5C5j9wmLewI/t2wwxtjXzvdMPcek0FQjc Gke2YzC72hbDQ1yMzYpaU2X+Qb0PQ4Kb89kguF+sNgsoKCAhQO/6V6l6tXzxuU5Utljc Ubf+03oYla+6LwdEIZkr8wMk1kPwH4G/owvmw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-type; bh=2gZOC2v1okRcxQ4ptGY/OL2nwu4XS70U3TWJdobcNSA=; b=lh+IJsBoRjY1hmoNbjiKrgweml2ICnG1lnbo8KwjZr3v1qnvSu64c0s8UskkWFBQp3 dBO6B2v5TqWMyZz2+2Vm1lkMHboAt9q73EMJI75MZwVMRXghcpuF2vyOtRKIPAgTipuC EyB8HjrHVyl3bjbe8LJJw//ZgeHRSDzPNsO05d2ncj3eSskjyys4tPxnjP/5DX4UIJ4n 7q4uTjyFdHr5R4W/M1IbDuAAG1n95WY2TeIx5A0BWGan4eD/fsuwztTLceZRTzZCiXHy zY73KBnVTE9sR7MkTphCFuUNukGhcCSFLvi0pWEfExtQAh0Qnw8a+MFPa86hwhOdSs1V 8QlA== X-Gm-Message-State: ALoCoQnC2CqJrwJkqSiDvy5NEnXPfIXG0NiyFiFma8sOCtbED8dlBM7dFCFw///3LVLIxGIxh/81 X-Received: by 10.50.114.162 with SMTP id jh2mr20266847igb.49.1446593642233; Tue, 03 Nov 2015 15:34:02 -0800 (PST) MIME-Version: 1.0 Received: by 10.64.117.132 with HTTP; Tue, 3 Nov 2015 15:33:32 -0800 (PST) From: Brian Campbell Date: Tue, 3 Nov 2015 16:33:32 -0700 Message-ID: To: cose@ietf.org Content-Type: multipart/alternative; boundary=089e0122ad742e40a60523ab54ee Archived-At: Subject: [COSE] 5 or 6 recipient algorithm classes? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2015 23:34:05 -0000 --089e0122ad742e40a60523ab54ee Content-Type: text/plain; charset=UTF-8 https://tools.ietf.org/html/draft-ietf-cose-msg-06#section-5.1.1 says that a "short summary of the six recipient algorithm classes" will be listed and then follows with a list of five items. I'm no mathematician but that doesn't seem correct to me. I'm no wordsmith either but, in that same section, shouldn't "the CEK is encrypted in the recipient's public key" be something more like "the CEK is encrypted with the recipient's public key"? --089e0122ad742e40a60523ab54ee Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
https://tools.ietf.org/html/draft= -ietf-cose-msg-06#section-5.1.1 says that a "short summary of the = six recipient algorithm classes" will be listed and then follows with = a list of five items. I'm no mathematician but that doesn't seem co= rrect to me.

I'm no wordsmith either but, in that same se= ction, shouldn't "the CEK is encrypted in the recipient's publ= ic key" be something more like "the CEK is encrypted with the rec= ipient's public key"?
--089e0122ad742e40a60523ab54ee-- From nobody Tue Nov 3 15:39:09 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8711C1B3623 for ; Tue, 3 Nov 2015 15:39:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WqriMtoiv9Zm for ; Tue, 3 Nov 2015 15:39:07 -0800 (PST) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DE1C1B361F for ; Tue, 3 Nov 2015 15:39:07 -0800 (PST) Received: from hebrews (dhcp-36-132.meeting.ietf94.jp [133.93.36.132]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id 3834938F07; Tue, 3 Nov 2015 15:39:05 -0800 (PST) From: "Jim Schaad" To: "'Brian Campbell'" , References: In-Reply-To: Date: Wed, 4 Nov 2015 08:36:18 +0900 Message-ID: <075001d11690$7265a220$5730e660$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0751_01D116DB.E24ED0C0" X-Mailer: Microsoft Outlook 15.0 thread-index: AQG2R5cnLa6ChuvqeLfqRslLzeEXxJ7AkXqQ Content-Language: en-us Archived-At: Subject: Re: [COSE] MAC n Cipher? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2015 23:39:08 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0751_01D116DB.E24ED0C0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable That is a cut and paste that I did not alter when I changed from MACS to = AEADs. =20 From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Brian Campbell Sent: Wednesday, November 04, 2015 8:23 AM To: cose@ietf.org Subject: [COSE] MAC n Cipher? =20 The sentence, "Implementations creating and validating MAC values MUST = validate that ..." shows up in a number of places that don't seem quite = right - like 10.1 AES GCM = , 10.2 = AES CCM, = 10.3 = = ChaCha20 and Poly1305, and 12.2.1 AES Key Wrapping = . Is = this a copy/paste issue, or am I confused here? =20 ------=_NextPart_000_0751_01D116DB.E24ED0C0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

That is a cut and paste that I did not alter when I changed from MACS = to AEADs.

 

From:<= /b> = COSE [mailto:cose-bounces@ietf.org] On Behalf Of Brian = Campbell
Sent: Wednesday, November 04, 2015 8:23 = AM
To: cose@ietf.org
Subject: [COSE] MAC n = Cipher?

 

The sentence, "Implementations creating and = validating MAC values MUST validate that ..." shows up in a number = of places that don't seem quite right - like = 10.1 AES GCM, = 10.2 AES CCM, = 10.3  ChaCha20 and Poly1305, and 12.2.1 AES Key Wrapping. Is this a copy/paste issue, or am I = confused here?

 

------=_NextPart_000_0751_01D116DB.E24ED0C0-- From nobody Tue Nov 3 15:41:12 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD3391A8939 for ; Tue, 3 Nov 2015 15:41:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JGr84rp6-RGP for ; Tue, 3 Nov 2015 15:41:09 -0800 (PST) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DBB51A8920 for ; Tue, 3 Nov 2015 15:41:09 -0800 (PST) Received: from hebrews (dhcp-36-132.meeting.ietf94.jp [133.93.36.132]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 4E3852CA2F; Tue, 3 Nov 2015 15:41:08 -0800 (PST) From: "Jim Schaad" To: "'Brian Campbell'" , References: In-Reply-To: Date: Wed, 4 Nov 2015 08:38:22 +0900 Message-ID: <075501d11690$bb71e3c0$3255ab40$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0756_01D116DC.2B5A7620" X-Mailer: Microsoft Outlook 15.0 thread-index: AQKk4/35Ug5MEd5x8ondfu7amlRdhZzjWVcw Content-Language: en-us Archived-At: Subject: Re: [COSE] 5 or 6 recipient algorithm classes? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2015 23:41:11 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0756_01D116DC.2B5A7620 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable There used to be six there, but I combined two of them together. =20 Yes with probably reads better. =20 Jim =20 =20 From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Brian Campbell Sent: Wednesday, November 04, 2015 8:34 AM To: cose@ietf.org Subject: [COSE] 5 or 6 recipient algorithm classes? =20 https://tools.ietf.org/html/draft-ietf-cose-msg-06#section-5.1.1 says = that a "short summary of the six recipient algorithm classes" will be = listed and then follows with a list of five items. I'm no mathematician = but that doesn't seem correct to me.=20 I'm no wordsmith either but, in that same section, shouldn't "the CEK is = encrypted in the recipient's public key" be something more like "the CEK = is encrypted with the recipient's public key"? ------=_NextPart_000_0756_01D116DC.2B5A7620 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

There used to be six there, but I combined two of them = together.

 

Yes with probably reads better.

 

Jim

 

 

From:<= /b> = COSE [mailto:cose-bounces@ietf.org] On Behalf Of Brian = Campbell
Sent: Wednesday, November 04, 2015 8:34 = AM
To: cose@ietf.org
Subject: [COSE] 5 or 6 = recipient algorithm classes?

 

https://tools.ietf.org/html/draft-ietf-cose-msg-06#sect= ion-5.1.1 says that a "short summary of the six recipient = algorithm classes" will be listed and then follows with a list of = five items. I'm no mathematician but that doesn't seem correct to me. =

I'm no wordsmith either but, = in that same section, shouldn't "the CEK is encrypted in the = recipient's public key" be something more like "the CEK is = encrypted with the recipient's public = key"?

------=_NextPart_000_0756_01D116DC.2B5A7620-- From nobody Tue Nov 3 16:44:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 360591A1A04 for ; Tue, 3 Nov 2015 16:44:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IE51Le6IPM65 for ; Tue, 3 Nov 2015 16:44:37 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 883D91A039F for ; Tue, 3 Nov 2015 16:44:37 -0800 (PST) Date: Tue, 03 Nov 2015 16:44:34 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446597874; bh=2ecNh5MJhqRiQlT/8TCxfj1zCHUHFTZC5uYGLkdtxHM=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=dhxLhexx4kBihgpcsvS13D+Kpvp7DRJWe892r0wuYeIegbUYXDopOyAKgxYhWpUep RPh9WS/dtAtNFWydeb3y56XkoFWfla/o0lKrSnUa/pIIe/Tenpk8RH4Pad5yZQd8Vk jl4RXEsvQw4ui8vUK5Clw2mS0obAERsL1v2b34ds= From: LudwigSeitz To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_563954f2b92a7_67063f87c575f29c387611"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: LudwigSeitz X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Restore compression header parameter (#22) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Nov 2015 00:44:39 -0000 ----==_mimepart_563954f2b92a7_67063f87c575f29c387611 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit I am not in favour of having this parameter in the COSE spec. The reason is that I suspect it will not be used very much in the constrained space, and if this parameter can be part of a message, I have to implement code on my constrained device to handle it. Keep in mind that we are dealing with devices that can have as little as 100 KB of flash memory for code libraries and other persistent data (See Class 1, Section 3 RFC 7228). --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/22#issuecomment-153535305 ----==_mimepart_563954f2b92a7_67063f87c575f29c387611 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

I am not in favour of having this parameter in the COSE spec. The reason is that I suspect it will not be used very much in the constrained space, and if this parameter can be part of a message, I have to implement code on my constrained device to handle it.
Keep in mind that we are dealing with devices that can have as little as 100 KB of flash memory for code libraries and other persistent data (See Class 1, Section 3 RFC 7228).

—
Reply to this email directly or view it on GitHub.

----==_mimepart_563954f2b92a7_67063f87c575f29c387611-- From nobody Tue Nov 3 19:44:15 2015 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E628F1A9087; Tue, 3 Nov 2015 19:44:12 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.8.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151104034412.15584.59964.idtracker@ietfa.amsl.com> Date: Tue, 03 Nov 2015 19:44:12 -0800 Archived-At: Cc: cose@ietf.org Subject: [COSE] I-D Action: draft-ietf-cose-msg-07.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Nov 2015 03:44:13 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption Working Group of the IETF. Title : CBOR Encoded Message Syntax Author : Jim Schaad Filename : draft-ietf-cose-msg-07.txt Pages : 86 Date : 2015-11-03 Abstract: Concise Binary Object Representation (CBOR) is data format designed for small code size and small message size. There is a need for the ability to have the basic security services defined for this data format. This document specifies procesing for signatures, message authentication codes, and encryption using CBOR. This document also specifies a represention for cryptographic keys using CBOR. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cose-msg-07 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-msg-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Nov 3 20:54:49 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AE471AC42F for ; Tue, 3 Nov 2015 20:54:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VUNhpeDJdRDh for ; Tue, 3 Nov 2015 20:54:46 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext5.iad.github.net [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D5C71AC431 for ; Tue, 3 Nov 2015 20:54:43 -0800 (PST) Date: Tue, 03 Nov 2015 20:54:42 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446612882; bh=vloJJJtkyUhJ6jDoI341gQsKo8feHUl19jvdjYoxbrE=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=oWc8xvm9iCZskIH8jJHRM2rVMXd7IDnehX/sDvszQeKxzmuC9ni7lSKAZw3vKWYSd WMKLukLqkpzI9h2ApthyECZmmbpuT7WfIdJrBwVVXjBd5DRbYXVZFaJ+TrfoRGrKky 97+3AOQEFwLR8Tgi2jMrGskpbTsjNxTHT3HtqX9M= From: cabo To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_56398f9251d39_5fa43f8afe0552bc6746d"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: cabo X-GitHub-Recipient: cose-ietf X-GitHub-Reason: comment X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Cc: cose-ietf Subject: Re: [COSE] [cose-issues] Restore compression header parameter (#22) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Nov 2015 04:54:48 -0000 ----==_mimepart_56398f9251d39_5fa43f8afe0552bc6746d Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit I'm sympathetic with Ludwig's point, however, it should be the prerogative of the enclosing media type to define whether decompression capability is expected or not. (Also, we have to be careful about equating compression with deflate. There are other schemes that are more appropriate for decompression on constrained devices.) --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/22#issuecomment-153572455 ----==_mimepart_56398f9251d39_5fa43f8afe0552bc6746d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

I'm sympathetic with Ludwig's point, however, it should be the prerogative of the enclosing media type to define whether decompression capability is expected or not.
(Also, we have to be careful about equating compression with deflate. There are other schemes that are more appropriate for decompression on constrained devices.)

—
Reply to this email directly or view it on GitHub.

----==_mimepart_56398f9251d39_5fa43f8afe0552bc6746d-- From nobody Tue Nov 3 21:52:49 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0DF871ACDF2 for ; Tue, 3 Nov 2015 21:52:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KsF4vsgkcYcj for ; Tue, 3 Nov 2015 21:52:44 -0800 (PST) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AA631ACDF0 for ; Tue, 3 Nov 2015 21:52:44 -0800 (PST) Received: from hebrews (dhcp-36-132.meeting.ietf94.jp [133.93.36.132]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id B4F252CA24 for ; Tue, 3 Nov 2015 21:52:43 -0800 (PST) From: "Jim Schaad" To: References: <20151104034412.15584.59964.idtracker@ietfa.amsl.com> In-Reply-To: <20151104034412.15584.59964.idtracker@ietfa.amsl.com> Date: Wed, 4 Nov 2015 14:49:57 +0900 Message-ID: <07fc01d116c4$a48adca0$eda095e0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 thread-index: AQGDFvyOK2raSb5t7O2EkfxZVNLBEJ8nWzKw Content-Language: en-us Archived-At: Subject: [COSE] FW: I-D Action: draft-ietf-cose-msg-07.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Nov 2015 05:52:48 -0000 Based on my quick review - this is almost all editorial changes. > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Wednesday, November 04, 2015 12:44 PM > To: i-d-announce@ietf.org > Cc: cose@ietf.org > Subject: [COSE] I-D Action: draft-ietf-cose-msg-07.txt > > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the CBOR Object Signing and Encryption Working > Group of the IETF. > > Title : CBOR Encoded Message Syntax > Author : Jim Schaad > Filename : draft-ietf-cose-msg-07.txt > Pages : 86 > Date : 2015-11-03 > > Abstract: > Concise Binary Object Representation (CBOR) is data format designed > for small code size and small message size. There is a need for the > ability to have the basic security services defined for this data > format. This document specifies procesing for signatures, message > authentication codes, and encryption using CBOR. This document also > specifies a represention for cryptographic keys using CBOR. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cose-msg-07 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-msg-07 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Wed Nov 4 17:02:22 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FE841B2E47 for ; Wed, 4 Nov 2015 17:02:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.608 X-Spam-Level: X-Spam-Status: No, score=-5.608 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zQtEx3VBxzq5 for ; Wed, 4 Nov 2015 17:02:19 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50D5B1B2EC4 for ; Wed, 4 Nov 2015 17:02:19 -0800 (PST) Date: Wed, 04 Nov 2015 17:02:18 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446685338; bh=yYQP/IxJbe814GAtlv6f0zkvsvTczDP9zKItLpD8MNg=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=oIXnfD0kqbmMf0GHtPjn4TZ/10nc7nPuorcFlYJ45s0MXmHap7ljEywJZNkkwRd2i RnQQqjQ/eDZoPT6znOrHVBS7D0cFBtwQEWiQlkkaglBF1yH38GR+OED9bEp986Nb0r QV9nIekbEePAjuy5muTNPIZ6b0rtGpsXJXnMI2Tw= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_563aaa9a560e8_752f3fa42fbdb2b82656a7"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Remove_=E2=80=9Ccounter_signat?= =?utf-8?b?dXJl4oCdIGhlYWRlciBwYXJhbWV0ZXIgKCMxMik=?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2015 01:02:21 -0000 ----==_mimepart_563aaa9a560e8_752f3fa42fbdb2b82656a7 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Counter signature was actually introduced to deal with the subscription model of CoAP. There is a potential need for the server providing the data store the ability to 1) validate that the Resource server provided the data, without being able to decrypt the data 2) to provide to the observers a statement that the data was received by the data store. The goal was to not require a full two layer mapping of the message and this was done to try and avoid that. It may also find some usage in terms of proxies doing counter signatures to say that it did come from a specific sub-network and give a greater amount of origination attestation. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/12#issuecomment-153919924 ----==_mimepart_563aaa9a560e8_752f3fa42fbdb2b82656a7 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Counter signature was actually introduced to deal with the subscription model of CoAP. There is a potential need for the server providing the data store the ability to 1) validate that the Resource server provided the data, without being able to decrypt the data 2) to provide to the observers a statement that the data was received by the data store. The goal was to not require a full two layer mapping of the message and this was done to try and avoid that. It may also find some usage in terms of proxies doing counter signatures to say that it did come from a specific sub-network and give a greater amount of origination attestation.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_563aaa9a560e8_752f3fa42fbdb2b82656a7-- From nobody Wed Nov 4 20:12:09 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B73501ACD72 for ; Wed, 4 Nov 2015 20:12:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rWRzqC1TP_0x for ; Wed, 4 Nov 2015 20:12:05 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext6.iad.github.net [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C35F91A9066 for ; Wed, 4 Nov 2015 20:12:05 -0800 (PST) Date: Wed, 04 Nov 2015 20:12:04 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446696724; bh=LS2YPiqNqHV2zTntVsOjP2dCQsCNo2mrGwA/pDKOXBY=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=qKRj/8X5fBzBlC1QmDcdYV/NRubQCP7WsQVziHyAhEh+1/7T3KsorxVMNDvw/Ajh1 zNTKxWgJ9kUz0yqfDxBWZftihDthOdI7xxsvKt1FODgG0pie+DkRs2J90UBBZjf+xw GZyWYi8SxGGubbP3jsm/kljyQW+lsPzD6Vlh4p0E= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_563ad7144634b_3b53fdd5eac92b8817d8"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Separate the nonce and IV header parameters (#27) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2015 04:12:07 -0000 ----==_mimepart_563ad7144634b_3b53fdd5eac92b8817d8 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit It is not clear that this makes sense. In many cases the IV is described as a nonce value not an IV. An example of this is GCM. It depends on what one things a nonce is as oppose to an IV. How would you characterize a nonce that is not trans-actional, and thus by your criteria it should be place in the content not the wrapper --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/27#issuecomment-153950534 ----==_mimepart_563ad7144634b_3b53fdd5eac92b8817d8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

It is not clear that this makes sense. In many cases the IV is described as a nonce value not an IV. An example of this is GCM. It depends on what one things a nonce is as oppose to an IV. How would you characterize a nonce that is not trans-actional, and thus by your criteria it should be place in the content not the wrapper

—
Reply to this email directly or view it on GitHub.

----==_mimepart_563ad7144634b_3b53fdd5eac92b8817d8-- From nobody Wed Nov 4 21:22:20 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 057BD1B3912 for ; Wed, 4 Nov 2015 21:22:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E4WncJjwQ2Im for ; Wed, 4 Nov 2015 21:22:17 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94C941B3276 for ; Wed, 4 Nov 2015 21:22:17 -0800 (PST) Date: Wed, 04 Nov 2015 21:22:16 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446700936; bh=fNghDlCUCEc7UjjCTDrU4HoBz3zQ0a0gX4/cVUobXMQ=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=enHkJSCOD5DgzF0Md5g0HhniTFWVpN2tutAvWACwWrSSSJl0zA25WJN126GRN0212 mZGS+fIpoQQmswtVgzxof/fLScHOIGn12x61Cr5Hi+kODpxVi1KgJdfk1OQK1H76sR FZGmp6dGOpoDhfyxZ6Pf3w/kKuLOP+v7ca+Ks+N8= From: Mike Jones To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_563ae7888bb4b_5a953fa4662452bc2150242"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-GitHub-Reason: comment X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Cc: cose-ietf Subject: Re: [COSE] [cose-issues] Restore compression header parameter (#22) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2015 05:22:19 -0000 ----==_mimepart_563ae7888bb4b_5a953fa4662452bc2150242 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit The CRIME argument is persuasive. I'm willing to drop this request on that basis. Thanks to all who discussed the possibility. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/22#issuecomment-153960558 ----==_mimepart_563ae7888bb4b_5a953fa4662452bc2150242 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

The CRIME argument is persuasive. I'm willing to drop this request on that basis. Thanks to all who discussed the possibility.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_563ae7888bb4b_5a953fa4662452bc2150242-- From nobody Wed Nov 4 21:31:21 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 813D21B383A for ; Wed, 4 Nov 2015 21:31:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.608 X-Spam-Level: X-Spam-Status: No, score=-5.608 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OTWgjRhaN3Mu for ; Wed, 4 Nov 2015 21:31:18 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 326BA1B399C for ; Wed, 4 Nov 2015 21:31:16 -0800 (PST) Date: Wed, 04 Nov 2015 21:31:15 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446701475; bh=jriCvzlCZmVRSd71gxojCMCam/ekc+4RWxwqxAP6kUc=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=D9pmZFBgeOhrs6w37X3AJpjtm4oY8aC5dklu7N7y2lL/TWJ0j2uTdRhOw43pMnQDf EjwWtpjlmoK10X90EYeil0CDIEUr2C3DZUZXHAtfjeG8YNgNxAh1GOM/lWJXYVvww+ XFCHWtR7UOoZqMRzTNBglKx5kClOIsdWGJAYPB7Y= From: Mike Jones To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_563ae9a35cc8c_513e3fb5a85dd2a020805e8"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: selfissued X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Remove_=E2=80=9Ccounter_signat?= =?utf-8?b?dXJl4oCdIGhlYWRlciBwYXJhbWV0ZXIgKCMxMik=?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2015 05:31:20 -0000 ----==_mimepart_563ae9a35cc8c_513e3fb5a85dd2a020805e8 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit I'm certainly not against CoAP or other applications defining additional header parameters beyond those defined by the base COSE specification that they want to use via the IANA "COSE Header Parameters" registry. But that's the mechanism that should be used for defining such application-specific parameters - not speculatively adding them to the base specification. Even if possibly useful to multiple applications, that's still not sufficient justification to add it to the base spec. Parameters registered in the IANA registry *are* available for use by multiple applications - which part of the point of registering them. But let's remove "counter signature" from the base spec now. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/12#issuecomment-153961577 ----==_mimepart_563ae9a35cc8c_513e3fb5a85dd2a020805e8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

I'm certainly not against CoAP or other applications defining additional header parameters beyond those defined by the base COSE specification that they want to use via the IANA "COSE Header Parameters" registry. But that's the mechanism that should be used for defining such application-specific parameters - not speculatively adding them to the base specification.

Even if possibly useful to multiple applications, that's still not sufficient justification to add it to the base spec. Parameters registered in the IANA registry are available for use by multiple applications - which part of the point of registering them. But let's remove "counter signature" from the base spec now.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_563ae9a35cc8c_513e3fb5a85dd2a020805e8-- From nobody Fri Nov 6 22:27:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F5DD1A049A for ; Fri, 6 Nov 2015 22:27:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.8 X-Spam-Level: X-Spam-Status: No, score=0.8 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4dk5AO1kk8XA for ; Fri, 6 Nov 2015 22:27:37 -0800 (PST) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7A371A0393 for ; Fri, 6 Nov 2015 22:27:37 -0800 (PST) Received: from hebrews (unknown [210.160.37.27]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id BFEBC38EF0 for ; Fri, 6 Nov 2015 22:27:36 -0800 (PST) From: "Jim Schaad" To: Date: Sat, 7 Nov 2015 15:24:51 +0900 Message-ID: <047b01d11925$0444d800$0cce8800$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdEZHgG5HAXCBmEuRzaei5RysxNH0A== Content-Language: en-us Archived-At: Subject: [COSE] Issue #37 - Use the JOSE key_ops terms X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2015 06:27:39 -0000 The key_ops were added for the use by WebCrypto group, it is not clear that they did a good job in defining them. Some question that I would like responses to are: 1. I there ever a case when one would do derive_bits but not do derive_key, and vice versa. 2. If one is using a polyfill in the WebCrypto group in order to have a non-suported key, one needs to have the derive_bits option set. However, this would most likely not be set if one thinks it is going to only be used for deriving keys. Should this be an options which is not support? Derive key can only be used to generate keys that are supported in native code but not for new polyfill algorithms. 3. Not clear that this is a place where size is an issue. It would mostly be an issue if there is a statement that key_ops should be placed in the ephemeral key structure. I would note that it is not clear that it is legal in WebCrypto to have key_ops on a public key. Do people believe that we should make a statement about providing a key_ops or ephemeral keys? 4. Do people believe that we should worry about the size of keys in other locations. Specifically, key_ops is currently an array but potentially could be an array or a single entry. Is this something that needs to be done? Jim From nobody Sat Nov 7 00:02:03 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 094AE1A877D for ; Sat, 7 Nov 2015 00:02:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 32uFlIXq-VFA for ; Sat, 7 Nov 2015 00:02:01 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FAB81A86F5 for ; Sat, 7 Nov 2015 00:02:01 -0800 (PST) X-AuditID: 1209190c-f79c96d00000038e-f6-563daff847cb Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id AB.2A.00910.8FFAD365; Sat, 7 Nov 2015 03:02:00 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id tA781xZ3021840 for ; Sat, 7 Nov 2015 03:01:59 -0500 Received: from [10.21.87.89] ([210.164.9.12]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tA781tmv002081 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sat, 7 Nov 2015 03:01:58 -0500 From: Justin Richer Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: Date: Sat, 7 Nov 2015 17:01:53 +0900 To: cose@ietf.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrBIsWRmVeSWpSXmKPExsUixCmqrftjvW2YwYKV3BbTtk5ldWD0WLLk J1MAYxSXTUpqTmZZapG+XQJXRs/uC2wFi7gq9p+dxNjAOJ2ji5GTQ0LARGLy4oVsELaYxIV7 68FsIYHFTBJb36p1MXIB2UcYJXZ072WHcPYySdzb9Z0ZpIpNQFVi+poWJhCbWUBd4s+8S8wQ trbEsoWvwWxhAWOJD2+us4DYvAJWEo9PnAKq5+BgEVCReNFvB2KKCAhK3O00h6jQk3h16zIr xD2yErt/P2KawMg3C8mCWUgWzELSsoCReRWjbEpulW5uYmZOcWqybnFyYl5eapGuoV5uZole akrpJkZwgEny7GB8c1DpEKMAB6MSD++GHzZhQqyJZcWVuYcYJTmYlER5S2Jsw4T4kvJTKjMS izPii0pzUosPMUpwMCuJ8EqsBsrxpiRWVqUW5cOkpDlYlMR5N/3gCxESSE8sSc1OTS1ILYLJ ynBwKEnwBqwDahQsSk1PrUjLzClBSDNxcIIM5wEa/nItyPDigsTc4sx0iPwpRkUpcd5kkGYB kERGaR5cLygBXFrCyfOKURzoFWHeSSBVPMDkAdf9CmgwE9BghygbkMEliQgpqQZG/ebL9/t7 u8VV296+fpH9K4F5iqNzFbvF6enpaTuSwvd1HXr8Ylapt5lZztZj4Qap4U5LNnjIXvPMnls6 S2emcO2maB7VGmbpnaflu70DxNgezmwxVFZ+kcVfOSP9xuJ1vvee3vmSGfFyh+feyd/vv+dz tJp1SFIktT7AW+Tw82N3Nz5e9vmJEktxRqKhFnNRcSIAZLvr9NsCAAA= Archived-At: Subject: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2015 08:02:03 -0000 At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the adoption and placement of new work to define a COSE Token, = analogous to the JWT from JOSE. In the room, there was a general = sentiment of support for the work being done, with the wide adoption of = JWT and its driving of JOSE being a common theme of precedent. What = wasn=E2=80=99t clear is where the work should be done and to what end it = should drive. The six positions we are asking the working group to = consider and voice their support for are: A) Define the COSE Token within the COSE working group along side the = COSE Messages (and potentially COSE Auxiliary Algorithms) draft. B) Define the COSE Token inside the OAuth working group. C) Define the COSE Token inside the ACE working group. D) Don=E2=80=99t define the COSE Token anywhere. E) You need more information to decide. F) You don=E2=80=99t give a flying rat about the COSE Token.* The consensus call will remain open for two weeks from today, closing on = November 21, 2015; at which time, hopefully we will have a clear answer = and direction to point this work. Thank you, =E2=80=94 Justin & Kepeng, your COSE chairs * I promised those in the room at Yokohama to offer a flying rat option, = for which I am deeply sorry.= From nobody Sat Nov 7 00:02:30 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 165BF1A8A12 for ; Sat, 7 Nov 2015 00:02:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JLtEJDyZERHx for ; Sat, 7 Nov 2015 00:02:28 -0800 (PST) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E09B51A8953 for ; Sat, 7 Nov 2015 00:02:27 -0800 (PST) X-AuditID: 12074424-f79216d00000156e-83-563db01246ec Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 97.F4.05486.210BD365; Sat, 7 Nov 2015 03:02:26 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id tA782Q3V021880 for ; Sat, 7 Nov 2015 03:02:26 -0500 Received: from [10.21.87.89] ([210.164.9.12]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tA781tmw002081 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sat, 7 Nov 2015 03:02:25 -0500 From: Justin Richer Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: Date: Sat, 7 Nov 2015 17:01:58 +0900 To: cose@ietf.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrBIsWRmVeSWpSXmKPExsUixCmqrSu0wTbM4NtkE4tpW6eyOjB6LFny kymAMYrLJiU1J7MstUjfLoEr48Orq0wF3zgrDlz2b2D8wN7FyMkhIWAisaptBjOELSZx4d56 ti5GLg4hgcVMErtfPYRyjjBK/F9/kgWkSkhgL5PEy4f+IDabgKrE/JW3mEBsZgF1iT/zLjFD 2NoSyxa+BrOFBRQknsw/D7aNV8BKYteqJWwgNouAisTaDyD1HBwiAoISdzvNIUr0JF7duswK cZCsxO7fj5gmMPLNQrJhFpINs5C0LGBkXsUom5JbpZubmJlTnJqsW5ycmJeXWqRrrpebWaKX mlK6iREUYOwuKjsYmw8pHWIU4GBU4uHd8MMmTIg1say4MvcQoyQHk5Iob0mMbZgQX1J+SmVG YnFGfFFpTmrxIUYJDmYlEV6J1UA53pTEyqrUonyYlDQHi5I476YffCFCAumJJanZqakFqUUw WRkODiUJ3lPrgBoFi1LTUyvSMnNKENJMHJwgw3mAhgetBxleXJCYW5yZDpE/xagoJc67CKRZ ACSRUZoH1wtKAJeWcPK8YhQHekWYlwmknQeYPOC6XwENZgIa7BBlAzK4JBEhJdXAaPKkRL3Q hcFD3y5tl/q3Ro3jq+90mcsejd32buuyB2IT8s8nvZ5y4vXj2N5tz5/ME52d5LwxVEcj7KHz 58O6aczz5iXUWJyfdeDdo/MrNwS8NJNLiuM+6X3vmmgLv0jF/O6YI7If/zSt3KDe8FV52/eZ cvYZV66vn8EkMK37krFo8vIw+0lJxUosxRmJhlrMRcWJAFeEN3XbAgAA Archived-At: Subject: [COSE] Consensus Call: RSA 1.5 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2015 08:02:29 -0000 At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the definition of RSA 1.5 algorithms within the messages draft = or an auxiliary draft. This functionality is analogous to the RS* series = of signature methods in JWS and the RSA1_5 encryption method in JWE. The = five positions we are asking the working group to consider and voice = their support for are: A) Drop all support for RSA 1.5 signatures and encryption. B) Define RSA 1.5 support in an auxiliary draft. C) Define RSA 1.5 support in the main draft (note that this option was = previously discussed on the list and did not find favor at the time, so = if you want it back you=E2=80=99ll need to make a strong case). D) You need more information to decide. E) You don=E2=80=99t give a flying rat about RSA 1.5.* Note that this is distinct from RSA PSS support which is being discussed = in a separate thread. The consensus call will remain open for two weeks from today, closing on = November 21, 2015; at which time, hopefully we will have a clear answer = and direction for our editor. Thank you, =E2=80=94 Justin & Kepeng, your COSE chairs * I promised those in the room at Yokohama to offer a flying rat option, = for which I am deeply sorry.= From nobody Sat Nov 7 00:03:09 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FFF11A8A1F for ; Sat, 7 Nov 2015 00:03:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N_TyINgfgbN6 for ; Sat, 7 Nov 2015 00:03:07 -0800 (PST) Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 121E81A8A1C for ; Sat, 7 Nov 2015 00:03:06 -0800 (PST) X-AuditID: 12074423-f797f6d0000023d0-82-563db039ed08 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id 12.44.09168.930BD365; Sat, 7 Nov 2015 03:03:05 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id tA7835HB009694 for ; Sat, 7 Nov 2015 03:03:05 -0500 Received: from [10.21.87.89] ([210.164.9.12]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tA781tmx002081 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sat, 7 Nov 2015 03:03:04 -0500 From: Justin Richer Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: Date: Sat, 7 Nov 2015 17:02:04 +0900 To: cose@ietf.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrFIsWRmVeSWpSXmKPExsUixCmqrGu5wTbM4OhZC4tpW6eyOjB6LFny kymAMYrLJiU1J7MstUjfLoErY/WFPUwFSzgqbh7ZwdrAeIqti5GTQ0LARGJO32Z2CFtM4sK9 9UBxLg4hgcVMEt8vbmOCcI4wSlz79Y0FwtnLJNFzdwETSAubgKrE/JW3wGxmAXWJP/MuMUPY 2hLLFr4Gs4UFFCTmz5gHtoJXwEri49aVYDaLgIrEvNdrgIZycIgICErc7TSHKNGTeHXrMivE RbISu38/YprAyDcLyYZZSDbMQtKygJF5FaNsSm6Vbm5iZk5xarJucXJiXl5qka6ZXm5miV5q SukmRlCQsbso72D8c1DpEKMAB6MSD++GHzZhQqyJZcWVuYcYJTmYlER5S2Jsw4T4kvJTKjMS izPii0pzUosPMUpwMCuJ8EqsBsrxpiRWVqUW5cOkpDlYlMR5N/3gCxESSE8sSc1OTS1ILYLJ ynBwKEnwsq0HahQsSk1PrUjLzClBSDNxcIIM5wEaHgRSw1tckJhbnJkOkT/FqCglzisDkhAA SWSU5sH1gpLApSWcPK8YxYFeEea1B6niASYQuO5XQIOZgAY7RNmADC5JREhJNTBerVN4KS4f FmoXa3jqNWvsyv+Fh3r0Dv6WnrSjOcRoVZwt84odrrXGrA0bDgn6C9sf23Wc4e8uv1m7y1bL Jt4TvXfnNsPpmlsfDeZoTohd+zRs+a1lJV2vXv9P4HAylzW4Vv/HXr1QWNB315Wj77O3/3jV tHuWzh7JO34WlkuTJUVUjr2JrOFWYinOSDTUYi4qTgQAvOsGl90CAAA= Archived-At: Subject: [COSE] Consensus Call: RSA PSS X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2015 08:03:08 -0000 At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the definition of RSA PSS algorithms within the messages draft = or an auxiliary draft. This functionality is analogous to the PS* series = of signature methods in JWS. The five positions we are asking the = working group to consider and voice their support for are: A) Drop all support for RSA PSS signatures and encryption. B) Define RSA PSS support in an auxiliary draft. C) Define RSA PSS support in the main draft. D) You need more information to decide. E) You don=E2=80=99t give a flying rat about RSA PSS.* Note that this is separate from RSA 1.5 support, which is being = discussed on a separate thread. The consensus call will remain open for two weeks from today, closing on = November 21, 2015; at which time, hopefully we will have a clear answer = and direction for our editor. Thank you, =E2=80=94 Justin & Kepeng, your COSE chairs * I promised those in the room at Yokohama to offer a flying rat option, = for which I am deeply sorry.= From nobody Sat Nov 7 00:03:38 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C94CE1A8A43 for ; Sat, 7 Nov 2015 00:03:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LZFBo95j8Haf for ; Sat, 7 Nov 2015 00:03:35 -0800 (PST) Received: from dmz-mailsec-scanner-3.mit.edu (dmz-mailsec-scanner-3.mit.edu [18.9.25.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A3FE1A8990 for ; Sat, 7 Nov 2015 00:03:35 -0800 (PST) X-AuditID: 1209190e-f79046d0000036c0-1f-563db0550de7 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-3.mit.edu (Symantec Messaging Gateway) with SMTP id 4D.A4.14016.650BD365; Sat, 7 Nov 2015 03:03:34 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id tA783XLr009712 for ; Sat, 7 Nov 2015 03:03:33 -0500 Received: from [10.21.87.89] ([210.164.9.12]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tA781tn0002081 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sat, 7 Nov 2015 03:03:32 -0500 From: Justin Richer Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> Date: Sat, 7 Nov 2015 17:02:07 +0900 To: cose@ietf.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrFIsWRmVeSWpSXmKPExsUixCmqrBu2wTbMYOdlNotpW6eyOjB6LFny kymAMYrLJiU1J7MstUjfLoErY+39T6wFEzkrXqx8wdbAuJy9i5GTQ0LARGLj5ndQtpjEhXvr 2boYuTiEBBYzSVz+cZYdwjnCKPFl2nMoZy+TxPXXs9hAWtgEVCXmr7zFBGIzC6hL/Jl3iRnC 1pZYtvA1mC0soCXx5fYxFhCbV8BK4vD032D1LAIqElMXHQeKc3CICAhK3O00hyjRk3h16zIr xEWyErt/P2KawMg3C8mGWUg2zELSsoCReRWjbEpulW5uYmZOcWqybnFyYl5eapGusV5uZole akrpJkZwkEny7WD8elDpEKMAB6MSD++GHzZhQqyJZcWVuYcYJTmYlER5S2Jsw4T4kvJTKjMS izPii0pzUosPMUpwMCuJ8EqsBsrxpiRWVqUW5cOkpDlYlMR5N/3gCxESSE8sSc1OTS1ILYLJ ynBwKEnwsq0HahQsSk1PrUjLzClBSDNxcIIM5wEaHgRSw1tckJhbnJkOkT/FqCglzisDkhAA SWSU5sH1gpLApSWcPK8YxYFeEeatAqniASYQuO5XQIOZgAY7RNmADC5JREhJNTAqdp8JCWR8 tC9EXHeb37dTFfPSmxIswt1NTd7t2p2yx2zDCSMrVeXqkJkq329ozTEtjPY6/i9oislpka92 55ROp+w7OW3u/jjDBPE9Rb7h1qeXhEh8PDKp1etzjrbNX76Fmq8OrOf9zHmfTfaG8frH8zc+ Dv9UJnNGvDBHLuim8DRpkUfTjFWVWIozEg21mIuKEwGDOksC3QIAAA== Archived-At: Subject: [COSE] Consensus Call: Placement of CDDL X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2015 08:03:37 -0000 At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the placement of the CDDL formatted text within the messages = draft. The four positions we are asking the working group to consider = and voice their support for are: A) Place the CDDL at the end of the document in an appendix. Other = examples will remain inline. B) Place the CDDL inline with the normative text alongside other = examples. C) You need more information to decide. D) You don=E2=80=99t give a flying rat about CDDL.* Note that this proposal does NOT consider removal of CDDL or declaration = of normative dependence on CDDL. The English text will remain the = normative form and the CDDL will remain a non-normative example. The = (unfinished, unhomed) CDDL draft will remain an informative reference. The consensus call will remain open for two weeks from today, closing on = November 21, 2015; at which time, hopefully we will have a clear answer = and direction for our editor. Thank you, =E2=80=94 Justin & Kepeng, your COSE chairs * I promised those in the room at Yokohama to offer a flying rat option, = for which I am deeply sorry.= From nobody Sat Nov 7 10:50:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C14611B2C55 for ; Sat, 7 Nov 2015 10:50:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y8R3oPvLi5yJ for ; Sat, 7 Nov 2015 10:50:37 -0800 (PST) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 542711B2C2E for ; Sat, 7 Nov 2015 10:50:37 -0800 (PST) Received: from hebrews (unknown [104.129.198.84]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 9537F2CA09; Sat, 7 Nov 2015 10:50:36 -0800 (PST) From: "Jim Schaad" To: "'Justin Richer'" , References: In-Reply-To: Date: Sat, 7 Nov 2015 10:47:53 -0800 Message-ID: <04de01d1198c$d02cae40$70860ac0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQH2lCXUdbX2sR8wA6csdICDx5u2+Z5F8UTg Content-Language: en-us Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2015 18:50:38 -0000 Either B or C. > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Justin Richer > Sent: Saturday, November 07, 2015 12:02 AM > To: cose@ietf.org > Subject: [COSE] Consensus Call: Adoption of the COSE Token >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding > the adoption and placement of new work to define a COSE Token, = analogous to > the JWT from JOSE. In the room, there was a general sentiment of = support for > the work being done, with the wide adoption of JWT and its driving of = JOSE > being a common theme of precedent. What wasn=E2=80=99t clear is where = the work > should be done and to what end it should drive. The six positions we = are asking > the working group to consider and voice their support for are: >=20 > A) Define the COSE Token within the COSE working group along side the = COSE > Messages (and potentially COSE Auxiliary Algorithms) draft. > B) Define the COSE Token inside the OAuth working group. > C) Define the COSE Token inside the ACE working group. > D) Don=E2=80=99t define the COSE Token anywhere. > E) You need more information to decide. > F) You don=E2=80=99t give a flying rat about the COSE Token.* >=20 > The consensus call will remain open for two weeks from today, closing = on > November 21, 2015; at which time, hopefully we will have a clear = answer and > direction to point this work. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for > which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sat Nov 7 10:51:03 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 462D81B2C5C for ; Sat, 7 Nov 2015 10:51:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V_wliY6Zmfyk for ; Sat, 7 Nov 2015 10:51:00 -0800 (PST) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5D451B2C57 for ; Sat, 7 Nov 2015 10:50:59 -0800 (PST) Received: from hebrews (unknown [104.129.198.84]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 1B2672CA09; Sat, 7 Nov 2015 10:50:59 -0800 (PST) From: "Jim Schaad" To: "'Justin Richer'" , References: In-Reply-To: Date: Sat, 7 Nov 2015 10:48:16 -0800 Message-ID: <04df01d1198c$dd93c5a0$98bb50e0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQKlXlIuYIDsv0TvkOrW2TLoqkbAy5zoXQOQ Content-Language: en-us Archived-At: Subject: Re: [COSE] Consensus Call: RSA 1.5 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2015 18:51:02 -0000 A It is historic and should be killed. > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Justin Richer > Sent: Saturday, November 07, 2015 12:02 AM > To: cose@ietf.org > Subject: [COSE] Consensus Call: RSA 1.5 >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding > the definition of RSA 1.5 algorithms within the messages draft or an = auxiliary > draft. This functionality is analogous to the RS* series of signature = methods in > JWS and the RSA1_5 encryption method in JWE. The five positions we are = asking > the working group to consider and voice their support for are: >=20 > A) Drop all support for RSA 1.5 signatures and encryption. > B) Define RSA 1.5 support in an auxiliary draft. > C) Define RSA 1.5 support in the main draft (note that this option was = previously > discussed on the list and did not find favor at the time, so if you = want it back > you=E2=80=99ll need to make a strong case). > D) You need more information to decide. > E) You don=E2=80=99t give a flying rat about RSA 1.5.* >=20 > Note that this is distinct from RSA PSS support which is being = discussed in a > separate thread. >=20 > The consensus call will remain open for two weeks from today, closing = on > November 21, 2015; at which time, hopefully we will have a clear = answer and > direction for our editor. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for > which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sat Nov 7 10:51:28 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0D591B2C57 for ; Sat, 7 Nov 2015 10:51:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7e47yxa8WSlQ for ; Sat, 7 Nov 2015 10:51:25 -0800 (PST) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B7831B2C5C for ; Sat, 7 Nov 2015 10:51:25 -0800 (PST) Received: from hebrews (unknown [104.129.198.84]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id AFE8F38F27; Sat, 7 Nov 2015 10:51:24 -0800 (PST) From: "Jim Schaad" To: "'Justin Richer'" , References: In-Reply-To: Date: Sat, 7 Nov 2015 10:48:42 -0800 Message-ID: <04e001d1198c$ecd82880$c6887980$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQKMkBBCKrN1I8cc2qAtVezT1n5Ps50Z+aKw Content-Language: en-us Archived-At: Subject: Re: [COSE] Consensus Call: RSA PSS X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2015 18:51:26 -0000 B - It is not a primary algorithm for the current known usages of COSE > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Justin Richer > Sent: Saturday, November 07, 2015 12:02 AM > To: cose@ietf.org > Subject: [COSE] Consensus Call: RSA PSS >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding > the definition of RSA PSS algorithms within the messages draft or an = auxiliary > draft. This functionality is analogous to the PS* series of signature = methods in > JWS. The five positions we are asking the working group to consider = and voice > their support for are: >=20 > A) Drop all support for RSA PSS signatures and encryption. > B) Define RSA PSS support in an auxiliary draft. > C) Define RSA PSS support in the main draft. > D) You need more information to decide. > E) You don=E2=80=99t give a flying rat about RSA PSS.* >=20 > Note that this is separate from RSA 1.5 support, which is being = discussed on a > separate thread. >=20 > The consensus call will remain open for two weeks from today, closing = on > November 21, 2015; at which time, hopefully we will have a clear = answer and > direction for our editor. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for > which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sat Nov 7 14:42:27 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4EC71A1BC8 for ; Sat, 7 Nov 2015 14:42:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XyT6L4l8YHR2 for ; Sat, 7 Nov 2015 14:42:25 -0800 (PST) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 75A111A1BC3 for ; Sat, 7 Nov 2015 14:42:25 -0800 (PST) Received: from hebrews (unknown [104.129.192.74]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id B13102C9FD for ; Sat, 7 Nov 2015 14:42:24 -0800 (PST) From: "Jim Schaad" To: Date: Sat, 7 Nov 2015 14:39:41 -0800 Message-ID: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdEZrBdSSIa9OxvISLeJdU4BkqsMww== Content-Language: en-us Archived-At: Subject: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2015 22:42:27 -0000 People keep telling me that they want to have a version of MACs that do not have a set of recipient information attached so that they can do direct MACs. I keep asking for a use case where this makes sense. In all of the use cases that I have been presented so far, a better answer is going to be to do an AEAD encrypted item rather than a MACed item. The scenario that wants this is going to be: Alice sends data to Bob in such a way that Bob can authenticate the data. Eve needs to be able to read the data in transit, without knowing if the message contains data or misinformation and will act on the message as if it were data. The difference in message size between MAC and Encryption is going to be minimal, at most a few bytes. The execution difference is going to be a few extra encryption operations. What use cases exist for this where encryption is not a better security answer anyway. Jim From nobody Sun Nov 8 04:44:46 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71D491B2B8B for ; Sun, 8 Nov 2015 04:44:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.049 X-Spam-Level: X-Spam-Status: No, score=-5.049 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_08=1.651, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YMsQ0hgEJviA for ; Sun, 8 Nov 2015 04:44:43 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2156D1B2B8A for ; Sun, 8 Nov 2015 04:44:43 -0800 (PST) Date: Sun, 08 Nov 2015 04:44:42 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1446986682; bh=pBAnubxU6OgwQ9ij2paOquOCGzg0qh0lAtrtVIKHLhE=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=JA85wSUzWptasLqw+Uc18x93xhVzlJ406/k8R0bK4jreMLmm0koFt73evgOgDFWQN fsVO0L+1e9weTWsQdzxwyLMUP0skbpblOF8itaA3JH6t4FySIAM02Lwaf36BrTeya7 aHlUmxN76wvmbNJnhYSRnAbyq0zG/saRNbSYcMsc= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_563f43ba1d04f_79803f807ec6d2a03216cc"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Add_reference_to_definition_of?= =?utf-8?b?IOKAnHBlcmZlY3QgZm9yd2FyZCBzZWN1cml0eeKAnSAoIzM3KQ==?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Nov 2015 12:44:44 -0000 ----==_mimepart_563f43ba1d04f_79803f807ec6d2a03216cc Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Pull request #98 --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/37#issuecomment-154822427 ----==_mimepart_563f43ba1d04f_79803f807ec6d2a03216cc Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Pull request #98

—
Reply to this email directly or view it on GitHub.

----==_mimepart_563f43ba1d04f_79803f807ec6d2a03216cc-- From nobody Sun Nov 8 21:39:58 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21D581B65D5 for ; Sun, 8 Nov 2015 21:39:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 46c2MF9bpWpi for ; Sun, 8 Nov 2015 21:39:55 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B226A1B65CC for ; Sun, 8 Nov 2015 21:39:55 -0800 (PST) Date: Sun, 08 Nov 2015 21:39:53 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1447047593; bh=61+XQHcmtpVBpGdkEM4gHuRWwiNMlDUl9zkr8U0D9Kw=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=estyOC+OjDtzRo1Yl7xhawr2puJM0/1THPYsOtSJ5YoRDmuMiOAHngX5hLKCsJ4Ac AUk2MpbtCAFfNLry205z+3evruW7hjgvAZ6fbBC4Ja5yqpaVSgzNzZ3xl/mlwat1J/ vYcvVmqZ9Jno/UsjibAWJitgXSBxaoLgQatz9qpY= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_564031a9b2cd1_17f83f98d50572bc1516c7"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Separate the nonce and IV header parameters (#27) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2015 05:39:57 -0000 ----==_mimepart_564031a9b2cd1_17f83f98d50572bc1516c7 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Part of pull request cose-wg/cose-spec#98 --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/27#issuecomment-154938149 ----==_mimepart_564031a9b2cd1_17f83f98d50572bc1516c7 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Part of pull request cose-wg/cose-spec#98

—
Reply to this email directly or view it on GitHub.

----==_mimepart_564031a9b2cd1_17f83f98d50572bc1516c7-- From nobody Mon Nov 9 01:20:22 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45F1F1B7AEB for ; Mon, 9 Nov 2015 01:20:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y5_y4mtW_v53 for ; Mon, 9 Nov 2015 01:20:19 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 197271B7AE9 for ; Mon, 9 Nov 2015 01:20:18 -0800 (PST) X-AuditID: c1b4fb30-f79626d000006adf-a4-56406542c8f5 Received: from ESESSHC001.ericsson.se (Unknown_Domain [153.88.253.125]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id DD.39.27359.24560465; Mon, 9 Nov 2015 10:20:02 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.162]) by ESESSHC001.ericsson.se ([153.88.183.21]) with mapi id 14.03.0248.002; Mon, 9 Nov 2015 10:20:01 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Jim Schaad , 'Justin Richer' , "cose@ietf.org" Thread-Topic: [COSE] Consensus Call: Adoption of the COSE Token Thread-Index: AQHRGTKYft5ujcEK4Ey9G8NoRi4OuJ6Q1nWAgAKWwoA= Date: Mon, 9 Nov 2015 09:20:00 +0000 Message-ID: References: <04de01d1198c$d02cae40$70860ac0$@augustcellars.com> In-Reply-To: <04de01d1198c$d02cae40$70860ac0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.146] Content-Type: text/plain; charset="utf-8" Content-ID: <341F0D04AEA0884FB1B84528790709B2@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrOIsWRmVeSWpSXmKPExsUyM+Jvra5TqkOYwYzl/BbTtk5ltVg9/Tub xYZrL1kdmD02zpnO5rFkyU8mj6YzR5kDmKO4bFJSczLLUov07RK4MhbO7WIsmCRVsalbsIFx j2QXIyeHhICJRMvux8wQtpjEhXvr2boYuTiEBI4wShxvvwDlLGaUaJ5zlQmkik3AReJBwyMg m4NDRCBX4uqMLJCwsICdxKql09lAbBEBe4mLU6azQNhWEqsbO8AWsAioSHy63QUW5xWwkJj4 8hwjiC0kUCDRNKEJLM4p4CDxfk0HK4jNCHTQ91NrwNYyC4hL3HoynwniUAGJJXvOQx0tKvHy 8T+welEBPYmV15vYIOJKEj82XGIBOZNZQFNi/S59iDHWEvun7YQaqSgxpfshO8Q5ghInZz5h mcAoPgvJtlkI3bOQdM9C0j0LSfcCRtZVjKLFqcVJuelGRnqpRZnJxcX5eXp5qSWbGIHRd3DL b4MdjC+fOx5iFOBgVOLh3TDbPkyINbGsuDL3EKMEB7OSCO9hb4cwId6UxMqq1KL8+KLSnNTi Q4zSHCxK4rzNTA9ChQTSE0tSs1NTC1KLYLJMHJxSDYwss0/phFz/nLHn/Iw0hTP/jV4xd4rf KOCcz6G7vtI/T6S1Ys23JXsMPzwQ1Z8y9QhDktOLn+Wy0jFRPqaz3gowOnnWv8700vz2xGax jtTdwu+n/RNYY3QUajqt/syYdbPstmigZ8JVW1XjlgVf5y1TnnFHcNk+qZe37ntnMeUWnDn0 4kXw13NKLMUZiYZazEXFiQBqJVYeugIAAA== Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2015 09:20:21 -0000 SSB2b3RlIGZvciBDLiBJdCB3b3VsZCBiZSBnb29kIGlmIHRoaXMgd29yayBjb3VsZCBiZSBjYXJy aWVkIG91dCB3aGVyZQ0KdGhlcmUgaXMgYm90aCBPQXV0aCBjb21wZXRlbmNlIGFuZCBjb25zdHJh aW5lZCBub2RlIG5ldHdvcmsgY29tcGV0ZW5jZS4gSQ0KYmVsaWV2ZSBBQ0UgY291bGQgYmUgYSBt YXRjaCBoZXJlIHNpbmNlIHN1Y2ggY29tcGV0ZW5jZXMgd2lsbCBhbnl3YXkgYmUNCnJlcXVpcmVk IHRvIGV2YWx1YXRlDQoNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXNl aXR6LWFjZS1vYXV0aC1hdXRoei8NCg0KDQp3aGljaCBpcyB0aGUgcHJlZmVycmVkIHN0YXJ0aW5n IHBvaW50IGZvciBhIHNvbHV0aW9uIGFjY29yZGluZyB0byB0aGUgZjJmDQptZWV0aW5nLiBUaGVy ZSBpcyBhbHJlYWR5IHNvbWUgdGV4dCBvbiDigJxDQk9SIFdlYiBUb2tlbiIgaW4gYXBwZW5kaXgg RC4NCg0KR8O2cmFuDQoNCg0KT24gMjAxNS0xMS0wNyAxOTo0NywgIkppbSBTY2hhYWQiIDxpZXRm QGF1Z3VzdGNlbGxhcnMuY29tPiB3cm90ZToNCg0KPkVpdGhlciBCIG9yIEMuDQo+DQo+PiAtLS0t LU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4gRnJvbTogQ09TRSBbbWFpbHRvOmNvc2UtYm91bmNl c0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEp1c3RpbiBSaWNoZXINCj4+IFNlbnQ6IFNhdHVyZGF5 LCBOb3ZlbWJlciAwNywgMjAxNSAxMjowMiBBTQ0KPj4gVG86IGNvc2VAaWV0Zi5vcmcNCj4+IFN1 YmplY3Q6IFtDT1NFXSBDb25zZW5zdXMgQ2FsbDogQWRvcHRpb24gb2YgdGhlIENPU0UgVG9rZW4N Cj4+IA0KPj4gQXQgdGhlIFlva29oYW1hIG1lZXRpbmcsIHRoZSBjaGFpcnMgYWdyZWVkIHRvIGRv IGEgY29uc2Vuc3VzIGNhbGwNCj4+cmVnYXJkaW5nDQo+PiB0aGUgYWRvcHRpb24gYW5kIHBsYWNl bWVudCBvZiBuZXcgd29yayB0byBkZWZpbmUgYSBDT1NFIFRva2VuLA0KPj5hbmFsb2dvdXMgdG8N Cj4+IHRoZSBKV1QgZnJvbSBKT1NFLiBJbiB0aGUgcm9vbSwgdGhlcmUgd2FzIGEgZ2VuZXJhbCBz ZW50aW1lbnQgb2YNCj4+c3VwcG9ydCBmb3INCj4+IHRoZSB3b3JrIGJlaW5nIGRvbmUsIHdpdGgg dGhlIHdpZGUgYWRvcHRpb24gb2YgSldUIGFuZCBpdHMgZHJpdmluZyBvZg0KPj5KT1NFDQo+PiBi ZWluZyBhIGNvbW1vbiB0aGVtZSBvZiBwcmVjZWRlbnQuIFdoYXQgd2FzbuKAmXQgY2xlYXIgaXMg d2hlcmUgdGhlIHdvcmsNCj4+IHNob3VsZCBiZSBkb25lIGFuZCB0byB3aGF0IGVuZCBpdCBzaG91 bGQgZHJpdmUuIFRoZSBzaXggcG9zaXRpb25zIHdlDQo+PmFyZSBhc2tpbmcNCj4+IHRoZSB3b3Jr aW5nIGdyb3VwIHRvIGNvbnNpZGVyIGFuZCB2b2ljZSB0aGVpciBzdXBwb3J0IGZvciBhcmU6DQo+ PiANCj4+IEEpIERlZmluZSB0aGUgQ09TRSBUb2tlbiB3aXRoaW4gdGhlIENPU0Ugd29ya2luZyBn cm91cCBhbG9uZyBzaWRlIHRoZQ0KPj5DT1NFDQo+PiBNZXNzYWdlcyAoYW5kIHBvdGVudGlhbGx5 IENPU0UgQXV4aWxpYXJ5IEFsZ29yaXRobXMpIGRyYWZ0Lg0KPj4gQikgRGVmaW5lIHRoZSBDT1NF IFRva2VuIGluc2lkZSB0aGUgT0F1dGggd29ya2luZyBncm91cC4NCj4+IEMpIERlZmluZSB0aGUg Q09TRSBUb2tlbiBpbnNpZGUgdGhlIEFDRSB3b3JraW5nIGdyb3VwLg0KPj4gRCkgRG9u4oCZdCBk ZWZpbmUgdGhlIENPU0UgVG9rZW4gYW55d2hlcmUuDQo+PiBFKSBZb3UgbmVlZCBtb3JlIGluZm9y bWF0aW9uIHRvIGRlY2lkZS4NCj4+IEYpIFlvdSBkb27igJl0IGdpdmUgYSBmbHlpbmcgcmF0IGFi b3V0IHRoZSBDT1NFIFRva2VuLioNCj4+IA0KPj4gVGhlIGNvbnNlbnN1cyBjYWxsIHdpbGwgcmVt YWluIG9wZW4gZm9yIHR3byB3ZWVrcyBmcm9tIHRvZGF5LCBjbG9zaW5nIG9uDQo+PiBOb3ZlbWJl ciAyMSwgMjAxNTsgYXQgd2hpY2ggdGltZSwgaG9wZWZ1bGx5IHdlIHdpbGwgaGF2ZSBhIGNsZWFy IGFuc3dlcg0KPj5hbmQNCj4+IGRpcmVjdGlvbiB0byBwb2ludCB0aGlzIHdvcmsuDQo+PiANCj4+ IFRoYW5rIHlvdSwNCj4+ICDigJQgSnVzdGluICYgS2VwZW5nLCB5b3VyIENPU0UgY2hhaXJzDQo+ PiANCj4+ICogSSBwcm9taXNlZCB0aG9zZSBpbiB0aGUgcm9vbSBhdCBZb2tvaGFtYSB0byBvZmZl ciBhIGZseWluZyByYXQNCj4+b3B0aW9uLCBmb3INCj4+IHdoaWNoIEkgYW0gZGVlcGx5IHNvcnJ5 Lg0KPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+ IENPU0UgbWFpbGluZyBsaXN0DQo+PiBDT1NFQGlldGYub3JnDQo+PiBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCj4NCj5fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KPkNPU0UgbWFpbGluZyBsaXN0DQo+Q09TRUBpZXRmLm9y Zw0KPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZQ0KDQo= From nobody Mon Nov 9 01:24:37 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CD181B7B0B for ; Mon, 9 Nov 2015 01:24:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rlwu_YyRWfqm for ; Mon, 9 Nov 2015 01:24:35 -0800 (PST) Received: from mail-lf0-x22f.google.com (mail-lf0-x22f.google.com [IPv6:2a00:1450:4010:c07::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9430E1B7B0C for ; Mon, 9 Nov 2015 01:24:34 -0800 (PST) Received: by lfs39 with SMTP id 39so65698292lfs.3 for ; Mon, 09 Nov 2015 01:24:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics_se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=hGEnROp+30NLNH+d/FzROndjtAdjGxUeznSFkLjKg28=; b=Vuir8MKjkwPiz+8SAgDF1i4+H7lOpP0xY4kG4r++ZDW9psg4bXNIWFK1C8U1lpOD/O A1v6Cwugk9pcWp/fDE3HEiHmn2C2qM8wb86MkZ90v84uGMA88vht2xfYEzlyJkKIXt8o /7JmKIzUB9N88gui+e6fUitFzYM5GLHmklRDISrrHfPBup6FXpgjN3forZz6Ki5jYpGC hXqX7IpzfzKPVtLYfhEQjpXpZqPqEt78cS3u2lQvjRrrTlYCN8Lf18HeIzZ16H0NqY/T 37cdja9qUy+hiI2VYwd79/CmGyt33OgAGe0Qu3FFoGF8vpjDswomD4UP6PdKEYsRnYHP P8tg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=hGEnROp+30NLNH+d/FzROndjtAdjGxUeznSFkLjKg28=; b=NiRBQzBrYTsl+PfgFKxmVcjGduCqQXEQVwQONTYTSGMD+QRtjtjkqWc8lAKFbE397q 6tBn/dXUpduAiEEqIfx+DrWeCUeQz4n0VeUUXAwtRsyF3dsK1V8ZZqfYdkXU+jm+EQ1E Ct963tuQHh1EkgqMYcpQ06/ekxE3EANEwKuzFunzIf8LMGo6wB3VEpD9g+xswJZCzaya /U6YRaB3r823/nHrmiz3756BuqVqTGwYt3wWDmX+mLiuVEvHeeUd+plfe8d7AxqcN2JB ipKlRSzmz4jj1Hp6bpqyewPTHLwNCxhzIjZsq7L18k7J6wQ0X+fv7QutRUYPMubj6m88 sStA== X-Gm-Message-State: ALoCoQkWGHLa21Bt+mFs1oSFRnucLZm0FLj3HuFqMUKmLu+EOd/A9H3DjsRLo2JwjQ6Tk/kibT+h X-Received: by 10.25.19.69 with SMTP id j66mr8613041lfi.25.1447061072703; Mon, 09 Nov 2015 01:24:32 -0800 (PST) Received: from [192.168.0.108] ([85.235.11.178]) by smtp.gmail.com with ESMTPSA id l67sm2211917lfd.43.2015.11.09.01.24.31 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 09 Nov 2015 01:24:31 -0800 (PST) To: cose@ietf.org References: <04de01d1198c$d02cae40$70860ac0$@augustcellars.com> From: Ludwig Seitz Message-ID: <56406648.40908@sics.se> Date: Mon, 9 Nov 2015 10:24:24 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms090503090809050408080800" Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2015 09:24:36 -0000 This is a cryptographically signed message in MIME format. --------------ms090503090809050408080800 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable On 2015-11-09 10:20, G=C3=B6ran Selander wrote: > I vote for C. It would be good if this work could be carried out where > there is both OAuth competence and constrained node network competence.= I > believe ACE could be a match here since such competences will anyway be= > required to evaluate > > https://datatracker.ietf.org/doc/draft-seitz-ace-oauth-authz/ > > > which is the preferred starting point for a solution according to the f= 2f > meeting. There is already some text on =E2=80=9CCBOR Web Token" in appe= ndix D. > > G=C3=B6ran > +1 /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=C3=A4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms090503090809050408080800 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTEwOTA5MjQyNFowLwYJKoZI hvcNAQkEMSIEIMylMJqn2Vpyc9L8m01ugaJ4qDFTZAUfpUzv8j4oO+tqMGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQAs58ARBN47blADdA3GijyFdt7JL9ZR2awJbz+o3gSc VjbecBpPxG+x77Bt10JeuA+cyrnzDiUrq8YnCpDGanu//d2RQzyoSNtw27Rj6HKtpvj5Yd7r tYVMoiBa21Dy+eFGXB8UT+HjanUWcq3mDX9dZQ4zvDHBH2hpXW83B1BFnyeeGgqVwqfIwFG/ 7GIVRRdSTb0EfD0paT59FhCbEUdsgOBlzT1o7YL2P+dcFjzw6uSLbsOg+cahaQdATOYHUl5J vb+8TCF8tcl8k8GA6m4LX8sUDvFtuCXsRSnE4q/xVQKCYysNvBACtZaP8yZiqafjKQk3b3rE T2NUJdcrPehsAAAAAAAA --------------ms090503090809050408080800-- From nobody Mon Nov 9 01:29:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A7EB1B7B1E for ; Mon, 9 Nov 2015 01:28:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i5_5YBb8Rgch for ; Mon, 9 Nov 2015 01:28:55 -0800 (PST) Received: from mail-lf0-x235.google.com (mail-lf0-x235.google.com [IPv6:2a00:1450:4010:c07::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32E841B7B1C for ; Mon, 9 Nov 2015 01:28:55 -0800 (PST) Received: by lfdo63 with SMTP id o63so5085795lfd.2 for ; Mon, 09 Nov 2015 01:28:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics_se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=DYoQZsVTI48R9tfd7lhMLSSitsax6DwSvBxrNRcvV8I=; b=YckQf4piqQx+uGng4snmMh8prCXNh8rW08aIVCg99i0ZaQC6opxPDClUW2oY9TIFcF 03zwVWnzYRVp3CENmu/06n7PW/84+LMFsmlXapus1u9foWNehGarOOkxOIKlZb/kenUP D08S4LS9FUK6/Bygj9PalOpB+mzp2xyp96wMSKJ6YGzb9hy4h2pIMkJyWEPzC/4fKEsX p8BJpRu9V6i2bcj9ylBSsETKj3lmHppgRphPm5ZdbQb7sPkvbc/aV4stKiBIM0z6YIzM Q/WOWlw+moJ3xy0lvYdAGlXY5wfZFrG9Gg0x2f8IHBFNwZSLxBUZJQGJJD1ThqpjuGTp Supw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=DYoQZsVTI48R9tfd7lhMLSSitsax6DwSvBxrNRcvV8I=; b=Gg+QpmE5mGW0T9cmk0swflQPuYcsZhmxgIBnLSs7QHW9aoFJppihV4t6JUJJWWvqad vuTZ6KsAw/j9FxOBBL+lKe5qugL5SvzwT0lxB081Kko3vtGvN9Y59BNP/CPgbwCdzXNM GL+NGLDESGaeBxrZJRWwjc7irzOK9qlq7G4C5dr8/P+NITuRlXp5ysDxzF63lRpc4buA kXJE92CMptvBfLzTM5YbDTL/Rz0lSxdXBrLq/nmN4tusE17RnCnAer234tANwGr2Z9Ld zd1H/j+8FcBfh03jLLHH0b9Dc6q+4AObnYueUdJM1T4IBVopD9nx0CtJGHdG/ZdfBv6V xAzw== X-Gm-Message-State: ALoCoQkEU1BS/+GYXY6J8Q3docd00v3oey6gWXYnQSRLMx/fazRELW8S/eC3TPoeKIl2JmKTBI2l X-Received: by 10.25.167.2 with SMTP id q2mr8627303lfe.15.1447061333218; Mon, 09 Nov 2015 01:28:53 -0800 (PST) Received: from [192.168.0.108] ([85.235.11.178]) by smtp.gmail.com with ESMTPSA id c7sm2223204lfe.22.2015.11.09.01.28.52 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 09 Nov 2015 01:28:52 -0800 (PST) To: cose@ietf.org References: From: Ludwig Seitz Message-ID: <56406754.70103@sics.se> Date: Mon, 9 Nov 2015 10:28:52 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms040207020502090701040906" Archived-At: Subject: Re: [COSE] Consensus Call: RSA 1.5 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2015 09:28:57 -0000 This is a cryptographically signed message in MIME format. --------------ms040207020502090701040906 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable On 2015-11-07 09:01, Justin Richer wrote: > At the Yokohama meeting, the chairs agreed to do a consensus call > regarding the definition of RSA 1.5 algorithms within the messages > draft or an auxiliary draft. This functionality is analogous to the > RS* series of signature methods in JWS and the RSA1_5 encryption > method in JWE. The five positions we are asking the working group to > consider and voice their support for are: > A) Drop all support for RSA 1.5 signatures and encryption. > B) Define RSA 1.5 support in an auxiliary draft. > C) Define RSA 1.5 support in the main draft (note that this option > waspreviously discussed on the list and did not find favor at the time,= so > if you want it back you=E2=80=99ll need to make a strong case). > D) You need more information to decide. > E) You don=E2=80=99t give a flying rat about RSA 1.5.* A.) /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=C3=A4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms040207020502090701040906 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTEwOTA5Mjg1MlowLwYJKoZI hvcNAQkEMSIEIE5oIbZyPE0E340E8QyVB//Elh+VvSHUUYYcV3H1GUNdMGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQCHg6msfUsGSF2WEnQU59NpwvjKx1cqYMJ8PbuUTLSv 7WX4r3AKKNy/3X3pTRnp0D0xfUKwJySKFwnZjFsl5q0fjrDhhjCqFKq42UyI7/GmcF+iXYNK rH6s0JXZyW+7A7e2UPya/q7oQWQHdnG35cUV+Cgh+akWTJeo+avb7Ghz8cLqq9NJXq6dQ1OE GiNQ3ujBqFE43jhy+4q74EMTZITvpNuyljg5dMDQOQ2NYgl6d6EUKUnrBEr55eVcUDgRocqz CXpi3m9eao0t0QIjoSPdmxCqAcbmAZtC22PO6xON/U3MP+QBCpMUHSdxIZB5Z7LaIqddHd71 G2xL0vN8Am8gAAAAAAAA --------------ms040207020502090701040906-- From nobody Mon Nov 9 01:31:56 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C3A21B7B26 for ; Mon, 9 Nov 2015 01:31:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DbAj3oTv0KKw for ; Mon, 9 Nov 2015 01:31:54 -0800 (PST) Received: from mail-lb0-x230.google.com (mail-lb0-x230.google.com [IPv6:2a00:1450:4010:c04::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BEE11B7B25 for ; Mon, 9 Nov 2015 01:31:53 -0800 (PST) Received: by lbces9 with SMTP id es9so24563303lbc.2 for ; Mon, 09 Nov 2015 01:31:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics_se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=GcW0KLu/XDZOmOyiB94Oh97GI9Lrj5grpdTQYSAYQ9w=; b=xouc5KUlqnMf8rrygaAV1HlmDeiXlj+bJiJ4PcziGFN1CkiVh4Iy5rP8Ju3Y4xOk9o KcQmlFkrUwRmzfjj++3wm4OGP6Z/8cCHsbF0fj7NAV7yuJ+mebJpvo12IcxIJOWZ56/9 gop6NhkUjtz8VfN+OUVaPH91qPZg9vnuRgFdxSb3zT2d23z9/jAMQMeKzlgeow/zYidI GhlNE1/0tJu2a7JeEj9JNuV7R8+TCfG1FOfHi1q68wlSP86WIs30yxFc/rE8Y0W7lrAA 0RhCyyoKzNLxXaEk5JHTgWwGTipm/oiwdwSM2H6vUAvy89PlNn3aJ7zbt/CgIqgg+D8D C82g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=GcW0KLu/XDZOmOyiB94Oh97GI9Lrj5grpdTQYSAYQ9w=; b=GO3NlLtWt5YzzaPMxBPpRmY3g6nOOM7t8v4y9WhVTLm54GCA86bpm/Xvmv+2CgLqk8 nra5ZBpTpuxl/RffPVV9NUSJYOnO+avGqQSzPsAgP8Wwo4U1WKoQFdXchNao8yYqobj3 eQAAoxWy1y6wR5TQN33VzRMWgDgJ6KVMQvgqd4JuwkDk9NohvBixs45vrmZxdumHHOx+ 3lomRtbu+CYMHOSgVuVdNGPlvFhfu7+2HGZU7IOYesDeKBlIrp+2UUKt2Oq80vdEWLEn dTgADI+6gRTtlxTZKVmBLlZeR9Me/QSjBODtWvbMP40s631HxTN4Vgb2M2t4yktYLl0i Z5YA== X-Gm-Message-State: ALoCoQlwVynwk3EyrDFLkivup57tENXoH1DAPj2+O+TTXDxd1fgQlrSnxIa1JbYLb9DIPl9Ai/gI X-Received: by 10.112.147.10 with SMTP id tg10mr13721158lbb.58.1447061511387; Mon, 09 Nov 2015 01:31:51 -0800 (PST) Received: from [192.168.0.108] ([85.235.11.178]) by smtp.gmail.com with ESMTPSA id q197sm2220075lfd.36.2015.11.09.01.31.50 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 09 Nov 2015 01:31:50 -0800 (PST) To: cose@ietf.org References: From: Ludwig Seitz Message-ID: <56406805.6010205@sics.se> Date: Mon, 9 Nov 2015 10:31:49 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms090300000900000508060907" Archived-At: Subject: Re: [COSE] Consensus Call: RSA PSS X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2015 09:31:55 -0000 This is a cryptographically signed message in MIME format. --------------ms090300000900000508060907 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable On 2015-11-07 09:02, Justin Richer wrote: > At the Yokohama meeting, the chairs agreed to do a consensus call regar= ding the definition of RSA PSS algorithms within the messages draft or an= auxiliary draft. This functionality is analogous to the PS* series of si= gnature methods in JWS. The five positions we are asking the working grou= p to consider and voice their support for are: > > A) Drop all support for RSA PSS signatures and encryption. > B) Define RSA PSS support in an auxiliary draft. > C) Define RSA PSS support in the main draft. > D) You need more information to decide. > E) You don=E2=80=99t give a flying rat about RSA PSS.* > > Note that this is separate from RSA 1.5 support, which is being discuss= ed on a separate thread. > > The consensus call will remain open for two weeks from today, closing o= n November 21, 2015; at which time, hopefully we will have a clear answer= and direction for our editor. > > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs > > * I promised those in the room at Yokohama to offer a flying rat option= , for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > E) in the CoRE context, if someone else cares strongly B). (don't be sorry Justin, I knew E would come handy) /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=C3=A4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms090300000900000508060907 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTEwOTA5MzE0OVowLwYJKoZI hvcNAQkEMSIEIPbbsSrlcuDorPvLcOtxUdVP5K1WKdM9LGG77n5uVMbcMGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQB5BbymojUkxoROx6Ixu5SElRU2OAmAw6IdH3TAnWkV ah7e8S0tLw6+d8STJ9dFlHMAcRyeH5wSn1XvVSYsUNBaM33eJcd9p1hRdXqMYKqWFEBf17Y5 n9lndv8GPu93UJk9VGeyhzfjJip3B/5GAL9rpz2FJgjbcukdkDfAcPoHKipivIVL/hKj/U65 V1RK5Cz41GVjXRZzOhw5a7kBvMTuHIT2wzooutvlbMzPtyyCz5sDCF4Dpn+zqQlemAXlEju9 ANbNbpiAxqc+nWYnJXNDGvzyMRD+h0Rk+q+5lyVJKSiR1gUTdh+ak1k1o4nEqQiOnLZar1wJ tiOkQu1hJ9rlAAAAAAAA --------------ms090300000900000508060907-- From nobody Mon Nov 9 01:38:01 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BFEAA1B7B50 for ; Mon, 9 Nov 2015 01:38:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ibMznFPBpfdb for ; Mon, 9 Nov 2015 01:37:59 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F22F1B7B4F for ; Mon, 9 Nov 2015 01:37:58 -0800 (PST) Received: from [192.168.10.250] ([88.128.80.14]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MUZG7-1Zne7t38cd-00RLwk; Mon, 09 Nov 2015 10:37:54 +0100 To: Justin Richer , cose@ietf.org References: From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56406970.5090801@gmx.net> Date: Mon, 9 Nov 2015 10:37:52 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="XuTPq1pQ3iKQX9jvhHMqAv702XkC3Wq7o" X-Provags-ID: V03:K0:1ldx8iYm9BaWmVAKI6lM9eepIycoMk658mD8VIixxv54cH+97Q+ kdJ1RjmfhH5DR2IJ/JOfNxVEvHY/irdRnmA5g6KcR97TBxWqItAuO5NOjdEumV+I9bGcbaK zd51TW4ItXLQI9qW5lfn/ivyql2IH1+mYy0OpWmjFBdDCQ7LfD2TDFwuuJcbPWubyuBZj+H +qBrNzvGqgMFjG+fjojSw== X-UI-Out-Filterresults: notjunk:1;V01:K0:Uw5LG6SSs14=:Qgewwf6QrSWytFYO9f9G1U oOSVpO9Au425wW87fSqUIUZbUiRJ+rx10Gr4HR2wL/SXDi0ptwvhbQzYaWXxZg1ROIUjsBmE/ cr5YfRJVgLvsutaMm8tvmtTe76vA0tSw7b765xG/KHGsP4tJWfxVVd6dPwCWEh4yHFefjj9k8 ii1SDco6NbHzSYZOGhHo6mWoxAG1k9qiFTvLICaZAMZ8Jwc2aIsWkIp+y1jKvFYrJv9ohLB0N f4eCAoA7/xSyif/iZa5UbWMXRVTrToKG6BMPC6HotEoZFC0DzMyhA6dB1ihJnELgaJvS7cTWE ijzKYRqjNomKNZRCoZWQTXIQpxJ7/qDkNuWxdQ4M+A5kwbgNRkgp9ka6cagLcoC0X2G4jWPeZ XLPpz/+cMUGph06I3qIdyGZZfbdU2HlPSgQY4iHskCb0cR4tEIJOmtwV5iLPEHbNFmOIhXaHd mSp4PnEfu55kiGn/X23qbiewiMChZlwFIVeI4dhEkN3JVKKwyTbTqMX5DZplKq2vznkNVhUyN NMRL6843YwuOzd1xdiWOk+hLOmEaOzNtc3zr6qmA+BQ7qDvxgiN70KDw0Lh4EDHhdpa+MdY7h mxmLT1nW/65s7OX2iHEGySA5fPgAPl/A7URhb1Fabti08TC/h+xQFSBOfl1MFgGyt1YeoDbOY Rk83NbzLtjOm4fEkRrTFlLGN3hL5+NccB/dZEJ4Ft6/bu+Uze1M4WN5qNceTWfTcfdt+wHadY J8JC2FTKg8mJzBxDTb8Fo/dLesb2Lfi9fLHh9rPGJ/5502EVcbDEtgN05sTjynP0unBYedEPE 4Tf4vri Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2015 09:38:00 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --XuTPq1pQ3iKQX9jvhHMqAv702XkC3Wq7o Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Justin, Hi Kepeng, I believe the participants of the Yokohama IETF meeting already decided against (D) with their agreement that this work is important. In terms of expertise I believe COSE, OAuth, and ACE would be in a good position. While OAuth is currently in a re-chartering process (as you know) there is a lot of work on the plate already even though it is distributed over a number of folks. Furthermore, there also seems to be a strong overlap between the participants of the ACE and the COSE working group whereby I believe that we have more participants in ACE than in COSE since the scope is much broader. Ultimately we are doing something very simple here: we are copying the JSON encoded claims to CBOR encoded claims. I believe that the AD should decide about where the work goes. Ciao Hannes On 11/07/2015 09:01 AM, Justin Richer wrote: > At the Yokohama meeting, the chairs agreed to do a consensus call regar= ding the adoption and placement of new work to define a COSE Token, analo= gous to the JWT from JOSE. In the room, there was a general sentiment of = support for the work being done, with the wide adoption of JWT and its dr= iving of JOSE being a common theme of precedent. What wasn=E2=80=99t clea= r is where the work should be done and to what end it should drive. The s= ix positions we are asking the working group to consider and voice their = support for are: >=20 > A) Define the COSE Token within the COSE working group along side the C= OSE Messages (and potentially COSE Auxiliary Algorithms) draft. > B) Define the COSE Token inside the OAuth working group. > C) Define the COSE Token inside the ACE working group. > D) Don=E2=80=99t define the COSE Token anywhere. > E) You need more information to decide. > F) You don=E2=80=99t give a flying rat about the COSE Token.* >=20 > The consensus call will remain open for two weeks from today, closing o= n November 21, 2015; at which time, hopefully we will have a clear answer= and direction to point this work. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat option= , for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose >=20 --XuTPq1pQ3iKQX9jvhHMqAv702XkC3Wq7o Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJWQGlxAAoJEGhJURNOOiAt77IH/jjUxB20/tPbN+D5I8snyOWz H327GXsI//JVUPQKAKfTSeb/nhr7TRGvYfh+yztDZxZzp0BGOVMPQsFuOlVc359j Hc8fhyZzj/svxxWivnmeM+U9Fmfmr7fE6gBWk72SEgKqrPZbPco/5UFMP505XRfJ NfaV3H0ozMvCvxpQauqrrvMZ7OpEB6tXVBwPMnE0VMpD9OW/hXInU8QwV/pBGU+b y7tW+eFVCzGplheide1ut5FjGrxDB1ElY8UCzaMyZcZnrJzCzGNv7SKP2Og00JRK 1uxpvH8oGnWL3Khwv+DxDb3fBqqCI5ijiy/FFltb3WVBbU4QLZImiX9iKMD4s4w= =QzTz -----END PGP SIGNATURE----- --XuTPq1pQ3iKQX9jvhHMqAv702XkC3Wq7o-- From nobody Mon Nov 9 07:39:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1CFD1B2DFB for ; Mon, 9 Nov 2015 07:38:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.378 X-Spam-Level: X-Spam-Status: No, score=-1.378 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aRFjt3Tjdiaj for ; Mon, 9 Nov 2015 07:38:58 -0800 (PST) Received: from mail-ig0-x22d.google.com (mail-ig0-x22d.google.com [IPv6:2607:f8b0:4001:c05::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41CF11B2E20 for ; Mon, 9 Nov 2015 07:38:58 -0800 (PST) Received: by igbhv6 with SMTP id hv6so77750297igb.0 for ; Mon, 09 Nov 2015 07:38:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=nbFD7FxPnhCbIC3YNnhO/fM3+OhXX11O7REjEB8ai2Q=; b=jW9JSrPRUCmGnr6rSN1yjc8y7zHCM8KThJ+Ssd61dLCEGgfqt1wZqNnXI9EPQe+oaZ DObAnacekmsFGcWCz3OXQcZooHge3MtqDCgH4jeilWJGEq0oN6W2lpFd475qsKgAzDH6 E0pAhdcuUXWGoJxny5/lzpNGqHNPBTe7ysn3Q= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=nbFD7FxPnhCbIC3YNnhO/fM3+OhXX11O7REjEB8ai2Q=; b=V/W2ismG5AdS6MYEjEOmgdBB27ioV4iUSXzfFf0DNv+MNrX2odMjcDw3Hp/dhIqWSx 4ev4cUriD7cJwXQ4btMt+YyUGGLAtb6Ah07LZHsexBoOUqrU9onZszhhfIhUy+OGD0p0 Voo3iY00bnk4yJDHUApRfuDrxDDLC4PAQz4Ki1kSdLAylLWjmjqlghcWfkixp0vDg4+k +CnP1HjFhHu3d3JeYI1CiIwBYI/w9Q+Wz9S8ceozs0RY3AVPd9qR1o0PC9Ts8VLEXXRW FLs323i37ofUHv5xa1ypzgTFERcv11AksEY8h2Lee+1tn/S2FPFpSizXyu8w38Ay4QDV j4hA== X-Gm-Message-State: ALoCoQk4CTeTugASnpK+zXEVeZFRZbx1Ql8uDROgzeSZ/wuxDSBao8ybLTtPxlyNp1jtLtjMdPg9 X-Received: by 10.50.80.4 with SMTP id n4mr6068792igx.49.1447083537618; Mon, 09 Nov 2015 07:38:57 -0800 (PST) MIME-Version: 1.0 Received: by 10.64.117.132 with HTTP; Mon, 9 Nov 2015 07:38:28 -0800 (PST) In-Reply-To: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> References: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> From: Brian Campbell Date: Mon, 9 Nov 2015 08:38:28 -0700 Message-ID: To: Justin Richer Content-Type: multipart/alternative; boundary=089e013d0e4438835605241d64ce Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] Consensus Call: Placement of CDDL X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2015 15:38:59 -0000 --089e013d0e4438835605241d64ce Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable B) On Sat, Nov 7, 2015 at 1:02 AM, Justin Richer wrote: > At the Yokohama meeting, the chairs agreed to do a consensus call > regarding the placement of the CDDL formatted text within the messages > draft. The four positions we are asking the working group to consider and > voice their support for are: > > A) Place the CDDL at the end of the document in an appendix. Other > examples will remain inline. > B) Place the CDDL inline with the normative text alongside other examples= . > C) You need more information to decide. > D) You don=E2=80=99t give a flying rat about CDDL.* > > Note that this proposal does NOT consider removal of CDDL or declaration > of normative dependence on CDDL. The English text will remain the normati= ve > form and the CDDL will remain a non-normative example. The (unfinished, > unhomed) CDDL draft will remain an informative reference. > > The consensus call will remain open for two weeks from today, closing on > November 21, 2015; at which time, hopefully we will have a clear answer a= nd > direction for our editor. > > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs > > * I promised those in the room at Yokohama to offer a flying rat option, > for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > --089e013d0e4438835605241d64ce Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
B)

On Sat, Nov 7, 2015 at 1:02 AM, Justin Richer <jricher@mit.edu<= /a>> wrote:
At the Yokohama mee= ting, the chairs agreed to do a consensus call regarding the placement of t= he CDDL formatted text within the messages draft. The four positions we are= asking the working group to consider and voice their support for are:

A) Place the CDDL at the end of the document in an appendix. Other examples= will remain inline.
B) Place the CDDL inline with the normative text alongside other examples.<= br> C) You need more information to decide.
D) You don=E2=80=99t give a flying rat about CDDL.*

Note that this proposal does NOT consider removal of CDDL or declaration of= normative dependence on CDDL. The English text will remain the normative f= orm and the CDDL will remain a non-normative example. The (unfinished, unho= med) CDDL draft will remain an informative reference.

The consensus call will remain open for two weeks from today, closing on No= vember 21, 2015; at which time, hopefully we will have a clear answer and d= irection for our editor.

Thank you,
=C2=A0=E2=80=94 Justin & Kepeng, your COSE chairs

* I promised those in the room at Yokohama to offer a flying rat option, fo= r which I am deeply sorry.
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

--089e013d0e4438835605241d64ce-- From nobody Tue Nov 10 11:11:30 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E8741B3D30 for ; Tue, 10 Nov 2015 11:11:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.378 X-Spam-Level: X-Spam-Status: No, score=-1.378 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5Jc_aZKlB6xK for ; Tue, 10 Nov 2015 11:11:27 -0800 (PST) Received: from mail-ig0-x236.google.com (mail-ig0-x236.google.com [IPv6:2607:f8b0:4001:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 832311B3D2F for ; Tue, 10 Nov 2015 11:11:27 -0800 (PST) Received: by igbhv6 with SMTP id hv6so7206947igb.0 for ; Tue, 10 Nov 2015 11:11:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=zb5KJpzPf1FRxsrjObs976Um7gf7J/XJvrOxdKRD0tE=; b=FusNx2TpmaUaUin/3rlprHxTIoyc6P1hbeTfxzR1ef1BaWw4sdL5+YA4uRg/hrRzsK ySM+7d7lbyJ2D2CI8BIpwrQ67jadXCUVlP8BaC56i6rV9+3toVOyIA8lKiD7qQyKHfOl HCsjhxDEXCzW1YNPOYxSjFu+bQS9BaA3F/mi8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=zb5KJpzPf1FRxsrjObs976Um7gf7J/XJvrOxdKRD0tE=; b=WqW9N5v0rFkjdFHR/WW+3tIZZ3YFJjrBbm396TrT5QVN1GojstQ/cyHTfBpmjn+kaf fV50Q8YaXkPtxPW59ieO2iqLV0C/YVJF1N1b9yQTKRUhD7BA5ojLa6nBZ15SjKg2bJYJ Etzy+I0IfbhYlLTFCHMTv5UrEFbKJdgtiViAi3svOrCsa6vM2OYPs809kBmqfdqZpVvd kSHcJ52jfUkk501BqqqHo8XbKNbX4S2/TYUX1N4XMdOVlCQ4D0RVMVy0wPav9NV90VOz 1YTMmBucfUtmeXBZia1jAJi9/A0tyj9j2ZORuAjGfuGgpNbNtKFvZLJ1v1Rdr5ij1iqa p4IA== X-Gm-Message-State: ALoCoQkP6mgo7zaImaZKvtbnOHWduwEmLNFC9TV9NaW2saSTVrLqhI52qG/n/PGkcLZG9Q89H3cd X-Received: by 10.50.23.38 with SMTP id j6mr12419996igf.57.1447182686796; Tue, 10 Nov 2015 11:11:26 -0800 (PST) MIME-Version: 1.0 Received: by 10.64.117.132 with HTTP; Tue, 10 Nov 2015 11:10:57 -0800 (PST) In-Reply-To: <56406754.70103@sics.se> References: <56406754.70103@sics.se> From: Brian Campbell Date: Tue, 10 Nov 2015 12:10:57 -0700 Message-ID: To: Ludwig Seitz Content-Type: multipart/alternative; boundary=089e0158b23af8da120524347956 Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] Consensus Call: RSA 1.5 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2015 19:11:29 -0000 --089e0158b23af8da120524347956 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable B or C (for RSA 1.5 signatures only - don't think signatures and encryption should be lumped together here). As I tried to say in the previous thread [COSE] RSA Algorithm Decisions , to the extent that COSE supports RSA, then RSASSA-PKCS1-v1_5 should be included due to being significantly more widely available than RSASSA-PSS and a lack of momentum towards PSS. On Mon, Nov 9, 2015 at 2:28 AM, Ludwig Seitz wrote: > On 2015-11-07 09:01, Justin Richer wrote: > >> At the Yokohama meeting, the chairs agreed to do a consensus call >> regarding the definition of RSA 1.5 algorithms within the messages >> draft or an auxiliary draft. This functionality is analogous to the >> RS* series of signature methods in JWS and the RSA1_5 encryption >> method in JWE. The five positions we are asking the working group to >> consider and voice their support for are: >> > > A) Drop all support for RSA 1.5 signatures and encryption. >> B) Define RSA 1.5 support in an auxiliary draft. >> C) Define RSA 1.5 support in the main draft (note that this option >> waspreviously discussed on the list and did not find favor at the time, = so >> if you want it back you=E2=80=99ll need to make a strong case). >> D) You need more information to decide. >> E) You don=E2=80=99t give a flying rat about RSA 1.5.* >> > > A.) > > /Ludwig > > > -- > Ludwig Seitz, PhD > SICS Swedish ICT AB > Ideon Science Park > Building Beta 2 > Scheelev=C3=A4gen 17 > SE-223 70 Lund > > Phone +46(0)70-349 92 51 > http://www.sics.se > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > --089e0158b23af8da120524347956 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
B or C (for RSA 1.5 signatures only - don't think= signatures and encryption should be lumped together here).

As= I tried to say in the previous thread [COSE] RSA= Algorithm Decisions, to the extent that COSE supports RSA, then RSASSA= -PKCS1-v1_5 should be included due to being significantly more widely avail= able than RSASSA-PSS and a lack of momentum towards PSS.


=

On Mon, Nov 9, 20= 15 at 2:28 AM, Ludwig Seitz <ludwig@sics.se> wrote:
On 2015-11-07 09:01, Justin Richer = wrote:
At the Yokohama meeting, the chairs agreed to do a consensus call
regarding the definition of RSA 1.5 algorithms within the messages
draft or an auxiliary draft. This functionality is analogous to the
RS* series of signature methods in JWS and the RSA1_5 encryption
method in JWE. The five positions we are asking the working group to
consider and voice their support for are:

A) Drop all support for RSA 1.5 signatures and encryption.
B) Define RSA 1.5 support in an auxiliary draft.
C) Define RSA 1.5 support in the main draft (note that this option
waspreviously discussed on the list and did not find favor at the time, so<= span class=3D"">
if you want it back you=E2=80=99ll need to make a strong case).
D) You need more information to decide.
E) You don=E2=80=99t give a flying rat about RSA 1.5.*

A.)

/Ludwig


--
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://= www.sics.se


_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose


--089e0158b23af8da120524347956-- From nobody Tue Nov 10 11:21:52 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17F091B3D5E for ; Tue, 10 Nov 2015 11:21:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.378 X-Spam-Level: X-Spam-Status: No, score=-1.378 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o_3a_hLMju6v for ; Tue, 10 Nov 2015 11:21:49 -0800 (PST) Received: from mail-ig0-x231.google.com (mail-ig0-x231.google.com [IPv6:2607:f8b0:4001:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9709B1B3D63 for ; Tue, 10 Nov 2015 11:21:49 -0800 (PST) Received: by igbhv6 with SMTP id hv6so7403363igb.0 for ; Tue, 10 Nov 2015 11:21:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=zR5FKV8Y/8XKPIwISMQx7XrytOXtPNrjZsFevSOuokA=; b=j4F7YKRoINqOeZD0QhAZvg+qVSmaRuNr8O2jPcOOmKq8U/Z8nrT0Gq8h3YoMjAuum8 geVpvDZIJjI1PSS7VgliMpH2v1yzDHve9hY5WasiSlMC986UPYWNY+b8X+4MgR9/rZfC 3gyUQ8P2cl7s9TsjaJ5yGS092yKJGYFJJqA5M= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=zR5FKV8Y/8XKPIwISMQx7XrytOXtPNrjZsFevSOuokA=; b=IR9NYJ8iKmgaw3XG/N2KpEpAPaCnY607GbtuZjhQDbn797iuzXYhWDWrlcnvhbc17e 0z/l81F7VBcolJX51KSw6cheS14lSjy+wNfLUX542ulieCwPDtn2SE7NYh0hSkF80Xnr lVm78vWcYmJZDwjs1tjSiTprK2BktTJrphYHNYFpsI/Smz03JhkekoD4ud5zxSPZyR1l Ki2ansCBZaymAziE5x5HIITm5Q3uwakS1mPvqkxbwRzcsqOpIy7XW81/MS63HUI3dkUJ NHsQpL75jStadOh53KBrGLOC5pMGZ0p7EfEwV/Dnt2PEOhZdAOA9pxWwLi42mRTHt/kS BiMA== X-Gm-Message-State: ALoCoQnOGN9an+O/80ZuHrT1qFD5QLuqIISyiTdCx4Ux5zWMaumz8qSuSry4SgMlF/HsKF3sXpK/ X-Received: by 10.50.6.68 with SMTP id y4mr5793158igy.49.1447183308970; Tue, 10 Nov 2015 11:21:48 -0800 (PST) MIME-Version: 1.0 Received: by 10.64.117.132 with HTTP; Tue, 10 Nov 2015 11:21:19 -0800 (PST) In-Reply-To: <56406805.6010205@sics.se> References: <56406805.6010205@sics.se> From: Brian Campbell Date: Tue, 10 Nov 2015 12:21:19 -0700 Message-ID: To: Ludwig Seitz Content-Type: multipart/alternative; boundary=047d7bdca51e0e80bc0524349f60 Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] Consensus Call: RSA PSS X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2015 19:21:51 -0000 --047d7bdca51e0e80bc0524349f60 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable B or E On Mon, Nov 9, 2015 at 2:31 AM, Ludwig Seitz wrote: > On 2015-11-07 09:02, Justin Richer wrote: > >> At the Yokohama meeting, the chairs agreed to do a consensus call >> regarding the definition of RSA PSS algorithms within the messages draft= or >> an auxiliary draft. This functionality is analogous to the PS* series of >> signature methods in JWS. The five positions we are asking the working >> group to consider and voice their support for are: >> >> A) Drop all support for RSA PSS signatures and encryption. >> B) Define RSA PSS support in an auxiliary draft. >> C) Define RSA PSS support in the main draft. >> D) You need more information to decide. >> E) You don=E2=80=99t give a flying rat about RSA PSS.* >> >> Note that this is separate from RSA 1.5 support, which is being discusse= d >> on a separate thread. >> >> The consensus call will remain open for two weeks from today, closing on >> November 21, 2015; at which time, hopefully we will have a clear answer = and >> direction for our editor. >> >> Thank you, >> =E2=80=94 Justin & Kepeng, your COSE chairs >> >> * I promised those in the room at Yokohama to offer a flying rat option, >> for which I am deeply sorry. >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >> >> > > E) in the CoRE context, if someone else cares strongly B). > > (don't be sorry Justin, I knew E would come handy) > /Ludwig > > -- > Ludwig Seitz, PhD > SICS Swedish ICT AB > Ideon Science Park > Building Beta 2 > Scheelev=C3=A4gen 17 > SE-223 70 Lund > > Phone +46(0)70-349 92 51 > http://www.sics.se > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > --047d7bdca51e0e80bc0524349f60 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
B or E



On Mon, Nov 9, 2015 at 2:31 AM, Ludwig Seitz <ludwig= @sics.se> wrote:
On 2015-11-07 09:02, Justin Richer wrote:
At the Yokohama meeting, the chairs agreed to do a consensus call regarding= the definition of RSA PSS algorithms within the messages draft or an auxil= iary draft. This functionality is analogous to the PS* series of signature = methods in JWS. The five positions we are asking the working group to consi= der and voice their support for are:

A) Drop all support for RSA PSS signatures and encryption.
B) Define RSA PSS support in an auxiliary draft.
C) Define RSA PSS support in the main draft.
D) You need more information to decide.
E) You don=E2=80=99t give a flying rat about RSA PSS.*

Note that this is separate from RSA 1.5 support, which is being discussed o= n a separate thread.

The consensus call will remain open for two weeks from today, closing on No= vember 21, 2015; at which time, hopefully we will have a clear answer and d= irection for our editor.

Thank you,
=C2=A0 =E2=80=94 Justin & Kepeng, your COSE chairs

* I promised those in the room at Yokohama to offer a flying rat option, fo= r which I am deeply sorry.
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose



E) in the CoRE context, if someone else cares strongly B).

(don't be sorry Justin, I knew E would come handy)
/Ludwig

--
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://= www.sics.se


_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose


--047d7bdca51e0e80bc0524349f60-- From nobody Tue Nov 10 13:18:51 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE84A1A8BB4 for ; Tue, 10 Nov 2015 13:18:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pPmOilzKy5N5 for ; Tue, 10 Nov 2015 13:18:48 -0800 (PST) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 75F631A8BAF for ; Tue, 10 Nov 2015 13:18:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2376; q=dns/txt; s=iport; t=1447190328; x=1448399928; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=E6ECuYsDbsMKHLjkSI1gD/yDPwVkHJHDllSECMYnCDI=; b=YgKVHJPdFN4d269Q+UPA5Z+bsyAZ5vPxa+vwZqaAZ6Q71Pd7nV4lz2jn db/jHezSyLz8FqFfgMVkm6X1hM8kzkMGyKcEtjXwL0wOYEmEtb0/5eHbh sNix5YGUgWcFTpYIjRDfDnK8Mccw1WPBk94YFRt6Fs0n8TX7hhdpje+SD 8=; X-Files: signature.asc : 496 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DTAgDsXUJW/4cNJK1eDoMtU28GvkQOgWUXCoVvAoFLOBQBAQEBAQEBgQqENAEBAQMBAQEBIEsLBQsCAQgOCioCAicLJQIEDgUOiBgIDbMdkFUBAQEBAQEBAQEBAQEBAQEBAQEBAQEPBQSIZIJuh3UvgRUFlkgBglKBYIhzgVuWeINxAR8BQ4NGPnKEJwGBBgEBAQ X-IronPort-AV: E=Sophos;i="5.20,272,1444694400"; d="asc'?scan'208";a="206881732" Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-6.cisco.com with ESMTP; 10 Nov 2015 21:18:47 +0000 Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id tAALIlK7027323 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 10 Nov 2015 21:18:47 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 10 Nov 2015 15:18:47 -0600 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1104.000; Tue, 10 Nov 2015 15:18:46 -0600 From: "Matt Miller (mamille2)" To: Justin Richer Thread-Topic: [COSE] Consensus Call: RSA PSS Thread-Index: AQHRGTLFunPf2d9uXU2PRfpUXN53ep6WLPEA Date: Tue, 10 Nov 2015 21:18:46 +0000 Message-ID: <6792AAD6-27F6-44B7-B6D5-21F6A3EEA8B6@cisco.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-pgp-agent: GPGMail 2.6b2 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [64.101.72.28] Content-Type: multipart/signed; boundary="Apple-Mail=_5C5E9455-EB6B-4481-9C33-D61E76C7CB8D"; protocol="application/pgp-signature"; micalg=pgp-sha512 MIME-Version: 1.0 Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] Consensus Call: RSA PSS X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2015 21:18:50 -0000 --Apple-Mail=_5C5E9455-EB6B-4481-9C33-D61E76C7CB8D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 B) or C). -- - m&m Matt Miller Cisco Systems, Inc. > On Nov 7, 2015, at 01:02, Justin Richer wrote: >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the definition of RSA PSS algorithms within the messages draft = or an auxiliary draft. This functionality is analogous to the PS* series = of signature methods in JWS. The five positions we are asking the = working group to consider and voice their support for are: >=20 > A) Drop all support for RSA PSS signatures and encryption. > B) Define RSA PSS support in an auxiliary draft. > C) Define RSA PSS support in the main draft. > D) You need more information to decide. > E) You don=E2=80=99t give a flying rat about RSA PSS.* >=20 > Note that this is separate from RSA 1.5 support, which is being = discussed on a separate thread. >=20 > The consensus call will remain open for two weeks from today, closing = on November 21, 2015; at which time, hopefully we will have a clear = answer and direction for our editor. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --Apple-Mail=_5C5E9455-EB6B-4481-9C33-D61E76C7CB8D Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="signature.asc" Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJWQl81AAoJEDWi+S0W7cO1EPIH/jSaWY1MilZfduNJSB51K0RK IhZNyDC5r2A6jWRrCOhGl/Bw4tBxKxTRPshXIQ83riH4xmcE4+WK0ST69tamMDRa q7EuB6RdP3ecWakS2pOzZICQM5bFn9sGntf8ehbx4aE1e+oMChzMjcLxuf5tNbbi ZwGBnX3WuBzF7YkJp9w5q6wTGyG0gdkKFw2WbeRumytt5WdPGMiQ+V90Fe/TG7w+ UOmSCexDJj7wDJMiMT85uB6m7pe57MMx5STqe3gE9cuCFshJeR6UPUKN2sQzhneS SG78eO9NCuia2Q7rseqcgengJtBFPARWtWU+6cfHLb0nJfDZZZIo8iIrZupdO5Y= =N32d -----END PGP SIGNATURE----- --Apple-Mail=_5C5E9455-EB6B-4481-9C33-D61E76C7CB8D-- From nobody Tue Nov 10 13:29:18 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AD641A9080 for ; Tue, 10 Nov 2015 13:29:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s8cXnfGGakVA for ; Tue, 10 Nov 2015 13:29:16 -0800 (PST) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C53381A907A for ; Tue, 10 Nov 2015 13:29:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2477; q=dns/txt; s=iport; t=1447190956; x=1448400556; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=1jzNWBgMSqna8O8mpUky/jbxL8Y2Q0wGHQfhOAobwsA=; b=bJpF3i3nDstxsBH+GCfCx+JKFre0jR9aPN0c2OWoYFIDnez3g6lkdvaF upMDpdtcEkr0VcR/7ytSKFhHy3aDz7CzezETJZxLnOkDyVZjGzPCkOTZN CPpIuHDS4Ou6+Jjd+6OOBKQixQgjFByLno3zPACXh2Vz/JKG5Znm6B75z k=; X-Files: signature.asc : 496 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DTAgDLYEJW/49dJa1eDoMtU28GvkQOg?= =?us-ascii?q?WUXCoVvAoFLOBQBAQEBAQEBgQqENAEBAQMBAQEBIEsLBQsCAQgOCioCAicLJQI?= =?us-ascii?q?EDgUOiBgIDbMZkFYBAQEBAQEBAQEBAQEBAQEBAQEBAQEPBQSIZIJuh3UvgRUFl?= =?us-ascii?q?kgBglKBYIhzgVuWeINxAR8BQ4NGPnKEJwGBBgEBAQ?= X-IronPort-AV: E=Sophos;i="5.20,272,1444694400"; d="asc'?scan'208";a="43777913" Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by rcdn-iport-8.cisco.com with ESMTP; 10 Nov 2015 21:29:15 +0000 Received: from XCH-RCD-005.cisco.com (xch-rcd-005.cisco.com [173.37.102.15]) by rcdn-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id tAALTFwP032337 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 10 Nov 2015 21:29:15 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-005.cisco.com (173.37.102.15) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 10 Nov 2015 15:29:15 -0600 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1104.000; Tue, 10 Nov 2015 15:29:15 -0600 From: "Matt Miller (mamille2)" To: Justin Richer Thread-Topic: [COSE] Consensus Call: Placement of CDDL Thread-Index: AQHRGTLQdUd9uqnwz0GuQyGqpBqTSZ6WL9+A Date: Tue, 10 Nov 2015 21:29:15 +0000 Message-ID: References: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> In-Reply-To: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-pgp-agent: GPGMail 2.6b2 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [64.101.72.28] Content-Type: multipart/signed; boundary="Apple-Mail=_DE66E053-CBAF-49B8-830A-5616BD1ACCBF"; protocol="application/pgp-signature"; micalg=pgp-sha512 MIME-Version: 1.0 Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] Consensus Call: Placement of CDDL X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2015 21:29:18 -0000 --Apple-Mail=_DE66E053-CBAF-49B8-830A-5616BD1ACCBF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 B) -- - m&m Matt Miller Cisco Systems, Inc. > On Nov 7, 2015, at 01:02, Justin Richer wrote: >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the placement of the CDDL formatted text within the messages = draft. The four positions we are asking the working group to consider = and voice their support for are: >=20 > A) Place the CDDL at the end of the document in an appendix. Other = examples will remain inline. > B) Place the CDDL inline with the normative text alongside other = examples. > C) You need more information to decide. > D) You don=E2=80=99t give a flying rat about CDDL.* >=20 > Note that this proposal does NOT consider removal of CDDL or = declaration of normative dependence on CDDL. The English text will = remain the normative form and the CDDL will remain a non-normative = example. The (unfinished, unhomed) CDDL draft will remain an informative = reference. >=20 > The consensus call will remain open for two weeks from today, closing = on November 21, 2015; at which time, hopefully we will have a clear = answer and direction for our editor. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --Apple-Mail=_DE66E053-CBAF-49B8-830A-5616BD1ACCBF Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="signature.asc" Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJWQmGpAAoJEDWi+S0W7cO1jfgH+waa7zCAMybMYxVtlcrLaFyz 6BiAdBJvXYLwMfWWL40c/FRobXwmgH9oGBAz3NVGMnxzf6IYjRb9+mQZO8FRYks7 OtpBxJgl5k9mcJrFN8dzpNw2o+23l8aMbbawUF8JG0XK6hwaz7maasauQOm6xNrr v/o5jpaUEjzprAOQ1H7QiOA3zC1VxQcMbdaQEaGCb8ARmfZdcKzoK1j1L+dqCV79 6esO8DcZG+U6UswUe3b7Q2Bm4QVwYzzFcdNSINQOsQ/qiRThhexpng4L5NE6oKhx 25/aLwdYe7JouVjJ70aG5qXgxIXWsnhq1csDAZdkKtyZNsbmN++RykjJCrCNy3o= =oGRH -----END PGP SIGNATURE----- --Apple-Mail=_DE66E053-CBAF-49B8-830A-5616BD1ACCBF-- From nobody Tue Nov 10 13:30:21 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAE011A9095 for ; Tue, 10 Nov 2015 13:30:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id khRPFmeIbAfU for ; Tue, 10 Nov 2015 13:30:18 -0800 (PST) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB4C71A9097 for ; Tue, 10 Nov 2015 13:30:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2615; q=dns/txt; s=iport; t=1447191018; x=1448400618; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=ol0CX5D/x/81Z6JUyC4bAzsGUZVOurvbO/boLKLm1Lo=; b=H4Ngrh3iSJYoN+dc9//K4wbm4sxUZ16HfUsrcfODyjOqlhX53pGY9yUU w3McO5Lf/ltvlweP4NyK2EzIkSugcdRcC0RS/lbQiZ2zkVdyHnLNMsioy bLx3OxUl2nNxC6v/67jufmsQ7CXLg5w6dn6Re7NXbPeczb0Qjy4znocok M=; X-Files: signature.asc : 496 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DTAgDLYEJW/4MNJK1eDoMtU28GvkQOgWUXCoVvAoFLOBQBAQEBAQEBgQqENAEBAQMBAQEBIEsLBQsCAQgOCioCAicLJQIEDgUOiBgIDbMZkFYBAQEBAQEBAQEBAQEBAQEBAQEBAQEPBQSIZIJuh3UvgRUFlkgBglKBYIhzgVuWeINxAR8BQ4IRHYEYPnKEJwGBBgEBAQ X-IronPort-AV: E=Sophos;i="5.20,272,1444694400"; d="asc'?scan'208";a="207227908" Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 10 Nov 2015 21:30:17 +0000 Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id tAALUHoE024781 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 10 Nov 2015 21:30:17 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 10 Nov 2015 15:30:17 -0600 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1104.000; Tue, 10 Nov 2015 15:30:17 -0600 From: "Matt Miller (mamille2)" To: Justin Richer Thread-Topic: [COSE] Consensus Call: RSA 1.5 Thread-Index: AQHRGTKokXzTNprLHEqg4mO6816A8Z6WMCgA Date: Tue, 10 Nov 2015 21:30:17 +0000 Message-ID: <4EFB204C-B583-4878-BFB1-402309B82C45@cisco.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-pgp-agent: GPGMail 2.6b2 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [64.101.72.28] Content-Type: multipart/signed; boundary="Apple-Mail=_32E8D8DE-C9E5-4FBC-ABC6-2320033110EA"; protocol="application/pgp-signature"; micalg=pgp-sha512 MIME-Version: 1.0 Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] Consensus Call: RSA 1.5 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2015 21:30:20 -0000 --Apple-Mail=_32E8D8DE-C9E5-4FBC-ABC6-2320033110EA Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 encryption: A) signatures: B) or C) -- - m&m Matt Miller Cisco Systems, Inc. > On Nov 7, 2015, at 01:01, Justin Richer wrote: >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the definition of RSA 1.5 algorithms within the messages draft = or an auxiliary draft. This functionality is analogous to the RS* series = of signature methods in JWS and the RSA1_5 encryption method in JWE. The = five positions we are asking the working group to consider and voice = their support for are: >=20 > A) Drop all support for RSA 1.5 signatures and encryption. > B) Define RSA 1.5 support in an auxiliary draft. > C) Define RSA 1.5 support in the main draft (note that this option was = previously discussed on the list and did not find favor at the time, so = if you want it back you=E2=80=99ll need to make a strong case). > D) You need more information to decide. > E) You don=E2=80=99t give a flying rat about RSA 1.5.* >=20 > Note that this is distinct from RSA PSS support which is being = discussed in a separate thread. >=20 > The consensus call will remain open for two weeks from today, closing = on November 21, 2015; at which time, hopefully we will have a clear = answer and direction for our editor. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --Apple-Mail=_32E8D8DE-C9E5-4FBC-ABC6-2320033110EA Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="signature.asc" Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJWQmHmAAoJEDWi+S0W7cO1gUQIAJonGWq96TRaZLU65NZV3+at F9x6ipZ8f91kBS1PKdmvAe4XxPY3bnvHHAeqeE1rIOGBXcf2c1iOJl+/yBfa4wEi l2SSx83S1ajbLPtJuD126ZeCzFMeVCXA7s1u+dhoIwVzMcqzt/G1RdmYSJF/2EUp 48KwgZVyM2uNWQwLNQlyvmEuJzlRohzbFMyCAAVJBplUgXMrYZGYcK2DAtdvr7CY zWOfuEpuyB3keFmtuluVCSJgv6IxG2XwN09eMJDpfnGC9SP3mF8J1hiI8KF1DgE8 /Vl4OHDScSqiPI7Nh5a0l7m49DaWM6tbqd4RR7I3YBdASQsqoJTLadUdGPd9/I4= =zlOe -----END PGP SIGNATURE----- --Apple-Mail=_32E8D8DE-C9E5-4FBC-ABC6-2320033110EA-- From nobody Tue Nov 10 13:47:21 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 974D11B2D4E for ; Tue, 10 Nov 2015 13:47:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.378 X-Spam-Level: X-Spam-Status: No, score=-1.378 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rnRV0NnEu3So for ; Tue, 10 Nov 2015 13:47:18 -0800 (PST) Received: from mail-ig0-x233.google.com (mail-ig0-x233.google.com [IPv6:2607:f8b0:4001:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 105551B2B04 for ; Tue, 10 Nov 2015 13:47:18 -0800 (PST) Received: by igbhv6 with SMTP id hv6so10016552igb.0 for ; Tue, 10 Nov 2015 13:47:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=salesforce.com; s=google; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=PpaTQIMrrliyphP+iFWcSvWFEN0qxtLRkTvlohJh5hg=; b=LrxrHNNjHOm7i9Yi76DOMEAD3kPT0uMUIV814vXt58DnRlzpSC7/pLThIC+rhSRve0 ZL87Pyc00O/CVX2mDZzRFdBsjq0i0F9Vn6LdC0UCZRfk8NPJP1xnOOUJ+xQmmKqMOGdP IMGFbTk5/HXRGjmmy+gHiYovxWYnPzKr1lFaQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=PpaTQIMrrliyphP+iFWcSvWFEN0qxtLRkTvlohJh5hg=; b=brO588bF+xg9TL+J7yKqw3choxjYDqaeYtoZLp6eH2APaJTbiS5I4Jqmf2xN0xeaIx 7PpFe9qcVlcphfkOxsFfkdgKoolYTRX0+xBIuLIpjer3ILqVAhJCsVSdEm6a1a6Fser4 xcvWegKJmJNOWnCk0c3woYmf62+sj8XuLrl5hlyvGuruK8ZBXR4+1uA+bMMcKg0S0S4z QV4PM7j1l/EtjH//jTYCv+QhMVnsNO4X/hbnWuNMyIGSjPGTQgEfdVM5bCv5v83rj8mz 56As7dgl57Cdpo7SyuaWnLFKDt1CGo0IugaHdPBJPX7Dgbk5O4DAMIX+zyVAnQJ1ACAM DFYw== X-Gm-Message-State: ALoCoQmCQc5lkAHOKcBxeHdzDr1G9bdqmwNbVmFuwD2dzhGuyA5WUvZA0gDm5eYnReHgr5s3T97u MIME-Version: 1.0 X-Received: by 10.50.92.6 with SMTP id ci6mr1721033igb.45.1447192037283; Tue, 10 Nov 2015 13:47:17 -0800 (PST) Received: by 10.64.9.130 with HTTP; Tue, 10 Nov 2015 13:47:17 -0800 (PST) In-Reply-To: <4EFB204C-B583-4878-BFB1-402309B82C45@cisco.com> References: <4EFB204C-B583-4878-BFB1-402309B82C45@cisco.com> Date: Tue, 10 Nov 2015 13:47:17 -0800 Message-ID: From: Chuck Mortimore To: "Matt Miller (mamille2)" Content-Type: multipart/alternative; boundary=047d7b10cd634e2db5052436a7e2 Archived-At: Cc: Justin Richer , "cose@ietf.org" Subject: Re: [COSE] Consensus Call: RSA 1.5 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2015 21:47:19 -0000 --047d7b10cd634e2db5052436a7e2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable +1 on signatures B) or C) On Tue, Nov 10, 2015 at 1:30 PM, Matt Miller (mamille2) wrote: > encryption: A) > signatures: B) or C) > > > -- > - m&m > > Matt Miller > Cisco Systems, Inc. > > > On Nov 7, 2015, at 01:01, Justin Richer wrote: > > > > At the Yokohama meeting, the chairs agreed to do a consensus call > regarding the definition of RSA 1.5 algorithms within the messages draft = or > an auxiliary draft. This functionality is analogous to the RS* series of > signature methods in JWS and the RSA1_5 encryption method in JWE. The fiv= e > positions we are asking the working group to consider and voice their > support for are: > > > > A) Drop all support for RSA 1.5 signatures and encryption. > > B) Define RSA 1.5 support in an auxiliary draft. > > C) Define RSA 1.5 support in the main draft (note that this option was > previously discussed on the list and did not find favor at the time, so i= f > you want it back you=E2=80=99ll need to make a strong case). > > D) You need more information to decide. > > E) You don=E2=80=99t give a flying rat about RSA 1.5.* > > > > Note that this is distinct from RSA PSS support which is being discusse= d > in a separate thread. > > > > The consensus call will remain open for two weeks from today, closing o= n > November 21, 2015; at which time, hopefully we will have a clear answer a= nd > direction for our editor. > > > > Thank you, > > =E2=80=94 Justin & Kepeng, your COSE chairs > > > > * I promised those in the room at Yokohama to offer a flying rat option= , > for which I am deeply sorry. > > _______________________________________________ > > COSE mailing list > > COSE@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > --047d7b10cd634e2db5052436a7e2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
+1 on signatures B) or C)
=
On Tue, Nov 10, 2015 at 1:30 PM, Matt Miller= (mamille2) <mamille2@cisco.com> wrote:
encryption:=C2=A0 A)
signatures:=C2=A0 B) or C)


--
- m&m

Matt Miller <mamille2@cisco.com>
Cisco Systems, Inc.

> On Nov 7, 2015, at 01:01, Justin Richer <jricher@mit.edu> wrote:
>
> At the Yokohama meeting, the chairs agreed to do a consensus call rega= rding the definition of RSA 1.5 algorithms within the messages draft or an = auxiliary draft. This functionality is analogous to the RS* series of signa= ture methods in JWS and the RSA1_5 encryption method in JWE. The five posit= ions we are asking the working group to consider and voice their support fo= r are:
>
> A) Drop all support for RSA 1.5 signatures and encryption.
> B) Define RSA 1.5 support in an auxiliary draft.
> C) Define RSA 1.5 support in the main draft (note that this option was= previously discussed on the list and did not find favor at the time, so if= you want it back you=E2=80=99ll need to make a strong case).
> D) You need more information to decide.
> E) You don=E2=80=99t give a flying rat about RSA 1.5.*
>
> Note that this is distinct from RSA PSS support which is being discuss= ed in a separate thread.
>
> The consensus call will remain open for two weeks from today, closing = on November 21, 2015; at which time, hopefully we will have a clear answer = and direction for our editor.
>
> Thank you,
> =E2=80=94 Justin & Kepeng, your COSE chairs
>
> * I promised those in the room at Yokohama to offer a flying rat optio= n, for which I am deeply sorry.
> _______________________________________________
> COSE mailing list
> COSE@ietf.org
> https://www.ietf.org/mailman/listinfo/cose


_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose


--047d7b10cd634e2db5052436a7e2-- From nobody Tue Nov 10 15:06:57 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67B031B422B for ; Tue, 10 Nov 2015 15:06:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JvL95Wh3auhT for ; Tue, 10 Nov 2015 15:06:53 -0800 (PST) Received: from mail-pa0-x22f.google.com (mail-pa0-x22f.google.com [IPv6:2607:f8b0:400e:c03::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D66941B428B for ; Tue, 10 Nov 2015 15:00:31 -0800 (PST) Received: by pabfh17 with SMTP id fh17so10693823pab.0 for ; Tue, 10 Nov 2015 15:00:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Fp21KQn/8qcI0VWpb1s7Zefxuw2ZAxPjM9yTBP94Iuc=; b=LNEN5+Kzmu1KfupnzRtMtgJbMa+qrjbzDwze/nYXYrZ7pR2jmFL54oZXEfyRSI2EmW b8asWtBVyzq6YuDWiOaAnjIeGJE6QFSNt7DLcKIxQv4uXwaWbrgM9pmH6Hw5HWAX6bej 6sisU2vIMQa06HxyOZEGVSwAH65lHp3y7k6tt4X5MqQIBo932kBLTYeQMyCaHRweXGUI 6IkCL5EEyFKFnPeKz1IoXPslgsbYSzqL7khD260vis3HUxLG9yxaQ+5D+58Xa03YgSYy lauEItJBX2O3jTwz9e8fJ91h/reG1AjJybSGZnb2hQcg3Ls0Mz6KKQsr7gM1EipGhTZi K2UQ== X-Received: by 10.66.216.38 with SMTP id on6mr9575280pac.53.1447196431266; Tue, 10 Nov 2015 15:00:31 -0800 (PST) Received: from [192.168.0.8] (i121-119-131-2.s30.a048.ap.plala.or.jp. [121.119.131.2]) by smtp.gmail.com with ESMTPSA id yh3sm6071807pbb.82.2015.11.10.15.00.29 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 10 Nov 2015 15:00:30 -0800 (PST) Content-Type: text/plain; charset=iso-2022-jp Mime-Version: 1.0 (1.0) From: Nat Sakimura X-Mailer: iPhone Mail (13B143) In-Reply-To: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> Date: Wed, 11 Nov 2015 08:00:27 +0900 Content-Transfer-Encoding: quoted-printable Message-Id: <3A3FE1C6-8A7B-4B00-9646-F58D80AFA68A@gmail.com> References: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> To: Justin Richer Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] Consensus Call: Placement of CDDL X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2015 23:06:56 -0000 b) =3Dnat via iPhone 2015/11/07 17:02=1B$B!"=1B(BJustin Richer =1B$B$N%a%C%;!<%= 8=1B(B: > At the Yokohama meeting, the chairs agreed to do a consensus call regardin= g the placement of the CDDL formatted text within the messages draft. The fo= ur positions we are asking the working group to consider and voice their sup= port for are: >=20 > A) Place the CDDL at the end of the document in an appendix. Other example= s will remain inline. > B) Place the CDDL inline with the normative text alongside other examples.= > C) You need more information to decide. > D) You don=1B$B!G=1B(Bt give a flying rat about CDDL.* >=20 > Note that this proposal does NOT consider removal of CDDL or declaration o= f normative dependence on CDDL. The English text will remain the normative f= orm and the CDDL will remain a non-normative example. The (unfinished, unhom= ed) CDDL draft will remain an informative reference. >=20 > The consensus call will remain open for two weeks from today, closing on N= ovember 21, 2015; at which time, hopefully we will have a clear answer and d= irection for our editor. >=20 > Thank you, > =1B$B!=3D=1B(B Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat option, f= or which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Nov 10 15:07:07 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EEA41B4278 for ; Tue, 10 Nov 2015 15:07:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qSwVZnPNc-Gp for ; Tue, 10 Nov 2015 15:07:05 -0800 (PST) Received: from mail-pa0-x236.google.com (mail-pa0-x236.google.com [IPv6:2607:f8b0:400e:c03::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 608101B4235 for ; Tue, 10 Nov 2015 15:00:57 -0800 (PST) Received: by pacdm15 with SMTP id dm15so10525693pac.3 for ; Tue, 10 Nov 2015 15:00:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=jPL5A8KB9n0WkbQ1gYEKaj7MO9qzcbqw3vLSYmSHNZs=; b=OThi0qwwOJaebTyo3Qqvad7Xk/hm5ESWb96qjWdaTRImmEkfaEgRn31X3CoJoGQEYy 22nSTTuqR/mOs0jREoZBDebRbp63t1aiQYl2SAqvkil9iLMWfeUz0gIb4J8j4cDpHr4a 77/8wTvywmmNAuhYj8JZhYB6Zvzj6UrCi176W4xD9yhbUWWBin1ADeR8pokDGzdVFUPl hIfRZaiduehblRBaYcTBShlO6SeLrn7YsmGPo5OfpxB/dfNwcxf30O/aE3MkRM8DWLFu DnGUo2T0exLyigImJbA4soJDOsnXVDQBnriGQUi91nVgKa+CI6lITeF38zGXmnIhFFGz +gkw== X-Received: by 10.67.23.229 with SMTP id id5mr9645421pad.64.1447196457030; Tue, 10 Nov 2015 15:00:57 -0800 (PST) Received: from [192.168.0.8] (i121-119-131-2.s30.a048.ap.plala.or.jp. [121.119.131.2]) by smtp.gmail.com with ESMTPSA id c5sm6104229pbu.18.2015.11.10.15.00.55 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 10 Nov 2015 15:00:55 -0800 (PST) Content-Type: text/plain; charset=iso-2022-jp Mime-Version: 1.0 (1.0) From: Nat Sakimura X-Mailer: iPhone Mail (13B143) In-Reply-To: Date: Wed, 11 Nov 2015 08:00:52 +0900 Content-Transfer-Encoding: quoted-printable Message-Id: <08EB2534-768D-4915-8B87-D759C1C81B80@gmail.com> References: To: Justin Richer Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] Consensus Call: RSA 1.5 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2015 23:07:06 -0000 A) =3Dnat via iPhone 2015/11/07 17:01=1B$B!"=1B(BJustin Richer =1B$B$N%a%C%;!<%= 8=1B(B: > At the Yokohama meeting, the chairs agreed to do a consensus call regardin= g the definition of RSA 1.5 algorithms within the messages draft or an auxil= iary draft. This functionality is analogous to the RS* series of signature m= ethods in JWS and the RSA1_5 encryption method in JWE. The five positions we= are asking the working group to consider and voice their support for are: >=20 > A) Drop all support for RSA 1.5 signatures and encryption. > B) Define RSA 1.5 support in an auxiliary draft. > C) Define RSA 1.5 support in the main draft (note that this option was pre= viously discussed on the list and did not find favor at the time, so if you w= ant it back you=1B$B!G=1B(Bll need to make a strong case). > D) You need more information to decide. > E) You don=1B$B!G=1B(Bt give a flying rat about RSA 1.5.* >=20 > Note that this is distinct from RSA PSS support which is being discussed i= n a separate thread. >=20 > The consensus call will remain open for two weeks from today, closing on N= ovember 21, 2015; at which time, hopefully we will have a clear answer and d= irection for our editor. >=20 > Thank you, > =1B$B!=3D=1B(B Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat option, f= or which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Thu Nov 12 11:10:25 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 478C61B3151; Thu, 12 Nov 2015 11:10:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.309 X-Spam-Level: X-Spam-Status: No, score=-2.309 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T1e_UILfDlpT; Thu, 12 Nov 2015 11:10:20 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 945821B3150; Thu, 12 Nov 2015 11:10:19 -0800 (PST) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX01.ad.nexusgroup.com (10.75.28.40) with Microsoft SMTP Server (TLS) id 15.0.995.29; Thu, 12 Nov 2015 20:10:17 +0100 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Thu, 12 Nov 2015 20:10:17 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: "" , "ace@ietf.org" , "cose@ietf.org" Thread-Topic: A draft on CBOR Web Tokens (CWT) Thread-Index: AQHRHX3DyXQEi0Hb60mPSXqbnVxSew== Date: Thu, 12 Nov 2015 19:10:16 +0000 Message-ID: <53BB1987-979C-4945-9C7D-CDB6619AEFFC@nexusgroup.com> Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2104) x-originating-ip: [37.247.26.197] Content-Type: multipart/alternative; boundary="_000_53BB1987979C49459C7DCDB6619AEFFCnexusgroupcom_" MIME-Version: 1.0 Archived-At: Cc: Mike Jones , Hannes Tschofenig Subject: [COSE] A draft on CBOR Web Tokens (CWT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2015 19:10:23 -0000 --_000_53BB1987979C49459C7DCDB6619AEFFCnexusgroupcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCkluIHRoZSBBQ0UgV0cgYSBzdHJhdyBtYW4gcHJvcG9zYWwgb2YgYSBDQk9SIFdlYiBU b2tlbiAoQ1dUKSB3YXMgZGVmaW5lZCBpbiB0aGUgZHJhZnQgIkF1dGhvcml6YXRpb24gZm9yIHRo ZSBJbnRlcm5ldCBvZiBUaGluZ3MgdXNpbmcgT0F1dGggMi4w4oCdIFsxXS4gV2UganVzdCBicm9r ZSBvdXQgdGhlIENCT1IgV2ViIFRva2VuIGludG8gYSBzZXBhcmF0ZSBkcmFmdCBhbmQgdGhlIG5l dyBkcmFmdCBpcyBzdWJtaXR0ZWQgdG8gdGhlIE9BVVRIIFdHLiBJdCBjYW4gYmUgZm91bmQgaGVy ZToNCg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtd2FobHN0cm9lbS1v YXV0aC1jYm9yLXdlYi10b2tlbi8NCg0KQWJzdHJhY3Q6DQoiQ0JPUiBXZWIgVG9rZW4gKENXVCkg aXMgYSBjb21wYWN0IG1lYW5zIG9mIHJlcHJlc2VudGluZyBjbGFpbXMgdG8gYmUgdHJhbnNmZXJy ZWQgYmV0d2VlbiB0d28gcGFydGllcy4gIENXVCBpcyBhIHByb2ZpbGUgb2YgdGhlIEpTT04gV2Vi IFRva2VuIChKV1QpIHRoYXQgaXMgb3B0aW1pemVkIGZvciBjb25zdHJhaW5lZCBkZXZpY2VzLiBU aGUgY2xhaW1zIGluIGEgQ1dUIGFyZSBlbmNvZGVkIGluIHRoZSBDb25jaXNlIEJpbmFyeSBPYmpl Y3QgUmVwcmVzZW50YXRpb24gKENCT1IpIGFuZCBDQk9SIE9iamVjdCBTaWduaW5nIGFuZCBFbmNy eXB0aW9uIChDT1NFKSBpcyB1c2VkIGZvciBhZGRlZCBhcHBsaWNhdGlvbiBsYXllciBzZWN1cml0 eSBwcm90ZWN0aW9uLiAgQSBjbGFpbSBpcyBhIHBpZWNlIG9mIGluZm9ybWF0aW9uIGFzc2VydGVk IGFib3V0IGEgc3ViamVjdCBhbmQgaXMgcmVwcmVzZW50ZWQgYXMgYSBuYW1lL3ZhbHVlIHBhaXIg Y29uc2lzdGluZyBvZiBhIGNsYWltIG5hbWUgYW5kIGEgY2xhaW0gdmFsdWUuIg0KDQovIEVyaWsN Cg0KDQpbMV0gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXNlaXR6LWFjZS1vYXV0 aC1hdXRoei0wMA0KDQoNCg== --_000_53BB1987979C49459C7DCDB6619AEFFCnexusgroupcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGksDQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JbiB0aGUgQUNFIFdHIGEgc3RyYXcg bWFuIHByb3Bvc2FsIG9mIGEgQ0JPUiBXZWIgVG9rZW4gKENXVCkgd2FzIGRlZmluZWQgaW4gdGhl IGRyYWZ0ICZxdW90O0F1dGhvcml6YXRpb24gZm9yIHRoZSBJbnRlcm5ldCBvZiBUaGluZ3MgdXNp bmcgT0F1dGggMi4w4oCdIFsxXS4gV2UganVzdCBicm9rZSBvdXQgdGhlIENCT1IgV2ViIFRva2Vu IGludG8gYSBzZXBhcmF0ZSBkcmFmdCBhbmQgdGhlIG5ldyBkcmFmdCZuYnNwO2lzIHN1Ym1pdHRl ZCB0bw0KIHRoZSBPQVVUSCBXRy4gSXQgY2FuIGJlIGZvdW5kIGhlcmU6Jm5ic3A7PC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YSBocmVm PSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC13YWhsc3Ryb2VtLW9hdXRo LWNib3Itd2ViLXRva2VuLyIgY2xhc3M9IiI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9k b2MvZHJhZnQtd2FobHN0cm9lbS1vYXV0aC1jYm9yLXdlYi10b2tlbi88L2E+PC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5BYnN0cmFjdDom bmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+JnF1b3Q7Q0JPUiBXZWIgVG9rZW4gKENXVCkgaXMg YSBjb21wYWN0IG1lYW5zIG9mIHJlcHJlc2VudGluZyBjbGFpbXMgdG8gYmUgdHJhbnNmZXJyZWQg YmV0d2VlbiB0d28gcGFydGllcy4gJm5ic3A7Q1dUIGlzIGEgcHJvZmlsZSBvZiB0aGUgSlNPTiBX ZWIgVG9rZW4gKEpXVCkgdGhhdCBpcyBvcHRpbWl6ZWQgZm9yIGNvbnN0cmFpbmVkIGRldmljZXMu IFRoZSBjbGFpbXMgaW4gYSBDV1QgYXJlIGVuY29kZWQgaW4gdGhlIENvbmNpc2UgQmluYXJ5DQog T2JqZWN0IFJlcHJlc2VudGF0aW9uIChDQk9SKSBhbmQgQ0JPUiBPYmplY3QgU2lnbmluZyBhbmQg RW5jcnlwdGlvbiAoQ09TRSkgaXMgdXNlZCBmb3IgYWRkZWQgYXBwbGljYXRpb24gbGF5ZXIgc2Vj dXJpdHkgcHJvdGVjdGlvbi4gJm5ic3A7QSBjbGFpbSBpcyBhIHBpZWNlIG9mIGluZm9ybWF0aW9u IGFzc2VydGVkIGFib3V0IGEgc3ViamVjdCBhbmQgaXMgcmVwcmVzZW50ZWQgYXMgYSBuYW1lL3Zh bHVlIHBhaXIgY29uc2lzdGluZyBvZiBhIGNsYWltIG5hbWUNCiBhbmQgYSBjbGFpbSB2YWx1ZS4m cXVvdDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPi8gRXJpazwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+WzFdJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXNlaXR6LWFjZS1vYXV0aC1hdXRoei0wMCIgY2xhc3M9 IiI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXNlaXR6LWFjZS1vYXV0aC1hdXRo ei0wMDwvYT48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_53BB1987979C49459C7DCDB6619AEFFCnexusgroupcom_-- From nobody Thu Nov 12 11:45:15 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC1EF1B32EE; Thu, 12 Nov 2015 11:45:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.25 X-Spam-Level: X-Spam-Status: No, score=-1.25 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZAZlbFix0uNu; Thu, 12 Nov 2015 11:45:12 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FBDC1B32F0; Thu, 12 Nov 2015 11:45:10 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id tACJj54u003493; Thu, 12 Nov 2015 20:45:05 +0100 (CET) Received: from nar.local (p5DC7F6AE.dip0.t-ipconnect.de [93.199.246.174]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3nxYL94qc1z2GC8; Thu, 12 Nov 2015 20:45:05 +0100 (CET) Message-ID: <5644EC40.4010002@tzi.org> Date: Thu, 12 Nov 2015 20:45:04 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: =?UTF-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= References: <53BB1987-979C-4945-9C7D-CDB6619AEFFC@nexusgroup.com> In-Reply-To: <53BB1987-979C-4945-9C7D-CDB6619AEFFC@nexusgroup.com> X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: Hannes Tschofenig , Mike Jones , "cose@ietf.org" , "" , "ace@ietf.org" Subject: Re: [COSE] A draft on CBOR Web Tokens (CWT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2015 19:45:14 -0000 Hi Erik, having this draft is a good thing. One thing I'm still wondering is what WG is the best place to progress this. We probably don't need to spend too much time on this because, regardless of the WG chosen, the people in another WG can look at it. Still, getting this right might provide some efficiencies. What is the technical content of this draft? Is it a new token that OAuth needs specifically for the new COSE-based applications of OAuth? Is it a new token that is specifically there for addressing ACE needs? Or is it essentially the same substance as JWT, but phrased in and profiled for CBOR? Depending on the answer, CWT should be done in OAuth, ACE, or COSE. (I'd rather hear the answer from the authors than venture a guess myself.) Grüße, Carsten Erik Wahlström neXus wrote: > Hi, > > In the ACE WG a straw man proposal of a CBOR Web Token (CWT) was defined > in the draft "Authorization for the Internet of Things using OAuth 2.0†> [1]. We just broke out the CBOR Web Token into a separate draft and the > new draft is submitted to the OAUTH WG. It can be found here: > > https://datatracker.ietf.org/doc/draft-wahlstroem-oauth-cbor-web-token/ > > Abstract: > "CBOR Web Token (CWT) is a compact means of representing claims to be > transferred between two parties. CWT is a profile of the JSON Web Token > (JWT) that is optimized for constrained devices. The claims in a CWT are > encoded in the Concise Binary Object Representation (CBOR) and CBOR > Object Signing and Encryption (COSE) is used for added application layer > security protection. A claim is a piece of information asserted about a > subject and is represented as a name/value pair consisting of a claim > name and a claim value." > > / Erik > > > [1] https://tools.ietf.org/html/draft-seitz-ace-oauth-authz-00 > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Thu Nov 12 12:01:47 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91B441B339A; Thu, 12 Nov 2015 12:01:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.31 X-Spam-Level: X-Spam-Status: No, score=-2.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qiIJZOOvm9Ct; Thu, 12 Nov 2015 12:01:42 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.121]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B19D71B33AC; Thu, 12 Nov 2015 12:01:27 -0800 (PST) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX02.ad.nexusgroup.com (10.75.28.43) with Microsoft SMTP Server (TLS) id 15.0.995.29; Thu, 12 Nov 2015 21:01:25 +0100 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Thu, 12 Nov 2015 21:01:25 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: Carsten Bormann Thread-Topic: [COSE] A draft on CBOR Web Tokens (CWT) Thread-Index: AQHRHX3EcFviJsoC2k6K5CeJemK0A56YuYEAgAAEkAA= Date: Thu, 12 Nov 2015 20:01:24 +0000 Message-ID: <73929C18-A3E7-4ACA-A6DC-5A7AD7576C9B@nexusgroup.com> References: <53BB1987-979C-4945-9C7D-CDB6619AEFFC@nexusgroup.com> <5644EC40.4010002@tzi.org> In-Reply-To: <5644EC40.4010002@tzi.org> Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2104) x-originating-ip: [37.247.26.197] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: Hannes Tschofenig , Mike Jones , "cose@ietf.org" , "" , "ace@ietf.org" Subject: Re: [COSE] A draft on CBOR Web Tokens (CWT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2015 20:01:45 -0000 SGkgQ2Fyc3RlbiwNCg0KVGhhbmtzLCBhbmQgSSBhZ3JlZS4gSeKAmXZlIGhlYXJkIGFyZ3VtZW50 cyBmb3IgYWxsIHRocmVlIHdvcmsgZ3JvdXBzLg0KDQpCb3Jyb3dlZCBzb21lIG9mIHlvdXIgd29y ZHMgdG8gZGVmaW5lIHRoZSBjb250ZW50IG9mIHRoZSBkcmFmdCA6KQ0KSXTigJlzIGl0IGVzc2Vu dGlhbGx5IGEgSldULCBwaHJhc2VkIGluIGFuZCBwcm9maWxlZCBmb3IgQ0JPUiB0byBhZGRyZXNz IEFDRSBuZWVkcywgd2hlcmUgT0F1dGggbmVlZHMgQ09TRSBmdW5jdGlvbmFsaXR5LCBmb3Igb2Jq ZWN0IHNlY3VyaXR5Lg0KDQpJ4oCZbSBvcGVuIGZvciBsZXR0aW5nIHRoZSBBROKAmXMgbW92ZSBp dCBhcm91bmQsIGJ1dCBoYXZpbmcgaXQgcmlnaHQgbmV4dCB0byBKV1Qgc2VlbXMgcmlnaHQgdG8g bWUuIEFsc28gb3BlbiBmb3IgdGhlIEFDRSBXRy4gRmVlbCBpdCBoYXMgbGVzcyBwbGFjZSBpbiBD T1NFIGZvciB0aGUgc2FtZSByZWFzb25zIEpXVCBpcyBub3QgaW4gdGhlIEpPU0UgV0cuDQoNCi8g RXJpaw0KDQoNCj4gT24gMTIgTm92IDIwMTUsIGF0IDIwOjQ1LCBDYXJzdGVuIEJvcm1hbm4gPGNh Ym9AdHppLm9yZz4gd3JvdGU6DQo+IA0KPiBIaSBFcmlrLA0KPiANCj4gaGF2aW5nIHRoaXMgZHJh ZnQgaXMgYSBnb29kIHRoaW5nLg0KPiANCj4gT25lIHRoaW5nIEknbSBzdGlsbCB3b25kZXJpbmcg aXMgd2hhdCBXRyBpcyB0aGUgYmVzdCBwbGFjZSB0byBwcm9ncmVzcw0KPiB0aGlzLiAgV2UgcHJv YmFibHkgZG9uJ3QgbmVlZCB0byBzcGVuZCB0b28gbXVjaCB0aW1lIG9uIHRoaXMgYmVjYXVzZSwN Cj4gcmVnYXJkbGVzcyBvZiB0aGUgV0cgY2hvc2VuLCB0aGUgcGVvcGxlIGluIGFub3RoZXIgV0cg Y2FuIGxvb2sgYXQgaXQuDQo+IFN0aWxsLCBnZXR0aW5nIHRoaXMgcmlnaHQgbWlnaHQgcHJvdmlk ZSBzb21lIGVmZmljaWVuY2llcy4NCj4gDQo+IFdoYXQgaXMgdGhlIHRlY2huaWNhbCBjb250ZW50 IG9mIHRoaXMgZHJhZnQ/ICBJcyBpdCBhIG5ldyB0b2tlbiB0aGF0DQo+IE9BdXRoIG5lZWRzIHNw ZWNpZmljYWxseSBmb3IgdGhlIG5ldyBDT1NFLWJhc2VkIGFwcGxpY2F0aW9ucyBvZiBPQXV0aD8N Cj4gSXMgaXQgYSBuZXcgdG9rZW4gdGhhdCBpcyBzcGVjaWZpY2FsbHkgdGhlcmUgZm9yIGFkZHJl c3NpbmcgQUNFIG5lZWRzPw0KPiBPciBpcyBpdCBlc3NlbnRpYWxseSB0aGUgc2FtZSBzdWJzdGFu Y2UgYXMgSldULCBidXQgcGhyYXNlZCBpbiBhbmQNCj4gcHJvZmlsZWQgZm9yIENCT1I/DQo+IA0K PiBEZXBlbmRpbmcgb24gdGhlIGFuc3dlciwgQ1dUIHNob3VsZCBiZSBkb25lIGluIE9BdXRoLCBB Q0UsIG9yIENPU0UuDQo+IChJJ2QgcmF0aGVyIGhlYXIgdGhlIGFuc3dlciBmcm9tIHRoZSBhdXRo b3JzIHRoYW4gdmVudHVyZSBhIGd1ZXNzIG15c2VsZi4pDQo+IA0KPiBHcsO8w59lLCBDYXJzdGVu DQo+IA0KPiANCj4gDQo+IEVyaWsgV2FobHN0csO2bSBuZVh1cyB3cm90ZToNCj4+IEhpLA0KPj4g DQo+PiBJbiB0aGUgQUNFIFdHIGEgc3RyYXcgbWFuIHByb3Bvc2FsIG9mIGEgQ0JPUiBXZWIgVG9r ZW4gKENXVCkgd2FzIGRlZmluZWQNCj4+IGluIHRoZSBkcmFmdCAiQXV0aG9yaXphdGlvbiBmb3Ig dGhlIEludGVybmV0IG9mIFRoaW5ncyB1c2luZyBPQXV0aCAyLjDigJ0NCj4+IFsxXS4gV2UganVz dCBicm9rZSBvdXQgdGhlIENCT1IgV2ViIFRva2VuIGludG8gYSBzZXBhcmF0ZSBkcmFmdCBhbmQg dGhlDQo+PiBuZXcgZHJhZnQgaXMgc3VibWl0dGVkIHRvIHRoZSBPQVVUSCBXRy4gSXQgY2FuIGJl IGZvdW5kIGhlcmU6IA0KPj4gDQo+PiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9k cmFmdC13YWhsc3Ryb2VtLW9hdXRoLWNib3Itd2ViLXRva2VuLw0KPj4gDQo+PiBBYnN0cmFjdDog DQo+PiAiQ0JPUiBXZWIgVG9rZW4gKENXVCkgaXMgYSBjb21wYWN0IG1lYW5zIG9mIHJlcHJlc2Vu dGluZyBjbGFpbXMgdG8gYmUNCj4+IHRyYW5zZmVycmVkIGJldHdlZW4gdHdvIHBhcnRpZXMuICBD V1QgaXMgYSBwcm9maWxlIG9mIHRoZSBKU09OIFdlYiBUb2tlbg0KPj4gKEpXVCkgdGhhdCBpcyBv cHRpbWl6ZWQgZm9yIGNvbnN0cmFpbmVkIGRldmljZXMuIFRoZSBjbGFpbXMgaW4gYSBDV1QgYXJl DQo+PiBlbmNvZGVkIGluIHRoZSBDb25jaXNlIEJpbmFyeSBPYmplY3QgUmVwcmVzZW50YXRpb24g KENCT1IpIGFuZCBDQk9SDQo+PiBPYmplY3QgU2lnbmluZyBhbmQgRW5jcnlwdGlvbiAoQ09TRSkg aXMgdXNlZCBmb3IgYWRkZWQgYXBwbGljYXRpb24gbGF5ZXINCj4+IHNlY3VyaXR5IHByb3RlY3Rp b24uICBBIGNsYWltIGlzIGEgcGllY2Ugb2YgaW5mb3JtYXRpb24gYXNzZXJ0ZWQgYWJvdXQgYQ0K Pj4gc3ViamVjdCBhbmQgaXMgcmVwcmVzZW50ZWQgYXMgYSBuYW1lL3ZhbHVlIHBhaXIgY29uc2lz dGluZyBvZiBhIGNsYWltDQo+PiBuYW1lIGFuZCBhIGNsYWltIHZhbHVlLiINCj4+IA0KPj4gLyBF cmlrDQo+PiANCj4+IA0KPj4gWzFdIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1z ZWl0ei1hY2Utb2F1dGgtYXV0aHotMDANCj4+IA0KPj4gDQo+PiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gQ09TRSBtYWlsaW5nIGxpc3QNCj4+IENP U0VAaWV0Zi5vcmcNCj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29z ZQ0KDQo= From nobody Thu Nov 12 12:44:28 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E82321B3599 for ; Thu, 12 Nov 2015 12:44:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6qJ_y3QfsD5L for ; Thu, 12 Nov 2015 12:44:21 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0744.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::744]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D4261B3597 for ; Thu, 12 Nov 2015 12:44:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=/pRov1fhk9W47pRW5u91jX+kZVb+gry8T7b2rC6s5Yg=; b=QCoS/vRhiXSQh00HCuWAMrI4d/yPoVLT2lmAHbERfqQDwcy2YWNQIyLExTqTjGK0zcLHbnQWLw87eFwvIWerOyCr6n1ISPtgHLViuCx0Ybo0DO/pxhm4QjHtPo0LMHZQ5DJ06LmlUTyZ+1Re5DPdiJVvcL8jpvTV9wRvsyqYpVQ= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) with Microsoft SMTP Server (TLS) id 15.1.325.17; Thu, 12 Nov 2015 20:43:58 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0325.003; Thu, 12 Nov 2015 20:43:58 +0000 From: Mike Jones To: "'cose@ietf.org'" Thread-Topic: A draft on CBOR Web Tokens (CWT) Thread-Index: AQHRHX3DyXQEi0Hb60mPSXqbnVxSe56Y2MzQgAAApEA= Date: Thu, 12 Nov 2015 20:43:57 +0000 Message-ID: References: <53BB1987-979C-4945-9C7D-CDB6619AEFFC@nexusgroup.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.89.201] x-microsoft-exchange-diagnostics: 1; BY2PR03MB442; 5:tmSo63EH3vI3TZ/pr7qCCwnInazWWhp6GAMGYzUtRo7l79aHlMrXjFJM3B0oGa2U4J6+MvA74nqgw54DmwWSpzOgKfbBh2dRcugwS6wvgTZr3ntzb7nc3pWAQF07aoi9ODXarGlBfQeYQBiU7FH9OQ==; 24:eaOuRmeV6UAMC1UKmUlFvi+4YyKB3lA4/N3aSgwhD4TuUlFTc9edg2eRfSzFfoUto9+aeo0cM51eZ+ZoEsxGNRjCCWNy1ra06sJyE66u/x4=; 20:dyGTNcRUgL/opUj9r8XbNJVckdmvYKLDCOMj13BAK9sf1VOOo1siJNm/d50m9wz9Fcz9KL97txymR0KINUt6sQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB442; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(10201501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB442; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB442; x-forefront-prvs: 07584EDBCD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(209900001)(377454003)(189002)(13464003)(199003)(69234005)(54356999)(5008740100001)(76176999)(101416001)(99286002)(10090500001)(5005710100001)(50986999)(5001960100002)(76576001)(10290500002)(19300405004)(8990500004)(110136002)(33656002)(189998001)(19625215002)(106356001)(105586002)(16236675004)(561944003)(10400500002)(40100003)(19617315012)(86362001)(5001920100001)(87936001)(86612001)(77096005)(5003600100002)(11100500001)(2900100001)(97736004)(92566002)(5002640100001)(81156007)(102836002)(122556002)(15975445007)(5007970100001)(19580395003)(106116001)(19609705001)(74316001)(5004730100002)(19580405001)(66066001)(491001)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB442; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB4422617CB83C074D30C4CCCF5120BY2PR03MB442namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2015 20:43:57.9224 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB442 Archived-At: Cc: Hannes Tschofenig , =?utf-8?B?RXJpayBXYWhsc3Ryw7Zt?= Subject: [COSE] FW: A draft on CBOR Web Tokens (CWT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2015 20:44:26 -0000 --_000_BY2PR03MB4422617CB83C074D30C4CCCF5120BY2PR03MB442namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhpcyBzcGVjaWZpY2F0aW9uLCB3aGVuIGNvbXBsZXRlLCBzaG91bGQgbWVldCB0aGUgbmVlZCBm b3IgYSBnZW5lcmFsIGNyeXB0b2dyYXBoaWNhbGx5IHNlY3VyZWQgQ0JPUiBhcHBsaWNhdGlvbiBw YXlsb2FkIGZvcm1hdCwgb2J2aWF0aW5nIHRoZSB1cmdlIHRvIGphbSBhcHBsaWNhdGlvbiBmaWVs ZHMgaW50byBDT1NFIGhlYWRlcnMuICBGb3IgaW5zdGFuY2UsIHRoZSDigJxjcmVhdGlvbiB0aW1l 4oCdIHZhbHVlIHRoYXQgd2FzIHRoZSBzdWJqZWN0IG9mIGlzc3VlICMxMzxodHRwczovL2dpdGh1 Yi5jb20vY29zZS13Zy9jb3NlLWlzc3Vlcy9pc3N1ZXMvMTM+IGNhbiBiZSByZXBsYWNlZCBieSB0 aGUg4oCcaXNzdWVkIGF04oCdIHRpbWUgaW4gQ1dULg0KDQpUaGFua3MgdG8gRXJpayBhbmQgSGFu bmVzIGZvciBoZWxwaW5nIHRvIGtpY2sgdGhpcyBvZmYhDQoNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTog TWlrZSBKb25lcw0KU2VudDogVGh1cnNkYXksIE5vdmVtYmVyIDEyLCAyMDE1IDEyOjM5IFBNDQpU bzogJ0VyaWsgV2FobHN0csO2bSBuZVh1cyc7IDxvYXV0aEBpZXRmLm9yZz4NClN1YmplY3Q6IFJF OiBBIGRyYWZ0IG9uIENCT1IgV2ViIFRva2VucyAoQ1dUKQ0KDQoNCkZZSSAtIEkgYWxzbyB3cm90 ZSBhYm91dCB0aGlzIGF0IGh0dHA6Ly9zZWxmLWlzc3VlZC5pbmZvLz9wPTE0NzYgYW5kIGFzIEBz ZWxmaXNzdWVkPGh0dHBzOi8vdHdpdHRlci5jb20vc2VsZmlzc3VlZD4uDQoNCg0KDQotLS0tLU9y aWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogT0F1dGggW21haWx0bzpvYXV0aC1ib3VuY2VzQGll dGYub3JnXSBPbiBCZWhhbGYgT2YgRXJpayBXYWhsc3Ryw7ZtIG5lWHVzDQpTZW50OiBUaHVyc2Rh eSwgTm92ZW1iZXIgMTIsIDIwMTUgMTE6MjYgQU0NClRvOiA8b2F1dGhAaWV0Zi5vcmc8bWFpbHRv Om9hdXRoQGlldGYub3JnPj4NClN1YmplY3Q6IFtPQVVUSC1XR10gQSBkcmFmdCBvbiBDQk9SIFdl YiBUb2tlbnMgKENXVCkNCg0KDQoNCkhpLA0KDQoNCg0KSW4gdGhlIEFDRSBXRyBhIHN0cmF3IG1h biBwcm9wb3NhbCBvZiBhIENCT1IgV2ViIFRva2VuIChDV1QpIHdhcyBkZWZpbmVkIGluIHRoZSBk cmFmdCAiQXV0aG9yaXphdGlvbiBmb3IgdGhlIEludGVybmV0IG9mIFRoaW5ncyB1c2luZyBPQXV0 aCAyLjDigJ0gWzFdLiBXZSBqdXN0IGJyb2tlIG91dCB0aGUgQ0JPUiBXZWIgVG9rZW4gaW50byBh IHNlcGFyYXRlIGRyYWZ0IGFuZCB0aGUgbmV3IGRyYWZ0IGlzIHN1Ym1pdHRlZCB0byB0aGUgT0FV VEggV0cuIEl0IGNhbiBiZSBmb3VuZCBoZXJlOg0KDQoNCg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5p ZXRmLm9yZy9kb2MvZHJhZnQtd2FobHN0cm9lbS1vYXV0aC1jYm9yLXdlYi10b2tlbi8NCg0KDQoN CkFic3RyYWN0Og0KDQoiQ0JPUiBXZWIgVG9rZW4gKENXVCkgaXMgYSBjb21wYWN0IG1lYW5zIG9m IHJlcHJlc2VudGluZyBjbGFpbXMgdG8gYmUgdHJhbnNmZXJyZWQgYmV0d2VlbiB0d28gcGFydGll cy4gIENXVCBpcyBhIHByb2ZpbGUgb2YgdGhlIEpTT04gV2ViIFRva2VuIChKV1QpIHRoYXQgaXMg b3B0aW1pemVkIGZvciBjb25zdHJhaW5lZCBkZXZpY2VzLiBUaGUgY2xhaW1zIGluIGEgQ1dUIGFy ZSBlbmNvZGVkIGluIHRoZSBDb25jaXNlIEJpbmFyeSBPYmplY3QgUmVwcmVzZW50YXRpb24gKENC T1IpIGFuZCBDQk9SIE9iamVjdCBTaWduaW5nIGFuZCBFbmNyeXB0aW9uIChDT1NFKSBpcyB1c2Vk IGZvciBhZGRlZCBhcHBsaWNhdGlvbiBsYXllciBzZWN1cml0eSBwcm90ZWN0aW9uLiAgQSBjbGFp bSBpcyBhIHBpZWNlIG9mIGluZm9ybWF0aW9uIGFzc2VydGVkIGFib3V0IGEgc3ViamVjdCBhbmQg aXMgcmVwcmVzZW50ZWQgYXMgYSBuYW1lL3ZhbHVlIHBhaXIgY29uc2lzdGluZyBvZiBhIGNsYWlt IG5hbWUgYW5kIGEgY2xhaW0gdmFsdWUuIg0KDQoNCg0KLyBFcmlrDQoNCg0KDQoNCg0KWzFdIGh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1zZWl0ei1hY2Utb2F1dGgtYXV0aHotMDAN Cg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQoN Ck9BdXRoIG1haWxpbmcgbGlzdA0KDQpPQXV0aEBpZXRmLm9yZzxtYWlsdG86T0F1dGhAaWV0Zi5v cmc+DQoNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vb2F1dGgNCg== --_000_BY2PR03MB4422617CB83C074D30C4CCCF5120BY2PR03MB442namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7fQ0KYTpsaW5r LCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1 ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBl cmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0K CXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxpLk1zb1BsYWlu VGV4dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0 eWxlLWxpbms6IlBsYWluIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiO30NCnAuTXNvQWNldGF0ZSwgbGkuTXNvQWNldGF0ZSwgZGl2Lk1zb0FjZXRhdGUN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRleHQg Q2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXpl OjguMHB0Ow0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLlBsYWlu VGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFpbiBUZXh0IjsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7DQoJY29sb3I6IzAwMjA2MDt9DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0KCXttc28tc3R5bGUt bmFtZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28t c3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1z ZXJpZiI7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJ Zm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4w aW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjEN Cgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxp bms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5UaGlzIHNwZWNp ZmljYXRpb24sIHdoZW4gY29tcGxldGUsIHNob3VsZCBtZWV0IHRoZSBuZWVkIGZvciBhIGdlbmVy YWwgY3J5cHRvZ3JhcGhpY2FsbHkgc2VjdXJlZCBDQk9SIGFwcGxpY2F0aW9uIHBheWxvYWQgZm9y bWF0LCBvYnZpYXRpbmcgdGhlIHVyZ2UgdG8gamFtIGFwcGxpY2F0aW9uIGZpZWxkcyBpbnRvIENP U0UgaGVhZGVycy4mbmJzcDsgRm9yIGluc3RhbmNlLA0KIHRoZSDigJxjcmVhdGlvbiB0aW1l4oCd IHZhbHVlIHRoYXQgd2FzIHRoZSBzdWJqZWN0IG9mIDxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNv bS9jb3NlLXdnL2Nvc2UtaXNzdWVzL2lzc3Vlcy8xMyI+DQppc3N1ZSAjMTM8L2E+IGNhbiBiZSBy ZXBsYWNlZCBieSB0aGUg4oCcaXNzdWVkIGF04oCdIHRpbWUgaW4gQ1dULjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYw Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhhbmtzIHRvIEVyaWsgYW5kIEhhbm5lcyBmb3IgaGVs cGluZyB0byBraWNrIHRoaXMgb2ZmITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2 MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBNaWtlIEpvbmVzDQo8YnI+DQo8Yj5TZW50Ojwv Yj4gVGh1cnNkYXksIE5vdmVtYmVyIDEyLCAyMDE1IDEyOjM5IFBNPGJyPg0KPGI+VG86PC9iPiAn RXJpayBXYWhsc3Ryw7ZtIG5lWHVzJzsgJmx0O29hdXRoQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1 YmplY3Q6PC9iPiBSRTogQSBkcmFmdCBvbiBDQk9SIFdlYiBUb2tlbnMgKENXVCk8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5GWUkgLSBJIGFsc28gd3Jv dGUgYWJvdXQgdGhpcyBhdCA8YSBocmVmPSJodHRwOi8vc2VsZi1pc3N1ZWQuaW5mby8/cD0xNDc2 Ij4NCmh0dHA6Ly9zZWxmLWlzc3VlZC5pbmZvLz9wPTE0NzY8L2E+IGFuZCBhcyA8YSBocmVmPSJo dHRwczovL3R3aXR0ZXIuY29tL3NlbGZpc3N1ZWQiPg0KQHNlbGZpc3N1ZWQ8L2E+LjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4tLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTxicj4NCkZy b206IE9BdXRoIFs8YSBocmVmPSJtYWlsdG86b2F1dGgtYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRv Om9hdXRoLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBPbiBCZWhhbGYgT2YgRXJpayBXYWhsc3Ryw7Zt IG5lWHVzPGJyPg0KU2VudDogVGh1cnNkYXksIE5vdmVtYmVyIDEyLCAyMDE1IDExOjI2IEFNPGJy Pg0KVG86ICZsdDs8YSBocmVmPSJtYWlsdG86b2F1dGhAaWV0Zi5vcmciPm9hdXRoQGlldGYub3Jn PC9hPiZndDs8YnI+DQpTdWJqZWN0OiBbT0FVVEgtV0ddIEEgZHJhZnQgb24gQ0JPUiBXZWIgVG9r ZW5zIChDV1QpPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPkhpLDxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij5JbiB0aGUgQUNFIFdHIGEgc3RyYXcgbWFuIHByb3Bvc2FsIG9mIGEg Q0JPUiBXZWIgVG9rZW4gKENXVCkgd2FzIGRlZmluZWQgaW4gdGhlIGRyYWZ0ICZxdW90O0F1dGhv cml6YXRpb24gZm9yIHRoZSBJbnRlcm5ldCBvZiBUaGluZ3MgdXNpbmcgT0F1dGggMi4w4oCdIFsx XS4gV2UganVzdCBicm9rZSBvdXQgdGhlIENCT1IgV2ViIFRva2VuIGludG8gYSBzZXBhcmF0ZSBk cmFmdCBhbmQgdGhlIG5ldyBkcmFmdCBpcyBzdWJtaXR0ZWQNCiB0byB0aGUgT0FVVEggV0cuIEl0 IGNhbiBiZSBmb3VuZCBoZXJlOiA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PGEgaHJl Zj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtd2FobHN0cm9lbS1vYXV0 aC1jYm9yLXdlYi10b2tlbi8iPjxzcGFuIHN0eWxlPSJjb2xvcjp3aW5kb3d0ZXh0O3RleHQtZGVj b3JhdGlvbjpub25lIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC13YWhs c3Ryb2VtLW9hdXRoLWNib3Itd2ViLXRva2VuLzwvc3Bhbj48L2E+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPkFic3RyYWN0OiA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPiZxdW90O0NCT1IgV2ViIFRva2VuIChDV1QpIGlzIGEgY29tcGFjdCBtZWFucyBvZiBy ZXByZXNlbnRpbmcgY2xhaW1zIHRvIGJlIHRyYW5zZmVycmVkIGJldHdlZW4gdHdvIHBhcnRpZXMu Jm5ic3A7IENXVCBpcyBhIHByb2ZpbGUgb2YgdGhlIEpTT04gV2ViIFRva2VuIChKV1QpIHRoYXQg aXMgb3B0aW1pemVkIGZvciBjb25zdHJhaW5lZCBkZXZpY2VzLiBUaGUgY2xhaW1zIGluIGEgQ1dU IGFyZSBlbmNvZGVkIGluIHRoZSBDb25jaXNlDQogQmluYXJ5IE9iamVjdCBSZXByZXNlbnRhdGlv biAoQ0JPUikgYW5kIENCT1IgT2JqZWN0IFNpZ25pbmcgYW5kIEVuY3J5cHRpb24gKENPU0UpIGlz IHVzZWQgZm9yIGFkZGVkIGFwcGxpY2F0aW9uIGxheWVyIHNlY3VyaXR5IHByb3RlY3Rpb24uJm5i c3A7IEEgY2xhaW0gaXMgYSBwaWVjZSBvZiBpbmZvcm1hdGlvbiBhc3NlcnRlZCBhYm91dCBhIHN1 YmplY3QgYW5kIGlzIHJlcHJlc2VudGVkIGFzIGEgbmFtZS92YWx1ZSBwYWlyIGNvbnNpc3Rpbmcg b2YgYSBjbGFpbQ0KIG5hbWUgYW5kIGEgY2xhaW0gdmFsdWUuJnF1b3Q7PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPi8gRXJpazxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPlsxXSA8YSBocmVmPSJo dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtc2VpdHotYWNlLW9hdXRoLWF1dGh6LTAw Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjp3aW5kb3d0ZXh0O3RleHQtZGVjb3JhdGlvbjpub25lIj5o dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtc2VpdHotYWNlLW9hdXRoLWF1dGh6LTAw PC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+X19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPk9BdXRoIG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PGEgaHJlZj0ibWFpbHRvOk9BdXRoQGlldGYub3JnIj48c3BhbiBz dHlsZT0iY29sb3I6d2luZG93dGV4dDt0ZXh0LWRlY29yYXRpb246bm9uZSI+T0F1dGhAaWV0Zi5v cmc8L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9vYXV0aCI+PHNwYW4g c3R5bGU9ImNvbG9yOndpbmRvd3RleHQ7dGV4dC1kZWNvcmF0aW9uOm5vbmUiPmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vb2F1dGg8L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_BY2PR03MB4422617CB83C074D30C4CCCF5120BY2PR03MB442namprd_-- From nobody Thu Nov 12 13:02:16 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 630B01B2DAB; Thu, 12 Nov 2015 13:02:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.91 X-Spam-Level: X-Spam-Status: No, score=-3.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aJhmDWatyTR7; Thu, 12 Nov 2015 13:02:12 -0800 (PST) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05B0E1B2CB2; Thu, 12 Nov 2015 13:02:10 -0800 (PST) X-AuditID: 1209190f-f79d06d000004b20-b5-5644fe5131c3 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id 07.69.19232.15EF4465; Thu, 12 Nov 2015 16:02:09 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id tACL28Ag017398; Thu, 12 Nov 2015 16:02:08 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tACL255e013631 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 12 Nov 2015 16:02:06 -0500 Content-Type: multipart/alternative; boundary="Apple-Mail=_C6D98A78-6AB4-405D-80A6-BB4D661F8B40" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Justin Richer In-Reply-To: <53BB1987-979C-4945-9C7D-CDB6619AEFFC@nexusgroup.com> Date: Thu, 12 Nov 2015 16:02:05 -0500 Message-Id: <519F98B0-E02B-4827-9862-8F7AAF87FEA2@mit.edu> References: <53BB1987-979C-4945-9C7D-CDB6619AEFFC@nexusgroup.com> To: =?utf-8?Q?Erik_Wahlstr=C3=B6m_neXus?= X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrDKsWRmVeSWpSXmKPExsUixCmqrRv4zyXM4N1uWYvv33qYLaZtncpq cWzXYjaLmzNOMVnsnfaJxeLk21dsDmwea+atYfRYsuQnk0frjr/sHlvv/2YMYInisklJzcks Sy3St0vgyvg0bQNzQbd2xcJVbWwNjHNVuxg5OCQETCQmbTPrYuQEMsUkLtxbzwZiCwksZpL4 8KC4i5ELyN7IKHHr6V9WCOchk8SFI+1MIFXMAgkSS/vmsoDYvAJ6Eq9uXWYFGSoMNPTX51yQ MJuAqsT0NS1g5ZwCThLXt60GW8ACFF9xYyk7xJjbjBKLOgUgxlhJvLw/lQniCEeJxmW3mEFs EQFPiZsn/7NAHCorsfv3I6YJjAKzkFwxC8kVEHFtiWULXzND2JoS+7uXs2CKa0h0fpvIuoCR bRWjbEpulW5uYmZOcWqybnFyYl5eapGuiV5uZoleakrpJkZwpEjy72D8dlDpEKMAB6MSD++O Fy5hQqyJZcWVuYcYJTmYlER5pd4AhfiS8lMqMxKLM+KLSnNSiw8xSnAwK4nwLn4GlONNSays Si3Kh0lJc7AoifNu+sEXIiSQnliSmp2aWpBaBJOV4eBQkuDN/wvUKFiUmp5akZaZU4KQZuLg BBnOAzQ8CaSGt7ggMbc4Mx0if4pRUUqctwYkIQCSyCjNg+sFJbKEt4dNXzGKA70izBsBUsUD TIJw3a+ABjMBDf4i4QQyuCQRISXVwOjS/nK//sNG6VnZPxUrXx4znyHd/+jYC9mzfku+iz16 Yyo9xd726a2IrU88LgXJLmDoL7VvPLleWPOnJOutUmv7SwwlKabyK4Ua/tgFZFz6r3DswMmF h96f79meJbXbdtv+eZHf/ryfeYn1lfry8pnl3e8T/6+Pvqc9z3b/zaS2c75bwrsSrjIqsRRn JBpqMRcVJwIAxjqTyj8DAAA= Archived-At: Cc: Hannes Tschofenig , Mike Jones , "cose@ietf.org" , "" , "ace@ietf.org" Subject: Re: [COSE] A draft on CBOR Web Tokens (CWT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2015 21:02:14 -0000 --Apple-Mail=_C6D98A78-6AB4-405D-80A6-BB4D661F8B40 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Thanks very much, Eric. As we promised in Yokohama, the chairs of the COSE working group are = currently running a consensus call thread about this very topic, and = I=E2=80=99d encourage others to join that discussion. The thread starts = here: http://www.ietf.org/mail-archive/web/cose/current/msg00747.html =E2=80=94 Justin > On Nov 12, 2015, at 2:10 PM, Erik Wahlstr=C3=B6m neXus = wrote: >=20 > Hi, >=20 > In the ACE WG a straw man proposal of a CBOR Web Token (CWT) was = defined in the draft "Authorization for the Internet of Things using = OAuth 2.0=E2=80=9D [1]. We just broke out the CBOR Web Token into a = separate draft and the new draft is submitted to the OAUTH WG. It can be = found here:=20 >=20 > = https://datatracker.ietf.org/doc/draft-wahlstroem-oauth-cbor-web-token/ = >=20 > Abstract:=20 > "CBOR Web Token (CWT) is a compact means of representing claims to be = transferred between two parties. CWT is a profile of the JSON Web Token = (JWT) that is optimized for constrained devices. The claims in a CWT are = encoded in the Concise Binary Object Representation (CBOR) and CBOR = Object Signing and Encryption (COSE) is used for added application layer = security protection. A claim is a piece of information asserted about a = subject and is represented as a name/value pair consisting of a claim = name and a claim value." >=20 > / Erik >=20 >=20 > [1] https://tools.ietf.org/html/draft-seitz-ace-oauth-authz-00 = >=20 >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --Apple-Mail=_C6D98A78-6AB4-405D-80A6-BB4D661F8B40 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Thanks very much, Eric.

As we promised in Yokohama, the chairs = of the COSE working group are currently running a consensus call thread = about this very topic, and I=E2=80=99d encourage others to join that = discussion. The thread starts here:

http://www.ietf.org/mail-archive/web/cose/current/msg00747.html=

 =E2=80= =94 Justin

On Nov 12, 2015, at 2:10 PM, = Erik Wahlstr=C3=B6m neXus <erik.wahlstrom@nexusgroup.com> wrote:

Hi,

In the ACE WG a straw man proposal of a CBOR Web Token = (CWT) was defined in the draft "Authorization for the Internet of Things = using OAuth 2.0=E2=80=9D [1]. We just broke out the CBOR Web Token into = a separate draft and the new draft is submitted to the OAUTH WG. It can be found here: 

https://datatracker.ietf.org/doc/draft-wahlstroem-oauth-cbor-we= b-token/

Abstract: 
"CBOR Web Token (CWT) is a compact means of representing = claims to be transferred between two parties.  CWT is a profile of = the JSON Web Token (JWT) that is optimized for constrained devices. The = claims in a CWT are encoded in the Concise Binary Object Representation (CBOR) and CBOR Object Signing and Encryption = (COSE) is used for added application layer security protection.  A = claim is a piece of information asserted about a subject and is = represented as a name/value pair consisting of a claim name and a claim value."

/ Erik


[1] https://tools.ietf.org/html/draft-seitz-ace-oauth-authz-00<= /div>


_______________________________________________
COSE = mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_C6D98A78-6AB4-405D-80A6-BB4D661F8B40-- From nobody Thu Nov 12 18:08:43 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F2FF1B3CDD for ; Thu, 12 Nov 2015 18:08:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KlfgAr3zntoF for ; Thu, 12 Nov 2015 18:08:39 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0731.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:731]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45F321A0369 for ; Thu, 12 Nov 2015 18:08:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=RxoItPiTPzVbiyk+orp5tjz83Rbt/Rcaksp7+S08u9s=; b=WDvI4NEyt7plEASU4/+6ynO3D8xVyN+nINNVsK0Y+W6oOXvvg2QC2qMzO8YwioIXeX4IGp3HjN9gPZMNm1bbY0/uAQuiygQiETTgeCXHhINlfI6twHBqe5KwOQaA0Ldze8009xE7roehJZFv84Lh2TD6JC1oFUB3Hw/pzVIsR80= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB444.namprd03.prod.outlook.com (10.141.141.154) with Microsoft SMTP Server (TLS) id 15.1.325.17; Fri, 13 Nov 2015 02:08:15 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0325.003; Fri, 13 Nov 2015 02:08:14 +0000 From: Mike Jones To: Hannes Tschofenig , Justin Richer , "cose@ietf.org" Thread-Topic: [COSE] Consensus Call: Adoption of the COSE Token Thread-Index: AQHRGTKYfIX3Ls5A6k+9NkYTgwTuIJ6TcjYAgAXHyfA= Date: Fri, 13 Nov 2015 02:08:14 +0000 Message-ID: References: <56406970.5090801@gmx.net> In-Reply-To: <56406970.5090801@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:5::188] x-microsoft-exchange-diagnostics: 1; BY2PR03MB444; 5:uiQlD1C+T2/tNAWC9Gx0ML0HzaCmQ+0xArg2wL1U6A+PWqscjUQcDOR9S9KCVsdUhVCEyhNenLBkQyChuFX+pLp30/9xQb6IrU+2M8ea47bYdV1A+x46jLTGaTLTA/xqzR4DlduU1GLFWKyaQGIWAg==; 24:ph3swNI6wvSXClMxOfVtFIWnAkcIWUq06IzBKMiEYHPoINcut0IVvHoOT2RGob3FErkk7fVokIFrGXnHb1oKXN/u0YV5wBqTgT0pFdx40qc=; 20:Hm5/hft1ho7uQ6vA8FeySn4bPOwKQ0WUvwXYSbiZQ1RPouMIjq1DFxUNYD1ZdAWUZmENxi7h2v/TKeUgNJdxsg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB444; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(8121501046)(5005006)(520078)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB444; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB444; x-forefront-prvs: 0759F7A50A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(24454002)(199003)(189002)(377454003)(13464003)(479174004)(54356999)(2501003)(76176999)(107886002)(19580395003)(40100003)(2900100001)(19580405001)(50986999)(92566002)(102836002)(106116001)(77096005)(15975445007)(5001960100002)(106356001)(1720100001)(74316001)(33656002)(122556002)(5003600100002)(97736004)(81156007)(8990500004)(5007970100001)(2171001)(76576001)(87936001)(86612001)(5004730100002)(10290500002)(2950100001)(10400500002)(5008740100001)(5005710100001)(99286002)(5001770100001)(105586002)(101416001)(86362001)(5002640100001)(10090500001)(189998001)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB444; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2015 02:08:14.8408 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB444 Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Nov 2015 02:08:42 -0000 SSBwZXJzb25hbGx5IGJlbGlldmUgdGhhdCB0aGUgY29yZSBDQk9SIFdlYiBUb2tlbiAoQ1dUKSBz cGVjIHNob3VsZCBkZWZpbmUgZXF1aXZhbGVudHMgb2YgdGhlIHNhbWUgc2V2ZW4gZ2VuZXJhbC1w dXJwb3NlIGNsYWltcyB0aGF0IEpTT04gV2ViIFRva2VuIChKV1QpIGh0dHA6Ly90b29scy5pZXRm Lm9yZy9odG1sL3JmYzc1MTkgZGVmaW5lZCAoaXNzLCBzdWIsIGF1ZCwgZXhwLCBuYmYsIGlhdCwg YW5kIGp0aSksIGRlZmluZSB0aGUgQ1dUIENsYWltcyBSZWdpc3RyeSwgYW5kIHN0b3AgdGhlcmUu ICBLZWVwaW5nIHRoZSB0YXJnZXQgc2ltcGxlIGluIHRoYXQgbWFubmVyIG1lYW5zIHRoYXQgdGhp cyBjb3VsZCBnZXQgZG9uZSBWRVJZIHF1aWNrbHkuDQoNClRoZW4gYXBwbGljYXRpb25zLCBzdWNo IGFzIEFDRSBwcm90b2NvbHMgYW5kIGFwcGxpY2F0aW9ucywgY291bGQgZGVmaW5lIGFkZGl0aW9u YWwgY2xhaW1zIHVzZWQgYnkgdGhvc2UgYXBwbGljYXRpb25zIGFuZCByZWdpc3RlciB0aGVtIGlu IHRoZSBDV1QgQ2xhaW1zIFJlZ2lzdHJ5LiAgS2VlcGluZyB0aGUgZ2VuZXJhbC1wdXJwb3NlIGFu ZCBhcHBsaWNhdGlvbi1zcGVjaWZpYyBjbGFpbSBkZWZpbml0aW9ucyBpbiBkaWZmZXJlbnQgc3Bl Y3MgaXMgaW1wb3J0YW50IHRvIGhhdmluZyBDV1QgYmUgYSBnZW5lcmFsLXB1cnBvc2Ugc3BlYywg cmF0aGVyIHRoYW4gYmVpbmcgdmlld2VkIGFzIGJlaW5nIHNsYW50ZWQgdG93YXJkcyBhIHBhcnRp Y3VsYXIgYXBwbGljYXRpb24gb3IgYXBwbGljYXRpb24gYXJlYS4gIEl0IGFsc28gbWVhbnMgaXQg d2lsbCBnZXQgZG9uZSBtdWNoIGZhc3Rlci4NCg0KSW9UL0FDRSBleHBlcnRpc2UgaXMgY3JpdGlj YWwgZm9yIGRlZmluaW5nIHRoZSBzdXBwbGVtZW50YWwgSW9UL0FDRSBjbGFpbXMuICBJdCdzIHVu bmVjZXNzYXJ5IGZvciBkZXZlbG9waW5nIHRoZSBiYXNlIENXVCBzcGVjLiAgV2hlcmVhcyB0aGUg ZXhwZXJ0aXNlIHRoYXQgY3JlYXRlZCBKV1QsIHdoaWNoIHdlJ2QgYmUgZG9pbmcgYSBmdW5jdGlv bmFsIGNsb25lIG9mLCBpcyBpbiB0aGUgT0F1dGggd29ya2luZyBncm91cC4gIFRoZXJlZm9yZSwg SSBiZWxpZXZlIHRoZSBiZXN0IGFuc3dlciBpczoNCg0KQikgRGVmaW5lIHRoZSBDT1NFIFRva2Vu IGluc2lkZSB0aGUgT0F1dGggd29ya2luZyBncm91cC4NCg0KCQkJCS0tIE1pa2UNCg0KUC5TLiAg Rm9yIHRob3NlIHdhbnRpbmcgdG8gd3JhcCB0aGVpciBoZWFkcyBhcm91bmQgd2hhdCB3ZSdyZSBj b25jcmV0ZWx5IHRhbGtpbmcgYWJvdXQsIEVyaWsgV2FobHN0csO2bSB3YXMga2luZCBlbm91Z2gg dG8gd3JpdGUgYSBmaXJzdCBkcmFmdCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt d2FobHN0cm9lbS1vYXV0aC1jYm9yLXdlYi10b2tlbi0wMCwgd2l0aCBzb21lIGlucHV0IGZyb20g SGFubmVzIGFuZCBteXNlbGYuDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBD T1NFIFttYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSGFubmVzIFRz Y2hvZmVuaWcNClNlbnQ6IE1vbmRheSwgTm92ZW1iZXIgMDksIDIwMTUgMTozOCBBTQ0KVG86IEp1 c3RpbiBSaWNoZXI7IGNvc2VAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbQ09TRV0gQ29uc2Vuc3Vz IENhbGw6IEFkb3B0aW9uIG9mIHRoZSBDT1NFIFRva2VuDQoNCkhpIEp1c3RpbiwgSGkgS2VwZW5n LA0KDQpJIGJlbGlldmUgdGhlIHBhcnRpY2lwYW50cyBvZiB0aGUgWW9rb2hhbWEgSUVURiBtZWV0 aW5nIGFscmVhZHkgZGVjaWRlZCBhZ2FpbnN0IChEKSB3aXRoIHRoZWlyIGFncmVlbWVudCB0aGF0 IHRoaXMgd29yayBpcyBpbXBvcnRhbnQuDQoNCkluIHRlcm1zIG9mIGV4cGVydGlzZSBJIGJlbGll dmUgQ09TRSwgT0F1dGgsIGFuZCBBQ0Ugd291bGQgYmUgaW4gYSBnb29kIHBvc2l0aW9uLiBXaGls ZSBPQXV0aCBpcyBjdXJyZW50bHkgaW4gYSByZS1jaGFydGVyaW5nIHByb2Nlc3MgKGFzIHlvdQ0K a25vdykgdGhlcmUgaXMgYSBsb3Qgb2Ygd29yayBvbiB0aGUgcGxhdGUgYWxyZWFkeSBldmVuIHRo b3VnaCBpdCBpcyBkaXN0cmlidXRlZCBvdmVyIGEgbnVtYmVyIG9mIGZvbGtzLiBGdXJ0aGVybW9y ZSwgdGhlcmUgYWxzbyBzZWVtcyB0byBiZSBhIHN0cm9uZyBvdmVybGFwIGJldHdlZW4gdGhlIHBh cnRpY2lwYW50cyBvZiB0aGUgQUNFIGFuZCB0aGUgQ09TRSB3b3JraW5nIGdyb3VwIHdoZXJlYnkg SSBiZWxpZXZlIHRoYXQgd2UgaGF2ZSBtb3JlIHBhcnRpY2lwYW50cyBpbiBBQ0UgdGhhbiBpbiBD T1NFIHNpbmNlIHRoZSBzY29wZSBpcyBtdWNoIGJyb2FkZXIuDQoNClVsdGltYXRlbHkgd2UgYXJl IGRvaW5nIHNvbWV0aGluZyB2ZXJ5IHNpbXBsZSBoZXJlOiB3ZSBhcmUgY29weWluZyB0aGUgSlNP TiBlbmNvZGVkIGNsYWltcyB0byBDQk9SIGVuY29kZWQgY2xhaW1zLg0KDQpJIGJlbGlldmUgdGhh dCB0aGUgQUQgc2hvdWxkIGRlY2lkZSBhYm91dCB3aGVyZSB0aGUgd29yayBnb2VzLg0KDQpDaWFv DQpIYW5uZXMNCg0KDQpPbiAxMS8wNy8yMDE1IDA5OjAxIEFNLCBKdXN0aW4gUmljaGVyIHdyb3Rl Og0KPiBBdCB0aGUgWW9rb2hhbWEgbWVldGluZywgdGhlIGNoYWlycyBhZ3JlZWQgdG8gZG8gYSBj b25zZW5zdXMgY2FsbCByZWdhcmRpbmcgdGhlIGFkb3B0aW9uIGFuZCBwbGFjZW1lbnQgb2YgbmV3 IHdvcmsgdG8gZGVmaW5lIGEgQ09TRSBUb2tlbiwgYW5hbG9nb3VzIHRvIHRoZSBKV1QgZnJvbSBK T1NFLiBJbiB0aGUgcm9vbSwgdGhlcmUgd2FzIGEgZ2VuZXJhbCBzZW50aW1lbnQgb2Ygc3VwcG9y dCBmb3IgdGhlIHdvcmsgYmVpbmcgZG9uZSwgd2l0aCB0aGUgd2lkZSBhZG9wdGlvbiBvZiBKV1Qg YW5kIGl0cyBkcml2aW5nIG9mIEpPU0UgYmVpbmcgYSBjb21tb24gdGhlbWUgb2YgcHJlY2VkZW50 LiBXaGF0IHdhc27igJl0IGNsZWFyIGlzIHdoZXJlIHRoZSB3b3JrIHNob3VsZCBiZSBkb25lIGFu ZCB0byB3aGF0IGVuZCBpdCBzaG91bGQgZHJpdmUuIFRoZSBzaXggcG9zaXRpb25zIHdlIGFyZSBh c2tpbmcgdGhlIHdvcmtpbmcgZ3JvdXAgdG8gY29uc2lkZXIgYW5kIHZvaWNlIHRoZWlyIHN1cHBv cnQgZm9yIGFyZToNCj4gDQo+IEEpIERlZmluZSB0aGUgQ09TRSBUb2tlbiB3aXRoaW4gdGhlIENP U0Ugd29ya2luZyBncm91cCBhbG9uZyBzaWRlIHRoZSBDT1NFIE1lc3NhZ2VzIChhbmQgcG90ZW50 aWFsbHkgQ09TRSBBdXhpbGlhcnkgQWxnb3JpdGhtcykgZHJhZnQuDQo+IEIpIERlZmluZSB0aGUg Q09TRSBUb2tlbiBpbnNpZGUgdGhlIE9BdXRoIHdvcmtpbmcgZ3JvdXAuDQo+IEMpIERlZmluZSB0 aGUgQ09TRSBUb2tlbiBpbnNpZGUgdGhlIEFDRSB3b3JraW5nIGdyb3VwLg0KPiBEKSBEb27igJl0 IGRlZmluZSB0aGUgQ09TRSBUb2tlbiBhbnl3aGVyZS4NCj4gRSkgWW91IG5lZWQgbW9yZSBpbmZv cm1hdGlvbiB0byBkZWNpZGUuDQo+IEYpIFlvdSBkb27igJl0IGdpdmUgYSBmbHlpbmcgcmF0IGFi b3V0IHRoZSBDT1NFIFRva2VuLioNCj4gDQo+IFRoZSBjb25zZW5zdXMgY2FsbCB3aWxsIHJlbWFp biBvcGVuIGZvciB0d28gd2Vla3MgZnJvbSB0b2RheSwgY2xvc2luZyBvbiBOb3ZlbWJlciAyMSwg MjAxNTsgYXQgd2hpY2ggdGltZSwgaG9wZWZ1bGx5IHdlIHdpbGwgaGF2ZSBhIGNsZWFyIGFuc3dl ciBhbmQgZGlyZWN0aW9uIHRvIHBvaW50IHRoaXMgd29yay4NCj4gDQo+IFRoYW5rIHlvdSwNCj4g IOKAlCBKdXN0aW4gJiBLZXBlbmcsIHlvdXIgQ09TRSBjaGFpcnMNCj4gDQo+ICogSSBwcm9taXNl ZCB0aG9zZSBpbiB0aGUgcm9vbSBhdCBZb2tvaGFtYSB0byBvZmZlciBhIGZseWluZyByYXQgb3B0 aW9uLCBmb3Igd2hpY2ggSSBhbSBkZWVwbHkgc29ycnkuDQo+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IENPU0UgbWFpbGluZyBsaXN0DQo+IENPU0VA aWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQo+ IA0KDQo= From nobody Thu Nov 12 19:19:51 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AADB1B3F47 for ; Thu, 12 Nov 2015 19:19:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.088 X-Spam-Level: X-Spam-Status: No, score=-1.088 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4qyPDEdjvDdD for ; Thu, 12 Nov 2015 19:19:48 -0800 (PST) Received: from mail-qk0-x22b.google.com (mail-qk0-x22b.google.com [IPv6:2607:f8b0:400d:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FB7F1B3F45 for ; Thu, 12 Nov 2015 19:19:47 -0800 (PST) Received: by qkas77 with SMTP id s77so35838652qka.0 for ; Thu, 12 Nov 2015 19:19:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=OhV0MalIias2AhIT5ewNpHwULukXJA02/rJAmtrfKXY=; b=Ejo3ZFe3UZuRL13WEm1+NAtdeS5na43uIKZGA/4iZyBrdL4t5POuXT6Uk1PaZmDzzW 3t9ZxNuvs1ocFgiH2H5i7fnGxJfKgMVy7v+UECkI6C3TIxs3uTIjwaaYTA+mqaSYV+mr KPzNZJuB+c3ZkhA0Mz7EDmssHORbT8Wa4817pyDE8nfr3kVcKs2fgXHIB95HRY/vE4tJ K0d52PrOjNID4eOWmH6dsiS0+cvuSflri3q6PT9Ku45IBvWtAr+P8vbO2xzrVaP07moE R6mujkY8ikvER5wNGZ1yttlJJq/b3HUz6z76vNHqjo96ahoVAiNGTpYrmozn6Vlv8jkS Hc0A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=OhV0MalIias2AhIT5ewNpHwULukXJA02/rJAmtrfKXY=; b=IkUfoId9WpQyCeGxdrvWJtzZ54UoYTtS3bKfztuiw8sz9eWD3viXpoL5K7SRODXNVR Nfi0ThhRYaLdxBtj+so/XEjckRQTMvt/FH8RPixg+ilO/x1BGGNeozOy4H/2W/HGvlFx xt6mLN+AX7mf40LVjm1CXUs1CDZmarfhCRcDy6+9iZwm8tk3hY0OfvF/PKC1cXwH65IN OKzg00eycvQOUVcA6PJhftMY4Lk1UrdAc87TOdZFa24zdBrOUBn3CQfYB0pnpG8OGPmC crbmhn0+fdLQKviKodIRt9C+JOjU0o3e8UDZYJUoB945BXlh5MvvEPz3AL2nNpVdZVIf B/WQ== X-Gm-Message-State: ALoCoQntEKdXEEWP78TLiueEgeONSCN0TSku/OEonqTsDyUblFlmlJ0fZGZgpX9YrPLBzOGRlz/n X-Received: by 10.55.55.82 with SMTP id e79mr18970471qka.59.1447384786307; Thu, 12 Nov 2015 19:19:46 -0800 (PST) MIME-Version: 1.0 Received: by 10.140.29.68 with HTTP; Thu, 12 Nov 2015 19:19:26 -0800 (PST) In-Reply-To: <73929C18-A3E7-4ACA-A6DC-5A7AD7576C9B@nexusgroup.com> References: <53BB1987-979C-4945-9C7D-CDB6619AEFFC@nexusgroup.com> <5644EC40.4010002@tzi.org> <73929C18-A3E7-4ACA-A6DC-5A7AD7576C9B@nexusgroup.com> From: William Denniss Date: Thu, 12 Nov 2015 19:19:26 -0800 Message-ID: To: =?UTF-8?Q?Erik_Wahlstr=C3=B6m_neXus?= Content-Type: multipart/alternative; boundary=001a114900f40ad79205246388f8 Archived-At: Cc: Mike Jones , "ace@ietf.org" , Carsten Bormann , Hannes Tschofenig , "" , "cose@ietf.org" Subject: Re: [COSE] A draft on CBOR Web Tokens (CWT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Nov 2015 03:19:50 -0000 --001a114900f40ad79205246388f8 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Regarding the draft itself, a few comments: 1. Can we unify the claim registry with JWT? I'm worried about having the same claims defined twice in CWT and JWT with possibly conflicting meanings (and needless confusion even when they do match). Comparing https://tools.ietf.org/html/draft-wahlstroem-oauth-cbor-web-token-00#sectio= n-3.1.2 and https://tools.ietf.org/html/rfc7519#section-4.1.2 which are nearly identical, I just don't see the value in re-defining it. We may add new standard claims to JWT in the future (I proposed one in Yokohama on the id-event list ), it would be good if this didn't need a separate entry in CWT too, but could just apply directly (separately, I think you should consider this claim, as it helps prevent tokens from being re-used in the wrong context). 2. Is Section 4 "Summary of CBOR major types used by defined claims" normative ( https://tools.ietf.org/html/draft-wahlstroem-oauth-cbor-web-token-00#sectio= n-4)? What is the intention of this section? I feel like it could probably be fleshed out a bit. 3. Add a xref to draft COSE spec in section 6 Add xref to RFC7519 On Thu, Nov 12, 2015 at 12:01 PM, Erik Wahlstr=C3=B6m neXus < erik.wahlstrom@nexusgroup.com> wrote: > Hi Carsten, > > Thanks, and I agree. I=E2=80=99ve heard arguments for all three work grou= ps. > > Borrowed some of your words to define the content of the draft :) > It=E2=80=99s it essentially a JWT, phrased in and profiled for CBOR to ad= dress ACE > needs, where OAuth needs COSE functionality, for object security. > > I=E2=80=99m open for letting the AD=E2=80=99s move it around, but having = it right next to > JWT seems right to me. Also open for the ACE WG. Feel it has less place i= n > COSE for the same reasons JWT is not in the JOSE WG. > > / Erik > > > > On 12 Nov 2015, at 20:45, Carsten Bormann wrote: > > > > Hi Erik, > > > > having this draft is a good thing. > > > > One thing I'm still wondering is what WG is the best place to progress > > this. We probably don't need to spend too much time on this because, > > regardless of the WG chosen, the people in another WG can look at it. > > Still, getting this right might provide some efficiencies. > > > > What is the technical content of this draft? Is it a new token that > > OAuth needs specifically for the new COSE-based applications of OAuth? > > Is it a new token that is specifically there for addressing ACE needs? > > Or is it essentially the same substance as JWT, but phrased in and > > profiled for CBOR? > > > > Depending on the answer, CWT should be done in OAuth, ACE, or COSE. > > (I'd rather hear the answer from the authors than venture a guess > myself.) > > > > Gr=C3=BC=C3=9Fe, Carsten > > > > > > > > Erik Wahlstr=C3=B6m neXus wrote: > >> Hi, > >> > >> In the ACE WG a straw man proposal of a CBOR Web Token (CWT) was defin= ed > >> in the draft "Authorization for the Internet of Things using OAuth 2.0= =E2=80=9D > >> [1]. We just broke out the CBOR Web Token into a separate draft and th= e > >> new draft is submitted to the OAUTH WG. It can be found here: > >> > >> https://datatracker.ietf.org/doc/draft-wahlstroem-oauth-cbor-web-token= / > >> > >> Abstract: > >> "CBOR Web Token (CWT) is a compact means of representing claims to be > >> transferred between two parties. CWT is a profile of the JSON Web Tok= en > >> (JWT) that is optimized for constrained devices. The claims in a CWT a= re > >> encoded in the Concise Binary Object Representation (CBOR) and CBOR > >> Object Signing and Encryption (COSE) is used for added application lay= er > >> security protection. A claim is a piece of information asserted about= a > >> subject and is represented as a name/value pair consisting of a claim > >> name and a claim value." > >> > >> / Erik > >> > >> > >> [1] https://tools.ietf.org/html/draft-seitz-ace-oauth-authz-00 > >> > >> > >> _______________________________________________ > >> COSE mailing list > >> COSE@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > --001a114900f40ad79205246388f8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Regarding the draft itself, a few comments:
=

1.=C2=A0
Can we unify the claim registry with= JWT? I'm worried about having the same claims defined twice in CWT and= JWT with possibly conflicting meanings (and needless confusion even when t= hey do match).=C2=A0

Comparing=C2=A0https://tools.ietf.org/html/draft-wahlstroem-oauth-cbor-web-token= -00#section-3.1.2 and=C2=A0https://tools.ietf.org/html/rfc7519#section-4.1.2 whi= ch are nearly identical, I just don't see the value in re-defining it.<= /div>

We may add new standard claims to JWT in the futur= e (I=C2=A0proposed o= ne=C2=A0in Yokohama on the=C2=A0id-event list), it would be good if this didn't= need a separate entry in CWT too, but could just apply directly (separatel= y, I think you should consider this claim, as it helps prevent tokens from = being re-used in the wrong context).

2.
= Is Section 4 "Summary of CBOR major types used by defined claims"= normative (https://tools.ietf.org/html/draft-wahlstroem-oa= uth-cbor-web-token-00#section-4)? What is the intention of this section= ? I feel like it could probably be fleshed out a bit.

<= div>3.=C2=A0
Add a xref to draft COSE spec in=C2=A0
On Thu, Nov 12, 2015 at 12:01 PM, E= rik Wahlstr=C3=B6m neXus <erik.wahlstrom@nexusgroup.com>= ; wrote:
Hi Carsten,

Thanks, and I agree. I=E2=80=99ve heard arguments for all three work groups= .

Borrowed some of your words to define the content of the draft :)
It=E2=80=99s it essentially a JWT, phrased in and profiled for CBOR to addr= ess ACE needs, where OAuth needs COSE functionality, for object security.
I=E2=80=99m open for letting the AD=E2=80=99s move it around, but having it= right next to JWT seems right to me. Also open for the ACE WG. Feel it has= less place in COSE for the same reasons JWT is not in the JOSE WG.

/ Erik


> On 12 Nov 2015, at 20:45, Carsten Bormann <cabo@tzi.org> wrote:
>
> Hi Erik,
>
> having this draft is a good thing.
>
> One thing I'm still wondering is what WG is the best place to prog= ress
> this.=C2=A0 We probably don't need to spend too much time on this = because,
> regardless of the WG chosen, the people in another WG can look at it.<= br> > Still, getting this right might provide some efficiencies.
>
> What is the technical content of this draft?=C2=A0 Is it a new token t= hat
> OAuth needs specifically for the new COSE-based applications of OAuth?=
> Is it a new token that is specifically there for addressing ACE needs?=
> Or is it essentially the same substance as JWT, but phrased in and
> profiled for CBOR?
>
> Depending on the answer, CWT should be done in OAuth, ACE, or COSE. > (I'd rather hear the answer from the authors than venture a guess = myself.)
>
> Gr=C3=BC=C3=9Fe, Carsten
>
>
>
> Erik Wahlstr=C3=B6m neXus wrote:
>> Hi,
>>
>> In the ACE WG a straw man proposal of a CBOR Web Token (CWT) was d= efined
>> in the draft "Authorization for the Internet of Things using = OAuth 2.0=E2=80=9D
>> [1]. We just broke out the CBOR Web Token into a separate draft an= d the
>> new draft is submitted to the OAUTH WG. It can be found here:
>>
>> https://datatracker.= ietf.org/doc/draft-wahlstroem-oauth-cbor-web-token/
>>
>> Abstract:
>> "CBOR Web Token (CWT) is a compact means of representing clai= ms to be
>> transferred between two parties.=C2=A0 CWT is a profile of the JSO= N Web Token
>> (JWT) that is optimized for constrained devices. The claims in a C= WT are
>> encoded in the Concise Binary Object Representation (CBOR) and CBO= R
>> Object Signing and Encryption (COSE) is used for added application= layer
>> security protection.=C2=A0 A claim is a piece of information asser= ted about a
>> subject and is represented as a name/value pair consisting of a cl= aim
>> name and a claim value."
>>
>> / Erik
>>
>>
>> [1] https://tools.ietf.org/html/d= raft-seitz-ace-oauth-authz-00
>>
>>
>> _______________________________________________
>> COSE mailing list
>> COSE@ietf.org
>> https://www.ietf.org/mailman/listinfo/cose
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

--001a114900f40ad79205246388f8-- From nobody Thu Nov 12 19:57:05 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF2C01B3FBB for ; Thu, 12 Nov 2015 19:57:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OWm9xR6pMKyW for ; Thu, 12 Nov 2015 19:57:01 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0110.outbound.protection.outlook.com [65.55.169.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3BE7B1B3FB9 for ; Thu, 12 Nov 2015 19:57:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=jLfQn4AQD6++eIy9tjxCZ6OEMThEz+SWdjKtOKHOwRc=; b=B5ATPJJ1k3CTv7joVSY3+gW8orR23j/3RqjPPU2t2TVM8TXmSNOmIQCExAEeHtyuf+IhcgBS1kXCPRQM6x8N4WICOGXIiF9eHKCOLVTEOY7NNjfpdljgdOsQGxkmhq0BkJlE1XznsRbbhhBA8SYfR2UChc9gDayZb1lu5dscBjU= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB441.namprd03.prod.outlook.com (10.141.141.142) with Microsoft SMTP Server (TLS) id 15.1.325.17; Fri, 13 Nov 2015 03:56:58 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0325.003; Fri, 13 Nov 2015 03:56:58 +0000 From: Mike Jones To: "Matt Miller (mamille2)" , Justin Richer Thread-Topic: [COSE] Consensus Call: RSA 1.5 Thread-Index: AQHRGTKoH8eJYz68ZkyP+3OyuulucZ6Vy5aAgAOQlpA= Date: Fri, 13 Nov 2015 03:56:58 +0000 Message-ID: References: <4EFB204C-B583-4878-BFB1-402309B82C45@cisco.com> In-Reply-To: <4EFB204C-B583-4878-BFB1-402309B82C45@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:5::188] x-microsoft-exchange-diagnostics: 1; BY2PR03MB441; 5:h+/VrMcp1esQY3q9Abesyzq3tWecUC3OGYdnamZWOj5cbwkterBKHy2xcedmC5H35CUfDZkK8tNDazVrgHwWSQfoHc6Oe4Q0CX5ndJg3YU2+XUzYERLrDAwfya7w9WpZEDZPNR/IDC8WoHipdoVOFA==; 24:17FqPd+/JrWzdht9jZeRb2SmfCBnhNMKunJ8SC2MSKpy+Ac3M9HDmftFEXYc7ej60aLa581624T8rBu9tayyk2nlE6JWNyn85YOvjyh0GaA=; 20:5/SbJH44c1oSy9Y80SfH7NsVpQVokOeJcp8ukruyGRPf/vwh5xUAZdUvC3P+J3Kzg4baNM5Flq3x231vGdZa8Q== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB441; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB441; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB441; x-forefront-prvs: 0759F7A50A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(24454002)(13464003)(189002)(377454003)(199003)(8990500004)(76176999)(76576001)(86612001)(86362001)(5005710100001)(5008740100001)(10090500001)(10290500002)(19580405001)(10400500002)(11100500001)(92566002)(2950100001)(74316001)(5004730100002)(50986999)(54356999)(122556002)(106356001)(77096005)(102836002)(5007970100001)(5002640100001)(5001960100002)(2900100001)(15975445007)(101416001)(99286002)(19580395003)(5001920100001)(105586002)(87936001)(40100003)(106116001)(5001770100001)(33656002)(2171001)(5003600100002)(97736004)(189998001)(81156007)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB441; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2015 03:56:58.5406 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB441 Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] Consensus Call: RSA 1.5 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Nov 2015 03:57:03 -0000 SSBhZ3JlZSB3aXRoIE1hdHQ6DQoNCmVuY3J5cHRpb246ICBBKQ0Kc2lnbmF0dXJlczogIEIpIG9y IEMpDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBDT1NFIFttYWlsdG86Y29z ZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgTWF0dCBNaWxsZXIgKG1hbWlsbGUyKQ0K U2VudDogVHVlc2RheSwgTm92ZW1iZXIgMTAsIDIwMTUgMTozMCBQTQ0KVG86IEp1c3RpbiBSaWNo ZXINCkNjOiBjb3NlQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0NPU0VdIENvbnNlbnN1cyBDYWxs OiBSU0EgMS41DQoNCmVuY3J5cHRpb246ICBBKQ0Kc2lnbmF0dXJlczogIEIpIG9yIEMpDQoNCg0K LS0NCi0gbSZtDQoNCk1hdHQgTWlsbGVyIDxtYW1pbGxlMkBjaXNjby5jb20+DQpDaXNjbyBTeXN0 ZW1zLCBJbmMuDQoNCj4gT24gTm92IDcsIDIwMTUsIGF0IDAxOjAxLCBKdXN0aW4gUmljaGVyIDxq cmljaGVyQG1pdC5lZHU+IHdyb3RlOg0KPiANCj4gQXQgdGhlIFlva29oYW1hIG1lZXRpbmcsIHRo ZSBjaGFpcnMgYWdyZWVkIHRvIGRvIGEgY29uc2Vuc3VzIGNhbGwgcmVnYXJkaW5nIHRoZSBkZWZp bml0aW9uIG9mIFJTQSAxLjUgYWxnb3JpdGhtcyB3aXRoaW4gdGhlIG1lc3NhZ2VzIGRyYWZ0IG9y IGFuIGF1eGlsaWFyeSBkcmFmdC4gVGhpcyBmdW5jdGlvbmFsaXR5IGlzIGFuYWxvZ291cyB0byB0 aGUgUlMqIHNlcmllcyBvZiBzaWduYXR1cmUgbWV0aG9kcyBpbiBKV1MgYW5kIHRoZSBSU0ExXzUg ZW5jcnlwdGlvbiBtZXRob2QgaW4gSldFLiBUaGUgZml2ZSBwb3NpdGlvbnMgd2UgYXJlIGFza2lu ZyB0aGUgd29ya2luZyBncm91cCB0byBjb25zaWRlciBhbmQgdm9pY2UgdGhlaXIgc3VwcG9ydCBm b3IgYXJlOg0KPiANCj4gQSkgRHJvcCBhbGwgc3VwcG9ydCBmb3IgUlNBIDEuNSBzaWduYXR1cmVz IGFuZCBlbmNyeXB0aW9uLg0KPiBCKSBEZWZpbmUgUlNBIDEuNSBzdXBwb3J0IGluIGFuIGF1eGls aWFyeSBkcmFmdC4NCj4gQykgRGVmaW5lIFJTQSAxLjUgc3VwcG9ydCBpbiB0aGUgbWFpbiBkcmFm dCAobm90ZSB0aGF0IHRoaXMgb3B0aW9uIHdhcyBwcmV2aW91c2x5IGRpc2N1c3NlZCBvbiB0aGUg bGlzdCBhbmQgZGlkIG5vdCBmaW5kIGZhdm9yIGF0IHRoZSB0aW1lLCBzbyBpZiB5b3Ugd2FudCBp dCBiYWNrIHlvdeKAmWxsIG5lZWQgdG8gbWFrZSBhIHN0cm9uZyBjYXNlKS4NCj4gRCkgWW91IG5l ZWQgbW9yZSBpbmZvcm1hdGlvbiB0byBkZWNpZGUuDQo+IEUpIFlvdSBkb27igJl0IGdpdmUgYSBm bHlpbmcgcmF0IGFib3V0IFJTQSAxLjUuKg0KPiANCj4gTm90ZSB0aGF0IHRoaXMgaXMgZGlzdGlu Y3QgZnJvbSBSU0EgUFNTIHN1cHBvcnQgd2hpY2ggaXMgYmVpbmcgZGlzY3Vzc2VkIGluIGEgc2Vw YXJhdGUgdGhyZWFkLg0KPiANCj4gVGhlIGNvbnNlbnN1cyBjYWxsIHdpbGwgcmVtYWluIG9wZW4g Zm9yIHR3byB3ZWVrcyBmcm9tIHRvZGF5LCBjbG9zaW5nIG9uIE5vdmVtYmVyIDIxLCAyMDE1OyBh dCB3aGljaCB0aW1lLCBob3BlZnVsbHkgd2Ugd2lsbCBoYXZlIGEgY2xlYXIgYW5zd2VyIGFuZCBk aXJlY3Rpb24gZm9yIG91ciBlZGl0b3IuDQo+IA0KPiBUaGFuayB5b3UsDQo+IOKAlCBKdXN0aW4g JiBLZXBlbmcsIHlvdXIgQ09TRSBjaGFpcnMNCj4gDQo+ICogSSBwcm9taXNlZCB0aG9zZSBpbiB0 aGUgcm9vbSBhdCBZb2tvaGFtYSB0byBvZmZlciBhIGZseWluZyByYXQgb3B0aW9uLCBmb3Igd2hp Y2ggSSBhbSBkZWVwbHkgc29ycnkuDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+IENPU0UgbWFpbGluZyBsaXN0DQo+IENPU0VAaWV0Zi5vcmcNCj4g aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQoNCg== From nobody Thu Nov 12 19:58:15 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 075BE1B3FBA for ; Thu, 12 Nov 2015 19:58:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ms9JgGKes74n for ; Thu, 12 Nov 2015 19:58:11 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0109.outbound.protection.outlook.com [65.55.169.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9BD61B3FB3 for ; Thu, 12 Nov 2015 19:58:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ZcAT1uwROrmADCwM7mFHl9MJypxjHp+CRGNv6+QwjmA=; b=o5rRFkkFKFVC3AuLlHkPqiRdDxU1/R4WZS2CTY2ke1EfGAqvSlyDBmGI0OYoBtlYagzM9/+g5WvHuuCzKXk7xWBzWi3VwQUTkYsFY0b99v3JldAwoRZu9OjoOAw+wcA9RLAeaqx/YCuPW86DYslR/d9VePS2wB5SCZFjUc63Lbg= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB441.namprd03.prod.outlook.com (10.141.141.142) with Microsoft SMTP Server (TLS) id 15.1.325.17; Fri, 13 Nov 2015 03:58:08 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0325.003; Fri, 13 Nov 2015 03:58:08 +0000 From: Mike Jones To: "Matt Miller (mamille2)" , Justin Richer Thread-Topic: [COSE] Consensus Call: RSA PSS Thread-Index: AQHRGTLAjIRK9TSuYkmD9E5QhXx54Z6VyF8AgAOUKVA= Date: Fri, 13 Nov 2015 03:58:08 +0000 Message-ID: References: <6792AAD6-27F6-44B7-B6D5-21F6A3EEA8B6@cisco.com> In-Reply-To: <6792AAD6-27F6-44B7-B6D5-21F6A3EEA8B6@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:5::188] x-microsoft-exchange-diagnostics: 1; BY2PR03MB441; 5:rhOScU2RIjMD3wQhvGnZXXQctPfCthodBwLxMM2xLrSwqMIqlf+Q2T0lyC6la/ZV3ZqoUk8PRvDV9pxcBCkK/HN+qLwRmNYSG2L/9Fec1/lBqDE5Lj54aEJ+tvtghpBPHPS81m9y4EqFODxoZQi/BQ==; 24:0GpvfoGSnd6Z2JYBSqtGewdk9GPwT9LI3qD6BTcLzsC9OT8afF0xY0df6AUZsQtgl9M30zTPHjWl6ws4F0U/RqypPYGIaIHCnIJ+uaC71sY=; 20:EQmU5Yp/U9gi2gpIbGDfFlCiGTjm5+QnV1YZPwTNsAyzTWKbE7oUB8Ru4zwg/ogPZSsgt6/rMAZ8gSdkHbUvCg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB441; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB441; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB441; x-forefront-prvs: 0759F7A50A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(24454002)(13464003)(189002)(377454003)(199003)(8990500004)(76176999)(76576001)(86612001)(86362001)(5005710100001)(5008740100001)(10090500001)(10290500002)(19580405001)(10400500002)(11100500001)(92566002)(2950100001)(74316001)(5004730100002)(50986999)(54356999)(122556002)(106356001)(77096005)(102836002)(5007970100001)(5002640100001)(5001960100002)(2900100001)(15975445007)(101416001)(99286002)(19580395003)(5001920100001)(105586002)(87936001)(40100003)(106116001)(5001770100001)(33656002)(2171001)(5003600100002)(97736004)(189998001)(81156007)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB441; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2015 03:58:08.0884 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB441 Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] Consensus Call: RSA PSS X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Nov 2015 03:58:13 -0000 SSBhZ3JlZSB3aXRoIE1hdHQgYWdhaW46DQoNCkIgb3IgQy4NCg0KLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS0NCkZyb206IENPU0UgW21haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJl aGFsZiBPZiBNYXR0IE1pbGxlciAobWFtaWxsZTIpDQpTZW50OiBUdWVzZGF5LCBOb3ZlbWJlciAx MCwgMjAxNSAxOjE5IFBNDQpUbzogSnVzdGluIFJpY2hlcg0KQ2M6IGNvc2VAaWV0Zi5vcmcNClN1 YmplY3Q6IFJlOiBbQ09TRV0gQ29uc2Vuc3VzIENhbGw6IFJTQSBQU1MNCg0KQikgb3IgQykuDQoN Cg0KLS0NCi0gbSZtDQoNCk1hdHQgTWlsbGVyIDxtYW1pbGxlMkBjaXNjby5jb20+DQpDaXNjbyBT eXN0ZW1zLCBJbmMuDQoNCj4gT24gTm92IDcsIDIwMTUsIGF0IDAxOjAyLCBKdXN0aW4gUmljaGVy IDxqcmljaGVyQG1pdC5lZHU+IHdyb3RlOg0KPiANCj4gQXQgdGhlIFlva29oYW1hIG1lZXRpbmcs IHRoZSBjaGFpcnMgYWdyZWVkIHRvIGRvIGEgY29uc2Vuc3VzIGNhbGwgcmVnYXJkaW5nIHRoZSBk ZWZpbml0aW9uIG9mIFJTQSBQU1MgYWxnb3JpdGhtcyB3aXRoaW4gdGhlIG1lc3NhZ2VzIGRyYWZ0 IG9yIGFuIGF1eGlsaWFyeSBkcmFmdC4gVGhpcyBmdW5jdGlvbmFsaXR5IGlzIGFuYWxvZ291cyB0 byB0aGUgUFMqIHNlcmllcyBvZiBzaWduYXR1cmUgbWV0aG9kcyBpbiBKV1MuIFRoZSBmaXZlIHBv c2l0aW9ucyB3ZSBhcmUgYXNraW5nIHRoZSB3b3JraW5nIGdyb3VwIHRvIGNvbnNpZGVyIGFuZCB2 b2ljZSB0aGVpciBzdXBwb3J0IGZvciBhcmU6DQo+IA0KPiBBKSBEcm9wIGFsbCBzdXBwb3J0IGZv ciBSU0EgUFNTIHNpZ25hdHVyZXMgYW5kIGVuY3J5cHRpb24uDQo+IEIpIERlZmluZSBSU0EgUFNT IHN1cHBvcnQgaW4gYW4gYXV4aWxpYXJ5IGRyYWZ0Lg0KPiBDKSBEZWZpbmUgUlNBIFBTUyBzdXBw b3J0IGluIHRoZSBtYWluIGRyYWZ0Lg0KPiBEKSBZb3UgbmVlZCBtb3JlIGluZm9ybWF0aW9uIHRv IGRlY2lkZS4NCj4gRSkgWW91IGRvbuKAmXQgZ2l2ZSBhIGZseWluZyByYXQgYWJvdXQgUlNBIFBT Uy4qDQo+IA0KPiBOb3RlIHRoYXQgdGhpcyBpcyBzZXBhcmF0ZSBmcm9tIFJTQSAxLjUgc3VwcG9y dCwgd2hpY2ggaXMgYmVpbmcgZGlzY3Vzc2VkIG9uIGEgc2VwYXJhdGUgdGhyZWFkLg0KPiANCj4g VGhlIGNvbnNlbnN1cyBjYWxsIHdpbGwgcmVtYWluIG9wZW4gZm9yIHR3byB3ZWVrcyBmcm9tIHRv ZGF5LCBjbG9zaW5nIG9uIE5vdmVtYmVyIDIxLCAyMDE1OyBhdCB3aGljaCB0aW1lLCBob3BlZnVs bHkgd2Ugd2lsbCBoYXZlIGEgY2xlYXIgYW5zd2VyIGFuZCBkaXJlY3Rpb24gZm9yIG91ciBlZGl0 b3IuDQo+IA0KPiBUaGFuayB5b3UsDQo+IOKAlCBKdXN0aW4gJiBLZXBlbmcsIHlvdXIgQ09TRSBj aGFpcnMNCj4gDQo+ICogSSBwcm9taXNlZCB0aG9zZSBpbiB0aGUgcm9vbSBhdCBZb2tvaGFtYSB0 byBvZmZlciBhIGZseWluZyByYXQgb3B0aW9uLCBmb3Igd2hpY2ggSSBhbSBkZWVwbHkgc29ycnku DQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IENP U0UgbWFpbGluZyBsaXN0DQo+IENPU0VAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9jb3NlDQoNCg== From nobody Thu Nov 12 19:59:13 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 249571B3FBE for ; Thu, 12 Nov 2015 19:59:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I0gmo5ynYM5n for ; Thu, 12 Nov 2015 19:59:08 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0716.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:716]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7BA51B3FBC for ; Thu, 12 Nov 2015 19:59:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=CxgUuWoojNV0kVW+GwpNGmEBj6wLzesBoqMG47qthUc=; b=ALp3Vm1oe+ol5co5szlw83cZrKtwLGn6sHddZpq2/Zf9mylog7QOvoXi+XLVNGTi8OfI4u/qX/2fCVjcXsEbq8RfZRGppJHxNKtujwSEYDt6Dhvvw36TTF9nk/35IkQMlKgFcybPxpGVsG0g0tYj4MoxSIPu+Wh/9eHZ9GzAWNk= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB441.namprd03.prod.outlook.com (10.141.141.142) with Microsoft SMTP Server (TLS) id 15.1.325.17; Fri, 13 Nov 2015 03:59:01 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0325.003; Fri, 13 Nov 2015 03:59:01 +0000 From: Mike Jones To: "Matt Miller (mamille2)" , Justin Richer Thread-Topic: [COSE] Consensus Call: Placement of CDDL Thread-Index: AQHRGTLRtA6GzjcSvU6QCr56aIhin56Vy0yAgAORhKA= Date: Fri, 13 Nov 2015 03:59:00 +0000 Message-ID: References: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:5::188] x-microsoft-exchange-diagnostics: 1; BY2PR03MB441; 5:hmnxkolyzCGIv160PkO7DAK82vPJ3MXeIwXFhV0BUxyssWclYvQm3xreNRAJtkckb9x+67tmCHZKyZkroclo3SDqKd5Hvwjf0HQKkFyFidEbFcbGgh6KmnlDX2G7PYQiVTl/k2XViIEaF5enQ4fBAA==; 24:oeO6Dv3wmBNqsWaBI9Fk094gj/mCp13GzgvGq1dkYSnmqxn9PiiGslCnoqdEEqlU+UVvye2VqG1KgehQQICb9I5oBH/7H6tRWS4PvKK5JBY=; 20:r4v8COzE3oWUCVtjl25kPY3LAsm/6FMJyshrOz6WCUfTFjSTMmSOOh1bRI+ZAVjCCKqSDrqteFYqr7/R2l4sSA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB441; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(95692535739014); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB441; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB441; x-forefront-prvs: 0759F7A50A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(24454002)(13464003)(189002)(377454003)(199003)(8990500004)(76176999)(76576001)(86612001)(86362001)(5005710100001)(5008740100001)(10090500001)(10290500002)(19580405001)(10400500002)(11100500001)(92566002)(2950100001)(74316001)(5004730100002)(50986999)(54356999)(122556002)(106356001)(77096005)(102836002)(5007970100001)(5002640100001)(5001960100002)(561944003)(2900100001)(15975445007)(101416001)(99286002)(19580395003)(5001920100001)(105586002)(87936001)(40100003)(106116001)(5001770100001)(33656002)(2171001)(5003600100002)(97736004)(189998001)(81156007)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB441; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2015 03:59:00.7454 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB441 Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] Consensus Call: Placement of CDDL X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Nov 2015 03:59:11 -0000 VGhpcmQgdGltZSdzIGEgY2hhcm06DQoNCkINCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N CkZyb206IENPU0UgW21haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBN YXR0IE1pbGxlciAobWFtaWxsZTIpDQpTZW50OiBUdWVzZGF5LCBOb3ZlbWJlciAxMCwgMjAxNSAx OjI5IFBNDQpUbzogSnVzdGluIFJpY2hlcg0KQ2M6IGNvc2VAaWV0Zi5vcmcNClN1YmplY3Q6IFJl OiBbQ09TRV0gQ29uc2Vuc3VzIENhbGw6IFBsYWNlbWVudCBvZiBDRERMDQoNCkIpDQoNCi0tDQot IG0mbQ0KDQpNYXR0IE1pbGxlciA8bWFtaWxsZTJAY2lzY28uY29tPg0KQ2lzY28gU3lzdGVtcywg SW5jLg0KDQo+IE9uIE5vdiA3LCAyMDE1LCBhdCAwMTowMiwgSnVzdGluIFJpY2hlciA8anJpY2hl ckBtaXQuZWR1PiB3cm90ZToNCj4gDQo+IEF0IHRoZSBZb2tvaGFtYSBtZWV0aW5nLCB0aGUgY2hh aXJzIGFncmVlZCB0byBkbyBhIGNvbnNlbnN1cyBjYWxsIHJlZ2FyZGluZyB0aGUgcGxhY2VtZW50 IG9mIHRoZSBDRERMIGZvcm1hdHRlZCB0ZXh0IHdpdGhpbiB0aGUgbWVzc2FnZXMgZHJhZnQuIFRo ZSBmb3VyIHBvc2l0aW9ucyB3ZSBhcmUgYXNraW5nIHRoZSB3b3JraW5nIGdyb3VwIHRvIGNvbnNp ZGVyIGFuZCB2b2ljZSB0aGVpciBzdXBwb3J0IGZvciBhcmU6DQo+IA0KPiBBKSBQbGFjZSB0aGUg Q0RETCBhdCB0aGUgZW5kIG9mIHRoZSBkb2N1bWVudCBpbiBhbiBhcHBlbmRpeC4gT3RoZXIgZXhh bXBsZXMgd2lsbCByZW1haW4gaW5saW5lLg0KPiBCKSBQbGFjZSB0aGUgQ0RETCBpbmxpbmUgd2l0 aCB0aGUgbm9ybWF0aXZlIHRleHQgYWxvbmdzaWRlIG90aGVyIGV4YW1wbGVzLg0KPiBDKSBZb3Ug bmVlZCBtb3JlIGluZm9ybWF0aW9uIHRvIGRlY2lkZS4NCj4gRCkgWW91IGRvbuKAmXQgZ2l2ZSBh IGZseWluZyByYXQgYWJvdXQgQ0RETC4qDQo+IA0KPiBOb3RlIHRoYXQgdGhpcyBwcm9wb3NhbCBk b2VzIE5PVCBjb25zaWRlciByZW1vdmFsIG9mIENEREwgb3IgZGVjbGFyYXRpb24gb2Ygbm9ybWF0 aXZlIGRlcGVuZGVuY2Ugb24gQ0RETC4gVGhlIEVuZ2xpc2ggdGV4dCB3aWxsIHJlbWFpbiB0aGUg bm9ybWF0aXZlIGZvcm0gYW5kIHRoZSBDRERMIHdpbGwgcmVtYWluIGEgbm9uLW5vcm1hdGl2ZSBl eGFtcGxlLiBUaGUgKHVuZmluaXNoZWQsIHVuaG9tZWQpIENEREwgZHJhZnQgd2lsbCByZW1haW4g YW4gaW5mb3JtYXRpdmUgcmVmZXJlbmNlLg0KPiANCj4gVGhlIGNvbnNlbnN1cyBjYWxsIHdpbGwg cmVtYWluIG9wZW4gZm9yIHR3byB3ZWVrcyBmcm9tIHRvZGF5LCBjbG9zaW5nIG9uIE5vdmVtYmVy IDIxLCAyMDE1OyBhdCB3aGljaCB0aW1lLCBob3BlZnVsbHkgd2Ugd2lsbCBoYXZlIGEgY2xlYXIg YW5zd2VyIGFuZCBkaXJlY3Rpb24gZm9yIG91ciBlZGl0b3IuDQo+IA0KPiBUaGFuayB5b3UsDQo+ IOKAlCBKdXN0aW4gJiBLZXBlbmcsIHlvdXIgQ09TRSBjaGFpcnMNCj4gDQo+ICogSSBwcm9taXNl ZCB0aG9zZSBpbiB0aGUgcm9vbSBhdCBZb2tvaGFtYSB0byBvZmZlciBhIGZseWluZyByYXQgb3B0 aW9uLCBmb3Igd2hpY2ggSSBhbSBkZWVwbHkgc29ycnkuDQo+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IENPU0UgbWFpbGluZyBsaXN0DQo+IENPU0VA aWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQoN Cg== From nobody Thu Nov 12 23:39:48 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE4171B41AC for ; Thu, 12 Nov 2015 23:39:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GOo92X-52d_y for ; Thu, 12 Nov 2015 23:39:45 -0800 (PST) Received: from mail-lf0-x22d.google.com (mail-lf0-x22d.google.com [IPv6:2a00:1450:4010:c07::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64CC71B41A9 for ; Thu, 12 Nov 2015 23:39:44 -0800 (PST) Received: by lffz63 with SMTP id z63so47842929lff.0 for ; Thu, 12 Nov 2015 23:39:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics_se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-type; bh=zVL0HN/UXEdFdlEw7UEQgWGsogAxOjhqV9ATo/qEGCE=; b=sahUvKoCaaiBK+S8abI9sQGzgJGyowmDnAUqzzKkPs0g1Xz2sXExeLMYWUwOgqhLON O5XRl6dVlAl4r42RBWlxrl2TA30KtiDZlGBk9ws6/gjj7TMEwa2ctnRTeG62Olze4Llm XYPTDcT9eTa6xtKIt8Rz3ONFTDFJwY0/KFgQXTAvxqaCyHEvqJ9mfnN69pZNF44oe8Pw ATBNJp8n8cMKc7ZOwg0JthGLHYLljJeKpzNOmHqduANFBI8lKFEZgG/+f84Mw7+I44Gk xIf3OP9IoAH11McUrTb/jmo6lInydZC3p5KnMMcPt4rTC98/tHPUDJ/H40hmjkenbun7 F08Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type; bh=zVL0HN/UXEdFdlEw7UEQgWGsogAxOjhqV9ATo/qEGCE=; b=CjNlUoJnEcLYbKVRIEedXN+qeuJV5LmFPppyp4N9QtrBy8+T4fvAm5+0J94M8GJH6B 8iIzGgicsJzcBS4I1daBciLccDOwnCDVr815BGAr/5Dx5LAQ0F/ysUIKnR6aZxiPDJjZ HAsf3pkIVDOK67jsTwCLj5skKXq//YeMD9z83n89AQ+BDdvIge/0buvoEVmVIEru+MJV Z2TJwBCc3gU08jj4Ac3u/UvcoVM3RrBw8pe0aN2I8S2jutEQ+FDjYCVQMDTKD6QW0pIe zjwKk5lPxs7bf3YGttX+dTwjskjCMPjVLKySqzaam5bkJvffw6MZs6TeLhWUupv1givv aFuQ== X-Gm-Message-State: ALoCoQnE/tDGrd2tm0y5Ge/l2iAJykoAT3oy0s1GRY6XQHPBvhAeDMV2dimGL+wz69sTMPDtN33p X-Received: by 10.25.79.17 with SMTP id d17mr9200856lfb.40.1447400382488; Thu, 12 Nov 2015 23:39:42 -0800 (PST) Received: from [192.168.0.108] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id l5sm2855533lbc.36.2015.11.12.23.39.41 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 12 Nov 2015 23:39:41 -0800 (PST) To: cose@ietf.org References: From: Ludwig Seitz Message-ID: <564593B5.6060403@sics.se> Date: Fri, 13 Nov 2015 08:39:33 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms050308090901030008080407" Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Nov 2015 07:39:46 -0000 This is a cryptographically signed message in MIME format. --------------ms050308090901030008080407 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable On 2015-11-07 09:01, Justin Richer wrote: > At the Yokohama meeting, the chairs agreed to do a consensus call > regarding the adoption and placement of new work to define a COSE > Token, analogous to the JWT from JOSE. In the room, there was a > general sentiment of support for the work being done, with the wide > adoption of JWT and its driving of JOSE being a common theme of > precedent. What wasn=E2=80=99t clear is where the work should be done a= nd to > what end it should drive. The six positions we are asking the working > group to consider and voice their support for are: > A) Define the COSE Token within the COSE working group along side the C= OSE Messages (and potentially COSE Auxiliary Algorithms) draft. > B) Define the COSE Token inside the OAuth working group. > C) Define the COSE Token inside the ACE working group. > D) Don=E2=80=99t define the COSE Token anywhere. > E) You need more information to decide. > F) You don=E2=80=99t give a flying rat about the COSE Token.* > C) Both A) and B) would require rechartering, I believe we can get away=20 with the CWT in C) without rechartering. I think we need to have both ACE and OAuth expertise on this.=20 Furthermore we need to integrate this with the other ACE work, which is=20 why I think C) is the right choice. /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=C3=A4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms050308090901030008080407 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DFQwggYYMIIFAKADAgECAgMMhpgwDQYJKoZIhvcNAQEFBQAwgYwxCzAJBgNVBAYTAklMMRYw FAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZp Y2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1hcnkgSW50ZXJt ZWRpYXRlIENsaWVudCBDQTAeFw0xNTAxMDgwODM5MDZaFw0xNjAxMDkyMjQxMzBaMDgxFzAV BgNVBAMMDmx1ZHdpZ0BzaWNzLnNlMR0wGwYJKoZIhvcNAQkBFg5sdWR3aWdAc2ljcy5zZTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVB4rAuq4FxbARxwRqPLpc/3C194F+V H4XMKK6fu3Y8zDLijzNSjh6tG41oZhXvJcvAs1nZNjUutNLeyBAUFiYhy7HXNdlKpjbMEFKQ +6KpEdZ0Rk+pXgB2E1mqZEfp3M2djcQ/h+7uGVlSGYNAxYk6rWPIIWBx2GMvAQaHP4xxu/F+ PiSQILOVzmtIFZe1t/Lw71aaNeMYVhARo8z5PVsVoq6gBeujxfiRLtiQ/S8xW6RKvNvUkVyT BQfcKaEDZR9FENNf9rFgiAcT6R7hI8RBf1d2fxdlbDU8uM72K3fvzGDt8N9Bfm1kDWbDBxJE 1taRIYs+60D1kwV6DvBb9MECAwEAAaOCAtQwggLQMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU6ryrKahJtBOEdbIL AAWCpOsQyagwHwYDVR0jBBgwFoAUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwGQYDVR0RBBIwEIEO bHVkd2lnQHNpY3Muc2UwggFMBgNVHSAEggFDMIIBPzCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB9wYIKwYB BQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBvlRo aXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcgdG8gdGhlIENsYXNzIDEgVmFs aWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFu Y2Ugb25seSBmb3IgdGhlIGludGVuZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUg cmVseWluZyBwYXJ0eSBvYmxpZ2F0aW9ucy4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Ny bC5zdGFydHNzbC5jb20vY3J0dTEtY3JsLmNybDCBjgYIKwYBBQUHAQEEgYEwfzA5BggrBgEF BQcwAYYtaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL3N1Yi9jbGFzczEvY2xpZW50L2NhMEIG CCsGAQUFBzAChjZodHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zdWIuY2xhc3MxLmNs aWVudC5jYS5jcnQwIwYDVR0SBBwwGoYYaHR0cDovL3d3dy5zdGFydHNzbC5jb20vMA0GCSqG SIb3DQEBBQUAA4IBAQBl8BbG0n7+JjFqiJOuAqMbkeqM6Oyd+4oHGu3fbaSiM1SKesae2bfm vifV99a+M4DERZ2SVkOYcvNlv31Q3hvYtzRjDOqewzVKxo021R3ddQULW1DhvTEpclikG5rd 0NRJQn+EkSwEKLeUj68i0dhU8ULhZDDq3A81cTcZzIGrTjNnwDvCktB/sF/iO4At6RJ24P3j KjYFPirW3NsvZ2gzZizSzeubPE0/cWcqEBJ/UtaFPF54efejjLuPRHHMLPDcvrwBhEiBxuG6 oTEo465g4pS9Vo/Z0GoZgZyA+aGQ+YPbPSsqsYmSBjZ6MGGDqQq0niE2dW+8IOdHQvMkqI52 MIIGNDCCBBygAwIBAgIBHjANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg U2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDcxMDI0MjEwMTU1WhcNMTcxMDI0MjEwMTU1WjCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUg Q2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwmDzM4t2BqxKaQu E6uWvooyg4ymiEGWVUet1G8SD+rqvyNH4QrvnEIaFHxOhESip7vMz39ScLpNLbL1QpOlPW/t FIzNHS3qd2XRNYG5Sv9RcGE+T4qbLtsjjJbi6sL7Ls/f/X9ftTyhxvxWkf8KW37iKrueKsxw 2HqolH7GM6FX5UfNAwAu4ZifkpmZzU1slBhyWwaQPEPPZRsWoTb7q8hmgv6Nv3Hg9rmA1/VP BIOQ6SKRkHXG0Hhmq1dOFoAFI411+a/9nWm5rcVjGcIWZ2v/43Yksq60jExipA4l5uv9/+Hm 33mbgmCszdj/Dthf13tgAv2O83hLJ0exTqfrlwIDAQABo4IBrTCCAakwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB8G A1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMGYGCCsGAQUFBwEBBFowWDAnBggrBgEF BQcwAYYbaHR0cDovL29jc3Auc3RhcnRzc2wuY29tL2NhMC0GCCsGAQUFBzAChiFodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcnQwWwYDVR0fBFQwUjAnoCWgI4YhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwgYAGA1UdIAR5MHcwdQYLKwYBBAGBtTcBAgEwZjAuBggrBgEFBQcCARYi aHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEFBQcCARYoaHR0cDov L3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjANBgkqhkiG9w0BAQUFAAOCAgEA CoMIfXirLAZcuGOMXq4cuSN3TaFx2H2GvD5VSy/6rV55BYHbWNaPeQn3oBSU8KgQZn/Kck1J xbLpAxVCNtsxeW1R87ifhsYZ0qjdrA9anrW2MAWCtosmAOT4OxK9QPoSjCMxM3HbkZCDJgnl E8jMopH21BbyAYr7b5EfGRQJNtgWcvqSXwKHnTutR08+Kkn0KAkXCzeQNLeA5LlYUzFyM7kP Ap8pIRMQ+seHunmyG642S2+y/qHEdMuGIwpfz3eDF1PdctL04qYK/zu+Qg1Bw0RwgigVZs/0 c5HP2/e9DBHh7eSwtzYlk4AUr6yxLlcwSjOfOmKEQ/Q8tzh0IFiNu9IPuTGAPBn4CPxD0+Ru 8T2wg8/s43R/PT3kd1OEqOJUl7q+h+r6fpvU0Fzxd2tC8Ga6fDEPme+1Nbi+03pVjuZQKbGw KJ66gEn06WqaxVZC+J8hh/jR0k9mST1iAZPNYulcNJ8tKmVtjYsv0L1TSm2+NwON58tO+pIV zu3DWwSEXSf+qkDavQam+QtEOZxLBXI++aMUEapSn+k3Lxm48ZCYfAWLb/Xj7F5JQMbZvCex glAbYR0kIHqW5DnsYSdMD/IplJMojx0NBrxJ3fN9dvX2Y6BIXRsF1du4qESm4/3CKuyUV7p9 DW3mPlHTGLvYxnyKQy7VFBkoLINszBrOUeIxggPtMIID6QIBATCBlDCBjDELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENl cnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJ bnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJYIZIAWUDBAIBBQCgggIpMBgGCSqGSIb3 DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTExMzA3MzkzM1owLwYJKoZI hvcNAQkEMSIEIB3tu58JdgqJFLJ0/+odXmJ9wRWzz6TEc+FODMVBrxRrMGwGCSqGSIb3DQEJ DzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0D AgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgaUGCSsGAQQB gjcQBDGBlzCBlDCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0 YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwgacG CyqGSIb3DQEJEAILMYGXoIGUMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYG A1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0EC AwyGmDANBgkqhkiG9w0BAQEFAASCAQBsrM5B9pVSxRsIF/xUzouIybclv8kwNkYj0niFkINp SAZ7aB/lkSYYc/Ak88qNadGVsH8jApZu1ARMpxSaaBRUlzjUKKkOVAQEdXQqyXs58MqeRVq7 MLrv2UISC2v7ZLXoSjGwe9zVX1yIa4C4LU/HpY/Lc69Rkjus2LM+C7Pr/2Dt2r274Mv8LGQP m+MO7sCiRimW7k2P0UIz/Gn3ROW4zI2cE/3KcfK6p9CVVMQ4aMGIqoQiQoMSAApXNWPyubsh I9wVArDhWqMCsUHJNLn5OSMT65oozp3uXT24D6Ud5hYZDb8q6pC2altljen5+w/QiHX6djIe xmrk9hl+AGHYAAAAAAAA --------------ms050308090901030008080407-- From nobody Fri Nov 13 00:49:27 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 410931A21AC for ; Fri, 13 Nov 2015 00:49:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RRt9o2KjhX6l for ; Fri, 13 Nov 2015 00:49:22 -0800 (PST) Received: from emea01-db3-obe.outbound.protection.outlook.com (mail-db3on0707.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe04::707]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8605C1A1BBE for ; Fri, 13 Nov 2015 00:46:30 -0800 (PST) Received: from DBXPR04CA0040.eurprd04.prod.outlook.com (10.141.8.168) by AMXPR04MB213.eurprd04.prod.outlook.com (10.242.72.14) with Microsoft SMTP Server (TLS) id 15.1.318.15; Fri, 13 Nov 2015 08:46:11 +0000 Received: from AM1FFO11FD010.protection.gbl (2a01:111:f400:7e00::143) by DBXPR04CA0040.outlook.office365.com (2a01:111:e400:9414::40) with Microsoft SMTP Server (TLS) id 15.1.325.17 via Frontend Transport; Fri, 13 Nov 2015 08:46:11 +0000 Authentication-Results: spf=none (sender IP is 23.103.247.180) smtp.mailfrom=philips.com; microsoft.com; dkim=none (message not signed) header.d=none;microsoft.com; dmarc=none action=none header.from=philips.com; Received-SPF: None (protection.outlook.com: philips.com does not designate permitted sender hosts) Received: from 011-smtp-out.Philips.com (23.103.247.180) by AM1FFO11FD010.mail.protection.outlook.com (10.174.65.99) with Microsoft SMTP Server (TLS) id 15.1.325.5 via Frontend Transport; Fri, 13 Nov 2015 08:46:11 +0000 Received: from DB5PR9001MB0167.MGDPHG.emi.philips.com (141.251.190.211) by DB5PR9001MB0167.MGDPHG.emi.philips.com (141.251.190.211) with Microsoft SMTP Server (TLS) id 15.1.318.15; Fri, 13 Nov 2015 08:46:05 +0000 Received: from DB5PR9001MB0167.MGDPHG.emi.philips.com ([141.251.190.211]) by DB5PR9001MB0167.MGDPHG.emi.philips.com ([141.251.190.211]) with mapi id 15.01.0318.003; Fri, 13 Nov 2015 08:46:05 +0000 From: "Kumar, Sandeep" To: Mike Jones , Hannes Tschofenig , Justin Richer , "cose@ietf.org" Thread-Topic: [COSE] Consensus Call: Adoption of the COSE Token Thread-Index: AQHRGTKZvT6j7CB+8k2KJA4Yi49PP56TcjYAgAXLswCAAG5vwA== Date: Fri, 13 Nov 2015 08:46:04 +0000 Message-ID: <1c9c3da5744a407c905e618b60a39194@DB5PR9001MB0167.MGDPHG.emi.philips.com> References: <56406970.5090801@gmx.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [194.171.252.108] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-Microsoft-Exchange-Diagnostics: 1; AM1FFO11FD010; 1:xeWGl+tmJEP4QBtIK5kOP0fis59B+fGVHAyvBSKhGAcPXXQsIphrr+JcVqSYYDN3CNJarYDwyvvWiGnBIZr6dzPJBnojKZky8rhObu2T/gt6etWS1cyS6FPSBx7s14eqcAxZwgoJ7Xcd6LcaWvyFLTk1CS2kDumx8r7DVFNLOEwjEC5Phgo4WgAobt44IO7EmHp1gWa0kq5GpGp0VkUeUJdpOvj822Dzx5ConaViJ69WABCRZtIm9TgMwSpfUDi7ssn7vlpFzN7BJFiK9N8fJDrW8UO/JaL77m9fVHpVFrv7UPMITM/63VJOU+ZEHLwPzTAPTKoiQhGP0NQ0XcI1E0qUTSp74cIUoATirAfRJkg= X-Forefront-Antispam-Report: CIP:23.103.247.180; CTRY:; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(2980300002)(428002)(199003)(85714005)(374574003)(189002)(24454002)(13464003)(479174004)(55904004)(377454003)(1720100001)(107886002)(81156007)(24736003)(5001960100002)(87936001)(10400500002)(189998001)(16796002)(5001920100001)(5003600100002)(5007970100001)(106466001)(2561002)(50466002)(108616004)(97736004)(5001770100001)(33646002)(15975445007)(2171001)(2501003)(102836002)(2900100001)(105586002)(50986999)(2421001)(106116001)(92566002)(47776003)(6806005)(86362001)(5008740100001)(19580405001)(101416001)(69596002)(11100500001)(5004730100002)(2950100001)(54356999)(1511001)(66066001)(76176999)(23676002)(19580395003); DIR:OUT; SFP:1102; SCL:1; SRVR:AMXPR04MB213; H:011-smtp-out.Philips.com; FPR:; SPF:None; PTR:InfoDomainNonexistent; A:1; MX:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; AMXPR04MB213; 2:Znq29yMQNNzUmvclye24mfYE2qQzgkm6di4Lb36PVBDnIxbSGXVTQXwdPI0dceqruKpG+Y5OWvZTg3yqpD7s8suIX83doKrki4Cy2M03lMDgFyoN8qDFHgr3f2SFmyu5I14Rgqi+xihTl4qlkig1aCJuK+UY0SkKUdBaN4Qtk3g=; 3:ygLZU6erSY9JUXU9pcRA8fKw88sRCtvIRGDV+5OdDt5YXDGp4ljPnw15VjMsLetZDHNZQP553a2DB7imU/tVAEdbsqmNKzBUOeBZZsYUkUCM50EPbUVO4VxE0lY+7JGSgv+Us9EulqbUK+JW2AHEYE7rdCtNEHTz1cjiLv3PwDaTNMqr2/twDetMp5KIp0cMRQgp299KcsarzQ7hfzONKlxCeTyidwYNbKKXyfYNHK0=; 25:2YEhphQynHSMqKkyfTQ4PdcRJqTWF7iU3lFBwft43I8PRLeaxSrDANsO7UrisuMQ+3b9iUW/MfQuS/84y68syRWNjjhIwIVxYWI2Xk8TF2ffGYrwTQRi5IggGq2CQtacx1B5OMMW2dULxXJPzpKaifYN9lBRECLJnTmWvgG92SjKbMueBX2GPYS4ZkH+bZzh06EuHCCfh4rEvVDGRsL6KozWnQsSnYUofZloG4F/NGAiF485GHrICFb+4KkqYzbV10PGJCeWIt21ASwSUWQH2w== X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AMXPR04MB213; X-Microsoft-Exchange-Diagnostics: 1; AMXPR04MB213; 20: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; 4:2qFy2T50xdgme9qGTNYUbHQiQrgJP/yOM7qDhC1IZjQgcwyk4CzP4qNenAiKglLgwV/c1zmRBU3gByQynk7XqOWCEzuGwJfAITfUQse0algTvX86D3GOXL35rYEo/WQbO7qmZQ8e1BlgQD50NDKEBVVXqoZxYupBkFfO2woQlhdk6bKXLIykDuE9YUFOBHH6rD43/mVEWiTmOFBw3QkOkoUTHusgDivIUvrUpP366tynAwdartgBh8PMqK9XxqX1aaABq/j2NAWorvlQMznyQUK6WYAPDQSd7d37lT2by9/DazpY5ZXsi6SfOiC/iPRFX3c0Ite5+jlcbnQIUPIkWWxRj2UipAKrSGGFpP4gtNhGgycY3cporDLZrUK6lb9D X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(520078)(10201501046)(3002001); SRVR:AMXPR04MB213; BCL:0; PCL:0; RULEID:; SRVR:AMXPR04MB213; X-Forefront-PRVS: 0759F7A50A X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtBTVhQUjA0TUIyMTM7MjM6NDZLblZNeXQ4SmFUZDdUWnRnWDNCVzJBNTlZ?= =?utf-8?B?V2xxb2xFdGtSa1dGZFprcXBBUkFzOTU2VG95SkZ3Q0FWMGRGT0FyKzZDVU1a?= =?utf-8?B?bjhuL3hpVldoYVYzOFZwWG5NWmJRMVJaa0xSNG9ZUUxaVy80SU1tUFlaRVhS?= =?utf-8?B?ZGFEeE96NG9qbUFtOWh4eDlCU2o2VTU3V295cHdVbCt3TDVZd2txWTI5NS9P?= =?utf-8?B?c2IrejdzbjgyalRndmF1dC9oR3U2eUVxZ2J0VlRNcjdBZzRZd0Q4dThQbVFB?= =?utf-8?B?a3VEeEsxZUYwWjNxdzF4dmhoc0VIUDdOWUxERFpKNlJjeks0Vzh6aVJDZmdl?= =?utf-8?B?Mnk0MU5uT2hlT0RoaXpGRGQ0V1JqUXBrQzNUdDhHU0xRbmJoUlZ0VnhJWnVu?= =?utf-8?B?QmVhQnNua2JIdVRlRXI1Qi91blBYbTRwM1pRejQ3Nm84Uktha29EUUxEYk41?= =?utf-8?B?dGdTRGJkUjVvcHdFek02dGlIZFdPYWJCVDA4TUZvZ0xjQ2JaSUJYeTRiTTNv?= =?utf-8?B?c3FxcVROWVhxZTBaYlFTTDNwZTJvQzdTbmwzVzVkTzM1bGRSUUNvQ2xkaUVB?= =?utf-8?B?RnhwckRTUmdQOE1hWTBSa1VEUEUrOW05M2xYWDFxUm9MV2c0bTFSaUlsaHhX?= =?utf-8?B?enVmc0dqN2RWS1M2OEptemJ0Y2orT1lvRnJXRWFrdDc3SjdzWDExZHhvd1BQ?= =?utf-8?B?WnlBeXhKRUZFaTlaZEpSUUV3cVJiR1V3UGNJWXZsdWFuWG1Yd3FkUXpaQVVu?= =?utf-8?B?SU1vR2FMd05LRXNLRE5xajlvcmJtV1grMVR5TmpGNm8wZUp3bTZscWo4d0Jw?= =?utf-8?B?Zm5wR3MyalR6V3Y2Tjd6Q09ISWJZSTFIbUlncis3eEhGbWdMQmRWNGE4M2dl?= =?utf-8?B?a0tUbEIzTzR0cDRMVDBLSmI1YUN1Mm1FTWJab2k5MWpKOWxkTi8raWJKeFkv?= =?utf-8?B?UjArVlZSTG96TWQ5Z05oRzRRQlZEaHhPWkhlZ01KWHpXQlNTZzRRbXlIL1pD?= =?utf-8?B?dEkrZkpXcW42SnVhNFhHVmJlQlhCUDlLU0JhZ0tySndESFlVS0FYbFpCWGgv?= =?utf-8?B?d250b2FHVVVSWnhnTkEwbGtLMWNUVnZ1RnllTE40SjQvSXlUd0NtVXVwbEJD?= =?utf-8?B?ZTVoLyt5TnBmU0huaTIwVm5zbGtDbG85SldGelVCdXpTZzF0RFhIcU9KNmNl?= =?utf-8?B?dytLNmlzNVZkUzlRU3RxN0VOVUJDUGp2dDJyVG5vSnZwYktrM0gxc2diZlRn?= =?utf-8?B?RG1UblRGZnhveElicnVObHY2ZFJmenJuNGRBcSsrajBYcUVUdFZwK3BWSm5w?= =?utf-8?B?aW5kcVZMRmFyWXZJK2tEYmYxYTZBVmFEM2hVU3pnQUg0cnZwVE4vMXYxZmtY?= =?utf-8?B?aU1iNHR0ajdzdit5THNTK2hhTmhLOXVZbkNueU4xQXNJYjc2cU92MXBIT3Z3?= =?utf-8?B?SktFeUJwYWJiTlp1dC9KMnhvaHVCWWhJaDFESmgyVkh3ZVRuWXRMSUY3bkpt?= =?utf-8?B?WTNGRXAwa3NySDhoS0NUYkYwR0NKTkx3NitFR2FWdHRFZzlPMWJFOHM2cDN4?= =?utf-8?B?ZXBNa243YS9KRlFLZHpMcENVdy8vbnBwTW9OOHpBTXIvU1FQa3h2dmNNM25D?= =?utf-8?B?clBBWlpLRDY0bCthQlcyZHBzVENCbVJ6SmxweGZxSUpVbTloakRJbHVONm5R?= =?utf-8?B?WEtaaHEzOVJCZzRvc001UTgzNFZSenJRU2kwS1k4YVY4MWhycnRTL3p0eWVD?= =?utf-8?B?MitORnhTakMxUG9wYndzUG9TKzBGNENtMkZkYzUxUEJNRW9SeVRXa0Zja2ZY?= =?utf-8?B?amlYZ0xsUk5uTCtqN0NncEZNbFVPZUlvblZZT0dQMHpmd2wzUjQ0V0pvNXdV?= =?utf-8?B?a2h6QUxTRWt0Nk5uMVowOEZTYmQra2krdEdia2JWSnJQZ0ZUR1hheXpIenB4?= =?utf-8?B?VkdsYVdkTXJMVGN5S0Q3cFRkZXBRV0thMHBsSWwvOXhiSVR2c3F4cWpjVGdr?= =?utf-8?B?TFNlVHEvTmE3c1RNbFM2ci9QdXBpb0gxTjZBPT0=?= X-Microsoft-Exchange-Diagnostics: 1; AMXPR04MB213; 5:nTXmb7TcuTTxGKt42KComDn6BSmzLO3LbLE66rmoWzZEtvdANeAWHLkURQT0tpcYx2mSi1tQMPGy3rcqHVA+2L+6goaEEExSyE02Ta0hfQPAWS8jhRy0iyOqIoL4PV+Mu7iquB2BcfRzG8Ny8HI0XQ==; 24:7hJrNE+686Vw6TRzM007WV+SNQqOxsl67S3hAVlOatNc3J+ZybOODln9DizknK6CeK7QYu1dGw7eDx335wvIi8Ds3llVRrxJR5eF828DZkc=; 20:nXt41YQF51e6Jlt0svtafRQJYTubTOwjFUDeKRo+oq+wnaduUHYx5u9vzlhaPKKJKTKBn7joa3mwWBn3usoVoA== SpamDiagnosticOutput: 1:23 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: philips.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Nov 2015 08:46:11.2356 (UTC) X-MS-Exchange-CrossTenant-Id: 1a407a2d-7675-4d17-8692-b3ac285306e4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=1a407a2d-7675-4d17-8692-b3ac285306e4; Ip=[23.103.247.180]; Helo=[011-smtp-out.Philips.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AMXPR04MB213 Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Nov 2015 08:49:25 -0000 KzENCg0KVGhlIGNvcmUgQ1dUIHNob3VsZCBiZSBpbiBPQXV0aCBXRyBwcmVmZXJhYmx5IHJldXNp bmcgdGhlIHNhbWUgSldUIENsYWltcyByZWdpc3RyeS4gRXh0ZW5zaW9ucyBzcGVjaWZpYyBmb3Ig QUNFIHNob3VsZCBiZSBkb25lIGluIEFDRSBXRyBhbmQgcHJlZmVyYWJseSBpbiBhIHdheSB0aGF0 IGl0IGNhbiBiZSB1c2VkIHdpdGggYm90aCBDV1QgYW5kIEpXVC4NCg0KUmVnYXJkcw0KU2FuZGVl cA0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IENPU0UgW21haWx0bzpj b3NlLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBNaWtlIEpvbmVzDQo+IFNlbnQ6IEZy aWRheSwgTm92ZW1iZXIgMTMsIDIwMTUgMzowOCBBTQ0KPiBUbzogSGFubmVzIFRzY2hvZmVuaWcg PGhhbm5lcy50c2Nob2ZlbmlnQGdteC5uZXQ+OyBKdXN0aW4gUmljaGVyDQo+IDxqcmljaGVyQG1p dC5lZHU+OyBjb3NlQGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBbQ09TRV0gQ29uc2Vuc3VzIENh bGw6IEFkb3B0aW9uIG9mIHRoZSBDT1NFIFRva2VuDQo+DQo+IEkgcGVyc29uYWxseSBiZWxpZXZl IHRoYXQgdGhlIGNvcmUgQ0JPUiBXZWIgVG9rZW4gKENXVCkgc3BlYyBzaG91bGQgZGVmaW5lDQo+ IGVxdWl2YWxlbnRzIG9mIHRoZSBzYW1lIHNldmVuIGdlbmVyYWwtcHVycG9zZSBjbGFpbXMgdGhh dCBKU09OIFdlYiBUb2tlbg0KPiAoSldUKSBodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3 NTE5IGRlZmluZWQgKGlzcywgc3ViLCBhdWQsIGV4cCwgbmJmLCBpYXQsDQo+IGFuZCBqdGkpLCBk ZWZpbmUgdGhlIENXVCBDbGFpbXMgUmVnaXN0cnksIGFuZCBzdG9wIHRoZXJlLiAgS2VlcGluZyB0 aGUgdGFyZ2V0DQo+IHNpbXBsZSBpbiB0aGF0IG1hbm5lciBtZWFucyB0aGF0IHRoaXMgY291bGQg Z2V0IGRvbmUgVkVSWSBxdWlja2x5Lg0KPg0KPiBUaGVuIGFwcGxpY2F0aW9ucywgc3VjaCBhcyBB Q0UgcHJvdG9jb2xzIGFuZCBhcHBsaWNhdGlvbnMsIGNvdWxkIGRlZmluZQ0KPiBhZGRpdGlvbmFs IGNsYWltcyB1c2VkIGJ5IHRob3NlIGFwcGxpY2F0aW9ucyBhbmQgcmVnaXN0ZXIgdGhlbSBpbiB0 aGUgQ1dUDQo+IENsYWltcyBSZWdpc3RyeS4gIEtlZXBpbmcgdGhlIGdlbmVyYWwtcHVycG9zZSBh bmQgYXBwbGljYXRpb24tc3BlY2lmaWMgY2xhaW0NCj4gZGVmaW5pdGlvbnMgaW4gZGlmZmVyZW50 IHNwZWNzIGlzIGltcG9ydGFudCB0byBoYXZpbmcgQ1dUIGJlIGEgZ2VuZXJhbC0NCj4gcHVycG9z ZSBzcGVjLCByYXRoZXIgdGhhbiBiZWluZyB2aWV3ZWQgYXMgYmVpbmcgc2xhbnRlZCB0b3dhcmRz IGEgcGFydGljdWxhcg0KPiBhcHBsaWNhdGlvbiBvciBhcHBsaWNhdGlvbiBhcmVhLiAgSXQgYWxz byBtZWFucyBpdCB3aWxsIGdldCBkb25lIG11Y2ggZmFzdGVyLg0KPg0KPiBJb1QvQUNFIGV4cGVy dGlzZSBpcyBjcml0aWNhbCBmb3IgZGVmaW5pbmcgdGhlIHN1cHBsZW1lbnRhbCBJb1QvQUNFIGNs YWltcy4gIEl0J3MNCj4gdW5uZWNlc3NhcnkgZm9yIGRldmVsb3BpbmcgdGhlIGJhc2UgQ1dUIHNw ZWMuICBXaGVyZWFzIHRoZSBleHBlcnRpc2UgdGhhdA0KPiBjcmVhdGVkIEpXVCwgd2hpY2ggd2Un ZCBiZSBkb2luZyBhIGZ1bmN0aW9uYWwgY2xvbmUgb2YsIGlzIGluIHRoZSBPQXV0aA0KPiB3b3Jr aW5nIGdyb3VwLiAgVGhlcmVmb3JlLCBJIGJlbGlldmUgdGhlIGJlc3QgYW5zd2VyIGlzOg0KPg0K PiBCKSBEZWZpbmUgdGhlIENPU0UgVG9rZW4gaW5zaWRlIHRoZSBPQXV0aCB3b3JraW5nIGdyb3Vw Lg0KPg0KPiAtLSBNaWtlDQo+DQo+IFAuUy4gIEZvciB0aG9zZSB3YW50aW5nIHRvIHdyYXAgdGhl aXIgaGVhZHMgYXJvdW5kIHdoYXQgd2UncmUgY29uY3JldGVseQ0KPiB0YWxraW5nIGFib3V0LCBF cmlrIFdhaGxzdHLDtm0gd2FzIGtpbmQgZW5vdWdoIHRvIHdyaXRlIGEgZmlyc3QgZHJhZnQNCj4g aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXdhaGxzdHJvZW0tb2F1dGgtY2Jvci13 ZWItdG9rZW4tMDAsDQo+IHdpdGggc29tZSBpbnB1dCBmcm9tIEhhbm5lcyBhbmQgbXlzZWxmLg0K Pg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBDT1NFIFttYWlsdG86Y29z ZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSGFubmVzIFRzY2hvZmVuaWcNCj4gU2Vu dDogTW9uZGF5LCBOb3ZlbWJlciAwOSwgMjAxNSAxOjM4IEFNDQo+IFRvOiBKdXN0aW4gUmljaGVy OyBjb3NlQGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBbQ09TRV0gQ29uc2Vuc3VzIENhbGw6IEFk b3B0aW9uIG9mIHRoZSBDT1NFIFRva2VuDQo+DQo+IEhpIEp1c3RpbiwgSGkgS2VwZW5nLA0KPg0K PiBJIGJlbGlldmUgdGhlIHBhcnRpY2lwYW50cyBvZiB0aGUgWW9rb2hhbWEgSUVURiBtZWV0aW5n IGFscmVhZHkgZGVjaWRlZA0KPiBhZ2FpbnN0IChEKSB3aXRoIHRoZWlyIGFncmVlbWVudCB0aGF0 IHRoaXMgd29yayBpcyBpbXBvcnRhbnQuDQo+DQo+IEluIHRlcm1zIG9mIGV4cGVydGlzZSBJIGJl bGlldmUgQ09TRSwgT0F1dGgsIGFuZCBBQ0Ugd291bGQgYmUgaW4gYSBnb29kDQo+IHBvc2l0aW9u LiBXaGlsZSBPQXV0aCBpcyBjdXJyZW50bHkgaW4gYSByZS1jaGFydGVyaW5nIHByb2Nlc3MgKGFz IHlvdQ0KPiBrbm93KSB0aGVyZSBpcyBhIGxvdCBvZiB3b3JrIG9uIHRoZSBwbGF0ZSBhbHJlYWR5 IGV2ZW4gdGhvdWdoIGl0IGlzIGRpc3RyaWJ1dGVkDQo+IG92ZXIgYSBudW1iZXIgb2YgZm9sa3Mu IEZ1cnRoZXJtb3JlLCB0aGVyZSBhbHNvIHNlZW1zIHRvIGJlIGEgc3Ryb25nDQo+IG92ZXJsYXAg YmV0d2VlbiB0aGUgcGFydGljaXBhbnRzIG9mIHRoZSBBQ0UgYW5kIHRoZSBDT1NFIHdvcmtpbmcg Z3JvdXANCj4gd2hlcmVieSBJIGJlbGlldmUgdGhhdCB3ZSBoYXZlIG1vcmUgcGFydGljaXBhbnRz IGluIEFDRSB0aGFuIGluIENPU0Ugc2luY2UNCj4gdGhlIHNjb3BlIGlzIG11Y2ggYnJvYWRlci4N Cj4NCj4gVWx0aW1hdGVseSB3ZSBhcmUgZG9pbmcgc29tZXRoaW5nIHZlcnkgc2ltcGxlIGhlcmU6 IHdlIGFyZSBjb3B5aW5nIHRoZQ0KPiBKU09OIGVuY29kZWQgY2xhaW1zIHRvIENCT1IgZW5jb2Rl ZCBjbGFpbXMuDQo+DQo+IEkgYmVsaWV2ZSB0aGF0IHRoZSBBRCBzaG91bGQgZGVjaWRlIGFib3V0 IHdoZXJlIHRoZSB3b3JrIGdvZXMuDQo+DQo+IENpYW8NCj4gSGFubmVzDQo+DQo+DQo+IE9uIDEx LzA3LzIwMTUgMDk6MDEgQU0sIEp1c3RpbiBSaWNoZXIgd3JvdGU6DQo+ID4gQXQgdGhlIFlva29o YW1hIG1lZXRpbmcsIHRoZSBjaGFpcnMgYWdyZWVkIHRvIGRvIGEgY29uc2Vuc3VzIGNhbGwNCj4g cmVnYXJkaW5nIHRoZSBhZG9wdGlvbiBhbmQgcGxhY2VtZW50IG9mIG5ldyB3b3JrIHRvIGRlZmlu ZSBhIENPU0UgVG9rZW4sDQo+IGFuYWxvZ291cyB0byB0aGUgSldUIGZyb20gSk9TRS4gSW4gdGhl IHJvb20sIHRoZXJlIHdhcyBhIGdlbmVyYWwgc2VudGltZW50DQo+IG9mIHN1cHBvcnQgZm9yIHRo ZSB3b3JrIGJlaW5nIGRvbmUsIHdpdGggdGhlIHdpZGUgYWRvcHRpb24gb2YgSldUIGFuZCBpdHMN Cj4gZHJpdmluZyBvZiBKT1NFIGJlaW5nIGEgY29tbW9uIHRoZW1lIG9mIHByZWNlZGVudC4gV2hh dCB3YXNu4oCZdCBjbGVhciBpcw0KPiB3aGVyZSB0aGUgd29yayBzaG91bGQgYmUgZG9uZSBhbmQg dG8gd2hhdCBlbmQgaXQgc2hvdWxkIGRyaXZlLiBUaGUgc2l4DQo+IHBvc2l0aW9ucyB3ZSBhcmUg YXNraW5nIHRoZSB3b3JraW5nIGdyb3VwIHRvIGNvbnNpZGVyIGFuZCB2b2ljZSB0aGVpcg0KPiBz dXBwb3J0IGZvciBhcmU6DQo+ID4NCj4gPiBBKSBEZWZpbmUgdGhlIENPU0UgVG9rZW4gd2l0aGlu IHRoZSBDT1NFIHdvcmtpbmcgZ3JvdXAgYWxvbmcgc2lkZSB0aGUNCj4gQ09TRSBNZXNzYWdlcyAo YW5kIHBvdGVudGlhbGx5IENPU0UgQXV4aWxpYXJ5IEFsZ29yaXRobXMpIGRyYWZ0Lg0KPiA+IEIp IERlZmluZSB0aGUgQ09TRSBUb2tlbiBpbnNpZGUgdGhlIE9BdXRoIHdvcmtpbmcgZ3JvdXAuDQo+ ID4gQykgRGVmaW5lIHRoZSBDT1NFIFRva2VuIGluc2lkZSB0aGUgQUNFIHdvcmtpbmcgZ3JvdXAu DQo+ID4gRCkgRG9u4oCZdCBkZWZpbmUgdGhlIENPU0UgVG9rZW4gYW55d2hlcmUuDQo+ID4gRSkg WW91IG5lZWQgbW9yZSBpbmZvcm1hdGlvbiB0byBkZWNpZGUuDQo+ID4gRikgWW91IGRvbuKAmXQg Z2l2ZSBhIGZseWluZyByYXQgYWJvdXQgdGhlIENPU0UgVG9rZW4uKg0KPiA+DQo+ID4gVGhlIGNv bnNlbnN1cyBjYWxsIHdpbGwgcmVtYWluIG9wZW4gZm9yIHR3byB3ZWVrcyBmcm9tIHRvZGF5LCBj bG9zaW5nIG9uDQo+IE5vdmVtYmVyIDIxLCAyMDE1OyBhdCB3aGljaCB0aW1lLCBob3BlZnVsbHkg d2Ugd2lsbCBoYXZlIGEgY2xlYXIgYW5zd2VyIGFuZA0KPiBkaXJlY3Rpb24gdG8gcG9pbnQgdGhp cyB3b3JrLg0KPiA+DQo+ID4gVGhhbmsgeW91LA0KPiA+ICDigJQgSnVzdGluICYgS2VwZW5nLCB5 b3VyIENPU0UgY2hhaXJzDQo+ID4NCj4gPiAqIEkgcHJvbWlzZWQgdGhvc2UgaW4gdGhlIHJvb20g YXQgWW9rb2hhbWEgdG8gb2ZmZXIgYSBmbHlpbmcgcmF0IG9wdGlvbiwgZm9yDQo+IHdoaWNoIEkg YW0gZGVlcGx5IHNvcnJ5Lg0KPiA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQo+ID4gQ09TRSBtYWlsaW5nIGxpc3QNCj4gPiBDT1NFQGlldGYub3JnDQo+ ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQo+ID4NCj4NCj4g X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gQ09TRSBt YWlsaW5nIGxpc3QNCj4gQ09TRUBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2Nvc2UNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClRo ZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyBtZXNzYWdlIG1heSBiZSBjb25maWRlbnRp YWwgYW5kIGxlZ2FsbHkgcHJvdGVjdGVkIHVuZGVyIGFwcGxpY2FibGUgbGF3LiBUaGUgbWVzc2Fn ZSBpcyBpbnRlbmRlZCBzb2xlbHkgZm9yIHRoZSBhZGRyZXNzZWUocykuIElmIHlvdSBhcmUgbm90 IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55 IHVzZSwgZm9yd2FyZGluZywgZGlzc2VtaW5hdGlvbiwgb3IgcmVwcm9kdWN0aW9uIG9mIHRoaXMg bWVzc2FnZSBpcyBzdHJpY3RseSBwcm9oaWJpdGVkIGFuZCBtYXkgYmUgdW5sYXdmdWwuIElmIHlv dSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBjb250YWN0IHRoZSBzZW5k ZXIgYnkgcmV0dXJuIGUtbWFpbCBhbmQgZGVzdHJveSBhbGwgY29waWVzIG9mIHRoZSBvcmlnaW5h bCBtZXNzYWdlLg0K From nobody Fri Nov 13 05:23:34 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 463F51A710C for ; Fri, 13 Nov 2015 05:23:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pu8-wlMWbJg7 for ; Fri, 13 Nov 2015 05:23:30 -0800 (PST) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D0E01A702E for ; Fri, 13 Nov 2015 05:23:30 -0800 (PST) X-AuditID: 1209190f-f79d06d000004b20-3e-5645e45179e2 Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id A9.31.19232.154E5465; Fri, 13 Nov 2015 08:23:29 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id tADDNSsr001521; Fri, 13 Nov 2015 08:23:28 -0500 Received: from [192.168.128.56] (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tADDNQLa031552 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Fri, 13 Nov 2015 08:23:27 -0500 To: Ludwig Seitz , cose@ietf.org References: <564593B5.6060403@sics.se> From: Justin Richer Message-ID: <5645E448.7060706@mit.edu> Date: Fri, 13 Nov 2015 08:23:20 -0500 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <564593B5.6060403@sics.se> Content-Type: multipart/alternative; boundary="------------020804070606000905060503" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmplleLIzCtJLcpLzFFi42IRYrdT1w184hpmcOK9oMW0rVNZLV613mF2 YPJYsuQnk0fvsd9sAUxRXDYpqTmZZalF+nYJXBlzrtxmLdjsWPFryjf2Bsa3Bl2MnBwSAiYS /36+ZYSwxSQu3FvP1sXIxSEksJhJ4u27AywQzkZGifUvf0NlbjNJtHduYgdpERawk1i1dDob iC0iYCDx7/0yVhBbSCBc4snT28wgNpuAqsT0NS1MIDavgJrElq1zwXpZgOLf9q8GqxcViJF4 v2kVI0SNoMTJmU9YQGxOAXWJhYd+gfUyC4RJHLnwg3UCI/8sJGWzkKQgbFuJO3N3M0PY8hLN W2dD2boSi7atYEcWX8DItopRNiW3Sjc3MTOnODVZtzg5MS8vtUjXRC83s0QvNaV0EyMotDkl +XcwfjuodIhRgINRiYd3xwuXMCHWxLLiytxDjJIcTEqivOtOuoYJ8SXlp1RmJBZnxBeV5qQW H2KU4GBWEuENOQyU401JrKxKLcqHSUlzsCiJ8276wRciJJCeWJKanZpakFoEk5Xh4FCS4O1/ DNQoWJSanlqRlplTgpBm4uAEGc4DNNwPpIa3uCAxtzgzHSJ/ilFRSpw3/hFQQgAkkVGaB9cL Sj0Jbw+bvmIUB3pFmPckSBUPMG3Bdb8CGswENFhgEtjgkkSElFQDo9BGjtY236vWuS/XVz/+ vvtwyJPmfetOd+XYRlU81k/4cCvRxKxjzn9W7pufHyysca0o2fTepOWzw8p5my+Ezlv595Oa 5Z1+lrqw4Kz3KubH5z64/j6eO3Fdj5BxMIt209+dt79sFFTjcl8ZcvzW+o3Bc1e/f765f/Hs bas+JRS5pKhsdzo6P0iJpTgj0VCLuag4EQDqzbe7GAMAAA== Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Nov 2015 13:23:33 -0000 This is a multi-part message in MIME format. --------------020804070606000905060503 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit (non-chair opinion) Either A or C, with a preference to A. There's enough overlap in all the groups that I'm not worried about finding "the right expertise". Seriously, people, we all know each other, and many of us are in all three groups anyway. Saying there's a particular set of expertise in only one group is a red herring. Do you really think that there will be someone who will miss this conversation if it's done in the "wrong" place? Then make sure they get CC'd to a review. Of the three working groups, there are only four distinct chairs. I think this can be a quick document that simply re-uses or re-defines the JWT claims structure for CBOR. Since it will have a direct dependency on COSE, I have a mild preference for doing the work here in COSE even if it needs a quick recharter to accept the document. That way the two of them can more easily go through the IETF process hand in hand. I do think that doing it in the OAuth group would be a mistake, and I see no reason for it. This work has nothing to do with OAuth. A COSE token would need to have a non-binary encoding wrapper to be used inside of a plain OAuth protocol anyway, since OAuth is HTTP based. It's true that JWT was done in OAuth, but I think that was an arbitrary and ludicrous decision. It should have been done inside JOSE from the start, in my opinion, and I would rather we /learn /from the mistakes of the past rather than blindly repeat them. There's enough drive in the ACE group, and flexibility in their charter, that the work could easily be done there as well. And again, there's enough overlap between ACE and COSE that we would have appropriate conversations in either. However, that does create an arbitrary cross-group dependency. -- Justin On 11/13/2015 2:39 AM, Ludwig Seitz wrote: > On 2015-11-07 09:01, Justin Richer wrote: >> At the Yokohama meeting, the chairs agreed to do a consensus call >> regarding the adoption and placement of new work to define a COSE >> Token, analogous to the JWT from JOSE. In the room, there was a >> general sentiment of support for the work being done, with the wide >> adoption of JWT and its driving of JOSE being a common theme of >> precedent. What wasn’t clear is where the work should be done and to >> what end it should drive. The six positions we are asking the working >> group to consider and voice their support for are: > >> A) Define the COSE Token within the COSE working group along side the >> COSE Messages (and potentially COSE Auxiliary Algorithms) draft. >> B) Define the COSE Token inside the OAuth working group. >> C) Define the COSE Token inside the ACE working group. >> D) Don’t define the COSE Token anywhere. >> E) You need more information to decide. >> F) You don’t give a flying rat about the COSE Token.* >> > > > C) > > Both A) and B) would require rechartering, I believe we can get away > with the CWT in C) without rechartering. > > I think we need to have both ACE and OAuth expertise on this. > Furthermore we need to integrate this with the other ACE work, which > is why I think C) is the right choice. > > /Ludwig > > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --------------020804070606000905060503 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit (non-chair opinion)

Either A or C, with a preference to A.

There's enough overlap in all the groups that I'm not worried about finding "the right expertise". Seriously, people, we all know each other, and many of us are in all three groups anyway. Saying there's a particular set of expertise in only one group is a red herring. Do you really think that there will be someone who will miss this conversation if it's done in the "wrong" place? Then make sure they get CC'd to a review. Of the three working groups, there are only four distinct chairs.

I think this can be a quick document that simply re-uses or re-defines the JWT claims structure for CBOR. Since it will have a direct dependency on COSE, I have a mild preference for doing the work here in COSE even if it needs a quick recharter to accept the document. That way the two of them can more easily go through the IETF process hand in hand.

I do think that doing it in the OAuth group would be a mistake, and I see no reason for it. This work has nothing to do with OAuth. A COSE token would need to have a non-binary encoding wrapper to be used inside of a plain OAuth protocol anyway, since OAuth is HTTP based. It's true that JWT was done in OAuth, but I think that was an arbitrary and ludicrous decision. It should have been done inside JOSE from the start, in my opinion, and I would rather we learn from the mistakes of the past rather than blindly repeat them.

There's enough drive in the ACE group, and flexibility in their charter, that the work could easily be done there as well. And again, there's enough overlap between ACE and COSE that we would have appropriate conversations in either. However, that does create an arbitrary cross-group dependency.

 -- Justin

On 11/13/2015 2:39 AM, Ludwig Seitz wrote:
On 2015-11-07 09:01, Justin Richer wrote:
At the Yokohama meeting, the chairs agreed to do a consensus call
regarding the adoption and placement of new work to define a COSE
Token, analogous to the JWT from JOSE. In the room, there was a
general sentiment of support for the work being done, with the wide
adoption of JWT and its driving of JOSE being a common theme of
precedent. What wasn’t clear is where the work should be done and to
what end it should drive. The six positions we are asking the working
group to consider and voice their support for are:

A) Define the COSE Token within the COSE working group along side the COSE Messages (and potentially COSE Auxiliary Algorithms) draft.
B) Define the COSE Token inside the OAuth working group.
C) Define the COSE Token inside the ACE working group.
D) Don’t define the COSE Token anywhere.
E) You need more information to decide.
F) You don’t give a flying rat about the COSE Token.*



C)

Both A) and B) would require rechartering, I believe we can get away with the CWT in C) without rechartering.

I think we need to have both ACE and OAuth expertise on this. Furthermore we need to integrate this with the other ACE work, which is why I think C) is the right choice.

/Ludwig 



_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

--------------020804070606000905060503-- From nobody Fri Nov 13 06:09:26 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2D391A88F5 for ; Fri, 13 Nov 2015 06:09:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.55 X-Spam-Level: X-Spam-Status: No, score=-1.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l1A1dQ2AhetF for ; Fri, 13 Nov 2015 06:09:17 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42FFC1A88EA for ; Fri, 13 Nov 2015 06:09:17 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id tADE9DGl029677; Fri, 13 Nov 2015 15:09:13 +0100 (CET) Received: from nar.local (p5DC7F6AE.dip0.t-ipconnect.de [93.199.246.174]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3ny1r93SpYz2G8b; Fri, 13 Nov 2015 15:09:13 +0100 (CET) Message-ID: <5645EF07.5000603@tzi.org> Date: Fri, 13 Nov 2015 15:09:11 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: Justin Richer References: <564593B5.6060403@sics.se> <5645E448.7060706@mit.edu> In-Reply-To: <5645E448.7060706@mit.edu> X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Nov 2015 14:09:19 -0000 Justin Richer wrote: > Since it will have a direct dependency on COSE, I have a mild preference > for doing the work here in COSE even if it needs a quick recharter to > accept the document. Looking at the current proposal, I also see more need for COSE expertise to complete it than for ACE expertise. Of course, we do need the requirements for new labels from ACE if they are to be covered in the initial CWT document (and probably want to use the registry OAuth established). So, for me, A it is. Grüße, Carsten From nobody Sat Nov 14 01:25:49 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F3A31B5BBB for ; Sat, 14 Nov 2015 01:25:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.55 X-Spam-Level: X-Spam-Status: No, score=-1.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XL8z0asy83p9 for ; Sat, 14 Nov 2015 01:25:46 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88CD01B3744 for ; Sat, 14 Nov 2015 01:25:46 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id tAE9Pdrc018003; Sat, 14 Nov 2015 10:25:39 +0100 (CET) Received: from aung.tzi.org (p5B0DDA49.dip0.t-ipconnect.de [91.13.218.73]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3nyWVV6fFjz2FXh; Sat, 14 Nov 2015 10:25:38 +0100 (CET) From: Olaf Bergmann To: "Jim Schaad" References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> Date: Sat, 14 Nov 2015 10:25:38 +0100 In-Reply-To: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> (Jim Schaad's message of "Sat, 7 Nov 2015 14:39:41 -0800") Message-ID: <87egftszjh.fsf@aung.informatik.uni-bremen.de> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Nov 2015 09:25:48 -0000 "Jim Schaad" writes: > People keep telling me that they want to have a version of MACs that do n= ot > have a set of recipient information attached so that they can do direct > MACs. I keep asking for a use case where this makes sense. In all of the > use cases that I have been presented so far, a better answer is going to = be > to do an AEAD encrypted item rather than a MACed item. An example where this is useful is given in Section 3.7 of draft-bergmann-ace-dcaf-cose [1]. Here, the recipient structure is empty because CAM and C must be able to read the payload. Technically, you can make this work with an encrypted AEAD item as well but then, the payload information entirely goes into the AAD part because CAM and C must not know the secret that is being used for generating the MAC tag (they just forward the data to S). Of course, this is a requirement only in the cross-domain authorization scenario where C and S can be constrained and can have distinct owners. Where this is not considered an issue, you can easily go with COSE_encryptData and AEAD. [1] https://tools.ietf.org/html/draft-bergmann-ace-dcaf-cose-00#section-3.7 Gr=C3=BC=C3=9Fe Olaf From nobody Sat Nov 14 11:56:53 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D27501B2AC4 for ; Sat, 14 Nov 2015 11:56:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wYIIkzXFXfh1 for ; Sat, 14 Nov 2015 11:56:50 -0800 (PST) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4BB0E1B2AC3 for ; Sat, 14 Nov 2015 11:56:50 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id 78FBE38F1C; Sat, 14 Nov 2015 11:56:49 -0800 (PST) From: "Jim Schaad" To: "'Olaf Bergmann'" References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> <87egftszjh.fsf@aung.informatik.uni-bremen.de> In-Reply-To: <87egftszjh.fsf@aung.informatik.uni-bremen.de> Date: Sat, 14 Nov 2015 11:53:54 -0800 Message-ID: <018301d11f16$31d46640$957d32c0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQIfvpSiX18QdRwxvFtmOBjrli/sGAKQCQ7XneouXzA= Content-Language: en-us Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Nov 2015 19:56:52 -0000 I just read through the section referenced and did not see any reason = for C and CAM to have access to the content. I will try and read the = entire document later today as that might describe the reasoning. However, you are saying that it is ok for incorrect content to be in = this message as far as C and CAM are concerned? Jim > -----Original Message----- > From: Olaf Bergmann [mailto:bergmann@tzi.org] > Sent: Saturday, November 14, 2015 1:26 AM > To: Jim Schaad > Cc: cose@ietf.org > Subject: Re: [COSE] MAC with no recipient structures >=20 > "Jim Schaad" writes: >=20 > > People keep telling me that they want to have a version of MACs that > > do not have a set of recipient information attached so that they can > > do direct MACs. I keep asking for a use case where this makes = sense. > > In all of the use cases that I have been presented so far, a better > > answer is going to be to do an AEAD encrypted item rather than a = MACed > item. >=20 > An example where this is useful is given in Section 3.7 of = draft-bergmann-ace- > dcaf-cose [1]. Here, the recipient structure is empty because CAM and = C must be > able to read the payload. Technically, you can make this work with an = encrypted > AEAD item as well but then, the payload information entirely goes into = the AAD > part because CAM and C must not know the secret that is being used for > generating the MAC tag (they just forward the data to S). >=20 > Of course, this is a requirement only in the cross-domain = authorization scenario > where C and S can be constrained and can have distinct owners. > Where this is not considered an issue, you can easily go with = COSE_encryptData > and AEAD. >=20 > [1] = https://tools.ietf.org/html/draft-bergmann-ace-dcaf-cose-00#section-3.7 >=20 > Gr=C3=BC=C3=9Fe > Olaf From nobody Sat Nov 14 16:08:52 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ABCC1B2E57 for ; Sat, 14 Nov 2015 16:08:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YQijobisC-dh for ; Sat, 14 Nov 2015 16:08:49 -0800 (PST) Received: from mail-qk0-x22e.google.com (mail-qk0-x22e.google.com [IPv6:2607:f8b0:400d:c09::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0D711B2E54 for ; Sat, 14 Nov 2015 16:08:48 -0800 (PST) Received: by qkao63 with SMTP id o63so82428687qka.2 for ; Sat, 14 Nov 2015 16:08:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ve7jtb_com.20150623.gappssmtp.com; s=20150623; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=8uHug53n6zOtKop7UNzP2OgvTJ3IIG/2Mum/zBwbH1w=; b=Ozw/CWvjjD+4JBizz09syCx7jIpOqpa5FBqUXplo3BkiY9h3mXLeRf9k1Zwrwute9c sId9JrfsyJ+WrYhjwG/pTTNQrNoBh4fxWPFoaZ1gQ6RkHuseCxXQCYpiSbHcmDWpRiyr fFakXApVqwZTp7pg88cxpzTF/R/FOaFkHCGOk0Kfcs5i4kGreRYN+9eO4afZtNa61R3n Yjok7SsjBam9kwmojJco3rYncNZ8qBeJ4Sq22t4eOG/ddYwzesfApoLhbu2eAkRKW5IO Iuaa8ndCRnQUjvg+oi8IglCwWYHU3peuAxUd/nn8L2cnV0aNMKfLq7WMMwqbXBwWbBCt paLg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=8uHug53n6zOtKop7UNzP2OgvTJ3IIG/2Mum/zBwbH1w=; b=BzPHm7+D8CpyAsdn+bQvoLcvlPoXTtRmSCtQa85AVUG2YNxOuxCOoxe/wC8Hwq7qv0 t1bsyWWDayqMe1JLjQOEBzmIpYOKL5ZB/djVsUIRKG45cB8JsbdruJv3x5qx7NdIrUIM bThrRhbf/qR1H1/PQcnFUZLT6sDaFnCX6zG9H67x1cJvp/2KmLjIlCcoDVPr1sBsR8/v S/F2OcF4DeU60fsWxHk/cr5yhLWfFQw4ltmeCr73BxAB9Skee/Iyv2+mwIlFr07rzL9t B4VKm17YgBiEwU1T+Ffz62uu5PonOyRo7pzHcpqySsYk1yCnNvcgoLBALWbpDn8yJbRL InZQ== X-Gm-Message-State: ALoCoQnD81AOwRSqM6BSo2elPbSVo7zA8nqWM9fnnDdzPn3RJOQcqA+ebk85tCSlhgt3QhpCF+BH X-Received: by 10.55.15.204 with SMTP id 73mr29616269qkp.60.1447546127828; Sat, 14 Nov 2015 16:08:47 -0800 (PST) Received: from [192.168.1.216] ([191.115.106.51]) by smtp.gmail.com with ESMTPSA id z51sm4409519qgd.36.2015.11.14.16.08.44 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sat, 14 Nov 2015 16:08:46 -0800 (PST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: John Bradley In-Reply-To: Date: Sat, 14 Nov 2015 21:08:38 -0300 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Justin Richer X-Mailer: Apple Mail (2.2104) Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Nov 2015 00:08:51 -0000 My preference is B then A. We are rechartering OAuth anyway. We did not do JOSE in the OAuth WG = but were responsible for the security token format. The core of CWT should be in OAuth using the existing JWT registry and = extensions done in ACE. John B. > On Nov 7, 2015, at 5:01 AM, Justin Richer wrote: >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the adoption and placement of new work to define a COSE Token, = analogous to the JWT from JOSE. In the room, there was a general = sentiment of support for the work being done, with the wide adoption of = JWT and its driving of JOSE being a common theme of precedent. What = wasn=E2=80=99t clear is where the work should be done and to what end it = should drive. The six positions we are asking the working group to = consider and voice their support for are: >=20 > A) Define the COSE Token within the COSE working group along side the = COSE Messages (and potentially COSE Auxiliary Algorithms) draft. > B) Define the COSE Token inside the OAuth working group. > C) Define the COSE Token inside the ACE working group. > D) Don=E2=80=99t define the COSE Token anywhere. > E) You need more information to decide. > F) You don=E2=80=99t give a flying rat about the COSE Token.* >=20 > The consensus call will remain open for two weeks from today, closing = on November 21, 2015; at which time, hopefully we will have a clear = answer and direction to point this work. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sun Nov 15 23:15:30 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D1891A0093; Sun, 15 Nov 2015 23:15:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.1 X-Spam-Level: X-Spam-Status: No, score=0.1 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2FrID0aTctJT; Sun, 15 Nov 2015 23:15:26 -0800 (PST) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DCA111A0094; Sun, 15 Nov 2015 23:15:26 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 13FD62CA1B; Sun, 15 Nov 2015 23:15:26 -0800 (PST) From: "Jim Schaad" To: Date: Sun, 15 Nov 2015 23:12:30 -0800 Message-ID: <001601d1203e$2a919460$7fb4bd20$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdEgOw8gVsXNCFnCS9SjCitCtQEMVA== Content-Language: en-us Archived-At: Cc: cose@ietf.org Subject: [COSE] How COSE items are identified X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Nov 2015 07:15:28 -0000 We seem to have a potential problem for how COSE items are identified. Initially, we used an integer inside of the structure to identify it. That is how the current ACE documents are written. This uses a single byte. At the request of Carsten, we moved from doing this to using a tag at the front of the structure. Carsten believes that this can be done with a tag that is in the two byte range when encoded (tag, length=1, tag value). Part of the reason that I agreed was that this was not really being used at the time by the ACE documents. If one is almost always doing encrypted, then one could encode that structure w/o the tag and do the other three structures with the tag. This would probably be ok as it would mostly use the smallest tagging (none) when needed the most and use larger tagging (2 bytes) for the rest of the structures. Alternatively, we could modify the document to request the assignment of tags in the one byte range for the most common structures and two bytes for the less common structures (and have arguments about which is which). Alternatively, we could revert back to putting an integer tag inside of the array structure. Comments on this are requested. Jim From nobody Mon Nov 16 07:17:17 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B1421A044E; Mon, 16 Nov 2015 07:17:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.786 X-Spam-Level: X-Spam-Status: No, score=-4.786 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V7CXVOuFBOzQ; Mon, 16 Nov 2015 07:17:13 -0800 (PST) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3B7F1A0423; Mon, 16 Nov 2015 07:17:12 -0800 (PST) X-AuditID: 12074424-f79216d00000156e-72-5649f377f047 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 05.1A.05486.773F9465; Mon, 16 Nov 2015 10:17:11 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id tAGFH5wl032127; Mon, 16 Nov 2015 10:17:06 -0500 Received: from [192.168.0.104] (ip-53-040.atvci.net [209.240.53.40]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tAGFH2OO030677 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 16 Nov 2015 10:17:04 -0500 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Justin Richer In-Reply-To: <001601d1203e$2a919460$7fb4bd20$@augustcellars.com> Date: Mon, 16 Nov 2015 09:17:02 -0600 Content-Transfer-Encoding: quoted-printable Message-Id: <82992675-FEB2-43B8-8DA4-C0B2915AB2C1@mit.edu> References: <001601d1203e$2a919460$7fb4bd20$@augustcellars.com> To: Jim Schaad X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrDIsWRmVeSWpSXmKPExsUixCmqrFv+2TPM4NhMEYvv33qYLaZtncpq sXr6dzYHZo+Nc6azeSxZ8pMpgCmKyyYlNSezLLVI3y6BK2PmsX+sBfMFK771LGFuYLzD28XI ySEhYCLx6udBVghbTOLCvfVsXYxcHEICi5kk3v45xAzhbGSU6Nx2iBHCOcgk0fH6CgtIC7OA usSfeZeYQWxeAT2JV7cug40SFjCU2HfyARuIzSagKjF9TQsTiM0p4CCxvL2VvYuRg4MFKL7r vz6IySwgL3HkfyXERG2JZQtfQ020kjj2divYJiEBe4nDDefYQWwRoK1bV99kgjhaVmL370dM ExgFZyE5aBaSg2YhGbuAkXkVo2xKbpVubmJmTnFqsm5xcmJeXmqRrrlebmaJXmpK6SZGUCCz u6jsYGw+pHSIUYCDUYmH98QT9zAh1sSy4srcQ4ySHExKoryPP3mGCfEl5adUZiQWZ8QXleak Fh9ilOBgVhLh7ToNlONNSaysSi3Kh0lJc7AoifNu+sEXIiSQnliSmp2aWpBaBJOV4eBQkuDd BDJUsCg1PbUiLTOnBCHNxMEJMpwHaPhFkBre4oLE3OLMdIj8KUZFKXFeHpCEAEgiozQPrheU aC5+MNV4xSgO9Iow7/+PQFU8wCQF1/0KaDAT0OATDWCDSxIRUlINjH78Msprcj9s/rUs32L2 gm/Ne/8tcdlcsGOvvcu/ZkUbGeY5H4NvvnlxxTdAbMOXDRV7PX8ysgn5rv8+0/31478Vp51D 5Z3eiRRMvcHtMb+c03zvvhl7uL6y/ur/u36Py+PDb+9v2Lu+2P1KxfUmyYOsyp9SVl4/kmSg kreYQVDwXkVt6W3+dHslluKMREMt5qLiRADIdiq3DwMAAA== Archived-At: Cc: cose@ietf.org, Ace@ietf.org Subject: Re: [COSE] How COSE items are identified X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Nov 2015 15:17:14 -0000 I think it=E2=80=99s premature to assume one structure is used =E2=80=9Cmo= st of the time=E2=80=9D as opposed to other structures and to optimize = COSE for that case. Though if we take a cue from JOSE, it=E2=80=99s = asymmetric signing, then MAC. Those might be reversed as I don=E2=80=99t = have concrete numbers on this. Public keys are probably next. Encryption = is far behind in my experience with JOSE. My point is that I don=E2=80=99t think we can pick any one structure as = =E2=80=9Cmost common=E2=80=9D yet as we=E2=80=99re extrapolating from = exactly zero real-world examples. =E2=80=94 Justin (as non-chair) > On Nov 16, 2015, at 1:12 AM, Jim Schaad = wrote: >=20 > We seem to have a potential problem for how COSE items are identified. >=20 > Initially, we used an integer inside of the structure to identify it. = That > is how the current ACE documents are written. This uses a single byte. >=20 > At the request of Carsten, we moved from doing this to using a tag at = the > front of the structure. Carsten believes that this can be done with a = tag > that is in the two byte range when encoded (tag, length=3D1, tag = value). Part > of the reason that I agreed was that this was not really being used at = the > time by the ACE documents. =20 >=20 > If one is almost always doing encrypted, then one could encode that > structure w/o the tag and do the other three structures with the tag. = This > would probably be ok as it would mostly use the smallest tagging = (none) when > needed the most and use larger tagging (2 bytes) for the rest of the > structures. >=20 > Alternatively, we could modify the document to request the assignment = of > tags in the one byte range for the most common structures and two = bytes for > the less common structures (and have arguments about which is which). >=20 > Alternatively, we could revert back to putting an integer tag inside = of the > array structure. >=20 > Comments on this are requested. >=20 > Jim >=20 >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Mon Nov 16 14:39:22 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 613981A89A7 for ; Mon, 16 Nov 2015 14:39:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bRPk-dsJKzQO for ; Mon, 16 Nov 2015 14:39:19 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0747.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:747]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC33E1A899A for ; Mon, 16 Nov 2015 14:39:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=xdGkGrfbgMH2Onp2zEQ4NrHWjpDVqGsu7KinybdevEc=; b=AzWBHVJLpBXWohxnteYTjGR63cXRfxrX8N/DjhfskB84zIIIxei8YqAD/wQEpx5uR0FaiYidAMgRunJZAoeONmzOIJBt8VId0bXP0FZXOTY4GhEJQOUUDFXzenNrRPkPHOSHzz7j+tZzebpRnWuP7k3iiDA9yTcVRMt8073X7B4= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB444.namprd03.prod.outlook.com (10.141.141.154) with Microsoft SMTP Server (TLS) id 15.1.325.17; Mon, 16 Nov 2015 22:38:57 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0325.003; Mon, 16 Nov 2015 22:38:57 +0000 From: Mike Jones To: Jim Schaad , "cose@ietf.org" Thread-Topic: [COSE] MAC with no recipient structures Thread-Index: AdEZrBdSSIa9OxvISLeJdU4BkqsMwwHEqn+A Date: Mon, 16 Nov 2015 22:38:56 +0000 Message-ID: References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> In-Reply-To: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:7::30f] x-microsoft-exchange-diagnostics: 1; BY2PR03MB444; 5:igy2jdRzxr11zBaRpFRFym2MnzPKJcJxm1akMgz4MRLDdd64ocLBIS1fR2kS5uMxQ3b4cQkOE0S385ShdU2UvlaawpNEGzRFQ68z9bNoTGwZ3bWwGVttA1zcYAetOvD3GyE3pd4CYqs4LurpFIUlUg==; 24:2bnZ8PVl/0emTyz49WMbGUff1R75z70bThd2DMuu+D/yLejOsw8BgThEeSo5/wV0yOuTL8smzI9ug0+dC8cJtYOZ+Sr8n8NsHCOtP6QHFmM=; 20:pkvYsKanJ6Q2T8ERADi+QoCT86COjopXy4byTnlIi0Xi58cGy+I6ZecojBCvamZZOV0rrHGJG3Pw4+qIv4sw4A== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB444; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(10201501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB444; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB444; x-forefront-prvs: 0762FFD075 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(189002)(377454003)(13464003)(8990500004)(40100003)(11100500001)(87936001)(2501003)(74316001)(122556002)(50986999)(76576001)(102836002)(106356001)(92566002)(5001960100002)(77096005)(54356999)(81156007)(15975445007)(97736004)(19580405001)(33656002)(19580395003)(5003600100002)(5005710100001)(10290500002)(76176999)(189998001)(586003)(99286002)(2900100001)(86612001)(101416001)(2950100001)(5008740100001)(5007970100001)(10400500002)(107886002)(86362001)(5001770100001)(5890100001)(5002640100001)(10090500001)(105586002)(5004730100002)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB444; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Nov 2015 22:38:56.9284 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB444 Archived-At: Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Nov 2015 22:39:21 -0000 It should be up to the application whether a MAC operation or an authentica= ted encryption operation is the best choice for the application. COSE need= s to simply and efficiently support both, giving the application that choic= e. One use case would be a CBOR mapping of OpenID Connect login for IoT usage = - replacing the JWT-based ID Token with a CWT-based ID Token. This would o= ften be used with symmetric crypto, where per RP/IdP symmetric HMAC keys ar= e employed. The ID Token (containing information about the authentication = that occurred) would use direct HMAC. -- Mike -----Original Message----- From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Jim Schaad Sent: Saturday, November 07, 2015 2:40 PM To: cose@ietf.org Subject: [COSE] MAC with no recipient structures People keep telling me that they want to have a version of MACs that do not= have a set of recipient information attached so that they can do direct MA= Cs. I keep asking for a use case where this makes sense. In all of the us= e cases that I have been presented so far, a better answer is going to be t= o do an AEAD encrypted item rather than a MACed item. The scenario that wants this is going to be: Alice sends data to Bob in such a way that Bob can authenticate the data. Eve needs to be able to read the data in transit, without knowing if the me= ssage contains data or misinformation and will act on the message as if it = were data. The difference in message size between MAC and Encryption is going to be mi= nimal, at most a few bytes. The execution difference is going to be a few = extra encryption operations. What use cases exist for this where encryption is not a better security ans= wer anyway. Jim _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose From nobody Mon Nov 16 17:23:57 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 362B81A89FA for ; Mon, 16 Nov 2015 17:23:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e9Vrdfqh2r-Y for ; Mon, 16 Nov 2015 17:23:55 -0800 (PST) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 793FE1A89F9 for ; Mon, 16 Nov 2015 17:23:52 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id DD48D2C9C5; Mon, 16 Nov 2015 17:23:51 -0800 (PST) From: "Jim Schaad" To: "'Mike Jones'" , References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> In-Reply-To: Date: Mon, 16 Nov 2015 17:21:00 -0800 Message-ID: <010801d120d6$381c3d40$a854b7c0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQIfvpSiX18QdRwxvFtmOBjrli/sGAKSUBmrne2coTA= Content-Language: en-us Archived-At: Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Nov 2015 01:23:57 -0000 For this case, what is the benefit that you see for favoring HMAC over AES-GCM? Jim > -----Original Message----- > From: Mike Jones [mailto:Michael.Jones@microsoft.com] > Sent: Monday, November 16, 2015 2:39 PM > To: Jim Schaad ; cose@ietf.org > Subject: RE: [COSE] MAC with no recipient structures > > It should be up to the application whether a MAC operation or an authenticated > encryption operation is the best choice for the application. COSE needs to > simply and efficiently support both, giving the application that choice. > > One use case would be a CBOR mapping of OpenID Connect login for IoT usage - > replacing the JWT-based ID Token with a CWT-based ID Token. This would > often be used with symmetric crypto, where per RP/IdP symmetric HMAC keys > are employed. The ID Token (containing information about the authentication > that occurred) would use direct HMAC. > > -- Mike > > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Jim Schaad > Sent: Saturday, November 07, 2015 2:40 PM > To: cose@ietf.org > Subject: [COSE] MAC with no recipient structures > > People keep telling me that they want to have a version of MACs that do not > have a set of recipient information attached so that they can do direct MACs. I > keep asking for a use case where this makes sense. In all of the use cases that I > have been presented so far, a better answer is going to be to do an AEAD > encrypted item rather than a MACed item. > > The scenario that wants this is going to be: > > Alice sends data to Bob in such a way that Bob can authenticate the data. > Eve needs to be able to read the data in transit, without knowing if the message > contains data or misinformation and will act on the message as if it were data. > > The difference in message size between MAC and Encryption is going to be > minimal, at most a few bytes. The execution difference is going to be a few > extra encryption operations. > > What use cases exist for this where encryption is not a better security answer > anyway. > > Jim > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Mon Nov 16 17:33:57 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDAC41AC43A for ; Mon, 16 Nov 2015 17:33:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e3dOqDJpV9NV for ; Mon, 16 Nov 2015 17:33:52 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0111.outbound.protection.outlook.com [207.46.100.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D449C1AC439 for ; Mon, 16 Nov 2015 17:33:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=VHiV3fp57WgmGHiI0JzvOHYlBXbV8P7j+FrwVK/laKw=; b=U8P529rTKgQTE7VdULw9m9MF4awxlq/P2ks81SxbPXxFjSW8SjQXHbxBN1KoxyNS7vI2W71qTSjeh4z8P8GSoo1x7M3SIXdBFcUV2KNuatcFoFb+QbD2GQR+124RRWrkD0gIJqAmhcIWQoNzO5B3949gpjT13XyhHsWofHU1+Js= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB443.namprd03.prod.outlook.com (10.141.141.152) with Microsoft SMTP Server (TLS) id 15.1.325.17; Tue, 17 Nov 2015 01:33:50 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0325.003; Tue, 17 Nov 2015 01:33:49 +0000 From: Mike Jones To: Jim Schaad , "cose@ietf.org" Thread-Topic: [COSE] MAC with no recipient structures Thread-Index: AdEZrBdSSIa9OxvISLeJdU4BkqsMwwHEqn+AAAXdmQAAAD7yEA== Date: Tue, 17 Nov 2015 01:33:49 +0000 Message-ID: References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> <010801d120d6$381c3d40$a854b7c0$@augustcellars.com> In-Reply-To: <010801d120d6$381c3d40$a854b7c0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:b::30f] x-microsoft-exchange-diagnostics: 1; BY2PR03MB443; 5:7vX99U8KVhQWXlQspqegvcJn6/fNREwQLPj2ad36/N9VGcLFjX0z+9tm/3hyY0A+U4MU5OsiMD9KKbcdPq+vu56VLUnwWeVNUtMJmIgJIdohMGD3U7l34hEUolwRQOM2WWW2ZW9OGKkaXre5UMClZw==; 24:iHtNd+HoRTYia/x6FSa8UbgBtUt+ui2XSYgZejoIsMaRnXuu9cTr1J+CHngVWsuhQjARtKavhduxYBlDkXiCcqzU/L0t3wN2YgvHksp1hZc=; 20:oG6Ghsy9MaA8WMmDRG+H8wf62hIDVecIaomo0q+P1G9o6i3YXn2rvAfR3xr0YYO1c1MjyuKjgzMrKIsXkqPb1w== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB443; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(520078)(5005006)(8121501046)(3002001)(10201501046)(61426024)(61427024); SRVR:BY2PR03MB443; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB443; x-forefront-prvs: 07630F72AD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(199003)(377454003)(13464003)(189002)(101416001)(10400500002)(81156007)(2950100001)(87936001)(2501003)(107886002)(50986999)(92566002)(76176999)(19580405001)(15395725005)(33656002)(106356001)(8990500004)(10090500001)(2900100001)(5890100001)(105586002)(5005710100001)(15975445007)(10290500002)(102836002)(77096005)(99286002)(122556002)(76576001)(5001920100001)(5008740100001)(86612001)(54356999)(5003600100002)(189998001)(19580395003)(5004730100002)(74316001)(5001960100002)(40100003)(5001770100001)(586003)(5002640100001)(5007970100001)(86362001)(97736004)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB443; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Nov 2015 01:33:49.5088 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB443 Archived-At: Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Nov 2015 01:33:56 -0000 For starters - there's no need for encryption support. Also, the ID Token = claims are viewable by intermediaries. But I really think you have the question backwards. Why not allow applicat= ions the choice of HMAC? Unless there's a compelling reason not to, COSE s= hould do so - particularly in light of the JOSE experience in which no-expl= icit-recipient HMAC is second-most used behind digital signatures, with enc= ryption being a distant third - data also cited recently by Justin. If you= look at the set of JOSE libraries represented at http://openid.net/develop= ers/libraries/#jwt, you'll find that most, including Microsoft's current pr= oduction JOSE libraries, don't support encryption, because they don't have = a need for it. I see no reason not to allow the same implementation choices by COSE develo= pers. -- Mike -----Original Message----- From: Jim Schaad [mailto:ietf@augustcellars.com]=20 Sent: Monday, November 16, 2015 5:21 PM To: Mike Jones; cose@ietf.org Subject: RE: [COSE] MAC with no recipient structures For this case, what is the benefit that you see for favoring HMAC over AES-= GCM? Jim > -----Original Message----- > From: Mike Jones [mailto:Michael.Jones@microsoft.com] > Sent: Monday, November 16, 2015 2:39 PM > To: Jim Schaad ; cose@ietf.org > Subject: RE: [COSE] MAC with no recipient structures >=20 > It should be up to the application whether a MAC operation or an authenticated > encryption operation is the best choice for the application. COSE=20 > needs to > simply and efficiently support both, giving the application that choice. >=20 > One use case would be a CBOR mapping of OpenID Connect login for IoT=20 > usage - > replacing the JWT-based ID Token with a CWT-based ID Token. This=20 > would often be used with symmetric crypto, where per RP/IdP symmetric=20 > HMAC keys are employed. The ID Token (containing information about=20 > the authentication > that occurred) would use direct HMAC. >=20 > -- Mike >=20 > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Jim Schaad > Sent: Saturday, November 07, 2015 2:40 PM > To: cose@ietf.org > Subject: [COSE] MAC with no recipient structures >=20 > People keep telling me that they want to have a version of MACs that=20 > do not > have a set of recipient information attached so that they can do=20 > direct MACs. I > keep asking for a use case where this makes sense. In all of the use cases that I > have been presented so far, a better answer is going to be to do an=20 > AEAD encrypted item rather than a MACed item. >=20 > The scenario that wants this is going to be: >=20 > Alice sends data to Bob in such a way that Bob can authenticate the data. > Eve needs to be able to read the data in transit, without knowing if=20 > the message > contains data or misinformation and will act on the message as if it=20 > were data. >=20 > The difference in message size between MAC and Encryption is going to=20 > be minimal, at most a few bytes. The execution difference is going to=20 > be a few > extra encryption operations. >=20 > What use cases exist for this where encryption is not a better=20 > security answer > anyway. >=20 > Jim >=20 >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Nov 17 09:34:19 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9FA61A6EE6 for ; Tue, 17 Nov 2015 09:34:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xe4cuxVj8BqI for ; Tue, 17 Nov 2015 09:34:16 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84C9A1A6EE2 for ; Tue, 17 Nov 2015 09:34:15 -0800 (PST) X-AuditID: c1b4fb2d-f79626d000004282-af-564b6515f8e5 Received: from ESESSHC016.ericsson.se (Unknown_Domain [153.88.183.66]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 05.19.17026.5156B465; Tue, 17 Nov 2015 18:34:13 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.32]) by ESESSHC016.ericsson.se ([153.88.183.66]) with mapi id 14.03.0248.002; Tue, 17 Nov 2015 18:34:13 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: 'Justin Richer' , "cose@ietf.org" Thread-Topic: [COSE] Consensus Call: Adoption of the COSE Token Thread-Index: AQHRGTKYft5ujcEK4Ey9G8NoRi4OuJ6Q1nWAgAKWwoCADRy6gA== Date: Tue, 17 Nov 2015 17:34:12 +0000 Message-ID: References: <04de01d1198c$d02cae40$70860ac0$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.150] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprPIsWRmVeSWpSXmKPExsUyM2K7k65oqneYwYM7RhbTtk5ltdhw7SWr A5PHkiU/mTyazhxlDmCK4rJJSc3JLEst0rdL4Mo4c+gIe8EmxYrrc0obGI8odDFyckgImEg8 aJrNBGGLSVy4t56ti5GLQ0jgMKPE7V3TWCCcxYwS1+/0MINUsQm4SDxoeATWISLgJvH3IUS3 sICdxKql09kg4vYSF6dMZ4GwnSQ271rMCGKzCKhK7Fu3BizOK2Ah0dq1BGrbfEaJlX13wBZw ClhKbN+zAcxmBDrp+6k1YAuYBcQlbj2ZD3WqgMSSPeeZIWxRiZeP/7GC2KICehIrrzexQcSV JFZsvwS0mAOoV1Ni/S59iDHWEtdOzmWEsBUlpnQ/ZIe4R1Di5MwnLBMYxWch2TYLoXsWku5Z SLpnIelewMi6ilG0OLW4ODfdyFgvtSgzubg4P08vL7VkEyMw2g5u+a27g3H1a8dDjAIcjEo8 vAUXvMKEWBPLiitzDzFKcDArifByWnmHCfGmJFZWpRblxxeV5qQWH2KU5mBREudtYXoQKiSQ nliSmp2aWpBaBJNl4uCUamBM3bn4/7E/krP2cTyxV/x3RNdlcdGFTvnnKqav37GJ3E9Tfi7e 88L3XOLhln9x6Sbsjw6Jn80//CWZe+cd7cyZ7uuPFgY0HDq6ZXbA/9WW7L9caxkqc/a2VG25 vsD1+O6oT9mr7BY5G6s16jak2ymXJVq8+Rt9e07Rg+3VT3mX3lvA2MibeDpUiaU4I9FQi7mo OBEAY0bweLICAAA= Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Nov 2015 17:34:17 -0000 SSB3b3VsZCBsaWtlIHRvIHdpdGhkcmF3IG15IHByZXZpb3VzIHZvdGUuIFdpdGggdGhlIGFzc3Vt cHRpb24gdGhhdCBDV1QgaXMNCmRlZmluZWQgYXMgYSAxLTEgbWFwcGluZyBvZiBKV1QgKHdoaWNo IGlzIG5vdCBob3cgaXQgd2FzIGRlZmluZWQgaW4gdGhlDQpyZWZlcmVuY2UgYmVsb3cpIEkgZG9u 4oCZdCBoYXZlIGEgc3Ryb25nIG9waW5pb24gYWJvdXQgd2hlcmUgaXQgaXMgZGVmaW5lZC4NCkJ1 dCBBQ0Utc3BlY2lmaWMgY2xhaW1zIG9mIGEgSldUL0NXVCAoc3VjaCBhcyBELjEuMTApIHNob3Vs ZCBiZSBkZWZpbmVkIGluDQpBQ0UuIEkgYmVsaWV2ZSB0aGUgbGF0dGVyIHBvaW50IG9mIHZpZXcg YWxpZ25zIHdpdGggdGhhdCBleHByZXNzZWQgYnkNCm90aGVycy4NCg0KR8O2cmFuDQoNCg0KT24g MjAxNS0xMS0wOSAxMDoyMCwgIkfDtnJhbiBTZWxhbmRlciIgPGdvcmFuLnNlbGFuZGVyQGVyaWNz c29uLmNvbT4gd3JvdGU6DQoNCj5JIHZvdGUgZm9yIEMuIEl0IHdvdWxkIGJlIGdvb2QgaWYgdGhp cyB3b3JrIGNvdWxkIGJlIGNhcnJpZWQgb3V0IHdoZXJlDQo+dGhlcmUgaXMgYm90aCBPQXV0aCBj b21wZXRlbmNlIGFuZCBjb25zdHJhaW5lZCBub2RlIG5ldHdvcmsgY29tcGV0ZW5jZS4gSQ0KPmJl bGlldmUgQUNFIGNvdWxkIGJlIGEgbWF0Y2ggaGVyZSBzaW5jZSBzdWNoIGNvbXBldGVuY2VzIHdp bGwgYW55d2F5IGJlDQo+cmVxdWlyZWQgdG8gZXZhbHVhdGUNCj4NCj5odHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1zZWl0ei1hY2Utb2F1dGgtYXV0aHovDQo+DQo+DQo+d2hp Y2ggaXMgdGhlIHByZWZlcnJlZCBzdGFydGluZyBwb2ludCBmb3IgYSBzb2x1dGlvbiBhY2NvcmRp bmcgdG8gdGhlIGYyZg0KPm1lZXRpbmcuIFRoZXJlIGlzIGFscmVhZHkgc29tZSB0ZXh0IG9uIOKA nENCT1IgV2ViIFRva2VuIiBpbiBhcHBlbmRpeCBELg0KPg0KPkfDtnJhbg0KPg0KPg0KPk9uIDIw MTUtMTEtMDcgMTk6NDcsICJKaW0gU2NoYWFkIiA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4gd3Jv dGU6DQo+DQo+PkVpdGhlciBCIG9yIEMuDQo+Pg0KPj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tDQo+Pj4gRnJvbTogQ09TRSBbbWFpbHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVo YWxmIE9mIEp1c3RpbiBSaWNoZXINCj4+PiBTZW50OiBTYXR1cmRheSwgTm92ZW1iZXIgMDcsIDIw MTUgMTI6MDIgQU0NCj4+PiBUbzogY29zZUBpZXRmLm9yZw0KPj4+IFN1YmplY3Q6IFtDT1NFXSBD b25zZW5zdXMgQ2FsbDogQWRvcHRpb24gb2YgdGhlIENPU0UgVG9rZW4NCj4+PiANCj4+PiBBdCB0 aGUgWW9rb2hhbWEgbWVldGluZywgdGhlIGNoYWlycyBhZ3JlZWQgdG8gZG8gYSBjb25zZW5zdXMg Y2FsbA0KPj4+cmVnYXJkaW5nDQo+Pj4gdGhlIGFkb3B0aW9uIGFuZCBwbGFjZW1lbnQgb2YgbmV3 IHdvcmsgdG8gZGVmaW5lIGEgQ09TRSBUb2tlbiwNCj4+PmFuYWxvZ291cyB0bw0KPj4+IHRoZSBK V1QgZnJvbSBKT1NFLiBJbiB0aGUgcm9vbSwgdGhlcmUgd2FzIGEgZ2VuZXJhbCBzZW50aW1lbnQg b2YNCj4+PnN1cHBvcnQgZm9yDQo+Pj4gdGhlIHdvcmsgYmVpbmcgZG9uZSwgd2l0aCB0aGUgd2lk ZSBhZG9wdGlvbiBvZiBKV1QgYW5kIGl0cyBkcml2aW5nIG9mDQo+Pj5KT1NFDQo+Pj4gYmVpbmcg YSBjb21tb24gdGhlbWUgb2YgcHJlY2VkZW50LiBXaGF0IHdhc27igJl0IGNsZWFyIGlzIHdoZXJl IHRoZSB3b3JrDQo+Pj4gc2hvdWxkIGJlIGRvbmUgYW5kIHRvIHdoYXQgZW5kIGl0IHNob3VsZCBk cml2ZS4gVGhlIHNpeCBwb3NpdGlvbnMgd2UNCj4+PmFyZSBhc2tpbmcNCj4+PiB0aGUgd29ya2lu ZyBncm91cCB0byBjb25zaWRlciBhbmQgdm9pY2UgdGhlaXIgc3VwcG9ydCBmb3IgYXJlOg0KPj4+ IA0KPj4+IEEpIERlZmluZSB0aGUgQ09TRSBUb2tlbiB3aXRoaW4gdGhlIENPU0Ugd29ya2luZyBn cm91cCBhbG9uZyBzaWRlIHRoZQ0KPj4+Q09TRQ0KPj4+IE1lc3NhZ2VzIChhbmQgcG90ZW50aWFs bHkgQ09TRSBBdXhpbGlhcnkgQWxnb3JpdGhtcykgZHJhZnQuDQo+Pj4gQikgRGVmaW5lIHRoZSBD T1NFIFRva2VuIGluc2lkZSB0aGUgT0F1dGggd29ya2luZyBncm91cC4NCj4+PiBDKSBEZWZpbmUg dGhlIENPU0UgVG9rZW4gaW5zaWRlIHRoZSBBQ0Ugd29ya2luZyBncm91cC4NCj4+PiBEKSBEb27i gJl0IGRlZmluZSB0aGUgQ09TRSBUb2tlbiBhbnl3aGVyZS4NCj4+PiBFKSBZb3UgbmVlZCBtb3Jl IGluZm9ybWF0aW9uIHRvIGRlY2lkZS4NCj4+PiBGKSBZb3UgZG9u4oCZdCBnaXZlIGEgZmx5aW5n IHJhdCBhYm91dCB0aGUgQ09TRSBUb2tlbi4qDQo+Pj4gDQo+Pj4gVGhlIGNvbnNlbnN1cyBjYWxs IHdpbGwgcmVtYWluIG9wZW4gZm9yIHR3byB3ZWVrcyBmcm9tIHRvZGF5LCBjbG9zaW5nDQo+Pj5v bg0KPj4+IE5vdmVtYmVyIDIxLCAyMDE1OyBhdCB3aGljaCB0aW1lLCBob3BlZnVsbHkgd2Ugd2ls bCBoYXZlIGEgY2xlYXIgYW5zd2VyDQo+Pj5hbmQNCj4+PiBkaXJlY3Rpb24gdG8gcG9pbnQgdGhp cyB3b3JrLg0KPj4+IA0KPj4+IFRoYW5rIHlvdSwNCj4+PiAg4oCUIEp1c3RpbiAmIEtlcGVuZywg eW91ciBDT1NFIGNoYWlycw0KPj4+IA0KPj4+ICogSSBwcm9taXNlZCB0aG9zZSBpbiB0aGUgcm9v bSBhdCBZb2tvaGFtYSB0byBvZmZlciBhIGZseWluZyByYXQNCj4+Pm9wdGlvbiwgZm9yDQo+Pj4g d2hpY2ggSSBhbSBkZWVwbHkgc29ycnkuDQo+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCj4+PiBDT1NFIG1haWxpbmcgbGlzdA0KPj4+IENPU0VAaWV0 Zi5vcmcNCj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCj4+ DQo+Pl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+PkNP U0UgbWFpbGluZyBsaXN0DQo+PkNPU0VAaWV0Zi5vcmcNCj4+aHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9jb3NlDQo+DQo+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj5DT1NFIG1haWxpbmcgbGlzdA0KPkNPU0VAaWV0Zi5vcmcNCj5o dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCg0K From nobody Tue Nov 17 15:11:56 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 656181A89F6 for ; Tue, 17 Nov 2015 15:11:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.053 X-Spam-Level: ** X-Spam-Status: No, score=2.053 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DATE_IN_PAST_06_12=1.543, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_MISMATCH_ORG=0.611] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jpJpmaVsFHVO for ; Tue, 17 Nov 2015 15:11:53 -0800 (PST) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 073EE1A89F2 for ; Tue, 17 Nov 2015 15:11:53 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id D4E3FE2038; Tue, 17 Nov 2015 18:11:51 -0500 (EST) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 07651-10; Tue, 17 Nov 2015 18:11:50 -0500 (EST) Received: from securerf.ihtfp.org (205.158.164.101.ptr.us.xo.net [205.158.164.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 08FC0E2035; Tue, 17 Nov 2015 18:11:49 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ihtfp.com; s=default; t=1447801910; bh=Qx533aFgci9Si32te+Ozs4lJUfkDI9uXouBbUNgd6E0=; h=From:To:Cc:Subject:References:Date:In-Reply-To; b=HYO1gqWuue/5U1FMT1p2ZaWOMaFyEyDhSRhPSrfqzs32A+Sdq6k47QUIjGYR7Is3W fjM7lbS4s7/gTsmxG4D0BO4JAoZuR+ruwUQd+ervuce/s6gqb5m7Oi9Civk3B+qkgM JFZoT9SkZaFU8G782ItU6MHI26n6PHreZMKwkeAM= Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id tAHH1xiZ013797; Tue, 17 Nov 2015 12:01:59 -0500 From: Derek Atkins To: Justin Richer References: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> Date: Tue, 17 Nov 2015 12:01:59 -0500 In-Reply-To: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> (Justin Richer's message of "Sat, 7 Nov 2015 17:02:07 +0900") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] Consensus Call: Placement of CDDL X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Nov 2015 23:11:54 -0000 I feel the CDDL should be inline with the normative text alongside other examples (B). -derek Justin Richer writes: > At the Yokohama meeting, the chairs agreed to do a consensus call > regarding the placement of the CDDL formatted text within the messages > draft. The four positions we are asking the working group to consider > and voice their support for are: > > A) Place the CDDL at the end of the document in an appendix. Other > examples will remain inline. > B) Place the CDDL inline with the normative text alongside other examples. > C) You need more information to decide. > D) You don=E2=80=99t give a flying rat about CDDL.* > > Note that this proposal does NOT consider removal of CDDL or > declaration of normative dependence on CDDL. The English text will > remain the normative form and the CDDL will remain a non-normative > example. The (unfinished, unhomed) CDDL draft will remain an > informative reference. > > The consensus call will remain open for two weeks from today, closing > on November 21, 2015; at which time, hopefully we will have a clear > answer and direction for our editor. > > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs > > * I promised those in the room at Yokohama to offer a flying rat > option, for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --=20 Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Tue Nov 17 16:38:10 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6943B1B365B for ; Tue, 17 Nov 2015 16:38:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k8MIFzrQsdfA for ; Tue, 17 Nov 2015 16:38:05 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0129.outbound.protection.outlook.com [65.55.169.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A78D1B3659 for ; Tue, 17 Nov 2015 16:38:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Pg0FSoVLeS7XEsMohcHqyu20E09fqCNwD8gxMNgn48Y=; b=Qh5E60N1/q/uIRRFEom/lF37sqAx3VWwbls5HeiNUC8pLYFBA+W0ZisXIXWLqmnbq6sPlXuXNmnxHxampD75dz8MLul0BD1+8cLlYTyvkiTFTnQxZLC5MUSSmAyGWFZFoI0qZmYFw2SR5kZ/S3lUVQBCAOEHuc2gJrq8liC2z1g= Received: from BN3PR0301MB1234.namprd03.prod.outlook.com (10.161.207.22) by BN3PR0301MB1234.namprd03.prod.outlook.com (10.161.207.22) with Microsoft SMTP Server (TLS) id 15.1.331.20; Wed, 18 Nov 2015 00:38:02 +0000 Received: from BN3PR0301MB1234.namprd03.prod.outlook.com ([10.161.207.22]) by BN3PR0301MB1234.namprd03.prod.outlook.com ([10.161.207.22]) with mapi id 15.01.0331.019; Wed, 18 Nov 2015 00:38:02 +0000 From: Anthony Nadalin To: "cose@ietf.org" Thread-Topic: Re: [COSE] Consensus Call: Adoption of the COSE Token Thread-Index: AdEhmRloc+CDWNXAQUezKr7HUjMehg== Date: Wed, 18 Nov 2015 00:38:02 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=tonynad@microsoft.com; x-originating-ip: [2001:4898:80e8:e::240] x-microsoft-exchange-diagnostics: 1; BN3PR0301MB1234; 5:9ymd2NI8ObOq/lc3ji5kfFYEjiF86/ENJM1fcnZixjWT4pXvxggrAzueEU8Wchj/CrzSBGxZTzmfkNF8AV60xy+Gj59IYKZ1RHf+z2Zv8frY+wFft+bovRzMPxl3xcdows6q5wpmP8LyFmod0WqZgQ==; 24:kZVG66uExsX+I2Ukn12MJZ6NgrL9jY/llZM+4r4wGjMqqP5BC4jAcEqUBY9fqKXsjOSeHg+bOd14cK2z3PyszsGkTZs9/tNlRmBY4002bgM= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0301MB1234; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(8121501046)(5005006)(520078)(10201501046)(3002001)(61426024)(61427024); SRVR:BN3PR0301MB1234; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0301MB1234; x-forefront-prvs: 0764C4A8CD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(189002)(24454002)(377454003)(199003)(16236675004)(10090500001)(86612001)(33656002)(10290500002)(10400500002)(5004730100002)(5002640100001)(450100001)(101416001)(5005710100001)(8990500004)(5001960100002)(5007970100001)(2351001)(107886002)(19625215002)(110136002)(76576001)(74316001)(105586002)(189998001)(97736004)(99286002)(19580405001)(5008740100001)(19580395003)(11100500001)(77096005)(2501003)(54356999)(15975445007)(102836002)(586003)(50986999)(92566002)(86362001)(87936001)(40100003)(5003600100002)(2900100001)(19300405004)(122556002)(106356001)(81156007)(3826002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0301MB1234; H:BN3PR0301MB1234.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN3PR0301MB1234FE6235C166D31C1FE42DA61C0BN3PR0301MB1234_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2015 00:38:02.3855 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0301MB1234 Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Nov 2015 00:38:08 -0000 --_000_BN3PR0301MB1234FE6235C166D31C1FE42DA61C0BN3PR0301MB1234_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable My preference would be the same as John's John Bradley Sun, 15 November 2015 00:08 UTCS My preference is B then A. We are rechartering OAuth anyway. We did not do JOSE in the OAuth WG but = were responsible for the security token format. The core of CWT should be in OAuth using the existing JWT registry and exte= nsions done in ACE. John B. > On Nov 7, 2015, at 5:01 AM, Justin Richer wrote: > > At the Yokohama meeting, the chairs agreed to do a consensus call regardi= ng the adoption and placement of new work to define a COSE Token, analogous= to the JWT from JOSE. In the room, there was a general sentiment of suppor= t for the work being done, with the wide adoption of JWT and its driving of= JOSE being a common theme of precedent. What wasn't clear is where the wor= k should be done and to what end it should drive. The six positions we are = asking the working group to consider and voice their support for are: > > A) Define the COSE Token within the COSE working group along side the COS= E Messages (and potentially COSE Auxiliary Algorithms) draft. > B) Define the COSE Token inside the OAuth working group. > C) Define the COSE Token inside the ACE working group. > D) Don't define the COSE Token anywhere. > E) You need more information to decide. > F) You don't give a flying rat about the COSE Token.* > > The consensus call will remain open for two weeks from today, closing on = November 21, 2015; at which time, hopefully we will have a clear answer and= direction to point this work. > > Thank you, > - Justin & Kepeng, your COSE chairs > > * I promised those in the room at Yokohama to offer a flying rat option, = for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --_000_BN3PR0301MB1234FE6235C166D31C1FE42DA61C0BN3PR0301MB1234_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

My preference would be the same as John’= s

 

John Bradley <ve7jtb@ve7jtb.com><= /span> Sun, 15 November 2015 00:08 UTCS

My preference is B then A.

 

We are rechartering OAuth anyway.   = We did not do JOSE in the OAuth WG but were responsible for the security to= ken format.

 

The core of CWT should be in OAuth using the e= xisting JWT registry and extensions done in ACE.

 

John B.

> On Nov 7, 2015, at 5:01 AM, Justin Richer= <jricher@MIT.EDU> wrote:

>

> At the Yokohama meeting, the chairs agree= d to do a consensus call regarding the adoption and placement of new work t= o define a COSE Token, analogous to the JWT from JOSE. In the room, there was a general sentiment of support for the w= ork being done, with the wide adoption of JWT and its driving of JOSE being= a common theme of precedent. What wasn’t clear is where the work sho= uld be done and to what end it should drive. The six positions we are asking the working group to consider and v= oice their support for are:

>

> A) Define the COSE Token within the COSE = working group along side the COSE Messages (and potentially COSE Auxiliary = Algorithms) draft.

> B) Define the COSE Token inside the OAuth= working group.

> C) Define the COSE Token inside the ACE w= orking group.

> D) Don’t define the COSE Token anyw= here.

> E) You need more information to decide.

> F) You don’t give a flying rat abou= t the COSE Token.*

>

> The consensus call will remain open for t= wo weeks from today, closing on November 21, 2015; at which time, hopefully= we will have a clear answer and direction to point this work.

>

> Thank you,

> — Justin & Kepeng, your COSE ch= airs

>

> * I promised those in the room at Yokoham= a to offer a flying rat option, for which I am deeply sorry.

> _________________________________________= ______

> COSE mailing list

> COSE@ietf.org

> https://www.ietf.org/mailman/listinfo/cos= e

 

--_000_BN3PR0301MB1234FE6235C166D31C1FE42DA61C0BN3PR0301MB1234_-- From nobody Wed Nov 18 01:35:43 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29F381B2B41 for ; Wed, 18 Nov 2015 01:35:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.885 X-Spam-Level: X-Spam-Status: No, score=-2.885 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.585] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ncD9qJS16FKT for ; Wed, 18 Nov 2015 01:35:39 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 517231B2B3F for ; Wed, 18 Nov 2015 01:35:39 -0800 (PST) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX01.ad.nexusgroup.com (10.75.28.40) with Microsoft SMTP Server (TLS) id 15.0.995.29; Wed, 18 Nov 2015 10:35:36 +0100 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Wed, 18 Nov 2015 10:35:36 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= Thread-Topic: [COSE] Consensus Call: Adoption of the COSE Token Thread-Index: AQHRGTKb6mzibdroQ0aWbiONihL/Fp6Q1nWAgAKF/wCADRy7AIABDJuA Date: Wed, 18 Nov 2015 09:35:36 +0000 Message-ID: <5AFDFAEA-B947-4A6F-B528-060B798BEAA7@nexusgroup.com> References: <04de01d1198c$d02cae40$70860ac0$@augustcellars.com> In-Reply-To: Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2104) x-originating-ip: [213.113.163.201] Content-Type: text/plain; charset="utf-8" Content-ID: <05F47F8B44C37D4A841ED00F4856FDCE@nexusgroup.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: Justin Richer , "cose@ietf.org" Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Nov 2015 09:35:42 -0000 KzENCi8gRXJpaw0KDQo+IE9uIDE3IE5vdiAyMDE1LCBhdCAxODozNCwgR8O2cmFuIFNlbGFuZGVy IDxnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20+IHdyb3RlOg0KPiANCj4gSSB3b3VsZCBsaWtl IHRvIHdpdGhkcmF3IG15IHByZXZpb3VzIHZvdGUuIFdpdGggdGhlIGFzc3VtcHRpb24gdGhhdCBD V1QgaXMNCj4gZGVmaW5lZCBhcyBhIDEtMSBtYXBwaW5nIG9mIEpXVCAod2hpY2ggaXMgbm90IGhv dyBpdCB3YXMgZGVmaW5lZCBpbiB0aGUNCj4gcmVmZXJlbmNlIGJlbG93KSBJIGRvbuKAmXQgaGF2 ZSBhIHN0cm9uZyBvcGluaW9uIGFib3V0IHdoZXJlIGl0IGlzIGRlZmluZWQuDQo+IEJ1dCBBQ0Ut c3BlY2lmaWMgY2xhaW1zIG9mIGEgSldUL0NXVCAoc3VjaCBhcyBELjEuMTApIHNob3VsZCBiZSBk ZWZpbmVkIGluDQo+IEFDRS4gSSBiZWxpZXZlIHRoZSBsYXR0ZXIgcG9pbnQgb2YgdmlldyBhbGln bnMgd2l0aCB0aGF0IGV4cHJlc3NlZCBieQ0KPiBvdGhlcnMuDQo+IA0KPiBHw7ZyYW4NCj4gDQo+ IA0KPiBPbiAyMDE1LTExLTA5IDEwOjIwLCAiR8O2cmFuIFNlbGFuZGVyIiA8Z29yYW4uc2VsYW5k ZXJAZXJpY3Nzb24uY29tPiB3cm90ZToNCj4gDQo+PiBJIHZvdGUgZm9yIEMuIEl0IHdvdWxkIGJl IGdvb2QgaWYgdGhpcyB3b3JrIGNvdWxkIGJlIGNhcnJpZWQgb3V0IHdoZXJlDQo+PiB0aGVyZSBp cyBib3RoIE9BdXRoIGNvbXBldGVuY2UgYW5kIGNvbnN0cmFpbmVkIG5vZGUgbmV0d29yayBjb21w ZXRlbmNlLiBJDQo+PiBiZWxpZXZlIEFDRSBjb3VsZCBiZSBhIG1hdGNoIGhlcmUgc2luY2Ugc3Vj aCBjb21wZXRlbmNlcyB3aWxsIGFueXdheSBiZQ0KPj4gcmVxdWlyZWQgdG8gZXZhbHVhdGUNCj4+ IA0KPj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtc2VpdHotYWNlLW9h dXRoLWF1dGh6Lw0KPj4gDQo+PiANCj4+IHdoaWNoIGlzIHRoZSBwcmVmZXJyZWQgc3RhcnRpbmcg cG9pbnQgZm9yIGEgc29sdXRpb24gYWNjb3JkaW5nIHRvIHRoZSBmMmYNCj4+IG1lZXRpbmcuIFRo ZXJlIGlzIGFscmVhZHkgc29tZSB0ZXh0IG9uIOKAnENCT1IgV2ViIFRva2VuIiBpbiBhcHBlbmRp eCBELg0KPj4gDQo+PiBHw7ZyYW4NCj4+IA0KPj4gDQo+PiBPbiAyMDE1LTExLTA3IDE5OjQ3LCAi SmltIFNjaGFhZCIgPGlldGZAYXVndXN0Y2VsbGFycy5jb20+IHdyb3RlOg0KPj4gDQo+Pj4gRWl0 aGVyIEIgb3IgQy4NCj4+PiANCj4+Pj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4+Pj4g RnJvbTogQ09TRSBbbWFpbHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEp1 c3RpbiBSaWNoZXINCj4+Pj4gU2VudDogU2F0dXJkYXksIE5vdmVtYmVyIDA3LCAyMDE1IDEyOjAy IEFNDQo+Pj4+IFRvOiBjb3NlQGlldGYub3JnDQo+Pj4+IFN1YmplY3Q6IFtDT1NFXSBDb25zZW5z dXMgQ2FsbDogQWRvcHRpb24gb2YgdGhlIENPU0UgVG9rZW4NCj4+Pj4gDQo+Pj4+IEF0IHRoZSBZ b2tvaGFtYSBtZWV0aW5nLCB0aGUgY2hhaXJzIGFncmVlZCB0byBkbyBhIGNvbnNlbnN1cyBjYWxs DQo+Pj4+IHJlZ2FyZGluZw0KPj4+PiB0aGUgYWRvcHRpb24gYW5kIHBsYWNlbWVudCBvZiBuZXcg d29yayB0byBkZWZpbmUgYSBDT1NFIFRva2VuLA0KPj4+PiBhbmFsb2dvdXMgdG8NCj4+Pj4gdGhl IEpXVCBmcm9tIEpPU0UuIEluIHRoZSByb29tLCB0aGVyZSB3YXMgYSBnZW5lcmFsIHNlbnRpbWVu dCBvZg0KPj4+PiBzdXBwb3J0IGZvcg0KPj4+PiB0aGUgd29yayBiZWluZyBkb25lLCB3aXRoIHRo ZSB3aWRlIGFkb3B0aW9uIG9mIEpXVCBhbmQgaXRzIGRyaXZpbmcgb2YNCj4+Pj4gSk9TRQ0KPj4+ PiBiZWluZyBhIGNvbW1vbiB0aGVtZSBvZiBwcmVjZWRlbnQuIFdoYXQgd2FzbuKAmXQgY2xlYXIg aXMgd2hlcmUgdGhlIHdvcmsNCj4+Pj4gc2hvdWxkIGJlIGRvbmUgYW5kIHRvIHdoYXQgZW5kIGl0 IHNob3VsZCBkcml2ZS4gVGhlIHNpeCBwb3NpdGlvbnMgd2UNCj4+Pj4gYXJlIGFza2luZw0KPj4+ PiB0aGUgd29ya2luZyBncm91cCB0byBjb25zaWRlciBhbmQgdm9pY2UgdGhlaXIgc3VwcG9ydCBm b3IgYXJlOg0KPj4+PiANCj4+Pj4gQSkgRGVmaW5lIHRoZSBDT1NFIFRva2VuIHdpdGhpbiB0aGUg Q09TRSB3b3JraW5nIGdyb3VwIGFsb25nIHNpZGUgdGhlDQo+Pj4+IENPU0UNCj4+Pj4gTWVzc2Fn ZXMgKGFuZCBwb3RlbnRpYWxseSBDT1NFIEF1eGlsaWFyeSBBbGdvcml0aG1zKSBkcmFmdC4NCj4+ Pj4gQikgRGVmaW5lIHRoZSBDT1NFIFRva2VuIGluc2lkZSB0aGUgT0F1dGggd29ya2luZyBncm91 cC4NCj4+Pj4gQykgRGVmaW5lIHRoZSBDT1NFIFRva2VuIGluc2lkZSB0aGUgQUNFIHdvcmtpbmcg Z3JvdXAuDQo+Pj4+IEQpIERvbuKAmXQgZGVmaW5lIHRoZSBDT1NFIFRva2VuIGFueXdoZXJlLg0K Pj4+PiBFKSBZb3UgbmVlZCBtb3JlIGluZm9ybWF0aW9uIHRvIGRlY2lkZS4NCj4+Pj4gRikgWW91 IGRvbuKAmXQgZ2l2ZSBhIGZseWluZyByYXQgYWJvdXQgdGhlIENPU0UgVG9rZW4uKg0KPj4+PiAN Cj4+Pj4gVGhlIGNvbnNlbnN1cyBjYWxsIHdpbGwgcmVtYWluIG9wZW4gZm9yIHR3byB3ZWVrcyBm cm9tIHRvZGF5LCBjbG9zaW5nDQo+Pj4+IG9uDQo+Pj4+IE5vdmVtYmVyIDIxLCAyMDE1OyBhdCB3 aGljaCB0aW1lLCBob3BlZnVsbHkgd2Ugd2lsbCBoYXZlIGEgY2xlYXIgYW5zd2VyDQo+Pj4+IGFu ZA0KPj4+PiBkaXJlY3Rpb24gdG8gcG9pbnQgdGhpcyB3b3JrLg0KPj4+PiANCj4+Pj4gVGhhbmsg eW91LA0KPj4+PiDigJQgSnVzdGluICYgS2VwZW5nLCB5b3VyIENPU0UgY2hhaXJzDQo+Pj4+IA0K Pj4+PiAqIEkgcHJvbWlzZWQgdGhvc2UgaW4gdGhlIHJvb20gYXQgWW9rb2hhbWEgdG8gb2ZmZXIg YSBmbHlpbmcgcmF0DQo+Pj4+IG9wdGlvbiwgZm9yDQo+Pj4+IHdoaWNoIEkgYW0gZGVlcGx5IHNv cnJ5Lg0KPj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KPj4+PiBDT1NFIG1haWxpbmcgbGlzdA0KPj4+PiBDT1NFQGlldGYub3JnDQo+Pj4+IGh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZQ0KPj4+IA0KPj4+IF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4gQ09TRSBtYWlsaW5n IGxpc3QNCj4+PiBDT1NFQGlldGYub3JnDQo+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9jb3NlDQo+PiANCj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+PiBDT1NFIG1haWxpbmcgbGlzdA0KPj4gQ09TRUBpZXRmLm9yZw0K Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQo+IA0KPiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBDT1NFIG1haWxp bmcgbGlzdA0KPiBDT1NFQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vY29zZQ0KDQo= From nobody Wed Nov 18 01:42:04 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 969B91B2B5C for ; Wed, 18 Nov 2015 01:42:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.399 X-Spam-Level: X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id adPN7eKqlfYV for ; Wed, 18 Nov 2015 01:42:02 -0800 (PST) Received: from out4133-50.mail.aliyun.com (out4133-50.mail.aliyun.com [42.120.133.50]) by ietfa.amsl.com (Postfix) with ESMTP id AE1421B2B56 for ; Wed, 18 Nov 2015 01:42:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1447839720; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=tbFXpAMHpCKMKsHgXQTY58ggbDE5kBVE/7DyoWiE8uQ=; b=ghgV8BDbbX+tPcOI6uZiRSNU4CSYluFF2Oev/9sixNSiP1dv0Gvhg29z2/dVicFwrhkkJW6w4v22ZimfWDQWkS0KmWMMVMnH8+jYkIqTn5K3FYKyWgGKjjFsR3BMmrh7a4shDMiYs1gE1w8WIdHzveHDcYreFXl9is8DK/VtEl8= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R981e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=e02c03284; MF=kepeng.lkp@alibaba-inc.com; NM=1; PH=DS; RN=3; SR=0; TI=SMTPD_----4CgETm6; Received: from 10.1.160.40(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.74.186) by smtp.aliyun-inc.com(127.0.0.1); Wed, 18 Nov 2015 17:41:57 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Wed, 18 Nov 2015 17:41:51 +0800 From: "Kepeng Li" To: =?ISO-8859-1?B?R/ZyYW4=?= Selander , 'Justin Richer' , "cose@ietf.org" Message-ID: Thread-Topic: [COSE] Consensus Call: Adoption of the COSE Token References: <04de01d1198c$d02cae40$70860ac0$@augustcellars.com> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Nov 2015 09:42:03 -0000 > ACE-specific claims of a JWT/CWT (such as D.1.10) should be defined in >ACE.=20 +1 for this.=20 Kind Regards Kepeng (as individual) =E5=9C=A8 18/11/15 1:34 am=EF=BC=8C "G=C3=B6ran Selander" =E5=86=99= =E5=85=A5: >I would like to withdraw my previous vote. With the assumption that CWT is >defined as a 1-1 mapping of JWT (which is not how it was defined in the >reference below) I don=E2=80=99t have a strong opinion about where it is defined= . >But ACE-specific claims of a JWT/CWT (such as D.1.10) should be defined in >ACE. I believe the latter point of view aligns with that expressed by >others. > >G=C3=B6ran > > >On 2015-11-09 10:20, "G=C3=B6ran Selander" wrote= : > >>I vote for C. It would be good if this work could be carried out where >>there is both OAuth competence and constrained node network competence. I >>believe ACE could be a match here since such competences will anyway be >>required to evaluate >> >>https://datatracker.ietf.org/doc/draft-seitz-ace-oauth-authz/ >> >> >>which is the preferred starting point for a solution according to the f2f >>meeting. There is already some text on =E2=80=9CCBOR Web Token" in appendix D. >> >>G=C3=B6ran >> >> >>On 2015-11-07 19:47, "Jim Schaad" wrote: >> >>>Either B or C. >>> >>>> -----Original Message----- >>>> From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Justin Richer >>>> Sent: Saturday, November 07, 2015 12:02 AM >>>> To: cose@ietf.org >>>> Subject: [COSE] Consensus Call: Adoption of the COSE Token >>>>=20 >>>> At the Yokohama meeting, the chairs agreed to do a consensus call >>>>regarding >>>> the adoption and placement of new work to define a COSE Token, >>>>analogous to >>>> the JWT from JOSE. In the room, there was a general sentiment of >>>>support for >>>> the work being done, with the wide adoption of JWT and its driving of >>>>JOSE >>>> being a common theme of precedent. What wasn=E2=80=99t clear is where the wo= rk >>>> should be done and to what end it should drive. The six positions we >>>>are asking >>>> the working group to consider and voice their support for are: >>>>=20 >>>> A) Define the COSE Token within the COSE working group along side the >>>>COSE >>>> Messages (and potentially COSE Auxiliary Algorithms) draft. >>>> B) Define the COSE Token inside the OAuth working group. >>>> C) Define the COSE Token inside the ACE working group. >>>> D) Don=E2=80=99t define the COSE Token anywhere. >>>> E) You need more information to decide. >>>> F) You don=E2=80=99t give a flying rat about the COSE Token.* >>>>=20 >>>> The consensus call will remain open for two weeks from today, closing >>>>on >>>> November 21, 2015; at which time, hopefully we will have a clear >>>>answer >>>>and >>>> direction to point this work. >>>>=20 >>>> Thank you, >>>> =E2=80=94 Justin & Kepeng, your COSE chairs >>>>=20 >>>> * I promised those in the room at Yokohama to offer a flying rat >>>>option, for >>>> which I am deeply sorry. >>>> _______________________________________________ >>>> COSE mailing list >>>> COSE@ietf.org >>>> https://www.ietf.org/mailman/listinfo/cose >>> >>>_______________________________________________ >>>COSE mailing list >>>COSE@ietf.org >>>https://www.ietf.org/mailman/listinfo/cose >> >>_______________________________________________ >>COSE mailing list >>COSE@ietf.org >>https://www.ietf.org/mailman/listinfo/cose > >_______________________________________________ >COSE mailing list >COSE@ietf.org >https://www.ietf.org/mailman/listinfo/cose From nobody Thu Nov 19 03:23:09 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5364B1A0461 for ; Thu, 19 Nov 2015 03:22:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.55 X-Spam-Level: X-Spam-Status: No, score=-1.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a2CuummKNQmf for ; Thu, 19 Nov 2015 03:22:57 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B2DD1A0379 for ; Thu, 19 Nov 2015 03:22:57 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id tAJBMn1n004766; Thu, 19 Nov 2015 12:22:49 +0100 (CET) Received: from aung.tzi.org (unknown [IPv6:2001:638:708:30da:211:22ff:fedd:aa18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3p1dsN6fnYz2YN4; Thu, 19 Nov 2015 12:22:48 +0100 (CET) From: Olaf Bergmann To: "Jim Schaad" References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> <87egftszjh.fsf@aung.informatik.uni-bremen.de> <018301d11f16$31d46640$957d32c0$@augustcellars.com> Date: Thu, 19 Nov 2015 12:22:48 +0100 In-Reply-To: <018301d11f16$31d46640$957d32c0$@augustcellars.com> (Jim Schaad's message of "Sat, 14 Nov 2015 11:53:54 -0800") Message-ID: <87ziyanshj.fsf@aung.informatik.uni-bremen.de> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Nov 2015 11:22:59 -0000 Hi Jim, "Jim Schaad" writes: > I just read through the section referenced and did not see any reason > for C and CAM to have access to the content. I will try and read the > entire document later today as that might describe the reasoning. the reason comes from the way authorization is used. That would be a long discussion more related to ACE than COSE. > However, you are saying that it is ok for incorrect content to be in > this message as far as C and CAM are concerned? No, it would not. My draft assumes that this structure is passed within the payload of an encrypt structure hop-by-hop. Gr=C3=BC=C3=9Fe Olaf From nobody Thu Nov 19 23:27:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AF001A8979 for ; Thu, 19 Nov 2015 23:26:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.786 X-Spam-Level: X-Spam-Status: No, score=-4.786 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N8QO71kbyZHF for ; Thu, 19 Nov 2015 23:26:57 -0800 (PST) Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B8F21A8974 for ; Thu, 19 Nov 2015 23:26:56 -0800 (PST) X-AuditID: 12074423-f797f6d0000023d0-e7-564ecb3f47b7 Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id 65.88.09168.F3BCE465; Fri, 20 Nov 2015 02:26:55 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id tAK7QsIN024141; Fri, 20 Nov 2015 02:26:55 -0500 Received: from [192.168.128.56] (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tAK7QqPX017727 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Fri, 20 Nov 2015 02:26:54 -0500 To: Jim Schaad , cose@ietf.org References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> From: Justin Richer Message-ID: <564ECB3C.1070203@mit.edu> Date: Fri, 20 Nov 2015 02:26:52 -0500 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrDIsWRmVeSWpSXmKPExsUixG6nomt/2i/MYOlCeYtpW6eyWqye/p3N gclj45zpbB5LlvxkCmCK4rJJSc3JLEst0rdL4Mr4dv4HS8Fcvor/R86wNzDO4+5i5OCQEDCR eHHLq4uRE8gUk7hwbz1bFyMXh5DAYiaJszc+sEM4GxkldjT8hMrcZpJY+3wbC0iLMFD3xs3X mUFsEQEziTVnm9hAbCEBe4n7B56wgthsAqoS09e0MIHYvAJqEo9mzwGrYQGKX3rxF6xXVCBG 4v2mVYwQNYISJ2c+AZvPKeAgcercS7BeZgFbiTtzdzND2PIS29/OYZ7AKDALScssJGWzkJQt YGRexSibklulm5uYmVOcmqxbnJyYl5dapGuml5tZopeaUrqJERyoLso7GP8cVDrEKMDBqMTD 2yDuFybEmlhWXJl7iFGSg0lJlNfiEFCILyk/pTIjsTgjvqg0J7X4EKMEB7OSCO9SP6Acb0pi ZVVqUT5MSpqDRUmcd+4X3zAhgfTEktTs1NSC1CKYrAwHh5IEL9spoEbBotT01Iq0zJwShDQT ByfIcB6g4ZIgNbzFBYm5xZnpEPlTjIpS4ry3TgIlBEASGaV5cL2gRJLw9rDpK0ZxoFeEeWtB 2nmASQiu+xXQYCagwb9rfEEGlyQipKQaGL1jLLqPqbUW8F72z7aXspaLPJ7995R06Bp39w/q TSv7131YcO0CnzXjtBN5Pm8zXIWd0vee6Qy+fOe3SWWcUcedShmDP74nK0/e2+FVuf5mOaOJ 5Z3l0tu2+pmzaN4q2D39GVuspMfa0FSVV0Gr5wT/nSK6hME5aGOK7vUPp7PKu/+cOe+sosRS nJFoqMVcVJwIAPmT0Mb/AgAA Archived-At: Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Nov 2015 07:26:58 -0000 What I'm hearing from this thread is a lot of support for plain MAC structures, including several documented use cases. Not the least of which is mapping to JOSE's HS* algorithm suite in JWS, one of the two most-used and most-successful portions of JOSE to date. Consequently, I'm not seeing any consensus to drop plain MAC support in favor of any other method. I'm also not seeing opposition to defining AEAD structures in addition to MAC structures in COSE and allowing applications to choose. Therefore, we'll keep MAC in place until there's sufficient consensus to remove the capability from COSE. Thank you, -- Justin, your COSE chair. On 11/7/2015 5:39 PM, Jim Schaad wrote: > People keep telling me that they want to have a version of MACs that do not > have a set of recipient information attached so that they can do direct > MACs. I keep asking for a use case where this makes sense. In all of the > use cases that I have been presented so far, a better answer is going to be > to do an AEAD encrypted item rather than a MACed item. > > The scenario that wants this is going to be: > > Alice sends data to Bob in such a way that Bob can authenticate the data. > Eve needs to be able to read the data in transit, without knowing if the > message contains data or misinformation and will act on the message as if it > were data. > > The difference in message size between MAC and Encryption is going to be > minimal, at most a few bytes. The execution difference is going to be a few > extra encryption operations. > > What use cases exist for this where encryption is not a better security > answer anyway. > > Jim > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Fri Nov 20 22:40:37 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4BB91A875C for ; Fri, 20 Nov 2015 22:40:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.001 X-Spam-Level: X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hdsUt9Tr8BK9 for ; Fri, 20 Nov 2015 22:40:35 -0800 (PST) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8192D1A875D for ; Fri, 20 Nov 2015 22:40:35 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id B004F38F16 for ; Fri, 20 Nov 2015 22:40:34 -0800 (PST) From: "Jim Schaad" To: Date: Fri, 20 Nov 2015 22:37:45 -0800 Message-ID: <019101d12427$21d7a480$6586ed80$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdEkJi7TZxDFBS0ORAimXmHE5rUJMw== Content-Language: en-us Archived-At: Subject: [COSE] Amendments to the minutes X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Nov 2015 06:40:36 -0000 First: Thanks Hannes they have been useful to me. Small changes: OLD: Carsten: Kathleen says for a very good reason for having RSA1.5 being included. It shouldn't be included in new protocol. NEW: Carsten: Kathleen says there needs to be a very good reason for having RSA1.5 being included. It shouldn't be included in new protocol. Actual jabber comment: [07:01:34] mic: I'd like to see a very good reason for it if RSA v1.5 is included [07:01:55] shouldn't be in new protocols OLD: Sean: We need to keep this simpler her. NEW: Sean: We need to keep this simple here. OLD: Issue#23: Is 'keyops' sufficient or should we add a 'use' field (which was added for the W3C). NEW: Issue#23: Is 'keyops' sufficient or should we add back the 'use' field from JOSE (keyops was added for the W3C). From nobody Sat Nov 21 09:39:07 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 449DC1AD068 for ; Sat, 21 Nov 2015 09:39:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.086 X-Spam-Level: X-Spam-Status: No, score=-2.086 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y4cjAiMsw4rc for ; Sat, 21 Nov 2015 09:39:04 -0800 (PST) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 566D21AD066 for ; Sat, 21 Nov 2015 09:39:04 -0800 (PST) X-AuditID: 1209190f-f79d06d000004b20-f9-5650ac36bc07 Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id D4.B3.19232.63CA0565; Sat, 21 Nov 2015 12:39:02 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id tALHd2nc010936 for ; Sat, 21 Nov 2015 12:39:02 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tALHd0wg017501 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sat, 21 Nov 2015 12:39:02 -0500 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Justin Richer In-Reply-To: Date: Sat, 21 Nov 2015 12:39:00 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <7505C89A-FCA1-4AD6-93F6-BDE3517AF1B4@mit.edu> References: To: cose@ietf.org X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrIIsWRmVeSWpSXmKPExsUixG6nomu2JiDM4MEOK4tpW6eyOjB6LFny kymAMYrLJiU1J7MstUjfLoEr4+P/I4wFm8Qr5u2awtLAeEOoi5GTQ0LARKLp/BlmCFtM4sK9 9WxdjFwcQgKLmSQ+b73GBOEcZZToPLGTEaRKSOArk8T9OeogNrOAusSfeZfAunkF9CRe3brM CmILC9hJrFo6nQ3EZhNQlZi+poUJxOYUsJbY+/sUWA0LUHz9//+MEHO0JZYtfA01x0ri+Lfd bBC7rCT29bcCxTk4RAQEJe52mkMcKiux+/cjpgmMArOQXDELyRWzkExdwMi8ilE2JbdKNzcx M6c4NVm3ODkxLy+1SNdELzezRC81pXQTIygkOSX5dzB+O6h0iFGAg1GJhzehyD9MiDWxrLgy 9xCjJAeTkihv7WugEF9SfkplRmJxRnxRaU5q8SFGCQ5mJRHehAUBYUK8KYmVValF+TApaQ4W JXHeuV98w4QE0hNLUrNTUwtSi2CyMhwcShK8uquBGgWLUtNTK9Iyc0oQ0kwcnCDDeYCGi4HU 8BYXJOYWZ6ZD5E8xKkqJ82qAJARAEhmleXC9oJSR8Paw6StGcaBXhHntQap4gOkGrvsV0GAm oMG/a3xBBpckIqSkGhjnzk66qnw9xumBn4Vz4r3bi5lzXT6J/lq7TbPHPaQv5GHvpT3THI7I bxB9dUxDe8O61twHC3+eM1GZeuvg59bCGUKa/RNFVcq/5QQc/ukyZTGf3sv49+7H608LVy9Z tHlCy+rCgz8jfzrOrrmobB6z85+i5SYOjVV8gkXGK27keJgly9dueLpViaU4I9FQi7moOBEA qMvKi/QCAAA= Archived-At: Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Nov 2015 17:39:06 -0000 Reading through the threads an opinions, there is no clear consensus as = to where the work should be done. There is roughly equal support for = doing this in any of the three offered working groups. There is clear consensus that it should be done and that, as much as = possible, it should be a direct map of the existing JWT payload object = and common claims.=20 In this light, someone needs to just start the work as an individual = draft and push forward, and whichever working group most wants to can = pick it up and publish it. I have no qualms on accepting this work = within the COSE working group and I believe there is enough support to = warrant that placement if an author submits a draft here (and this = remains my preference as an individual), but I will not object to = another group picking it up. I believe, with all of the overlap between groups, that we will have no = trouble getting the =E2=80=9Cright people=E2=80=9D to look at it. = Additionally, it is clear that it will be very beneficial to have formal = reviews from all three groups once the draft has reached a mature = status.=20 Thankfully, Erik has already done this with his =E2=80=9CCOSE Web = Token=E2=80=9D draft. He=E2=80=99s initially targeted this at the OAuth = working group, and the work started in ACE, so I call to the author to = pick a location and run with it. =E2=80=94 Justin, your COSE chair > On Nov 7, 2015, at 3:01 AM, Justin Richer wrote: >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the adoption and placement of new work to define a COSE Token, = analogous to the JWT from JOSE. In the room, there was a general = sentiment of support for the work being done, with the wide adoption of = JWT and its driving of JOSE being a common theme of precedent. What = wasn=E2=80=99t clear is where the work should be done and to what end it = should drive. The six positions we are asking the working group to = consider and voice their support for are: >=20 > A) Define the COSE Token within the COSE working group along side the = COSE Messages (and potentially COSE Auxiliary Algorithms) draft. > B) Define the COSE Token inside the OAuth working group. > C) Define the COSE Token inside the ACE working group. > D) Don=E2=80=99t define the COSE Token anywhere. > E) You need more information to decide. > F) You don=E2=80=99t give a flying rat about the COSE Token.* >=20 > The consensus call will remain open for two weeks from today, closing = on November 21, 2015; at which time, hopefully we will have a clear = answer and direction to point this work. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sat Nov 21 09:39:48 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20AEB1AD06E for ; Sat, 21 Nov 2015 09:39:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.786 X-Spam-Level: X-Spam-Status: No, score=-4.786 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id is7T6h4m4M4N for ; Sat, 21 Nov 2015 09:39:45 -0800 (PST) Received: from dmz-mailsec-scanner-8.mit.edu (dmz-mailsec-scanner-8.mit.edu [18.7.68.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDADF1AD06D for ; Sat, 21 Nov 2015 09:39:45 -0800 (PST) X-AuditID: 12074425-f793c6d000006975-c8-5650ac60ad11 Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-8.mit.edu (Symantec Messaging Gateway) with SMTP id 52.2C.26997.06CA0565; Sat, 21 Nov 2015 12:39:44 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id tALHdhC0016587 for ; Sat, 21 Nov 2015 12:39:44 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tALHd0wh017501 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sat, 21 Nov 2015 12:39:43 -0500 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Justin Richer In-Reply-To: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> Date: Sat, 21 Nov 2015 12:39:43 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: References: <8A64429C-0F3F-4257-A9D8-066B8070A036@mit.edu> To: cose@ietf.org X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrEIsWRmVeSWpSXmKPExsUixG6nrpuwJiDM4MksFYtpW6eyOjB6LFny kymAMYrLJiU1J7MstUjfLoEr427bL9aCwzwV/4+fZm5g7OLqYuTkkBAwkdhy9SM7hC0mceHe erYuRi4OIYHFTBLrjrxmhHCOMkrcXX4NyvnKJNF7+T4LSAuzgLrEn3mXmEFsXgE9iVe3LrOC 2MICphJv5+wBs9kEVCWmr2lhArE5Bawlzh1uBVvHAhRfv6iLGWKOtsSyha+h5lhJfOrbAVYv BGSvfDsfaBcHh4iAoMTdTnOIS2Uldv9+xDSBUWAWkitmIbliFpKpCxiZVzHKpuRW6eYmZuYU pybrFicn5uWlFula6OVmluilppRuYgQHpYvqDsYJh5QOMQpwMCrx8HIU+IcJsSaWFVfmHmKU 5GBSEuWtfQ0U4kvKT6nMSCzOiC8qzUktPsQowcGsJMKbsCAgTIg3JbGyKrUoHyYlzcGiJM47 94tvmJBAemJJanZqakFqEUxWhoNDSYKXYzVQo2BRanpqRVpmTglCmomDE2Q4D9DwW6tAhhcX JOYWZ6ZD5E8xKkqJ874BSQiAJDJK8+B6QUkj4e1h01eM4kCvCPPag6zgASYcuO5XQIOZgAb/ rvEFGVySiJCSamB0Pxawo0TR+YdrFov+LkGpHScbrh7aIMR2Oi73U6DCNS+Ng9ctPHRl2N3e K/Yu+33ng/b852uDxY5crJrWJe1RNuO1X2TCm8p7j+y2SAV0nnqddIX1gO30UxX2VtLVcexm xrzXGzcu32LdGXS87bf73hUPvs39weud1bXwYnd79w6vLWfK5zQrsRRnJBpqMRcVJwIA7ub5 JvUCAAA= Archived-At: Subject: Re: [COSE] Consensus Call: Placement of CDDL X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Nov 2015 17:39:47 -0000 There=E2=80=99s a very clear consensus that the CDDL will be inline with = the text and marked as non-normative examples. The drafts will reflect = that. =E2=80=94 Justin > On Nov 7, 2015, at 3:02 AM, Justin Richer wrote: >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the placement of the CDDL formatted text within the messages = draft. The four positions we are asking the working group to consider = and voice their support for are: >=20 > A) Place the CDDL at the end of the document in an appendix. Other = examples will remain inline. > B) Place the CDDL inline with the normative text alongside other = examples. > C) You need more information to decide. > D) You don=E2=80=99t give a flying rat about CDDL.* >=20 > Note that this proposal does NOT consider removal of CDDL or = declaration of normative dependence on CDDL. The English text will = remain the normative form and the CDDL will remain a non-normative = example. The (unfinished, unhomed) CDDL draft will remain an informative = reference. >=20 > The consensus call will remain open for two weeks from today, closing = on November 21, 2015; at which time, hopefully we will have a clear = answer and direction for our editor. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sat Nov 21 09:42:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 553CA1AD080 for ; Sat, 21 Nov 2015 09:42:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.786 X-Spam-Level: X-Spam-Status: No, score=-4.786 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dzWGDsTkufMO for ; Sat, 21 Nov 2015 09:42:37 -0800 (PST) Received: from dmz-mailsec-scanner-2.mit.edu (dmz-mailsec-scanner-2.mit.edu [18.9.25.13]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A34A41AD079 for ; Sat, 21 Nov 2015 09:42:37 -0800 (PST) X-AuditID: 1209190d-f79306d000006b70-ec-5650ad0c280b Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-2.mit.edu (Symantec Messaging Gateway) with SMTP id E2.D4.27504.C0DA0565; Sat, 21 Nov 2015 12:42:36 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id tALHgZev028869 for ; Sat, 21 Nov 2015 12:42:36 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tALHgYvA018354 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sat, 21 Nov 2015 12:42:35 -0500 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Justin Richer In-Reply-To: Date: Sat, 21 Nov 2015 12:42:34 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: cose@ietf.org X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrIIsWRmVeSWpSXmKPExsUixCmqrMuzNiDM4PYicYtpW6eyOjB6LFny kymAMYrLJiU1J7MstUjfLoEr49TKFywFL/kq9jYeZ29g/MTdxcjBISFgIrFhk14XIyeQKSZx 4d56ti5GLg4hgcVMEsvb5jJDOEcZJTa+v8EE4Xxlkvj08A4TSAuzgLrEn3mXmEFsXgE9iVe3 LrOC2MIC2hLbG26yg9hsAqoS09e0gNVzClhLTF7yiwXEZgGKfzx2hx1ijrbEsoWvoeZYSdw9 9ooNxBYCsh+cP8UCcqmIgKDE3U5ziEtlJXb/fsQ0gVFgFpIrZiG5YhaSqQsYmVcxyqbkVunm JmbmFKcm6xYnJ+blpRbpGunlZpbopaaUbmIEh6Qk7w7GdweVDjEKcDAq8fByFPiHCbEmlhVX 5h5ilORgUhLlrX0NFOJLyk+pzEgszogvKs1JLT7EKMHBrCTCm7AgIEyINyWxsiq1KB8mJc3B oiTOO/eLb5iQQHpiSWp2ampBahFMVoaDQ0mCd9EaoEbBotT01Iq0zJwShDQTByfIcB6g4Rwg NbzFBYm5xZnpEPlTjIpS4rx3VgMlBEASGaV5cL2glJHw9rDpK0ZxoFeEeb+CVPEA0w1c9yug wUxAg3/X+IIMLklESEk1MJbIFvwzvXff5bCLkeDUB8v6RSvKdsprVy4/pDtnTaUdu+mBiwz5 drw7ppipqcgt0/q9d9uegPVhihMlPy37f+U5k9vB9ZNjpE++LS2ya/jqd21zxRnrfHWjj4Lf p7xoEnM9FykXcunSr1OvEkOm3r+5nuF8s8bJCm+OL2ctec7/7ou02iWXsk2JpTgj0VCLuag4 EQDwHZmc9AIAAA== Archived-At: Subject: Re: [COSE] Consensus Call: RSA 1.5 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Nov 2015 17:42:39 -0000 There=E2=80=99s consensus for dropping RSA 1.5 encryption support = entirely, so that will be done. There=E2=80=99s also enough support for supporting RSA 1.5 signatures = that putting them into an auxiliary draft sounds like the best approach. = The chairs would like to ask for volunteers to edit such an auxiliary = draft. =E2=80=94 Justin, your COSE chair > On Nov 7, 2015, at 3:01 AM, Justin Richer wrote: >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the definition of RSA 1.5 algorithms within the messages draft = or an auxiliary draft. This functionality is analogous to the RS* series = of signature methods in JWS and the RSA1_5 encryption method in JWE. The = five positions we are asking the working group to consider and voice = their support for are: >=20 > A) Drop all support for RSA 1.5 signatures and encryption. > B) Define RSA 1.5 support in an auxiliary draft. > C) Define RSA 1.5 support in the main draft (note that this option was = previously discussed on the list and did not find favor at the time, so = if you want it back you=E2=80=99ll need to make a strong case). > D) You need more information to decide. > E) You don=E2=80=99t give a flying rat about RSA 1.5.* >=20 > Note that this is distinct from RSA PSS support which is being = discussed in a separate thread. >=20 > The consensus call will remain open for two weeks from today, closing = on November 21, 2015; at which time, hopefully we will have a clear = answer and direction for our editor. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sat Nov 21 09:43:33 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EA0571AD094 for ; Sat, 21 Nov 2015 09:43:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.786 X-Spam-Level: X-Spam-Status: No, score=-4.786 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OcArHDzu9YMT for ; Sat, 21 Nov 2015 09:43:30 -0800 (PST) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7969A1AD08F for ; Sat, 21 Nov 2015 09:43:30 -0800 (PST) X-AuditID: 1209190f-f79d06d000004b20-bb-5650ad41303f Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id B6.D3.19232.14DA0565; Sat, 21 Nov 2015 12:43:29 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id tALHhSbY013873 for ; Sat, 21 Nov 2015 12:43:29 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tALHgYvB018354 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sat, 21 Nov 2015 12:43:28 -0500 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Justin Richer In-Reply-To: Date: Sat, 21 Nov 2015 12:43:28 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <62997075-2757-4B65-BE44-8ECC364ED663@mit.edu> References: To: cose@ietf.org X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrPIsWRmVeSWpSXmKPExsUixCmqreu4NiDMYPdaKYtpW6eyOjB6LFny kymAMYrLJiU1J7MstUjfLoEr4/e8RvaCP9wVR99NY2lgPMvZxcjJISFgIrH57RImCFtM4sK9 9WxdjFwcQgKLmST2/2tjBUkICRxllLi1xggi8ZVJYtPGbWAdzALqEn/mXWIGsXkF9CRe3boM 1MDBISygLTHlrgZImE1AVWL6mhawck4Ba4n2b80sIDYLUPzm270sEGO0JZYtfM0M0sorYCXR fUMGYq2VxP5N3WwgYREBQYm7neYQZ8pK7P79iGkCo8AsJDfMQnLDLCRDFzAyr2KUTcmt0s1N zMwpTk3WLU5OzMtLLdI10cvNLNFLTSndxAgOR0n+HYzfDiodYhTgYFTi4U0o8g8TYk0sK67M PcQoycGkJMpb+xooxJeUn1KZkVicEV9UmpNafIhRgoNZSYQ3YUFAmBBvSmJlVWpRPkxKmoNF SZx37hffMCGB9MSS1OzU1ILUIpisDAeHkgSv0hqgRsGi1PTUirTMnBKENBMHJ8hwHqDhriA1 vMUFibnFmekQ+VOMilLivMEgCQGQREZpHlwvKF0kvD1s+opRHOgVYV49kCoeYKqB634FNJgJ aPDvGl+QwSWJCCmpBkaRREdehnsGTXHHONssKje33bXqzHvga7zRvCSjrOOHjrDMkwJ+h86Q +Te046WsMk/Mj35RHy31+fdKA4NpWZl3Lit1JsiF5Lr/Lz/Z3BB5t+6/nkty5OnzC+cwLb4y RWDXlpfVZhdiHE9c+bLivGpiUGT4hLdtl3XSM01/3Lp7aXVl1vwdgkosxRmJhlrMRcWJAJEj 6YryAgAA Archived-At: Subject: Re: [COSE] Consensus Call: RSA PSS X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Nov 2015 17:43:32 -0000 There=E2=80=99s a reasonably strong consensus to define RSA PSS support = in an auxiliary draft. The chairs would like to ask for volunteers to = edit such an auxiliary draft. =E2=80=94 Justin, your COSE chair > On Nov 7, 2015, at 3:02 AM, Justin Richer wrote: >=20 > At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the definition of RSA PSS algorithms within the messages draft = or an auxiliary draft. This functionality is analogous to the PS* series = of signature methods in JWS. The five positions we are asking the = working group to consider and voice their support for are: >=20 > A) Drop all support for RSA PSS signatures and encryption. > B) Define RSA PSS support in an auxiliary draft. > C) Define RSA PSS support in the main draft. > D) You need more information to decide. > E) You don=E2=80=99t give a flying rat about RSA PSS.* >=20 > Note that this is separate from RSA 1.5 support, which is being = discussed on a separate thread. >=20 > The consensus call will remain open for two weeks from today, closing = on November 21, 2015; at which time, hopefully we will have a clear = answer and direction for our editor. >=20 > Thank you, > =E2=80=94 Justin & Kepeng, your COSE chairs >=20 > * I promised those in the room at Yokohama to offer a flying rat = option, for which I am deeply sorry. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sat Nov 21 11:54:31 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03A8C1B2B05 for ; Sat, 21 Nov 2015 11:54:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wdmCt0U7pDww for ; Sat, 21 Nov 2015 11:54:27 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0137.outbound.protection.outlook.com [65.55.169.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34C5F1A1AE6 for ; Sat, 21 Nov 2015 11:54:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=8iLl59VzEvWAroGQCfNOUOx/zfKKZQkCKcttcQ47xd4=; b=OGVoCVG7GHLwHXZJ7bhmjpIUsv9gMMiZMBr9Kqw/1UJBlB+Kmoq8PAtptcDBRn9PGTnZBIkBzidO0XCRDAY6TC2AATbQpMA+AHX1GeZXk+ahD5dw5PBif10sucLJBIQU7t27PnVlx37IUpmX9aLh8OIaALbmGi1dC6YYzvc2yXU= Received: from BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) by BY2PR03MB442.namprd03.prod.outlook.com (10.141.141.145) with Microsoft SMTP Server (TLS) id 15.1.325.17; Sat, 21 Nov 2015 19:54:24 +0000 Received: from BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) by BY2PR03MB442.namprd03.prod.outlook.com ([10.141.141.145]) with mapi id 15.01.0325.019; Sat, 21 Nov 2015 19:54:24 +0000 From: Mike Jones To: Justin Richer , Jim Schaad , "cose@ietf.org" Thread-Topic: [COSE] MAC with no recipient structures Thread-Index: AdEZrBdSSIa9OxvISLeJdU4BkqsMwwJuLwEAAExCDuA= Date: Sat, 21 Nov 2015 19:54:24 +0000 Message-ID: References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> <564ECB3C.1070203@mit.edu> In-Reply-To: <564ECB3C.1070203@mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.85.157] x-microsoft-exchange-diagnostics: 1; BY2PR03MB442; 5:8sfPRf4+6aoy8B8/z5Qsns+6uu8cEYL07v4NJ2JKwhIDyWHkKz9ITpd6p0P+/OBKj8i+3uUzRHOXB2K9bge1+k592QuZQ8/+SA0uTdLfrWaRxzUXQl/rXtE2nqXgEBnp/fMsTEQJ/w2ITRmEbZgBMg==; 24:UlJ7cWaLF8DH3qAiQSHzif5Y9+j+j/lt1FajnNG1Wm6UysGUjuO4eX4kuiNZ15PasM5mWkPVAQMSpwzY5d+EGCP2LPMr9uXcZL7x9Ps0gn8=; 20:yuBNqn7oxYef9hm1JWpYUeO2EWKfCFOzNYPdgcx1FHefUpefdUDPt+SV5q5FH2W+2apLEB97TxN69bT1wao0OQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB442; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(10201501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB442; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB442; x-forefront-prvs: 076777155F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(13464003)(199003)(479174004)(189002)(377454003)(24454002)(2950100001)(105586002)(10090500001)(106356001)(40100003)(92566002)(99286002)(189998001)(97736004)(54356999)(122556002)(5008740100001)(87936001)(101416001)(2900100001)(76176999)(77096005)(66066001)(15975445007)(50986999)(2171001)(8990500004)(2501003)(5001770100001)(10290500002)(5890100001)(5001960100002)(5003600100002)(5007970100001)(19580405001)(11100500001)(5002640100001)(19580395003)(5004730100002)(74316001)(10400500002)(5001920100001)(586003)(86362001)(76576001)(33656002)(3846002)(102836003)(5005710100001)(86612001)(81156007)(107886002)(6116002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB442; H:BY2PR03MB442.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2015 19:54:24.3035 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB442 Archived-At: Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Nov 2015 19:54:30 -0000 As a point of clarification, this thread wasn't about removing MAC. It was= about adding a MAC representation with no explicit recipient - the equival= ent of the JWS example in http://tools.ietf.org/html/rfc7515#section-3.3. This feature request is tracked as https://github.com/cose-wg/cose-issues/i= ssues/10 - Make "recipients" field optional. -- Mike -----Original Message----- From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Justin Richer Sent: Thursday, November 19, 2015 11:27 PM To: Jim Schaad ; cose@ietf.org Subject: Re: [COSE] MAC with no recipient structures What I'm hearing from this thread is a lot of support for plain MAC structu= res, including several documented use cases. Not the least of which is mapp= ing to JOSE's HS* algorithm suite in JWS, one of the two most-used and most= -successful portions of JOSE to date. Consequently, I'm not seeing any consensus to drop plain MAC support in fav= or of any other method. I'm also not seeing opposition to defining AEAD str= uctures in addition to MAC structures in COSE and allowing applications to = choose. Therefore, we'll keep MAC in place until there's sufficient consensus to re= move the capability from COSE. Thank you, -- Justin, your COSE chair. On 11/7/2015 5:39 PM, Jim Schaad wrote: > People keep telling me that they want to have a version of MACs that=20 > do not have a set of recipient information attached so that they can=20 > do direct MACs. I keep asking for a use case where this makes sense. =20 > In all of the use cases that I have been presented so far, a better=20 > answer is going to be to do an AEAD encrypted item rather than a MACed it= em. > > The scenario that wants this is going to be: > > Alice sends data to Bob in such a way that Bob can authenticate the data. > Eve needs to be able to read the data in transit, without knowing if=20 > the message contains data or misinformation and will act on the=20 > message as if it were data. > > The difference in message size between MAC and Encryption is going to=20 > be minimal, at most a few bytes. The execution difference is going to=20 > be a few extra encryption operations. > > What use cases exist for this where encryption is not a better=20 > security answer anyway. > > Jim > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose From nobody Sat Nov 21 12:06:02 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E242A1B2B1E for ; Sat, 21 Nov 2015 12:06:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xYJwD0MgH2zG for ; Sat, 21 Nov 2015 12:05:58 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext1.iad.github.net [192.30.252.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6FA01B2B19 for ; Sat, 21 Nov 2015 12:05:58 -0800 (PST) Date: Sat, 21 Nov 2015 12:05:57 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448136357; bh=OgOlGRKG3dGjiTrWGKGelUGfjd1dt06VC7B5xXsov3k=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=IKOTUWrg41YS9EstpCZT4xOoiEEUxNbYwdHT4r8QpAHYRcimq2Lh7SsR5pXIyqix5 8Z48Y+vvoAnV7xaAXWh7jtMk9yBJOegG3JwROG/HgFhycMTKL1g7No1pd8gGNe/qTo FvTnZ77mNDIHSZDNv/yu55nXCp4dVljfcxUP0DaY= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5650cea58693d_59343f8b1f7ab2c0900976"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Retain_text_marked_=E2=80=9CTe?= =?utf-8?q?xt_from_here_to_start_of_next_section_to_be_removed=E2=80=9D_?= =?utf-8?b?KCMxMSk=?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Nov 2015 20:06:01 -0000 ----==_mimepart_5650cea58693d_59343f8b1f7ab2c0900976 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable There=E2=80=99s a very clear consensus that the CDDL will be inline with = the text and marked as non-normative examples. The drafts will reflect th= at. =E2=80=94 Justin --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/11#issuecomment-158678047= ----==_mimepart_5650cea58693d_59343f8b1f7ab2c0900976 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

There=E2=80=99s a very clear consensus that the CDDL will be inline wi= th the text and marked as non-normative examples. The drafts will reflect= that.

=E2=80=94 Justin

&m= dash;
Reply to this email directly or view it on GitHub= .3D""

----==_mimepart_5650cea58693d_59343f8b1f7ab2c0900976-- From nobody Sun Nov 22 13:07:03 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24C6B1B351F for ; Sun, 22 Nov 2015 13:07:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.908 X-Spam-Level: X-Spam-Status: No, score=-5.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XJmX1pnA06Dd for ; Sun, 22 Nov 2015 13:07:00 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69ABA1B351E for ; Sun, 22 Nov 2015 13:07:00 -0800 (PST) Date: Sun, 22 Nov 2015 13:06:59 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448226419; bh=jElhx+UisZfatC1yVTyOdAHMB6sk1Hmw82OHDi/Aw0s=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=MuDSyVJtRW30Zcw9JA64KP4jsiswLdSDK1uakiKNnZXhM/D7G3fw1tStmAME8FryH KWB9osGQ4Kzyrs8VxoJwfQFzpwusjfEjG9t01Q9kI9d8eK5D6WxD6O5MnFrUfXTSJB xQH+OkJNy+SjrRkNiACArl6qbDY6suOIsSYqXbtw= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_56522e733380b_7b3c3f9d17b392c0279638"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Add symbolic annotations to all examples (#24) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Nov 2015 21:07:02 -0000 ----==_mimepart_56522e733380b_7b3c3f9d17b392c0279638 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Put in a first pass at the annotation. It is messy but it needs to be looked at to determine what needs to be cleaned up better. It is a requirement that one can build the tests from the output so the suggested format would not have worked, however https://datatracker.ietf.org/doc/draft-greevenbosch-appsawg-cbor-cddl/ has a new expanded version of diagnostic CDDL which is used here. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/24#issuecomment-158799744 ----==_mimepart_56522e733380b_7b3c3f9d17b392c0279638 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Put in a first pass at the annotation. It is messy but it needs to be looked at to determine what needs to be cleaned up better. It is a requirement that one can build the tests from the output so the suggested format would not have worked, however https://datatracker.ietf.org/doc/draft-greevenbosch-appsawg-cbor-cddl/ has a new expanded version of diagnostic CDDL which is used here.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_56522e733380b_7b3c3f9d17b392c0279638-- From nobody Sun Nov 22 13:25:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60CEE1B357F for ; Sun, 22 Nov 2015 13:25:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.884 X-Spam-Level: X-Spam-Status: No, score=-2.884 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.585] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LbySP3sO0KjQ for ; Sun, 22 Nov 2015 13:25:35 -0800 (PST) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E011D1B357C for ; Sun, 22 Nov 2015 13:25:34 -0800 (PST) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX01.ad.nexusgroup.com (10.75.28.40) with Microsoft SMTP Server (TLS) id 15.0.995.29; Sun, 22 Nov 2015 22:25:32 +0100 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Sun, 22 Nov 2015 22:25:32 +0100 From: =?utf-8?B?RXJpayBXYWhsc3Ryw7ZtIG5lWHVz?= To: Justin Richer Thread-Topic: [COSE] Consensus Call: Adoption of the COSE Token Thread-Index: AQHRGTKb6mzibdroQ0aWbiONihL/Fp6mw9kAgAHRn4A= Date: Sun, 22 Nov 2015 21:25:31 +0000 Message-ID: References: <7505C89A-FCA1-4AD6-93F6-BDE3517AF1B4@mit.edu> In-Reply-To: <7505C89A-FCA1-4AD6-93F6-BDE3517AF1B4@mit.edu> Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.2104) x-originating-ip: [37.247.26.197] Content-Type: multipart/alternative; boundary="_000_C956700F1FE345C4AF85000A7A16F90Bnexusgroupcom_" MIME-Version: 1.0 Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Nov 2015 21:25:38 -0000 --_000_C956700F1FE345C4AF85000A7A16F90Bnexusgroupcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNClllcywgd2UgaGF2ZSBhIGRyYWZ0IHBvc3RlZCBpbiB0aGUgT0F1dGggV0cgZm9yIGEg Q0JPUiBXZWIgVG9rZW4gKENXVCkuIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaWQvZHJhZnQtd2Fo bHN0cm9lbS1vYXV0aC1jYm9yLXdlYi10b2tlbi0wMC50eHQNCg0KV2Ugd2FudCB0byBrZWVwIGl0 IHRoZXJlIGFuZCByZWZlcmVuY2UgdGhlIEpXVCBjbGFpbXMgKGFsc28gZGVmaW5lZCBpbiBPQXV0 aCBXRykgYW5kIGxhdGVyIGFkZCBhdHRyaWJ1dGVzIG5lZWRlZCBmb3IgYXV0aGVudGljYXRpb24g YW5kIGF1dGhvcml6YXRpb24gZm9yIElvVCB0byBKV1QvQ1dUIGluIEFDRSBXRy4NCg0KVGhhbmtz DQpFcmlrDQoNCg0KDQpPbiAyMSBOb3YgMjAxNSwgYXQgMTg6MzksIEp1c3RpbiBSaWNoZXIgPGpy aWNoZXJATUlULkVEVTxtYWlsdG86anJpY2hlckBNSVQuRURVPj4gd3JvdGU6DQoNClJlYWRpbmcg dGhyb3VnaCB0aGUgdGhyZWFkcyBhbiBvcGluaW9ucywgdGhlcmUgaXMgbm8gY2xlYXIgY29uc2Vu c3VzIGFzIHRvIHdoZXJlIHRoZSB3b3JrIHNob3VsZCBiZSBkb25lLiBUaGVyZSBpcyByb3VnaGx5 IGVxdWFsIHN1cHBvcnQgZm9yIGRvaW5nIHRoaXMgaW4gYW55IG9mIHRoZSB0aHJlZSBvZmZlcmVk IHdvcmtpbmcgZ3JvdXBzLg0KDQpUaGVyZSBpcyBjbGVhciBjb25zZW5zdXMgdGhhdCBpdCBzaG91 bGQgYmUgZG9uZSBhbmQgdGhhdCwgYXMgbXVjaCBhcyBwb3NzaWJsZSwgaXQgc2hvdWxkIGJlIGEg ZGlyZWN0IG1hcCBvZiB0aGUgZXhpc3RpbmcgSldUIHBheWxvYWQgb2JqZWN0IGFuZCBjb21tb24g Y2xhaW1zLg0KDQpJbiB0aGlzIGxpZ2h0LCBzb21lb25lIG5lZWRzIHRvIGp1c3Qgc3RhcnQgdGhl IHdvcmsgYXMgYW4gaW5kaXZpZHVhbCBkcmFmdCBhbmQgcHVzaCBmb3J3YXJkLCBhbmQgd2hpY2hl dmVyIHdvcmtpbmcgZ3JvdXAgbW9zdCB3YW50cyB0byBjYW4gcGljayBpdCB1cCBhbmQgcHVibGlz aCBpdC4gSSBoYXZlIG5vIHF1YWxtcyBvbiBhY2NlcHRpbmcgdGhpcyB3b3JrIHdpdGhpbiB0aGUg Q09TRSB3b3JraW5nIGdyb3VwIGFuZCBJIGJlbGlldmUgdGhlcmUgaXMgZW5vdWdoIHN1cHBvcnQg dG8gd2FycmFudCB0aGF0IHBsYWNlbWVudCBpZiBhbiBhdXRob3Igc3VibWl0cyBhIGRyYWZ0IGhl cmUgKGFuZCB0aGlzIHJlbWFpbnMgbXkgcHJlZmVyZW5jZSBhcyBhbiBpbmRpdmlkdWFsKSwgYnV0 IEkgd2lsbCBub3Qgb2JqZWN0IHRvIGFub3RoZXIgZ3JvdXAgcGlja2luZyBpdCB1cC4NCg0KSSBi ZWxpZXZlLCB3aXRoIGFsbCBvZiB0aGUgb3ZlcmxhcCBiZXR3ZWVuIGdyb3VwcywgdGhhdCB3ZSB3 aWxsIGhhdmUgbm8gdHJvdWJsZSBnZXR0aW5nIHRoZSDigJxyaWdodCBwZW9wbGXigJ0gdG8gbG9v ayBhdCBpdC4gQWRkaXRpb25hbGx5LCBpdCBpcyBjbGVhciB0aGF0IGl0IHdpbGwgYmUgdmVyeSBi ZW5lZmljaWFsIHRvIGhhdmUgZm9ybWFsIHJldmlld3MgZnJvbSBhbGwgdGhyZWUgZ3JvdXBzIG9u Y2UgdGhlIGRyYWZ0IGhhcyByZWFjaGVkIGEgbWF0dXJlIHN0YXR1cy4NCg0KVGhhbmtmdWxseSwg RXJpayBoYXMgYWxyZWFkeSBkb25lIHRoaXMgd2l0aCBoaXMg4oCcQ09TRSBXZWIgVG9rZW7igJ0g ZHJhZnQuIEhl4oCZcyBpbml0aWFsbHkgdGFyZ2V0ZWQgdGhpcyBhdCB0aGUgT0F1dGggd29ya2lu ZyBncm91cCwgYW5kIHRoZSB3b3JrIHN0YXJ0ZWQgaW4gQUNFLCBzbyBJIGNhbGwgdG8gdGhlIGF1 dGhvciB0byBwaWNrIGEgbG9jYXRpb24gYW5kIHJ1biB3aXRoIGl0Lg0KDQrigJQgSnVzdGluLCB5 b3VyIENPU0UgY2hhaXINCg0KT24gTm92IDcsIDIwMTUsIGF0IDM6MDEgQU0sIEp1c3RpbiBSaWNo ZXIgPGpyaWNoZXJATUlULkVEVTxtYWlsdG86anJpY2hlckBNSVQuRURVPj4gd3JvdGU6DQoNCkF0 IHRoZSBZb2tvaGFtYSBtZWV0aW5nLCB0aGUgY2hhaXJzIGFncmVlZCB0byBkbyBhIGNvbnNlbnN1 cyBjYWxsIHJlZ2FyZGluZyB0aGUgYWRvcHRpb24gYW5kIHBsYWNlbWVudCBvZiBuZXcgd29yayB0 byBkZWZpbmUgYSBDT1NFIFRva2VuLCBhbmFsb2dvdXMgdG8gdGhlIEpXVCBmcm9tIEpPU0UuIElu IHRoZSByb29tLCB0aGVyZSB3YXMgYSBnZW5lcmFsIHNlbnRpbWVudCBvZiBzdXBwb3J0IGZvciB0 aGUgd29yayBiZWluZyBkb25lLCB3aXRoIHRoZSB3aWRlIGFkb3B0aW9uIG9mIEpXVCBhbmQgaXRz IGRyaXZpbmcgb2YgSk9TRSBiZWluZyBhIGNvbW1vbiB0aGVtZSBvZiBwcmVjZWRlbnQuIFdoYXQg d2FzbuKAmXQgY2xlYXIgaXMgd2hlcmUgdGhlIHdvcmsgc2hvdWxkIGJlIGRvbmUgYW5kIHRvIHdo YXQgZW5kIGl0IHNob3VsZCBkcml2ZS4gVGhlIHNpeCBwb3NpdGlvbnMgd2UgYXJlIGFza2luZyB0 aGUgd29ya2luZyBncm91cCB0byBjb25zaWRlciBhbmQgdm9pY2UgdGhlaXIgc3VwcG9ydCBmb3Ig YXJlOg0KDQpBKSBEZWZpbmUgdGhlIENPU0UgVG9rZW4gd2l0aGluIHRoZSBDT1NFIHdvcmtpbmcg Z3JvdXAgYWxvbmcgc2lkZSB0aGUgQ09TRSBNZXNzYWdlcyAoYW5kIHBvdGVudGlhbGx5IENPU0Ug QXV4aWxpYXJ5IEFsZ29yaXRobXMpIGRyYWZ0Lg0KQikgRGVmaW5lIHRoZSBDT1NFIFRva2VuIGlu c2lkZSB0aGUgT0F1dGggd29ya2luZyBncm91cC4NCkMpIERlZmluZSB0aGUgQ09TRSBUb2tlbiBp bnNpZGUgdGhlIEFDRSB3b3JraW5nIGdyb3VwLg0KRCkgRG9u4oCZdCBkZWZpbmUgdGhlIENPU0Ug VG9rZW4gYW55d2hlcmUuDQpFKSBZb3UgbmVlZCBtb3JlIGluZm9ybWF0aW9uIHRvIGRlY2lkZS4N CkYpIFlvdSBkb27igJl0IGdpdmUgYSBmbHlpbmcgcmF0IGFib3V0IHRoZSBDT1NFIFRva2VuLioN Cg0KVGhlIGNvbnNlbnN1cyBjYWxsIHdpbGwgcmVtYWluIG9wZW4gZm9yIHR3byB3ZWVrcyBmcm9t IHRvZGF5LCBjbG9zaW5nIG9uIE5vdmVtYmVyIDIxLCAyMDE1OyBhdCB3aGljaCB0aW1lLCBob3Bl ZnVsbHkgd2Ugd2lsbCBoYXZlIGEgY2xlYXIgYW5zd2VyIGFuZCBkaXJlY3Rpb24gdG8gcG9pbnQg dGhpcyB3b3JrLg0KDQpUaGFuayB5b3UsDQrigJQgSnVzdGluICYgS2VwZW5nLCB5b3VyIENPU0Ug Y2hhaXJzDQoNCiogSSBwcm9taXNlZCB0aG9zZSBpbiB0aGUgcm9vbSBhdCBZb2tvaGFtYSB0byBv ZmZlciBhIGZseWluZyByYXQgb3B0aW9uLCBmb3Igd2hpY2ggSSBhbSBkZWVwbHkgc29ycnkuDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ09TRSBtYWls aW5nIGxpc3QNCkNPU0VAaWV0Zi5vcmc8bWFpbHRvOkNPU0VAaWV0Zi5vcmc+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCg0KX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCkNPU0UgbWFpbGluZyBsaXN0DQpDT1NFQGlldGYu b3JnPG1haWx0bzpDT1NFQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9jb3NlDQoNCg== --_000_C956700F1FE345C4AF85000A7A16F90Bnexusgroupcom_ Content-Type: text/html; charset="utf-8" Content-ID: <395591381033624FBFF6BCEDDF8359BC@nexusgroup.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGksDQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5ZZXMsIHdlIGhhdmUgYSBkcmFmdCBw b3N0ZWQgaW4gdGhlIE9BdXRoIFdHIGZvciBhIENCT1IgV2ViIFRva2VuIChDV1QpLiZuYnNwOzxh IGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaWQvZHJhZnQtd2FobHN0cm9lbS1vYXV0aC1j Ym9yLXdlYi10b2tlbi0wMC50eHQiIGNsYXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaWQv ZHJhZnQtd2FobHN0cm9lbS1vYXV0aC1jYm9yLXdlYi10b2tlbi0wMC50eHQ8L2E+Jm5ic3A7PC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5X ZSB3YW50IHRvIGtlZXAgaXQgdGhlcmUgYW5kIHJlZmVyZW5jZSB0aGUgSldUIGNsYWltcyAoYWxz byBkZWZpbmVkIGluIE9BdXRoIFdHKSBhbmQgbGF0ZXIgYWRkIGF0dHJpYnV0ZXMgbmVlZGVkIGZv ciBhdXRoZW50aWNhdGlvbiBhbmQgYXV0aG9yaXphdGlvbiBmb3IgSW9UIHRvIEpXVC9DV1QgaW4g QUNFIFdHLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+VGhhbmtzPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkVyaWs8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIDIxIE5vdiAyMDE1LCBhdCAx ODozOSwgSnVzdGluIFJpY2hlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpyaWNoZXJATUlULkVEVSIg Y2xhc3M9IiI+anJpY2hlckBNSVQuRURVPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9 IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj5SZWFkaW5nIHRocm91 Z2ggdGhlIHRocmVhZHMgYW4gb3BpbmlvbnMsIHRoZXJlIGlzIG5vIGNsZWFyIGNvbnNlbnN1cyBh cyB0byB3aGVyZSB0aGUgd29yayBzaG91bGQgYmUgZG9uZS4gVGhlcmUgaXMgcm91Z2hseSBlcXVh bCBzdXBwb3J0IGZvciBkb2luZyB0aGlzIGluIGFueSBvZiB0aGUgdGhyZWUgb2ZmZXJlZCB3b3Jr aW5nIGdyb3Vwcy48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGVyZSBpcyBjbGVhciBj b25zZW5zdXMgdGhhdCBpdCBzaG91bGQgYmUgZG9uZSBhbmQgdGhhdCwgYXMgbXVjaCBhcyBwb3Nz aWJsZSwgaXQgc2hvdWxkIGJlIGEgZGlyZWN0IG1hcCBvZiB0aGUgZXhpc3RpbmcgSldUIHBheWxv YWQgb2JqZWN0IGFuZCBjb21tb24gY2xhaW1zLg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KSW4gdGhpcyBsaWdodCwgc29tZW9uZSBuZWVkcyB0byBqdXN0IHN0YXJ0IHRoZSB3b3JrIGFz IGFuIGluZGl2aWR1YWwgZHJhZnQgYW5kIHB1c2ggZm9yd2FyZCwgYW5kIHdoaWNoZXZlciB3b3Jr aW5nIGdyb3VwIG1vc3Qgd2FudHMgdG8gY2FuIHBpY2sgaXQgdXAgYW5kIHB1Ymxpc2ggaXQuIEkg aGF2ZSBubyBxdWFsbXMgb24gYWNjZXB0aW5nIHRoaXMgd29yayB3aXRoaW4gdGhlIENPU0Ugd29y a2luZyBncm91cCBhbmQgSSBiZWxpZXZlIHRoZXJlIGlzDQogZW5vdWdoIHN1cHBvcnQgdG8gd2Fy cmFudCB0aGF0IHBsYWNlbWVudCBpZiBhbiBhdXRob3Igc3VibWl0cyBhIGRyYWZ0IGhlcmUgKGFu ZCB0aGlzIHJlbWFpbnMgbXkgcHJlZmVyZW5jZSBhcyBhbiBpbmRpdmlkdWFsKSwgYnV0IEkgd2ls bCBub3Qgb2JqZWN0IHRvIGFub3RoZXIgZ3JvdXAgcGlja2luZyBpdCB1cC48YnIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQpJIGJlbGlldmUsIHdpdGggYWxsIG9mIHRoZSBvdmVybGFwIGJldHdl ZW4gZ3JvdXBzLCB0aGF0IHdlIHdpbGwgaGF2ZSBubyB0cm91YmxlIGdldHRpbmcgdGhlIOKAnHJp Z2h0IHBlb3BsZeKAnSB0byBsb29rIGF0IGl0LiBBZGRpdGlvbmFsbHksIGl0IGlzIGNsZWFyIHRo YXQgaXQgd2lsbCBiZSB2ZXJ5IGJlbmVmaWNpYWwgdG8gaGF2ZSBmb3JtYWwgcmV2aWV3cyBmcm9t IGFsbCB0aHJlZSBncm91cHMgb25jZSB0aGUgZHJhZnQgaGFzIHJlYWNoZWQgYSBtYXR1cmUNCiBz dGF0dXMuIDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoYW5rZnVsbHksIEVyaWsgaGFz IGFscmVhZHkgZG9uZSB0aGlzIHdpdGggaGlzIOKAnENPU0UgV2ViIFRva2Vu4oCdIGRyYWZ0LiBI ZeKAmXMgaW5pdGlhbGx5IHRhcmdldGVkIHRoaXMgYXQgdGhlIE9BdXRoIHdvcmtpbmcgZ3JvdXAs IGFuZCB0aGUgd29yayBzdGFydGVkIGluIEFDRSwgc28gSSBjYWxsIHRvIHRoZSBhdXRob3IgdG8g cGljayBhIGxvY2F0aW9uIGFuZCBydW4gd2l0aCBpdC48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQrigJQgSnVzdGluLCB5b3VyIENPU0UgY2hhaXI8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5PbiBOb3YgNywgMjAxNSwgYXQg MzowMSBBTSwgSnVzdGluIFJpY2hlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpyaWNoZXJATUlULkVE VSIgY2xhc3M9IiI+anJpY2hlckBNSVQuRURVPC9hPiZndDsgd3JvdGU6PGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KQXQgdGhlIFlva29oYW1hIG1lZXRpbmcsIHRoZSBjaGFpcnMgYWdyZWVk IHRvIGRvIGEgY29uc2Vuc3VzIGNhbGwgcmVnYXJkaW5nIHRoZSBhZG9wdGlvbiBhbmQgcGxhY2Vt ZW50IG9mIG5ldyB3b3JrIHRvIGRlZmluZSBhIENPU0UgVG9rZW4sIGFuYWxvZ291cyB0byB0aGUg SldUIGZyb20gSk9TRS4gSW4gdGhlIHJvb20sIHRoZXJlIHdhcyBhIGdlbmVyYWwgc2VudGltZW50 IG9mIHN1cHBvcnQgZm9yIHRoZSB3b3JrIGJlaW5nIGRvbmUsIHdpdGggdGhlDQogd2lkZSBhZG9w dGlvbiBvZiBKV1QgYW5kIGl0cyBkcml2aW5nIG9mIEpPU0UgYmVpbmcgYSBjb21tb24gdGhlbWUg b2YgcHJlY2VkZW50LiBXaGF0IHdhc27igJl0IGNsZWFyIGlzIHdoZXJlIHRoZSB3b3JrIHNob3Vs ZCBiZSBkb25lIGFuZCB0byB3aGF0IGVuZCBpdCBzaG91bGQgZHJpdmUuIFRoZSBzaXggcG9zaXRp b25zIHdlIGFyZSBhc2tpbmcgdGhlIHdvcmtpbmcgZ3JvdXAgdG8gY29uc2lkZXIgYW5kIHZvaWNl IHRoZWlyIHN1cHBvcnQgZm9yIGFyZTo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpBKSBE ZWZpbmUgdGhlIENPU0UgVG9rZW4gd2l0aGluIHRoZSBDT1NFIHdvcmtpbmcgZ3JvdXAgYWxvbmcg c2lkZSB0aGUgQ09TRSBNZXNzYWdlcyAoYW5kIHBvdGVudGlhbGx5IENPU0UgQXV4aWxpYXJ5IEFs Z29yaXRobXMpIGRyYWZ0LjxiciBjbGFzcz0iIj4NCkIpIERlZmluZSB0aGUgQ09TRSBUb2tlbiBp bnNpZGUgdGhlIE9BdXRoIHdvcmtpbmcgZ3JvdXAuPGJyIGNsYXNzPSIiPg0KQykgRGVmaW5lIHRo ZSBDT1NFIFRva2VuIGluc2lkZSB0aGUgQUNFIHdvcmtpbmcgZ3JvdXAuPGJyIGNsYXNzPSIiPg0K RCkgRG9u4oCZdCBkZWZpbmUgdGhlIENPU0UgVG9rZW4gYW55d2hlcmUuPGJyIGNsYXNzPSIiPg0K RSkgWW91IG5lZWQgbW9yZSBpbmZvcm1hdGlvbiB0byBkZWNpZGUuPGJyIGNsYXNzPSIiPg0KRikg WW91IGRvbuKAmXQgZ2l2ZSBhIGZseWluZyByYXQgYWJvdXQgdGhlIENPU0UgVG9rZW4uKjxiciBj bGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZSBjb25zZW5zdXMgY2FsbCB3aWxsIHJlbWFpbiBv cGVuIGZvciB0d28gd2Vla3MgZnJvbSB0b2RheSwgY2xvc2luZyBvbiBOb3ZlbWJlciAyMSwgMjAx NTsgYXQgd2hpY2ggdGltZSwgaG9wZWZ1bGx5IHdlIHdpbGwgaGF2ZSBhIGNsZWFyIGFuc3dlciBh bmQgZGlyZWN0aW9uIHRvIHBvaW50IHRoaXMgd29yay48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQpUaGFuayB5b3UsPGJyIGNsYXNzPSIiPg0K4oCUIEp1c3RpbiAmYW1wOyBLZXBlbmcsIHlv dXIgQ09TRSBjaGFpcnM8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQoqIEkgcHJvbWlzZWQg dGhvc2UgaW4gdGhlIHJvb20gYXQgWW9rb2hhbWEgdG8gb2ZmZXIgYSBmbHlpbmcgcmF0IG9wdGlv biwgZm9yIHdoaWNoIEkgYW0gZGVlcGx5IHNvcnJ5LjxiciBjbGFzcz0iIj4NCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0KQ09TRSBt YWlsaW5nIGxpc3Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJtYWlsdG86Q09TRUBpZXRmLm9yZyIg Y2xhc3M9IiI+Q09TRUBpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQpodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2U8YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8 YnIgY2xhc3M9IiI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXzxiciBjbGFzcz0iIj4NCkNPU0UgbWFpbGluZyBsaXN0PGJyIGNsYXNzPSIiPg0KPGEgaHJl Zj0ibWFpbHRvOkNPU0VAaWV0Zi5vcmciIGNsYXNzPSIiPkNPU0VAaWV0Zi5vcmc8L2E+PGJyIGNs YXNzPSIiPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlPGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_C956700F1FE345C4AF85000A7A16F90Bnexusgroupcom_-- From nobody Sun Nov 22 14:23:33 2015 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EB111ACE9A; Sun, 22 Nov 2015 14:23:31 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.11.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151122222331.15480.70256.idtracker@ietfa.amsl.com> Date: Sun, 22 Nov 2015 14:23:31 -0800 Archived-At: Cc: cose@ietf.org Subject: [COSE] I-D Action: draft-ietf-cose-msg-08.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Nov 2015 22:23:31 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption Working Group of the IETF. Title : CBOR Encoded Message Syntax Author : Jim Schaad Filename : draft-ietf-cose-msg-08.txt Pages : 89 Date : 2015-11-22 Abstract: Concise Binary Object Representation (CBOR) is data format designed for small code size and small message size. There is a need for the ability to have the basic security services defined for this data format. This document specifies procesing for signatures, message authentication codes, and encryption using CBOR. This document also specifies a represention for cryptographic keys using CBOR. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cose-msg-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-msg-08 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Nov 22 17:43:53 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E69561B2C61 for ; Sun, 22 Nov 2015 17:43:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.698 X-Spam-Level: X-Spam-Status: No, score=-1.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hp2vgtUrKMaU for ; Sun, 22 Nov 2015 17:43:49 -0800 (PST) Received: from mail-vk0-x22c.google.com (mail-vk0-x22c.google.com [IPv6:2607:f8b0:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7EF561B2C58 for ; Sun, 22 Nov 2015 17:43:49 -0800 (PST) Received: by vkha189 with SMTP id a189so28629815vkh.2 for ; Sun, 22 Nov 2015 17:43:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=GNn/AAQGHWOXX8HHzjpIOgtMlhSHmUWgFY8pyI2Vusc=; b=oi1y5CsUw8PF8yAtf3YjNujxmXCub37ZGKdCl24OW/fQkWk2KEUiqSjjmhx8iAywqA da/PKFD93eMbNF6+B0UZmjbODnauBkR15NBosgnyBhpcklom1fdsH1LiQ/kItmxC+O0v skUXVzaRwQKb9axzxjT00mbtJGIdU/1frX1i67jvAX7l5dZWul4hGNMg6K/rjtscw9fe enTNEW64tOteGGz7Oh99KdyktyG+e5TIJxVcjYo6Eg8+giK4WKd+gRiDz1HexAzbFl40 JiYnk7DQYqwtd8Lpfwm93S695PXNhigxAt0GiTSrTQWzCs/aK62t/ClYPJ+Mt0+VANkY p+Kw== X-Received: by 10.31.180.205 with SMTP id d196mr14170926vkf.146.1448243028643; Sun, 22 Nov 2015 17:43:48 -0800 (PST) Received: from [172.20.3.0] ([65.200.157.66]) by smtp.gmail.com with ESMTPSA id w125sm8934955vke.13.2015.11.22.17.43.47 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 22 Nov 2015 17:43:47 -0800 (PST) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: multipart/alternative; boundary=Apple-Mail-6D8EC28B-4960-4120-866E-BAD23D6B5E8D Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (12H143) In-Reply-To: Date: Sun, 22 Nov 2015 20:43:46 -0500 Content-Transfer-Encoding: 7bit Message-Id: <80EA3B4B-6FF2-42F4-8379-0C5D9E4ADE7A@gmail.com> References: <7505C89A-FCA1-4AD6-93F6-BDE3517AF1B4@mit.edu> To: =?utf-8?Q?Erik_Wahlstr=C3=B6m_neXus?= Archived-At: Cc: Justin Richer , "cose@ietf.org" Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 01:43:52 -0000 --Apple-Mail-6D8EC28B-4960-4120-866E-BAD23D6B5E8D Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello, Looking across the three WGs, there are good arguments for doing the work in= each, but ACE would be the best WG for a few reasons. COSE is supposed to be short-lived, let's keep it that way. OAUTH has a full plate, although they tend to be very productive. ACE has just become more focused and I think this could fit well once the OA= UTH solution work is underway. There's enough overlap for this to happen in any of the WGs. Thanks for the discussion, I was waiting to chime in until it was hashed out= a bit to see if there was any overwhelming consensus without influencing th= e outcome. Now that it has quieted down, ACE is probably the best plan. Thanks, Kathleen=20 Sent from my iPhone > On Nov 22, 2015, at 4:25 PM, Erik Wahlstr=C3=B6m neXus wrote: >=20 > Hi, >=20 > Yes, we have a draft posted in the OAuth WG for a CBOR Web Token (CWT). ht= tps://tools.ietf.org/id/draft-wahlstroem-oauth-cbor-web-token-00.txt=20 >=20 > We want to keep it there and reference the JWT claims (also defined in OAu= th WG) and later add attributes needed for authentication and authorization f= or IoT to JWT/CWT in ACE WG. >=20 > Thanks > Erik >=20 >=20 >=20 >> On 21 Nov 2015, at 18:39, Justin Richer wrote: >>=20 >> Reading through the threads an opinions, there is no clear consensus as t= o where the work should be done. There is roughly equal support for doing th= is in any of the three offered working groups. >>=20 >> There is clear consensus that it should be done and that, as much as poss= ible, it should be a direct map of the existing JWT payload object and commo= n claims.=20 >>=20 >> In this light, someone needs to just start the work as an individual draf= t and push forward, and whichever working group most wants to can pick it up= and publish it. I have no qualms on accepting this work within the COSE wor= king group and I believe there is enough support to warrant that placement i= f an author submits a draft here (and this remains my preference as an indiv= idual), but I will not object to another group picking it up. >>=20 >> I believe, with all of the overlap between groups, that we will have no t= rouble getting the =E2=80=9Cright people=E2=80=9D to look at it. Additionall= y, it is clear that it will be very beneficial to have formal reviews from a= ll three groups once the draft has reached a mature status.=20 >>=20 >> Thankfully, Erik has already done this with his =E2=80=9CCOSE Web Token=E2= =80=9D draft. He=E2=80=99s initially targeted this at the OAuth working grou= p, and the work started in ACE, so I call to the author to pick a location a= nd run with it. >>=20 >> =E2=80=94 Justin, your COSE chair >>=20 >>> On Nov 7, 2015, at 3:01 AM, Justin Richer wrote: >>>=20 >>> At the Yokohama meeting, the chairs agreed to do a consensus call regard= ing the adoption and placement of new work to define a COSE Token, analogous= to the JWT from JOSE. In the room, there was a general sentiment of support= for the work being done, with the wide adoption of JWT and its driving of J= OSE being a common theme of precedent. What wasn=E2=80=99t clear is where th= e work should be done and to what end it should drive. The six positions we a= re asking the working group to consider and voice their support for are: >>>=20 >>> A) Define the COSE Token within the COSE working group along side the CO= SE Messages (and potentially COSE Auxiliary Algorithms) draft. >>> B) Define the COSE Token inside the OAuth working group. >>> C) Define the COSE Token inside the ACE working group. >>> D) Don=E2=80=99t define the COSE Token anywhere. >>> E) You need more information to decide. >>> F) You don=E2=80=99t give a flying rat about the COSE Token.* >>>=20 >>> The consensus call will remain open for two weeks from today, closing on= November 21, 2015; at which time, hopefully we will have a clear answer and= direction to point this work. >>>=20 >>> Thank you, >>> =E2=80=94 Justin & Kepeng, your COSE chairs >>>=20 >>> * I promised those in the room at Yokohama to offer a flying rat option,= for which I am deeply sorry. >>> _______________________________________________ >>> COSE mailing list >>> COSE@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose >>=20 >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --Apple-Mail-6D8EC28B-4960-4120-866E-BAD23D6B5E8D Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Hello,

Lookin= g across the three WGs, there are good arguments for doing the work in each,= but ACE would be the best WG for a few reasons.

CO= SE is supposed to be short-lived, let's keep it that way.

OAUTH has a full plate, although they tend to be very productive.

ACE has just become more focused and I think this coul= d fit well once the OAUTH solution work is underway.

There's enough overlap for this to happen in any of the WGs.
Thanks for the discussion, I was waiting to chime in until it wa= s hashed out a bit to see if there was any overwhelming consensus without in= fluencing the outcome.  Now that it has quieted down, ACE is probably t= he best plan.

Thanks,
Kathleen 
<= br>Sent from my iPhone

On Nov 22, 2015, at 4:25 PM, Erik Wahls= tr=C3=B6m neXus <erik.wa= hlstrom@nexusgroup.com> wrote:

Hi,

Yes, we have a draft posted in the OAuth WG for a CBOR Web T= oken (CWT). https://tools.ietf.org/id/draft-wahlstroe= m-oauth-cbor-web-token-00.txt 

We want to keep it there and reference the JWT claims (also d= efined in OAuth WG) and later add attributes needed for authentication and a= uthorization for IoT to JWT/CWT in ACE WG.

Thanks
Erik



On 21 Nov 2015, at 18:39, Justin Richer <jricher@MIT.EDU> wrote:

Reading through the threads an opinions, there is no clear c= onsensus as to where the work should be done. There is roughly equal support= for doing this in any of the three offered working groups.

There is clear consensus that it should be done and that, as much as possibl= e, it should be a direct map of the existing JWT payload object and common c= laims.

In this light, someone needs to just start the work as an individual draft a= nd push forward, and whichever working group most wants to can pick it up an= d publish it. I have no qualms on accepting this work within the COSE workin= g group and I believe there is enough support to warrant that placement if an author submits a draft here (= and this remains my preference as an individual), but I will not object to a= nother group picking it up.

I believe, with all of the overlap between groups, that we will have no trou= ble getting the =E2=80=9Cright people=E2=80=9D to look at it. Additionally, i= t is clear that it will be very beneficial to have formal reviews from all t= hree groups once the draft has reached a mature status.

Thankfully, Erik has already done this with his =E2=80=9CCOSE Web Token=E2=80= =9D draft. He=E2=80=99s initially targeted this at the OAuth working group, a= nd the work started in ACE, so I call to the author to pick a location and r= un with it.

=E2=80=94 Justin, your COSE chair

On Nov 7, 2015, at 3:01 AM, Justin Rich= er <jricher@MIT.EDU>= wrote:

At the Yokohama meeting, the chairs agreed to do a consensus call regarding t= he adoption and placement of new work to define a COSE Token, analogous to t= he JWT from JOSE. In the room, there was a general sentiment of support for t= he work being done, with the wide adoption of JWT and its driving of JOSE being a common theme of preced= ent. What wasn=E2=80=99t clear is where the work should be done and to what e= nd it should drive. The six positions we are asking the working group to con= sider and voice their support for are:

A) Define the COSE Token within the COSE working group along side the COSE M= essages (and potentially COSE Auxiliary Algorithms) draft.
B) Define the COSE Token inside the OAuth working group.
C) Define the COSE Token inside the ACE working group.
D) Don=E2=80=99t define the COSE Token anywhere.
E) You need more information to decide.
F) You don=E2=80=99t give a flying rat about the COSE Token.*
=
The consensus call will remain open for two weeks from today, closing on Nov= ember 21, 2015; at which time, hopefully we will have a clear answer and dir= ection to point this work.

Thank you,
=E2=80=94 Justin & Kepeng, your COSE chairs

* I promised those in the room at Yokohama to offer a flying rat option, for= which I am deeply sorry.
_______________________________________________
COSE mailing list
COSE@ietf.org
= https://www.ietf.org/= mailman/listinfo/cose

_______________________________________________
COSE mailing list
COSE@ietf.org
= https://www.ietf.org/= mailman/listinfo/cose

____________________= ___________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman= /listinfo/cose
= --Apple-Mail-6D8EC28B-4960-4120-866E-BAD23D6B5E8D-- From nobody Sun Nov 22 18:03:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9F421B2D46 for ; Sun, 22 Nov 2015 18:02:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hEO3fQv8_CMp for ; Sun, 22 Nov 2015 18:02:58 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 852871B2D44 for ; Sun, 22 Nov 2015 18:02:58 -0800 (PST) Date: Sun, 22 Nov 2015 18:02:57 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448244177; bh=uMnQxDEh0v9G+sJkVxKheuEPB1yXmerRYZBA8jwhqnE=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=AXYY4AhKZ5rXCfO4AYlJ8Rbxhx41OYViUHjhBLvUU+qg+mK050iCavcnMRhBQF5RC EYF0Ftq2KeQex/xtur8Sz6Hi1tAhl2uNtXoUl18VsGTOWyjymVzCXriwAvqT+BGp0W 3Xvmjds8htuHYfTamkcEwGM3YXItZNZO2Np2+PD0= From: Jim Schaad To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565273d18ddf4_46a53f8cf0d1d2bc113378c"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Create COSE Token (#42) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 02:03:00 -0000 ----==_mimepart_565273d18ddf4_46a53f8cf0d1d2bc113378c Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Work is expected to be done, however it is expected to be done in the OAUTH working group where the document https://tools.ietf.org/id/draft-wahlstroem-oauth-cbor-web-token-00.txt has been submitted for consideration. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/42#issuecomment-158829075 ----==_mimepart_565273d18ddf4_46a53f8cf0d1d2bc113378c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Work is expected to be done, however it is expected to be done in the OAUTH working group where the document https://tools.ietf.org/id/draft-wahlstroem-oauth-cbor-web-token-00.txt has been submitted for consideration.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_565273d18ddf4_46a53f8cf0d1d2bc113378c-- From nobody Sun Nov 22 18:10:39 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBCAC1B2D6A for ; Sun, 22 Nov 2015 18:10:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yK6z0uEtUzhu for ; Sun, 22 Nov 2015 18:10:36 -0800 (PST) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40AE81B2D63 for ; Sun, 22 Nov 2015 18:10:36 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id AF3712CA09 for ; Sun, 22 Nov 2015 18:10:35 -0800 (PST) From: "Jim Schaad" To: References: <20151122222331.15480.70256.idtracker@ietfa.amsl.com> In-Reply-To: <20151122222331.15480.70256.idtracker@ietfa.amsl.com> Date: Sun, 22 Nov 2015 18:07:47 -0800 Message-ID: <02d301d12593$bfbf71b0$3f3e5510$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQGi5sZBbikgVVkZW18osJYkq5zHtJ8FWU5A Content-Language: en-us Archived-At: Subject: [COSE] FW: I-D Action: draft-ietf-cose-msg-08.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 02:10:37 -0000 This version addressed most of the editorial comments that have been placed in the issue tracker on github along with some of the technical issues. At this time there are 12 issues that I have not labeled as being, in my mind, completed. Jim > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of internet- > drafts@ietf.org > Sent: Sunday, November 22, 2015 2:24 PM > To: i-d-announce@ietf.org > Cc: cose@ietf.org > Subject: [COSE] I-D Action: draft-ietf-cose-msg-08.txt > > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the CBOR Object Signing and Encryption Working > Group of the IETF. > > Title : CBOR Encoded Message Syntax > Author : Jim Schaad > Filename : draft-ietf-cose-msg-08.txt > Pages : 89 > Date : 2015-11-22 > > Abstract: > Concise Binary Object Representation (CBOR) is data format designed > for small code size and small message size. There is a need for the > ability to have the basic security services defined for this data > format. This document specifies procesing for signatures, message > authentication codes, and encryption using CBOR. This document also > specifies a represention for cryptographic keys using CBOR. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-cose-msg-08 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-msg-08 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sun Nov 22 18:41:36 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 175841B2E41 for ; Sun, 22 Nov 2015 18:41:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5M_N5tk9po2Q for ; Sun, 22 Nov 2015 18:41:33 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext8.iad.github.net [192.30.252.199]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D01C11B2E40 for ; Sun, 22 Nov 2015 18:41:33 -0800 (PST) Date: Sun, 22 Nov 2015 18:41:32 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448246492; bh=jV9sN5VdagYfM0WOEUY8jSrj+IyTTcrwlYNWkuKKQGI=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=Ttsuo/2TvK2VjtGE43Ltv+bUSHS/L79TcDetWIApGmJ6punANj054sSRDmAcTtRNS 9n0kRJZ/v6e4rohi8ftBik2zSYYjiu0UalxOfVHo0ElloXjPOhNEJ+IT6BVaiSrHup XSbbKDn83wur7eASXet//hNsNazd6Y6dW+YTjjH0= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_56527cdc8fe82_56453fabfda1d2c010046"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-GitHub-Reason: comment X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Cc: cose-ietf Subject: Re: [COSE] [cose-issues] Create COSE Token (#42) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 02:41:35 -0000 ----==_mimepart_56527cdc8fe82_56453fabfda1d2c010046 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #42. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/42#event-471673684 ----==_mimepart_56527cdc8fe82_56453fabfda1d2c010046 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #42.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_56527cdc8fe82_56453fabfda1d2c010046-- From nobody Sun Nov 22 18:43:45 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E9B81B2E56 for ; Sun, 22 Nov 2015 18:43:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.785 X-Spam-Level: X-Spam-Status: No, score=-4.785 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bXGwajK7uo-S for ; Sun, 22 Nov 2015 18:43:40 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 389C11B2E55 for ; Sun, 22 Nov 2015 18:43:39 -0800 (PST) X-AuditID: 1209190c-f79c96d00000038e-13-56527d5ae533 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 26.FC.00910.A5D72565; Sun, 22 Nov 2015 21:43:38 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id tAN2hcjK007489 for ; Sun, 22 Nov 2015 21:43:38 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tAN2hakX007677 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Sun, 22 Nov 2015 21:43:37 -0500 From: Justin Richer Content-Type: multipart/alternative; boundary="Apple-Mail=_E4481F5C-C987-4C48-9997-8205A6146F48" Message-Id: <38251946-1BA5-4BB0-BD43-8D489EC90F24@mit.edu> Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) Date: Sun, 22 Nov 2015 21:43:36 -0500 References: <20151122222331.15480.70256.idtracker@ietfa.amsl.com> <02d301d12593$bfbf71b0$3f3e5510$@augustcellars.com> To: cose@ietf.org In-Reply-To: <02d301d12593$bfbf71b0$3f3e5510$@augustcellars.com> X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrBIsWRmVeSWpSXmKPExsUixCmqrRtVGxRmMPumtsW0rVNZHRg9liz5 yRTAGMVlk5Kak1mWWqRvl8CVMePZCpaCv+4Vs7c1szUw7rHrYuTkkBAwkfg6qZcdwhaTuHBv PVsXIxeHkMBiJompXR1gCSGBo4wSLY94IeyvTBLzL5WB2GwCqhLT17QwgdjMAgkSf3YdZAOx eQWsJM7t2wRl60m8unWZFcQWFrCX6DpwF2wmC1Dv+sfTWCBmlkqsWv4FqIaDQ0RAUOJupzlI mFPAQeLE8u2sELfJSuz+/YhpAiP/LCTbZiHZABHXlli28DUzhK0psb97OQumuIZE57eJrAsY 2VYxyqbkVunmJmbmFKcm6xYnJ+blpRbpGurlZpbopaaUbmIEB7Akzw7GNweVDjEKcDAq8fBq 6AeFCbEmlhVX5h5ilORgUhLlvWEGFOJLyk+pzEgszogvKs1JLT7EKMHBrCTC+zwDKMebklhZ lVqUD5OS5mBREued+8U3TEggPbEkNTs1tSC1CCYrw8GhJMEbUAPUKFiUmp5akZaZU4KQZuLg BBnOAzTcHKSGt7ggMbc4Mx0if4pRUUqc9281UEIAJJFRmgfXC0owCW8Pm75iFAd6RZjXCaSd B5ic4LpfAQ1mAhp8pCQQZHBJIkJKqoFxVdPMeu9Zj1Y52Dz+2lXjyhi34CmfetOJRTybPK8Z 7pJzfKld8vNm8een3PsDbh30X2D68tlebU3Nz70pdvHsh1V+u1y53/BqyhTxwoII6f27A2rz pZ7lhddHXyg85rN+Z62qYtyZrT/1J0Rf/cXVXLVx+tmJKmur3qQlbCzkNNBbyjwz/L+TEktx RqKhFnNRcSIArNgd5wsDAAA= Archived-At: Subject: Re: [COSE] FW: I-D Action: draft-ietf-cose-msg-08.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 02:43:43 -0000 --Apple-Mail=_E4481F5C-C987-4C48-9997-8205A6146F48 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Everyone, Please review the change set and check to make sure that everything = marked Complete in the issues tracker is fully addressed by this = revision: https://github.com/cose-wg/cose-issues/labels/Complete = In particular, Mike, since you submitted these issues into the tracker, = please comment if any of them are not adequately covered.=20 The chairs will close any non-contentious issues after one week. Thank you, =E2=80=94 Justin, your COSE chair > On Nov 22, 2015, at 9:07 PM, Jim Schaad = wrote: >=20 > This version addressed most of the editorial comments that have been = placed > in the issue tracker on github along with some of the technical = issues. At > this time there are 12 issues that I have not labeled as being, in my = mind, > completed. >=20 > Jim >=20 >=20 >> -----Original Message----- >> From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of internet- >> drafts@ietf.org >> Sent: Sunday, November 22, 2015 2:24 PM >> To: i-d-announce@ietf.org >> Cc: cose@ietf.org >> Subject: [COSE] I-D Action: draft-ietf-cose-msg-08.txt >>=20 >>=20 >> A New Internet-Draft is available from the on-line Internet-Drafts > directories. >> This draft is a work item of the CBOR Object Signing and Encryption > Working >> Group of the IETF. >>=20 >> Title : CBOR Encoded Message Syntax >> Author : Jim Schaad >> Filename : draft-ietf-cose-msg-08.txt >> Pages : 89 >> Date : 2015-11-22 >>=20 >> Abstract: >> Concise Binary Object Representation (CBOR) is data format designed >> for small code size and small message size. There is a need for = the >> ability to have the basic security services defined for this data >> format. This document specifies procesing for signatures, message >> authentication codes, and encryption using CBOR. This document = also >> specifies a represention for cryptographic keys using CBOR. >>=20 >>=20 >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ >>=20 >> There's also a htmlized version available at: >> https://tools.ietf.org/html/draft-ietf-cose-msg-08 >>=20 >> A diff from the previous version is available at: >> https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-msg-08 >>=20 >>=20 >> Please note that it may take a couple of minutes from the time of > submission >> until the htmlized version and diff are available at tools.ietf.org. >>=20 >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >>=20 >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --Apple-Mail=_E4481F5C-C987-4C48-9997-8205A6146F48 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Everyone,

Please review the change set and check to make sure that = everything marked Complete in the issues tracker is fully addressed by = this revision:

https://github.com/cose-wg/cose-issues/labels/Complete

In particular, = Mike, since you submitted these issues into the tracker, please comment = if any of them are not adequately covered. 

The chairs will close any = non-contentious issues after one week.

Thank you,

 =E2=80=94 Justin, your COSE = chair


On = Nov 22, 2015, at 9:07 PM, Jim Schaad <ietf@augustcellars.com> wrote:

This version = addressed most of the editorial comments that have been placed
in the issue tracker on github along with some of the = technical issues.  At
this time there are 12 issues = that I have not labeled as being, in my mind,
completed.

Jim


-----Original = Message-----
From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of internet-
drafts@ietf.org
Sent: Sunday, November 22, = 2015 2:24 PM
To: i-d-announce@ietf.org
Cc: = cose@ietf.org
Subject: [COSE] I-D Action: = draft-ietf-cose-msg-08.txt


A = New Internet-Draft is available from the on-line Internet-Drafts
directories.
This draft is a work item of the CBOR Object = Signing and Encryption
Working
Group of the IETF.

=        Title =           : CBOR = Encoded Message Syntax
=        Author =          : Jim Schaad
= Filename        : = draft-ietf-cose-msg-08.txt
Pages =           : 89
= Date =            : = 2015-11-22

Abstract:
=   Concise Binary Object Representation (CBOR) is data format = designed
  for small code size and small = message size.  There is a need for the
=   ability to have the basic security services defined for this = data
  format.  This document specifies = procesing for signatures, message
=   authentication codes, and encryption using CBOR.  This = document also
  specifies a represention for = cryptographic keys using CBOR.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-cose-msg/

There's also a htmlized version available = at:
https://tools.ietf.org/html/draft-ietf-cose-msg-08

A diff from the previous version is available = at:
https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-msg-08


Please note that it may take a = couple of minutes from the time of
submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by = anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_E4481F5C-C987-4C48-9997-8205A6146F48-- From nobody Sun Nov 22 18:49:31 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5AF2C1B2E87 for ; Sun, 22 Nov 2015 18:49:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.785 X-Spam-Level: X-Spam-Status: No, score=-4.785 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QDY0nyVza2Nu for ; Sun, 22 Nov 2015 18:49:27 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62B091B2E83 for ; Sun, 22 Nov 2015 18:49:27 -0800 (PST) X-AuditID: 1209190c-f79c96d00000038e-01-56527eb5155e Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id E2.1D.00910.5BE72565; Sun, 22 Nov 2015 21:49:25 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id tAN2nPkL021218; Sun, 22 Nov 2015 21:49:25 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tAN2nNpd009321 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Sun, 22 Nov 2015 21:49:24 -0500 Content-Type: multipart/alternative; boundary="Apple-Mail=_AD154158-163A-4EEA-A5CF-E63B6E9993C4" Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Justin Richer In-Reply-To: <80EA3B4B-6FF2-42F4-8379-0C5D9E4ADE7A@gmail.com> Date: Sun, 22 Nov 2015 21:49:22 -0500 Message-Id: <36721D13-3C9A-4939-82CA-1A0CF1390840@mit.edu> References: <7505C89A-FCA1-4AD6-93F6-BDE3517AF1B4@mit.edu> <80EA3B4B-6FF2-42F4-8379-0C5D9E4ADE7A@gmail.com> To: Kathleen Moriarty X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprOKsWRmVeSWpSXmKPExsUixCmqrLu1LijM4FqjlcW0rVNZLY7tWsxm 0bAz34HZY+esu+weS5b8ZPLYev83YwBzFJdNSmpOZllqkb5dAlfGnN3/GAvWFVecbtrN2sDY ldjFyMkhIWAisfjTbTYIW0ziwr31QDYXh5DAYiaJTZu/sUA4GxklDt9uZASpEhJ4yCSxr18T xGYWSJA4dbUBrJtXQE/i1a3LrCC2sICdxKql08HibAKqEtPXtDB1MXJwcArYSjROdgAxWYDC nXcCIKYUS+z63MICMcVKYmX3MnaITRcYJdrXVIPYIgIWEmuav0HdKSux+/cjpgmMArOQHDEL yREQcW2JZQtfM0PYmhL7u5ezYIprSHR+m8i6gJFtFaNsSm6Vbm5iZk5xarJucXJiXl5qka6h Xm5miV5qSukmRnD4S/LsYHxzUOkQowAHoxIPr4Z+UJgQa2JZcWXuIUZJDiYlUd4bZkAhvqT8 lMqMxOKM+KLSnNTiQ4wSHMxKIrzPM4ByvCmJlVWpRfkwKWkOFiVx3rlffMOEBNITS1KzU1ML UotgsjIcHEoSvPa1QI2CRanpqRVpmTklCGkmDk6Q4TxAw1VAaniLCxJzizPTIfKnGBWlxHk/ 1AAlBEASGaV5cL2g9JTw9rDpK0ZxoFeEeYtB2nmAqQ2u+xXQYCagwUdKAkEGlyQipKQaGJcc 7o7boPYy/gujwf85zpLBGg2/DG7YSYe92VpbHOPtFn3V1K3w+eFCNaa1SRG/FW1EZE69Di6O qvzpF7BnwaMrSuVJIbX17VnfRLbdfd90NonH6V3vzrXnAp6uP3760MZGg7emM6bqbi7ccmad X6pCmNKvuPdKBX+S/p9Mkgtc9DZodkZSoBJLcUaioRZzUXEiAMJaDh0qAwAA Archived-At: Cc: =?utf-8?Q?Erik_Wahlstr=C3=B6m_neXus?= , "cose@ietf.org" Subject: Re: [COSE] Consensus Call: Adoption of the COSE Token X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 02:49:30 -0000 --Apple-Mail=_AD154158-163A-4EEA-A5CF-E63B6E9993C4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Thanks, Kathleen, and thanks to everyone who contributed to the = discussion. The discussion and development of this work will continue in ACE.=20 I also propose that we name this work the =E2=80=9CCOSE Token=E2=80=9D = instead of =E2=80=9CCOSE Web Token", because it has very little to do = with the web. In fact, CBOR needs to be encoded somehow to fit into HTTP = components anyway, and the COSE Token will not likely define such = encodings. Thanks, =E2=80=94 Justin, your COSE chair > On Nov 22, 2015, at 8:43 PM, Kathleen Moriarty = wrote: >=20 > Hello, >=20 > Looking across the three WGs, there are good arguments for doing the = work in each, but ACE would be the best WG for a few reasons. >=20 > COSE is supposed to be short-lived, let's keep it that way. >=20 > OAUTH has a full plate, although they tend to be very productive. >=20 > ACE has just become more focused and I think this could fit well once = the OAUTH solution work is underway. >=20 > There's enough overlap for this to happen in any of the WGs. >=20 > Thanks for the discussion, I was waiting to chime in until it was = hashed out a bit to see if there was any overwhelming consensus without = influencing the outcome. Now that it has quieted down, ACE is probably = the best plan. >=20 > Thanks, > Kathleen=20 >=20 > Sent from my iPhone >=20 > On Nov 22, 2015, at 4:25 PM, Erik Wahlstr=C3=B6m neXus = > = wrote: >=20 >> Hi, >>=20 >> Yes, we have a draft posted in the OAuth WG for a CBOR Web Token = (CWT). = https://tools.ietf.org/id/draft-wahlstroem-oauth-cbor-web-token-00.txt = =20= >>=20 >> We want to keep it there and reference the JWT claims (also defined = in OAuth WG) and later add attributes needed for authentication and = authorization for IoT to JWT/CWT in ACE WG. >>=20 >> Thanks >> Erik >>=20 >>=20 >>=20 >>> On 21 Nov 2015, at 18:39, Justin Richer > wrote: >>>=20 >>> Reading through the threads an opinions, there is no clear consensus = as to where the work should be done. There is roughly equal support for = doing this in any of the three offered working groups. >>>=20 >>> There is clear consensus that it should be done and that, as much as = possible, it should be a direct map of the existing JWT payload object = and common claims.=20 >>>=20 >>> In this light, someone needs to just start the work as an individual = draft and push forward, and whichever working group most wants to can = pick it up and publish it. I have no qualms on accepting this work = within the COSE working group and I believe there is enough support to = warrant that placement if an author submits a draft here (and this = remains my preference as an individual), but I will not object to = another group picking it up. >>>=20 >>> I believe, with all of the overlap between groups, that we will have = no trouble getting the =E2=80=9Cright people=E2=80=9D to look at it. = Additionally, it is clear that it will be very beneficial to have formal = reviews from all three groups once the draft has reached a mature = status.=20 >>>=20 >>> Thankfully, Erik has already done this with his =E2=80=9CCOSE Web = Token=E2=80=9D draft. He=E2=80=99s initially targeted this at the OAuth = working group, and the work started in ACE, so I call to the author to = pick a location and run with it. >>>=20 >>> =E2=80=94 Justin, your COSE chair >>>=20 >>>> On Nov 7, 2015, at 3:01 AM, Justin Richer > wrote: >>>>=20 >>>> At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the adoption and placement of new work to define a COSE Token, = analogous to the JWT from JOSE. In the room, there was a general = sentiment of support for the work being done, with the wide adoption of = JWT and its driving of JOSE being a common theme of precedent. What = wasn=E2=80=99t clear is where the work should be done and to what end it = should drive. The six positions we are asking the working group to = consider and voice their support for are: >>>>=20 >>>> A) Define the COSE Token within the COSE working group along side = the COSE Messages (and potentially COSE Auxiliary Algorithms) draft. >>>> B) Define the COSE Token inside the OAuth working group. >>>> C) Define the COSE Token inside the ACE working group. >>>> D) Don=E2=80=99t define the COSE Token anywhere. >>>> E) You need more information to decide. >>>> F) You don=E2=80=99t give a flying rat about the COSE Token.* >>>>=20 >>>> The consensus call will remain open for two weeks from today, = closing on November 21, 2015; at which time, hopefully we will have a = clear answer and direction to point this work. >>>>=20 >>>> Thank you, >>>> =E2=80=94 Justin & Kepeng, your COSE chairs >>>>=20 >>>> * I promised those in the room at Yokohama to offer a flying rat = option, for which I am deeply sorry. >>>> _______________________________________________ >>>> COSE mailing list >>>> COSE@ietf.org >>>> https://www.ietf.org/mailman/listinfo/cose = >>>=20 >>> _______________________________________________ >>> COSE mailing list >>> COSE@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose = >>=20 >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose = --Apple-Mail=_AD154158-163A-4EEA-A5CF-E63B6E9993C4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Thanks, Kathleen, and thanks to everyone who contributed to = the discussion.

The = discussion and development of this work will continue in = ACE. 

I = also propose that we name this work the =E2=80=9CCOSE Token=E2=80=9D = instead of =E2=80=9CCOSE Web Token", because it has very little to do = with the web. In fact, CBOR needs to be encoded somehow to fit into HTTP = components anyway, and the COSE Token will not likely define such = encodings.

Thanks,
 =E2=80=94 Justin, your = COSE chair

On Nov 22, 2015, at 8:43 PM, = Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:

Hello,

Looking across the three = WGs, there are good arguments for doing the work in each, but ACE would = be the best WG for a few reasons.

COSE is supposed to be short-lived, = let's keep it that way.

OAUTH has a full plate, although they tend to be very = productive.

ACE = has just become more focused and I think this could fit well once the = OAUTH solution work is underway.

There's enough overlap for this to = happen in any of the WGs.

Thanks for the discussion, I was waiting to chime in until it = was hashed out a bit to see if there was any overwhelming consensus = without influencing the outcome.  Now that it has quieted down, ACE = is probably the best plan.

Thanks,
Kathleen 

Sent from my iPhone

On = Nov 22, 2015, at 4:25 PM, Erik Wahlstr=C3=B6m neXus <erik.wahlstrom@nexusgroup.com> wrote:

Hi,

Yes, we have a draft posted in the OAuth WG for a CBOR = Web Token (CWT). https://tools.ietf.org/id/draft-wahlstroem-oauth-cbor-web-token= -00.txt 

We want to keep it there and reference the JWT claims = (also defined in OAuth WG) and later add attributes needed for = authentication and authorization for IoT to JWT/CWT in ACE WG.

Thanks
Erik



On 21 Nov 2015, at 18:39, Justin Richer <jricher@MIT.EDU> = wrote:

Reading through the threads an opinions, there is no = clear consensus as to where the work should be done. There is roughly = equal support for doing this in any of the three offered working = groups.

There is clear consensus that it should be done and that, as much as = possible, it should be a direct map of the existing JWT payload object = and common claims.

In this light, someone needs to just start the work as an individual = draft and push forward, and whichever working group most wants to can = pick it up and publish it. I have no qualms on accepting this work = within the COSE working group and I believe there is enough support to warrant that placement if an author submits a draft = here (and this remains my preference as an individual), but I will not = object to another group picking it up.

I believe, with all of the overlap between groups, that we will have no = trouble getting the =E2=80=9Cright people=E2=80=9D to look at it. = Additionally, it is clear that it will be very beneficial to have formal = reviews from all three groups once the draft has reached a mature status.

Thankfully, Erik has already done this with his =E2=80=9CCOSE Web = Token=E2=80=9D draft. He=E2=80=99s initially targeted this at the OAuth = working group, and the work started in ACE, so I call to the author to = pick a location and run with it.

=E2=80=94 Justin, your COSE chair

On Nov 7, 2015, at 3:01 AM, Justin = Richer <jricher@MIT.EDU> wrote:

At the Yokohama meeting, the chairs agreed to do a consensus call = regarding the adoption and placement of new work to define a COSE Token, = analogous to the JWT from JOSE. In the room, there was a general = sentiment of support for the work being done, with the wide adoption of JWT and its driving of JOSE being a common theme of = precedent. What wasn=E2=80=99t clear is where the work should be done = and to what end it should drive. The six positions we are asking the = working group to consider and voice their support for are:

A) Define the COSE Token within the COSE working group along side the = COSE Messages (and potentially COSE Auxiliary Algorithms) draft.
B) Define the COSE Token inside the OAuth working group.
C) Define the COSE Token inside the ACE working group.
D) Don=E2=80=99t define the COSE Token anywhere.
E) You need more information to decide.
F) You don=E2=80=99t give a flying rat about the COSE Token.*

The consensus call will remain open for two weeks from today, closing on = November 21, 2015; at which time, hopefully we will have a clear answer = and direction to point this work.

Thank you,
=E2=80=94 Justin & Kepeng, your COSE chairs

* I promised those in the room at Yokohama to offer a flying rat option, = for which I am deeply sorry.
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_AD154158-163A-4EEA-A5CF-E63B6E9993C4-- From nobody Sun Nov 22 21:25:37 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B4011A00C3 for ; Sun, 22 Nov 2015 21:25:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.701 X-Spam-Level: X-Spam-Status: No, score=-0.701 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 436CnUdo3hox for ; Sun, 22 Nov 2015 21:25:34 -0800 (PST) Received: from filtteri1.pp.htv.fi (filtteri1.pp.htv.fi [213.243.153.184]) by ietfa.amsl.com (Postfix) with ESMTP id C98671A00C2 for ; Sun, 22 Nov 2015 21:25:33 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by filtteri1.pp.htv.fi (Postfix) with ESMTP id DC30321BA7C for ; Mon, 23 Nov 2015 07:25:31 +0200 (EET) X-Virus-Scanned: Debian amavisd-new at pp.htv.fi Received: from smtp4.welho.com ([213.243.153.38]) by localhost (filtteri1.pp.htv.fi [213.243.153.184]) (amavisd-new, port 10024) with ESMTP id J2qtBfFVDPtI for ; Mon, 23 Nov 2015 07:25:31 +0200 (EET) Received: from LK-Perkele-V2 (87-92-35-116.bb.dnainternet.fi [87.92.35.116]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp4.welho.com (Postfix) with ESMTPSA id B4F6E5BC01B for ; Mon, 23 Nov 2015 07:25:31 +0200 (EET) Date: Mon, 23 Nov 2015 07:25:30 +0200 From: Ilari Liusvaara To: cose@ietf.org Message-ID: <20151123052530.GA14493@LK-Perkele-V2.elisa-laajakaista.fi> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline User-Agent: Mutt/1.5.24 (2015-08-30) Sender: ilariliusvaara@welho.com Archived-At: Subject: [COSE] CFRG ECC algorithms in COSE -- design aspects X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 05:25:36 -0000 I have done a few rounds on pre-draft about CFRG ECC algorithms in JOSE on the jose list, and seems things are converging. Now, to porting this stuff to COSE. CFRG-Curves is already in RFC-Ed.Q, but CFRG-EDDSA is unlikely to reach that in time before COSE-MSG is sent to IESG (assuming you keep your schedule), so this stuff would likely go to an extra document[1]. The important design points are: - A new key type "OKP" (Octet Key Pair) - Has paramter "crv" (don't ask why they wanted it named that) that is essentially subtype of key (X25519, X448, Ed25519, Ed25519ph, Ed448, Ed448ph). This is because mixing different kinds of keys is dangerous. - Has parameter "x" (again, don't ask) that is base64-encoded public key octet string. - ECDH-ES with X25519/X448 uses the respective Diffie-Hellman Functions, with octet-string inputs and outputs. - Signatures use the signing and verification functions, with octet- string inputs and outputs (except for verification, which has boolean output). - All keys and signatures are handled are handled as octet strings with no structure. Straightforward method to port most of this stuff: - New key type: OKP(1): Octet-string key pairs - Key parameters for it: * crv(-1)[int/tstr]: Key subtype * x(-2)[bstr]: Public key (octet string) * d(-4)[bstr]: Private key (octet string) Now, for the less trivial stuff: - Can one reuse the crv values 1-3 (these are used in another key type ("EC2"))? - What length of identifiers one should assign? I would think that the identifiers for X25519 and Ed25519 should be from range 0-23 (1 byte), and others could be 24-255 (2 bytes), as Ed25519ph is odd one, and the others have quite a bit larger keys and signatures due to higher security level. - Combine all the signature algorithms under just one identifier (use key subtyping to resolve what algorithm is used, removes a source of security bugs)? The pre-draft does talk about JWK thumbprints too (and even contains an example thumbprint computation). I haven't seen COSE discussing thumbprints. [1] I realize that you do want to be a quick WG and shut down. I think Crudle (or whatever the WG ends up being called) could take the work then. -Ilari From nobody Sun Nov 22 22:26:44 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80E1F1A1A9C for ; Sun, 22 Nov 2015 22:26:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qODGdyTc3voN for ; Sun, 22 Nov 2015 22:26:41 -0800 (PST) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8EF31A1A9B for ; Sun, 22 Nov 2015 22:26:41 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 3BFAC2CA08; Sun, 22 Nov 2015 22:26:41 -0800 (PST) From: "Jim Schaad" To: "'Ilari Liusvaara'" , References: <20151123052530.GA14493@LK-Perkele-V2.elisa-laajakaista.fi> In-Reply-To: <20151123052530.GA14493@LK-Perkele-V2.elisa-laajakaista.fi> Date: Sun, 22 Nov 2015 22:23:52 -0800 Message-ID: <030301d125b7$8669d260$933d7720$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQL8Rv3guYwGKrv37rhtM3tlUgiH7pxS4P9g Content-Language: en-us Archived-At: Subject: Re: [COSE] CFRG ECC algorithms in COSE -- design aspects X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 06:26:43 -0000 You will find some of this already defined in http://datatracker.ietf.org/doc/draft-schaad-cose-alg/. Jim > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Ilari Liusvaara > Sent: Sunday, November 22, 2015 9:26 PM > To: cose@ietf.org > Subject: [COSE] CFRG ECC algorithms in COSE -- design aspects > > I have done a few rounds on pre-draft about CFRG ECC algorithms in JOSE on > the jose list, and seems things are converging. Now, to porting this stuff to > COSE. CFRG-Curves is already in RFC-Ed.Q, but CFRG-EDDSA is unlikely to reach > that in time before COSE-MSG is sent to IESG (assuming you keep your > schedule), so this stuff would likely go to an extra document[1]. > > > The important design points are: > - A new key type "OKP" (Octet Key Pair) > - Has paramter "crv" (don't ask why they wanted it named that) that is > essentially subtype of key (X25519, X448, Ed25519, Ed25519ph, Ed448, > Ed448ph). This is because mixing different kinds of keys is > dangerous. > - Has parameter "x" (again, don't ask) that is base64-encoded public > key octet string. > - ECDH-ES with X25519/X448 uses the respective Diffie-Hellman > Functions, with octet-string inputs and outputs. > - Signatures use the signing and verification functions, with octet- > string inputs and outputs (except for verification, which has > boolean output). > - All keys and signatures are handled are handled as octet strings with > no structure. > > > Straightforward method to port most of this stuff: > - New key type: OKP(1): Octet-string key pairs > - Key parameters for it: > * crv(-1)[int/tstr]: Key subtype > * x(-2)[bstr]: Public key (octet string) > * d(-4)[bstr]: Private key (octet string) > > Now, for the less trivial stuff: > - Can one reuse the crv values 1-3 (these are used in another key > type ("EC2"))? > - What length of identifiers one should assign? I would think that > the identifiers for X25519 and Ed25519 should be from range 0-23 > (1 byte), and others could be 24-255 (2 bytes), as Ed25519ph > is odd one, and the others have quite a bit larger keys and > signatures due to higher security level. > - Combine all the signature algorithms under just one identifier > (use key subtyping to resolve what algorithm is used, removes > a source of security bugs)? > > The pre-draft does talk about JWK thumbprints too (and even contains an > example thumbprint computation). I haven't seen COSE discussing thumbprints. > > > [1] I realize that you do want to be a quick WG and shut down. I think Crudle (or > whatever the WG ends up being called) could take the work then. > > > -Ilari > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Mon Nov 23 11:11:41 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5B941ACE1C for ; Mon, 23 Nov 2015 11:11:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4FGYrlkYQEQb for ; Mon, 23 Nov 2015 11:11:39 -0800 (PST) Received: from filtteri1.pp.htv.fi (filtteri1.pp.htv.fi [213.243.153.184]) by ietfa.amsl.com (Postfix) with ESMTP id 247B31ACE1A for ; Mon, 23 Nov 2015 11:11:39 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by filtteri1.pp.htv.fi (Postfix) with ESMTP id DD22521BB1F; Mon, 23 Nov 2015 21:11:37 +0200 (EET) X-Virus-Scanned: Debian amavisd-new at pp.htv.fi Received: from smtp5.welho.com ([213.243.153.39]) by localhost (filtteri1.pp.htv.fi [213.243.153.184]) (amavisd-new, port 10024) with ESMTP id j1lMnmbQmIk4; Mon, 23 Nov 2015 21:11:37 +0200 (EET) Received: from LK-Perkele-V2 (87-92-35-116.bb.dnainternet.fi [87.92.35.116]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp5.welho.com (Postfix) with ESMTPSA id 87A725BC00B; Mon, 23 Nov 2015 21:11:37 +0200 (EET) Date: Mon, 23 Nov 2015 21:11:36 +0200 From: Ilari Liusvaara To: Jim Schaad Message-ID: <20151123191136.GA15001@LK-Perkele-V2.elisa-laajakaista.fi> References: <20151123052530.GA14493@LK-Perkele-V2.elisa-laajakaista.fi> <030301d125b7$8669d260$933d7720$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <030301d125b7$8669d260$933d7720$@augustcellars.com> User-Agent: Mutt/1.5.24 (2015-08-30) Sender: ilariliusvaara@welho.com Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] CFRG ECC algorithms in COSE -- design aspects X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 19:11:40 -0000 On Sun, Nov 22, 2015 at 10:23:52PM -0800, Jim Schaad wrote: > You will find some of this already defined in > http://datatracker.ietf.org/doc/draft-schaad-cose-alg/. For EC1, the points are encoded in little endian... Well, for X25519 and X448, the point encoding is actually little-endian. Scalar encoding is diferent matter. Basically, X25519 and X448 are functions defined in terms of octet string inputs. Then there would be Ed25519, Ed25519ph, Ed448 and Ed448ph. The public keys of those aren't little-endian encodings of X coordinate, but something bit more complicated. And the private keys definitely are not scalars (again, the functions are defined in terms of octet strings). -Ilari From nobody Wed Nov 25 06:42:59 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17C0D1B2D90 for ; Wed, 25 Nov 2015 06:42:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id osAW8vIWiDNu for ; Wed, 25 Nov 2015 06:42:54 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51D641B2D8E for ; Wed, 25 Nov 2015 06:42:54 -0800 (PST) X-AuditID: c1b4fb2d-f79456d000001332-0f-5655c8ecda06 Received: from ESESSHC023.ericsson.se (Unknown_Domain [153.88.183.87]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 2E.41.04914.CE8C5565; Wed, 25 Nov 2015 15:42:52 +0100 (CET) Received: from ESESSMB205.ericsson.se ([169.254.5.29]) by ESESSHC023.ericsson.se ([153.88.183.87]) with mapi id 14.03.0248.002; Wed, 25 Nov 2015 15:42:51 +0100 From: Francesca Palombini To: Mike Jones , Jim Schaad , "cose@ietf.org" Thread-Topic: [COSE] MAC with no recipient structures Thread-Index: AQHRI2TTLTY+q0tYmECx/DfK0c2cpZ6m1UoAgAXtJaA= Date: Wed, 25 Nov 2015 14:42:50 +0000 Message-ID: References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> <564ECB3C.1070203@mit.edu> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [153.88.183.17] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmplkeLIzCtJLcpLzFFi42KZGbE9XPfNidAwg5bbIhbTtk5ltVg9/Tub xd5pn1gcmD02zpnO5rFkyU8mj9Ydf9kDmKO4bFJSczLLUov07RK4Mna0mBZslK2YevUVWwNj h0QXIyeHhICJxNm+ScwQtpjEhXvr2boYuTiEBA4zSuy6fR0sISSwmFHi6uFcEJtNwEbiwsP3 rCC2iECJxN9D61lAbGGgQWsu/GSBiJtKHN81hxnCtpK4c6SZDcRmEVCV6DuyDMzmFfCVeLXi DwvEsrWMEhPmTGQHSXAKREscOHQZrIgR6KLvp9YwgdjMAuISt57MZ4K4VEBiyZ7zUFeLSrx8 /A/oIA4gW1Fieb8cRLmOxILdn9ggbG2JZQtfM0PsFZQ4OfMJywRG0VlIps5C0jILScssJC0L GFlWMYoWpxYX56YbGeulFmUmFxfn5+nlpZZsYgRGzsEtv3V3MK5+7XiIUYCDUYmH98PrkDAh 1sSy4srcQ4wSHMxKIry/a0PDhHhTEiurUovy44tKc1KLDzFKc7AoifO2MD0IFRJITyxJzU5N LUgtgskycXBKNTDq7L+53yNJl8/2dc1K5gk7rRa8VuA0r9lpuMRIQ6tpWlXiut5Tl9icP8xo t7BT41wp19G09mbdxfUe/MLTLoU65RUrXnWWCZP+ZK3f1LLs8NNH3P9/dx4+vstAZlvVy4ZU 5dvM5281zL5QeCFIRdfow8YPM6U2dnbe282TGbBH/u6D+6raTYeVWIozEg21mIuKEwF/PiUX mAIAAA== Archived-At: Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Nov 2015 14:42:57 -0000 Hi, In the context of "visibility" another use case was mentioned before(*): el= ectricity consumption is measured by a meter, forwarded to a gateway where = the tenant reads the consumption and further to the distribution operator. = The communication between meter and gateway, and gateway and network is pro= tected on transport layer; and between meter and network on application lay= er, using COSE. Encryption of the COSE message does not allow the tenant to= read the metering.=20 Multiple recipients here are not necessary and, for optimization reasons, t= he COSE message should be able to omit the recipient structure (analogously= to the COSE_Encrypted structure). (*) https://mailarchive.ietf.org/arch/msg/core/hmIcl0WIceg26h5clQ4Qv4kcfGk= =20 Francesca -----Original Message----- From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Mike Jones Sent: den 21 november 2015 20:54 To: Justin Richer; Jim Schaad; cose@ietf.org Subject: Re: [COSE] MAC with no recipient structures As a point of clarification, this thread wasn't about removing MAC. It was= about adding a MAC representation with no explicit recipient - the equival= ent of the JWS example in http://tools.ietf.org/html/rfc7515#section-3.3. This feature request is tracked as https://github.com/cose-wg/cose-issues/i= ssues/10 - Make "recipients" field optional. -- Mike -----Original Message----- From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Justin Richer Sent: Thursday, November 19, 2015 11:27 PM To: Jim Schaad ; cose@ietf.org Subject: Re: [COSE] MAC with no recipient structures What I'm hearing from this thread is a lot of support for plain MAC structu= res, including several documented use cases. Not the least of which is mapp= ing to JOSE's HS* algorithm suite in JWS, one of the two most-used and most= -successful portions of JOSE to date. Consequently, I'm not seeing any consensus to drop plain MAC support in fav= or of any other method. I'm also not seeing opposition to defining AEAD str= uctures in addition to MAC structures in COSE and allowing applications to = choose. Therefore, we'll keep MAC in place until there's sufficient consensus to re= move the capability from COSE. Thank you, -- Justin, your COSE chair. On 11/7/2015 5:39 PM, Jim Schaad wrote: > People keep telling me that they want to have a version of MACs that=20 > do not have a set of recipient information attached so that they can=20 > do direct MACs. I keep asking for a use case where this makes sense. > In all of the use cases that I have been presented so far, a better=20 > answer is going to be to do an AEAD encrypted item rather than a MACed it= em. > > The scenario that wants this is going to be: > > Alice sends data to Bob in such a way that Bob can authenticate the data. > Eve needs to be able to read the data in transit, without knowing if=20 > the message contains data or misinformation and will act on the=20 > message as if it were data. > > The difference in message size between MAC and Encryption is going to=20 > be minimal, at most a few bytes. The execution difference is going to=20 > be a few extra encryption operations. > > What use cases exist for this where encryption is not a better=20 > security answer anyway. > > Jim > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose From nobody Wed Nov 25 10:52:04 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E1801A904F for ; Wed, 25 Nov 2015 10:52:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XG4bWj1bR9vU for ; Wed, 25 Nov 2015 10:52:01 -0800 (PST) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A6E71A9046 for ; Wed, 25 Nov 2015 10:52:01 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id 7014538F1D; Wed, 25 Nov 2015 10:52:00 -0800 (PST) From: "Jim Schaad" To: "'Francesca Palombini'" , References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> <564ECB3C.1070203@mit.edu> In-Reply-To: Date: Wed, 25 Nov 2015 10:49:11 -0800 Message-ID: <064001d127b1$f9e2a590$eda7f0b0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQIfvpSiX18QdRwxvFtmOBjrli/sGAGil9hXAsxqyvUB88P2Ap3c0Aeg Content-Language: en-us Archived-At: Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Nov 2015 18:52:03 -0000 Again, let me ask the question. Are you willing to be in a position where the tenant reads and acts on an incorrect data value since it cannot validate the MAC on the data. > -----Original Message----- > From: Francesca Palombini [mailto:francesca.palombini@ericsson.com] > Sent: Wednesday, November 25, 2015 6:43 AM > To: Mike Jones ; Jim Schaad > ; cose@ietf.org > Subject: RE: [COSE] MAC with no recipient structures > > Hi, > > In the context of "visibility" another use case was mentioned before(*): > electricity consumption is measured by a meter, forwarded to a gateway where > the tenant reads the consumption and further to the distribution operator. The > communication between meter and gateway, and gateway and network is > protected on transport layer; and between meter and network on application > layer, using COSE. Encryption of the COSE message does not allow the tenant to > read the metering. > > Multiple recipients here are not necessary and, for optimization reasons, the > COSE message should be able to omit the recipient structure (analogously to the > COSE_Encrypted structure). > > (*) https://mailarchive.ietf.org/arch/msg/core/hmIcl0WIceg26h5clQ4Qv4kcfGk > > Francesca > > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Mike Jones > Sent: den 21 november 2015 20:54 > To: Justin Richer; Jim Schaad; cose@ietf.org > Subject: Re: [COSE] MAC with no recipient structures > > As a point of clarification, this thread wasn't about removing MAC. It was about > adding a MAC representation with no explicit recipient - the equivalent of the > JWS example in http://tools.ietf.org/html/rfc7515#section-3.3. > > This feature request is tracked as https://github.com/cose-wg/cose- > issues/issues/10 - Make "recipients" field optional. > > -- Mike > > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Justin Richer > Sent: Thursday, November 19, 2015 11:27 PM > To: Jim Schaad ; cose@ietf.org > Subject: Re: [COSE] MAC with no recipient structures > > What I'm hearing from this thread is a lot of support for plain MAC structures, > including several documented use cases. Not the least of which is mapping to > JOSE's HS* algorithm suite in JWS, one of the two most-used and most- > successful portions of JOSE to date. > > Consequently, I'm not seeing any consensus to drop plain MAC support in favor > of any other method. I'm also not seeing opposition to defining AEAD structures > in addition to MAC structures in COSE and allowing applications to choose. > > Therefore, we'll keep MAC in place until there's sufficient consensus to remove > the capability from COSE. > > Thank you, > -- Justin, your COSE chair. > > On 11/7/2015 5:39 PM, Jim Schaad wrote: > > People keep telling me that they want to have a version of MACs that > > do not have a set of recipient information attached so that they can > > do direct MACs. I keep asking for a use case where this makes sense. > > In all of the use cases that I have been presented so far, a better > > answer is going to be to do an AEAD encrypted item rather than a MACed > item. > > > > The scenario that wants this is going to be: > > > > Alice sends data to Bob in such a way that Bob can authenticate the data. > > Eve needs to be able to read the data in transit, without knowing if > > the message contains data or misinformation and will act on the > > message as if it were data. > > > > The difference in message size between MAC and Encryption is going to > > be minimal, at most a few bytes. The execution difference is going to > > be a few extra encryption operations. > > > > What use cases exist for this where encryption is not a better > > security answer anyway. > > > > Jim > > > > > > _______________________________________________ > > COSE mailing list > > COSE@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Wed Nov 25 11:04:20 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F9801ACE71 for ; Wed, 25 Nov 2015 11:04:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.786 X-Spam-Level: X-Spam-Status: No, score=-4.786 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zF9r7IlcQNQD for ; Wed, 25 Nov 2015 11:04:16 -0800 (PST) Received: from dmz-mailsec-scanner-5.mit.edu (dmz-mailsec-scanner-5.mit.edu [18.7.68.34]) by ietfa.amsl.com (Postfix) with ESMTP id CBDC81ACEE8 for ; Wed, 25 Nov 2015 11:04:15 -0800 (PST) X-AuditID: 12074422-f79c46d000006aa7-f4-5656062e93e3 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-5.mit.edu (Symantec Messaging Gateway) with SMTP id 21.EB.27303.F2606565; Wed, 25 Nov 2015 14:04:15 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id tAPJ4E6S031146; Wed, 25 Nov 2015 14:04:14 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tAPJ4C8i015706 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 25 Nov 2015 14:04:13 -0500 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Justin Richer In-Reply-To: <064001d127b1$f9e2a590$eda7f0b0$@augustcellars.com> Date: Wed, 25 Nov 2015 14:04:11 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <98AFE54A-11BC-49FC-87BE-99A5A3760777@mit.edu> References: <04e901d119ad$3207bea0$96173be0$@augustcellars.com> <564ECB3C.1070203@mit.edu> <064001d127b1$f9e2a590$eda7f0b0$@augustcellars.com> To: Jim Schaad X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpmleLIzCtJLcpLzFFi42IR4hRV1tVnCwszWNPAaTFt61RWi5n97YwW q6d/Z3Ng9tg4Zzqbx6+vV9k8liz5yRTAHMVlk5Kak1mWWqRvl8CVcWHpGZaCo7oVG7pPMDcw dqh2MXJySAiYSFw42skEYYtJXLi3nq2LkYtDSGAxk8Tz6xvYIZyNjBJPD7VAZR4ySfT972IG aWEWUJf4M+8SmM0roCfx6tZlVhBbGGjsxs3XweJsAqoS09e0AK3g4OAUcJC4scYPJMwCFH6/ Yy8LxBhPiVlrrzFB2NoSyxa+hhppJfH/bgcrxN75TBIz37cwgiREgPZuXX0T6mxZid2/HzFN YBScheSkWUhOmoVk7gJG5lWMsim5Vbq5iZk5xanJusXJiXl5qUW6pnq5mSV6qSmlmxhBYc3u orSD8edBpUOMAhyMSjy8Ex6FhAmxJpYVV+YeYpTkYFIS5W27EBomxJeUn1KZkVicEV9UmpNa fIhRgoNZSYR32wegHG9KYmVValE+TEqag0VJnHfuF98wIYH0xJLU7NTUgtQimKwMB4eSBG8u a1iYkGBRanpqRVpmTglCmomDE2Q4D9DwdJAa3uKCxNzizHSI/ClGRSlx3gMsQAkBkERGaR5c LyjtJLw9bPqKURzoFWHe/yBVPMCUBdf9CmgwE9DgiByQq4tLEhFSUg2Mnv/eP7Kc3qHl7FTv 55CaL6Z24p8Pw++QxDfS4b+Wejx+o8y203dy6/Y3z+p0Fz1lknJ5knvM/Oiau9MtDt9rshYV tww82/mLaVYkrwdHh+7h310Zqc//XA1y/bJr7t/Tm1lTinwkgxZZmGSnTf38fH6f6clU9dVe ZpuZrCU+BOgmtjHMXs6lxFKckWioxVxUnAgAySvR9RYDAAA= Archived-At: Cc: Francesca Palombini , cose@ietf.org Subject: Re: [COSE] MAC with no recipient structures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Nov 2015 19:04:19 -0000 (As an individual) Speaking from my own experience with JOSE, the simplicity and utility of = MAC-only cannot be denied. I can only see this being compounded in = constrained environments. Decrypting payload means I need to keep two = copies of the data around, I need to manage encryption state, and I need = to solve issues with multiple recipients or components that need just = read access. All of these go away with simple signatures or MACs without = losing functionality or security. Security is always contextual in the = application, and complexity is the enemy of getting security actually = applied in a system. I see absolutely zero reason to not support this simplified case, and = others have made it clear it=E2=80=99s desirable for their use cases. I = think the burden is on you (Jim) to prove that it=E2=80=99s not = desirable, and I=E2=80=99m not personally seeing support for that = position in this working group. =E2=80=94 Justin (as an individual, remember) > On Nov 25, 2015, at 1:49 PM, Jim Schaad = wrote: >=20 > Again, let me ask the question. Are you willing to be in a position = where > the tenant reads and acts on an incorrect data value since it cannot > validate the MAC on the data. >=20 >> -----Original Message----- >> From: Francesca Palombini [mailto:francesca.palombini@ericsson.com] >> Sent: Wednesday, November 25, 2015 6:43 AM >> To: Mike Jones ; Jim Schaad >> ; cose@ietf.org >> Subject: RE: [COSE] MAC with no recipient structures >>=20 >> Hi, >>=20 >> In the context of "visibility" another use case was mentioned = before(*): >> electricity consumption is measured by a meter, forwarded to a = gateway > where >> the tenant reads the consumption and further to the distribution = operator. > The >> communication between meter and gateway, and gateway and network is >> protected on transport layer; and between meter and network on = application >> layer, using COSE. Encryption of the COSE message does not allow the > tenant to >> read the metering. >>=20 >> Multiple recipients here are not necessary and, for optimization = reasons, > the >> COSE message should be able to omit the recipient structure = (analogously > to the >> COSE_Encrypted structure). >>=20 >> (*) = https://mailarchive.ietf.org/arch/msg/core/hmIcl0WIceg26h5clQ4Qv4kcfGk >>=20 >> Francesca >>=20 >> -----Original Message----- >> From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Mike Jones >> Sent: den 21 november 2015 20:54 >> To: Justin Richer; Jim Schaad; cose@ietf.org >> Subject: Re: [COSE] MAC with no recipient structures >>=20 >> As a point of clarification, this thread wasn't about removing MAC. = It > was about >> adding a MAC representation with no explicit recipient - the = equivalent of > the >> JWS example in http://tools.ietf.org/html/rfc7515#section-3.3. >>=20 >> This feature request is tracked as https://github.com/cose-wg/cose- >> issues/issues/10 - Make "recipients" field optional. >>=20 >> -- Mike >>=20 >> -----Original Message----- >> From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Justin Richer >> Sent: Thursday, November 19, 2015 11:27 PM >> To: Jim Schaad ; cose@ietf.org >> Subject: Re: [COSE] MAC with no recipient structures >>=20 >> What I'm hearing from this thread is a lot of support for plain MAC > structures, >> including several documented use cases. Not the least of which is = mapping > to >> JOSE's HS* algorithm suite in JWS, one of the two most-used and most- >> successful portions of JOSE to date. >>=20 >> Consequently, I'm not seeing any consensus to drop plain MAC support = in > favor >> of any other method. I'm also not seeing opposition to defining AEAD > structures >> in addition to MAC structures in COSE and allowing applications to = choose. >>=20 >> Therefore, we'll keep MAC in place until there's sufficient consensus = to > remove >> the capability from COSE. >>=20 >> Thank you, >> -- Justin, your COSE chair. >>=20 >> On 11/7/2015 5:39 PM, Jim Schaad wrote: >>> People keep telling me that they want to have a version of MACs that >>> do not have a set of recipient information attached so that they can >>> do direct MACs. I keep asking for a use case where this makes = sense. >>> In all of the use cases that I have been presented so far, a better >>> answer is going to be to do an AEAD encrypted item rather than a = MACed >> item. >>>=20 >>> The scenario that wants this is going to be: >>>=20 >>> Alice sends data to Bob in such a way that Bob can authenticate the > data. >>> Eve needs to be able to read the data in transit, without knowing if >>> the message contains data or misinformation and will act on the >>> message as if it were data. >>>=20 >>> The difference in message size between MAC and Encryption is going = to >>> be minimal, at most a few bytes. The execution difference is going = to >>> be a few extra encryption operations. >>>=20 >>> What use cases exist for this where encryption is not a better >>> security answer anyway. >>>=20 >>> Jim >>>=20 >>>=20 >>> _______________________________________________ >>> COSE mailing list >>> COSE@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose >>=20 >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >>=20 >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Mon Nov 30 07:30:14 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88E841B2E98 for ; Mon, 30 Nov 2015 07:30:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.511 X-Spam-Level: X-Spam-Status: No, score=-1.511 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N4-_SulREqq2 for ; Mon, 30 Nov 2015 07:30:12 -0800 (PST) Received: from dmz-mailsec-scanner-5.mit.edu (dmz-mailsec-scanner-5.mit.edu [18.7.68.34]) by ietfa.amsl.com (Postfix) with ESMTP id 0DEFB1B2E96 for ; Mon, 30 Nov 2015 07:30:11 -0800 (PST) X-AuditID: 12074422-f79c46d000006aa7-08-565c6b83da13 Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-5.mit.edu (Symantec Messaging Gateway) with SMTP id 6D.2A.27303.38B6C565; Mon, 30 Nov 2015 10:30:11 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id tAUFUAXR014188 for ; Mon, 30 Nov 2015 10:30:10 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tAUFU92g004346 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Mon, 30 Nov 2015 10:30:10 -0500 From: Justin Richer Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Message-Id: <831C610E-2326-4D70-A48C-77BA8A7D2369@mit.edu> Date: Mon, 30 Nov 2015 10:30:08 -0500 To: cose@ietf.org Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrCIsWRmVeSWpSXmKPExsUixG6nrtucHRNm8PI4n8W0rVNZHRg9liz5 yRTAGMVlk5Kak1mWWqRvl8CV8enrDZaCh8wVM88uYm5gbGXuYuTkkBAwkdjZ2swIYYtJXLi3 ng3EFhJYzCTxfFtOFyMXkH2UUeLJhqcsEM5XJokfP/exg1SxCahKzF95iwnEZhZQl/gz7xIz hK0tsWzhazBbWEBEouVeP1AzBwevgJXEi39lIGEWoNbZE64xgYRFBAQl7naag4R5BfQkXt26 zApxj6zE7t+PmCYw8s1CsmAWkgWzkLQsYGRexSibklulm5uYmVOcmqxbnJyYl5dapGuql5tZ opeaUrqJERxgLko7GH8eVDrEKMDBqMTDK2EWHSbEmlhWXJl7iFGSg0lJlLcoIyZMiC8pP6Uy I7E4I76oNCe1+BCjBAezkghvoClQjjclsbIqtSgfJiXNwaIkzjv3i2+YkEB6YklqdmpqQWoR TFaGg0NJgndRFlCjYFFqempFWmZOCUKaiYMTZDgP0PD1IDW8xQWJucWZ6RD5U4y6HAt+3F7L JMSSl5+XKiXOWw9SJABSlFGaBzcHlBgS3h42fcUoDvSWMG8fSBUPMKnATXoFtIQJaMmHP9Eg S0oSEVJSDYy13/sZ91tKeM7/On3lr18/gu6YlyRe+so08U6I5T+/1W9Wb9JiXXZswautNlP+ cjMG7VRqvOUTaD2VY4Fw9xt7Iya2dQ3br6Y1V9nbLvQU2MLE99LlXtqsfxdr3GqU+z86rd+i uYZ9xSHNvY94g35ob5kbzxljfEp9gcbjzsfbOFzm3W0/1d2uxFKckWioxVxUnAgA0PfNNOcC AAA= Archived-At: Subject: [COSE] COSE Issues X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:30:13 -0000 Having heard no complaints on the latest change set, the chairs are = closing all issues marked as =E2=80=9Ccompleted=E2=80=9D today. You = should see most of the notifications pepper through to the list shortly = (though our github integration is special at best). If you believe any = of these issues is in need of re-examination, we can always re-open them = or you can file a new issue against the current document. Thank you all, =E2=80=94 Justin, your COSE chair= From nobody Mon Nov 30 07:31:19 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89ECD1B2EB4 for ; Mon, 30 Nov 2015 07:31:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t1NstGiC3ffe for ; Mon, 30 Nov 2015 07:31:11 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD5251B2EA2 for ; Mon, 30 Nov 2015 07:31:10 -0800 (PST) Received: from [192.168.10.143] ([80.92.121.34]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0LoE4f-1aWRVK0Xfd-00gDzT; Mon, 30 Nov 2015 16:31:07 +0100 To: Justin Richer , cose@ietf.org References: <831C610E-2326-4D70-A48C-77BA8A7D2369@mit.edu> From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 Message-ID: <565C6BB8.8000401@gmx.net> Date: Mon, 30 Nov 2015 16:31:04 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: <831C610E-2326-4D70-A48C-77BA8A7D2369@mit.edu> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="LF2EHMAoKuVWuAFdt3okAoJE5uuStC41P" X-Provags-ID: V03:K0:UIOhtdRe1DiYAxteRFzRKRmeWkww9u9vZmbjKOMkOfgC1PAcQOh kA8gD09kpaXrvP4ELq+Fr9yrRYXmLQL221lOVtiriNmQfC1y3Sdr1KZFEniWYsA764KlX6i 8mHUfluXftct+HkfijjEOqzvrLOz5opFzQDDcRc6j7NznX+P2BM1sVIPMPDmKgtd6aMjU2K WSwPgyikqclQjREBBgM/w== X-UI-Out-Filterresults: notjunk:1;V01:K0:m/41IpfVxlo=:j6G7nHVk7AkVUO+5Doz6cn 9842qpOe75mdnUoovzbZU1apIbu9zgMiiZ/xU1xU/VcCmLyM+9/iSL6yloo0CDT+B12EOX8S0 dl8CsiEZ64xVd/AOaPcCYDzxD3ptVT2AdRe+CRyY5sjJZzLSMLB2956wpIYN/pZDMArNmu4UG VwRJeck8tV1zXB7opC9i44NM4a3owN2+L2gCd1t6ay/JYz5Re/EyTqwoiEuAqYlZVD34QofNc mI4y9R0uTwictZy5BAlVBxvyzVln6cL7CQ751MJpwprVNJUmb8Mtq5WaSn8hP/oqAmwvYDAu1 9jxpqmDwutKs2j+Jk5PO1LB2PqXkCcbercaMbEtE7aeaZ5ySRPxZwCbdTcpuynOFV08In/fUO ztssPgMachVpJe+nTpsfHdZ56dcejcJDVLdLXygh+QpBPEf2Q8b3FT00WYY1rrRpiQwb/H7gM 73ZfA/yEyTPknAM+FEvF6cUFGwIdfKmzeP4n8EgizHJlJPCK+FXBJ99CGJQsjv3wI5jUWpEQ2 dUj/r+XRZn+5QApouPaBkDn6PJ/EpdokPlXfsxI3fkNbuss9ZkB1R1e5TJqzd3juKKHNqccXA X0b5P/mKRxCKXGQV7n7yQFnmsv0vp/wiktyinlALhhrOqkzWXC5i0xA899wTeuK+2S7NZdWRv U3fwBMktSVss7KqxPhbaHp1sgQT8UT9ygQZDVntWe5GdZTEnS9N+MZ6UyRzVuFPSNSYdDHkhl iOblT6lCi1KMRCL+wmNm6qVYLAm4QhguFx5NVK5PTJaO7JHHDBaur7g0hOo= Archived-At: Subject: Re: [COSE] COSE Issues X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:18 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --LF2EHMAoKuVWuAFdt3okAoJE5uuStC41P Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Please give me a few more days to look at the proposed resolution. I have been busy with various other activities recently. Ciao Hannes On 11/30/2015 04:30 PM, Justin Richer wrote: > Having heard no complaints on the latest change set, the chairs are clo= sing all issues marked as =E2=80=9Ccompleted=E2=80=9D today. You should s= ee most of the notifications pepper through to the list shortly (though o= ur github integration is special at best). If you believe any of these is= sues is in need of re-examination, we can always re-open them or you can = file a new issue against the current document. >=20 > Thank you all, > =E2=80=94 Justin, your COSE chair > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose >=20 --LF2EHMAoKuVWuAFdt3okAoJE5uuStC41P Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJWXGu5AAoJEGhJURNOOiAtufQH/jwj/b8hpNYSyfBEB1j3j1kh ZC0wKSnMum1cjFu0lBAEb80y1ApuHy34V3Gvcy1vA+iDTXtKlLVUbdadJk6+fz66 w0dAhQZ1GU59aPMiZPRhExDjai34Gj3oE35DgdPaFeghoknEZ0s/TUXhLe3fxENg udXZm5t5ekv/n3gGVHBfOQ4TyM1enhCTO7AATI76MPaXRiN7x3IsJF54TcPeYW75 b2/0t0RuK5hZIJC2KAoN7QVtOD+yEkypUuvanbHaQ5oRheR+nkdtxDKR1vuYexxk 9B6wWLHica89SYAllfumrIAApzfW3rBMmX3MhhNaBYzE01QplLNRPHuOpCIhuEU= =8H+M -----END PGP SIGNATURE----- --LF2EHMAoKuVWuAFdt3okAoJE5uuStC41P-- From nobody Mon Nov 30 07:31:26 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F05D31B2EB9 for ; Mon, 30 Nov 2015 07:31:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.042 X-Spam-Level: X-Spam-Status: No, score=-3.042 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dKwp9GuXUjl6 for ; Mon, 30 Nov 2015 07:31:18 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0EDAA1B2EA5 for ; Mon, 30 Nov 2015 07:31:12 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897471; bh=voJvHbnpyCPxDVN+y1wme7SunGVH6WwtPJwNbbFxVtM=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=ojP0FkNSiIB4CTAT+FU8FS69vm6A5FTZBYXjT2jGddkIINaDYg0WIsUIcz2pJbmGN 9ewXr8v0cz1vJ72vSSm+BvkO0nfWbX5qDwd14UBK4FzX8K2JwUeOOuXRcLRudfSVce 6a+cKHoiPz3OEAae1IZMgpbyWO+zT1ilIozmpLiw= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbfe169_34a03f9c3033b2b8673018a"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Are there enough use cases for external_aad to warrant its inclusion? (#16) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:21 -0000 ----==_mimepart_565c6bbfe169_34a03f9c3033b2b8673018a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #16. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/16#event-477834216 ----==_mimepart_565c6bbfe169_34a03f9c3033b2b8673018a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #16.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbfe169_34a03f9c3033b2b8673018a-- From nobody Mon Nov 30 07:31:29 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56D4A1B2EA3 for ; Mon, 30 Nov 2015 07:31:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8_4XgvIEN0OS for ; Mon, 30 Nov 2015 07:31:21 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BE031B2EA4 for ; Mon, 30 Nov 2015 07:31:12 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897471; bh=YjX21GnNR8QMiLmdvtNnzGzbTlczVCVzi4e2qx2jv7Y=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=IurTbnbZdxNx9AMwLjzJM9PQ5J7FaOf27ZeIrttbUpORIborwsKpGQMTQDIuuS87F UiFvcCkokuFFhW1tSK8mfOIdesHW4Zu0RpkNTEbmTQYzl0ld79e02EEHaO+Wq6yBoo YaIR9mFv8uXc9kqrlCfJ2Dp2rVHDdPaHzptWZZ3M= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbf43b3a_67223fbd42a1b2bc12550e1"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Inconsistency_between_?= =?utf-8?b?4oCcbm9uZeKAnSBhbmQg4oCcZGlyZWN04oCdIHRlcm1pbm9sb2d5ICgjMjkp?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:25 -0000 ----==_mimepart_565c6bbf43b3a_67223fbd42a1b2bc12550e1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #29. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/29#event-477834227 ----==_mimepart_565c6bbf43b3a_67223fbd42a1b2bc12550e1 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Closed #29.

&m= dash;
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbf43b3a_67223fbd42a1b2bc12550e1-- From nobody Mon Nov 30 07:31:30 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B3B31B2EA4 for ; Mon, 30 Nov 2015 07:31:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S7UL2z2im5sI for ; Mon, 30 Nov 2015 07:31:23 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext6.iad.github.net [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 145471B2EA6 for ; Mon, 30 Nov 2015 07:31:12 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897471; bh=NSaj8hDJdVkOqrVXvjBI0nzLuxwC5RcLBwW1llxHsiA=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=neZZEptwEoo/ds4ySEC2EIdm/alZvzzijgw/y+x6yiwjofbd5njGGAIgYhL6HIUO+ TUshNXV9gN31rJzDrI8WOiohuIySH82G8RyO0z3HdPTcf1JO6ge1jEggmZyyFEenMA rvgB5WlqCWiA99kngA0D7r91CIGVdW+2Uj2HKD0s= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbf297bc_49ff3fbd42a1b2bc3265ad"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-GitHub-Reason: comment X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Cc: cose-ietf Subject: Re: [COSE] [cose-issues] Restore compression header parameter (#22) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:28 -0000 ----==_mimepart_565c6bbf297bc_49ff3fbd42a1b2bc3265ad Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #22. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/22#event-477834219 ----==_mimepart_565c6bbf297bc_49ff3fbd42a1b2bc3265ad Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #22.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbf297bc_49ff3fbd42a1b2bc3265ad-- From nobody Mon Nov 30 07:31:39 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA24C1B2EA3 for ; Mon, 30 Nov 2015 07:31:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RGBMZ9NnVgH9 for ; Mon, 30 Nov 2015 07:31:24 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CB471B2EA7 for ; Mon, 30 Nov 2015 07:31:12 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897471; bh=RK/4WE4Zb9/C9ancEm6cZBfat4zjFMui0PHLvGZKZGg=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=WR08QrwdlGzEhR3Jpwq+upuhhCA0vi2hNu+OG+/I8n0gb6USNEG9zg6W5TDK3bZAY JjrAp1xtt4MTfF4GDITr/XYPyOwddognLsOsQhcn3c9rIQ22z3Lxy7FTPre0NPlXkM lYr8iKnslbRw8PKWNTiXP+BD0obWLkbI4u931ao8= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbf10316_36d63fc6170b92b82233438"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Fix GCM IV size at 96 bits (#18) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:29 -0000 ----==_mimepart_565c6bbf10316_36d63fc6170b92b82233438 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #18. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/18#event-477834217 ----==_mimepart_565c6bbf10316_36d63fc6170b92b82233438 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #18.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbf10316_36d63fc6170b92b82233438-- From nobody Mon Nov 30 07:31:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDDBD1B2EA6 for ; Mon, 30 Nov 2015 07:31:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yhJEIFg44TRX for ; Mon, 30 Nov 2015 07:31:28 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1ED2C1B2EA8 for ; Mon, 30 Nov 2015 07:31:12 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:10 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897470; bh=dhGDn5wQbu+N0cettYQRm5vdz7v5zjqsHaZeY9mweoU=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=rJxCep08zKS2Hig2GuugTkVnnjI9rY4N/D12sw5J0LEvY39LkHuOVg+qsTcKfWVuE gGiC7d4kSnfxu7oa0BN6FKfWp0K1BrIfJo9bmorjGnNbY+vRSiggJqCNKFVqXg10t3 1LBoabRHEmVoWalj4Z4ZTH8ghoCw2w0D3eAJa1+Y= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbee61c1_2c583f885541329c3137d2"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Move_=E2=80=9Csequence_number?= =?utf-8?b?4oCdIHZhbHVlIHRvIHRoZSBwYXlsb2FkICgjMTQp?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:30 -0000 ----==_mimepart_565c6bbee61c1_2c583f885541329c3137d2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #14. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/14#event-477834214 ----==_mimepart_565c6bbee61c1_2c583f885541329c3137d2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Closed #14.

&m= dash;
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbee61c1_2c583f885541329c3137d2-- From nobody Mon Nov 30 07:31:42 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CE7D1B2EA3 for ; Mon, 30 Nov 2015 07:31:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fs9UMG6PN3VM for ; Mon, 30 Nov 2015 07:31:28 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 243131B2EA9 for ; Mon, 30 Nov 2015 07:31:12 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897471; bh=bgZ+5q1j4PhzMKfNKHEHAFnH9x0Bb8bqRHg9XGbrziE=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=vY7KHvMqkA5hP18lL+W+aIDz4TfLmWieDwNVn7vAgMiDO/c0vat8JlolThkrC+kFJ ghAwkfqJazQ46PaeTI0ihXcD20OoeIKee2AricIjNEFCVvwromIr8RQSZr2Z8Q2NG6 VIVBmuQbty1eVPfn1ri9oWRbzGH1Zk0yaCvKvp7I= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbfe491_34a73f9c3033b2b822138ea"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?b?W2Nvc2UtaXNzdWVzXSBDaGFuZ2Ug4oCcU0hPVUxE4oCdIHRv?= =?utf-8?q?_=E2=80=9CMUST=E2=80=9D_in_statement_about_parsers_rejecting_du?= =?utf-8?q?plicate_labels_=28=2320=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:32 -0000 ----==_mimepart_565c6bbfe491_34a73f9c3033b2b822138ea Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #20. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/20#event-477834218 ----==_mimepart_565c6bbfe491_34a73f9c3033b2b822138ea Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Closed #20.

&m= dash;
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbfe491_34a73f9c3033b2b822138ea-- From nobody Mon Nov 30 07:31:43 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ABD7F1B2EA3 for ; Mon, 30 Nov 2015 07:31:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cwBuPSZ_d2CW for ; Mon, 30 Nov 2015 07:31:32 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 504AA1B2EAB for ; Mon, 30 Nov 2015 07:31:12 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897471; bh=3IknLY/IrNfx5siEKW+eLzd9kQqIqR/IvSY6wPEQrmM=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=FGvta17ZLb+5HTe451dSSaI9X6htVUaX/SHLbo898Tq6R1rHIYP+BKlZD+xPqQ4Ed keE68QfEvJH16TO/LuMfT+rmUlXCJSsK7M5FqeKKEtFS8bR+luAi/hEOhBnso3dTi1 AT5u5xHp3J5oEYYdnE9ZMk1GPPWcgqAkD507IEmY= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbfa019b_2c583f885541329c314573"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Elaborate_on_=E2=80=9Cif_it_is?= =?utf-8?q?_not_used_in_the_computation_of_the_content_key=E2=80=9D_=28=23?= =?utf-8?b?MzUp?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:35 -0000 ----==_mimepart_565c6bbfa019b_2c583f885541329c314573 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #35. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/35#event-477834236 ----==_mimepart_565c6bbfa019b_2c583f885541329c314573 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Closed #35.

&m= dash;
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbfa019b_2c583f885541329c314573-- From nobody Mon Nov 30 07:31:44 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F25E81B2EA3 for ; Mon, 30 Nov 2015 07:31:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Imuc3OVc9tMN for ; Mon, 30 Nov 2015 07:31:29 -0800 (PST) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34A591B2EAA for ; Mon, 30 Nov 2015 07:31:12 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897471; bh=lhFQ/lEuoQAs4DrvvnvRRMGWCUG0ng2cSXyCbyzX+Xg=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=ScTaG9BKSQydgVWRILntQcGI8JyzDXHwpXj6IQRoif2sQe6MQX0drpRZH4S0A47G7 o9Rhd/Z40MZg0bQuLKuQ9ZmgCmzhMC5LAQv36rQV1mDxM+M0AjicNpSbbZOjhud0qg 1PcS7/+b7ThLmzGVrr7iQGraByu7ooaSFxKRL/6c= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbf657ff_51fd3f9c3033b2b826036b"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Wording_=E2=80=9Cbinding_of_id?= =?utf-8?b?ZW50aXR54oCdIGNvbmZ1c2luZyAoIzMwKQ==?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:36 -0000 ----==_mimepart_565c6bbf657ff_51fd3f9c3033b2b826036b Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #30. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/30#event-477834229 ----==_mimepart_565c6bbf657ff_51fd3f9c3033b2b826036b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Closed #30.

&m= dash;
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbf657ff_51fd3f9c3033b2b826036b-- From nobody Mon Nov 30 07:31:46 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DABB01B2EA8 for ; Mon, 30 Nov 2015 07:31:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uTjQcqcmN03N for ; Mon, 30 Nov 2015 07:31:35 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext6.iad.github.net [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C98D31B2EAC for ; Mon, 30 Nov 2015 07:31:12 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897471; bh=Gn24u3iXRp2sDjPC1wEhPggpX+BnPwWUetgLoF67cyQ=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=opLGNd3pVpcqsjFrj5kuT5fZ3j3F8a203weqypBwrvRbo3fLgMEhX8LUN5LJioR9K LZfNjYgNBkyu/3ehaadAnKPNMVJOinC4JG4Hva6OlnXM9s2duzwRAr4U4z40BCqpG5 UzI76ZCI1eUsQ/Kvsu3l8OaIESICb8F0wf/g8+Wc= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbf4754a_3ef03fc6170b92b887484"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bcose-issues=5D_Use_of_undefined_terms_?= =?utf-8?b?4oCcYm9keSBwcm90ZWN0ZWQgYXR0cmlidXRlc+KAnSwgZXRjLiAoIzI4KQ==?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:31:39 -0000 ----==_mimepart_565c6bbf4754a_3ef03fc6170b92b887484 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #28. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/28#event-477834225 ----==_mimepart_565c6bbf4754a_3ef03fc6170b92b887484 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Closed #28.

&m= dash;
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbf4754a_3ef03fc6170b92b887484-- From nobody Mon Nov 30 07:32:50 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8F8B1B2EA8 for ; Mon, 30 Nov 2015 07:32:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mbychbXd7jDC for ; Mon, 30 Nov 2015 07:32:48 -0800 (PST) Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40F1F1B2EAE for ; Mon, 30 Nov 2015 07:32:37 -0800 (PST) X-AuditID: 12074423-f797f6d0000023d0-c6-565c6c13ed53 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id 34.C2.09168.31C6C565; Mon, 30 Nov 2015 10:32:35 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id tAUFWYN3008842; Mon, 30 Nov 2015 10:32:35 -0500 Received: from artemisia.richer.local (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id tAUFWXdr005965 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 30 Nov 2015 10:32:34 -0500 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) Content-Type: multipart/signed; boundary="Apple-Mail=_B6620DA0-50C0-4792-8868-B42960AB55A9"; protocol="application/pgp-signature"; micalg=pgp-sha256 X-Pgp-Agent: GPGMail 2.5.2 From: Justin Richer In-Reply-To: <565C6BB8.8000401@gmx.net> Date: Mon, 30 Nov 2015 10:32:32 -0500 Message-Id: References: <831C610E-2326-4D70-A48C-77BA8A7D2369@mit.edu> <565C6BB8.8000401@gmx.net> To: Hannes Tschofenig X-Mailer: Apple Mail (2.2104) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrIKsWRmVeSWpSXmKPExsUixCmqrCucExNm8OyVjcW0rVNZLZbuvMfq wOSxeNN+No8lS34yBTBFcdmkpOZklqUW6dslcGWc2dHBWnBfoOL0/4wGxk18XYycHBICJhKb N39jgbDFJC7cW8/WxcjFISSwmEmivWUWI4SzkVHi8IEvTBDOQyaJZ5MWsYG0CAvIS2yddIEJ xOYV0JN4desyK0gRs8AURonH098CORxAc6UkZuwXAKlhE1CVmL/yFlg9p4C6xM2N7xhBbBag +Lc7DWBxZgFBidWNk9ghZlpJ9D9pBqsREgiV+HqxAcwWETCUuD5zOivE2bISu38/YprAKDgL yRmzkJ0xC2yutsSyha+ZIWxNif3dy1kgbHmJ7W/nQMUtJRbPvAEVt5W41beACcK2k3g0bRHr AkaOVYyyKblVurmJmTnFqcm6xcmJeXmpRbpmermZJXqpKaWbGEGxw+6ivIPxz0GlQ4wCHIxK PLwHjKPDhFgTy4orcw8xSnIwKYnyFmXEhAnxJeWnVGYkFmfEF5XmpBYfYlQB2vVow+oLjFIs efl5qUoivIGmQHW8KYmVValF+TBl0hwsSuK8c7/4hgkJpCeWpGanphakFsFkZTg4lCR4H2UB NQoWpaanVqRl5pQgpJk4OA8xSnDwAA1fD1LDW1yQmFucmQ6RP8WoKCXOWw+SEABJZJTmwfWC Ul7C28OmrxjFgd4S5g0CqeIBpku47ldAg5mABn/4Ew0yuCQRISXVwGiwYR3fpz0HVTM46xRC uI9Hn/3tY/VzNk/0tV0XHi1jjViQa/Cn6JTVywa+RZEV95Kear86FKYY+yr4e8++ZT8a9/8M PBJ3foahZcq+uuDvBub/01PNt5wXd+jby+vTdofZ6nClFntf2ptH336dt76ULL9DfFNmtvLE zEM3d/LfFJ6Xe9lspbgSS3FGoqEWc1FxIgDux+9GVAMAAA== Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] COSE Issues X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:32:49 -0000 --Apple-Mail=_B6620DA0-50C0-4792-8868-B42960AB55A9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hannes, The issues have been closed after the stated review period. As stated = below you can petition to have one re-opened or you can file a new issue = against the current document for re-evaluation. =E2=80=94 Justin, your COSE chair > On Nov 30, 2015, at 10:31 AM, Hannes Tschofenig = wrote: >=20 > Please give me a few more days to look at the proposed resolution. I > have been busy with various other activities recently. >=20 > Ciao > Hannes >=20 >=20 > On 11/30/2015 04:30 PM, Justin Richer wrote: >> Having heard no complaints on the latest change set, the chairs are = closing all issues marked as =E2=80=9Ccompleted=E2=80=9D today. You = should see most of the notifications pepper through to the list shortly = (though our github integration is special at best). If you believe any = of these issues is in need of re-examination, we can always re-open them = or you can file a new issue against the current document. >>=20 >> Thank you all, >> =E2=80=94 Justin, your COSE chair >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >>=20 >=20 --Apple-Mail=_B6620DA0-50C0-4792-8868-B42960AB55A9 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- iQEcBAEBCAAGBQJWXGwQAAoJEDPAngkbd+w940cH/ReDmn9ea+PZNDgmcfL/5poY V6yMZRSVcKCS3w1dc31q4V279dcBLg2tlv/WSNseYd/F0zeabqIbS6GfAuNqJRVE uRkvHy+19Lg8Ot10Wnei9XkuvuGK/Qz5kVGfKjRIM9L3/lTkJqT9sIUITLXqY4qI 1XPBfRfN9AzZFdKqnjyRpI4K+kGaonkusS/eeBMBI+L1Y/jUKxF014CE9Ybe3x8p hmPFIdKKvXhFcIcyBtI1xe2nly01ElilgC7jPD3RXrpOFp+kilEVn0tYyf9ZrHAS eU200bgIR3EjT0toKNBuDX/YebqehFYh/v5LiQA5ZmCrZV4+LzKhUNDZsTavZlE= =8/oL -----END PGP SIGNATURE----- --Apple-Mail=_B6620DA0-50C0-4792-8868-B42960AB55A9-- From nobody Mon Nov 30 07:38:35 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A5FB1B2EF6 for ; Mon, 30 Nov 2015 07:38:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.641 X-Spam-Level: X-Spam-Status: No, score=-4.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2-3_OazFxBUR for ; Mon, 30 Nov 2015 07:38:33 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B79A1B2EF7 for ; Mon, 30 Nov 2015 07:38:31 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897471; bh=HeLVGEe+gXMOqJGQd0Ks0h7p39yGfK9kKcYz6Vntabw=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=fF+P+JOSuYbIR7XPDChUk9uY2hw29I5FgOncTAOtKYmi5oPGBfn4zM1KhoU705jFo A9gGxUay2jhBNtJRwnDGTKMIcHgO63X281dTVZGjJsRqo4up/1S7vgDCZ+66vktwTo gV+LloWMRA5TWasihO5Kl2T6ZSUrw7Bv2npPHGy8= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bbfcf872_36d63fc6170b92b82234185"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] =?utf-8?b?W2Nvc2UtaXNzdWVzXSBJcyBhIOKAnGRpcmVjdCBrZXnigJ0g?= =?utf-8?q?sent_in_the_clear=3F_=28=2336=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:38:34 -0000 ----==_mimepart_565c6bbfcf872_36d63fc6170b92b82234185 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #36. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/36#event-477834238 ----==_mimepart_565c6bbfcf872_36d63fc6170b92b82234185 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Closed #36.

&m= dash;
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bbfcf872_36d63fc6170b92b82234185-- From nobody Mon Nov 30 07:38:39 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FA351B2EEE for ; Mon, 30 Nov 2015 07:38:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uvhw5mIScrCw for ; Mon, 30 Nov 2015 07:38:34 -0800 (PST) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F1A471B2EF0 for ; Mon, 30 Nov 2015 07:38:31 -0800 (PST) Date: Mon, 30 Nov 2015 07:31:12 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1448897472; bh=t/39q26fKxbkNQz0Mk3AocWkdcAbpJ1ZbIOUN7uLico=; h=From:Reply-To:To:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=K8ClZVBEKoEsu+P7F/m1EKLn2B/japEtIFD4w0Rdk5MBD/ZJwaLRHaOIewenWAIGN S37PwkGFUAJypCyIqQBOFzBSRrNXRRJy2md8ljdXHLexRxObvv9I6g+vy0wFu20e+B CsbEffkzQ4RIhbVDEekEbTvNEYMWGnP55u0TfDFg= From: Justin Richer To: cose-wg/cose-issues Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_565c6bc015e14_27f63fa0efbcb2c0654282e"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jricher X-GitHub-Recipient: cose-ietf X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: cose@ietf.org Archived-At: Subject: Re: [COSE] [cose-issues] Address wording and grammar nits in -06 (#41) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Reply-To: cose-wg/cose-issues List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Nov 2015 15:38:35 -0000 ----==_mimepart_565c6bc015e14_27f63fa0efbcb2c0654282e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #41. --- Reply to this email directly or view it on GitHub: https://github.com/cose-wg/cose-issues/issues/41#event-477834244 ----==_mimepart_565c6bc015e14_27f63fa0efbcb2c0654282e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #41.

—
Reply to this email directly or view it on GitHub.

----==_mimepart_565c6bc015e14_27f63fa0efbcb2c0654282e--