From nobody Tue Nov 1 12:18:11 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C8881296BF; Tue, 1 Nov 2016 12:18:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id avu65joRWjvx; Tue, 1 Nov 2016 12:18:01 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2801C1294A2; Tue, 1 Nov 2016 12:18:00 -0700 (PDT) Received: from hebrews (50.45.239.150) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 1 Nov 2016 12:33:58 -0700 From: Jim Schaad To: 'Stephen Farrell' , 'Justin Richer' References: <147665141739.25813.4419576200342341528.idtracker@ietfa.amsl.com> <029401d227f7$5cdb7fa0$16927ee0$@augustcellars.com> <822A08BC-5710-48E6-BCC7-AC86A554EFEC@mit.edu> <476D703F-727E-49D9-89C1-F6FD1092D55E@mit.edu> <94353594-ef7c-d909-605a-391ef2502c68@cs.tcd.ie> In-Reply-To: Date: Tue, 1 Nov 2016 12:17:47 -0700 Message-ID: <066401d23474$a3659580$ea30c080$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQHNbS3DXaOw24A1fPGcVnzLF6ZbJwH6hE6yAa5/KqUBpp/SkQJYeYmyApemOv0BtGhy6aBubERg Content-Language: en-us X-Originating-IP: [50.45.239.150] Archived-At: Cc: cose-chairs@ietf.org, cose@ietf.org, 'The IESG' , draft-ietf-cose-msg@ietf.org Subject: Re: [COSE] Stephen Farrell's Discuss on draft-ietf-cose-msg-20: (with DISCUSS and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Nov 2016 19:18:09 -0000 Another thread dealing with this issue includes = https://www.ietf.org/mail-archive/web/cose/current/msg00981.html - = basically the subject is 'make "alg" field optional' Usual suspects (G=C3=B6ran, Ludwig, Francesca) on one side, me and a = couple of others on the other side. Interestingly the antis included = Mike who argued for this in the JOSE. Jim > -----Original Message----- > From: G=C3=B6ran Selander [mailto:goran.selander@ericsson.com] > Sent: Wednesday, October 26, 2016 9:37 PM > To: Stephen Farrell ; Justin Richer = > Cc: Jim Schaad ; cose-chairs@ietf.org; The = IESG > ; draft-ietf-cose-msg@ietf.org; cose@ietf.org > Subject: Re: Stephen Farrell's Discuss on draft-ietf-cose-msg-20: = (with DISCUSS > and COMMENT) >=20 > Stephen, Justin, >=20 > About item (2) - mandatory alg header - this was discussed on = different > occasions. Several voices were heard in support of a setting where a = kid > identifies key and algorithm. One thread starts here: >=20 > https://www.ietf.org/mail-archive/web/cose/current/msg00544.html >=20 > Appendix A was the proposed solution to resolve the conflict of = mandatory alg > header, but the case with only kid is discouraged, both in appendix A = and in the > section on COSE_Encrypt0 > https://tools.ietf.org/html/draft-ietf-cose-msg-23#section-5.2 >=20 > draft-ietf-core-object-security, which is the first and currently only = adopted > application of COSE, uses the COSE_Encrypt0 structure, does not have = the alg > header and has a kid header (=E2=80=9Ccontext identifier=E2=80=9D, = recommended to be 64 bit > pseudo-random). >=20 >=20 > Since you ask: Of course we would prefer to apply an endorsed version = of COSE > instead of making an exception from an exception. Appendix A in a = sense opens > a door. When what is mandatory in the body isn=E2=80=99t really = mandatory, it is a > smaller step to deviate from the recommendations. >=20 > I think the contentious point was the potential non-uniqueness of kid. = If I may > wish: If we maintain mandatory alg header, then maybe some text about = when > kid header only could be acceptable, for example sufficiently large = random kids, > if we agree on that? >=20 > G=C3=B6ran >=20 >=20 > On 2016-10-26 17:12, "Stephen Farrell" = wrote: >=20 > > > >Hiya, > > > >On 26/10/16 16:06, Justin Richer wrote: > >> Hi Stephen, > >> > >> Sorry for the delay on answering #2 and #6 below. After researching > >> the list archives and issue tracker, neither Kepeng nor I can find > >> discussion on either issue. If there is such discussion in the > >> archives, we would appreciate the working group members pointing us > >> all to it. > >> > >> But as such, these both seem to be items that were added to the = spec > >> by the editor without controversy or contention from the working > >> group. Therefore, it does appear to reflect consensus as there were > >> no objections raised. We both think that the items are OK as is, = but > >> we=E2=80=99d like to give the working group a couple days to = respond > >> otherwise if that=E2=80=99s not the case for anyone. > > > >Thanks for checking. If the WG don't say they'd like a change within = a > >couple of days, I'll clear the discuss. (Please do ping me though, I > >may forget;-) > > > >Cheers, > >S. > > > > > >> > >> Thank you, > >> > >> =E2=80=94 Justin & Kepeng, as COSE chairs > >> > >> > >>> On Oct 19, 2016, at 8:59 AM, Justin Richer > >>> wrote: > >>> > >>> Hi Stephen, > >>> > >>> The consensus of the working group after Yokohama was to make the > >>> CDDL non-normative and still use it as a description/example = format. > >>> > >>> https://www.ietf.org/mail-archive/web/cose/current/msg00802.html > >>> > >>> > >>> I believe the current draft reflects that state. Yes, CDDL syntax = is > >>> peppered throughout the document as illustration, but it=E2=80=99s = the > >>> English text that=E2=80=99s normative. > >>> > >>> One point that was discussed was that if the draft did not use = CDDL, > >>> then another description language would likely need to be made up = to > >>> make human-readable examples in the text. The group felt that it = was > >>> better to use an existing (even if > >>> unfinished/unofficial) description format but remove the normative > >>> dependency. > >>> > >>> =E2=80=94 Justin, as chair. > >>> > >>>> On Oct 16, 2016, at 3:41 PM, Stephen Farrell > >>>> > > >>>> wrote: > >>>> > >>>> > >>>> Hiya, > >>>> > >>>> Dear cose-chairs - there is stuff in this discuss for you to deal > >>>> with. (Just putting that there in case you're not delving down = into > >>>> the body of the mails:-) > >>>> > >>>> On 16/10/16 22:50, Jim Schaad wrote: > >>>>> I think we dealt with all of the comments. I cannot help you = with > >>>>> getting chair response. > >>>>> > >>>>> See below for my one issue. > >>>>> > >>>>> Jim > >>>>> > >>>>> > >>>>>> -----Original Message----- From: Stephen Farrell > >>>>>> [mailto:stephen.farrell@cs.tcd.ie > >>>>>> ] Sent: Sunday, October 16, > >>>>>> 2016 1:57 PM To: The IESG > > >>>>>> Cc: draft-ietf-cose-msg@ietf.org > >>>>>> ; Goeran Selander > >>>>>> >>>>>> >; cose-chairs@ietf.org > >>>>>> ; goran.selander@ericsson.com > >>>>>> ; cose@ietf.org > >>>>>> Subject: Stephen Farrell's Discuss on > >>>>>> draft-ietf-cose-msg-20: (with DISCUSS and COMMENT) > >>>>>> > >>>>>> Stephen Farrell has entered the following ballot position for > >>>>>> draft-ietf-cose-msg-20: Discuss > >>>>>> > >>>>>> When responding, please keep the subject line intact and reply = to > >>>>>> all email addresses included in the To and CC lines. > >>>>>> (Feel free to cut this introductory paragraph, however.) > >>>>>> > >>>>>> > >>>>>> Please refer to > >>>>>> https://www.ietf.org/iesg/statement/discuss-criteria.html > >>>>>> > >>>>>> for more information about IESG DISCUSS and COMMENT positions. > >>>>>> > >>>>>> > >>>>>> The document, along with other ballot positions, can be found > >>>>>> here: https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > = >>>>>>------------------------------------------------------------------ > >>>>>>--- > >>>>>>- > >>>>>> > >>>>>> > >DISCUSS: > >>>>>> > = >>>>>>------------------------------------------------------------------ > >>>>>>--- > >>>>>>- > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >Thanks for the updates in -20. I think we've only the following = points > >left. Note > >>>>>> that 2 of those are questions to the WG chairs and not to Jim. > >>>>>> > >>>>>> (1.1) table 2: As-is the value type column seems to me to make > >>>>>> CDDL normative. I don't see the natural language version that = you > >>>>>> said would be normative. > >>>>>> > >>>>>> Can you help me see that the changes there are such that CDDL = is > >>>>>> ok as informative? I'm not sure but as I read it there is still > >>>>>> no natural language statement that a "counter signature" is one > >>>>>> (or more) COSE_Signature values. > >>>>> > >>>>> In section 1.3 the following text was added: > >>>>> > >>>>> Two syntaxes from CDDL appear in this document as shorthand. > >>>>> These are: > >>>>> > >>>>> FOO / BAR - indicates that either FOO or BAR can appear here [+ > >>>>> FOO] - indicates that the type FOO appears one or more times in = an > >>>>> array > >>>>> > >>>>> The value from the table is: > >>>>> > >>>>> COSE_Signature / [+ COSE_Signature ] > >>>>> > >>>>> Section 4.1 contains the text: > >>>>> > >>>>> The CBOR object that carries the signature and information about > >>>>> the signature is called the COSE_Signature structure. > >>>>> > >>>>>> From that I think that all of the needed normative text is > >>>>>> present. > >>>> > >>>> Yeah, I get that. But then I think you've embedded some CDDL > >>>> notation at least as normative. (I mean the constructs you = describe > >>>> with FOO/BAR above.) > >>>> > >>>> While I do start to feel pedantry-panic that I'm saying it, if > >>>> really treating CDDL as informative, I think you ought say in = text > >>>> that one or more COSE_Signature fields need to be in a counter > >>>> signature. > >>>> > >>>> But I'm gonna clear that anyway as the whole CDDL is not = normative > >>>> thing is really pretence IMO and there's no point in me joining = in > >>>> with that further. > >>>> > >>>> That means that clearing this discuss is now solely down to the > >>>> chairs saying they're happy that Jim's positions do reflect wG > >>>> consensus. > >>>> > >>>> Cheers, S. > >>>> > >>>> > >>>> > >>>> > >>>>> > >>>>>> > >>>>>> (2) 3.1, alg: so you're disallowing a setup where the kid alone > >>>>>> identifies the key and algorithm to the recipient? That is used > >>>>>> in some IETF protocols (OSPF iirc) so rhat's a pity, and will = in > >>>>>> those (maybe less common) cases consume a few bytes that could > >>>>>> otherwise be saved. I think, but am not sure, that the WG > >>>>>> already discussed this, but if not, maybe worth a thought? (Or > >>>>>> even a 2nd thought:-) And appendix A.1 is really puzzling - as = it > >>>>>> provides instructions for how to not follow a MUST in the body = of > >>>>>> the document. > >>>>>> > >>>>>> I think we left the mail thread on this with you saying "Best = to > >>>>>> ask the chairs if they agree that this is WG consensus," > >>>>>> as you're an admitteddly strong partisan on this topic. > >>>>>> > >>>>>> So, COSE chairs - what's your take? (If you say this is ok with > >>>>>> the WG, I'll clear.) > >>>>>> > >>>>>> (6) section 10: why MUST the kty values be present always? > >>>>>> That seems unnecessary in some contexts and I don't get a > >>>>>> security reason why it's needed e.g. if there's an alg id > >>>>>> somewhere - can you explain? I can see folks omitting this > >>>>>> leading to interop problems for not useful reasons. (Same = comment > >>>>>> applies in other cases where kty is a MUST, e.g. > >>>>>> 12.1.2, 12.2.1.) > >>>>>> > >>>>>> I think this is the similar to discuss point (2) above. > >>>>>> > >>>>>> So again, COSE chairs, can you confirm that this design does > >>>>>> reflect WG consensus and isn't just a thorough and good editor > >>>>>> getting his way? (If you say this is ok with the WG, I'll = clear.) > >>>>>> > >>>>>> > >>>>>> > = >>>>>>------------------------------------------------------------------ > >>>>>>--- > >>>>>>- > >>>>>> > >>>>>> > >COMMENT: > >>>>>> > = >>>>>>------------------------------------------------------------------ > >>>>>>--- > >>>>>>- > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >OLD COMMENTS BELOW, I DIDN'T CHECK THEM. Happy to chat more about > 'em > >>>>>> if that's useful. > >>>>>> > >>>>>> - 1.4: the 2nd last paragraph is unclear to me. Probably just > >>>>>> needs re-phrasing. > >>>>>> > >>>>>> - 1.5: I'd add a reference to RFC5116. > >>>>>> > >>>>>> - 3.1, crit: The statement that security libraries or = application > >>>>>> code can handle this is odd - isn't that an API requirement? = (I'm > >>>>>> not objecting, but it's odd.) > >>>>>> > >>>>>> - 3.1, "content type" is the space there intended? If so, = maybe > >>>>>> add quotes or a comma or something to disambiguate the name and > >>>>>> descriptive text? Same for other multi-word names here. > >>>>>> > >>>>>> - 3.1, "all the keys may need to be checked" - really? Or do = you > >>>>>> mean all the keys associated with this kid? > >>>>>> > >>>>>> - 3.1, IV/Partial IV - I think it's an error to define this = here. > >>>>>> What if some algorithm can't use that kind of (0|partial)^IV = but > >>>>>> needs something else instead? Shouldn't all mechanism for > >>>>>> handling IVs be defined by the algorithm/mode? (This isn't a > >>>>>> discuss because I can't think of a good counter example and > >>>>>> there'd be other ways around the problem too probably.) > >>>>>> > >>>>>> - 4.1: signingTime is often needed with signatures. Isn't that > >>>>>> common enough to want to define a way to do it, as an option? > >>>>>> > >>>>>> - 4.1: If I sign with a private key corresponding to a 2047 or > >>>>>> 2049 bit RSA public key modulus, then is it clear what to put > >>>>>> where in the signature bstr? (Yes, that'd be dumb, but I wonder > >>>>>> is what to do well enough defined, as I don't think you can = rule > >>>>>> it out in all cases.) Since you don't include RSA here I guess > >>>>>> it's ok to skip this, but maybe you need to say that such = issues > >>>>>> need to be handled in the definition of signature algs. > >>>>>> > >>>>>> - 4.3: "cannot bleed" isn't clear enough maybe, give an example > >>>>>> perhaps where the decoder can fail to disambiguate a boundary? > >>>>>> > >>>>>> 4.4, last para: I disagree that one must (even lowercase > >>>>>> must) check the signing identity. That's application behaviour > >>>>>> and should be stated here in such concrete terms. > >>>>>> At least s/must also/may also want to/ > >>>>>> > >>>>>> (Note - the above were comments on -18, but also seem to work > >>>>>> based on -19. Subsequent comments are on -19.) > >>>>>> > >>>>>> - 7.1: "starting at the same base IV" - are you missing "and > >>>>>> incrementing" or something? Otherwise I think this seems = unclear. > >>>>>> > >>>>>> - 8.2.1: is the phrasing of the 1st para right? would it be > >>>>>> better to say that the value of a key for EdDSA MUST NOT be = used > >>>>>> for ECDH and vice-versa. (Or maybe points instead of > >>>>>> keys?) > >>>>>> > >>>>>> - 8.2.1: you need a reference for batch signing. (Or could it = be > >>>>>> omitted?) > >>>>>> > >>>>>> - section 9: I think it'd be good to be clearer about the > >>>>>> strength of truncated MAC values. (And I can't recall the right > >>>>>> thing to say off the top of my head:-) > >>>>>> > >>>>>> - 11: RFC2898 is about to be obsoleted by [1]. I suspect it'd = be > >>>>>> better to refer to the draft as that should be published soon. > >>>>>> (Same for RFC3447 btw.) > >>>>>> > >>>>>> [1] > >>>>>> https://datatracker.ietf.org/doc/draft-moriarty-pkcs5-v2dot1/ > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >- 12.4: Why "OKP"? And saying there's no "simple way" to do point > >validation > >>>>>> seems fairly opaque, a reference there or explanatory text = would > >>>>>> be good. (Ah, it's in section 13, maybe shuffle the text or > >>>>>> include a pointer.) Octet key pair doesn't seem like that good = a > >>>>>> name to me btw. > >>>>>> > >>>>>> - 12.5: The 1st para seems wrong. (Or at least is unclear to > >>>>>> me.) "Encrypted with and " seems ambiguous anyway, > >>>>>> does it mean double encryption or two parallel ciphertexts? > >>>>>> (I assume the former.) What's the algebraic thing you're trying > >>>>>> to explain? It'd be good to provide that for such relatively > >>>>>> complex operations I think. Is this what you mean? > >>>>>> > >>>>>> KW(KDF(DH-shared),CEK) > >>>>>> > >>>>>> - Table 22: The EC2 or OKP value is fixed per curve and the > >>>>>> cryptographic function being performed so seems unnecessary. > >>>>>> Do you really need it so? Why? (I'm not buying that some future > >>>>>> form of ECC might mean this is needed btw - and codepoints = aren't > >>>>>> expensive here, right? So other forms of ECC can burn = codepoints > >>>>>> when that's needed and in the meantime we'd save bytes and > >>>>>> complexity.) > >>>>>> > >>>>>> - Section 15: Do we have any examples of such a profile? I = think > >>>>>> it'd be great if we did and could add an informative reference > >>>>>> here (even if that's to an early I- D). > >>>>>> > >>>>>> - section 19: I don't get how ECDSA is normative and the cfrg > >>>>>> curves are not. Same for RFC6979. Maybe these all could do with > >>>>>> checking? (No big deal IMO but maybe worth it.) > >>>>>> > >>>>>> - Appendices A.1 (as already noted) and A.2 are a puzzle. Why = say > >>>>>> in the body of the document to do and then an appendix = that > >>>>>> says how to do ? > >>>>>> > >>>>>> - Appendix C and the implementation status section: Many thanks = - > >>>>>> great to see that! (I didn't check 'em though:-) > >>>>>> > >>>>>> - Thanks also for speedily handling the extensive secdir = review. > >>>>>> > >>>>>> [2] > >>>>>> = https://www.ietf.org/mail-archive/web/secdir/current/msg06801.htm > >>>>>> l > >>>>>> = >>>>>> ml> > >> > > From nobody Tue Nov 1 14:16:27 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A9F312955C; Tue, 1 Nov 2016 14:16:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.798 X-Spam-Level: X-Spam-Status: No, score=-5.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rTcjDx5zbt7h; Tue, 1 Nov 2016 14:16:17 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6074A1299E3; Tue, 1 Nov 2016 14:16:17 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 620DDBE4C; Tue, 1 Nov 2016 21:16:15 +0000 (GMT) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sbRy-2wNXLmu; Tue, 1 Nov 2016 21:16:10 +0000 (GMT) Received: from [10.87.48.210] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 51EA0BE38; Tue, 1 Nov 2016 21:16:10 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1478034970; bh=8d1HBfAkXQcuSNsklrbcLPAKcQsRq0+Bb36yM+4HL18=; h=Subject:To:References:Cc:From:Date:In-Reply-To:From; b=V/+8Xx43dgm2Z8MgluDAE+3l+zrto6ctYmAgoyY/jP+VMb4I1b575gAba0EoFw3H1 PWfiNZdY2aGENcJxO2Fx7AlUExBopvpVr5aAHq2i8pF1BjnrmUFVm2n0TfaDSbSSv4 h31YvgbuxjLC1FUt/h45TXORJKfvDlhNgXLiIMns= To: Jim Schaad , 'Justin Richer' References: <147665141739.25813.4419576200342341528.idtracker@ietfa.amsl.com> <029401d227f7$5cdb7fa0$16927ee0$@augustcellars.com> <822A08BC-5710-48E6-BCC7-AC86A554EFEC@mit.edu> <476D703F-727E-49D9-89C1-F6FD1092D55E@mit.edu> <94353594-ef7c-d909-605a-391ef2502c68@cs.tcd.ie> <066401d23474$a3659580$ea30c080$@augustcellars.com> From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: Date: Tue, 1 Nov 2016 21:16:10 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 In-Reply-To: <066401d23474$a3659580$ea30c080$@augustcellars.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms070302000904080206080508" Archived-At: Cc: cose-chairs@ietf.org, draft-ietf-cose-msg@ietf.org, 'The IESG' , cose@ietf.org Subject: Re: [COSE] Stephen Farrell's Discuss on draft-ietf-cose-msg-20: (with DISCUSS and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Nov 2016 21:16:20 -0000 This is a cryptographically signed message in MIME format. --------------ms070302000904080206080508 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hiya, On 01/11/16 19:17, Jim Schaad wrote: > Another thread dealing with this issue includes > https://www.ietf.org/mail-archive/web/cose/current/msg00981.html - > basically the subject is 'make "alg" field optional' >=20 > Usual suspects (G=C3=B6ran, Ludwig, Francesca) on one side, me and a > couple of others on the other side. Interestingly the antis included > Mike who argued for this in the JOSE. Heh. To be honest, I'm not sure what's best here. Normally if it were just my design tastes against the WGs, I'd happily fold. But in this case we have an appendix that says how to not do what's a MUST in the body of the spec. And I suspect that this could damage interop depending on whether or not libraries follow the MUST or not. Do we think there's a way to square this circle and somehow get rid of the appendix to get to a result folks can all use? Cheers, S. >=20 > Jim >=20 >=20 >=20 >=20 >> -----Original Message----- From: G=C3=B6ran Selander >> [mailto:goran.selander@ericsson.com] Sent: Wednesday, October 26, >> 2016 9:37 PM To: Stephen Farrell ; >> Justin Richer Cc: Jim Schaad >> ; cose-chairs@ietf.org; The IESG=20 >> ; draft-ietf-cose-msg@ietf.org; cose@ietf.org=20 >> Subject: Re: Stephen Farrell's Discuss on draft-ietf-cose-msg-20: >> (with DISCUSS and COMMENT) >>=20 >> Stephen, Justin, >>=20 >> About item (2) - mandatory alg header - this was discussed on >> different occasions. Several voices were heard in support of a >> setting where a kid identifies key and algorithm. One thread starts >> here: >>=20 >> https://www.ietf.org/mail-archive/web/cose/current/msg00544.html >>=20 >> Appendix A was the proposed solution to resolve the conflict of >> mandatory alg header, but the case with only kid is discouraged, >> both in appendix A and in the section on COSE_Encrypt0=20 >> https://tools.ietf.org/html/draft-ietf-cose-msg-23#section-5.2 >>=20 >> draft-ietf-core-object-security, which is the first and currently >> only adopted application of COSE, uses the COSE_Encrypt0 structure, >> does not have the alg header and has a kid header (=E2=80=9Ccontext >> identifier=E2=80=9D, recommended to be 64 bit pseudo-random). >>=20 >>=20 >> Since you ask: Of course we would prefer to apply an endorsed >> version of COSE instead of making an exception from an exception. >> Appendix A in a sense opens a door. When what is mandatory in the >> body isn=E2=80=99t really mandatory, it is a smaller step to deviate f= rom >> the recommendations. >>=20 >> I think the contentious point was the potential non-uniqueness of >> kid. If I may wish: If we maintain mandatory alg header, then maybe >> some text about when kid header only could be acceptable, for >> example sufficiently large random kids, if we agree on that? >>=20 >> G=C3=B6ran >>=20 >>=20 >> On 2016-10-26 17:12, "Stephen Farrell" >> wrote: >>=20 >>>=20 >>> Hiya, >>>=20 >>> On 26/10/16 16:06, Justin Richer wrote: >>>> Hi Stephen, >>>>=20 >>>> Sorry for the delay on answering #2 and #6 below. After >>>> researching the list archives and issue tracker, neither Kepeng >>>> nor I can find discussion on either issue. If there is such >>>> discussion in the archives, we would appreciate the working >>>> group members pointing us all to it. >>>>=20 >>>> But as such, these both seem to be items that were added to the >>>> spec by the editor without controversy or contention from the >>>> working group. Therefore, it does appear to reflect consensus >>>> as there were no objections raised. We both think that the >>>> items are OK as is, but we=E2=80=99d like to give the working group = a >>>> couple days to respond otherwise if that=E2=80=99s not the case for >>>> anyone. >>>=20 >>> Thanks for checking. If the WG don't say they'd like a change >>> within a couple of days, I'll clear the discuss. (Please do ping >>> me though, I may forget;-) >>>=20 >>> Cheers, S. >>>=20 >>>=20 >>>>=20 >>>> Thank you, >>>>=20 >>>> =E2=80=94 Justin & Kepeng, as COSE chairs >>>>=20 >>>>=20 >>>>> On Oct 19, 2016, at 8:59 AM, Justin Richer =20 >>>>> wrote: >>>>>=20 >>>>> Hi Stephen, >>>>>=20 >>>>> The consensus of the working group after Yokohama was to make >>>>> the CDDL non-normative and still use it as a >>>>> description/example format. >>>>>=20 >>>>> https://www.ietf.org/mail-archive/web/cose/current/msg00802.html >>>>> >>>>>=20 >>>>>=20 >>>>> I believe the current draft reflects that state. Yes, CDDL >>>>> syntax is peppered throughout the document as illustration, >>>>> but it=E2=80=99s the English text that=E2=80=99s normative. >>>>>=20 >>>>> One point that was discussed was that if the draft did not >>>>> use CDDL, then another description language would likely need >>>>> to be made up to make human-readable examples in the text. >>>>> The group felt that it was better to use an existing (even >>>>> if unfinished/unofficial) description format but remove the >>>>> normative dependency. >>>>>=20 >>>>> =E2=80=94 Justin, as chair. >>>>>=20 >>>>>> On Oct 16, 2016, at 3:41 PM, Stephen Farrell=20 >>>>>> >>>>> > wrote: >>>>>>=20 >>>>>>=20 >>>>>> Hiya, >>>>>>=20 >>>>>> Dear cose-chairs - there is stuff in this discuss for you >>>>>> to deal with. (Just putting that there in case you're not >>>>>> delving down into the body of the mails:-) >>>>>>=20 >>>>>> On 16/10/16 22:50, Jim Schaad wrote: >>>>>>> I think we dealt with all of the comments. I cannot help >>>>>>> you with getting chair response. >>>>>>>=20 >>>>>>> See below for my one issue. >>>>>>>=20 >>>>>>> Jim >>>>>>>=20 >>>>>>>=20 >>>>>>>> -----Original Message----- From: Stephen Farrell=20 >>>>>>>> [mailto:stephen.farrell@cs.tcd.ie=20 >>>>>>>> ] Sent: Sunday, >>>>>>>> October 16, 2016 1:57 PM To: The IESG >>>>>>> > Cc: >>>>>>>> draft-ietf-cose-msg@ietf.org=20 >>>>>>>> ; Goeran Selander=20 >>>>>>>> >>>>>>> >; >>>>>>>> cose-chairs@ietf.org ; >>>>>>>> goran.selander@ericsson.com=20 >>>>>>>> ; cose@ietf.org=20 >>>>>>>> Subject: Stephen Farrell's >>>>>>>> Discuss on draft-ietf-cose-msg-20: (with DISCUSS and >>>>>>>> COMMENT) >>>>>>>>=20 >>>>>>>> Stephen Farrell has entered the following ballot >>>>>>>> position for draft-ietf-cose-msg-20: Discuss >>>>>>>>=20 >>>>>>>> When responding, please keep the subject line intact >>>>>>>> and reply to all email addresses included in the To and >>>>>>>> CC lines. (Feel free to cut this introductory >>>>>>>> paragraph, however.) >>>>>>>>=20 >>>>>>>>=20 >>>>>>>> Please refer to=20 >>>>>>>> https://www.ietf.org/iesg/statement/discuss-criteria.html >>>>>>>> >>>>>>>>=20 >>>>>>>> for more information about IESG DISCUSS and COMMENT >>>>>>>> positions. >>>>>>>>=20 >>>>>>>>=20 >>>>>>>> The document, along with other ballot positions, can be >>>>>>>> found here: >>>>>>>> https://datatracker.ietf.org/doc/draft-ietf-cose-msg/=20 >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>=20 ------------------------------------------------------------------ >>>>>>>> --- - >>>>>>>>=20 >>>>>>>>=20 >>> DISCUSS: >>>>>>>>=20 >>>>>>>> ----------------------------------------------------------------= -- >>>>>>>> >>>>>>>>=20 --- >>>>>>>> - >>>>>>>>=20 >>>>>>>>=20 >>>>>>>>=20 >>>>>>>>=20 >>> Thanks for the updates in -20. I think we've only the following >>> points left. Note >>>>>>>> that 2 of those are questions to the WG chairs and not >>>>>>>> to Jim. >>>>>>>>=20 >>>>>>>> (1.1) table 2: As-is the value type column seems to me >>>>>>>> to make CDDL normative. I don't see the natural >>>>>>>> language version that you said would be normative. >>>>>>>>=20 >>>>>>>> Can you help me see that the changes there are such >>>>>>>> that CDDL is ok as informative? I'm not sure but as I >>>>>>>> read it there is still no natural language statement >>>>>>>> that a "counter signature" is one (or more) >>>>>>>> COSE_Signature values. >>>>>>>=20 >>>>>>> In section 1.3 the following text was added: >>>>>>>=20 >>>>>>> Two syntaxes from CDDL appear in this document as >>>>>>> shorthand. These are: >>>>>>>=20 >>>>>>> FOO / BAR - indicates that either FOO or BAR can appear >>>>>>> here [+ FOO] - indicates that the type FOO appears one or >>>>>>> more times in an array >>>>>>>=20 >>>>>>> The value from the table is: >>>>>>>=20 >>>>>>> COSE_Signature / [+ COSE_Signature ] >>>>>>>=20 >>>>>>> Section 4.1 contains the text: >>>>>>>=20 >>>>>>> The CBOR object that carries the signature and >>>>>>> information about the signature is called the >>>>>>> COSE_Signature structure. >>>>>>>=20 >>>>>>>> From that I think that all of the needed normative text >>>>>>>> is present. >>>>>>=20 >>>>>> Yeah, I get that. But then I think you've embedded some >>>>>> CDDL notation at least as normative. (I mean the constructs >>>>>> you describe with FOO/BAR above.) >>>>>>=20 >>>>>> While I do start to feel pedantry-panic that I'm saying it, >>>>>> if really treating CDDL as informative, I think you ought >>>>>> say in text that one or more COSE_Signature fields need to >>>>>> be in a counter signature. >>>>>>=20 >>>>>> But I'm gonna clear that anyway as the whole CDDL is not >>>>>> normative thing is really pretence IMO and there's no point >>>>>> in me joining in with that further. >>>>>>=20 >>>>>> That means that clearing this discuss is now solely down to >>>>>> the chairs saying they're happy that Jim's positions do >>>>>> reflect wG consensus. >>>>>>=20 >>>>>> Cheers, S. >>>>>>=20 >>>>>>=20 >>>>>>=20 >>>>>>=20 >>>>>>>=20 >>>>>>>>=20 >>>>>>>> (2) 3.1, alg: so you're disallowing a setup where the >>>>>>>> kid alone identifies the key and algorithm to the >>>>>>>> recipient? That is used in some IETF protocols (OSPF >>>>>>>> iirc) so rhat's a pity, and will in those (maybe less >>>>>>>> common) cases consume a few bytes that could otherwise >>>>>>>> be saved. I think, but am not sure, that the WG=20 >>>>>>>> already discussed this, but if not, maybe worth a >>>>>>>> thought? (Or even a 2nd thought:-) And appendix A.1 is >>>>>>>> really puzzling - as it provides instructions for how >>>>>>>> to not follow a MUST in the body of the document. >>>>>>>>=20 >>>>>>>> I think we left the mail thread on this with you saying >>>>>>>> "Best to ask the chairs if they agree that this is WG >>>>>>>> consensus," as you're an admitteddly strong partisan on >>>>>>>> this topic. >>>>>>>>=20 >>>>>>>> So, COSE chairs - what's your take? (If you say this is >>>>>>>> ok with the WG, I'll clear.) >>>>>>>>=20 >>>>>>>> (6) section 10: why MUST the kty values be present >>>>>>>> always? That seems unnecessary in some contexts and I >>>>>>>> don't get a security reason why it's needed e.g. if >>>>>>>> there's an alg id somewhere - can you explain? I can >>>>>>>> see folks omitting this leading to interop problems for >>>>>>>> not useful reasons. (Same comment applies in other >>>>>>>> cases where kty is a MUST, e.g. 12.1.2, 12.2.1.) >>>>>>>>=20 >>>>>>>> I think this is the similar to discuss point (2) >>>>>>>> above. >>>>>>>>=20 >>>>>>>> So again, COSE chairs, can you confirm that this design >>>>>>>> does reflect WG consensus and isn't just a thorough and >>>>>>>> good editor getting his way? (If you say this is ok >>>>>>>> with the WG, I'll clear.) >>>>>>>>=20 >>>>>>>>=20 >>>>>>>>=20 >>>>>>>> ----------------------------------------------------------------= -- >>>>>>>> >>>>>>>>=20 --- >>>>>>>> - >>>>>>>>=20 >>>>>>>>=20 >>> COMMENT: >>>>>>>>=20 >>>>>>>> ----------------------------------------------------------------= -- >>>>>>>> >>>>>>>>=20 --- >>>>>>>> - >>>>>>>>=20 >>>>>>>>=20 >>>>>>>>=20 >>>>>>>>=20 >>> OLD COMMENTS BELOW, I DIDN'T CHECK THEM. Happy to chat more >>> about >> 'em >>>>>>>> if that's useful. >>>>>>>>=20 >>>>>>>> - 1.4: the 2nd last paragraph is unclear to me. >>>>>>>> Probably just needs re-phrasing. >>>>>>>>=20 >>>>>>>> - 1.5: I'd add a reference to RFC5116. >>>>>>>>=20 >>>>>>>> - 3.1, crit: The statement that security libraries or >>>>>>>> application code can handle this is odd - isn't that an >>>>>>>> API requirement? (I'm not objecting, but it's odd.) >>>>>>>>=20 >>>>>>>> - 3.1, "content type" is the space there intended? If >>>>>>>> so, maybe add quotes or a comma or something to >>>>>>>> disambiguate the name and descriptive text? Same for >>>>>>>> other multi-word names here. >>>>>>>>=20 >>>>>>>> - 3.1, "all the keys may need to be checked" - really? >>>>>>>> Or do you mean all the keys associated with this kid? >>>>>>>>=20 >>>>>>>> - 3.1, IV/Partial IV - I think it's an error to define >>>>>>>> this here. What if some algorithm can't use that kind >>>>>>>> of (0|partial)^IV but needs something else instead? >>>>>>>> Shouldn't all mechanism for handling IVs be defined by >>>>>>>> the algorithm/mode? (This isn't a discuss because I >>>>>>>> can't think of a good counter example and there'd be >>>>>>>> other ways around the problem too probably.) >>>>>>>>=20 >>>>>>>> - 4.1: signingTime is often needed with signatures. >>>>>>>> Isn't that common enough to want to define a way to do >>>>>>>> it, as an option? >>>>>>>>=20 >>>>>>>> - 4.1: If I sign with a private key corresponding to a >>>>>>>> 2047 or 2049 bit RSA public key modulus, then is it >>>>>>>> clear what to put where in the signature bstr? (Yes, >>>>>>>> that'd be dumb, but I wonder is what to do well enough >>>>>>>> defined, as I don't think you can rule it out in all >>>>>>>> cases.) Since you don't include RSA here I guess it's >>>>>>>> ok to skip this, but maybe you need to say that such >>>>>>>> issues need to be handled in the definition of >>>>>>>> signature algs. >>>>>>>>=20 >>>>>>>> - 4.3: "cannot bleed" isn't clear enough maybe, give an >>>>>>>> example perhaps where the decoder can fail to >>>>>>>> disambiguate a boundary? >>>>>>>>=20 >>>>>>>> 4.4, last para: I disagree that one must (even >>>>>>>> lowercase must) check the signing identity. That's >>>>>>>> application behaviour and should be stated here in such >>>>>>>> concrete terms. At least s/must also/may also want to/ >>>>>>>>=20 >>>>>>>> (Note - the above were comments on -18, but also seem >>>>>>>> to work based on -19. Subsequent comments are on -19.) >>>>>>>>=20 >>>>>>>> - 7.1: "starting at the same base IV" - are you missing >>>>>>>> "and incrementing" or something? Otherwise I think this >>>>>>>> seems unclear. >>>>>>>>=20 >>>>>>>> - 8.2.1: is the phrasing of the 1st para right? would >>>>>>>> it be better to say that the value of a key for EdDSA >>>>>>>> MUST NOT be used for ECDH and vice-versa. (Or maybe >>>>>>>> points instead of keys?) >>>>>>>>=20 >>>>>>>> - 8.2.1: you need a reference for batch signing. (Or >>>>>>>> could it be omitted?) >>>>>>>>=20 >>>>>>>> - section 9: I think it'd be good to be clearer about >>>>>>>> the strength of truncated MAC values. (And I can't >>>>>>>> recall the right thing to say off the top of my >>>>>>>> head:-) >>>>>>>>=20 >>>>>>>> - 11: RFC2898 is about to be obsoleted by [1]. I >>>>>>>> suspect it'd be better to refer to the draft as that >>>>>>>> should be published soon. (Same for RFC3447 btw.) >>>>>>>>=20 >>>>>>>> [1]=20 >>>>>>>> https://datatracker.ietf.org/doc/draft-moriarty-pkcs5-v2dot1/ >>>>>>>> >>>>>>>>=20 >>>>>>>>=20 >>>>>>>>=20 >>>>>>>>=20 >>> - 12.4: Why "OKP"? And saying there's no "simple way" to do >>> point validation >>>>>>>> seems fairly opaque, a reference there or explanatory >>>>>>>> text would be good. (Ah, it's in section 13, maybe >>>>>>>> shuffle the text or include a pointer.) Octet key pair >>>>>>>> doesn't seem like that good a name to me btw. >>>>>>>>=20 >>>>>>>> - 12.5: The 1st para seems wrong. (Or at least is >>>>>>>> unclear to me.) "Encrypted with and " seems >>>>>>>> ambiguous anyway, does it mean double encryption or two >>>>>>>> parallel ciphertexts? (I assume the former.) What's the >>>>>>>> algebraic thing you're trying to explain? It'd be good >>>>>>>> to provide that for such relatively complex operations >>>>>>>> I think. Is this what you mean? >>>>>>>>=20 >>>>>>>> KW(KDF(DH-shared),CEK) >>>>>>>>=20 >>>>>>>> - Table 22: The EC2 or OKP value is fixed per curve and >>>>>>>> the cryptographic function being performed so seems >>>>>>>> unnecessary. Do you really need it so? Why? (I'm not >>>>>>>> buying that some future form of ECC might mean this is >>>>>>>> needed btw - and codepoints aren't expensive here, >>>>>>>> right? So other forms of ECC can burn codepoints when >>>>>>>> that's needed and in the meantime we'd save bytes and=20 >>>>>>>> complexity.) >>>>>>>>=20 >>>>>>>> - Section 15: Do we have any examples of such a >>>>>>>> profile? I think it'd be great if we did and could add >>>>>>>> an informative reference here (even if that's to an >>>>>>>> early I- D). >>>>>>>>=20 >>>>>>>> - section 19: I don't get how ECDSA is normative and >>>>>>>> the cfrg curves are not. Same for RFC6979. Maybe these >>>>>>>> all could do with checking? (No big deal IMO but maybe >>>>>>>> worth it.) >>>>>>>>=20 >>>>>>>> - Appendices A.1 (as already noted) and A.2 are a >>>>>>>> puzzle. Why say in the body of the document to do >>>>>>>> and then an appendix that says how to do ? >>>>>>>>=20 >>>>>>>> - Appendix C and the implementation status section: >>>>>>>> Many thanks - great to see that! (I didn't check 'em >>>>>>>> though:-) >>>>>>>>=20 >>>>>>>> - Thanks also for speedily handling the extensive >>>>>>>> secdir review. >>>>>>>>=20 >>>>>>>> [2]=20 >>>>>>>> https://www.ietf.org/mail-archive/web/secdir/current/msg06801.ht= m >>>>>>>> >>>>>>>>=20 l >>>>>>>> >>>>>>> >>>>>>>>=20 ml> >>>>=20 >>>=20 >=20 >=20 --------------ms070302000904080206080508 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CvIwggUIMIID8KADAgECAhBPzaE7pzYviUJyhmHTFBdnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMjA5MDkyODE1WhcNMTcwMjA5MDkyODE1WjBOMSIwIAYDVQQDDBlzdGVw aGVuLmZhcnJlbGxAY3MudGNkLmllMSgwJgYJKoZIhvcNAQkBFhlzdGVwaGVuLmZhcnJlbGxA Y3MudGNkLmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuC0rYze/2JinSra C9F2RjGdQZjNALLcW9C3WKTwYII3wBslobmHuPEYE5JaGItmzuKnAW619R1rD/kfoNWC19N3 rBZ6UX9Cmb9D9exCwYIwVuSwjrCQWGxgCtNQTrwKzCCpI790GRiMTvxvO7UmzmBrCaBLiZW5 R0fBjK5Yn6hUhAzGBkNbkIEL28cLJqH0yVz7Kl92OlzrQqTPEts5m6cDnNdY/ADfeAX18c1r dxZqcAxhLotrCqgsVA4ilbQDMMXGTLlB5TP35HeWZuGBU7xu003rLcFLdOkD8xvpJoYZy9Kt 3oABXPS5yqtMK+XCNdqmMn+4mOtLwQSMmPCSiQIDAQABo4IBuTCCAbUwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQJ QhvwQ5Fl372Z6xqo6fdn8XejTTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEu Y3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGll bnQxLmNybDAkBgNVHREEHTAbgRlzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNVHSAEPzA9MDsGCysGAQQBgbU3AQIE MCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG 9w0BAQsFAAOCAQEArzrSv2C8PlBBmGuiGrzm2Wma46/KHtXmZYS0bsd43pM66Pc/MsqPE0HD C1GzMFfwB6BfkJn8ijNSIhlgj898WzjvnpM/SO8KStjlB8719ig/xKISrOl5mX55XbFlQtX9 U6MrqRgbDIATxhD9IDr+ryvovDzChqgQj7mt2jYr4mdlRjsjod3H1VY6XglRmaaNGZfsCARM aE/TU5SXIiqauwt5KxNGYAY67QkOBs7O1FkSXpTk7+1MmzJMF4nP8QQ5n8vhVNseF+/Wm7ai 9mtnrkLbaznMsy/ULo/C2yuLUWTbZZbf4EKNmVdme6tUDgYkFjAFOblfA7W1fSPiQGagYzCC BeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFs IENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIxNjAxMDAwNVowdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL192vfDon2D9luC/dtbX64eG3XAtRmv mCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk9dEDBlmixEd8QiLkUfvHpJX/xKnm VkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89VLnUztRr2cgmCfyO9Otrh7LJDPG+4 D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PI dopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuu N0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIBADAyBgNVHR8EKzAp MCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEE WjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wMAYIKwYBBQUHMAKG JGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+ SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0g BDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Bv bGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4StDwECW5zhIycjBL008HACblIf26HY 0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y5uzSns1lZwh7sG96bYBZpcGzGxpF NjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bjyOngCIVeC/GmsmtbuLOzJ606tEc9 uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfCBJb+e29bLafgu6JqjOUJ9eXXj20p 6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOv Z3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOu mZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfrBzez76xtDsK0KfUDHt1/q59BvDI7 RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO /ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsN JQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2deoprGevfnxWB+vHNQiu85o6MxggPM MIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcG A1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0 Q29tIENsYXNzIDEgQ2xpZW50IENBAhBPzaE7pzYviUJyhmHTFBdnMA0GCWCGSAFlAwQCAQUA oIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjExMDEy MTE2MTBaMC8GCSqGSIb3DQEJBDEiBCDYHXjk01e+TOwh+V5mILDZH2TLh2F+5iVKvdUu92xp RjBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMw IQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzCB nAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29t IEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYD VQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzANBgkq hkiG9w0BAQEFAASCAQBAfpY1Yb6hSVUAgyWhQerzqKrIY66Kn0wQmUSnco+oHcVEAyP5Z35F JXCNlWdGVf/4pAMAy8/ruf6LOlavFYPGkZNM6FSPiKrOHax11REhH6klm88oQm/72tmsLy0o 11c4hXZHeoals0DKEQDv2omFVuFhrvvy6vJzWZFTHqDzMhzyCx7/k54X/+kK9FvaPuiCG9cp 1QGbr91YURHsWS0jWiEkF8R7IW2siC+5ZP6O7Alcv8ZDOEb5qTgPZnj2PV6tNfM3IMRGg8K7 uaJiDxdrbZSdXZR7IuT+VbzvIKaM7faO8LeBXLkFko7xR5mthsG5sGDzL4k4Hra5krHitucb AAAAAAAA --------------ms070302000904080206080508-- From nobody Tue Nov 1 14:51:10 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 692C11298C1; Tue, 1 Nov 2016 14:51:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f6A-SpvkQrDg; Tue, 1 Nov 2016 14:51:03 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2397D129532; Tue, 1 Nov 2016 14:51:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA1LnuEI010748; Tue, 1 Nov 2016 22:49:56 +0100 (CET) Received: from nar-4.local.mail (p5DC7E34C.dip0.t-ipconnect.de [93.199.227.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3t7lJN2NqYz7y0x; Tue, 1 Nov 2016 22:49:56 +0100 (CET) Date: Tue, 1 Nov 2016 22:48:30 +0100 From: Carsten Bormann To: Stephen Farrell , Jim Schaad , "'Justin Richer'" Message-ID: In-Reply-To: References: <147665141739.25813.4419576200342341528.idtracker@ietfa.amsl.com> <029401d227f7$5cdb7fa0$16927ee0$@augustcellars.com> <822A08BC-5710-48E6-BCC7-AC86A554EFEC@mit.edu> <476D703F-727E-49D9-89C1-F6FD1092D55E@mit.edu> <94353594-ef7c-d909-605a-391ef2502c68@cs.tcd.ie> <066401d23474$a3659580$ea30c080$@augustcellars.com> X-Mailer: Airmail (390) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="58190e03_389c4ee3_25f" Archived-At: Cc: cose-chairs@ietf.org, draft-ietf-cose-msg@ietf.org, 'The IESG' , cose@ietf.org Subject: Re: [COSE] Stephen Farrell's Discuss on draft-ietf-cose-msg-20: (with DISCUSS and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Nov 2016 21:51:04 -0000 --58190e03_389c4ee3_25f Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On 1 November 2016 at 22:16:33, Stephen =46arrell (stephen.farrell=40cs.t= cd.ie) wrote: Do we think there's a way to square this circle and somehow=C2=A0 get rid of the appendix to get to a result folks can all use=3F=C2=A0 The problem is that we need the capability outlined in the appendix. (Or, in other words, the problem is the MUST in the main body. This should be a =E2=80=9CMUST unless the specific conditions defined in = Appendix A apply=E2=80=9D.) Gr=C3=BC=C3=9Fe, Carsten --58190e03_389c4ee3_25f Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline

During the = development of the COSE document, the creation of attributes to carry = X.509 items was discussed.=C2=A0 Given the set of use cases that we had = on our radar at the time it was decided that we did not need this at the = time.=C2=A0 These were all cases where we were looking at constrained = devices where the addition of the certificate to many messages was going = to be a problem.=C2=A0 In this environment, if you were using X.509 then = you would pre-distribute the certificates rather than carrying them in a = message.

 

If we can = identify a number of cases where we would be using X.509 certificates = then I would be willing to create a document which would define the = fields and how to use them.=C2=A0 It would appear that we might have one = case, do people know of more?

 

I = don=E2=80=99t think we have a strong case for doing a new certificate = format at this time, however if people think there is enough of a need = then the next step would be for them to organize a BOF to see if they = can attract enough attention.

 

Jim

 

 

From:<= /b> = Samuel Erdtman [mailto:samuel@erdtman.se]
Sent: Friday, = November 04, 2016 10:49 AM
To: Derek Atkins = <derek@ihtfp.com>
Cc: Lundblade, Laurence = <llundbla@qti.qualcomm.com>; Jim Schaad = <ietf@augustcellars.com>; cose@ietf.org
Subject: Re: = [COSE] Carrying certificate chains in COSE signed = messages

 

It might absolutely = feel strange to have certificate chains in COSE since that would become = the larger part of the message.

However I think Laurence has a point in the fact that = It is more convenient to use CBOR then ASN1 even if you formally have = the bandwidth and capacity to process ASN1.


Then there is the = connection to existing trust infrastructure many organizations have well = functioning PKIs setups and wants to use them.
Are you saying that we = should only use COSE when building completely new systems with no = interaction with existing infrastructure?
I think it would be good = for adoption if we could support this use-case.
I could also imagine = CAs adopting new certificate formats based on CBOR and COSE in the = future and if that happens a transition would be much easier if they had = the option to start using COSE today.

If this is a big no-no I guess JOSE would be the = option.

 

//Samuel

<= p class=3DMsoNormal = style=3D'margin-bottom:12.0pt'>

 

On = Fri, Nov 4, 2016 at 5:36 PM, Derek Atkins <derek@ihtfp.com> = wrote:

Hi,

"Lundblade, = Laurence" <llundbla@qti.qualcomm.com&g= t; writes:

> 1) A CBOR/COSE = implementation is much cleaner and nicer than a
> ASN.1/CMS implementation. It is less work to = implement, easier to
> maintain, test = and so on.

Yes...  This is part of my = point.

>      Also = it=E2=80=99s not just about the data size.
> Would guess that the code size difference between = implementations of
> CBOR/COSE and = ASN.1/CMS is larger than a cert.  Also you can add = the
> X.509 cert to the protocol = messages outside the constrained
> = environment.

Sure, it's not just about data size, it's = also about code size.  But if
you're using COSE then presumably = size matters.

> Personally, I was hoping = CBOR/COSE would replace ASN.1/CMS in the very
> long term. :-)

Why wait?

> 2) Same question as before. If not cert chains, then = what?  Pretty
> sure the 3-party = trust introduction with a well-known root cert is a
> fundamental model that COSE should = support.

There is nothing wrong with cert chains per-se, = but I would argue X.509
is the wrong solution for COSE.

> = LL

-derek


>
>
> On Nov 4, 2016, = at 7:23 AM, Derek Atkins <derek@ihtfp.com> = wrote:
>
>> If your environment is so constrained that = you want to use COSE, why
>> would you decide on X.509 as your = certificate format??  Your cert chain
>> would likely be = larger than your data payload!!
>>
>> = -derek
>>
>> "Lundblade, Laurence" <llundbla@qti.qualcomm.com&g= t; writes:
>>
>>> Yes, have a use case where I = *think* I need to carry cert chains with
>>> a signed = message.  I want to sign something in one place and I = want
>>> someone far away to be able to verify it based on a = trusted a root
>>> key.  Compatibility with extant and = various cert management SW and
>>> services is also = desirable.
>>>
>>> If not cert chains, then = what?
>>>
>>> = LL
>>>
>>>
>>> = ________________________________________
>>> From: Jim = Schaad <ietf@augustcellars.com>
= >>> Sent: Thursday, November 3, 2016 1:15 PM
>>> = To: Lundblade, Laurence; cose@ietf.org
>>> Subject: = RE: [COSE] Carrying certificate chains in COSE signed = messages
>>>
>>> Do you have a use case where = you are planning to use COSE and need to carry
>>> cert = chains or is this just speculative?
>>>
>>> = Jim
>>>
>>>
>>>> -----Original = Message-----
>>>> From: COSE [mailto:cose-bounces@ietf.org] On = Behalf Of Lundblade, Laurence
>>>> Sent: Thursday, = November 03, 2016 12:40 PM
>>>> To: cose@ietf.org
>>>> = Subject: [COSE] Carrying certificate chains in COSE signed = messages
>>>>
>>>> For many use cases it = is a requirement that a signed message carry leaf
>>> = and
>>>> intermediate (X.509) certs that would be used to = verify against a trusted
>>> = root.
>>>>
>>>> It seems like the way to = do this is with a COSE_Key, but there aren't any
>>>> = examples or details.  Is this = right?
>>>>
>>>> = Thx
>>>>
>>>> = LL
>>>>

--
       Derek Atkins  =                617-623-3745
      =  derek@ihtfp.com  =            www.ihtfp.com
      =  Computer and Internet Security = Consultant

_______________________________________________
COSE= mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

 

------=_NextPart_000_0B33_01D23691.6BAFD910-- From nobody Mon Nov 7 08:37:42 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EBB461299FD for ; Mon, 7 Nov 2016 08:37:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kB8fsPUc-rGW for ; Mon, 7 Nov 2016 08:37:37 -0800 (PST) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 683571299E1 for ; Mon, 7 Nov 2016 08:37:37 -0800 (PST) Received: by mail-wm0-x22f.google.com with SMTP id t79so188292071wmt.0 for ; Mon, 07 Nov 2016 08:37:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=YwmsEvjzsO0s4tT6QC4RfscL2siSoquGyMavrVhuphM=; b=NcxjX0P5jyGMEdefAn0HlHL0ZEwknCo4MKLbHliTUGcWoQauMUabKx/RXxrEnP8rh5 O3IyrvAuTYRkBRtwv71r6rgTdntJ+MGkMEahs+PIj83QbWo6NV/1EyZpVlFfdu2JQWWi aJK3p8m3d27cqcNTAa4A2G2vKeNANYVjgkvoiSvPv9hpVxYZiVL7L0C6AcDhYlN9GaZq OJ2RqtXMPFmOKkYxGNR0zGcHWLws97iCPiFHR6GklpUFrkdXgm3RW0l5gRQ9ZQYRQDlB 8bMNOz0HejzQvHubcLRWGH5Yuk/LSijPGkFRM5MsR3dWDU/C7OJH2bfVG5xSTi8CctSk pS4g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=YwmsEvjzsO0s4tT6QC4RfscL2siSoquGyMavrVhuphM=; b=O/Nlj8mM8mAG7/j+0b/0bWzy7O4rHtwtBxh2iXFVNPiZpGnTd+BrPheSyUWhzgFKi9 FnEj1RjRBoPagJUTErjotqG9HQjlXFPhC5Pf7EW/SLQU2KO76q5oSsL4NwmRGGbg7H8f MpJErFhcD+pEsie5OE0cHmtp66IUac/Z8hfXHYQH1SBi9m6wHzd9NAgu1FHTsHAyOA0T xOlMfqC98EEVNe7nggQ0IFQ6VZs9v/H65geaQXgMKKbLgGbWEVYjpbaEPKX5SIWZfNpO tSAkq99ctsXaxhR0sYcLEk/9LiP/4gTeLcFoVC4TTp2LP99eJHRk/Au7aPwej0LeyQ8d GXDw== X-Gm-Message-State: ABUngvcnpei8NxxBdWvRH1j+vVXweShtkLJpqj5Ze3QAsLXcfpuJZjes5AZli/PqOC9V2k9tf3Mbisfp/U2XbQ== X-Received: by 10.28.169.4 with SMTP id s4mr8315548wme.65.1478536655463; Mon, 07 Nov 2016 08:37:35 -0800 (PST) MIME-Version: 1.0 Received: by 10.194.172.232 with HTTP; Mon, 7 Nov 2016 08:37:34 -0800 (PST) In-Reply-To: <0b3201d236cc$180959e0$481c0da0$@augustcellars.com> References: <82DC355C-868C-4B6D-91E7-D10CF8046C93@qti.qualcomm.com> <09e901d2360f$08791cd0$196b5670$@augustcellars.com> <1478218124368.37864@qti.qualcomm.com> <0b3201d236cc$180959e0$481c0da0$@augustcellars.com> From: Samuel Erdtman Date: Mon, 7 Nov 2016 17:37:34 +0100 Message-ID: To: Jim Schaad Content-Type: multipart/alternative; boundary=001a114b918223024c0540b8a4d8 Archived-At: Cc: "Lundblade, Laurence" , cose Subject: Re: [COSE] Carrying certificate chains in COSE signed messages X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Nov 2016 16:37:41 -0000 --001a114b918223024c0540b8a4d8 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Maybe the most reasonable solution would be to write a complementary/extension doc for the COSE specification. Similar to what is done with RSA so that this work can finish. Jim, is that possible? Laurence, do you think that would be an okay way forward? //Samuel On Fri, Nov 4, 2016 at 7:48 PM, Jim Schaad wrote: > During the development of the COSE document, the creation of attributes t= o > carry X.509 items was discussed. Given the set of use cases that we had = on > our radar at the time it was decided that we did not need this at the > time. These were all cases where we were looking at constrained devices > where the addition of the certificate to many messages was going to be a > problem. In this environment, if you were using X.509 then you would > pre-distribute the certificates rather than carrying them in a message. > > > > If we can identify a number of cases where we would be using X.509 > certificates then I would be willing to create a document which would > define the fields and how to use them. It would appear that we might hav= e > one case, do people know of more? > > > > I don=E2=80=99t think we have a strong case for doing a new certificate f= ormat at > this time, however if people think there is enough of a need then the nex= t > step would be for them to organize a BOF to see if they can attract enoug= h > attention. > > > > Jim > > > > > > *From:* Samuel Erdtman [mailto:samuel@erdtman.se] > *Sent:* Friday, November 04, 2016 10:49 AM > *To:* Derek Atkins > *Cc:* Lundblade, Laurence ; Jim Schaad < > ietf@augustcellars.com>; cose@ietf.org > *Subject:* Re: [COSE] Carrying certificate chains in COSE signed messages > > > > It might absolutely feel strange to have certificate chains in COSE since > that would become the larger part of the message. > > However I think Laurence has a point in the fact that It is more > convenient to use CBOR then ASN1 even if you formally have the bandwidth > and capacity to process ASN1. > > > Then there is the connection to existing trust infrastructure many > organizations have well functioning PKIs setups and wants to use them. > Are you saying that we should only use COSE when building completely new > systems with no interaction with existing infrastructure? > I think it would be good for adoption if we could support this use-case. > I could also imagine CAs adopting new certificate formats based on CBOR > and COSE in the future and if that happens a transition would be much > easier if they had the option to start using COSE today. > > If this is a big no-no I guess JOSE would be the option. > > > > //Samuel > > > > > > On Fri, Nov 4, 2016 at 5:36 PM, Derek Atkins wrote: > > Hi, > > "Lundblade, Laurence" writes: > > > 1) A CBOR/COSE implementation is much cleaner and nicer than a > > ASN.1/CMS implementation. It is less work to implement, easier to > > maintain, test and so on. > > Yes... This is part of my point. > > > Also it=E2=80=99s not just about the data size. > > Would guess that the code size difference between implementations of > > CBOR/COSE and ASN.1/CMS is larger than a cert. Also you can add the > > X.509 cert to the protocol messages outside the constrained > > environment. > > Sure, it's not just about data size, it's also about code size. But if > you're using COSE then presumably size matters. > > > Personally, I was hoping CBOR/COSE would replace ASN.1/CMS in the very > > long term. :-) > > Why wait? > > > 2) Same question as before. If not cert chains, then what? Pretty > > sure the 3-party trust introduction with a well-known root cert is a > > fundamental model that COSE should support. > > There is nothing wrong with cert chains per-se, but I would argue X.509 > is the wrong solution for COSE. > > > LL > > -derek > > > > > > > > On Nov 4, 2016, at 7:23 AM, Derek Atkins wrote: > > > >> If your environment is so constrained that you want to use COSE, why > >> would you decide on X.509 as your certificate format?? Your cert chai= n > >> would likely be larger than your data payload!! > >> > >> -derek > >> > >> "Lundblade, Laurence" writes: > >> > >>> Yes, have a use case where I *think* I need to carry cert chains with > >>> a signed message. I want to sign something in one place and I want > >>> someone far away to be able to verify it based on a trusted a root > >>> key. Compatibility with extant and various cert management SW and > >>> services is also desirable. > >>> > >>> If not cert chains, then what? > >>> > >>> LL > >>> > >>> > >>> ________________________________________ > >>> From: Jim Schaad > >>> Sent: Thursday, November 3, 2016 1:15 PM > >>> To: Lundblade, Laurence; cose@ietf.org > >>> Subject: RE: [COSE] Carrying certificate chains in COSE signed messag= es > >>> > >>> Do you have a use case where you are planning to use COSE and need to > carry > >>> cert chains or is this just speculative? > >>> > >>> Jim > >>> > >>> > >>>> -----Original Message----- > >>>> From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Lundblade, > Laurence > >>>> Sent: Thursday, November 03, 2016 12:40 PM > >>>> To: cose@ietf.org > >>>> Subject: [COSE] Carrying certificate chains in COSE signed messages > >>>> > >>>> For many use cases it is a requirement that a signed message carry > leaf > >>> and > >>>> intermediate (X.509) certs that would be used to verify against a > trusted > >>> root. > >>>> > >>>> It seems like the way to do this is with a COSE_Key, but there aren'= t > any > >>>> examples or details. Is this right? > >>>> > >>>> Thx > >>>> > >>>> LL > >>>> > > -- > Derek Atkins 617-623-3745 > derek@ihtfp.com www.ihtfp.com > Computer and Internet Security Consultant > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > > --001a114b918223024c0540b8a4d8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Maybe the most reasonable solution would be to w= rite a complementary/extension doc for the COSE specification. Similar to w= hat is done with RSA so that this work can finish.

Jim, i= s that possible?
Laurence, do you think that would be an okay way = forward?

//Samuel



On Fri, Nov 4, 2016 at= 7:48 PM, Jim Schaad <ietf@augustcellars.com> wrote:

During the development of the COSE document, the creation of attribu= tes to carry X.509 items was discussed.=C2=A0 Given the set of use cases th= at we had on our radar at the time it was decided that we did not need this= at the time.=C2=A0 These were all cases where we were looking at constrain= ed devices where the addition of the certificate to many messages was going= to be a problem.=C2=A0 In this environment, if you were using X.509 then y= ou would pre-distribute the certificates rather than carrying them in a mes= sage.

=C2=A0<= /span>

If we can identify a number of cases wher= e we would be using X.509 certificates then I would be willing to create a = document which would define the fields and how to use them.=C2=A0 It would = appear that we might have one case, do people know of more?

=C2=A0

I don=E2=80=99t think we have a strong case for doing a new ce= rtificate format at this time, however if people think there is enough of a= need then the next step would be for them to organize a BOF to see if they= can attract enough attention.

=C2=A0

Jim

=C2=A0

=C2=A0

From: Samuel Erdtman [mailto:samuel@erdtman.se]
Sen= t: Friday, November 04, 2016 10:49 AM
To: Derek Atkins <derek@ihtfp.com><= br>Cc: Lundblade, Laurence <llundbla@qti.qualcomm.com>; Jim Schaad <= ;ietf@augustcel= lars.com>; cose@i= etf.org
Subject: Re: [COSE] Carrying certificate chains in CO= SE signed messages

=C2=A0

=

It might absolutely f= eel strange to have certificate chains in COSE since that would become the = larger part of the message.

H= owever I think Laurence has a point in the fact that It is more convenient = to use CBOR then ASN1 even if you formally have the bandwidth and capacity = to process ASN1.


Then there is the connection to existing trus= t infrastructure many organizations have well functioning PKIs setups and w= ants to use them.
Are you saying that we should only use COSE when build= ing completely new systems with no interaction with existing infrastructure= ?
I think it would be good for adoption if we could support this use-ca= se.
I could also imagine CAs adopting new certificate formats based on = CBOR and COSE in the future and if that happens a transition would be much = easier if they had the option to start using COSE today.

<= /div>

If this is a big no-no I guess JOSE would = be the option.

= =C2=A0

//Samuel



=C2=A0

On Fri, Nov 4, 20= 16 at 5:36 PM, Derek Atkins <derek@ihtfp.com> wrote:

Hi,

"Lundblade, Laurence" &l= t;llundbla@q= ti.qualcomm.com> writes:

> 1) A CBOR/COSE implementation is much cleaner and nice= r than a
> ASN.1/= CMS implementation. It is less work to implement, easier to
> maintain, test and so on.

Yes...=C2=A0 This is part of my point.

>=C2=A0 =C2=A0 =C2=A0 Also it=E2=80=99s not ju= st about the data size.
> Would guess that the code size difference between implementations = of
> CBOR/COSE an= d ASN.1/CMS is larger than a cert.=C2=A0 Also you can add the
> X.509 cert to the protocol m= essages outside the constrained
> environment.

Sure, it's not just about d= ata size, it's also about code size.=C2=A0 But if
you're using C= OSE then presumably size matters.

> Personally, I was hoping CBOR/COSE would replace ASN.1/CMS = in the very
> lon= g term. :-)

Why wait?

> 2) Same question as before. If not cert chains, then what= ?=C2=A0 Pretty
> = sure the 3-party trust introduction with a well-known root cert is a=
> fundamental model tha= t COSE should support.

There is nothing wrong with cert chain= s per-se, but I would argue X.509
is the wrong solution for COSE.
> LL

-derek


>
>
> O= n Nov 4, 2016, at 7:23 AM, Derek Atkins <derek@ihtfp.com> wrote:
>
>> If= your environment is so constrained that you want to use COSE, why
>&= gt; would you decide on X.509 as your certificate format??=C2=A0 Your cert = chain
>> would likely be larger than your data payload!!
>&g= t;
>> -derek
>>
>> "Lundblade, Laurence&quo= t; <llund= bla@qti.qualcomm.com> writes:
>>
>>> Yes, have = a use case where I *think* I need to carry cert chains with
>>>= a signed message.=C2=A0 I want to sign something in one place and I want>>> someone far away to be able to verify it based on a trusted = a root
>>> key.=C2=A0 Compatibility with extant and various cer= t management SW and
>>> services is also desirable.
>>= >
>>> If not cert chains, then what?
>>>
>= >> LL
>>>
>>>
>>> _______________= _________________________
>>> From: Jim Schaad <ietf@augustcellars.com= >
>>> Sent: Thursday, November 3, 2016 1:15 PM
>&g= t;> To: Lundblade, Laurence; cose@ietf.org
>>> Subject: RE: [COSE] Carrying cert= ificate chains in COSE signed messages
>>>
>>> Do y= ou have a use case where you are planning to use COSE and need to carry
= >>> cert chains or is this just speculative?
>>>
&g= t;>> Jim
>>>
>>>
>>>> -----Ori= ginal Message-----
>>>> From: COSE [mailto:cose-bounces@ietf.org] On Beh= alf Of Lundblade, Laurence
>>>> Sent: Thursday, November 03,= 2016 12:40 PM
>>>> To: cose@ietf.org
>>>> Subject: [COSE] Carryi= ng certificate chains in COSE signed messages
>>>>
>&g= t;>> For many use cases it is a requirement that a signed message car= ry leaf
>>> and
>>>> intermediate (X.509) certs = that would be used to verify against a trusted
>>> root.
>= ;>>>
>>>> It seems like the way to do this is with = a COSE_Key, but there aren't any
>>>> examples or detail= s.=C2=A0 Is this right?
>>>>
>>>> Thx
>= >>>
>>>> LL
>>>>

--
=C2=A0 =C2=A0 =C2=A0 =C2= =A0Derek Atkins=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0617-623-3745
=C2= =A0 =C2=A0 =C2=A0 =C2=A0derek@ihtfp.com=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0www.ihtfp.com
=C2=A0 = =C2=A0 =C2=A0 =C2=A0Computer and Internet Security Consultant

______= _________________________________________
COSE mailing list
COSE@ietf.org
https://w= ww.ietf.org/mailman/listinfo/cose

=C2=A0

=

--001a114b918223024c0540b8a4d8-- From nobody Mon Nov 7 08:46:26 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7ED9A1299AC for ; Mon, 7 Nov 2016 08:46:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.517 X-Spam-Level: X-Spam-Status: No, score=-8.517 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XuX5uwnramQe for ; Mon, 7 Nov 2016 08:46:23 -0800 (PST) Received: from wolverine01.qualcomm.com (wolverine01.qualcomm.com [199.106.114.254]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E648D12973D for ; Mon, 7 Nov 2016 08:46:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1478537182; x=1510073182; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=ncHsh/NngBVRqWhBtMro8hc/jUbauLbQwWlnYJ5Fi3s=; b=qGIc3ccwTQeWuWnUWfV4anvdtUhNSYpqP+++lfxrf5sYYV0SN492Vcjk xvCUpvUo2ytPs9ZswiRZnYOFDK5pPAavBA8GZGD0BEI70eELhnFgP9QYf wT+3xYTq6GDzvkMwsSnYIeLcnv3hieB3393Fo4ToXpKNfjQ3vKeVaWkT/ c=; X-IronPort-AV: E=Sophos;i="5.31,606,1473145200"; d="scan'208,217";a="238113213" Received: from unknown (HELO Ironmsg03-L.qualcomm.com) ([10.53.140.110]) by wolverine01.qualcomm.com with ESMTP; 07 Nov 2016 08:46:21 -0800 X-IronPort-AV: E=McAfee;i="5700,7163,8342"; a="1256568483" Received: from nasanexm01c.na.qualcomm.com ([10.85.0.83]) by Ironmsg03-L.qualcomm.com with ESMTP/TLS/RC4-SHA; 07 Nov 2016 08:46:20 -0800 Received: from NASANEXM01B.na.qualcomm.com (10.85.0.82) by NASANEXM01C.na.qualcomm.com (10.85.0.83) with Microsoft SMTP Server (TLS) id 15.0.1178.4; Mon, 7 Nov 2016 08:46:20 -0800 Received: from NASANEXM01B.na.qualcomm.com ([10.85.0.82]) by NASANEXM01B.na.qualcomm.com ([10.85.0.82]) with mapi id 15.00.1178.000; Mon, 7 Nov 2016 08:46:19 -0800 From: "Lundblade, Laurence" To: Samuel Erdtman Thread-Topic: [COSE] Carrying certificate chains in COSE signed messages Thread-Index: AQHSNgoMAz08VncnwkqYjLhXMFKbJqDIJ1GA///KYOSAAPBxf4AAjJ+A//+YU7aAAIm+gIAAEJ4AgASjEwCAAAJxAA== Date: Mon, 7 Nov 2016 16:46:18 +0000 Message-ID: <61986FD2-41A9-46FA-8FF4-1D12543ECDDC@qti.qualcomm.com> References: <82DC355C-868C-4B6D-91E7-D10CF8046C93@qti.qualcomm.com> <09e901d2360f$08791cd0$196b5670$@augustcellars.com> <1478218124368.37864@qti.qualcomm.com> <0b3201d236cc$180959e0$481c0da0$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.1878.6) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [199.106.107.6] Content-Type: multipart/alternative; boundary="_000_61986FD241A946FA8FF41D12543ECDDCqtiqualcommcom_" MIME-Version: 1.0 Archived-At: Cc: Jim Schaad , cose Subject: Re: [COSE] Carrying certificate chains in COSE signed messages X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Nov 2016 16:46:25 -0000 --_000_61986FD241A946FA8FF41D12543ECDDCqtiqualcommcom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable I assume the actual solution here would just be an extension to and not any= revision of the current COSE spec, but it would be nice to see a straw man= proposal to know for sure that assumption holds. If so, an extension doc seems just fine. LL On Nov 7, 2016, at 8:37 AM, Samuel Erdtman > wrote: Maybe the most reasonable solution would be to write a complementary/extens= ion doc for the COSE specification. Similar to what is done with RSA so tha= t this work can finish. Jim, is that possible? Laurence, do you think that would be an okay way forward? //Samuel On Fri, Nov 4, 2016 at 7:48 PM, Jim Schaad > wrote: During the development of the COSE document, the creation of attributes to = carry X.509 items was discussed. Given the set of use cases that we had on= our radar at the time it was decided that we did not need this at the time= . These were all cases where we were looking at constrained devices where = the addition of the certificate to many messages was going to be a problem.= In this environment, if you were using X.509 then you would pre-distribut= e the certificates rather than carrying them in a message. If we can identify a number of cases where we would be using X.509 certific= ates then I would be willing to create a document which would define the fi= elds and how to use them. It would appear that we might have one case, do = people know of more? I don=92t think we have a strong case for doing a new certificate format at= this time, however if people think there is enough of a need then the next= step would be for them to organize a BOF to see if they can attract enough= attention. Jim From: Samuel Erdtman [mailto:samuel@erdtman.se] Sent: Friday, November 04, 2016 10:49 AM To: Derek Atkins > Cc: Lundblade, Laurence >; Jim Schaad >; cose@ietf.org Subject: Re: [COSE] Carrying certificate chains in COSE signed messages It might absolutely feel strange to have certificate chains in COSE since t= hat would become the larger part of the message. However I think Laurence has a point in the fact that It is more convenient= to use CBOR then ASN1 even if you formally have the bandwidth and capacity= to process ASN1. Then there is the connection to existing trust infrastructure many organiza= tions have well functioning PKIs setups and wants to use them. Are you saying that we should only use COSE when building completely new sy= stems with no interaction with existing infrastructure? I think it would be good for adoption if we could support this use-case. I could also imagine CAs adopting new certificate formats based on CBOR and= COSE in the future and if that happens a transition would be much easier i= f they had the option to start using COSE today. If this is a big no-no I guess JOSE would be the option. //Samuel On Fri, Nov 4, 2016 at 5:36 PM, Derek Atkins > wrote: Hi, "Lundblade, Laurence" > writes: > 1) A CBOR/COSE implementation is much cleaner and nicer than a > ASN.1/CMS implementation. It is less work to implement, easier to > maintain, test and so on. Yes... This is part of my point. > Also it=92s not just about the data size. > Would guess that the code size difference between implementations of > CBOR/COSE and ASN.1/CMS is larger than a cert. Also you can add the > X.509 cert to the protocol messages outside the constrained > environment. Sure, it's not just about data size, it's also about code size. But if you're using COSE then presumably size matters. > Personally, I was hoping CBOR/COSE would replace ASN.1/CMS in the very > long term. :-) Why wait? > 2) Same question as before. If not cert chains, then what? Pretty > sure the 3-party trust introduction with a well-known root cert is a > fundamental model that COSE should support. There is nothing wrong with cert chains per-se, but I would argue X.509 is the wrong solution for COSE. > LL -derek > > > On Nov 4, 2016, at 7:23 AM, Derek Atkins > wrote: > >> If your environment is so constrained that you want to use COSE, why >> would you decide on X.509 as your certificate format?? Your cert chain >> would likely be larger than your data payload!! >> >> -derek >> >> "Lundblade, Laurence" > writes: >> >>> Yes, have a use case where I *think* I need to carry cert chains with >>> a signed message. I want to sign something in one place and I want >>> someone far away to be able to verify it based on a trusted a root >>> key. Compatibility with extant and various cert management SW and >>> services is also desirable. >>> >>> If not cert chains, then what? >>> >>> LL >>> >>> >>> ________________________________________ >>> From: Jim Schaad = > >>> Sent: Thursday, November 3, 2016 1:15 PM >>> To: Lundblade, Laurence; cose@ietf.org >>> Subject: RE: [COSE] Carrying certificate chains in COSE signed messages >>> >>> Do you have a use case where you are planning to use COSE and need to c= arry >>> cert chains or is this just speculative? >>> >>> Jim >>> >>> >>>> -----Original Message----- >>>> From: COSE [mailto:cose-bounces@ietf.org= ] On Behalf Of Lundblade, Laurence >>>> Sent: Thursday, November 03, 2016 12:40 PM >>>> To: cose@ietf.org >>>> Subject: [COSE] Carrying certificate chains in COSE signed messages >>>> >>>> For many use cases it is a requirement that a signed message carry lea= f >>> and >>>> intermediate (X.509) certs that would be used to verify against a trus= ted >>> root. >>>> >>>> It seems like the way to do this is with a COSE_Key, but there aren't = any >>>> examples or details. Is this right? >>>> >>>> Thx >>>> >>>> LL >>>> -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose --_000_61986FD241A946FA8FF41D12543ECDDCqtiqualcommcom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <19968A5A0CF5494B834743889C16E5E9@qualcomm.com> Content-Transfer-Encoding: quoted-printable
I assume the actual solution here would just be an extension to and no= t any revision of the current COSE spec, but it would be nice to see a stra= w man proposal to know for sure that assumption holds.

If so, an extension doc seems just fine.

LL


On Nov 7, 2016, at 8:37 AM, Samuel Erdtman <samuel@erdtman.se> wrote:

Maybe the most reasonable solution would be to write a complementary/e= xtension doc for the COSE specification. Similar to what is done with RSA s= o that this work can finish.

Jim, is that possible?
Laurence, do you think that would be an okay way forward?

//Samuel



On Fri, Nov 4, 2016 at 7:48 PM, Jim Schaad <ietf@august= cellars.com> wrote:

During the development of the COSE document, the cr= eation of attributes to carry X.509 items was discussed.  Given the se= t of use cases that we had on our radar at the time it was decided that we did not need this at the time.  These were all= cases where we were looking at constrained devices where the addition of t= he certificate to many messages was going to be a problem.  In this en= vironment, if you were using X.509 then you would pre-distribute the certificates rather than carrying them in a messa= ge.

 

If we can identify a number of cases where we would= be using X.509 certificates then I would be willing to create a document w= hich would define the fields and how to use them.  It would appear that we might have one case, do people know of more?

 

I don=92t think we have a strong case for doing a n= ew certificate format at this time, however if people think there is enough= of a need then the next step would be for them to organize a BOF to see if they can attract enough attention. <= /u>

 

Jim

 

 

From: Samuel Erdtman [mailto:samuel@erdtman.se]
Sent: Friday, November 04, 2016 10:49 AM
To: Derek Atkins <derek@ihtfp.com>
Cc: Lundblade, Laurence <llundbla@qti.qualcomm.com>; Jim Schaad <ietf@augustcellar= s.com>; cose@ietf.org
Subject: Re: [COSE] Carrying certificate chains in COSE signed messa= ges

 

It might absolutely f= eel strange to have certificate chains in COSE since that would become the = larger part of the message.

However I think Laurence has a point in the fact tha= t It is more convenient to use CBOR then ASN1 even if you formally have the= bandwidth and capacity to process ASN1.


Then there is the connection to existing trust infrastructure many organiza= tions have well functioning PKIs setups and wants to use them.
Are you saying that we should only use COSE when building completely new sy= stems with no interaction with existing infrastructure?
I think it would be good for adoption if we could support this use-case. I could also imagine CAs adopting new certificate formats based on CBOR and= COSE in the future and if that happens a transition would be much easier i= f they had the option to start using COSE today.

If this is a big no-no I guess JOSE would be the opt= ion.

 

//Samuel



 

On Fri, Nov 4, 2016 at 5:36 PM, Derek Atkins <derek@ihtfp.com> w= rote:

Hi,

"Lundblade, Laurence"= ; <llundb= la@qti.qualcomm.com> writes:

> 1) A CBOR/COSE implementa= tion is much cleaner and nicer than a
> ASN.1/CMS implementation.= It is less work to implement, easier to
> maintain, test and so on.=

Yes...  This is part of my point.

>      Also = it=92s not just about the data size.
> Would guess that the code= size difference between implementations of
> CBOR/COSE and ASN.1/CMS i= s larger than a cert.  Also you can add the
> X.509 cert to the protoco= l messages outside the constrained
> environment.

Sure, it's not just about data size, it's also about code size.  But i= f
you're using COSE then presumably size matters.

> Personally, I was hoping = CBOR/COSE would replace ASN.1/CMS in the very
> long term. :-)

Why wait?

> 2) Same question as befor= e. If not cert chains, then what?  Pretty
> sure the 3-party trust in= troduction with a well-known root cert is a
> fundamental model that CO= SE should support.

There is nothing wrong with cert chains per-se, but I would argue X.509
is the wrong solution for COSE.

> LL

-derek<= /u>


>
>
> On Nov 4, 2016, at 7:23 AM, Derek Atkins <derek@ihtfp.com> wrote:
>
>> If your environment is so constrained that you want to use COSE, w= hy
>> would you decide on X.509 as your certificate format??  Your = cert chain
>> would likely be larger than your data payload!!
>>
>> -derek
>>
>> "Lundblade, Laurence" <llundbla@qti.qualcomm.com> writes:<= br> >>
>>> Yes, have a use case where I *think* I need to carry cert chai= ns with
>>> a signed message.  I want to sign something in one place = and I want
>>> someone far away to be able to verify it based on a trusted a = root
>>> key.  Compatibility with extant and various cert manageme= nt SW and
>>> services is also desirable.
>>>
>>> If not cert chains, then what?
>>>
>>> LL
>>>
>>>
>>> ________________________________________
>>> From: Jim Schaad <ietf@augustcellars.com>
>>> Sent: Thursday, November 3, 2016 1:15 PM
>>> To: Lundblade, Laurence; cose@ietf.org
>>> Subject: RE: [COSE] Carrying certificate chains in COSE signed= messages
>>>
>>> Do you have a use case where you are planning to use COSE and = need to carry
>>> cert chains or is this just speculative?
>>>
>>> Jim
>>>
>>>
>>>> -----Original Message-----
>>>> From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Lundblade, Laur= ence
>>>> Sent: Thursday, November 03, 2016 12:40 PM
>>>> To: cos= e@ietf.org
>>>> Subject: [COSE] Carrying certificate chains in COSE signed= messages
>>>>
>>>> For many use cases it is a requirement that a signed messa= ge carry leaf
>>> and
>>>> intermediate (X.509) certs that would be used to verify ag= ainst a trusted
>>> root.
>>>>
>>>> It seems like the way to do this is with a COSE_Key, but t= here aren't any
>>>> examples or details.  Is this right?
>>>>
>>>> Thx
>>>>
>>>> LL
>>>>

--
       Derek Atkins          &= nbsp;      61= 7-623-3745
       derek@ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant

_______________________________________________
COSE mailing list
COSE@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/cose

 



--_000_61986FD241A946FA8FF41D12543ECDDCqtiqualcommcom_-- From nobody Tue Nov 8 00:34:55 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A577129B21; Tue, 8 Nov 2016 00:34:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yLsGRvl8l01w; Tue, 8 Nov 2016 00:34:41 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 25991129B4F; Tue, 8 Nov 2016 00:34:40 -0800 (PST) X-AuditID: c1b4fb3a-45dfe700000070a2-f3-58218e1d1b9a Received: from ESESSHC003.ericsson.se (Unknown_Domain [153.88.183.27]) by (Symantec Mail Security) with SMTP id 99.B8.28834.D1E81285; Tue, 8 Nov 2016 09:34:39 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC003.ericsson.se ([153.88.183.27]) with mapi id 14.03.0319.002; Tue, 8 Nov 2016 09:34:37 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Jim Schaad , 'Stephen Farrell' , 'Justin Richer' Thread-Topic: [COSE] Stephen Farrell's Discuss on draft-ietf-cose-msg-20: (with DISCUSS and COMMENT) Thread-Index: AQHSJ/5+PpYzxQEGkUCV86lFjxObP6Cv0hiAgArxbwCAAAG5AIABAk0AgAjA9ICAACEUAIABTcyAgAAt+4CAAJfEAIAIKMiA Date: Tue, 8 Nov 2016 08:34:37 +0000 Message-ID: References: <147665141739.25813.4419576200342341528.idtracker@ietfa.amsl.com> <029401d227f7$5cdb7fa0$16927ee0$@augustcellars.com> <822A08BC-5710-48E6-BCC7-AC86A554EFEC@mit.edu> <476D703F-727E-49D9-89C1-F6FD1092D55E@mit.edu> <94353594-ef7c-d909-605a-391ef2502c68@cs.tcd.ie> <066401d23474$a3659580$ea30c080$@augustcellars.com> <07f701d2352c$134c3400$39e49c00$@augustcellars.com> <995E9BD0-E43D-401C-830C-45B72F8ED064@ericsson.com> <08bb01d2358e$f30ba320$d922e960$@augustcellars.com> In-Reply-To: <08bb01d2358e$f30ba320$d922e960$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.9.160926 x-originating-ip: [153.88.183.146] Content-Type: text/plain; charset="utf-8" Content-ID: <66132935E956B84CAD83CFD74818D036@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrMIsWRmVeSWpSXmKPExsUyM2K7tK58n2KEQfMLIYt3W/cxWkzbOpXV ovfRbUaLGX8mMlusnv6dzWLDtZesFtP3XmN3YPfYOGc6m8fa7qtsHkuW/GTyaDpzlDmAJYrL JiU1J7MstUjfLoEro2vFDfaCNZoVm8/tZm9gXKLRxcjJISFgIvH6ZgNbFyMXh5DAOkaJOfv7 mSCcxYwSsz98ZgWpYhNwkXjQ8IgJxBYRqJb4v7gZrIhZYCOjxKIPC1hAEsICqRJXWs9BFaVJ nHg8hRHCzpPY0LwfLM4ioCKx9ulksKG8AhYS6+9MYofY1soq0XRhB1gDp4CDxJMV19hAbEYB MYnvp9aANTMLiEvcejKfCeJuAYkle84zQ9iiEi8f/wMaysEhKqAnseZ+GERYSeLHhkssIGFm AU2J9bv0IaZYS9yd+QRqoqLElO6H7BDnCEqcnPmEZQKj+Cwky2YhdM9C0j0LSfcsJN0LGFlX MYoWpxYX56YbGemlFmUmFxfn5+nlpZZsYgRG7cEtv612MB587niIUYCDUYmH98M0hQgh1sSy 4srcQ4wSHMxKIrxKnYoRQrwpiZVVqUX58UWlOanFhxilOViUxHnNVt4PFxJITyxJzU5NLUgt gskycXBKNTDKhalvlzm+oPAUv/mK018i3z1YXKzhY/GN5+uky2vFZhx6s9J9o4/8KZfwNptG 5tvnfvs0XZmo6u2d8GPmet0Vh486PHu7+Ne0sjUXAhIDp9yexZCn3H3zqfitVZc2n7mw9jVn 1JfdSosPTvdz1S7YaJrGcWXf6S+HO7es/Dx/RXadzJzi6N8nw5RYijMSDbWYi4oTATYsKkTW AgAA Archived-At: Cc: "cose-chairs@ietf.org" , "cose@ietf.org" , 'The IESG' , "draft-ietf-cose-msg@ietf.org" Subject: Re: [COSE] Stephen Farrell's Discuss on draft-ietf-cose-msg-20: (with DISCUSS and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 08:34:45 -0000 DQoNCk9uIDIwMTYtMTEtMDMgMDU6NTgsICJKaW0gU2NoYWFkIiA8aWV0ZkBhdWd1c3RjZWxsYXJz LmNvbT4gd3JvdGU6DQoNCj4NCj4NCj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+PiBG cm9tOiBHw7ZyYW4gU2VsYW5kZXIgW21haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb21d DQo+PiBTZW50OiBXZWRuZXNkYXksIE5vdmVtYmVyIDAyLCAyMDE2IDEyOjU1IFBNDQo+PiBUbzog SmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4NCj4+IENjOiBTdGVwaGVuIEZhcnJl bGwgPHN0ZXBoZW4uZmFycmVsbEBjcy50Y2QuaWU+OyBKdXN0aW4gUmljaGVyDQo+PjxqcmljaGVy QG1pdC5lZHU+Ow0KPj4gY29zZS1jaGFpcnNAaWV0Zi5vcmc7IGRyYWZ0LWlldGYtY29zZS1tc2dA aWV0Zi5vcmc7IFRoZSBJRVNHDQo+PjxpZXNnQGlldGYub3JnPjsNCj4+IGNvc2VAaWV0Zi5vcmcN Cj4+IFN1YmplY3Q6IFJlOiBbQ09TRV0gU3RlcGhlbiBGYXJyZWxsJ3MgRGlzY3VzcyBvbg0KPj5k cmFmdC1pZXRmLWNvc2UtbXNnLTIwOiAod2l0aA0KPj4gRElTQ1VTUyBhbmQgQ09NTUVOVCkNCj4+ IA0KPj4gDQo+PiANCj4+ID4gT24gMiBub3YuIDIwMTYsIGF0IDE4OjExLCBKaW0gU2NoYWFkIDxp ZXRmQGF1Z3VzdGNlbGxhcnMuY29tPiB3cm90ZToNCj4+ID4NCj4+ID4NCj4+ID4NCj4+ID4+IC0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+PiA+PiBGcm9tOiBTdGVwaGVuIEZhcnJlbGwgW21h aWx0bzpzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllXQ0KPj4gPj4gU2VudDogVHVlc2RheSwgTm92 ZW1iZXIgMDEsIDIwMTYgMjoxNiBQTQ0KPj4gPj4gVG86IEppbSBTY2hhYWQgPGlldGZAYXVndXN0 Y2VsbGFycy5jb20+OyAnSnVzdGluIFJpY2hlcicNCj4+PGpyaWNoZXJAbWl0LmVkdT4NCj4+ID4+ IENjOiBjb3NlLWNoYWlyc0BpZXRmLm9yZzsgY29zZUBpZXRmLm9yZzsgJ1RoZSBJRVNHJyA8aWVz Z0BpZXRmLm9yZz47DQo+PmRyYWZ0LQ0KPj4gaWV0Zi0NCj4+ID4+IGNvc2UtbXNnQGlldGYub3Jn DQo+PiA+PiBTdWJqZWN0OiBSZTogU3RlcGhlbiBGYXJyZWxsJ3MgRGlzY3VzcyBvbiBkcmFmdC1p ZXRmLWNvc2UtbXNnLTIwOg0KPj4od2l0aA0KPj4gRElTQ1VTUw0KPj4gPj4gYW5kIENPTU1FTlQp DQo+PiA+Pg0KPj4gPj4NCj4+ID4+IEhpeWEsDQo+PiA+Pg0KPj4gPj4+IE9uIDAxLzExLzE2IDE5 OjE3LCBKaW0gU2NoYWFkIHdyb3RlOg0KPj4gPj4+IEFub3RoZXIgdGhyZWFkIGRlYWxpbmcgd2l0 aCB0aGlzIGlzc3VlIGluY2x1ZGVzDQo+PiA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1h cmNoaXZlL3dlYi9jb3NlL2N1cnJlbnQvbXNnMDA5ODEuaHRtbCAgLQ0KPj4gPj4+IGJhc2ljYWxs eSB0aGUgc3ViamVjdCBpcyAnbWFrZSAiYWxnIiBmaWVsZCBvcHRpb25hbCcNCj4+ID4+Pg0KPj4g Pj4+IFVzdWFsIHN1c3BlY3RzIChHw7ZyYW4sIEx1ZHdpZywgRnJhbmNlc2NhKSBvbiBvbmUgc2lk ZSwgbWUgYW5kIGENCj4+ID4+PiBjb3VwbGUgb2Ygb3RoZXJzIG9uIHRoZSBvdGhlciBzaWRlLiAg SW50ZXJlc3RpbmdseSB0aGUgYW50aXMNCj4+aW5jbHVkZWQNCj4+ID4+PiBNaWtlIHdobyBhcmd1 ZWQgZm9yIHRoaXMgaW4gdGhlIEpPU0UuDQo+PiA+Pg0KPj4gPj4gSGVoLiBUbyBiZSBob25lc3Qs IEknbSBub3Qgc3VyZSB3aGF0J3MgYmVzdCBoZXJlLiBOb3JtYWxseSBpZg0KPj4gPj4gaXQgd2Vy ZSBqdXN0IG15IGRlc2lnbiB0YXN0ZXMgYWdhaW5zdCB0aGUgV0dzLCBJJ2QgaGFwcGlseQ0KPj4g Pj4gZm9sZC4gQnV0IGluIHRoaXMgY2FzZSB3ZSBoYXZlIGFuIGFwcGVuZGl4IHRoYXQgc2F5cyBo b3cgdG8NCj4+ID4+IG5vdCBkbyB3aGF0J3MgYSBNVVNUIGluIHRoZSBib2R5IG9mIHRoZSBzcGVj LiBBbmQgSSBzdXNwZWN0DQo+PiA+PiB0aGF0IHRoaXMgY291bGQgZGFtYWdlIGludGVyb3AgZGVw ZW5kaW5nIG9uIHdoZXRoZXIgb3Igbm90DQo+PiA+PiBsaWJyYXJpZXMgZm9sbG93IHRoZSBNVVNU IG9yIG5vdC4NCj4+ID4+DQo+PiA+PiBEbyB3ZSB0aGluayB0aGVyZSdzIGEgd2F5IHRvIHNxdWFy ZSB0aGlzIGNpcmNsZSBhbmQgc29tZWhvdw0KPj4gPj4gZ2V0IHJpZCBvZiB0aGUgYXBwZW5kaXgg dG8gZ2V0IHRvIGEgcmVzdWx0IGZvbGtzIGNhbiBhbGwgdXNlPw0KPj4gPg0KPj4gPiBJIHdpc2gg SSBrbmV3LiAgVGhlIGZhY3QgdGhhdCB0aGUgQ09SRSBkcmFmdCBpcyBub3QgZXZlbiBjb21wbHlp bmcNCj4+d2l0aCBob3cNCj4+IHRoZSBhcHBlbmRpeCBpcyBzYXlpbmcgdG8gZG8gdGhpbmdzIGFs bW9zdCBsZWFkcyBtZSB0byB0aGluayB0aGF0IHdlDQo+PnNob3VsZCBqdXN0DQo+PiBraWxsIHRo YXQgc2VjdGlvbiBvZiB0aGUgYXBwZW5kaXggYW5kIHJlLWV2YWx1YXRlIHRoaW5ncy4NCj4NCj5J IG1heSBoYXZlIG1pc2ludGVycHJldGVkIHdoYXQgR8O2cmFuIHNhaWQgYW5kIHRoaXMgbWF5IG5v dCBiZSB0aGUgY2FzZS4NCj4NCg0KU29ycnkgZm9yIHRoZSBkZWxheSwgd2UgaGF2ZSBoYWQgc29t ZSBvZmZsaW5lIGRpc2N1c3Npb25zLg0KDQpJIHRoaW5rIHRoZSBjb3JlIG9mIHRoZSBwcm9ibGVt IGlzIHRoZSBkZXNpcmUgdG8gdXNlIENPU0UgZm9yIG11bHRpcGxlDQpwdXJwb3NlcywgaW4gcGFy dGljdWxhcjogMSkgMS1wYXNzIHN0YXRlbGVzcyBtZXNzYWdlIGZvcndhcmRpbmcgYW5kIDIpDQpz dGF0ZWZ1bCBtZXNzYWdlIGZvcndhcmRpbmcgaW4gYSBzZXNzaW9uOyBlYWNoIHdpdGggaXRzIHJl cXVpcmVtZW50cyBvbg0KbWVzc2FnZSBmaWVsZHMuIEluIHRoZSBmb3JtZXIgY2FzZSBpdCBpcyBu ZWNlc3NhcnkgdG8gc2VuZCB0aGUgYWxnb3JpdGhtLA0KYnV0IG5vdCBpbiB0aGUgbGF0dGVyLiBJ biB0aGUgbGF0dGVyIGl0IGlzIG5lY2Vzc2FyeSB0byBzZW5kIGENCnNlc3Npb24vY29udGV4dCBp ZGVudGlmaWVyIGJ1dCBub3QgaW4gdGhlIGZvcm1lciwgYW5kIG1vcmVvdmVyIHRoZXJlIGlzIG5v DQpzdWNoIGZpZWxkIGlzIGRlZmluZWQgaW4gdGhlIGN1cnJlbnQgZHJhZnQuIFdlIHRoZXJlZm9y ZSB1c2VkICAna2lkJyBmb3INCnRoaXMgcHVycG9zZSBjb250cmFkaWN0aW5nICAgaXRzIGludGVu ZGVkIHVzZSB3aGljaCBsZWQgdG8gdGhpcw0KZGlzY3Vzc2lvbi4gQnV0IGZvciB0aGF0IHBhcnRp Y3VsYXIgY2FzZSBpdCBpcyBlYXN5IHRvIHJlc29sdmU6IFdlIGNhbg0Kc2ltcGx5IGRlZmluaW5n IGEgbGFiZWwgZm9yIGEgc2Vzc2lvbi9jb250ZXh0IGlkZW50aWZpZXIsIHJlcGxhY2Ug4oCYa2lk 4oCZDQphbmQgdGhlcmUgYXJlIG5vIGNvbnRyYWRpY3Rpb25zIHdpdGggdGhlIGN1cnJlbnQgYm9k eSBvciBhcHBlbmRpeC4gU28gSQ0Kd2l0aGRyYXcgbXkgcHJldmlvdXMgY29tbWVudC4NCg0KVGhp cyBkb2VzIG5vdCBzb2x2ZSB0aGUgZ2VuZXJhbCBpc3N1ZSB3aXRoIHRoZSBhcHBlbmRpeCBjb250 cmFkaWN0aW5nIHRoZQ0KYm9keSwgYnV0IEkgZG9u4oCZdCB0aGluayB0aGF0IGlzIHBvc3NpYmxl IHRvIHNvbHZlIGlmIHdlIHdhbnQgdG8gc3VwcG9ydA0KbXVsdGlwbGUg4oCYbW9kZXPigJkgb2Yg b3BlcmF0aW9uOiBFaXRoZXIgd2UgZGVmaW5lIGV4cGxpY2l0bHkgZGlmZmVyZW50DQptb2Rlcywg YW5kIHdoYXQgaXMgcmVxdWlyZWQvYWxsb3dlZCBpbiB0ZXJtcyBvZiBtZXNzYWdlIGZpZWxkcyBm b3IgdGhlc2UNCm1vZGVzLCBvciB3ZSBkZWZpbmUgb25lIG1vZGUgYW5kIGFja25vd2xlZGdlIHRo YXQgdGhlcmUgbWF5IGJlIG90aGVyDQptb2Rlcy4gDQoNCihDb21wYXJlIEdyb3VjaG8gTWFyeDog IlRob3NlIGFyZSBteSBwcmluY2lwbGVzLCBhbmQgaWYgeW91IGRvbid0IGxpa2UNCnRoZW0uLi4g d2VsbCwgSSBoYXZlIG90aGVycy7igJ0gOi0pDQoNCkfDtnJhbg0KDQoNCg0KDQo= From nobody Tue Nov 8 07:08:05 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B13421295AB for ; Tue, 8 Nov 2016 07:08:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.22 X-Spam-Level: X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FviNKv9kgRXB for ; Tue, 8 Nov 2016 07:08:01 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F3DA129441 for ; Tue, 8 Nov 2016 07:08:00 -0800 (PST) X-AuditID: c1b4fb25-bf4b398000005623-69-5821ea4e0bb1 Received: from ESESSHC009.ericsson.se (Unknown_Domain [153.88.183.45]) by (Symantec Mail Security) with SMTP id FB.79.22051.E4AE1285; Tue, 8 Nov 2016 16:07:58 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC009.ericsson.se ([153.88.183.45]) with mapi id 14.03.0319.002; Tue, 8 Nov 2016 16:07:57 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Jim Schaad , "'Lundblade, Laurence'" , 'Samuel Erdtman' Thread-Topic: [COSE] Carrying certificate chains in COSE signed messages Thread-Index: AQHSNgoMAz08VncnwkqYjLhXMFKbJqDHoTWAgABBKoCAAP+89YAABooAgAAecFKAAAOhgIAAEJ4AgAYcY4A= Date: Tue, 8 Nov 2016 15:07:57 +0000 Message-ID: References: <82DC355C-868C-4B6D-91E7-D10CF8046C93@qti.qualcomm.com> <09e901d2360f$08791cd0$196b5670$@augustcellars.com> <1478218124368.37864@qti.qualcomm.com> <0b3201d236cc$180959e0$481c0da0$@augustcellars.com> In-Reply-To: <0b3201d236cc$180959e0$481c0da0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.9.160926 x-originating-ip: [153.88.183.18] Content-Type: multipart/alternative; boundary="_000_D447A2FD6C411goranselanderericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrIIsWRmVeSWpSXmKPExsUyM2K7rq7fK8UIg1U9ehbTtk5ltVg9/Tub xdKDx1gt/i89xeTA4rFxznQ2jxf/9jB6LFnyk8lj0dRnjAEsUVw2Kak5mWWpRfp2CVwZE/9d Zino/8NYsXPtV+YGxj1fGbsYOTkkBEwktsxazN7FyMUhJLCOUaL/7RewhJDAYkaJKZuFQWw2 AReJBw2PmECKRARaGCV+P3jBBJJgFlCWaNxwiQXEFhZwl3je9AqsWUTAQ2LKq11sEHaSxJOp 28BsFgEViT+nLoLZvAIWEucONLFCbF7KLPFydz/YIE4BB4k/J6eA2YwCYhLfT62BWiYucevJ fCaIswUkluw5zwxhi0q8fPwPaBAHh6iAnsSa+2EQYUWJj6/2MUK0xkpcf9gKtVdQ4uTMJywT GEVnIZk6C0nZLCRls4CmMgtoSqzfpQ9RoigxpfshO4StIdE6Zy47RIm1xPIuUWQlCxg5VjGK FqcWJ+WmGxnrpRZlJhcX5+fp5aWWbGIERuzBLb9VdzBefuN4iFGAg1GJh7fghWKEEGtiWXFl 7iFGCQ5mJRFenydAId6UxMqq1KL8+KLSnNTiQ4zSHCxK4rxmK++HCwmkJ5akZqemFqQWwWSZ ODilGhhN3dx3v99VOvHtDqWwvogtl1qZtwtpeP2tko7/oLVLeZ6A4lxTqbd/znPda42q+X9j 483vwaUCZkc1Dp1MU/5VEiPHsvC8CbtcldWUxZo34pYeW2JqOunOLWOtPyWL2cXPWmj0u9Wa Syuc+fDdcvftvfN+PFwhk/nd2NBgl8KPj01B3yftXVKoxFKckWioxVxUnAgAR26bU9QCAAA= Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] Carrying certificate chains in COSE signed messages X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 15:08:03 -0000 --_000_D447A2FD6C411goranselanderericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpGcm9tOiBDT1NFIDxjb3NlLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmNvc2UtYm91bmNlc0Bp ZXRmLm9yZz4+IG9uIGJlaGFsZiBvZiBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29t PG1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tPj4NCkRhdGU6IEZyaWRheSA0IE5vdmVtYmVy IDIwMTYgYXQgMTk6NDgNClRvOiAiJ0x1bmRibGFkZSwgTGF1cmVuY2UnIiA8bGx1bmRibGFAcXRp LnF1YWxjb21tLmNvbTxtYWlsdG86bGx1bmRibGFAcXRpLnF1YWxjb21tLmNvbT4+DQpDYzogJ1Nh bXVlbCBFcmR0bWFuJyA8c2FtdWVsQGVyZHRtYW4uc2U8bWFpbHRvOnNhbXVlbEBlcmR0bWFuLnNl Pj4sICJjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYub3JnPiIgPGNvc2VAaWV0Zi5vcmc8 bWFpbHRvOmNvc2VAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtDT1NFXSBDYXJyeWluZyBjZXJ0 aWZpY2F0ZSBjaGFpbnMgaW4gQ09TRSBzaWduZWQgbWVzc2FnZXMNCg0KRHVyaW5nIHRoZSBkZXZl bG9wbWVudCBvZiB0aGUgQ09TRSBkb2N1bWVudCwgdGhlIGNyZWF0aW9uIG9mIGF0dHJpYnV0ZXMg dG8gY2FycnkgWC41MDkgaXRlbXMgd2FzIGRpc2N1c3NlZC4gIEdpdmVuIHRoZSBzZXQgb2YgdXNl IGNhc2VzIHRoYXQgd2UgaGFkIG9uIG91ciByYWRhciBhdCB0aGUgdGltZSBpdCB3YXMgZGVjaWRl ZCB0aGF0IHdlIGRpZCBub3QgbmVlZCB0aGlzIGF0IHRoZSB0aW1lLiAgVGhlc2Ugd2VyZSBhbGwg Y2FzZXMgd2hlcmUgd2Ugd2VyZSBsb29raW5nIGF0IGNvbnN0cmFpbmVkIGRldmljZXMgd2hlcmUg dGhlIGFkZGl0aW9uIG9mIHRoZSBjZXJ0aWZpY2F0ZSB0byBtYW55IG1lc3NhZ2VzIHdhcyBnb2lu ZyB0byBiZSBhIHByb2JsZW0uICBJbiB0aGlzIGVudmlyb25tZW50LCBpZiB5b3Ugd2VyZSB1c2lu ZyBYLjUwOSB0aGVuIHlvdSB3b3VsZCBwcmUtZGlzdHJpYnV0ZSB0aGUgY2VydGlmaWNhdGVzIHJh dGhlciB0aGFuIGNhcnJ5aW5nIHRoZW0gaW4gYSBtZXNzYWdlLg0KDQpJZiB3ZSBjYW4gaWRlbnRp ZnkgYSBudW1iZXIgb2YgY2FzZXMgd2hlcmUgd2Ugd291bGQgYmUgdXNpbmcgWC41MDkgY2VydGlm aWNhdGVzIHRoZW4gSSB3b3VsZCBiZSB3aWxsaW5nIHRvIGNyZWF0ZSBhIGRvY3VtZW50IHdoaWNo IHdvdWxkIGRlZmluZSB0aGUgZmllbGRzIGFuZCBob3cgdG8gdXNlIHRoZW0uICBJdCB3b3VsZCBh cHBlYXIgdGhhdCB3ZSBtaWdodCBoYXZlIG9uZSBjYXNlLCBkbyBwZW9wbGUga25vdyBvZiBtb3Jl Pw0KDQpUaGlzIHdvcmsgY291bGQgYmUgdmVyeSB1c2VmdWwuDQoNCk9uZSB1c2UgY2FzZSBpcyBJ b1QgZGV2aWNlIGJvb3RzdHJhcHBpbmcvb24tYm9hcmRpbmcgaW4gYSBuZXR3b3JrIHVzaW5nIHZl bmRvciBpc3N1ZWQgcHVibGljIGtleSBjZXJ0aWZpY2F0ZXMgaW5zdGFsbGVkIGR1cmluZyBtYW51 ZmFjdHVyaW5nIGFuZCB1c2VkIGR1cmluZyBkZXBsb3ltZW50IHRvIGF1dGhlbnRpY2F0ZSBjZXJ0 aWZpY2F0ZSBlbnJvbG1lbnQgb2Ygb3BlcmF0aW9uYWwgY2VydGlmaWNhdGVzLiBUaGVyZSBpcyBy ZWNlbnQgd29yayB1c2luZyBJRUVFIDgwMi4xQVIgd2hpY2ggaXMgYmFzZWQgb24gWC41MDksIGJ1 dCBtYXliZSBvdGhlciBmb3JtYXRzIGFyZSBtb3JlIHJlbGV2YW50Lg0KDQpJbiBhbnkgY2FzZSwg ZGVmaW5pbmcgY2VydGlmaWNhdGUgZW5yb2xtZW50IHVzaW5nIENPU0Ugd291bGQgbWFrZSBtdWNo IG1vcmUgc2Vuc2UgZm9yIGNvbnN0cmFpbmVkIGRldmljZXMgY29tcGFyZWQgdG8gdGhlIHByb3Bv c2FsIHRvIHVzZSBDTVMuIFRoZSBlbnJvbG1lbnQgcHJvdG9jb2wgY2FuIGJlIGF1dGhlbnRpY2F0 ZWQgdXNpbmcgdHJhbnNwb3J0IGxheWVyIHNlY3VyaXR5IG9yIGFwcGxpY2F0aW9uIGxheWVyIHNl Y3VyaXR5Lg0KDQoNCg0KSSBkb27igJl0IHRoaW5rIHdlIGhhdmUgYSBzdHJvbmcgY2FzZSBmb3Ig ZG9pbmcgYSBuZXcgY2VydGlmaWNhdGUgZm9ybWF0IGF0IHRoaXMgdGltZSwgaG93ZXZlciBpZiBw ZW9wbGUgdGhpbmsgdGhlcmUgaXMgZW5vdWdoIG9mIGEgbmVlZCB0aGVuIHRoZSBuZXh0IHN0ZXAg d291bGQgYmUgZm9yIHRoZW0gdG8gb3JnYW5pemUgYSBCT0YgdG8gc2VlIGlmIHRoZXkgY2FuIGF0 dHJhY3QgZW5vdWdoIGF0dGVudGlvbi4NCg0KDQpXaXRob3V0IGV4Y2x1ZGluZyB0aGlzIGNhc2Us IGl0IHdvdWxkIGJlIGdvb2QgdG8gZXhhbWluZSB0aGUgZmVhc2liaWxpdHkgb2YgdXNpbmcgdGhl IGV4aXN0aW5nIGNhbmRpZGF0ZXMgaW4gY29uc3RyYWluZWQgZGV2aWNlcyBiZWZvcmUgZ29pbmcg Zm9yd2FyZCB3aXRoIHRoYXQuDQoNCkfDtnJhbg0KDQoNCkppbQ0KDQoNCkZyb206IFNhbXVlbCBF cmR0bWFuIFttYWlsdG86c2FtdWVsQGVyZHRtYW4uc2VdDQpTZW50OiBGcmlkYXksIE5vdmVtYmVy IDA0LCAyMDE2IDEwOjQ5IEFNDQpUbzogRGVyZWsgQXRraW5zIDxkZXJla0BpaHRmcC5jb208bWFp bHRvOmRlcmVrQGlodGZwLmNvbT4+DQpDYzogTHVuZGJsYWRlLCBMYXVyZW5jZSA8bGx1bmRibGFA cXRpLnF1YWxjb21tLmNvbTxtYWlsdG86bGx1bmRibGFAcXRpLnF1YWxjb21tLmNvbT4+OyBKaW0g U2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMu Y29tPj47IGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTog W0NPU0VdIENhcnJ5aW5nIGNlcnRpZmljYXRlIGNoYWlucyBpbiBDT1NFIHNpZ25lZCBtZXNzYWdl cw0KDQpJdCBtaWdodCBhYnNvbHV0ZWx5IGZlZWwgc3RyYW5nZSB0byBoYXZlIGNlcnRpZmljYXRl IGNoYWlucyBpbiBDT1NFIHNpbmNlIHRoYXQgd291bGQgYmVjb21lIHRoZSBsYXJnZXIgcGFydCBv ZiB0aGUgbWVzc2FnZS4NCkhvd2V2ZXIgSSB0aGluayBMYXVyZW5jZSBoYXMgYSBwb2ludCBpbiB0 aGUgZmFjdCB0aGF0IEl0IGlzIG1vcmUgY29udmVuaWVudCB0byB1c2UgQ0JPUiB0aGVuIEFTTjEg ZXZlbiBpZiB5b3UgZm9ybWFsbHkgaGF2ZSB0aGUgYmFuZHdpZHRoIGFuZCBjYXBhY2l0eSB0byBw cm9jZXNzIEFTTjEuDQoNClRoZW4gdGhlcmUgaXMgdGhlIGNvbm5lY3Rpb24gdG8gZXhpc3Rpbmcg dHJ1c3QgaW5mcmFzdHJ1Y3R1cmUgbWFueSBvcmdhbml6YXRpb25zIGhhdmUgd2VsbCBmdW5jdGlv bmluZyBQS0lzIHNldHVwcyBhbmQgd2FudHMgdG8gdXNlIHRoZW0uDQpBcmUgeW91IHNheWluZyB0 aGF0IHdlIHNob3VsZCBvbmx5IHVzZSBDT1NFIHdoZW4gYnVpbGRpbmcgY29tcGxldGVseSBuZXcg c3lzdGVtcyB3aXRoIG5vIGludGVyYWN0aW9uIHdpdGggZXhpc3RpbmcgaW5mcmFzdHJ1Y3R1cmU/ DQpJIHRoaW5rIGl0IHdvdWxkIGJlIGdvb2QgZm9yIGFkb3B0aW9uIGlmIHdlIGNvdWxkIHN1cHBv cnQgdGhpcyB1c2UtY2FzZS4NCkkgY291bGQgYWxzbyBpbWFnaW5lIENBcyBhZG9wdGluZyBuZXcg Y2VydGlmaWNhdGUgZm9ybWF0cyBiYXNlZCBvbiBDQk9SIGFuZCBDT1NFIGluIHRoZSBmdXR1cmUg YW5kIGlmIHRoYXQgaGFwcGVucyBhIHRyYW5zaXRpb24gd291bGQgYmUgbXVjaCBlYXNpZXIgaWYg dGhleSBoYWQgdGhlIG9wdGlvbiB0byBzdGFydCB1c2luZyBDT1NFIHRvZGF5Lg0KSWYgdGhpcyBp cyBhIGJpZyBuby1ubyBJIGd1ZXNzIEpPU0Ugd291bGQgYmUgdGhlIG9wdGlvbi4NCg0KLy9TYW11 ZWwNCg0KDQoNCk9uIEZyaSwgTm92IDQsIDIwMTYgYXQgNTozNiBQTSwgRGVyZWsgQXRraW5zIDxk ZXJla0BpaHRmcC5jb208bWFpbHRvOmRlcmVrQGlodGZwLmNvbT4+IHdyb3RlOg0KSGksDQoNCiJM dW5kYmxhZGUsIExhdXJlbmNlIiA8bGx1bmRibGFAcXRpLnF1YWxjb21tLmNvbTxtYWlsdG86bGx1 bmRibGFAcXRpLnF1YWxjb21tLmNvbT4+IHdyaXRlczoNCg0KPiAxKSBBIENCT1IvQ09TRSBpbXBs ZW1lbnRhdGlvbiBpcyBtdWNoIGNsZWFuZXIgYW5kIG5pY2VyIHRoYW4gYQ0KPiBBU04uMS9DTVMg aW1wbGVtZW50YXRpb24uIEl0IGlzIGxlc3Mgd29yayB0byBpbXBsZW1lbnQsIGVhc2llciB0bw0K PiBtYWludGFpbiwgdGVzdCBhbmQgc28gb24uDQoNClllcy4uLiAgVGhpcyBpcyBwYXJ0IG9mIG15 IHBvaW50Lg0KDQo+ICAgICAgQWxzbyBpdOKAmXMgbm90IGp1c3QgYWJvdXQgdGhlIGRhdGEgc2l6 ZS4NCj4gV291bGQgZ3Vlc3MgdGhhdCB0aGUgY29kZSBzaXplIGRpZmZlcmVuY2UgYmV0d2VlbiBp bXBsZW1lbnRhdGlvbnMgb2YNCj4gQ0JPUi9DT1NFIGFuZCBBU04uMS9DTVMgaXMgbGFyZ2VyIHRo YW4gYSBjZXJ0LiAgQWxzbyB5b3UgY2FuIGFkZCB0aGUNCj4gWC41MDkgY2VydCB0byB0aGUgcHJv dG9jb2wgbWVzc2FnZXMgb3V0c2lkZSB0aGUgY29uc3RyYWluZWQNCj4gZW52aXJvbm1lbnQuDQoN ClN1cmUsIGl0J3Mgbm90IGp1c3QgYWJvdXQgZGF0YSBzaXplLCBpdCdzIGFsc28gYWJvdXQgY29k ZSBzaXplLiAgQnV0IGlmDQp5b3UncmUgdXNpbmcgQ09TRSB0aGVuIHByZXN1bWFibHkgc2l6ZSBt YXR0ZXJzLg0KDQo+IFBlcnNvbmFsbHksIEkgd2FzIGhvcGluZyBDQk9SL0NPU0Ugd291bGQgcmVw bGFjZSBBU04uMS9DTVMgaW4gdGhlIHZlcnkNCj4gbG9uZyB0ZXJtLiA6LSkNCg0KV2h5IHdhaXQ/ DQoNCj4gMikgU2FtZSBxdWVzdGlvbiBhcyBiZWZvcmUuIElmIG5vdCBjZXJ0IGNoYWlucywgdGhl biB3aGF0PyAgUHJldHR5DQo+IHN1cmUgdGhlIDMtcGFydHkgdHJ1c3QgaW50cm9kdWN0aW9uIHdp dGggYSB3ZWxsLWtub3duIHJvb3QgY2VydCBpcyBhDQo+IGZ1bmRhbWVudGFsIG1vZGVsIHRoYXQg Q09TRSBzaG91bGQgc3VwcG9ydC4NCg0KVGhlcmUgaXMgbm90aGluZyB3cm9uZyB3aXRoIGNlcnQg Y2hhaW5zIHBlci1zZSwgYnV0IEkgd291bGQgYXJndWUgWC41MDkNCmlzIHRoZSB3cm9uZyBzb2x1 dGlvbiBmb3IgQ09TRS4NCg0KPiBMTA0KDQotZGVyZWsNCg0KPg0KPg0KPiBPbiBOb3YgNCwgMjAx NiwgYXQgNzoyMyBBTSwgRGVyZWsgQXRraW5zIDxkZXJla0BpaHRmcC5jb208bWFpbHRvOmRlcmVr QGlodGZwLmNvbT4+IHdyb3RlOg0KPg0KPj4gSWYgeW91ciBlbnZpcm9ubWVudCBpcyBzbyBjb25z dHJhaW5lZCB0aGF0IHlvdSB3YW50IHRvIHVzZSBDT1NFLCB3aHkNCj4+IHdvdWxkIHlvdSBkZWNp ZGUgb24gWC41MDkgYXMgeW91ciBjZXJ0aWZpY2F0ZSBmb3JtYXQ/PyAgWW91ciBjZXJ0IGNoYWlu DQo+PiB3b3VsZCBsaWtlbHkgYmUgbGFyZ2VyIHRoYW4geW91ciBkYXRhIHBheWxvYWQhIQ0KPj4N Cj4+IC1kZXJlaw0KPj4NCj4+ICJMdW5kYmxhZGUsIExhdXJlbmNlIiA8bGx1bmRibGFAcXRpLnF1 YWxjb21tLmNvbTxtYWlsdG86bGx1bmRibGFAcXRpLnF1YWxjb21tLmNvbT4+IHdyaXRlczoNCj4+ DQo+Pj4gWWVzLCBoYXZlIGEgdXNlIGNhc2Ugd2hlcmUgSSAqdGhpbmsqIEkgbmVlZCB0byBjYXJy eSBjZXJ0IGNoYWlucyB3aXRoDQo+Pj4gYSBzaWduZWQgbWVzc2FnZS4gIEkgd2FudCB0byBzaWdu IHNvbWV0aGluZyBpbiBvbmUgcGxhY2UgYW5kIEkgd2FudA0KPj4+IHNvbWVvbmUgZmFyIGF3YXkg dG8gYmUgYWJsZSB0byB2ZXJpZnkgaXQgYmFzZWQgb24gYSB0cnVzdGVkIGEgcm9vdA0KPj4+IGtl eS4gIENvbXBhdGliaWxpdHkgd2l0aCBleHRhbnQgYW5kIHZhcmlvdXMgY2VydCBtYW5hZ2VtZW50 IFNXIGFuZA0KPj4+IHNlcnZpY2VzIGlzIGFsc28gZGVzaXJhYmxlLg0KPj4+DQo+Pj4gSWYgbm90 IGNlcnQgY2hhaW5zLCB0aGVuIHdoYXQ/DQo+Pj4NCj4+PiBMTA0KPj4+DQo+Pj4NCj4+PiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4gRnJvbTogSmltIFNjaGFh ZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+ DQo+Pj4gU2VudDogVGh1cnNkYXksIE5vdmVtYmVyIDMsIDIwMTYgMToxNSBQTQ0KPj4+IFRvOiBM dW5kYmxhZGUsIExhdXJlbmNlOyBjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYub3JnPg0K Pj4+IFN1YmplY3Q6IFJFOiBbQ09TRV0gQ2FycnlpbmcgY2VydGlmaWNhdGUgY2hhaW5zIGluIENP U0Ugc2lnbmVkIG1lc3NhZ2VzDQo+Pj4NCj4+PiBEbyB5b3UgaGF2ZSBhIHVzZSBjYXNlIHdoZXJl IHlvdSBhcmUgcGxhbm5pbmcgdG8gdXNlIENPU0UgYW5kIG5lZWQgdG8gY2FycnkNCj4+PiBjZXJ0 IGNoYWlucyBvciBpcyB0aGlzIGp1c3Qgc3BlY3VsYXRpdmU/DQo+Pj4NCj4+PiBKaW0NCj4+Pg0K Pj4+DQo+Pj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+Pj4+IEZyb206IENPU0UgW21h aWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZz5d IE9uIEJlaGFsZiBPZiBMdW5kYmxhZGUsIExhdXJlbmNlDQo+Pj4+IFNlbnQ6IFRodXJzZGF5LCBO b3ZlbWJlciAwMywgMjAxNiAxMjo0MCBQTQ0KPj4+PiBUbzogY29zZUBpZXRmLm9yZzxtYWlsdG86 Y29zZUBpZXRmLm9yZz4NCj4+Pj4gU3ViamVjdDogW0NPU0VdIENhcnJ5aW5nIGNlcnRpZmljYXRl IGNoYWlucyBpbiBDT1NFIHNpZ25lZCBtZXNzYWdlcw0KPj4+Pg0KPj4+PiBGb3IgbWFueSB1c2Ug Y2FzZXMgaXQgaXMgYSByZXF1aXJlbWVudCB0aGF0IGEgc2lnbmVkIG1lc3NhZ2UgY2FycnkgbGVh Zg0KPj4+IGFuZA0KPj4+PiBpbnRlcm1lZGlhdGUgKFguNTA5KSBjZXJ0cyB0aGF0IHdvdWxkIGJl IHVzZWQgdG8gdmVyaWZ5IGFnYWluc3QgYSB0cnVzdGVkDQo+Pj4gcm9vdC4NCj4+Pj4NCj4+Pj4g SXQgc2VlbXMgbGlrZSB0aGUgd2F5IHRvIGRvIHRoaXMgaXMgd2l0aCBhIENPU0VfS2V5LCBidXQg dGhlcmUgYXJlbid0IGFueQ0KPj4+PiBleGFtcGxlcyBvciBkZXRhaWxzLiAgSXMgdGhpcyByaWdo dD8NCj4+Pj4NCj4+Pj4gVGh4DQo+Pj4+DQo+Pj4+IExMDQo+Pj4+DQotLQ0KICAgICAgIERlcmVr IEF0a2lucyAgICAgICAgICAgICAgICAgNjE3LTYyMy0zNzQ1PHRlbDo2MTctNjIzLTM3NDU+DQog ICAgICAgZGVyZWtAaWh0ZnAuY29tPG1haWx0bzpkZXJla0BpaHRmcC5jb20+ICAgICAgICAgICAg IHd3dy5paHRmcC5jb208aHR0cDovL3d3dy5paHRmcC5jb20+DQogICAgICAgQ29tcHV0ZXIgYW5k IEludGVybmV0IFNlY3VyaXR5IENvbnN1bHRhbnQNCg0KX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCkNPU0UgbWFpbGluZyBsaXN0DQpDT1NFQGlldGYub3Jn PG1haWx0bzpDT1NFQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9jb3NlDQoNCg== --_000_D447A2FD6C411goranselanderericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj48YnI+DQo8L2Rp dj4NCjxzcGFuIGlkPSJPTEtfU1JDX0JPRFlfU0VDVElPTiI+DQo8ZGl2IHN0eWxlPSJmb250LWZh bWlseTpDYWxpYnJpOyBmb250LXNpemU6MTFwdDsgdGV4dC1hbGlnbjpsZWZ0OyBjb2xvcjpibGFj azsgQk9SREVSLUJPVFRPTTogbWVkaXVtIG5vbmU7IEJPUkRFUi1MRUZUOiBtZWRpdW0gbm9uZTsg UEFERElORy1CT1RUT006IDBpbjsgUEFERElORy1MRUZUOiAwaW47IFBBRERJTkctUklHSFQ6IDBp bjsgQk9SREVSLVRPUDogI2I1YzRkZiAxcHQgc29saWQ7IEJPUkRFUi1SSUdIVDogbWVkaXVtIG5v bmU7IFBBRERJTkctVE9QOiAzcHQiPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPkZy b206IDwvc3Bhbj5DT1NFICZsdDs8YSBocmVmPSJtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3Jn Ij5jb3NlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyBvbiBiZWhhbGYgb2YgSmltIFNjaGFhZCAm bHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20iPmlldGZAYXVndXN0Y2Vs bGFycy5jb208L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5EYXRl OiA8L3NwYW4+RnJpZGF5IDQgTm92ZW1iZXIgMjAxNiBhdCAxOTo0ODxicj4NCjxzcGFuIHN0eWxl PSJmb250LXdlaWdodDpib2xkIj5UbzogPC9zcGFuPiZxdW90OydMdW5kYmxhZGUsIExhdXJlbmNl JyZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxsdW5kYmxhQHF0aS5xdWFsY29tbS5jb20iPmxs dW5kYmxhQHF0aS5xdWFsY29tbS5jb208L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdl aWdodDpib2xkIj5DYzogPC9zcGFuPidTYW11ZWwgRXJkdG1hbicgJmx0OzxhIGhyZWY9Im1haWx0 bzpzYW11ZWxAZXJkdG1hbi5zZSI+c2FtdWVsQGVyZHRtYW4uc2U8L2E+Jmd0OywgJnF1b3Q7PGEg aHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciPmNvc2VAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8 YSBocmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0K PHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlN1YmplY3Q6IDwvc3Bhbj5SZTogW0NPU0Vd IENhcnJ5aW5nIGNlcnRpZmljYXRlIGNoYWlucyBpbiBDT1NFIHNpZ25lZCBtZXNzYWdlczxicj4N CjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VUTE9PS19B VFRSSUJVVElPTl9CTE9DS1FVT1RFIiBzdHlsZT0iQk9SREVSLUxFRlQ6ICNiNWM0ZGYgNSBzb2xp ZDsgUEFERElORzowIDAgMCA1OyBNQVJHSU46MCAwIDAgNTsiPg0KPGRpdiB4bWxuczp2PSJ1cm46 c2NoZW1hcy1taWNyb3NvZnQtY29tOnZtbCIgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0 LWNvbTpvZmZpY2U6b2ZmaWNlIiB4bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9m ZmljZTp3b3JkIiB4bWxuczptPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8y MDA0LzEyL29tbWwiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxt ZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVk IG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQg NiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6 MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9y bWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4t Ym90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMg TmV3IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7 fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlv cml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1u YW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6 MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglm b250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30N CnNwYW4uZ21haWwtDQoJe21zby1zdHlsZS1uYW1lOmdtYWlsLTt9DQpzcGFuLmdtYWlsLWhvZW56 Yg0KCXttc28tc3R5bGUtbmFtZTpnbWFpbC1ob2VuemI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5 bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGlu IDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu ZGlmXS0tPg0KPGRpdiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8 ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5EdXJpbmcgdGhlIGRldmVsb3BtZW50IG9mIHRoZSBDT1NFIGRvY3VtZW50LCB0aGUg Y3JlYXRpb24gb2YgYXR0cmlidXRlcyB0byBjYXJyeSBYLjUwOSBpdGVtcyB3YXMgZGlzY3Vzc2Vk LiZuYnNwOyBHaXZlbiB0aGUgc2V0IG9mIHVzZSBjYXNlcyB0aGF0IHdlIGhhZCBvbiBvdXIgcmFk YXIgYXQgdGhlIHRpbWUNCiBpdCB3YXMgZGVjaWRlZCB0aGF0IHdlIGRpZCBub3QgbmVlZCB0aGlz IGF0IHRoZSB0aW1lLiZuYnNwOyBUaGVzZSB3ZXJlIGFsbCBjYXNlcyB3aGVyZSB3ZSB3ZXJlIGxv b2tpbmcgYXQgY29uc3RyYWluZWQgZGV2aWNlcyB3aGVyZSB0aGUgYWRkaXRpb24gb2YgdGhlIGNl cnRpZmljYXRlIHRvIG1hbnkgbWVzc2FnZXMgd2FzIGdvaW5nIHRvIGJlIGEgcHJvYmxlbS4mbmJz cDsgSW4gdGhpcyBlbnZpcm9ubWVudCwgaWYgeW91IHdlcmUgdXNpbmcgWC41MDkgdGhlbiB5b3UN CiB3b3VsZCBwcmUtZGlzdHJpYnV0ZSB0aGUgY2VydGlmaWNhdGVzIHJhdGhlciB0aGFuIGNhcnJ5 aW5nIHRoZW0gaW4gYSBtZXNzYWdlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5JZiB3ZSBjYW4gaWRlbnRpZnkg YSBudW1iZXIgb2YgY2FzZXMgd2hlcmUgd2Ugd291bGQgYmUgdXNpbmcgWC41MDkgY2VydGlmaWNh dGVzIHRoZW4gSSB3b3VsZCBiZSB3aWxsaW5nIHRvIGNyZWF0ZSBhIGRvY3VtZW50IHdoaWNoIHdv dWxkIGRlZmluZSB0aGUgZmllbGRzIGFuZCBob3cgdG8gdXNlIHRoZW0uJm5ic3A7DQogSXQgd291 bGQgYXBwZWFyIHRoYXQgd2UgbWlnaHQgaGF2ZSBvbmUgY2FzZSwgZG8gcGVvcGxlIGtub3cgb2Yg bW9yZT88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8L3NwYW4+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5UaGlzIHdvcmsgY291 bGQgYmUgdmVyeSB1c2VmdWwuICZuYnNwOzwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+ T25lIHVzZSBjYXNlIGlzIElvVCBkZXZpY2UgYm9vdHN0cmFwcGluZy9vbi1ib2FyZGluZyBpbiBh IG5ldHdvcmsgdXNpbmcgdmVuZG9yIGlzc3VlZCBwdWJsaWMga2V5IGNlcnRpZmljYXRlcyBpbnN0 YWxsZWQgZHVyaW5nIG1hbnVmYWN0dXJpbmcgYW5kIHVzZWQgZHVyaW5nIGRlcGxveW1lbnQgdG8g YXV0aGVudGljYXRlIGNlcnRpZmljYXRlIGVucm9sbWVudCBvZiBvcGVyYXRpb25hbCBjZXJ0aWZp Y2F0ZXMuIFRoZXJlIGlzIHJlY2VudCB3b3JrDQogdXNpbmcgSUVFRSA4MDIuMUFSIHdoaWNoIGlz IGJhc2VkIG9uIFguNTA5LCBidXQgbWF5YmUgb3RoZXIgZm9ybWF0cyBhcmUgbW9yZSByZWxldmFu dC48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkluIGFueSBjYXNlLCBkZWZpbmluZyBj ZXJ0aWZpY2F0ZSBlbnJvbG1lbnQgdXNpbmcgQ09TRSB3b3VsZCBtYWtlIG11Y2ggbW9yZSBzZW5z ZSBmb3IgY29uc3RyYWluZWQgZGV2aWNlcyBjb21wYXJlZCB0byB0aGUgcHJvcG9zYWwgdG8gdXNl IENNUy4gVGhlIGVucm9sbWVudCBwcm90b2NvbCBjYW4gYmUgYXV0aGVudGljYXRlZCB1c2luZyB0 cmFuc3BvcnQgbGF5ZXIgc2VjdXJpdHkgb3IgYXBwbGljYXRpb24gbGF5ZXIgc2VjdXJpdHkuPC9k aXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxzcGFuIGlkPSJPTEtf U1JDX0JPRFlfU0VDVElPTiI+DQo8YmxvY2txdW90ZSBpZD0iTUFDX09VVExPT0tfQVRUUklCVVRJ T05fQkxPQ0tRVU9URSIgc3R5bGU9IkJPUkRFUi1MRUZUOiAjYjVjNGRmIDUgc29saWQ7IFBBRERJ Tkc6MCAwIDAgNTsgTUFSR0lOOjAgMCAwIDU7Ij4NCjxkaXYgeG1sbnM6dj0idXJuOnNjaGVtYXMt bWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29y ZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9v bW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvVFIvUkVDLWh0bWw0MCI+DQo8ZGl2IGxhbmc9 IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0 aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ SSBkb27igJl0IHRoaW5rIHdlIGhhdmUgYSBzdHJvbmcgY2FzZSBmb3IgZG9pbmcgYSBuZXcgY2Vy dGlmaWNhdGUgZm9ybWF0IGF0IHRoaXMgdGltZSwgaG93ZXZlciBpZiBwZW9wbGUgdGhpbmsgdGhl cmUgaXMgZW5vdWdoIG9mIGEgbmVlZCB0aGVuIHRoZSBuZXh0IHN0ZXAgd291bGQgYmUgZm9yIHRo ZW0NCiB0byBvcmdhbml6ZSBhIEJPRiB0byBzZWUgaWYgdGhleSBjYW4gYXR0cmFjdCBlbm91Z2gg YXR0ZW50aW9uLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvc3Bhbj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8 ZGl2PldpdGhvdXQgZXhjbHVkaW5nIHRoaXMgY2FzZSwgaXQgd291bGQgYmUgZ29vZCB0byBleGFt aW5lIHRoZSBmZWFzaWJpbGl0eSBvZiB1c2luZyB0aGUgZXhpc3RpbmcgY2FuZGlkYXRlcyBpbiBj b25zdHJhaW5lZCBkZXZpY2VzIGJlZm9yZSBnb2luZyBmb3J3YXJkIHdpdGggdGhhdC48L2Rpdj4N CjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj5Hw7ZyYW48L2Rpdj4NCjxkaXY+PGJyPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8c3BhbiBpZD0iT0xLX1NSQ19CT0RZ X1NFQ1RJT04iPg0KPGJsb2NrcXVvdGUgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9OX0JMT0NL UVVPVEUiIHN0eWxlPSJCT1JERVItTEVGVDogI2I1YzRkZiA1IHNvbGlkOyBQQURESU5HOjAgMCAw IDU7IE1BUkdJTjowIDAgMCA1OyI+DQo8ZGl2IHhtbG5zOnY9InVybjpzY2hlbWFzLW1pY3Jvc29m dC1jb206dm1sIiB4bWxuczpvPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZp Y2UiIHhtbG5zOnc9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOndvcmQiIHhtbG5z Om09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1s bnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg0KPGRpdiBsYW5nPSJFTi1VUyIg bGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5KaW08bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4w cHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBTYW11ZWwg RXJkdG1hbiBbPGEgaHJlZj0ibWFpbHRvOnNhbXVlbEBlcmR0bWFuLnNlIj5tYWlsdG86c2FtdWVs QGVyZHRtYW4uc2U8L2E+XQ0KPGJyPg0KPGI+U2VudDo8L2I+IEZyaWRheSwgTm92ZW1iZXIgMDQs IDIwMTYgMTA6NDkgQU08YnI+DQo8Yj5Ubzo8L2I+IERlcmVrIEF0a2lucyAmbHQ7PGEgaHJlZj0i bWFpbHRvOmRlcmVrQGlodGZwLmNvbSI+ZGVyZWtAaWh0ZnAuY29tPC9hPiZndDs8YnI+DQo8Yj5D Yzo8L2I+IEx1bmRibGFkZSwgTGF1cmVuY2UgJmx0OzxhIGhyZWY9Im1haWx0bzpsbHVuZGJsYUBx dGkucXVhbGNvbW0uY29tIj5sbHVuZGJsYUBxdGkucXVhbGNvbW0uY29tPC9hPiZndDs7IEppbSBT Y2hhYWQgJmx0OzxhIGhyZWY9Im1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tIj5pZXRmQGF1 Z3VzdGNlbGxhcnMuY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyI+ Y29zZUBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtDT1NFXSBDYXJyeWlu ZyBjZXJ0aWZpY2F0ZSBjaGFpbnMgaW4gQ09TRSBzaWduZWQgbWVzc2FnZXM8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+SXQgbWlnaHQgYWJzb2x1 dGVseSBmZWVsIHN0cmFuZ2UgdG8gaGF2ZSBjZXJ0aWZpY2F0ZSBjaGFpbnMgaW4gQ09TRSBzaW5j ZSB0aGF0IHdvdWxkIGJlY29tZSB0aGUgbGFyZ2VyIHBhcnQgb2YgdGhlIG1lc3NhZ2UuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhvd2V2ZXIgSSB0aGluayBM YXVyZW5jZSBoYXMgYSBwb2ludCBpbiB0aGUgZmFjdCB0aGF0IEl0IGlzIG1vcmUgY29udmVuaWVu dCB0byB1c2UgQ0JPUiB0aGVuIEFTTjEgZXZlbiBpZiB5b3UgZm9ybWFsbHkgaGF2ZSB0aGUgYmFu ZHdpZHRoIGFuZCBjYXBhY2l0eSB0byBwcm9jZXNzIEFTTjEuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIu MHB0Ij48YnI+DQpUaGVuIHRoZXJlIGlzIHRoZSBjb25uZWN0aW9uIHRvIGV4aXN0aW5nIHRydXN0 IGluZnJhc3RydWN0dXJlIG1hbnkgb3JnYW5pemF0aW9ucyBoYXZlIHdlbGwgZnVuY3Rpb25pbmcg UEtJcyBzZXR1cHMgYW5kIHdhbnRzIHRvIHVzZSB0aGVtLjxicj4NCkFyZSB5b3Ugc2F5aW5nIHRo YXQgd2Ugc2hvdWxkIG9ubHkgdXNlIENPU0Ugd2hlbiBidWlsZGluZyBjb21wbGV0ZWx5IG5ldyBz eXN0ZW1zIHdpdGggbm8gaW50ZXJhY3Rpb24gd2l0aCBleGlzdGluZyBpbmZyYXN0cnVjdHVyZT8N Cjxicj4NCkkgdGhpbmsgaXQgd291bGQgYmUgZ29vZCBmb3IgYWRvcHRpb24gaWYgd2UgY291bGQg c3VwcG9ydCB0aGlzIHVzZS1jYXNlLiA8YnI+DQpJIGNvdWxkIGFsc28gaW1hZ2luZSBDQXMgYWRv cHRpbmcgbmV3IGNlcnRpZmljYXRlIGZvcm1hdHMgYmFzZWQgb24gQ0JPUiBhbmQgQ09TRSBpbiB0 aGUgZnV0dXJlIGFuZCBpZiB0aGF0IGhhcHBlbnMgYSB0cmFuc2l0aW9uIHdvdWxkIGJlIG11Y2gg ZWFzaWVyIGlmIHRoZXkgaGFkIHRoZSBvcHRpb24gdG8gc3RhcnQgdXNpbmcgQ09TRSB0b2RheS48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklmIHRo aXMgaXMgYSBiaWcgbm8tbm8gSSBndWVzcyBKT1NFIHdvdWxkIGJlIHRoZSBvcHRpb24uPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi8vU2FtdWVs PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+ DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5PbiBGcmksIE5vdiA0LCAyMDE2IGF0IDU6MzYgUE0sIERlcmVrIEF0a2lucyAm bHQ7PGEgaHJlZj0ibWFpbHRvOmRlcmVrQGlodGZwLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmRlcmVr QGlodGZwLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzow aW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkhpLDxicj4NCjxicj4NCjxzcGFuIGNsYXNzPSJnbWFpbC0iPiZx dW90O0x1bmRibGFkZSwgTGF1cmVuY2UmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpsbHVuZGJs YUBxdGkucXVhbGNvbW0uY29tIj5sbHVuZGJsYUBxdGkucXVhbGNvbW0uY29tPC9hPiZndDsgd3Jp dGVzOjwvc3Bhbj48YnI+DQo8YnI+DQo8c3BhbiBjbGFzcz0iZ21haWwtIj4mZ3Q7IDEpIEEgQ0JP Ui9DT1NFIGltcGxlbWVudGF0aW9uIGlzIG11Y2ggY2xlYW5lciBhbmQgbmljZXIgdGhhbiBhPC9z cGFuPjxicj4NCjxzcGFuIGNsYXNzPSJnbWFpbC0iPiZndDsgQVNOLjEvQ01TIGltcGxlbWVudGF0 aW9uLiBJdCBpcyBsZXNzIHdvcmsgdG8gaW1wbGVtZW50LCBlYXNpZXIgdG88L3NwYW4+PGJyPg0K PHNwYW4gY2xhc3M9ImdtYWlsLSI+Jmd0OyBtYWludGFpbiwgdGVzdCBhbmQgc28gb24uPC9zcGFu Pjxicj4NCjxicj4NClllcy4uLiZuYnNwOyBUaGlzIGlzIHBhcnQgb2YgbXkgcG9pbnQuPGJyPg0K PGJyPg0KPHNwYW4gY2xhc3M9ImdtYWlsLSI+Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7IEFsc28g aXTigJlzIG5vdCBqdXN0IGFib3V0IHRoZSBkYXRhIHNpemUuPC9zcGFuPjxicj4NCjxzcGFuIGNs YXNzPSJnbWFpbC0iPiZndDsgV291bGQgZ3Vlc3MgdGhhdCB0aGUgY29kZSBzaXplIGRpZmZlcmVu Y2UgYmV0d2VlbiBpbXBsZW1lbnRhdGlvbnMgb2Y8L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9Imdt YWlsLSI+Jmd0OyBDQk9SL0NPU0UgYW5kIEFTTi4xL0NNUyBpcyBsYXJnZXIgdGhhbiBhIGNlcnQu Jm5ic3A7IEFsc28geW91IGNhbiBhZGQgdGhlPC9zcGFuPjxicj4NCjxzcGFuIGNsYXNzPSJnbWFp bC0iPiZndDsgWC41MDkgY2VydCB0byB0aGUgcHJvdG9jb2wgbWVzc2FnZXMgb3V0c2lkZSB0aGUg Y29uc3RyYWluZWQ8L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9ImdtYWlsLSI+Jmd0OyBlbnZpcm9u bWVudC48L3NwYW4+PGJyPg0KPGJyPg0KU3VyZSwgaXQncyBub3QganVzdCBhYm91dCBkYXRhIHNp emUsIGl0J3MgYWxzbyBhYm91dCBjb2RlIHNpemUuJm5ic3A7IEJ1dCBpZjxicj4NCnlvdSdyZSB1 c2luZyBDT1NFIHRoZW4gcHJlc3VtYWJseSBzaXplIG1hdHRlcnMuPGJyPg0KPGJyPg0KPHNwYW4g Y2xhc3M9ImdtYWlsLSI+Jmd0OyBQZXJzb25hbGx5LCBJIHdhcyBob3BpbmcgQ0JPUi9DT1NFIHdv dWxkIHJlcGxhY2UgQVNOLjEvQ01TIGluIHRoZSB2ZXJ5PC9zcGFuPjxicj4NCjxzcGFuIGNsYXNz PSJnbWFpbC0iPiZndDsgbG9uZyB0ZXJtLiA6LSk8L3NwYW4+PGJyPg0KPGJyPg0KV2h5IHdhaXQ/ PGJyPg0KPGJyPg0KPHNwYW4gY2xhc3M9ImdtYWlsLSI+Jmd0OyAyKSBTYW1lIHF1ZXN0aW9uIGFz IGJlZm9yZS4gSWYgbm90IGNlcnQgY2hhaW5zLCB0aGVuIHdoYXQ/Jm5ic3A7IFByZXR0eTwvc3Bh bj48YnI+DQo8c3BhbiBjbGFzcz0iZ21haWwtIj4mZ3Q7IHN1cmUgdGhlIDMtcGFydHkgdHJ1c3Qg aW50cm9kdWN0aW9uIHdpdGggYSB3ZWxsLWtub3duIHJvb3QgY2VydCBpcyBhPC9zcGFuPjxicj4N CjxzcGFuIGNsYXNzPSJnbWFpbC0iPiZndDsgZnVuZGFtZW50YWwgbW9kZWwgdGhhdCBDT1NFIHNo b3VsZCBzdXBwb3J0Ljwvc3Bhbj48YnI+DQo8YnI+DQpUaGVyZSBpcyBub3RoaW5nIHdyb25nIHdp dGggY2VydCBjaGFpbnMgcGVyLXNlLCBidXQgSSB3b3VsZCBhcmd1ZSBYLjUwOTxicj4NCmlzIHRo ZSB3cm9uZyBzb2x1dGlvbiBmb3IgQ09TRS48YnI+DQo8YnI+DQomZ3Q7IExMPGJyPg0KPHNwYW4g c3R5bGU9ImNvbG9yOiM4ODg4ODgiPjxicj4NCjxzcGFuIGNsYXNzPSJnbWFpbC1ob2VuemIiPi1k ZXJlazwvc3Bhbj48L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KJmd0Ozxicj4N CiZndDs8YnI+DQomZ3Q7IE9uIE5vdiA0LCAyMDE2LCBhdCA3OjIzIEFNLCBEZXJlayBBdGtpbnMg Jmx0OzxhIGhyZWY9Im1haWx0bzpkZXJla0BpaHRmcC5jb20iPmRlcmVrQGlodGZwLmNvbTwvYT4m Z3Q7IHdyb3RlOjxicj4NCiZndDs8YnI+DQomZ3Q7Jmd0OyBJZiB5b3VyIGVudmlyb25tZW50IGlz IHNvIGNvbnN0cmFpbmVkIHRoYXQgeW91IHdhbnQgdG8gdXNlIENPU0UsIHdoeTxicj4NCiZndDsm Z3Q7IHdvdWxkIHlvdSBkZWNpZGUgb24gWC41MDkgYXMgeW91ciBjZXJ0aWZpY2F0ZSBmb3JtYXQ/ PyZuYnNwOyBZb3VyIGNlcnQgY2hhaW48YnI+DQomZ3Q7Jmd0OyB3b3VsZCBsaWtlbHkgYmUgbGFy Z2VyIHRoYW4geW91ciBkYXRhIHBheWxvYWQhITxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDsg LWRlcmVrPGJyPg0KJmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyAmcXVvdDtMdW5kYmxhZGUsIExhdXJl bmNlJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86bGx1bmRibGFAcXRpLnF1YWxjb21tLmNvbSI+ bGx1bmRibGFAcXRpLnF1YWxjb21tLmNvbTwvYT4mZ3Q7IHdyaXRlczo8YnI+DQomZ3Q7Jmd0Ozxi cj4NCiZndDsmZ3Q7Jmd0OyBZZXMsIGhhdmUgYSB1c2UgY2FzZSB3aGVyZSBJICp0aGluayogSSBu ZWVkIHRvIGNhcnJ5IGNlcnQgY2hhaW5zIHdpdGg8YnI+DQomZ3Q7Jmd0OyZndDsgYSBzaWduZWQg bWVzc2FnZS4mbmJzcDsgSSB3YW50IHRvIHNpZ24gc29tZXRoaW5nIGluIG9uZSBwbGFjZSBhbmQg SSB3YW50PGJyPg0KJmd0OyZndDsmZ3Q7IHNvbWVvbmUgZmFyIGF3YXkgdG8gYmUgYWJsZSB0byB2 ZXJpZnkgaXQgYmFzZWQgb24gYSB0cnVzdGVkIGEgcm9vdDxicj4NCiZndDsmZ3Q7Jmd0OyBrZXku Jm5ic3A7IENvbXBhdGliaWxpdHkgd2l0aCBleHRhbnQgYW5kIHZhcmlvdXMgY2VydCBtYW5hZ2Vt ZW50IFNXIGFuZDxicj4NCiZndDsmZ3Q7Jmd0OyBzZXJ2aWNlcyBpcyBhbHNvIGRlc2lyYWJsZS48 YnI+DQomZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZndDsgSWYgbm90IGNlcnQgY2hhaW5zLCB0 aGVuIHdoYXQ/PGJyPg0KJmd0OyZndDsmZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7IExMPGJyPg0KJmd0 OyZndDsmZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQomZ3Q7Jmd0OyZndDsgRnJvbTogSmlt IFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20iPmlldGZA YXVndXN0Y2VsbGFycy5jb208L2E+Jmd0Ozxicj4NCiZndDsmZ3Q7Jmd0OyBTZW50OiBUaHVyc2Rh eSwgTm92ZW1iZXIgMywgMjAxNiAxOjE1IFBNPGJyPg0KJmd0OyZndDsmZ3Q7IFRvOiBMdW5kYmxh ZGUsIExhdXJlbmNlOyA8YSBocmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9y ZzwvYT48YnI+DQomZ3Q7Jmd0OyZndDsgU3ViamVjdDogUkU6IFtDT1NFXSBDYXJyeWluZyBjZXJ0 aWZpY2F0ZSBjaGFpbnMgaW4gQ09TRSBzaWduZWQgbWVzc2FnZXM8YnI+DQomZ3Q7Jmd0OyZndDs8 YnI+DQomZ3Q7Jmd0OyZndDsgRG8geW91IGhhdmUgYSB1c2UgY2FzZSB3aGVyZSB5b3UgYXJlIHBs YW5uaW5nIHRvIHVzZSBDT1NFIGFuZCBuZWVkIHRvIGNhcnJ5PGJyPg0KJmd0OyZndDsmZ3Q7IGNl cnQgY2hhaW5zIG9yIGlzIHRoaXMganVzdCBzcGVjdWxhdGl2ZT88YnI+DQomZ3Q7Jmd0OyZndDs8 YnI+DQomZ3Q7Jmd0OyZndDsgSmltPGJyPg0KJmd0OyZndDsmZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7 PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTxicj4NCiZn dDsmZ3Q7Jmd0OyZndDsgRnJvbTogQ09TRSBbbWFpbHRvOjxhIGhyZWY9Im1haWx0bzpjb3NlLWJv dW5jZXNAaWV0Zi5vcmciPmNvc2UtYm91bmNlc0BpZXRmLm9yZzwvYT5dIE9uIEJlaGFsZiBPZiBM dW5kYmxhZGUsIExhdXJlbmNlPGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyBTZW50OiBUaHVyc2RheSwg Tm92ZW1iZXIgMDMsIDIwMTYgMTI6NDAgUE08YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7IFRvOiA8YSBo cmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9yZzwvYT48YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7IFN1YmplY3Q6IFtDT1NFXSBDYXJyeWluZyBjZXJ0aWZpY2F0ZSBjaGFpbnMgaW4g Q09TRSBzaWduZWQgbWVzc2FnZXM8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OyBGb3IgbWFueSB1c2UgY2FzZXMgaXQgaXMgYSByZXF1aXJlbWVudCB0aGF0IGEgc2ln bmVkIG1lc3NhZ2UgY2FycnkgbGVhZjxicj4NCiZndDsmZ3Q7Jmd0OyBhbmQ8YnI+DQomZ3Q7Jmd0 OyZndDsmZ3Q7IGludGVybWVkaWF0ZSAoWC41MDkpIGNlcnRzIHRoYXQgd291bGQgYmUgdXNlZCB0 byB2ZXJpZnkgYWdhaW5zdCBhIHRydXN0ZWQ8YnI+DQomZ3Q7Jmd0OyZndDsgcm9vdC48YnI+DQom Z3Q7Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0OyZndDsmZ3Q7Jmd0OyBJdCBzZWVtcyBsaWtlIHRoZSB3 YXkgdG8gZG8gdGhpcyBpcyB3aXRoIGEgQ09TRV9LZXksIGJ1dCB0aGVyZSBhcmVuJ3QgYW55PGJy Pg0KJmd0OyZndDsmZ3Q7Jmd0OyBleGFtcGxlcyBvciBkZXRhaWxzLiZuYnNwOyBJcyB0aGlzIHJp Z2h0Pzxicj4NCiZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7IFRoeDxicj4N CiZndDsmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZndDsmZ3Q7IExMPGJyPg0KJmd0OyZndDsm Z3Q7Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+LS08YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtEZXJl ayBBdGtpbnMmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOzxhIGhyZWY9InRlbDo2MTctNjIzLTM3NDUiPjYxNy02MjMtMzc0NTwvYT48 YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8YSBocmVmPSJtYWlsdG86ZGVyZWtAaWh0 ZnAuY29tIj5kZXJla0BpaHRmcC5jb208L2E+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cDovL3d3dy5paHRmcC5jb20iIHRhcmdldD0i X2JsYW5rIj53d3cuaWh0ZnAuY29tPC9hPjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw O0NvbXB1dGVyIGFuZCBJbnRlcm5ldCBTZWN1cml0eSBDb25zdWx0YW50PGJyPg0KPGJyPg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpDT1NFIG1h aWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpDT1NFQGlldGYub3JnIj5DT1NFQGlldGYu b3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vY29zZSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vY29zZTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjwvc3Bhbj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_D447A2FD6C411goranselanderericssoncom_-- From nobody Wed Nov 9 12:22:52 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3184412953D for ; Wed, 9 Nov 2016 12:22:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.019 X-Spam-Level: X-Spam-Status: No, score=-16.019 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.497, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jifqzd-ZhjJh for ; Wed, 9 Nov 2016 12:22:50 -0800 (PST) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF3CE1296AD for ; Wed, 9 Nov 2016 12:22:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1783; q=dns/txt; s=iport; t=1478722969; x=1479932569; h=to:from:subject:message-id:date:mime-version; bh=cXrS66sv2zGK+wSkJNY+ODRpXxkV7UBrjkEXaJ7llFc=; b=VmA2tbbFxOPHXGbUjk/2L4g8v7fKH6vZTQhiI1uvj4Ef+/Uryfh0Cckh J4kJfB+WI0UK0n5sK7RDH3trNJq4kpc3K0J4/RrpOppC9oa2z7PAY6Ur0 oxmYmdeT1ek9B6tIpH0HYzjcTP7kCVVjO/k1BMLcbj26/1SR2b4VIJekX Y=; X-Files: signature.asc : 496 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DaAgBEhSNY/4oNJK1DGhwBAQQBAQoBA?= =?us-ascii?q?YMvAQEBAQEfWCxTjT2VZQEBAQUBBYETAZJKgg+CCCuIDj8UAQIBAQEBAQEBYii?= =?us-ascii?q?FC4EzAmwIAQGIWA4toDWPfIJAiz4LAQEBFQkFhXSCRwiHaYIAOIJcBYElAY4ti?= =?us-ascii?q?lwCg02BeosIAoFWAYgihh0CkT8eN2NchQxSAYdmAQEB?= X-IronPort-AV: E=Sophos;i="5.31,615,1473120000"; d="asc'?scan'208";a="346581506" Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 09 Nov 2016 20:22:37 +0000 Received: from [64.101.72.64] ([64.101.72.64]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id uA9KMbVp011042 for ; Wed, 9 Nov 2016 20:22:37 GMT To: cose@ietf.org From: Matt Miller Message-ID: <39640835-dda0-466d-b531-2d0ae46c827b@cisco.com> Date: Wed, 9 Nov 2016 13:22:37 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="edEnFflGeliLNXKtRvRFSPKRbOR3JdfQi" Archived-At: Subject: [COSE] COSE / JOSE at IETF 97 Hackathon X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Nov 2016 20:22:51 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --edEnFflGeliLNXKtRvRFSPKRbOR3JdfQi Content-Type: multipart/mixed; boundary="P65Evewdw5nMmh0S7fsu0t2sQRRX4lsKI"; protected-headers="v1" From: Matt Miller To: cose@ietf.org Message-ID: <39640835-dda0-466d-b531-2d0ae46c827b@cisco.com> Subject: COSE / JOSE at IETF 97 Hackathon --P65Evewdw5nMmh0S7fsu0t2sQRRX4lsKI Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello all, Jim and I will be at a table working on various things related to COSE and JOSE. We have a couple of broad goals and projects noted on the [WIKI] we'd like to make progress on. If you're interested in working on some crypto formats, or wanted to learn how to use this stuff, feel free join us. --=20 - m&m Matt Miller Cisco Systems, Inc. [WIKI] - IETF 97 Hackathon Wiki --P65Evewdw5nMmh0S7fsu0t2sQRRX4lsKI-- --edEnFflGeliLNXKtRvRFSPKRbOR3JdfQi Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJYI4WNAAoJEDWi+S0W7cO1DhsIALikOkIm7qsaz2YclavdNJCi Hne1hLsi30hll9Qj/3tA6fTCW1H6wChlC5a0M3G2ZdgOOwVjCFmNN1mNyQH5f1kS mpRRmDWUbUcX+BpCylkmFHduuCYggC+BcHASFzHtJsQCqfVlXrmSvhgJaojJ3Mry bA8ZQHOWByhOdXqOEQG4cnCv6x+f47FNkN7aMYQo8dPDK4qQjYohgtqasqu/iSO0 d9c/p74YTNRadg6Ayb8cmkIKwE6M0DYjxg0QjqzNJ2v4PC8XQkD781icsMs8Sopu JPQhzYD6y+MOJgCatRzotjUg1XQTNGLzmTNMrCND7vIqn9TKHXmFHQ7Lq3EpYjQ= =mzEm -----END PGP SIGNATURE----- --edEnFflGeliLNXKtRvRFSPKRbOR3JdfQi-- From nobody Sat Nov 12 14:35:57 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC7EF129548 for ; Sat, 12 Nov 2016 14:35:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C2792XGbaKgz for ; Sat, 12 Nov 2016 14:35:55 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5319129538 for ; Sat, 12 Nov 2016 14:35:54 -0800 (PST) Received: from hebrews (31.133.148.101) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sat, 12 Nov 2016 14:53:32 -0800 From: Jim Schaad To: =?UTF-8?Q?'G=C3=B6ran_Selander'?= , "'Lundblade, Laurence'" , 'Samuel Erdtman' References: <82DC355C-868C-4B6D-91E7-D10CF8046C93@qti.qualcomm.com> <09e901d2360f$08791cd0$196b5670$@augustcellars.com> <1478218124368.37864@qti.qualcomm.com> <0b3201d236cc$180959e0$481c0da0$@augustcellars.com> In-Reply-To: Date: Sun, 13 Nov 2016 07:35:46 +0900 Message-ID: <039b01d23d35$1e97c6b0$5bc75410$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQJaBTAnN5vIoxTWmJjJR7nc5QoYrQHLSob0AceZqk8B2v7etAK5HbPDA76CCaMB3tPU7wICmuUXAv85u8qfMCmOAA== X-Originating-IP: [31.133.148.101] Archived-At: Cc: cose@ietf.org Subject: Re: [COSE] Carrying certificate chains in COSE signed messages X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Nov 2016 22:35:55 -0000 Looking at starting such a draft, a few questions have occurred to me. * Certificate Identification There are several different ways that certificates have been identified = over time. Some of them are more or less successful depending on if you = are interested in identifying the key or the certificate. - Issuer/Serial Number - is unique as long as one assumes issuers are = unique - assumes certificate can be found independent of the message - Subject Public Key Identifier - identifies the key and not the = certificate, however commonly used in the PKIX world as an identifier - Hash of certificate - uniquely identifies the certificate - assumes = certificate can be found independent of the message. - The certificate - Big in terms of byte count, would normally be part = of a collection as setup below - URL to the certificate - requires a secure URL (https or similar), = potentially with a protocol to return the certificate (how do you do it = with coaps?) and requires a second level of certificate processing to = occur. * Certificate collections - Ordered list of certificates - ala TLS - assumes that a common trust = anchor exists - list may be truncated at any point. - Unordered bag of certificates - ala CMS - may contain extra = certificates (here is my encryption certificate as well), may be missing = certificates - would require an imposed requirement of the user = certificate comes first unless both a collection and an identifier are = present which is the case for CMS - Include/omit trust anchor certificate - helps to determine if a = common one exists, however also allows for the UI problems of trust this = certificate to occur. Jim From nobody Sun Nov 13 10:47:54 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FFE0129455 for ; Sun, 13 Nov 2016 10:47:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.498 X-Spam-Level: X-Spam-Status: No, score=-8.498 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cA2zVlSNymG7 for ; Sun, 13 Nov 2016 10:47:52 -0800 (PST) Received: from wolverine02.qualcomm.com (wolverine02.qualcomm.com [199.106.114.251]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 081C4127058 for ; Sun, 13 Nov 2016 10:47:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1479062871; x=1510598871; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=P7QIrVZ8Q/ZK0n+12H/mnAKGC4kJN/V/5Z8WsKXMUNM=; b=OSl7hx5BI3rlSO47kTSoiGLFZSOaJW9k5GAMcWGg+1N8Zfqvueta7FAZ o7zVBay8FPOPYEaXUu71ug1misTvCVkNEEejBpysDDHi6+jQf8KFv9+Ji mdvLco1eQektin9R+yI3u8YnEZpuO3j1eBDXEYOCc/CSgHY6tSQwmOi9V E=; X-IronPort-AV: E=Sophos;i="5.31,634,1473145200"; d="scan'208";a="335296169" Received: from unknown (HELO Ironmsg04-L.qualcomm.com) ([10.53.140.111]) by wolverine02.qualcomm.com with ESMTP; 13 Nov 2016 10:47:50 -0800 X-IronPort-AV: E=McAfee;i="5700,7163,8348"; a="1237422688" Received: from nasanexm01h.na.qualcomm.com ([10.85.0.34]) by Ironmsg04-L.qualcomm.com with ESMTP/TLS/RC4-SHA; 13 Nov 2016 10:47:50 -0800 Received: from NASANEXM01B.na.qualcomm.com (10.85.0.82) by NASANEXM01H.na.qualcomm.com (10.85.0.34) with Microsoft SMTP Server (TLS) id 15.0.1178.4; Sun, 13 Nov 2016 10:47:49 -0800 Received: from NASANEXM01B.na.qualcomm.com ([10.85.0.82]) by NASANEXM01B.na.qualcomm.com ([10.85.0.82]) with mapi id 15.00.1178.000; Sun, 13 Nov 2016 10:47:49 -0800 From: "Lundblade, Laurence" To: Jim Schaad , =?iso-8859-1?Q?=27G=F6ran_Selander=27?= , 'Samuel Erdtman' Thread-Topic: [COSE] Carrying certificate chains in COSE signed messages Thread-Index: AQHSNgoMAz08VncnwkqYjLhXMFKbJqDIJ1GA///KYOSAAPBxf4AAjJ+A//+YU7aAAIm+gIAAEJ4AgAYcXoCABsZyAIAAvmho Date: Sun, 13 Nov 2016 18:47:48 +0000 Message-ID: <1479062868529.80011@qti.qualcomm.com> References: <82DC355C-868C-4B6D-91E7-D10CF8046C93@qti.qualcomm.com> <09e901d2360f$08791cd0$196b5670$@augustcellars.com> <1478218124368.37864@qti.qualcomm.com> <0b3201d236cc$180959e0$481c0da0$@augustcellars.com> , <039b01d23d35$1e97c6b0$5bc75410$@augustcellars.com> In-Reply-To: <039b01d23d35$1e97c6b0$5bc75410$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [199.106.107.6] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] Carrying certificate chains in COSE signed messages X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Nov 2016 18:47:53 -0000 As a signing format, it seems COSE should accommodate a lot of different op= tions for carrying the certificate collection. The trust anchor UI problem = seems like an application / implementation problem, not a COSE problem. Fo= r that I like the CMS approach.=0A= =0A= However, having the exact chain in the right order to verify the sig certai= nly can make the verification implementation a lot easier. You don't need a= ny code for certificate identification or chain formation at all. I know fi= rst hand that the chain formation code based on matching issuer/serial or s= uch is some work. You might even be able to not have any parent cert ident= ification at all.=0A= =0A= So maybe a data format carrying a bunch of certificates, but with a type in= dicating whether they are an unordered collection or they are the precise o= rdered set to verify the signature?=0A= =0A= The simplest and smallest key identification scheme seems like Subject Publ= ic Key Identifier using a hash of the public key. You don't even need a cry= ptographically strong hash.=0A= =0A= Probably stating the obvious, but one of the reasons for a cert chain is to= improve security on the sign / operations side by having intermediate cert= s that are much less powerful than the root. For example they might be con= strained in time. However I've found that constraints end up being specifi= c to the system and got implemented on private extensions rather than anyth= ing in any standard.=0A= =0A= Last, when the signing is done on a constrained device and the verification= is done on a server, the constrained device may not need to implement anyt= hing using ASN.1. It just has to copy the cert chain into the COSE message.= The cert is just an opaque blob.=0A= =0A= LL=0A= =0A= =0A= =0A= ________________________________________=0A= From: COSE on behalf of Jim Schaad =0A= Sent: Saturday, November 12, 2016 2:35 PM=0A= To: 'G=F6ran Selander'; Lundblade, Laurence; 'Samuel Erdtman'=0A= Cc: cose@ietf.org=0A= Subject: Re: [COSE] Carrying certificate chains in COSE signed messages=0A= =0A= Looking at starting such a draft, a few questions have occurred to me.=0A= =0A= * Certificate Identification=0A= =0A= There are several different ways that certificates have been identified ove= r time. Some of them are more or less successful depending on if you are i= nterested in identifying the key or the certificate.=0A= =0A= - Issuer/Serial Number - is unique as long as one assumes issuers are uniqu= e - assumes certificate can be found independent of the message=0A= - Subject Public Key Identifier - identifies the key and not the certificat= e, however commonly used in the PKIX world as an identifier=0A= - Hash of certificate - uniquely identifies the certificate - assumes certi= ficate can be found independent of the message.=0A= - The certificate - Big in terms of byte count, would normally be part of a= collection as setup below=0A= - URL to the certificate - requires a secure URL (https or similar), potent= ially with a protocol to return the certificate (how do you do it with coap= s?) and requires a second level of certificate processing to occur.=0A= =0A= * Certificate collections=0A= =0A= - Ordered list of certificates - ala TLS - assumes that a common trust anch= or exists - list may be truncated at any point.=0A= - Unordered bag of certificates - ala CMS - may contain extra certificates = (here is my encryption certificate as well), may be missing certificates - = would require an imposed requirement of the user certificate comes first un= less both a collection and an identifier are present which is the case for = CMS=0A= - Include/omit trust anchor certificate - helps to determine if a common o= ne exists, however also allows for the UI problems of trust this certificat= e to occur.=0A= =0A= Jim=0A= =0A= =0A= _______________________________________________=0A= COSE mailing list=0A= COSE@ietf.org=0A= https://www.ietf.org/mailman/listinfo/cose= From nobody Mon Nov 14 18:20:13 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6388C12969A for ; Mon, 14 Nov 2016 18:20:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F6TyM0HJADVG for ; Mon, 14 Nov 2016 18:20:11 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF84A129642 for ; Mon, 14 Nov 2016 18:20:10 -0800 (PST) Received: from hebrews (31.133.133.93) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Mon, 14 Nov 2016 18:37:48 -0800 From: Jim Schaad To: Date: Tue, 15 Nov 2016 11:20:02 +0900 Message-ID: <072a01d23ee6$c7a70e20$56f52a60$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AdI+5V847Ll/o5d/T5uzy9/zKaWQSA== X-Originating-IP: [31.133.133.93] Archived-At: Cc: 'Kathleen Moriarty' , 'Stephen Farrell' Subject: [COSE] Removing the MUST for alg being in the COSE protected bucket X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Nov 2016 02:20:12 -0000 I have been having conversations with the IESG trying to get the last discuss cleared. I have come up with a change to the text that reduces the requirement of the algorithm being required to be in the protected header bucket where it can be protected to a slightly looser requirement. The proposed edits can be found here https://github.com/cose-wg/cose-spec/pull/187. Based on this, I need to know if there are any objections in the working group. I debated making changes to Appendix A, but I think we can get away with just changing the title and leave the text alone. I am unhappy with this change, but I can live with it. Jim From nobody Mon Nov 14 18:26:33 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7F68129698 for ; Mon, 14 Nov 2016 18:26:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FLqOZgL1vrUU for ; Mon, 14 Nov 2016 18:26:30 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9471F1296A3 for ; Mon, 14 Nov 2016 18:26:30 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAF2Px7J004821; Tue, 15 Nov 2016 03:25:59 +0100 (CET) Received: from t2001067c03700128751b4a0ec42bd88d.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:751b:4a0e:c42b:d88d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHrps2NPPz7xjf; Tue, 15 Nov 2016 03:25:56 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\)) From: Carsten Bormann In-Reply-To: <072a01d23ee6$c7a70e20$56f52a60$@augustcellars.com> Date: Tue, 15 Nov 2016 11:25:51 +0900 X-Mao-Original-Outgoing-Id: 500869551.398813-0642ca81dcf3e414b0af17ef0e7201b4 Content-Transfer-Encoding: quoted-printable Message-Id: References: <072a01d23ee6$c7a70e20$56f52a60$@augustcellars.com> To: Jim Schaad X-Mailer: Apple Mail (2.3251) Archived-At: Cc: Kathleen Moriarty , Stephen Farrell , cose@ietf.org Subject: Re: [COSE] Removing the MUST for alg being in the COSE protected bucket X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Nov 2016 02:26:32 -0000 Hi Jim, I believe the new text captures the combined view of the various = interested parties very well. It is harder to test for this new MUST, but it can now be universally = required without weird dispensations. It is also very clear as to what = is actually required. Gr=C3=BC=C3=9Fe, Carsten > On 15 Nov 2016, at 11:20, Jim Schaad wrote: >=20 > I have been having conversations with the IESG trying to get the last > discuss cleared. I have come up with a change to the text that = reduces the > requirement of the algorithm being required to be in the protected = header > bucket where it can be protected to a slightly looser requirement. = The > proposed edits can be found here > https://github.com/cose-wg/cose-spec/pull/187. Based on this, I need = to know > if there are any objections in the working group. >=20 > I debated making changes to Appendix A, but I think we can get away = with > just changing the title and leave the text alone. >=20 > > I am unhappy with this change, but I can live with it. > >=20 > Jim >=20 >=20 >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose >=20 From nobody Mon Nov 14 21:48:56 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B29C91295C3 for ; Mon, 14 Nov 2016 21:48:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rr75PgNqe5Bd for ; Mon, 14 Nov 2016 21:48:52 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BCA9127058 for ; Mon, 14 Nov 2016 21:48:52 -0800 (PST) X-AuditID: c1b4fb30-dc07098000007ca6-86-582aa1c2d3e8 Received: from ESESSHC009.ericsson.se (Unknown_Domain [153.88.183.45]) by (Symantec Mail Security) with SMTP id 3B.F2.31910.2C1AA285; Tue, 15 Nov 2016 06:48:50 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC009.ericsson.se ([153.88.183.45]) with mapi id 14.03.0319.002; Tue, 15 Nov 2016 06:45:11 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Carsten Bormann , Jim Schaad Thread-Topic: [COSE] Removing the MUST for alg being in the COSE protected bucket Thread-Index: AdI+5V847Ll/o5d/T5uzy9/zKaWQSP//86iAgABIdAA= Date: Tue, 15 Nov 2016 05:45:11 +0000 Message-ID: References: <072a01d23ee6$c7a70e20$56f52a60$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.9.160926 x-originating-ip: [153.88.183.150] Content-Type: text/plain; charset="utf-8" Content-ID: <878FD513FDBFC741A26B0226F5932C88@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrOIsWRmVeSWpSXmKPExsUyM2K7ru6hhVoRBj8bzSyOTLnLajFt61RW i9XTv7NZNOzMt5i+9xq7A6vHxjnT2TzWdl9l89g56y67x5IlP5k8pi3KDGCN4rJJSc3JLEst 0rdL4MrY87qVueCKQMWG/2uZGxjnCHQxcnJICJhI3Pxzkb2LkYtDSGAdo8TVNbNYIZwljBKL Pv9iA6liE3CReNDwiKmLkYNDRMBdom+LMUgNs0AHo8Srxt/MIHFhgSCJLfdkQcpFBIIlvtz6 wAJhW0nsv7CdGcRmEVCV+Lx/OiOIzStgIXF91SowW0igQOLbgxdgqzgFrCXWnLvOBGIzCohJ fD+1BsxmFhCXuPVkPhPE0QISS/acZ4awRSVePv7HCnKCqICexJr7YRBhJYkV2y8xgoSZBTQl 1u/ShzCtJbq/sEAMVJSY0v2QHeIYQYmTM5+wTGAUn4Vk1yyE5lkIzbOQNM9C0ryAkXUVo2hx anFSbrqRkV5qUWZycXF+nl5easkmRmB0Htzy22AH48vnjocYBTgYlXh4Cy5qRgixJpYVV+Ye YpTgYFYS4b3QpRUhxJuSWFmVWpQfX1Sak1p8iFGag0VJnNds5f1wIYH0xJLU7NTUgtQimCwT B6dUA6NC//xHNpVMwiuX39oY+VOOQX7j4/k59TOCQoxX91no3Q4/4sr8tv/57xqTdEEftZTZ +s9/TZvg/c1Z7+Kj3zm85dVlmnEfLj0LjS7ZL7Oz4Znj3cSYzKdrH/TJP+IxVV+Y1ZPyZOOR B4m6R7xu5R5c9k3veno6b5AtE3N9Kf8bPcPVmTGLbZVYijMSDbWYi4oTAcoV0B7KAgAA Archived-At: Cc: Kathleen Moriarty , "cose@ietf.org" , Stephen Farrell Subject: Re: [COSE] Removing the MUST for alg being in the COSE protected bucket X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Nov 2016 05:48:54 -0000 DQoNCk9uIDIwMTYtMTEtMTUgMDM6MjUsICJDT1NFIG9uIGJlaGFsZiBvZiBDYXJzdGVuIEJvcm1h bm4iDQo8Y29zZS1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBjYWJvQHR6aS5vcmc+IHdy b3RlOg0KDQo+SGkgSmltLA0KPg0KPkkgYmVsaWV2ZSB0aGUgbmV3IHRleHQgY2FwdHVyZXMgdGhl IGNvbWJpbmVkIHZpZXcgb2YgdGhlIHZhcmlvdXMNCj5pbnRlcmVzdGVkIHBhcnRpZXMgdmVyeSB3 ZWxsLg0KPg0KPkl0IGlzIGhhcmRlciB0byB0ZXN0IGZvciB0aGlzIG5ldyBNVVNULCBidXQgaXQg Y2FuIG5vdyBiZSB1bml2ZXJzYWxseQ0KPnJlcXVpcmVkIHdpdGhvdXQgd2VpcmQgZGlzcGVuc2F0 aW9ucy4gIEl0IGlzIGFsc28gdmVyeSBjbGVhciBhcyB0byB3aGF0DQo+aXMgYWN0dWFsbHkgcmVx dWlyZWQuDQoNCg0KKzENCg0KR8O2cmFuDQoNCj4NCj5HcsO8w59lLCBDYXJzdGVuDQo+DQo+DQo+ PiBPbiAxNSBOb3YgMjAxNiwgYXQgMTE6MjAsIEppbSBTY2hhYWQgPGlldGZAYXVndXN0Y2VsbGFy cy5jb20+IHdyb3RlOg0KPj4gDQo+PiBJIGhhdmUgYmVlbiBoYXZpbmcgY29udmVyc2F0aW9ucyB3 aXRoIHRoZSBJRVNHIHRyeWluZyB0byBnZXQgdGhlIGxhc3QNCj4+IGRpc2N1c3MgY2xlYXJlZC4g IEkgaGF2ZSBjb21lIHVwIHdpdGggYSBjaGFuZ2UgdG8gdGhlIHRleHQgdGhhdCByZWR1Y2VzDQo+ PnRoZQ0KPj4gcmVxdWlyZW1lbnQgb2YgdGhlIGFsZ29yaXRobSBiZWluZyByZXF1aXJlZCB0byBi ZSBpbiB0aGUgcHJvdGVjdGVkDQo+PmhlYWRlcg0KPj4gYnVja2V0IHdoZXJlIGl0IGNhbiBiZSBw cm90ZWN0ZWQgdG8gYSBzbGlnaHRseSBsb29zZXIgcmVxdWlyZW1lbnQuICBUaGUNCj4+IHByb3Bv c2VkIGVkaXRzIGNhbiBiZSBmb3VuZCBoZXJlDQo+PiBodHRwczovL2dpdGh1Yi5jb20vY29zZS13 Zy9jb3NlLXNwZWMvcHVsbC8xODcuIEJhc2VkIG9uIHRoaXMsIEkgbmVlZCB0bw0KPj5rbm93DQo+ PiBpZiB0aGVyZSBhcmUgYW55IG9iamVjdGlvbnMgaW4gdGhlIHdvcmtpbmcgZ3JvdXAuDQo+PiAN Cj4+IEkgZGViYXRlZCBtYWtpbmcgY2hhbmdlcyB0byBBcHBlbmRpeCBBLCBidXQgSSB0aGluayB3 ZSBjYW4gZ2V0IGF3YXkgd2l0aA0KPj4ganVzdCBjaGFuZ2luZyB0aGUgdGl0bGUgYW5kIGxlYXZl IHRoZSB0ZXh0IGFsb25lLg0KPj4gDQo+PiA8bm8gaGF0Pg0KPj4gSSBhbSB1bmhhcHB5IHdpdGgg dGhpcyBjaGFuZ2UsIGJ1dCBJIGNhbiBsaXZlIHdpdGggaXQuDQo+PiA8L25vIGhhdD4NCj4+IA0K Pj4gSmltDQo+PiANCj4+IA0KPj4gDQo+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KPj4gQ09TRSBtYWlsaW5nIGxpc3QNCj4+IENPU0VAaWV0Zi5vcmcN Cj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZQ0KPj4gDQo+DQo+ X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj5DT1NFIG1h aWxpbmcgbGlzdA0KPkNPU0VAaWV0Zi5vcmcNCj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2Nvc2UNCg0K From nobody Mon Nov 14 22:54:30 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18F9E129674 for ; Mon, 14 Nov 2016 22:54:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.003 X-Spam-Level: X-Spam-Status: No, score=-2.003 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jS_E_XuBTQ5R for ; Mon, 14 Nov 2016 22:54:27 -0800 (PST) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0109.outbound.protection.outlook.com [104.47.36.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8FD9F12956B for ; Mon, 14 Nov 2016 22:54:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=eePy04DAVsKg+JtQph5jImMmte1Dlq5RzLrFXbUAs4o=; b=pAM7keLvrsz0Vv+vhDK1nlurL8v3IidUhqeiGiqUSUgTooj6AmzdT6dyECAGwHPwtWSlx7HK9IF/Tf9yenseCBoXw2u0OikriCQRz39rGZ9+yuQLHSp/YmOVfw8ImFkcoXU4zdN/qs4QWbfxpa0bu5Xny749WUiKNb+Pt/FkE+c= Received: from BN3PR03MB2355.namprd03.prod.outlook.com (10.166.74.150) by BN3PR03MB2355.namprd03.prod.outlook.com (10.166.74.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.721.10; Tue, 15 Nov 2016 06:54:23 +0000 Received: from BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) by BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) with mapi id 15.01.0721.015; Tue, 15 Nov 2016 06:54:23 +0000 From: Mike Jones To: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= , "Carsten Bormann" , Jim Schaad Thread-Topic: [COSE] Removing the MUST for alg being in the COSE protected bucket Thread-Index: AdI+5V847Ll/o5d/T5uzy9/zKaWQSAAAjYOAAAb2LoAAAkQ3UA== Date: Tue, 15 Nov 2016 06:54:23 +0000 Message-ID: References: <072a01d23ee6$c7a70e20$56f52a60$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [31.133.159.163] x-microsoft-exchange-diagnostics: 1; BN3PR03MB2355; 7:D0LimJaKPZRSyx5EOWrCT5gOW9YH0+XXFtVF1NB/CxyuW2Hhfs6WTPWzozhZpWgGtZVtnwoXcYmh5cxiLr/03bUuXAnY/wapW4eYa0HrjZZAl4sfVa9jo0GTUMBCiLbvFcMFkxzv08wG95ajRrzzxxjexQbQATIzfoW7cLe9jwR/WnVGswmqbTexhQ3mM7lXwfNmymw7eHrY4uHmA6A2+zxypdWSwfJzZ+0XALZALKRujtXtEo1++clgjKksd01qY/orxTjGlW/KtqH7ZwAZZC+gISf2x4Lzo21YvfubTTKWJ4h4kzYTaQvpfyKwNal20IpIebcdRG4cfxBL2s8jbKksNW60538quyu5c79/bnKf8u1tR7XoIY0XuUGOwZ3b x-ms-office365-filtering-correlation-id: 3b116a09-9034-4e30-cccb-08d40d243bbb x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN3PR03MB2355; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(32856632585715)(278428928389397)(166708455590820); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6045074)(6060326)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026)(61426038)(61427038)(6061324)(6046074); SRVR:BN3PR03MB2355; BCL:0; PCL:0; RULEID:; SRVR:BN3PR03MB2355; x-forefront-prvs: 012792EC17 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(13464003)(377454003)(24454002)(189002)(377424004)(66066001)(8936002)(229853002)(77096005)(101416001)(122556002)(86612001)(99286002)(106356001)(81156014)(8676002)(86362001)(74316002)(68736007)(2900100001)(33656002)(189998001)(92566002)(5001770100001)(7736002)(97736004)(9686002)(305945005)(7846002)(5005710100001)(10290500002)(4001150100001)(8990500004)(105586002)(3280700002)(81166006)(10090500001)(87936001)(2906002)(50986999)(76576001)(7696004)(5660300001)(76176999)(54356999)(6116002)(2950100002)(3846002)(3660700001)(4326007)(102836003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR03MB2355; H:BN3PR03MB2355.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Nov 2016 06:54:23.5187 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR03MB2355 Archived-At: Cc: Kathleen Moriarty , Stephen Farrell , "cose@ietf.org" Subject: Re: [COSE] Removing the MUST for alg being in the COSE protected bucket X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Nov 2016 06:54:30 -0000 SXQncyBub3QgY2xlYXIgdG8gbWUgd2hhdCB0aGlzIG5ldyB0ZXh0IG1lYW5zOiAiIFRoaXMgcGFy YW1ldGVyIE1VU1QgYmUgYXV0aGVudGljaWF0ZWQgd2hlbiBzdXBwb3J0IGlzIHByb3ZpZGVkIGJ5 IHRoZSBhbGdvcml0aG0gKEFFQUQgYWxnb3JpdGhtcykgb3IgY29uc3RydWN0aW9uIChzaWduIGFu ZCBtYWMpLiAiLiAgV2hhdCBraW5kIG9mIHN1cHBvcnQgaXMgYmVpbmcgcmVmZXJyZWQgdG8/ICBJ IHRoaW5rIHRoaXMgbmVlZHMgdG8gYmUgY2xhcmlmaWVkLg0KDQpOaXRzOg0KCWF1dGhlbnRpY2lh dGVkIC0+IGF1dGhlbnRpY2F0ZWQNCglpc3VzZWQgLT4gaXMgdXNlZA0KCWFwcGxpY2F0aW9ucyAt PiBhcHBsaWNhdGlvbidzDQoNCgkJCQktLSBNaWtlDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tDQpGcm9tOiBDT1NFIFttYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYg T2YgR8O2cmFuIFNlbGFuZGVyDQpTZW50OiBUdWVzZGF5LCBOb3ZlbWJlciAxNSwgMjAxNiAyOjQ1 IFBNDQpUbzogQ2Fyc3RlbiBCb3JtYW5uIDxjYWJvQHR6aS5vcmc+OyBKaW0gU2NoYWFkIDxpZXRm QGF1Z3VzdGNlbGxhcnMuY29tPg0KQ2M6IEthdGhsZWVuIE1vcmlhcnR5IDxrYXRobGVlbi5tb3Jp YXJ0eS5pZXRmQGdtYWlsLmNvbT47IGNvc2VAaWV0Zi5vcmc7IFN0ZXBoZW4gRmFycmVsbCA8c3Rl cGhlbi5mYXJyZWxsQGNzLnRjZC5pZT4NClN1YmplY3Q6IFJlOiBbQ09TRV0gUmVtb3ZpbmcgdGhl IE1VU1QgZm9yIGFsZyBiZWluZyBpbiB0aGUgQ09TRSBwcm90ZWN0ZWQgYnVja2V0DQoNCg0KDQpP biAyMDE2LTExLTE1IDAzOjI1LCAiQ09TRSBvbiBiZWhhbGYgb2YgQ2Fyc3RlbiBCb3JtYW5uIg0K PGNvc2UtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgY2Fib0B0emkub3JnPiB3cm90ZToN Cg0KPkhpIEppbSwNCj4NCj5JIGJlbGlldmUgdGhlIG5ldyB0ZXh0IGNhcHR1cmVzIHRoZSBjb21i aW5lZCB2aWV3IG9mIHRoZSB2YXJpb3VzIA0KPmludGVyZXN0ZWQgcGFydGllcyB2ZXJ5IHdlbGwu DQo+DQo+SXQgaXMgaGFyZGVyIHRvIHRlc3QgZm9yIHRoaXMgbmV3IE1VU1QsIGJ1dCBpdCBjYW4g bm93IGJlIHVuaXZlcnNhbGx5IA0KPnJlcXVpcmVkIHdpdGhvdXQgd2VpcmQgZGlzcGVuc2F0aW9u cy4gIEl0IGlzIGFsc28gdmVyeSBjbGVhciBhcyB0byB3aGF0IA0KPmlzIGFjdHVhbGx5IHJlcXVp cmVkLg0KDQoNCisxDQoNCkfDtnJhbg0KDQo+DQo+R3LDvMOfZSwgQ2Fyc3Rlbg0KPg0KPg0KPj4g T24gMTUgTm92IDIwMTYsIGF0IDExOjIwLCBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMu Y29tPiB3cm90ZToNCj4+IA0KPj4gSSBoYXZlIGJlZW4gaGF2aW5nIGNvbnZlcnNhdGlvbnMgd2l0 aCB0aGUgSUVTRyB0cnlpbmcgdG8gZ2V0IHRoZSBsYXN0ICANCj4+ZGlzY3VzcyBjbGVhcmVkLiAg SSBoYXZlIGNvbWUgdXAgd2l0aCBhIGNoYW5nZSB0byB0aGUgdGV4dCB0aGF0IA0KPj5yZWR1Y2Vz IHRoZSAgcmVxdWlyZW1lbnQgb2YgdGhlIGFsZ29yaXRobSBiZWluZyByZXF1aXJlZCB0byBiZSBp biB0aGUgDQo+PnByb3RlY3RlZCBoZWFkZXIgIGJ1Y2tldCB3aGVyZSBpdCBjYW4gYmUgcHJvdGVj dGVkIHRvIGEgc2xpZ2h0bHkgDQo+Pmxvb3NlciByZXF1aXJlbWVudC4gIFRoZSAgcHJvcG9zZWQg ZWRpdHMgY2FuIGJlIGZvdW5kIGhlcmUgIA0KPj5odHRwczovL2dpdGh1Yi5jb20vY29zZS13Zy9j b3NlLXNwZWMvcHVsbC8xODcuIEJhc2VkIG9uIHRoaXMsIEkgbmVlZCANCj4+dG8ga25vdyAgaWYg dGhlcmUgYXJlIGFueSBvYmplY3Rpb25zIGluIHRoZSB3b3JraW5nIGdyb3VwLg0KPj4gDQo+PiBJ IGRlYmF0ZWQgbWFraW5nIGNoYW5nZXMgdG8gQXBwZW5kaXggQSwgYnV0IEkgdGhpbmsgd2UgY2Fu IGdldCBhd2F5IA0KPj4gd2l0aCBqdXN0IGNoYW5naW5nIHRoZSB0aXRsZSBhbmQgbGVhdmUgdGhl IHRleHQgYWxvbmUuDQo+PiANCj4+IDxubyBoYXQ+DQo+PiBJIGFtIHVuaGFwcHkgd2l0aCB0aGlz IGNoYW5nZSwgYnV0IEkgY2FuIGxpdmUgd2l0aCBpdC4NCj4+IDwvbm8gaGF0Pg0KPj4gDQo+PiBK aW0NCj4+IA0KPj4gDQo+PiANCj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQo+PiBDT1NFIG1haWxpbmcgbGlzdA0KPj4gQ09TRUBpZXRmLm9yZw0KPj4g aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQo+PiANCj4NCj5fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPkNPU0UgbWFpbGlu ZyBsaXN0DQo+Q09TRUBpZXRmLm9yZw0KPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vY29zZQ0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KQ09TRSBtYWlsaW5nIGxpc3QNCkNPU0VAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vY29zZQ0K From nobody Mon Nov 14 23:39:41 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A9DD2129A26 for ; Mon, 14 Nov 2016 23:39:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.021 X-Spam-Level: X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ICrYSgtDMI7z for ; Mon, 14 Nov 2016 23:39:36 -0800 (PST) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0111.outbound.protection.outlook.com [104.47.37.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 713DA129A18 for ; Mon, 14 Nov 2016 23:39:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=XeKz7aitANDElYpHnBbwxYu9PwLmbI92fQd3/joaZpo=; b=nqKi39xclv2LQQcHXP/WOR+KCXx5/St7XNt549AdM+Meq6HgxjWA5OxJFKV9JGOty3F2icuDP/3s1LC9zjTMtjFWdxoz7+DHo5fmoc6YUk4uuTI8fSCAKfQVUbamARKIDhQPBF5p9PIPl3QGoV0dJCST3MxAURl1pkh3jG+d3zQ= Received: from BN3PR03MB2355.namprd03.prod.outlook.com (10.166.74.150) by BN3PR03MB2354.namprd03.prod.outlook.com (10.166.74.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.721.10; Tue, 15 Nov 2016 07:39:33 +0000 Received: from BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) by BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) with mapi id 15.01.0721.015; Tue, 15 Nov 2016 07:39:33 +0000 From: Mike Jones To: "cose@ietf.org" Thread-Topic: Changes from -17 to -23 seem fine Thread-Index: AdI/ExGIOqrU7y0ZQ7KgzRR/hGgYBQ== Date: Tue, 15 Nov 2016 07:39:33 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [31.133.159.163] x-microsoft-exchange-diagnostics: 1; BN3PR03MB2354; 7:bL3LRBp/nTjzdYnAygTrofd8xn+G0AlmSfJiBe3Kl5kc6cGqyvltmWbEWyHBS4He6f+goW4FI3RA8o14r5CRUftqJMC7BfRyxltVhrZe1hNW5VhaOmKeCDR7EQB0KqMR+7prdJlZrBixf99Xp5Qo1JDKHe2wc8J0ZbLabHZ9LKwK4/HaiJLNMy/Y8CpJiLzwFUbMgjDvCVsKFHAF4/4klzFZixkSkUp2Mh0MO6m8B8EIKZLhsYkv74Tyiv59HTT6gLzXOzEZ6IX97zJf/lI80HMQF+feMGZezHjeFafrrRNfvEKoDUg/b5DeiaAgggCOVs1FV/8rcv7tgh3T6c++/EjHY8KEwnw3goRF2XCr5DaQi+d2OuKbdAifih96nnRz x-ms-office365-filtering-correlation-id: 28ab0127-5701-47dc-2e7f-08d40d2a8b0e x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN3PR03MB2354; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6045074)(6060326)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(61426038)(61427038)(6061324)(6046074); SRVR:BN3PR03MB2354; BCL:0; PCL:0; RULEID:; SRVR:BN3PR03MB2354; x-forefront-prvs: 012792EC17 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(189002)(74316002)(5005710100001)(105586002)(54356999)(81166006)(99286002)(101416001)(8936002)(2501003)(50986999)(1730700003)(81156014)(77096005)(106356001)(122556002)(86612001)(76576001)(10090500001)(558084003)(86362001)(68736007)(2900100001)(92566002)(2351001)(110136003)(10290500002)(8990500004)(7696004)(2906002)(97736004)(87936001)(5660300001)(8676002)(9686002)(6916009)(3846002)(5630700001)(102836003)(790700001)(7846002)(6116002)(33656002)(3280700002)(3660700001)(450100001)(189998001)(66066001)(107886002)(5640700001)(7736002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR03MB2354; H:BN3PR03MB2355.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN3PR03MB23551D5BE7AA5AF5914412A3F5BF0BN3PR03MB2355namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Nov 2016 07:39:33.7651 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR03MB2354 Archived-At: Subject: [COSE] Changes from -17 to -23 seem fine X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Nov 2016 07:39:39 -0000 --_000_BN3PR03MB23551D5BE7AA5AF5914412A3F5BF0BN3PR03MB2355namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable For what it's worth, I just read all the changes made from draft-ietf-cose-= msg-17 dated August 14, 2016 to draft-ietf-cose-msg-23 dated November 14, 2= 016 and I think they're fine. -- Mike --_000_BN3PR03MB23551D5BE7AA5AF5914412A3F5BF0BN3PR03MB2355namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

For what it’s worth, I just read all the chang= es made from draft-ietf-cose-msg-17 dated August 14, 2016 to draft-ietf-cos= e-msg-23 dated November 14, 2016 and I think they’re fine.=

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;        -- Mike

 

--_000_BN3PR03MB23551D5BE7AA5AF5914412A3F5BF0BN3PR03MB2355namp_-- From nobody Tue Nov 22 13:39:42 2016 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BFA24129B71; Tue, 22 Nov 2016 13:39:40 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.38.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147985078078.30323.16926223308177625949.idtracker@ietfa.amsl.com> Date: Tue, 22 Nov 2016 13:39:40 -0800 Archived-At: Cc: cose@ietf.org Subject: [COSE] I-D Action: draft-ietf-cose-msg-24.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Nov 2016 21:39:41 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption of the IETF. Title : CBOR Object Signing and Encryption (COSE) Author : Jim Schaad Filename : draft-ietf-cose-msg-24.txt Pages : 121 Date : 2016-11-22 Abstract: Concise Binary Object Representation (CBOR) is data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) specification. This specification describes how to create and process signature, message authentication codes and encryption using CBOR for serialization. This specification additionally specifies how to represent cryptographic keys using CBOR. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-cose-msg-24 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-msg-24 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Nov 22 13:52:02 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3574C12965F for ; Tue, 22 Nov 2016 13:52:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5fJOYg5676Ft for ; Tue, 22 Nov 2016 13:52:00 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7899129477 for ; Tue, 22 Nov 2016 13:51:59 -0800 (PST) Received: from hebrews (24.21.96.37) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 22 Nov 2016 14:09:33 -0800 From: Jim Schaad To: References: <147985078095.30323.151336502915064224.idtracker@ietfa.amsl.com> In-Reply-To: <147985078095.30323.151336502915064224.idtracker@ietfa.amsl.com> Date: Tue, 22 Nov 2016 13:51:49 -0800 Message-ID: <090c01d2450a$a2d9add0$e88d0970$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQHT9NZ1gY7vkOPKOsPBdrTpWoztLaDiKoFA X-Originating-IP: [24.21.96.37] Archived-At: Cc: 'Kathleen Moriarty' , 'Stephen Farrell' Subject: [COSE] FW: New Version Notification for draft-ietf-cose-msg-24.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Nov 2016 21:52:01 -0000 This update should be sufficient to clear the last Discuss on the draft. It has 1) The changes to clear the discuss about algorithm identifier = placement and 2) the assignment of the CBOR tags by IANA has been = incorporated. Jim > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > Sent: Tuesday, November 22, 2016 1:40 PM > To: Jim Schaad > Subject: New Version Notification for draft-ietf-cose-msg-24.txt >=20 >=20 > A new version of I-D, draft-ietf-cose-msg-24.txt has been successfully = submitted > by Jim Schaad and posted to the IETF repository. >=20 > Name: draft-ietf-cose-msg > Revision: 24 > Title: CBOR Object Signing and Encryption (COSE) > Document date: 2016-11-22 > Group: cose > Pages: 121 > URL: = https://www.ietf.org/internet-drafts/draft-ietf-cose-msg-24.txt > Status: https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ > Htmlized: https://tools.ietf.org/html/draft-ietf-cose-msg-24 > Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-msg-24 >=20 > Abstract: > Concise Binary Object Representation (CBOR) is data format designed > for small code size and small message size. There is a need for = the > ability to have basic security services defined for this data = format. > This document defines the CBOR Object Signing and Encryption (COSE) > specification. This specification describes how to create and > process signature, message authentication codes and encryption = using > CBOR for serialization. This specification additionally specifies > how to represent cryptographic keys using CBOR. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat From nobody Tue Nov 22 13:56:28 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37D3D129B8C for ; Tue, 22 Nov 2016 13:56:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.003 X-Spam-Level: X-Spam-Status: No, score=-2.003 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dd2dvigFF18Z for ; Tue, 22 Nov 2016 13:56:25 -0800 (PST) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0133.outbound.protection.outlook.com [104.47.37.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 210321294AC for ; Tue, 22 Nov 2016 13:56:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=m44ihE6jpaTDkfs9zq0o3dgtGHjp+2jTAlKhvhnYEnE=; b=NwRT3B1cPlebITklfJYcNCCmY1y/8Ib8mL6pG22X1Db1HIpfU2y2c05ReFAKiLrWLavKCwKZgFmWINvIRYYE2W+IukQ6X3HbqRtt4obRL/anwb3Ldlt0M64i0wd9Z85tQr+QRqMIPoo9mqQ+ZsH9RAZ7UsIerw7tDMAcv0/U/Dc= Received: from BN3PR03MB2355.namprd03.prod.outlook.com (10.166.74.150) by BN3PR03MB2354.namprd03.prod.outlook.com (10.166.74.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.8; Tue, 22 Nov 2016 21:56:23 +0000 Received: from BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) by BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) with mapi id 15.01.0734.014; Tue, 22 Nov 2016 21:56:23 +0000 From: Mike Jones To: Jim Schaad , "cose@ietf.org" Thread-Topic: [COSE] FW: New Version Notification for draft-ietf-cose-msg-24.txt Thread-Index: AQHT9NZ1gY7vkOPKOsPBdrTpWoztLaDiKoFAgAABkWA= Date: Tue, 22 Nov 2016 21:56:22 +0000 Message-ID: References: <147985078095.30323.151336502915064224.idtracker@ietfa.amsl.com> <090c01d2450a$a2d9add0$e88d0970$@augustcellars.com> In-Reply-To: <090c01d2450a$a2d9add0$e88d0970$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:f::650] x-microsoft-exchange-diagnostics: 1; BN3PR03MB2354; 7:GB7ixHCPhgFYP9z5cMZFg1ZNAOXFY79gPuofiqEVONNYozWkh1PlYwdQoZ5Zr4a1W6B2scfY2eHMqosmnCYzOf1O+ekY/STEjNS3VrwYuOlVdFUTJ10iA0GBNAi3DCx2Vah5Nr/GYdviA1vfmZZ0eQp0w5DjWso+hZhNEodYuIPi3EUyHp7SMiLUbcXV8cmjOd9+BlQ929/+ZR1s+pqKo2xX7MtPEyr4EVDpbeK/e/fl5Ql4vo7iLvkxW3Mk+T4xcUHJGBtVdsfTIpib2JxtcbM817Zr2tJJURuUldDHbtty4DX4mU9d2uXbVAbn0Lh7xI5SZq9u+h2vEwmT/h5KOHtvw/hwGeDMm2YCmBstkQ1aSClk6DJ4KYBJAou9bQhu x-ms-office365-filtering-correlation-id: a4d1b387-d7e5-41bc-da6c-08d41322666a x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN3PR03MB2354; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(32856632585715)(120809045254105)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040307)(6060326)(6045199)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(61426038)(61427038)(6061324)(6041248)(6046074)(6042181)(6072148)(6047074); SRVR:BN3PR03MB2354; BCL:0; PCL:0; RULEID:; SRVR:BN3PR03MB2354; x-forefront-prvs: 0134AD334F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(377424004)(377454003)(13464003)(199003)(102836003)(3280700002)(4001150100001)(6116002)(5001770100001)(8676002)(92566002)(6506003)(97736004)(122556002)(3660700001)(229853002)(86612001)(4326007)(2501003)(39060400001)(74316002)(9686002)(8936002)(2906002)(81166006)(68736007)(86362001)(81156014)(7846002)(7736002)(305945005)(76176999)(54356999)(2900100001)(50986999)(5660300001)(106116001)(230783001)(99286002)(106356001)(15650500001)(105586002)(10090500001)(77096005)(2950100002)(5005710100001)(7696004)(189998001)(38730400001)(8990500004)(101416001)(76576001)(10290500002)(33656002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR03MB2354; H:BN3PR03MB2355.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Nov 2016 21:56:23.0624 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR03MB2354 Archived-At: Cc: 'Kathleen Moriarty' , 'Stephen Farrell' Subject: Re: [COSE] FW: New Version Notification for draft-ietf-cose-msg-24.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Nov 2016 21:56:27 -0000 The diffs look OK to me, other than the probably inadvertent introduction o= f the "!" line in the following, right before 4.2: COSE_Signature =3D [ Headers, signature : bstr ] ! -- Mike -----Original Message----- From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Jim Schaad Sent: Tuesday, November 22, 2016 1:52 PM To: cose@ietf.org Cc: 'Kathleen Moriarty' ; 'Stephen Farrel= l' Subject: [COSE] FW: New Version Notification for draft-ietf-cose-msg-24.txt This update should be sufficient to clear the last Discuss on the draft. It has 1) The changes to clear the discuss about algorithm identifier place= ment and 2) the assignment of the CBOR tags by IANA has been incorporated. Jim > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > Sent: Tuesday, November 22, 2016 1:40 PM > To: Jim Schaad > Subject: New Version Notification for draft-ietf-cose-msg-24.txt >=20 >=20 > A new version of I-D, draft-ietf-cose-msg-24.txt has been successfully=20 > submitted by Jim Schaad and posted to the IETF repository. >=20 > Name: draft-ietf-cose-msg > Revision: 24 > Title: CBOR Object Signing and Encryption (COSE) > Document date: 2016-11-22 > Group: cose > Pages: 121 > URL: https://www.ietf.org/internet-drafts/draft-ietf-cose-msg-= 24.txt > Status: https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ > Htmlized: https://tools.ietf.org/html/draft-ietf-cose-msg-24 > Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-msg-2= 4 >=20 > Abstract: > Concise Binary Object Representation (CBOR) is data format designed > for small code size and small message size. There is a need for the > ability to have basic security services defined for this data format. > This document defines the CBOR Object Signing and Encryption (COSE) > specification. This specification describes how to create and > process signature, message authentication codes and encryption using > CBOR for serialization. This specification additionally specifies > how to represent cryptographic keys using CBOR. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of=20 > submission until the htmlized version and diff are available at tools.iet= f.org. >=20 > The IETF Secretariat _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose From nobody Tue Nov 22 14:14:19 2016 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3995912949D; Tue, 22 Nov 2016 14:14:18 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.38.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147985285822.30331.5672182137969672639.idtracker@ietfa.amsl.com> Date: Tue, 22 Nov 2016 14:14:18 -0800 Archived-At: Cc: cose-chairs@ietf.org, goran.selander@ericsson.com, cose@ietf.org, draft-ietf-cose-msg@ietf.org Subject: [COSE] Stephen Farrell's Yes on draft-ietf-cose-msg-24: (with COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Nov 2016 22:14:18 -0000 Stephen Farrell has entered the following ballot position for draft-ietf-cose-msg-24: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks all for the discussion and resolution of the mandatory alg-id issue. I think we've ended up in a better place. (Well, I at least hope so:-). While I'm clearing the discuss now, it might be no harm to just check with the set of folks who commented recently on this topic before sending this to the RFC editor in case there're any other non-problematic tweaks that might be beneficial. (I forget if that was already done or not, sorry;-) From nobody Tue Nov 22 18:16:04 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1461129508; Tue, 22 Nov 2016 18:15:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y3nfyLObSf_R; Tue, 22 Nov 2016 18:15:56 -0800 (PST) Received: from mail-ua0-x232.google.com (mail-ua0-x232.google.com [IPv6:2607:f8b0:400c:c08::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E56A1294D2; Tue, 22 Nov 2016 18:15:56 -0800 (PST) Received: by mail-ua0-x232.google.com with SMTP id 12so31424137uas.2; Tue, 22 Nov 2016 18:15:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=dKJ8pJiCGJVEIuObLzKkDxjQ/r59YQ02cZxDfDoQ53w=; b=EfCHCQA4OeVjyEmHr8gA+l1W1U0IkPTZ32fyWfFnsqj+KogeEiymvPppDUWCeRoJEM 2WCRlzMCYE3BeOixHI5BctFWSOzG6bxXLxwrtbfT6MEJAZyu+QNKYzDZrwF2ZX5qquVJ 6fYjv+zhsbHUd1V7wvmqnMvQdgIv2op4F1HDkx14yLlXEkoCc9o7s85hk3waylYXHGAA CFGf+j9tqR63y4nYJH/pSG6drnVMf8vu2m1iW6179pxNCYcFfBNz13NTEPoVPrcGeWKx wTZcwbiuE0AW/EDsKw3A9d5VxJSOnIirHH5hlsZSvjSzNVE9pT9nAjzV37+088mEXzfN KBKw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=dKJ8pJiCGJVEIuObLzKkDxjQ/r59YQ02cZxDfDoQ53w=; b=lVfuSqWlRGSCPVbNAYrK2E7oYDLc6N3w/shzeCo1IS2nbMOWwdtYw6YyRK3y46oiRN QEjF/iP/RAOkQkmzE1S/yKLy6Mm/halG+Nlr9FAbBvQX8wRAlb07S4I0vjCJldc5L3cM D7JtY6tBRKBTRqkPgqW94BMY4uKPLMU94+8W+ZjNrV+1H9bC2RH9svuJOdWvnUbog5Ib wh9D6xa65yM6yhPpGIHbroL8OsKkR0EdLRbHmcWL/eZ4janVbGbi24sHsmkHSegCUIXy fFu4zjVV8XWScY+gt3r97sWzL7ZwxWc2ZOGYZtxCulC5kQmaouketGokZj5HmLRMJM3U cdpA== X-Gm-Message-State: AKaTC03oucNfd3XTnnCr/TlUzbxx3NhXYc62BFQ26VYu+l3ww4nvn/H8tH6e9jicz0h2dsb7xdPgWmGhoBeBcg== X-Received: by 10.176.82.214 with SMTP id w22mr503019uaw.167.1479867355345; Tue, 22 Nov 2016 18:15:55 -0800 (PST) MIME-Version: 1.0 Received: by 10.176.82.143 with HTTP; Tue, 22 Nov 2016 18:15:55 -0800 (PST) In-Reply-To: <147985285822.30331.5672182137969672639.idtracker@ietfa.amsl.com> References: <147985285822.30331.5672182137969672639.idtracker@ietfa.amsl.com> From: Kathleen Moriarty Date: Tue, 22 Nov 2016 21:15:55 -0500 Message-ID: To: Stephen Farrell Content-Type: multipart/alternative; boundary=94eb2c18fad007ba3f0541ee7870 Archived-At: Cc: draft-ietf-cose-msg@ietf.org, cose-chairs@ietf.org, "cose@ietf.org" , The IESG , =?UTF-8?Q?G=C3=B6ran_Selander?= Subject: Re: [COSE] Stephen Farrell's Yes on draft-ietf-cose-msg-24: (with COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Nov 2016 02:15:58 -0000 --94eb2c18fad007ba3f0541ee7870 Content-Type: text/plain; charset=UTF-8 Thank you, Stephen. Please chime in if you were one to comment recently. I will check through comments tomorrow and will work with the shepherd asking them to review outstanding comments as well as to be careful in moving this document forward. Best regards, Kathleen On Tue, Nov 22, 2016 at 5:14 PM, Stephen Farrell wrote: > Stephen Farrell has entered the following ballot position for > draft-ietf-cose-msg-24: Yes > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > > Thanks all for the discussion and resolution of the mandatory > alg-id issue. I think we've ended up in a better place. (Well, I at > least hope so:-). > > While I'm clearing the discuss now, it might be no harm to just > check with the set of folks who commented recently on this topic > before sending this to the RFC editor in case there're any other > non-problematic tweaks that might be beneficial. (I forget if > that was already done or not, sorry;-) > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > -- Best regards, Kathleen --94eb2c18fad007ba3f0541ee7870 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Thank you, Stephen.=C2=A0 Please chime in if you were one = to comment recently.=C2=A0 I will check through comments tomorrow and will = work with the shepherd asking them to review outstanding comments as well a= s to be careful in moving this document forward.

Best re= gards,
Kathleen

On Tue, Nov 22, 2016 at 5:14 PM, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:
Stephen Farrell has entered the following ballot position for draft-ietf-cose-msg-24: Yes

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/<= wbr>statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-iet= f-cose-msg/



-----------------------------------------------------------------= -----
COMMENT:
-----------------------------------------------------------------= -----


Thanks all for the discussion and resolution of the mandatory
alg-id issue. I think we've ended up in a better place. (Well, I at
least hope so:-).

While I'm clearing the discuss now, it might be no harm to just
check with the set of folks who commented recently on this topic
before sending this to the RFC editor in case there're any other
non-problematic tweaks that might be beneficial. (I forget if
that was already done or not, sorry;-)


_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose



--
Best regards,
Kathleen
--94eb2c18fad007ba3f0541ee7870-- From nobody Tue Nov 22 21:00:59 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA392129531 for ; Tue, 22 Nov 2016 21:00:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I5P5U4XAdumE for ; Tue, 22 Nov 2016 21:00:56 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 584471294FF for ; Tue, 22 Nov 2016 21:00:55 -0800 (PST) Received: from hebrews (24.21.96.37) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 22 Nov 2016 21:18:29 -0800 From: Jim Schaad To: References: <147987163959.30322.14158962529156430503.idtracker@ietfa.amsl.com> In-Reply-To: <147987163959.30322.14158962529156430503.idtracker@ietfa.amsl.com> Date: Tue, 22 Nov 2016 21:00:45 -0800 Message-ID: <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQGas+U5hOX2ZwwTfdISQ4lSrZ9yRaFVJOfw Content-Language: en-us X-Originating-IP: [24.21.96.37] Archived-At: Subject: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Nov 2016 05:00:58 -0000 This is a rough draft of what a set of X.509 headers could look like. = There is lots of things that are incomplete or missing, but I said I = would write up a fast version for people to look at so here it is. If you are interested, please comment on the headers. The pointer to = the github repository is in the document. Jim > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > Sent: Tuesday, November 22, 2016 7:27 PM > To: Jim Schaad > Subject: New Version Notification for draft-schaad-cose-x509-00.txt >=20 >=20 > A new version of I-D, draft-schaad-cose-x509-00.txt has been = successfully > submitted by Jim Schaad and posted to the IETF repository. >=20 > Name: draft-schaad-cose-x509 > Revision: 00 > Title: CBOR Encoded Message Syntax (COSE): Headers for carrying > and referencing X.509 certificates > Document date: 2016-11-22 > Group: Individual Submission > Pages: 6 > URL: = https://www.ietf.org/internet-drafts/draft-schaad-cose-x509-00.txt > Status: = https://datatracker.ietf.org/doc/draft-schaad-cose-x509/ > Htmlized: https://tools.ietf.org/html/draft-schaad-cose-x509-00 >=20 >=20 > Abstract: > This document defines the headers and usage for referring to and > transporting X.509 certificates in the CBOR Encoded Message (COSE) > Syntax. >=20 > Contributing to this document >=20 > The source for this draft is being maintained in GitHub. Suggested > changes should be submitted as pull requests at = cose-wg/X509>. Instructions are on that page as well. Editorial > changes can be managed in GitHub, but any substantial issues need = to > be discussed on the COSE mailing list. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat From nobody Tue Nov 22 21:51:32 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7187C1294A9 for ; Tue, 22 Nov 2016 21:51:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id in6DWtr2Nj2G for ; Tue, 22 Nov 2016 21:51:28 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 518601294FF for ; Tue, 22 Nov 2016 21:51:28 -0800 (PST) X-AuditID: c1b4fb25-ec9d598000007ee2-3c-58352e5e8cea Received: from ESESSHC009.ericsson.se (Unknown_Domain [153.88.183.45]) by (Symantec Mail Security) with SMTP id A7.CF.32482.E5E25385; Wed, 23 Nov 2016 06:51:26 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.128]) by ESESSHC009.ericsson.se ([153.88.183.45]) with mapi id 14.03.0319.002; Wed, 23 Nov 2016 06:50:41 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Jim Schaad , "cose@ietf.org" Thread-Topic: [COSE] FW: New Version Notification for draft-ietf-cose-msg-24.txt Thread-Index: AQHT9NZ1gY7vkOPKOsPBdrTpWoztLaDiKoFAgACG3oA= Date: Wed, 23 Nov 2016 05:50:41 +0000 Message-ID: References: <147985078095.30323.151336502915064224.idtracker@ietfa.amsl.com> <090c01d2450a$a2d9add0$e88d0970$@augustcellars.com> In-Reply-To: <090c01d2450a$a2d9add0$e88d0970$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.9.160926 x-originating-ip: [153.88.183.150] Content-Type: text/plain; charset="utf-8" Content-ID: <7F59AC704F240B4F8757A4ABF14056AA@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrAIsWRmVeSWpSXmKPExsUyM2K7rm6cnmmEwcolmhbTtk5ltVg9/Tub RcPOfIvpe6+xO7B4bJwznc1jbfdVNo+ds+6yeyxZ8pMpgCWKyyYlNSezLLVI3y6BK2Ne11mm gnuSFb27FRsYOyS7GDk5JARMJG6/nsPUxcjFISSwjlFi2tmpzBDOEkaJZXM/sYJUsQm4SDxo eMQEYosIeEjs2v0JqIiDg1kgW+LuEwWQsLBAoMTN11dZIEqCJCZPvsAIYVtJvJ/fBtbKIqAq sWPtPTYQm1fAQmLBPJAakF1NjBIHem+xgyQ4BRwkzvfuBxvEKCAm8f3UGrBmZgFxiVtP5jNB XC0gsWTPeWYIW1Ti5eN/rCD3iAroSay5HwYRVpJYsf0SI8SZmhLrd+lDTLGWmHf5JzOErSgx pfshO8Q5ghInZz5hmcAoPgvJslkI3bOQdM9C0j0LSfcCRtZVjKLFqcVJuelGxnqpRZnJxcX5 eXp5qSWbGIHxeHDLb9UdjJffOB5iFOBgVOLhLYg1iRBiTSwrrsw9xCjBwawkwntE3TRCiDcl sbIqtSg/vqg0J7X4EKM0B4uSOK/ZyvvhQgLpiSWp2ampBalFMFkmDk6pBkbWOTtPHksKcxEM MdDU27qDy7Akq8f3AtvF0/P3zfSJssr27C5/IXnU2EHq94Rl854HnxDOaOl7WLk9q1r2D0t8 Y037+k3lD6dGLJuW+f/QFJF7Uk892mZtCv8urHD+Vd1WztsOC6R+rdbYvbi1nakyRj+yV7zc zOVXyv5f/OFzPltzhe9NdVZiKc5INNRiLipOBAC/2wsiwwIAAA== Archived-At: Cc: 'Kathleen Moriarty' , 'Stephen Farrell' Subject: Re: [COSE] FW: New Version Notification for draft-ietf-cose-msg-24.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Nov 2016 05:51:30 -0000 SGkgSmltLA0KDQpUaGUgdGV4dCBpcyBmaW5lLiANCg0KT25lIHJlZmVyZW5jZSBuZWVkcyB0byBi ZSB1cGRhdGVkOiBkcmFmdC1zZWxhbmRlci1hY2Utb2JqZWN0LXNlY3VyaXR5IGlzDQpub3cgYWRv cHRlZCBpbiBDb1JFLCBuZXcgZHJhZnQgbmFtZSBkcmFmdC1pZXRmLWNvcmUtb2JqZWN0LXNlY3Vy aXR5Lg0KDQpUaGFua3MsDQpHw7ZyYW4NCg0KDQpPbiAyMDE2LTExLTIyIDIyOjUxLCAiQ09TRSBv biBiZWhhbGYgb2YgSmltIFNjaGFhZCIgPGNvc2UtYm91bmNlc0BpZXRmLm9yZw0Kb24gYmVoYWxm IG9mIGlldGZAYXVndXN0Y2VsbGFycy5jb20+IHdyb3RlOg0KDQo+VGhpcyB1cGRhdGUgc2hvdWxk IGJlIHN1ZmZpY2llbnQgdG8gY2xlYXIgdGhlIGxhc3QgRGlzY3VzcyBvbiB0aGUgZHJhZnQuDQo+ DQo+SXQgaGFzIDEpIFRoZSBjaGFuZ2VzIHRvIGNsZWFyIHRoZSBkaXNjdXNzIGFib3V0IGFsZ29y aXRobSBpZGVudGlmaWVyDQo+cGxhY2VtZW50IGFuZCAyKSB0aGUgYXNzaWdubWVudCBvZiB0aGUg Q0JPUiB0YWdzIGJ5IElBTkEgaGFzIGJlZW4NCj5pbmNvcnBvcmF0ZWQuDQo+DQo+SmltDQo+DQo+ DQo+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4gRnJvbTogaW50ZXJuZXQtZHJhZnRz QGlldGYub3JnIFttYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnXQ0KPj4gU2VudDogVHVl c2RheSwgTm92ZW1iZXIgMjIsIDIwMTYgMTo0MCBQTQ0KPj4gVG86IEppbSBTY2hhYWQgPGlldGZA YXVndXN0Y2VsbGFycy5jb20+DQo+PiBTdWJqZWN0OiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24g Zm9yIGRyYWZ0LWlldGYtY29zZS1tc2ctMjQudHh0DQo+PiANCj4+IA0KPj4gQSBuZXcgdmVyc2lv biBvZiBJLUQsIGRyYWZ0LWlldGYtY29zZS1tc2ctMjQudHh0IGhhcyBiZWVuIHN1Y2Nlc3NmdWxs eQ0KPj5zdWJtaXR0ZWQNCj4+IGJ5IEppbSBTY2hhYWQgYW5kIHBvc3RlZCB0byB0aGUgSUVURiBy ZXBvc2l0b3J5Lg0KPj4gDQo+PiBOYW1lOgkJZHJhZnQtaWV0Zi1jb3NlLW1zZw0KPj4gUmV2aXNp b246CTI0DQo+PiBUaXRsZToJCUNCT1IgT2JqZWN0IFNpZ25pbmcgYW5kIEVuY3J5cHRpb24gKENP U0UpDQo+PiBEb2N1bWVudCBkYXRlOgkyMDE2LTExLTIyDQo+PiBHcm91cDoJCWNvc2UNCj4+IFBh Z2VzOgkJMTIxDQo+PiBVUkw6ICAgICAgICAgICAgDQo+Pmh0dHBzOi8vd3d3LmlldGYub3JnL2lu dGVybmV0LWRyYWZ0cy9kcmFmdC1pZXRmLWNvc2UtbXNnLTI0LnR4dA0KPj4gU3RhdHVzOiAgICAg ICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY29zZS1tc2cv DQo+PiBIdG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWll dGYtY29zZS1tc2ctMjQNCj4+IERpZmY6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9y ZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1jb3NlLW1zZy0yNA0KPj4gDQo+PiBBYnN0cmFjdDoNCj4+ ICAgIENvbmNpc2UgQmluYXJ5IE9iamVjdCBSZXByZXNlbnRhdGlvbiAoQ0JPUikgaXMgZGF0YSBm b3JtYXQgZGVzaWduZWQNCj4+ICAgIGZvciBzbWFsbCBjb2RlIHNpemUgYW5kIHNtYWxsIG1lc3Nh Z2Ugc2l6ZS4gIFRoZXJlIGlzIGEgbmVlZCBmb3IgdGhlDQo+PiAgICBhYmlsaXR5IHRvIGhhdmUg YmFzaWMgc2VjdXJpdHkgc2VydmljZXMgZGVmaW5lZCBmb3IgdGhpcyBkYXRhIGZvcm1hdC4NCj4+ ICAgIFRoaXMgZG9jdW1lbnQgZGVmaW5lcyB0aGUgQ0JPUiBPYmplY3QgU2lnbmluZyBhbmQgRW5j cnlwdGlvbiAoQ09TRSkNCj4+ICAgIHNwZWNpZmljYXRpb24uICBUaGlzIHNwZWNpZmljYXRpb24g ZGVzY3JpYmVzIGhvdyB0byBjcmVhdGUgYW5kDQo+PiAgICBwcm9jZXNzIHNpZ25hdHVyZSwgbWVz c2FnZSBhdXRoZW50aWNhdGlvbiBjb2RlcyBhbmQgZW5jcnlwdGlvbiB1c2luZw0KPj4gICAgQ0JP UiBmb3Igc2VyaWFsaXphdGlvbi4gIFRoaXMgc3BlY2lmaWNhdGlvbiBhZGRpdGlvbmFsbHkgc3Bl Y2lmaWVzDQo+PiAgICBob3cgdG8gcmVwcmVzZW50IGNyeXB0b2dyYXBoaWMga2V5cyB1c2luZyBD Qk9SLg0KPj4gDQo+PiANCj4+IA0KPj4gDQo+PiBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtl IGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZg0KPj5zdWJtaXNzaW9uDQo+PiB1 bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xz LmlldGYub3JnLg0KPj4gDQo+PiBUaGUgSUVURiBTZWNyZXRhcmlhdA0KPg0KPg0KPl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+Q09TRSBtYWlsaW5nIGxp c3QNCj5DT1NFQGlldGYub3JnDQo+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9jb3NlDQoNCg== From nobody Wed Nov 23 10:51:06 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F231212A359; Wed, 23 Nov 2016 10:50:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bzzqz6eyJSYg; Wed, 23 Nov 2016 10:50:54 -0800 (PST) Received: from mail-vk0-x22f.google.com (mail-vk0-x22f.google.com [IPv6:2607:f8b0:400c:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFDB912A358; Wed, 23 Nov 2016 10:50:27 -0800 (PST) Received: by mail-vk0-x22f.google.com with SMTP id x186so13540197vkd.1; Wed, 23 Nov 2016 10:50:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=kSIRRa+J4ucoxFCx/iLcY7FyQogfoVKHa8rGXr/c9As=; b=U0MUbm8XwoyjyqMHT8N756NpnVmPM2sO3yqtpscBEqP4nT1sXK2f9o/e7luMLs5vpS k+bRtRb0AI67Fx8dHW0UgzuHWmQ5RUSW2wsssa+34q+T2dvNBchfwb8tApZ+75JWbf0j HJ/y4/qGE7F0qZbvzjyTYktkhiUgcEIMwj/Iq+JJIt7uXfh2e0aPRdY1InFrHk74R8fn nT4i/+iezx3ZUI7UVce2XkNHm0KXxF/XIS0lcnFB70qh+C2el0LfufBB7/uOhzyMvH1o sy4Un/1w9q9r7Q3TgEFPmaD65X3dlmH55l+kAtsiHU7nvdVu1e0oWvLUhPqNqjilJKl+ Q+XA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=kSIRRa+J4ucoxFCx/iLcY7FyQogfoVKHa8rGXr/c9As=; b=l9y6ZZiB+JxmJ70WAWkNNbPf1DRNTdkRGi9OQg+t2leHfjRc9ivF3kpYhkQvDlWmsO ojPpMJHwpIIcnnlbBXGBBgcU5jRvoGWX7LMlJRzngHSU9/VmVuaouFqjfq+SqwqwYAqg m6yVYI+4t+4R6XpZY+Ob1bA3L7Hs9WNZrEStQSupRuJ8EDH0XxUth/SxhaXKG49v/gLB kJXcYQ8czK+bRW5dtPVkwBFgOahpHfkSApBEy49hol+eNJ/jBNNOViwFBEyVw/XB5nna OyzL7CrjTCw/wJ9MDO7lKmhcgLc8+IYPEcr9cLcHhzf1koEXWwwhfoRcMENcnUOFKE5V wl/w== X-Gm-Message-State: AKaTC02PfqZAA0FYWZcRBjulC5lC9U0s09huUfmOGIuJJZhVhxPUsYYwrlu8Z040jwZ3xKA8q9xvDv2p3CvlHA== X-Received: by 10.31.200.4 with SMTP id y4mr1790084vkf.115.1479927026835; Wed, 23 Nov 2016 10:50:26 -0800 (PST) MIME-Version: 1.0 Received: by 10.176.82.143 with HTTP; Wed, 23 Nov 2016 10:50:26 -0800 (PST) In-Reply-To: <049501d21a13$dcaa3a10$95feae30$@augustcellars.com> References: <147503397650.11759.7571084980083889443.idtracker@ietfa.amsl.com> <049501d21a13$dcaa3a10$95feae30$@augustcellars.com> From: Kathleen Moriarty Date: Wed, 23 Nov 2016 13:50:26 -0500 Message-ID: To: Jim Schaad Content-Type: multipart/alternative; boundary=001a114dd558ba66b00541fc5cd0 Archived-At: Cc: Ben Campbell , cose-chairs@ietf.org, The IESG , draft-ietf-cose-msg@ietf.org, =?UTF-8?Q?G=C3=B6ran_Selander?= , "cose@ietf.org" Subject: Re: [COSE] Ben Campbell's No Objection on draft-ietf-cose-msg-18: (with COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Nov 2016 18:50:57 -0000 --001a114dd558ba66b00541fc5cd0 Content-Type: text/plain; charset=UTF-8 Just going back through messages to check on things and noticed a question for me... On Thu, Sep 29, 2016 at 1:39 AM, Jim Schaad wrote: > Changes are in https://github.com/cose-wg/cose-spec/pull/181 > > > > > -----Original Message----- > > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Ben Campbell > > Sent: Tuesday, September 27, 2016 8:40 PM > > To: The IESG > > Cc: cose-chairs@ietf.org; goran.selander@ericsson.com; cose@ietf.org; > draft- > > ietf-cose-msg@ietf.org > > Subject: [COSE] Ben Campbell's No Objection on draft-ietf-cose-msg-18: > (with > > COMMENT) > > > > Ben Campbell has entered the following ballot position for > > draft-ietf-cose-msg-18: No Objection > > > > When responding, please keep the subject line intact and reply to all > email > > addresses included in the To and CC lines. (Feel free to cut this > introductory > > paragraph, however.) > > > > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria. > html > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > The document, along with other ballot positions, can be found here: > > https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ > > > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > A few minor comments: > > > > Substantive: > > > > -1.3, definition of "int": Is that really _unsigned_ or negative? Or is > it a signed > > integer than can be negative or non-negative? (contrasting with uint?) > (Or is int > > merely a parent of nint and uint?) > > Using the terminology of CDDL, this is really unsigned or negative. > Specifically, it would be the union of uint (unsigned - 0 and above) and > nint (negative integer strictly less than 0). Both of these types have > different major types so they are coded differently. > > > > > -3: What is the scope of uniqueness for map labels? I expected it to be > the map, > > but the text immediately aftewards suggests the scope may be the whole > > message. Whatever the answer, it would help to be explicit. > > I kind of thought that it was sufficiently explicit. Does it work better > for you if the first sentence reads: > > If a label is used in one of the maps, it MUST appear only once in that map > and it MUST NOT appear in the other map. > > Then leave the rest of the text in the paragraph alone. > > > > > - Informative References: [I-D.irtf-cfrg-eddsa]: Other algorithm > references are > > normative. Why not this one? > > I plead the 5th. It would be because I pasted it in the wrong place and > missed the fact. I have been acting as if this was a normative reference. > Kathleen, is there a problem if I just move this reference? > Not a problem anymore as this one is ahead of COSE now in the RFC editor queue. I see it was moved and that's just fine. Thanks, Kathleen > > > > > Editorial: > > > > "Contributing to this Memo" section: Is this intended to stay in the > final > RFC? If > > not, it might be worth a note to the RFC editor. > > The not already exists in the XML. > > > > > -1, first paragraph, last sentence: Comma splice. > Changed in response to the Gen-Art review already. > > > > > -1, 2nd paragraph: MAC usually expands to Message Authentication _Code_. > Yeah, Changed in response to the Gen-Art review already > > > > > -2, 6th paragraph, last sentence: s/method/methods (assuming the > following > > list is a list of methods, and not steps in a method. > Should be plural - changed > > > > > -3, definition of protected: > Did you lose some text at this point? > > > > > -4.1, "COSE_Sign_Tagged = #6.991(COSE_Sign) ; Replace 991 with TBD1": Is > the > > comment intended as a note to the RFC editor? If so, it might be helpful > to label > > it as such. > Added as a note to the XML > > > > > -4.3, first bullet: "If multiple items are included, care needs to be > taken that data > > cannot bleed between the items." > > Is this talking about data framing, or something else? > > That is probably not the term that I would use for this, but it is similar. > The requirement is to make sure that data from one item is separated from > another item so that when the hash string is constructed the same hash > string cannot be constructed for two different pairs of items. > > Jim > > > > > > > > _______________________________________________ > > COSE mailing list > > COSE@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > -- Best regards, Kathleen --001a114dd558ba66b00541fc5cd0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Just going back through messages to check on things and no= ticed a question for me...

On Thu, Sep 29, 2016 at 1:39 AM, Jim Schaad <= ietf@augustcell= ars.com> wrote:
Changes are= in https://github.com/cose-wg/cose-spec/pull/181<= /a>



> -----Original Message-----
> From: COSE [mailto:cose-bounc= es@ietf.org] On Behalf Of Ben Campbell
> Sent: Tuesday, September 27, 2016 8:40 PM
> To: The IESG <iesg@ietf.org>= ;
> Cc: cose-chairs@ietf.org; = goran.selander@ericsson.com<= /a>; cose@ietf.org;
draft-
> ietf-cose-msg@ietf.org > Subject: [COSE] Ben Campbell's No Objection on draft-ietf-cose-msg= -18:
(with
> COMMENT)
>
> Ben Campbell has entered the following ballot position for
> draft-ietf-cose-msg-18: No Objection
>
> When responding, please keep the subject line intact and reply to all<= br> email
> addresses included in the To and CC lines. (Feel free to cut this
introductory
> paragraph, however.)
>
>
> Please refer to https://www.ietf.org/i= esg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
>
>
> The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/dra= ft-ietf-cose-msg/
>
>
>
> ------------------------------------------------------------= ----------
> COMMENT:
> ------------------------------------------------------------= ----------
>
> A few minor comments:
>
> Substantive:
>
> -1.3, definition of "int": Is that really _unsigned_ or nega= tive?=C2=A0 Or is
it a signed
> integer than can be negative or non-negative? (contrasting with uint?)=
(Or is int
> merely a parent of nint and uint?)

Using the terminology of CDDL, this is really unsigned or negat= ive.
Specifically, it would be the union of uint (unsigned - 0 and above) and nint (negative integer strictly less than 0).=C2=A0 Both of these types hav= e
different major types so they are coded differently.

>
> -3: What is the scope of uniqueness for map labels? I expected it to b= e
the map,
> but the text immediately aftewards suggests the scope may be the whole=
> message. Whatever the answer, it would help to be explicit.

I kind of thought that it was sufficiently explicit.=C2=A0 Does it w= ork better
for you if the first sentence reads:

If a label is used in one of the maps, it MUST appear only once in that map=
and it MUST NOT appear in the other map.

Then leave the rest of the text in the paragraph alone.

>
> - Informative References: [I-D.irtf-cfrg-eddsa]: Other algorithm
references are
> normative. Why not this one?

I plead the 5th.=C2=A0 It would be because I pasted it in the wrong = place and
missed the fact.=C2=A0 I have been acting as if this was a normative refere= nce.
Kathleen, is there a problem if I just move this reference?

Not a problem anymore as this one is ahead of COSE now= in the RFC editor queue.=C2=A0 I see it was moved and that's just fine= . =C2=A0

Thanks,
Kathleen
=C2= =A0

>
> Editorial:
>
> "Contributing to this Memo" section: Is this intended to sta= y in the final
RFC? If
> not, it might be worth a note to the RFC editor.

The not already exists in the XML.

>
> -1, first paragraph, last sentence: Comma splice.
Changed in response to the Gen-Art review already.

>
> -1, 2nd paragraph: MAC usually expands to Message Authentication _Code= _.
Yeah, Changed in response to the Gen-Art review already

>
> -2, 6th paragraph, last sentence: s/method/methods=C2=A0 (assuming the=
following
> list is a list of methods, and not steps in a method.
Should be plural - changed

>
> -3, definition of protected:
Did you lose some text at this point?

>
> -4.1,=C2=A0 "COSE_Sign_Tagged =3D #6.991(COSE_Sign) ; Replace 991= with TBD1": Is
the
> comment intended as a note to the RFC editor? If so, it might be helpf= ul
to label
> it as such.
Added as a note to the XML

>
> -4.3, first bullet: "If multiple items are included, care needs t= o be
taken that data
>=C2=A0 =C2=A0 =C2=A0 =C2=A0cannot bleed between the items."
> Is this talking about data framing, or something else?

That is probably not the term that I would use for this, but it is s= imilar.
The requirement is to make sure that data from one item is separated from another item so that when the hash string is constructed the same hash
string cannot be constructed for two different pairs of items.

Jim


>
>
> _______________________________________________
> COSE mailing list
> COSE@ietf.org
> https://www.ietf.org/mailman/listinfo/cose
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose



--
Best regards,
Kathleen
--001a114dd558ba66b00541fc5cd0-- From nobody Wed Nov 23 11:01:10 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C34B112A390 for ; Wed, 23 Nov 2016 11:00:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YuEnY9RMcSgU for ; Wed, 23 Nov 2016 11:00:54 -0800 (PST) Received: from mail-ua0-x22b.google.com (mail-ua0-x22b.google.com [IPv6:2607:f8b0:400c:c08::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2C7A12A371 for ; Wed, 23 Nov 2016 11:00:48 -0800 (PST) Received: by mail-ua0-x22b.google.com with SMTP id 51so23679364uai.1 for ; Wed, 23 Nov 2016 11:00:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to; bh=dN8YSK6qhsoCpVV0ltNpJSz+of/1VaF4zXxTyopBaSE=; b=sufELf7Ca4NNskjNzsh3DJUcs2XbjmU3DJibii5lgnqWlJW/Su5ttv9eJQeemFUnCd M/n+VxGojxErPzu97YVlt8lSoVPkW8WTJp4qwKo53WigBRcvcurp63ikgve96Sh/u2Jk oNF9ZkdPWzjNrlLXZBh2e5bLzkLMK9FG4AAeAuRPIw2YkwRoTL1p0n9xLVDmpfB5Z9aj I5MPzEBKc+alGwrwqoOGLJo2ObS/Swl48AQVWAmY8y4LN2OkzIsnzKV1qsmYrsokDXzg YR+Be51/kGRE75Pmwwq8pwccRwbNNVX4lztaPUya53kJ6401qHA5ylOVv3mjFyvMWrAz RtxQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=dN8YSK6qhsoCpVV0ltNpJSz+of/1VaF4zXxTyopBaSE=; b=Y6fbIp+na48nv/uEBcaYd9buuXIaQWK1WQlgVgHTer8mEq9F0O8cgh8Eck1FbG9RJQ m4ixMoRMwGkVBfnJzDF7UKnN4nzIMCc0EgEaiIkcRhbJiqvVjq0L7Ltv2ZTWLL9MbRjJ xfFVdgRB9DkGzglYk896u4jA/CcATFg+cdOio2iHG+GNwV6M3GqOEI8yadQ/s+bJD68i b4ytznwNWVICgrp3XIYAb++yjgd0UvsRwDg4JEF+RbB3OqwFlYzEhC2Zyg7aHskwFqTH /IIUcjZJLPbLpG3FTbDvsGEjn80bNI536BRo0Ic03U7px1sFQLFvsRMF/io4GleC/6FM WwFA== X-Gm-Message-State: AKaTC01ygT6P4/+4pG7Sa4OhU9iJpSVOHINYmgmgVrPmJDu/rO88okg1hqZFAX1mZT0d+55legXLUqwYczrX0A== X-Received: by 10.176.82.214 with SMTP id w22mr3300622uaw.167.1479927648109; Wed, 23 Nov 2016 11:00:48 -0800 (PST) MIME-Version: 1.0 Received: by 10.176.82.143 with HTTP; Wed, 23 Nov 2016 11:00:47 -0800 (PST) From: Kathleen Moriarty Date: Wed, 23 Nov 2016 14:00:47 -0500 Message-ID: To: "cose@ietf.org" Content-Type: multipart/alternative; boundary=94eb2c18fad0c248230541fc81af Archived-At: Subject: [COSE] draft-ietf-cose-msg X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Nov 2016 19:00:56 -0000 --94eb2c18fad0c248230541fc81af Content-Type: text/plain; charset=UTF-8 Hello, Thank you very much to the chairs, editors, and contributors to the COSE working group for working together to quickly achieve the goals set forth in the charter and bringing the WG to a close! draft-ietf-cose-msg was just approved for publication thanks to your hard work. I'll request closing the working group shortly. -- Best regards, Kathleen --94eb2c18fad0c248230541fc81af Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hello,

Thank you very much to the chair= s, editors, and contributors to the COSE working group for working together= to quickly achieve the goals set forth in the charter and bringing the WG = to a close! =C2=A0draft-ietf-cose-msg was just approved for publication tha= nks to your hard work.=C2=A0 I'll request closing the working group sho= rtly.

--

Best regards,
Kathleen
--94eb2c18fad0c248230541fc81af-- From nobody Wed Nov 23 20:28:44 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A140E129413 for ; Wed, 23 Nov 2016 20:28:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.697 X-Spam-Level: X-Spam-Status: No, score=-5.697 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id onhDa3yeJAR5 for ; Wed, 23 Nov 2016 20:28:41 -0800 (PST) Received: from dmz-mailsec-scanner-2.mit.edu (dmz-mailsec-scanner-2.mit.edu [18.9.25.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4478D128E19 for ; Wed, 23 Nov 2016 20:28:41 -0800 (PST) X-AuditID: 1209190d-617ff70000007d30-c0-58366c778741 Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by (Symantec Messaging Gateway) with SMTP id 5D.57.32048.77C66385; Wed, 23 Nov 2016 23:28:40 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id uAO4Sdgv003534; Wed, 23 Nov 2016 23:28:39 -0500 Received: from [192.168.1.7] (d-24-233-119-183.cpe.metrocast.net [24.233.119.183]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id uAO4SZNb021818 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Wed, 23 Nov 2016 23:28:36 -0500 Date: Wed, 23 Nov 2016 23:28:31 -0500 Message-ID: <6aswyrepgm3ha18d78945lrv.1479961711897@email.android.com> Importance: normal From: Justin Richer To: Kathleen Moriarty , "cose@ietf.org" MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--_com.samsung.android.email_1472672511607520" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrLIsWRmVeSWpSXmKPExsUixG6noluRYxZh0LNS0GLa1qmsFg078x2Y PHbOusvusWTJT6YApigum5TUnMyy1CJ9uwSujGnLXQqapCoOvWllaWCcItnFyMkhIWAi8ffj BuYuRi4OIYE2Jol5jxayQDgbGSUWv/vMDuGcZ5K4smQzI0gLi4CqxLIn55hAbGEBdYl7D3ey gNi8Am4SU7ddBmrg4OAUEJLo2iUBEmYDKp++pgWsXEQgRaLz8y2ockGJkzOfgNnMArES/+5P ZpzAyDMLSWoWkhSErS7xZ94lZghbUWJK90P2WUDbmAXUJJa1KiELL2BkW8Uom5JbpZubmJlT nJqsW5ycmJeXWqRrpJebWaKXmlK6iREUipySvDsY/931OsQowMGoxMM7Y41phBBrYllxZe4h RkkOJiVR3tWfgUJ8SfkplRmJxRnxRaU5qcWHGCU4mJVEeNvTzSKEeFMSK6tSi/JhUtIcLEri vP/dvoYLCaQnlqRmp6YWpBbBZGU4OJQkeLOzgRoFi1LTUyvSMnNKENJMHJwgw3mAhstmggwv LkjMLc5Mh8ifYlSUEuflBGkWAElklObB9YJShcTL8u2vGMWBXhHmvQBSxQNMM3Ddr4AGMwEN lvxmDDK4JBEhJdXAGKOtn+59y1ngRVvdvcTnGec/Tr/gdvtNItf9y9dv+R5X+rtbWXH2TuXc yDT1LVfny1S+inzyekW3w0fTn9Hx23hSV9ZYhh7/6tNtrPBxcvxMXk3D29Enn15072n9fWnR ly8X9hw4XLb4zV+BB9liTpGX7JYZF9ou0jBiObLyC08T71bbOK2zjkosxRmJhlrMRcWJAErB Id3wAgAA Archived-At: Subject: Re: [COSE] draft-ietf-cose-msg X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Nov 2016 04:28:42 -0000 ----_com.samsung.android.email_1472672511607520 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 ClRoYW5rIHlvdSwgS2F0aGxlZW4sIGFuZCB0aGFuayB5b3UgdG8gYWxsIHRoZSBtZW1iZXJzIG9m IHRoZSB3b3JraW5nIGdyb3VwIGZvciB5b3VyIGhhcmQgd29yay7CoAotLUp1c3RpbiwgeW91ciBD T1NFIGNoYWlyIG5vIG1vcmUKwqBTZW50IGZyb20gbXkgcGhvbmUKLS0tLS0tLS0gT3JpZ2luYWwg bWVzc2FnZSAtLS0tLS0tLUZyb206IEthdGhsZWVuIE1vcmlhcnR5IDxrYXRobGVlbi5tb3JpYXJ0 eS5pZXRmQGdtYWlsLmNvbT4gRGF0ZTogMTEvMjMvMTYgIDI6MDAgUE0gIChHTVQtMDU6MDApIFRv OiBjb3NlQGlldGYub3JnIFN1YmplY3Q6IFtDT1NFXSBkcmFmdC1pZXRmLWNvc2UtbXNnIApIZWxs bywKVGhhbmsgeW91IHZlcnkgbXVjaCB0byB0aGUgY2hhaXJzLCBlZGl0b3JzLCBhbmQgY29udHJp YnV0b3JzIHRvIHRoZSBDT1NFIHdvcmtpbmcgZ3JvdXAgZm9yIHdvcmtpbmcgdG9nZXRoZXIgdG8g cXVpY2tseSBhY2hpZXZlIHRoZSBnb2FscyBzZXQgZm9ydGggaW4gdGhlIGNoYXJ0ZXIgYW5kIGJy aW5naW5nIHRoZSBXRyB0byBhIGNsb3NlISDCoGRyYWZ0LWlldGYtY29zZS1tc2cgd2FzIGp1c3Qg YXBwcm92ZWQgZm9yIHB1YmxpY2F0aW9uIHRoYW5rcyB0byB5b3VyIGhhcmQgd29yay7CoCBJJ2xs IHJlcXVlc3QgY2xvc2luZyB0aGUgd29ya2luZyBncm91cCBzaG9ydGx5LgoKLS0gCgpCZXN0IHJl Z2FyZHMsS2F0aGxlZW4KCg== ----_com.samsung.android.email_1472672511607520 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0 L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPjwvaGVhZD48Ym9keT48ZGl2Pjxicj48L2Rpdj48ZGl2PlRo YW5rIHlvdSwgS2F0aGxlZW4sIGFuZCB0aGFuayB5b3UgdG8gYWxsIHRoZSBtZW1iZXJzIG9mIHRo ZSB3b3JraW5nIGdyb3VwIGZvciB5b3VyIGhhcmQgd29yay4mbmJzcDs8L2Rpdj48ZGl2Pjxicj48 L2Rpdj48ZGl2IGlkPSJjb21wb3Nlcl9zaWduYXR1cmUiPjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRl bnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PVVURi04Ij48ZGl2IHN0eWxlPSJm b250LXNpemU6ODUlO2NvbG9yOiM1NzU3NTciPi0tSnVzdGluLCB5b3VyIENPU0UgY2hhaXIgbm8g bW9yZTwvZGl2PjxkaXYgc3R5bGU9ImZvbnQtc2l6ZTo4NSU7Y29sb3I6IzU3NTc1NyI+PGJyPjwv ZGl2PjxkaXYgc3R5bGU9ImZvbnQtc2l6ZTo4NSU7Y29sb3I6IzU3NTc1NyI+Jm5ic3A7PGk+U2Vu dCBmcm9tIG15IHBob25lPC9pPjwvZGl2PjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXYgc3R5bGU9 ImZvbnQtc2l6ZToxMDAlO2NvbG9yOiMwMDAwMDAiPjwhLS0gb3JpZ2luYWxNZXNzYWdlIC0tPjxk aXY+LS0tLS0tLS0gT3JpZ2luYWwgbWVzc2FnZSAtLS0tLS0tLTwvZGl2PjxkaXY+RnJvbTogS2F0 aGxlZW4gTW9yaWFydHkgJmx0O2thdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tJmd0OyA8 L2Rpdj48ZGl2PkRhdGU6IDExLzIzLzE2ICAyOjAwIFBNICAoR01ULTA1OjAwKSA8L2Rpdj48ZGl2 PlRvOiBjb3NlQGlldGYub3JnIDwvZGl2PjxkaXY+U3ViamVjdDogW0NPU0VdIGRyYWZ0LWlldGYt Y29zZS1tc2cgPC9kaXY+PGRpdj48YnI+PC9kaXY+PC9kaXY+PG1ldGEgaHR0cC1lcXVpdj0iQ29u dGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPjxkaXYgZGlyPSJs dHIiPkhlbGxvLDxkaXY+PGJyPjwvZGl2PjxkaXY+VGhhbmsgeW91IHZlcnkgbXVjaCB0byB0aGUg Y2hhaXJzLCBlZGl0b3JzLCBhbmQgY29udHJpYnV0b3JzIHRvIHRoZSBDT1NFIHdvcmtpbmcgZ3Jv dXAgZm9yIHdvcmtpbmcgdG9nZXRoZXIgdG8gcXVpY2tseSBhY2hpZXZlIHRoZSBnb2FscyBzZXQg Zm9ydGggaW4gdGhlIGNoYXJ0ZXIgYW5kIGJyaW5naW5nIHRoZSBXRyB0byBhIGNsb3NlISAmbmJz cDtkcmFmdC1pZXRmLWNvc2UtbXNnIHdhcyBqdXN0IGFwcHJvdmVkIGZvciBwdWJsaWNhdGlvbiB0 aGFua3MgdG8geW91ciBoYXJkIHdvcmsuJm5ic3A7IEknbGwgcmVxdWVzdCBjbG9zaW5nIHRoZSB3 b3JraW5nIGdyb3VwIHNob3J0bHkuPGJyIGNsZWFyPSJhbGwiPjxkaXY+PGJyPjwvZGl2Pi0tIDxi cj48ZGl2IGNsYXNzPSJnbWFpbF9zaWduYXR1cmUiPjxkaXYgZGlyPSJsdHIiPjxicj48ZGl2PkJl c3QgcmVnYXJkcyw8L2Rpdj48ZGl2PkthdGhsZWVuPC9kaXY+PC9kaXY+PC9kaXY+CjwvZGl2Pjwv ZGl2Pgo8L2JvZHk+PC9odG1sPg== ----_com.samsung.android.email_1472672511607520-- From nobody Wed Nov 23 22:43:23 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D2E312947E for ; Wed, 23 Nov 2016 22:43:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e-m0fZGLVsNA for ; Wed, 23 Nov 2016 22:43:18 -0800 (PST) Received: from mail-wm0-x233.google.com (mail-wm0-x233.google.com [IPv6:2a00:1450:400c:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A3F61294B4 for ; Wed, 23 Nov 2016 22:43:16 -0800 (PST) Received: by mail-wm0-x233.google.com with SMTP id a197so102406083wmd.0 for ; Wed, 23 Nov 2016 22:43:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=dTNrno9Sb/wrxALH6nJF5mR1YwVvjrIAaPQfWgEC1rI=; b=rFtrPvUR1oFQ76MzhvhoRLTtAT15fvstphLj0uiuuFhEIiro3w9KSP5yXjMjgc8TPz RxCWlZ+QCx5OAlqI7uodLYtIF53/7FwZ0Yzsvvpykejagn+8/xa1ZfzrpHFIyWE0g2t4 wzvRhrx8aQbiQo1mxCSXYwqFqecWxDQWSOkWRcmmMWRZobW+8OiMiAo1yn7h7swSZOzq 0fDPHoqUQSDN2P0JgMHAP2e++JLry8cuU5KQl5gejQzY2rUkBRsPJA4H6rjNXYd1jkIo n2LFKoAFLU1CHPoxwf3wF+iALsXys+B6vMo9KBfJo0v1niDSSwjkz147BDhwl3+xwbi6 nO4w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=dTNrno9Sb/wrxALH6nJF5mR1YwVvjrIAaPQfWgEC1rI=; b=LYEy97vyPtwijtPjj1g5QH8ROSuAlx3bUKT0+f+sQ+UWn59ZhxLvSmu+HHIjXa7NVv nqj1Ujht9p0WilVshN0FidapPBZhye4hSeBb5bXEqfidYGAFcgQ1lsz/YS/MfEetANLU 48pXc9aj0yudMP7+t70mhwi+BcmjGMoXUi03CDewbAghdiDqzVuAstLWYuOz6RUDIqSU 2uq9m5ChA5oNSWKvwSDhpN3OCKcvdTUGP9DjHPe0jiRHfVJJtMsz0G5ioqF7MyJCklXv 3w06EYcBXinkOE4d7KwM/h3K8YcBqUifFUuoVr0PGffsV1vyDu7dWYdNLaXIoW4Ms2c5 xEiA== X-Gm-Message-State: AKaTC02DOT39hfOjjwgZK/0IfmLWffDpk6uyXwOAWwoPA8b4rtopK4PbRSEKJB0sjpinT2+EGGkM/ZxxQq+fQA== X-Received: by 10.28.141.143 with SMTP id p137mr691616wmd.5.1479969795415; Wed, 23 Nov 2016 22:43:15 -0800 (PST) MIME-Version: 1.0 Received: by 10.194.117.103 with HTTP; Wed, 23 Nov 2016 22:43:15 -0800 (PST) In-Reply-To: <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> References: <147987163959.30322.14158962529156430503.idtracker@ietfa.amsl.com> <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> From: Samuel Erdtman Date: Thu, 24 Nov 2016 07:43:15 +0100 Message-ID: To: Jim Schaad , "Lundblade, Laurence" Content-Type: multipart/alternative; boundary=001a114717b6ef363105420651d8 Archived-At: Cc: cose Subject: Re: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Nov 2016 06:43:21 -0000 --001a114717b6ef363105420651d8 Content-Type: text/plain; charset=UTF-8 Looks like a good start to me. Laurence what do you think? //Samuel On Wed, Nov 23, 2016 at 6:00 AM, Jim Schaad wrote: > This is a rough draft of what a set of X.509 headers could look like. > There is lots of things that are incomplete or missing, but I said I would > write up a fast version for people to look at so here it is. > > If you are interested, please comment on the headers. The pointer to the > github repository is in the document. > > Jim > > > > -----Original Message----- > > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > > Sent: Tuesday, November 22, 2016 7:27 PM > > To: Jim Schaad > > Subject: New Version Notification for draft-schaad-cose-x509-00.txt > > > > > > A new version of I-D, draft-schaad-cose-x509-00.txt has been successfully > > submitted by Jim Schaad and posted to the IETF repository. > > > > Name: draft-schaad-cose-x509 > > Revision: 00 > > Title: CBOR Encoded Message Syntax (COSE): Headers for > carrying > > and referencing X.509 certificates > > Document date: 2016-11-22 > > Group: Individual Submission > > Pages: 6 > > URL: https://www.ietf.org/internet- > drafts/draft-schaad-cose-x509-00.txt > > Status: https://datatracker.ietf.org/doc/draft-schaad-cose-x509/ > > Htmlized: https://tools.ietf.org/html/draft-schaad-cose-x509-00 > > > > > > Abstract: > > This document defines the headers and usage for referring to and > > transporting X.509 certificates in the CBOR Encoded Message (COSE) > > Syntax. > > > > Contributing to this document > > > > The source for this draft is being maintained in GitHub. Suggested > > changes should be submitted as pull requests at > cose-wg/X509>. Instructions are on that page as well. Editorial > > changes can be managed in GitHub, but any substantial issues need to > > be discussed on the COSE mailing list. > > > > > > > > > > Please note that it may take a couple of minutes from the time of > submission > > until the htmlized version and diff are available at tools.ietf.org. > > > > The IETF Secretariat > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > --001a114717b6ef363105420651d8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Looks like a good start to me.

Laur= ence what do you think?

//Samuel

On Wed, Nov 23, 2016 at 6:00 AM, Jim = Schaad <ietf@augustcellars.com> wrote:
This is a rough draft of what a set of X.509 headers coul= d look like.=C2=A0 There is lots of things that are incomplete or missing, = but I said I would write up a fast version for people to look at so here it= is.

If you are interested, please comment on the headers.=C2=A0 The pointer to = the github repository is in the document.

Jim


> -----Original Message-----
> From: internet-drafts@ietf= .org [mailto:internet-draft= s@ietf.org]
> Sent: Tuesday, November 22, 2016 7:27 PM
> To: Jim Schaad <ietf@augu= stcellars.com>
> Subject: New Version Notification for draft-schaad-cose-x509-00.txt >
>
> A new version of I-D, draft-schaad-cose-x509-00.txt has been successfu= lly
> submitted by Jim Schaad and posted to the IETF repository.
>
> Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-schaad-cose-x509
> Revision:=C2=A0 =C2=A0 =C2=A000
> Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 CBOR Enc= oded Message Syntax (COSE): Headers for carrying
> and referencing X.509 certificates
> Document date:=C2=A0 =C2=A0 =C2=A0 =C2=A0 2016-11-22
> Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individu= al Submission
> Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 6
> URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/internet-drafts/draft-schaad-cos= e-x509-00.txt
> Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://datatracker.ietf.org/doc/draft-schaad-cose-x509/
> Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0https:= //tools.ietf.org/html/draft-schaad-cose-x509-00
>
>
> Abstract:
>=C2=A0 =C2=A0 This document defines the headers and usage for referring= to and
>=C2=A0 =C2=A0 transporting X.509 certificates in the CBOR Encoded Messa= ge (COSE)
>=C2=A0 =C2=A0 Syntax.
>
> Contributing to this document
>
>=C2=A0 =C2=A0 The source for this draft is being maintained in GitHub.= =C2=A0 Suggested
>=C2=A0 =C2=A0 changes should be submitted as pull requests at <https://git= hub.com/
>=C2=A0 =C2=A0 cose-wg/X509>.=C2=A0 Instructions are on that page as = well.=C2=A0 Editorial
>=C2=A0 =C2=A0 changes can be managed in GitHub, but any substantial iss= ues need to
>=C2=A0 =C2=A0 be discussed on the COSE mailing list.
>
>
>
>
> Please note that it may take a couple of minutes from the time of subm= ission
> until the htmlized version and diff are available at tools.ietf.org. >
> The IETF Secretariat


_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

--001a114717b6ef363105420651d8-- From nobody Mon Nov 28 12:45:02 2016 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C4779127077; Mon, 28 Nov 2016 12:44:52 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.38.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148036589279.5470.12771092435880786130.idtracker@ietfa.amsl.com> Date: Mon, 28 Nov 2016 12:44:52 -0800 Archived-At: Cc: cose@ietf.org, cose-chairs@ietf.org, Kathleen.Moriarty.ietf@gmail.com, The IESG , draft-ietf-cose-msg@ietf.org, goran.selander@ericsson.com, rfc-editor@rfc-editor.org Subject: [COSE] Protocol Action: 'CBOR Object Signing and Encryption (COSE)' to Proposed Standard (draft-ietf-cose-msg-24.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Nov 2016 20:44:53 -0000 The IESG has approved the following document: - 'CBOR Object Signing and Encryption (COSE)' (draft-ietf-cose-msg-24.txt) as Proposed Standard This document is the product of the CBOR Object Signing and Encryption Working Group. The IESG contact persons are Stephen Farrell and Kathleen Moriarty. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-msg/ Technical Summary This specification describes how to create and process signatures, message authentication codes and encryption using the Concise Binary Object Representation (CBOR, RFC7049) for serialization. The specification additionally specifies how to represent cryptographic keys using CBOR. This specification is a Standards Track RFC describing a solution component analogous to the JSON Web suite of security RFCs 7515-7518 (JOSE WG), but using the CBOR encoding format. Working Group Summary The document was developed by the COSE working group based on requirements from constrained device/IoT community (CORE/ACE WGs) and on the experience of developing the JSON Web security suite of RFCs (JOSE/OAuth WGs). There is a small dedicated team of people interested in this work, and reviews has been performed mainly by these people. One category of issues has been on generic message format vs dedicated formats optimized for certain constrained settings. This was resolved with a small set of dedicated formats complementing the generic formats. Another category of issues has been on the deviations from JOSE or omission of legacy crypto not suitable for constrained devices. There has been some contention by individuals of how individual review comments were addressed. There are no substained objections on any issues relating to this draft. The current open issues are related to additional algorithm and is out of scope for this draft. Document Quality The draft records the status of known implementations of the protocol defined by this specification (based on RFC 7942). Three implementations currently maintained by the author are referenced, in Java, C# and C (https://github.com/cose-wg). Ongoing work on a JavaScript implementation has been announced. Implementations optimized for constrained platforms are requested by different companies and is in progress. The SecDir review was performed by Steve Kent and was thorough. While something could always be missed, Steve has experience with crypto applications, so his review should alleviate concerns mentioned in the shepherd write up about a security review. Changes from this review are in GitHub: https://github.com/cose-wg/cose-spec Personnel The document shepherd is Göran Selander. The responsible Area Director is Kathleen Moriarty. IANA Note This draft creates the following registries with expert review required and with specification required only where noted: 16.2: COSE Header Parameters registry, with specification (specification, standards track specification, or just expert review) required depending on the value of the 'label' requested. 16.3 COSE Header Algorithm Parameters registry 16.4. COSE Algorithms Registry, with specification required (specification, standards track specification, or just expert review) required depending on the integer 'value' requested. 16.5. COSE Key Common Parameters registry, with specification (specification, standards track specification, or just expert review) required depending on the value of the 'label' requested. 16.6. COSE Key Type Parameters registry 16.7. COSE Key Type registry 16.8. COSE Elliptic Curve Parameters registry, with specification (specification, standards track specification, or just expert review) required depending on the integer 'value' requested. This draft also adds entries to the following registries: 16.1: Assigns Tags from the "CBOR Tags" registry 16.9: Adds two entries to the "Media Types" registry 16.10: Adds entries to the "CoAP Content-Format" registry RFC Editor Note 3 references will need to be updated during the editing process: - draft-moriarty-pkcs5-v2dot1 is currently in the RFC Editor Queue as RFC-to-be 8018 - draft-moriarty-pkcs1 has been published as RFC 8017 - draft-selander-ace-object-security has been adopted in CoRE and replaced by draft-ietf-core-object-security. From nobody Tue Nov 29 09:35:40 2016 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DF40C129691; Tue, 29 Nov 2016 09:35:26 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IESG Secretary To: "IETF Announcement List" X-Test-IDTracker: no X-IETF-IDTracker: 6.38.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148044092634.11752.11810154234865008632.idtracker@ietfa.amsl.com> Date: Tue, 29 Nov 2016 09:35:26 -0800 Archived-At: Cc: kepeng.lkp@alibaba-inc.com, jricher@mit.edu, cose@ietf.org Subject: [COSE] WG Action: Conclusion of CBOR Object Signing and Encryption (cose) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Reply-To: ietf@ietf.org List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Nov 2016 17:35:27 -0000 The CBOR Object Signing and Encryption (cose) WG in the Security Area has concluded. The IESG contact persons are Kathleen Moriarty and Stephen Farrell. The mailing list will remain open. From nobody Wed Nov 30 06:21:53 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D4961295DE for ; Wed, 30 Nov 2016 06:21:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=philips.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WtsGbJHPNhc2 for ; Wed, 30 Nov 2016 06:21:49 -0800 (PST) Received: from emea01-db3-obe.outbound.protection.outlook.com (mail-db3on0731.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe04::731]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 458C612951F for ; Wed, 30 Nov 2016 06:21:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Philips.onmicrosoft.com; s=selector1-philips-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=j5pr1HugBZTVlx4FgoT7GN+BAnIttFH426/PHWvZ8Dg=; b=Gpjy1gQ/izqVfZhinzbE7S/ErQuFv9XUgJPUpufCpIMfN2Cy6EkdlsLH3oOoUMXv0rHSAH2GO4WON6p5rVfm1yliSnyxwcMjmGT6ryOoHcM5C33xjSu11DH2jdYi98OpvUQLqBsvXRuwBPk1MtX8dB6ADC3FPbcWpsc0zCbCsg8= Received: from DB5P122CA0002.EURP122.PROD.OUTLOOK.COM (129.75.100.208) by DB5P122MB0022.EURP122.PROD.OUTLOOK.COM (129.75.100.217) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.10; Wed, 30 Nov 2016 14:21:29 +0000 Received: from DB3FFO11FD010.protection.gbl (2a01:111:f400:7e04::105) by DB5P122CA0002.outlook.office365.com (2603:10a6:20:2::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.18 via Frontend Transport; Wed, 30 Nov 2016 14:21:29 +0000 Authentication-Results: spf=none (sender IP is 40.103.22.84) smtp.mailfrom=philips.com; augustcellars.com; dkim=none (message not signed) header.d=none;augustcellars.com; dmarc=none action=none header.from=philips.com; Received-SPF: None (protection.outlook.com: philips.com does not designate permitted sender hosts) Received: from 011-smtp-out.Philips.com (40.103.22.84) by DB3FFO11FD010.mail.protection.outlook.com (10.47.216.166) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.4 via Frontend Transport; Wed, 30 Nov 2016 14:21:28 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:; UpperCasedChecksum:; SizeAsReceived:4608; Count:57 Received: from VI1PR9003MB0237.MGDPHG.emi.philips.com (129.75.99.82) by VI1PR9003MB0239.MGDPHG.emi.philips.com (129.75.99.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.8; Wed, 30 Nov 2016 14:21:27 +0000 Received: from VI1PR9003MB0237.MGDPHG.emi.philips.com ([129.75.99.82]) by VI1PR9003MB0237.MGDPHG.emi.philips.com ([129.75.99.82]) with mapi id 15.01.0734.020; Wed, 30 Nov 2016 14:21:27 +0000 From: "Kumar, Sandeep" To: Jim Schaad , "cose@ietf.org" Thread-Topic: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt Thread-Index: AQGas+U5hOX2ZwwTfdISQ4lSrZ9yRaFVJOfwgAudKuA= Date: Wed, 30 Nov 2016 14:21:27 +0000 Message-ID: References: <147987163959.30322.14158962529156430503.idtracker@ietfa.amsl.com> <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> In-Reply-To: <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [194.171.252.122] X-MS-Office365-Filtering-Correlation-Id: 498e5bbb-0fae-4de2-63d8-08d4192c2cbe Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OrganizationHeadersPreserved: VI1PR9003MB0239.MGDPHG.emi.philips.com X-IncomingHeaderCount: 57 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-Forefront-Antispam-Report: CIP:40.103.22.84; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(7916002)(2980300002)(428002)(189002)(55904004)(85714005)(374574003)(377454003)(377424004)(199003)(13464003)(39410400001)(229853002)(6116002)(102836003)(23726003)(76176999)(39450400002)(54356999)(69596002)(86362001)(92566002)(3846002)(2906002)(50986999)(50466002)(7696004)(46406003)(4001150100001)(24736003)(33646002)(5001770100001)(305945005)(2950100002)(8936002)(106466001)(356003)(101416001)(97756001)(97736004)(2900100001)(105586002)(8746002)(106116001)(230783001)(68736007)(189998001)(107886002)(15650500001)(66066001)(38730400001)(5660300001)(81166006)(81156014)(7736002)(626004)(2501003)(108616004)(7846002)(47776003); DIR:OUT; SFP:1102; SCL:1; SRVR:DB5P122MB0022; H:011-smtp-out.Philips.com; FPR:; SPF:None; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; DB3FFO11FD010; 1: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 X-CrossPremisesHeadersPromoted: DB3FFO11FD010.protection.gbl X-CrossPremisesHeadersFiltered: DB3FFO11FD010.protection.gbl X-Microsoft-Exchange-Diagnostics: 1; DB5P122MB0022; 2:xfST8qx6vg4KXb6zUxO5deOtKG5xMrU+OYYQ8KESSzKbymOZV/q3kXh8fLNLXqA/6vmhU5HbmmVwAenRIcugOuudMkrCQIUEgT4C6cVFjiCVQWJkapHgcMlCYhtG7uIXS3QYA9gU99MjLQy+NDxYs6LHm6T+yaPuN3YhVy+ogzc=; 3:eGTv9VBd3Rd3W2RnBj+8nroTaWkMqbuQmVHKU7S5FeLPT2eKPYvL09QPG8lxdyukWJJKiSilqtHjbe0YmOc4GlSA+0pdRCpcbkwdkKn2suMH5erP52f0Ig3adz/Oqbjagopxfhb1oCztPH/jUD1GqRKlL9IHNagtmA5kzXd3BpQLKMWd1UKNZGtALMRicvO0TNyF/gvSszPurLgcDhjtP2VztYz9gxRCwsfwO2fB4APi+Cu8+UVHOvKIMSmeZlzZWzPOlCA/YAwOWvw7jzoYcA==; 25:+zO5o93Rf2RTLjW3evLZmWMuDPil/WG5Wn4OtIk036IPCJia61EwnmsxN5Qrlw7cMJCHTNCl6KmqKLHk2944TjcKGE9+F1HUY8uKSCiCUIk53o4iRK3HB+MEfyP/Zrnlc7rcfQzKJjxQlefikTa8Wj1fD9BpHssdRwJLBpIcq/4KUQN01d1SMQ//G2B12JcRhm5v2ZBTgkcgKyuDkgi2/PDgz/480/YuhPIZJLapQMf6dYCFMokhIIXysWFgpKASPx50BdnHPcrMF2GML3kwE9XSuZJK6qcqGmV5hSq1PIIilAdi7JjQB4VNeI3ahttY1Gxt4WiCOXH2lmb4XGJmN3KneA7wRjMZrU+ajI4FKCdImGUn6uwylgk/bBJZZCxnXPsJQDaVWIU2ZSq4pSK/K6FF7V6rMLqUuhkgi3bAmDt9WmbCm70ytcXQnX+b8t+cx9fImr51437P1UrOX1c55w== X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:DB5P122MB0022; X-Microsoft-Exchange-Diagnostics: 1; DB5P122MB0022; 31:eeE2J1CcvgjwXS8cfRw/W/xy8vuE++9+Q+NVi2IBa+76Afrq7I2lmQKDhOfxxGQPDxhxd2Mlnw28ebSO1QP5OlBcHJ6jRVoDf2hBGXrRPpwd1bffc3L+52WKK8o4PRwOwgIufhd0oG1UlcXn0sFIfqyJuoyx2WP1ppm5Xc01YVwHkMRnOMnsVqv+LCooEqJ9l1pvMqTCLGt21RTvKuuTWdKJzcK7uNewdNbNDCLJCYBQDECr8D/eV9GxB252Nkqz5PQVK1UQx2v8ooPNFnP3Aw==; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(120809045254105)(166708455590820); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(2401047)(13018025)(5005006)(13016025)(8121501046)(10201501046)(3002001)(6055026)(6041248)(20161123562025)(20161123564025)(20161123555025)(20161123560025)(6072148); SRVR:DB5P122MB0022; BCL:0; PCL:0; RULEID:; SRVR:DB5P122MB0022; X-Microsoft-Exchange-Diagnostics: 1; DB5P122MB0022; 4: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 X-Forefront-PRVS: 0142F22657 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DB5P122MB0022; 23:LMmEjv9o44p+eq+ewkZG2uMomhuRUJAohKkDWhNml?= =?us-ascii?Q?z0wvFoeHNOXwN1eRoZsOb9/EaFTow3svb3WfG6z15HRfKeGiVfqyCspHmwLm?= =?us-ascii?Q?23voe+oJ3myc90nKowOM6oz4EZ3zOzV/AlytFBX3+uAUDDaSB5960DSYVfv0?= =?us-ascii?Q?VoZULrh9V1mGQWSSZX+qS8KavmTtMO7PMFfVqTp7vd+eFWQfmAuzgyiZ65hq?= =?us-ascii?Q?m6AOWl1q0Vx5N6JDqrSgJLZq7C4a2httVC9dLV0eP6VMORrRjpxQfgV4w677?= =?us-ascii?Q?rzZnfoosc88QJRlKDzcKh8SPx5Ri7J+dU3Ba85aRh5+n242vMQm7ILn4X5Qm?= =?us-ascii?Q?/3PyioyyqnmIfPfIHzJFldUGjw0enHwcHPk8vndScfih/UsobxAAXuJE75mY?= =?us-ascii?Q?ktO+12otc7Zkrd+46MvO+3RizzgsFsR0GLHacPJlIi3vfNLdOM41ghwjYBtR?= =?us-ascii?Q?e9MyRYdTQX5Ml588hn26P9V7C87a4Hw6NTDIGEOB2QqO6xAVJz8vel+q8KrR?= =?us-ascii?Q?f1t8TMFIKg7Bu8TndooUplUHjjygqQ8iQHcxx4nzsBJ2cWU4J+7r5G/WobOA?= =?us-ascii?Q?LTsDnuOmyDHx5NN1BiuG8ukK6Ni1sVUmcrrqDtRtUVxdzn7Fxp902CKQuULs?= =?us-ascii?Q?c8vRa+GWI1PuovL23cFJnzaC5by4uFVXqgkqkEud7CwsvSZ57MAHXr7K+krA?= =?us-ascii?Q?UhAulPFqlDYL9u42XeTqnUqcIL0PYcAXBWeBwEjC9ufX5tEduNL4Z7ONPXXd?= =?us-ascii?Q?gU8KsmmZvnywyGgDPK68RXY+ZAURZGsQfC2ZHr0tkp64liQMEQX+DP3SIeEQ?= =?us-ascii?Q?2L91Q+u8zqCoJiQmuUoSRnrX2WMVOrKu8VHV50CMwX2bB71jN8cyCT0qAUO9?= =?us-ascii?Q?kNjWZe3bjo4dSnr99sLK3PrzE7j50SY0UCnBpGKVuI0qB7O1tpfLx9R2+smZ?= =?us-ascii?Q?Zf7a+klNuJ3ZTEaOxAfRDA0PJ1jowO5RVQHqg5eoFKDKiNzGf0/kJjThAY4c?= =?us-ascii?Q?LvkXcfE3ZUjjCKAWTqNGgTXDSv/PVNTHDrzRhaRX1sMqNCbRrOCWTdz8mkfO?= =?us-ascii?Q?MCYdwv4TSgFOv/ebZYZgW/wTJT6E+jivb6c+xZhPizoQu/7LBmSpVCDscLBU?= =?us-ascii?Q?yTG0R4+zm0jOGjNTkBOOEXBcXWleMvwb+1minMzvtHFDB/i7b29IddzU9xIW?= =?us-ascii?Q?xyFiQcIAAbWmQbkaXMxvAViBg99UqGolCgXK6BpvbIuC8cAxHHRU5O97gJpI?= =?us-ascii?Q?iVsxN2ilao+UWI04ZOP3aDB4dEdiz1DRIMIJoYaoM4R7iYkHA6Sb7e+lme73?= =?us-ascii?Q?ZDC47d21P4SgSUyUUxmo7jR8oj5/hgGEk0DE80yruNfS5qxW96O389kU/aYu?= =?us-ascii?Q?NDVgT7sswCljX/OWybWzSHpkGBuUr44XaNw7YZ4cqZNtKmSGuHGMpqggSaYM?= =?us-ascii?Q?coMNdn/lRPlFY3YODfhXcdQKT737p6uj2RA1poDpZZv2xnoxbDzabgDT9ZHZ?= =?us-ascii?Q?jPaylyiVYmaGX/m3ZY7fqseEZPZwkvbYEI=3D?= X-Microsoft-Exchange-Diagnostics: 1; DB5P122MB0022; 6:KZzeM6j1ZK8XYcvhylUYonDIfgGg+WdMwLr/Bqu6nGTQgtQk+guusWfFAiWI0shV2P7XnESP9U+ncYbiNZ7ofjTZsQH+oHLtfA0LKTrX4/XJlyoX9KfUIQbxeBMw/GJ1FWFJ8E5+8t34s/QwsxF4AojeFKc5K65nnCRdrIByrDQo8GQSFV1bz8k0lpfukUsstRKC9L3c1DlWTWFG9RxlMjrzXY/TTrVJfBkl3HVukNreN+Ea2knJgm0PANWovQMF+bkWUdU1SVOkhUR4szaAgbG5A+bynmR8nFldVLLSYkDR/Takc3BrGNXyRTP7opLjchEPXxi//6/H//4AolZvPJqSFCWKFPVzmCxGmeVxLqFQjPn/mypiHmqoY9WVhpLC; 5:aagsDOHPC1Sgg8skN9Bph/0/Zqn6U5c91ODmahOVCleg2S536oX/7Mzppij7W3DOTQPM0ROuRfZlgPKh+AUUR/jqTE7gS7q98BznMD0MXY5vP116tHHOtIK+cpzTLs3pCynP8bFcq0GswDpAV1SdPw==; 24:Re1GGTaC2AS4yjNQtRjr0AKy/vI5D3YvFUaF7W3+w/bRVG32HAKQWMXrl1q5OPPyvvKkVKAkv75mqzmmzj6IwIu7VYj7pBtBmGJB8cR9nA4= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; DB5P122MB0022; 7:QBiufBTVJARuePYobkzS1D4YvCC01Us9eoXwwm7beb1ZI8tQrN8b3KeGKdqlmjQfs94KWVS4wM/p1dtWyyQI3uSXNRgF5+Xw2o5fO6LUSoPH7jrj9ohWHaaxg9DU9Jqk8LRhjaahkaAi4W9EJSD5x1bg28r56RbmS+2+OoKId3zkz+IxHJRY642QjHy+DRQ4XhdDU6OgVsjd8AoLp3hSfGWhloPDAL4tFxa6g4h6tDozi/9sI8u6b9tqo42lQ7n29OI2MP+ljrSlV1RME5W9jRLmYDYn4ZxMMLnAprMqGyvifE4uA1jI5KDQLiavv4DtletPrUZnAPSlPb1AaU7sBRHN8JNRaZOxqLsaQjjqZ5Q= X-OriginatorOrg: philips.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Nov 2016 14:21:28.5076 (UTC) X-MS-Exchange-CrossTenant-Id: 1a407a2d-7675-4d17-8692-b3ac285306e4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=1a407a2d-7675-4d17-8692-b3ac285306e4; Ip=[40.103.22.84]; Helo=[011-smtp-out.Philips.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5P122MB0022 X-MS-Exchange-CrossPremises-AuthAs: Internal X-MS-Exchange-CrossPremises-AuthMechanism: 04 X-MS-Exchange-CrossPremises-AuthSource: VI1PR9003MB0237.MGDPHG.emi.philips.com X-MS-Exchange-CrossPremises-SCL: 1 X-MS-Exchange-CrossPremises-messagesource: StoreDriver X-MS-Exchange-CrossPremises-BCC: X-MS-Exchange-CrossPremises-originalclientipaddress: 194.171.252.122 X-MS-Exchange-CrossPremises-disclaimer-hash: 7fd5309d68bb4378c576a4d2c2ad972d336f5eb0475879c2a0b14da1aac98972 X-MS-Exchange-CrossPremises-processed-by-journaling: Journal Agent X-MS-Exchange-CrossPremises-AVStamp-Service: 1.0 X-MS-Exchange-CrossPremises-Antispam-ScanContext: DIR:Originating; SFV:NSPM; SKIP:0; X-OrganizationHeadersPreserved: DB5P122MB0022.EURP122.PROD.OUTLOOK.COM Archived-At: Subject: Re: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 14:21:51 -0000 A good start and a very useful document. Will this document evolve further = in the COSE wg? Sandeep > -----Original Message----- > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Jim Schaad > Sent: Wednesday, November 23, 2016 6:01 AM > To: cose@ietf.org > Subject: [COSE] FW: New Version Notification for draft-schaad-cose-x509- > 00.txt > > This is a rough draft of what a set of X.509 headers could look like. Th= ere is > lots of things that are incomplete or missing, but I said I would write u= p a fast > version for people to look at so here it is. > > If you are interested, please comment on the headers. The pointer to the > github repository is in the document. > > Jim > > > > -----Original Message----- > > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > > Sent: Tuesday, November 22, 2016 7:27 PM > > To: Jim Schaad > > Subject: New Version Notification for draft-schaad-cose-x509-00.txt > > > > > > A new version of I-D, draft-schaad-cose-x509-00.txt has been > > successfully submitted by Jim Schaad and posted to the IETF repository. > > > > Name:draft-schaad-cose-x509 > > Revision:00 > > Title:CBOR Encoded Message Syntax (COSE): Headers for carrying > > and referencing X.509 certificates > > Document date:2016-11-22 > > Group:Individual Submission > > Pages:6 > > URL: https://www.ietf.org/internet-drafts/draft-schaad-cose-= x509- > 00.txt > > Status: https://datatracker.ietf.org/doc/draft-schaad-cose-x509= / > > Htmlized: https://tools.ietf.org/html/draft-schaad-cose-x509-00 > > > > > > Abstract: > > This document defines the headers and usage for referring to and > > transporting X.509 certificates in the CBOR Encoded Message (COSE) > > Syntax. > > > > Contributing to this document > > > > The source for this draft is being maintained in GitHub. Suggested > > changes should be submitted as pull requests at > cose-wg/X509>. Instructions are on that page as well. Editorial > > changes can be managed in GitHub, but any substantial issues need to > > be discussed on the COSE mailing list. > > > > > > > > > > Please note that it may take a couple of minutes from the time of > > submission until the htmlized version and diff are available at tools.i= etf.org. > > > > The IETF Secretariat > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose ________________________________ The information contained in this message may be confidential and legally p= rotected under applicable law. The message is intended solely for the addre= ssee(s). If you are not the intended recipient, you are hereby notified tha= t any use, forwarding, dissemination, or reproduction of this message is st= rictly prohibited and may be unlawful. If you are not the intended recipien= t, please contact the sender by return e-mail and destroy all copies of the= original message. From nobody Wed Nov 30 06:41:11 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37BD91295B8 for ; Wed, 30 Nov 2016 06:41:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics.se Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QZWlpiXNBW1N for ; Wed, 30 Nov 2016 06:41:06 -0800 (PST) Received: from mail-lf0-x230.google.com (mail-lf0-x230.google.com [IPv6:2a00:1450:4010:c07::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F833129552 for ; Wed, 30 Nov 2016 06:41:06 -0800 (PST) Received: by mail-lf0-x230.google.com with SMTP id c13so148032838lfg.0 for ; Wed, 30 Nov 2016 06:41:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics.se; s=google; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=mfQ4fIiE7dIYb0wHzUU/I/CA6JtmTz4b0eA+vasB00Y=; b=S8Ly4gSJGbs+ujiYC7rIzp7xJZ0upspDtpqEClRHpFIfyKfa12nrEdnnaydf+Qp+pI tMcSzAhh0GsZP3SDH49yQBQ79rcARJddX4KcnFrp5jrRKydqzrTA8dbPOLruT1V3dNE9 HUF7Er3Z9IiG8ONA5gIuv6HorX9IZ5nVfqEauxMu446USW4wDLs8SPGJ8ZaL1l8bkpXq gZ1iliweKRyd4ma2qeSyyI5NURl9oJGa2mRN/I+iw2eBoTp2JRw5WkK4BWMC4vVXg16w iOgnWlmxyNcH3ccB+nciHIW+W7/5+YVxsLu19ezfR/ikq3iHCNg4DCsRcg0fCoFcCbdI t2FQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=mfQ4fIiE7dIYb0wHzUU/I/CA6JtmTz4b0eA+vasB00Y=; b=HVD4TNW2cwgg1LH7WZxmJVmae2PNfviSZvJbW/OPoPdWsJBnHHS35A9VZIRo7ZJrDE k9fTPoF/CmAda+dJQ481iyaUf3hPLYMWwCgei7OXGU3sdh733mP+MwsGyv2xq9Bo5xns KJeNvNBG1wacm7o3xEccWvT8tHwXrrkU8tWTwAkHjCiTOLKfjtiGbIfcCKMHFErtJqwQ wyn1UmbKpr7120wTSd1LJC1YolwO8yofN3tt8VHzvc1C+YvS2SyP/GU9SaqLQskXGPrm tsscJZZ/LKx8i+ICWFIipABXl8yGgKwfD3EiMkMJTp1QzEjGjQJX1XgB2mvIawKru6fh rKfQ== X-Gm-Message-State: AKaTC01RO48e6sCI2ARkpBQnuVovVKeCeZ61TmeC2WYCODXNL9Fx8/0+5OHFJ3FMPMe4y3ki X-Received: by 10.25.199.145 with SMTP id x139mr10342746lff.142.1480516864339; Wed, 30 Nov 2016 06:41:04 -0800 (PST) Received: from [192.168.0.166] ([85.235.12.155]) by smtp.gmail.com with ESMTPSA id m16sm14724560lfj.24.2016.11.30.06.41.03 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Nov 2016 06:41:03 -0800 (PST) To: cose@ietf.org References: <147987163959.30322.14158962529156430503.idtracker@ietfa.amsl.com> <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> From: Ludwig Seitz Message-ID: <46b30a15-cd8f-79c8-8b06-e8a78936fcfa@sics.se> Date: Wed, 30 Nov 2016 15:41:02 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms010005060709050305000005" Archived-At: Subject: Re: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 14:41:10 -0000 This is a cryptographically signed message in MIME format. --------------ms010005060709050305000005 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 2016-11-30 15:21, Kumar, Sandeep wrote: > A good start and a very useful document. Will this document evolve furt= her in the COSE wg? > > Sandeep > Since the WG is closing, I don't think so. See Kathleen's comment: On 2016-11-23 20:00, Kathleen Moriarty wrote: > Hello, > > Thank you very much to the chairs, editors, and contributors to the CO= SE > working group for working together to quickly achieve the goals set > forth in the charter and bringing the WG to a close! > draft-ietf-cose-msg was just approved for publication thanks to your > hard work. I'll request closing the working group shortly. > > -- > > Best regards, > Kathleen > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park, Building Beta 2 Scheelev=E4gen 17, SE-223 70 Lund Phone +46(0)70-349 92 51 The RISE institutes SP, Swedish ICT and Innventia are merging in order=20 to create a unified institute sector and become a stronger innovation=20 partner for businesses and society. At the end of the year we will=20 change our name to RISE. Read more at www.ri.se/en/about-rise --------------ms010005060709050305000005 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CtQwggTqMIID0qADAgECAhAU4QcxMULaotNy8Yzm2pESMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMzE0MDkzNDMyWhcNMTcwMzE0MDkzNDMyWjA4MRcwFQYDVQQDDA5sdWR3 aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC9kgmm82Op78D9DXYNJrQW5bUdSxElnOC/CzAK/enHn+uF B/RLo8alI6Ukd35qsAtcje0I3e/RtbkRnkEuhKneH+aDRofy7YaWQO61CjIlcdndTx8FEmXK /swcafYX5PbyzQFGgApwtWFkVXcq3R87CDB3VbkHzTHIBmfwZ4hhDeEyuJoSuWEVWQppfTji /GpVLiDx6s+Zqm3qI5EkjvhQ+jX3tJxXqUf4w1BY6/sBLfvr7TOPGPoAmi6B2UOgyDSfX3c0 +jzlYFLNb6Eqc7uGvaQi7VN39kAJXz9f+qL/wokaNjboK3/JyTG/ikxsWymzO9E0/U9apn2Y z5SVUGSDAgMBAAGjggGxMIIBrTAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUH AwIGCCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFN37NX1Db3Xp23cbQI1MpYPUMw84 MB8GA1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggr BgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v YWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCug KYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCB Dmx1ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBG BgNVHSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3Rh cnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAUy78MN+soYHwIz+6m9mMkzPF KfgIq7sLupWnis7K5U66U9zfKOVDReyfUvPmar7P7Tb9uNNrUlkk3lSISplqU30TMnVbtK5D I0mxdpa1hZxIAa8uWQnAh/oYJJYaMziKxpZgsUjel6/ZnD0z/QsuHo763I1boi2ghe4Knj0f qFO79ErRr9aJJBfQlFVwQ4gRoYtMz18/usC3eqGxFz8a/LCeRMWeZJagGJ/St1WW1HUBmMFd vRFweeUdCvDbzK+WjqbxhXyi7b0sH65lWIjINCBVQ0AvqOwm/aXEWcIQlAIJjr2kEC6c0VY6 V1aP16BAKooEgGGOTrmcDGeteXZRyjCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEw DQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMT IFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMw MTIxNjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAn BgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFy dENvbSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL192vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGt TCRk9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdf a89VLnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx 7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4D IM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFg MA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0T AQH/BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5z dGFydHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRz L2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvv GqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0 dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wB i4StDwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspB OB/y5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvets D+bjyOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyI NBfCBJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA 0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf 1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/ tdfrBzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH 2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9 VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp /2deoprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQG A1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAU4QcxMULa otNy8Yzm2pESMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB MBwGCSqGSIb3DQEJBTEPFw0xNjExMzAxNDQxMDJaMC8GCSqGSIb3DQEJBDEiBCD8is5p7aTj 5hJ215e3rfBnDvBh55h7Qo1G1utY7TZgZTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQB KjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMC AgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkG A1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENl cnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVu dCBDQQIQFOEHMTFC2qLTcvGM5tqREjCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD QQIQFOEHMTFC2qLTcvGM5tqREjANBgkqhkiG9w0BAQEFAASCAQB2cSjgRWqWPS56urLFCS61 PEfkpjPGQ3yK06/QsMFK8tOwTNWqj/o7JQG4iv92NiVcU0dU7bAnyPW4dGYTLTyEw5byWYZH BZbp0G2xAonKUTZ6N8DyM0ajeZm2KhKRwheJxqbwNE4VnKG54yemAeGp471Oh9GCc5uh/F+P liwQC7B16zoCDNTMAqWApaDGypUTqZXn1ScKPCvNofKOlwYJvXngsuoiVy2qnbMFRSdmXt0L B+4+3DwYbSAOvlP4I03nPXedt6Hs5IZIabE/Rkg68l0eoXdOAMsa+GTboMT9PSc71bxF/wPj 1R4mSWlmIfAHlOlU9Xc2n4sG5gMcZ0akAAAAAAAA --------------ms010005060709050305000005-- From nobody Wed Nov 30 07:31:07 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93EC01295D0 for ; Wed, 30 Nov 2016 07:31:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jVgSz6cxJw_I for ; Wed, 30 Nov 2016 07:31:04 -0800 (PST) Received: from mail-ua0-x22e.google.com (mail-ua0-x22e.google.com [IPv6:2607:f8b0:400c:c08::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2C01129586 for ; Wed, 30 Nov 2016 07:31:03 -0800 (PST) Received: by mail-ua0-x22e.google.com with SMTP id 51so216558658uai.1 for ; Wed, 30 Nov 2016 07:31:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=yLDALaAIwxY363gXLYFzKFkwYNGYFeAWmvdLtUNCNfM=; b=faVT1X2DnwA21CENsd/gRx9SraGF+2bWZwbpBkyx+Pgl+ffaHqULEUFJnVSagznCuD +Dw+8OhXpmjJyPTAI0+vbKUT65UhO4JbPBaS7Hatyt8CGAo1HhdhAmCC03TqpoyS3nSv stXth7tj+JBQ36StQkTNhUeS5cgUwDJcvkISsjt1VU9ItgtbDzYP6bWwAX3FSIYKDG+A 3nE8k5M8WOGdZtU0ViEdqli733Mk3Ut26mSPFRbJTKs7GkUs/J5k4piWsZMnpudygcUn PygL+tN7NpVyKejcq5SPAQpn6Bx1Nn3ir1Ea98CLjJo8PlVune94FZ/apm4L4YdDzN2s UKog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=yLDALaAIwxY363gXLYFzKFkwYNGYFeAWmvdLtUNCNfM=; b=TDwIwtbLeXP2sPDcQmULbA0GTHZKcAQcYzD/GX8eiv8BIEAbyi2opBLk9PeMfiMfqI BGERoHiZpwsBbuatMrYk99UAHz8U07Lv8wfISaSrwe9VBcd5xsrANFWK+RnJKxbXV7jx rdlsfMQZXSqLmrP9VnzKbzHAb2mI0E2yNiOQrMW75k6LmlGnMAU2uhcVWYdLk1pPLPo6 CLKKzFuySKaox/ON1oHWXXvN6C8aOuJrQDIZOOznpulBDYNjCFGNWc0F+2nJyHnHv/FJ bOYdYSsKpdlspmuCG4wAF7vI97vD60vyaQ7yU3lQJy2dPWzIjRMUNs6BzDFZ2jfvEJAb Q8iw== X-Gm-Message-State: AKaTC02zxGKufydxm77d0ChFG3uOp4zd5QyxDvYlkMdAJ8uCCrxSoNmoFKtoN9xbgwKTYKk203rtcN/OPFQCSg== X-Received: by 10.176.0.147 with SMTP id 19mr19962043uaj.20.1480519863045; Wed, 30 Nov 2016 07:31:03 -0800 (PST) MIME-Version: 1.0 Received: by 10.176.82.232 with HTTP; Wed, 30 Nov 2016 07:31:02 -0800 (PST) In-Reply-To: <46b30a15-cd8f-79c8-8b06-e8a78936fcfa@sics.se> References: <147987163959.30322.14158962529156430503.idtracker@ietfa.amsl.com> <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> <46b30a15-cd8f-79c8-8b06-e8a78936fcfa@sics.se> From: Kathleen Moriarty Date: Wed, 30 Nov 2016 10:31:02 -0500 Message-ID: To: Ludwig Seitz Content-Type: multipart/alternative; boundary=001a113dda60851788054286643f Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 15:31:05 -0000 --001a113dda60851788054286643f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Wed, Nov 30, 2016 at 9:41 AM, Ludwig Seitz wrote: > On 2016-11-30 15:21, Kumar, Sandeep wrote: > >> A good start and a very useful document. Will this document evolve >> further in the COSE wg? >> >> Sandeep >> >> > Since the WG is closing, I don't think so. > Timing is everything :-) We can re-open the WG with a change in charter if that is the desired option for the WG. The chairs can help figure out if there is enough momentum to keep the group open/re-open for this draft. Thanks, Kathleen > > > See Kathleen's comment: > On 2016-11-23 20:00, Kathleen Moriarty wrote: > > Hello, > > > > Thank you very much to the chairs, editors, and contributors to the COS= E > > working group for working together to quickly achieve the goals set > > forth in the charter and bringing the WG to a close! > > draft-ietf-cose-msg was just approved for publication thanks to your > > hard work. I'll request closing the working group shortly. > > > > -- > > > > Best regards, > > Kathleen > > > > > > > _______________________________________________ > > COSE mailing list > > COSE@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > > > > > /Ludwig > > -- > Ludwig Seitz, PhD SICS Swedish ICT AB > Ideon Science Park, Building Beta 2 > Scheelev=C3=A4gen 17, SE-223 70 Lund > Phone +46(0)70-349 92 51 > > The RISE institutes SP, Swedish ICT and Innventia are merging in order to > create a unified institute sector and become a stronger innovation partne= r > for businesses and society. At the end of the year we will change our nam= e > to RISE. Read more at www.ri.se/en/about-rise > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > --=20 Best regards, Kathleen --001a113dda60851788054286643f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Wed, Nov 30, 2016 at 9:41 AM, Ludwig Seitz <ludwig@sics.se> wrote:
On 2016-11-30= 15:21, Kumar, Sandeep wrote:
A good start and a very useful document. Will this document evolve further = in the COSE wg?

Sandeep


 Since the WG is closing, I don't think so.

Timing is everything :-) =C2=A0We can re-open the WG with a change = in charter if that is the desired option for the WG.=C2=A0 The chairs can h= elp figure out if there is enough momentum to keep the group open/re-open f= or this draft.

Thanks,
Kathleen
=C2=A0


See Kathleen's comment:
On 2016-11-23 20:00, Kathleen Moriarty wrote:
> Hello,
>
> Thank you very much to the chairs, editors, and contributors to the CO= SE
> working group for working together to quickly achieve the goals set > forth in the charter and bringing the WG to a close!
>=C2=A0 draft-ietf-cose-msg was just approved for publication thanks to = your
> hard work.=C2=A0 I'll request closing the working group shortly. >
> --
>
> Best regards,
> Kathleen

>
>
> _______________________________________________
> COSE mailing list
> COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose >



/Ludwig

--
Ludwig Seitz, PhD=C2=A0 =C2=A0SICS Swedish ICT AB
Ideon Science Park, Building Beta 2
Scheelev=C3=A4gen 17, SE-223 70 Lund
Phone +46(0)70-349 92 51

The RISE institutes SP, Swedish ICT and Innventia are merging in order to c= reate a unified institute sector and become a stronger innovation partner f= or businesses and society. At the end of the year we will change our name t= o RISE. Read more at www.ri.se/en/about-rise


_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose




--
=
Best regards,
Kathleen
--001a113dda60851788054286643f-- From nobody Wed Nov 30 07:41:47 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C1BC129696 for ; Wed, 30 Nov 2016 07:41:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=philips.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JdUhS-V_7XvJ for ; Wed, 30 Nov 2016 07:41:42 -0800 (PST) Received: from emea01-am1-obe.outbound.protection.outlook.com (mail-am1on0793.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe00::793]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 457751298B9 for ; Wed, 30 Nov 2016 07:40:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Philips.onmicrosoft.com; s=selector1-philips-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=0zYkYth4OlFylou4SzmxQTLp9Tm+Pk0zd0XOF+3NJLs=; b=RUtQy0iNham5yeGJA7xmOD1DgHERnFUp16KdWT0sUPsZ5ksp7H1ocNVSbUv5BRIXCx5McO6xELyGnbSOkSm22wyjCmSBxCoMDsDJCQSwy1wyEb0+HfHWj6ZhnWKijuuJbc7OW7wNK5hfgQqLaIjM/bWKlHrCqHUbZqf2j4llHJI= Received: from AM3P122CA0001.EURP122.PROD.OUTLOOK.COM (129.75.100.15) by AM3P122MB0020.EURP122.PROD.OUTLOOK.COM (129.75.100.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.18; Wed, 30 Nov 2016 15:40:09 +0000 Received: from AM1FFO11FD015.protection.gbl (2a01:111:f400:7e00::113) by AM3P122CA0001.outlook.office365.com (2603:10a6:221:2::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.18 via Frontend Transport; Wed, 30 Nov 2016 15:40:09 +0000 Authentication-Results: spf=none (sender IP is 40.103.22.84) smtp.mailfrom=philips.com; gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=philips.com; Received-SPF: None (protection.outlook.com: philips.com does not designate permitted sender hosts) Received: from 011-smtp-out.Philips.com (40.103.22.84) by AM1FFO11FD015.mail.protection.outlook.com (10.174.64.93) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.4 via Frontend Transport; Wed, 30 Nov 2016 15:40:09 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:; UpperCasedChecksum:; SizeAsReceived:4666; Count:54 Received: from VI1PR9003MB0237.MGDPHG.emi.philips.com (129.75.99.82) by VI1PR9003MB0238.MGDPHG.emi.philips.com (129.75.99.83) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.8; Wed, 30 Nov 2016 15:40:08 +0000 Received: from VI1PR9003MB0237.MGDPHG.emi.philips.com ([129.75.99.82]) by VI1PR9003MB0237.MGDPHG.emi.philips.com ([129.75.99.82]) with mapi id 15.01.0734.020; Wed, 30 Nov 2016 15:40:08 +0000 From: "Kumar, Sandeep" To: Kathleen Moriarty , Ludwig Seitz Thread-Topic: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt Thread-Index: AQHSSxfP5cw3Lnw3jECHUz3iIdmPuKDxp1QAgAABhmA= Date: Wed, 30 Nov 2016 15:40:08 +0000 Message-ID: <0c5214ec37df4c6081e3d7bb35e5078d@VI1PR9003MB0237.MGDPHG.emi.philips.com> References: <147987163959.30322.14158962529156430503.idtracker@ietfa.amsl.com> <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> <46b30a15-cd8f-79c8-8b06-e8a78936fcfa@sics.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [194.171.252.122] X-MS-Office365-Filtering-Correlation-Id: 0c7944eb-ef5b-4541-fcef-08d419372aac Content-Type: multipart/alternative; boundary="_000_0c5214ec37df4c6081e3d7bb35e5078dVI1PR9003MB0237MGDPHGem_" MIME-Version: 1.0 X-OrganizationHeadersPreserved: VI1PR9003MB0238.MGDPHG.emi.philips.com X-IncomingHeaderCount: 54 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-Forefront-Antispam-Report: CIP:40.103.22.84; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(7916002)(2980300002)(428002)(189002)(55904004)(24454002)(199003)(377424004)(85714005)(374574003)(45984002)(377454003)(7846002)(8936002)(626004)(7736002)(81166006)(81156014)(108616004)(4001150100001)(189998001)(84326002)(7906003)(66066001)(8676002)(7696004)(5660300001)(2950100002)(24736003)(790700001)(7110500001)(356003)(2906002)(5001770100001)(4326007)(97736004)(102836003)(68736007)(6116002)(3846002)(39450400002)(229853002)(33646002)(39060400001)(38730400001)(512874002)(101416001)(92566002)(50986999)(606004)(2900100001)(76176999)(39410400001)(54356999)(86362001)(2420400007)(15650500001)(93886004)(15974865002)(106466001)(105586002)(230783001)(69596002)(106116001); DIR:OUT; SFP:1102; SCL:1; SRVR:AM3P122MB0020; H:011-smtp-out.Philips.com; FPR:; SPF:None; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; AM1FFO11FD015; 1:aQNqhmBlBr8oZ7YsNoNe7nYwbxFYYVQj4glYRSrIHnNStAvQDNuNhNk/gR2EkHqzayfvZsQdbnGxRpUIm7QqOtLAv6PAkzApQT3slgFN/zVXPtZnl98dmq10CvYaw0TIKmmj6dbRRuPEYoing+rpBds8uqxcWmJld7cjaRt5hZGmKHo95RshbqoOl+N6b+bLCAQlYqRDQxL7PsMMysO7l0Ujra1xqV9CqP18RCw/QP2UpCVA+Y4BAfAZyxxoRV0PXDELcVAuj/76rVhAf/VLg/7p2+J6TXZpCAGkqyP918YtmFODfqwJI55Qcv10ttmKIUOWOdQ12iZJenST007M1lqMC5Ur+z4eGc0Q/Pfrbi4MW/g22BqycUYQhc3c39Y68qmCfmnw/QthQ3Hmh09uPS74ew06UrTcIz1RdK16qQvF0/xkBUm0OZ9NlyQPkK4E2FvgwIN3tjLpfjF4zGxj2hVze3R8VarXN6tIpOguroeDPb/AkfeSXdVJURDRAQKW X-CrossPremisesHeadersPromoted: AM1FFO11FD015.protection.gbl X-CrossPremisesHeadersFiltered: AM1FFO11FD015.protection.gbl X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:AM3P122MB0020; X-Microsoft-Exchange-Diagnostics: 1; AM3P122MB0020; 3:kuw1R3OyZYRY5e/WOczK4Wu9pIZ3WZxgMpPKch2VVoJ7/DinyCHOo04CFCvVTsUZDxgcjC5ssaDQJL4IyIAG/sEPCNZR5xbdg4/D+3Naorb4jXZmAe8ry32soNW8z4wTR1AFG1RJ4Rs0Z6fvI2MTE4Hq7orqWiCeRAlRYQHQ6r6lofDoxPARtNn4aQfbXeY+BqEJ+kUfsPj3ggKEsQolKcP5cW4LtrDNehYX7Ogk+VL3zeIMR9h7ZJX6K+HROnMnEWqmD41j8FSdxGECNI8TEy6IY6H01RcW83cHS991XF1emlJ54Q8rsl3kV0o7OlJtC0HGZbUib+tp0wnxKy0Fo8n+MrdOH2nyDv9eUU7lco7n/qwCRSpExI8UBj9MU57S; 25:BaWxRoozAwaWWeRc+JRoGTJodHFshT26j+Op/9xDy3RbHJtsIX/QN4OS8O+GeXtBJ4p/4k5F13/zMIsf4TkEQm5DZ+iIweveabZutyiImLHW9gMOkVJ8W8KPAdtd3zJ0Csl2lQHMMCUJaYJ88VTGi0PxbvRmQgOQU7wi408Ldj01CVQXxztcj2cUVAjk9T0jW32wllQdSNWRyZ1W4wf1G6sn4PyD9LjZ64Zup6+80aTHyc8IWBMYGm3/4m4FmJC1F9O5mrpZn/wzNUONZf+qFoafcXlVAu3V0E5L1MX/C3eLaPuqjdazyWQXihb/p3+L/7yd8AKxS/iLmJMhBaW0mYiH95WHmV/ihegqx6Zl9/F3cd9clxk9yH2HoSV3Lp8z0I02kPXzK9QIm0fvbhIIUsTihmj+U6nVBSlI3AHrGVfBr2ijqbaL3TzZWThmQKd92fL+8cDyZ5TK9uYSEafLlg== X-Microsoft-Exchange-Diagnostics: 1; AM3P122MB0020; 31:arz9njAR3zcTIquKRk0axvay6bvkJ1Zuo94iAuD2iGS3XKO+RbDvFOGaJcYN7XCOFcwYsn6iXjen/Ie7+eksRqWnB+hecbLDyPqhQCFIUSSu9uP+6P0IiWN1wFmKLfJDSapMtEEseWmDKa9sLlT4iY0PFElu00i1vc4zlgOhM7dItFPAu7cXpV+Yz3rkrwbg82USUQA+AiFKtlHfHKl5kuZq7Lwb/3Z8avBoTV0MVR5zO1qo543hsKYWDD1GkDfi2Eia1XoKn4U1X9Tl3NUtOA==; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(21748063052155); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(2401047)(13016025)(13018025)(8121501046)(5005006)(10201501046)(3002001)(6055026)(6041248)(20161123560025)(20161123562025)(20161123564025)(20161123555025)(6072148); SRVR:AM3P122MB0020; BCL:0; PCL:0; RULEID:; SRVR:AM3P122MB0020; X-Microsoft-Exchange-Diagnostics: 1; AM3P122MB0020; 4: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 X-Forefront-PRVS: 0142F22657 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; AM3P122MB0020; 23:w+wuu5Ep+3X7FXf9J/061Bs0lGbxLslPGbfZYL/xy?= =?us-ascii?Q?o8JvcDg5cL7Mq64rNO5Y08y0jDQA+9xKaCgvuYiFfdtMN44EN2BfL1Vs3wUq?= =?us-ascii?Q?T316499k+wGoloF3Deupb+nGDmFRT5BbgzI740HH1pzFifdKlCz/YCxNVGqI?= =?us-ascii?Q?YOYsVpk88AgQmMsUbHVyAlI+eopoIhnlmOMV0SNWkUsO1RuT1ZpAa+AaNjm7?= =?us-ascii?Q?Ulq47Uqmdr/dd4fBTN9D9Ztt0gWEgLJqMf3Ehy9uwaecLb9WXID8CfGdybzE?= =?us-ascii?Q?PCs6xX/++anpDnCzyTEYPcrzWhMNBy2Q0+7S+Kq1qUKwwr/nf73zFkZJPKsV?= =?us-ascii?Q?QyIEdjoFtfAG/L4FCmc5726jZMi+yPD9xf6eyZPx4fH3ZF8HaW6asJ7gdlsK?= =?us-ascii?Q?TFmDpAcrUaEiWlnS7GcqTgLG6NTtqNuqvGxCZG2Dy+oHMGPsbmLQ3sYtVpbz?= =?us-ascii?Q?zO5X29E9hfCfsb33ZhVmO8M6+ahFuLgk0+yb+qs9c5ecb3QpqC9yglrLdXh1?= =?us-ascii?Q?4E83YLhxo7WjMOmFxhbvzD3VsHjtOG+MsNOVDDwah2+ixi4QV5Q6BYXLhi+M?= =?us-ascii?Q?AiC5cQaO8xQO7q5XUWG22eKvhjfvREPVhp/PfuipR8FJl7Fcgc9tUqLUeLdT?= =?us-ascii?Q?zGmHLjgy+OdmCmDJi0cHQJTrJOO81k5IF4HVWAEIgCDPHC7jP6Y1zyN4nT2i?= =?us-ascii?Q?vTzSyosI+eZFCdipxE6uoW32hZa5t7xQcTKYnnmX77y41z/bz4f4n2dBR3RV?= =?us-ascii?Q?0E1B2/zMMzij4bcOXyjruIBxBGRTqMEzUX25qMfAOFUKraIqK9PseMr2Yz12?= =?us-ascii?Q?mwC1HUivUboJo9GB27Ab5zZcNeFCVIsRsrPQJiBBCl0x2ftuX5pCkVDFOADY?= =?us-ascii?Q?UbTzwyrJGS5iDQMiMSy20UmYwXDzaT90KOUklOQ/aAjq0yZRgd8slZ1+6baF?= =?us-ascii?Q?aDkH9ZT2ojlf7zWfy+AinCuHh50po+Vdbv4Xn2zsj2VJM9ANa3Gezf3BrPXb?= =?us-ascii?Q?IuRBbWsbPLFnR/6PFZh176bOaX/FcWlrxIV/p+Zq7+cbRtJQxfmg9pcH0UZC?= =?us-ascii?Q?gDSzuc7aPNRNduMiL1kkUYZtwNOlP1AQiJ3U2bhLL6mHbSrg6UeRI8PzgoLV?= =?us-ascii?Q?cnYb4BHqKb82NjlynB5jWFVSC3VsziZRITKi6AEhCbzEFtVtIqmAME6y2+G6?= =?us-ascii?Q?+GNGS31l8qd68SaR8cc64UF8UTJUkN7gOBC9nMW8WtaIT3Nu0DAISScFIzOJ?= =?us-ascii?Q?e3yL1So9oPAW0dK26TAFpDJakl5tqg+JqfwY9YFat3bW7Gg3+kO1mHwctyDp?= =?us-ascii?Q?U/Wtt+WvnveyqGKC7u8FQBaKLG2F3t5VcgnfmSrmmOSDgOBXt2niVCrjlLTH?= =?us-ascii?Q?QNU6BJ+3tFUaiAxGvgMXOfNRpDSvlKI3gG44lnfJB/yVvDHfd/pNybxwxRbX?= =?us-ascii?Q?rEpHuVaRqK2pJUInfcqZMDeaeX2/ztJfD/nr4/d34dd7cuOu5M+rG9Qswn3s?= =?us-ascii?Q?V5BtTkrNxJDPXyj0bOwxdwqKtqaoduIrg72V80DMy9njBFk7oOhR7eFKc7WW?= =?us-ascii?Q?ZSnuDxNpg32B4fYtA=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1; AM3P122MB0020; 6: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; 5:uYHtpiVkSHrhBo3RSYGREA8od8/ZkL4vCWJl/JBYsrsUm9IUVdm59784DJnQebgd3bQ56+NjgX8GNI6EqP3p7F09WdH4PYTwqr4P8aeo9nME5XgRhiL2fZSs07w4FPUAkS1MKcH2GCutVL1v+t8FfWfq6eM4MM913fS1d0p2Amw=; 24:TsvMx2i1l8KrF4GSvAVBwXKheGdbq/xckOaJHCVLgnFLwB5LiE0hil1v10Ow6br4rRf/thy5rGXiJYXud5bAsDt1hD/TDZ2k+805hJ29ZXQ= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; AM3P122MB0020; 7:GLVI4B1dX5CYQRX3x8sCDuZHpUc568RxZvj/fRVvoH5cOvrSYtPqTkqL8zX3RClxf53aJd0YWsHY/KA4PS8bL76fspq+0TCAUklW+KxwHJEm7MZ730++F352QZal2BXe8/GmHi8ElqCRmlT4uiz8BxenmR+pkph6uoOYWlPGBaVCkhQtAfAZKjB8mIiBnQwp0UtpJRE2UZ7kayvnS8lyD6go2BlrgdDN9a+9lKfKGYENQHAgO0Mog5pxMaj2AwXhuCDuQWTklmLy7FkphvV1b3q9F+aCohYquKdnVoxB8N/BVIrqvrqxr152EB4ABh/UQ84uS6GzbHLziAw05UpGMkNozdeoY7VlVg7+79meVfK1UcFlp+ckoYuYsX4b3Vsme5boRNl1WOtsOSfFr7Elh12cbGl74DWI33zZxS4cw73KU3CAvx3Upkvk6KNlk5XZgZZpPlsHE6GIOgKar3Ji1w== X-OriginatorOrg: philips.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Nov 2016 15:40:09.5490 (UTC) X-MS-Exchange-CrossTenant-Id: 1a407a2d-7675-4d17-8692-b3ac285306e4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=1a407a2d-7675-4d17-8692-b3ac285306e4; Ip=[40.103.22.84]; Helo=[011-smtp-out.Philips.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM3P122MB0020 X-MS-Exchange-CrossPremises-AuthAs: Internal X-MS-Exchange-CrossPremises-AuthMechanism: 04 X-MS-Exchange-CrossPremises-AuthSource: VI1PR9003MB0237.MGDPHG.emi.philips.com X-MS-Exchange-CrossPremises-SCL: 1 X-MS-Exchange-CrossPremises-messagesource: StoreDriver X-MS-Exchange-CrossPremises-BCC: X-MS-Exchange-CrossPremises-originalclientipaddress: 194.171.252.122 X-MS-Exchange-CrossPremises-disclaimer-hash: 7fd5309d68bb4378c576a4d2c2ad972d336f5eb0475879c2a0b14da1aac98972 X-MS-Exchange-CrossPremises-processed-by-journaling: Journal Agent X-MS-Exchange-CrossPremises-AVStamp-Service: 1.0 X-MS-Exchange-CrossPremises-Antispam-ScanContext: DIR:Originating; SFV:NSPM; SKIP:0; X-OrganizationHeadersPreserved: AM3P122MB0020.EURP122.PROD.OUTLOOK.COM Archived-At: Cc: "cose@ietf.org" Subject: Re: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 15:41:45 -0000 --_000_0c5214ec37df4c6081e3d7bb35e5078dVI1PR9003MB0237MGDPHGem_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBzdHJvbmdseSBhZ3JlZSB3aXRoIHByZXZpb3VzIGNvbW1lbnRzIG9uIHRoZSBNTCB0aGF0IHRo ZSBDT1NFIG1zZyBpcyBraW5kIG9mIGluY29tcGxldGUgd2l0aG91dCBkZXNjcmliaW5nIGhvdyB0 byBjb252ZXkgdGhlIGNlcnRpZmljYXRlIGNoYWluLiBJIGNhbiBzZWUgYSBmZXcgdXBjb21pbmcg cHJvdG9jb2xzIChBTklNQSwgNnRpc2NoIGJvb3RzdHJhcCkgd2hlcmUgdGhpcyBjb3VsZCBiZSBh cHBsaWVkLiBJIHN1cHBvcnQgdG8gcmUtb3BlbiBhbmQgY29tcGxldGUgdGhpcyB3b3JrLg0KDQpT YW5kZWVwDQoNCkZyb206IENPU0UgW21haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJl aGFsZiBPZiBLYXRobGVlbiBNb3JpYXJ0eQ0KU2VudDogV2VkbmVzZGF5LCBOb3ZlbWJlciAzMCwg MjAxNiA0OjMxIFBNDQpUbzogTHVkd2lnIFNlaXR6IDxsdWR3aWdAc2ljcy5zZT4NCkNjOiBjb3Nl QGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0NPU0VdIEZXOiBOZXcgVmVyc2lvbiBOb3RpZmljYXRp b24gZm9yIGRyYWZ0LXNjaGFhZC1jb3NlLXg1MDktMDAudHh0DQoNCg0KDQpPbiBXZWQsIE5vdiAz MCwgMjAxNiBhdCA5OjQxIEFNLCBMdWR3aWcgU2VpdHogPGx1ZHdpZ0BzaWNzLnNlPG1haWx0bzps dWR3aWdAc2ljcy5zZT4+IHdyb3RlOg0KT24gMjAxNi0xMS0zMCAxNToyMSwgS3VtYXIsIFNhbmRl ZXAgd3JvdGU6DQpBIGdvb2Qgc3RhcnQgYW5kIGEgdmVyeSB1c2VmdWwgZG9jdW1lbnQuIFdpbGwg dGhpcyBkb2N1bWVudCBldm9sdmUgZnVydGhlciBpbiB0aGUgQ09TRSB3Zz8NCg0KU2FuZGVlcA0K DQpTaW5jZSB0aGUgV0cgaXMgY2xvc2luZywgSSBkb24ndCB0aGluayBzby4NCg0KVGltaW5nIGlz IGV2ZXJ5dGhpbmcgOi0pICBXZSBjYW4gcmUtb3BlbiB0aGUgV0cgd2l0aCBhIGNoYW5nZSBpbiBj aGFydGVyIGlmIHRoYXQgaXMgdGhlIGRlc2lyZWQgb3B0aW9uIGZvciB0aGUgV0cuICBUaGUgY2hh aXJzIGNhbiBoZWxwIGZpZ3VyZSBvdXQgaWYgdGhlcmUgaXMgZW5vdWdoIG1vbWVudHVtIHRvIGtl ZXAgdGhlIGdyb3VwIG9wZW4vcmUtb3BlbiBmb3IgdGhpcyBkcmFmdC4NCg0KVGhhbmtzLA0KS2F0 aGxlZW4NCg0KDQoNClNlZSBLYXRobGVlbidzIGNvbW1lbnQ6DQpPbiAyMDE2LTExLTIzIDIwOjAw LCBLYXRobGVlbiBNb3JpYXJ0eSB3cm90ZToNCj4gSGVsbG8sDQo+DQo+IFRoYW5rIHlvdSB2ZXJ5 IG11Y2ggdG8gdGhlIGNoYWlycywgZWRpdG9ycywgYW5kIGNvbnRyaWJ1dG9ycyB0byB0aGUgQ09T RQ0KPiB3b3JraW5nIGdyb3VwIGZvciB3b3JraW5nIHRvZ2V0aGVyIHRvIHF1aWNrbHkgYWNoaWV2 ZSB0aGUgZ29hbHMgc2V0DQo+IGZvcnRoIGluIHRoZSBjaGFydGVyIGFuZCBicmluZ2luZyB0aGUg V0cgdG8gYSBjbG9zZSENCj4gIGRyYWZ0LWlldGYtY29zZS1tc2cgd2FzIGp1c3QgYXBwcm92ZWQg Zm9yIHB1YmxpY2F0aW9uIHRoYW5rcyB0byB5b3VyDQo+IGhhcmQgd29yay4gIEknbGwgcmVxdWVz dCBjbG9zaW5nIHRoZSB3b3JraW5nIGdyb3VwIHNob3J0bHkuDQo+DQo+IC0tDQo+DQo+IEJlc3Qg cmVnYXJkcywNCj4gS2F0aGxlZW4NCg0KPg0KPg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KPiBDT1NFIG1haWxpbmcgbGlzdA0KPiBDT1NFQGlldGYu b3JnPG1haWx0bzpDT1NFQGlldGYub3JnPg0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2Nvc2UNCj4NCg0KDQovTHVkd2lnDQoNCi0tDQpMdWR3aWcgU2VpdHosIFBoRCAg IFNJQ1MgU3dlZGlzaCBJQ1QgQUINCklkZW9uIFNjaWVuY2UgUGFyaywgQnVpbGRpbmcgQmV0YSAy DQpTY2hlZWxldsOkZ2VuIDE3LCBTRS0yMjMgNzAgTHVuZA0KUGhvbmUgKzQ2KDApNzAtMzQ5IDky IDUxPHRlbDolMkI0NiUyODAlMjk3MC0zNDklMjA5MiUyMDUxPg0KDQpUaGUgUklTRSBpbnN0aXR1 dGVzIFNQLCBTd2VkaXNoIElDVCBhbmQgSW5udmVudGlhIGFyZSBtZXJnaW5nIGluIG9yZGVyIHRv IGNyZWF0ZSBhIHVuaWZpZWQgaW5zdGl0dXRlIHNlY3RvciBhbmQgYmVjb21lIGEgc3Ryb25nZXIg aW5ub3ZhdGlvbiBwYXJ0bmVyIGZvciBidXNpbmVzc2VzIGFuZCBzb2NpZXR5LiBBdCB0aGUgZW5k IG9mIHRoZSB5ZWFyIHdlIHdpbGwgY2hhbmdlIG91ciBuYW1lIHRvIFJJU0UuIFJlYWQgbW9yZSBh dCB3d3cucmkuc2UvZW4vYWJvdXQtcmlzZTxodHRwOi8vd3d3LnJpLnNlL2VuL2Fib3V0LXJpc2U+ DQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkNP U0UgbWFpbGluZyBsaXN0DQpDT1NFQGlldGYub3JnPG1haWx0bzpDT1NFQGlldGYub3JnPg0KaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQoNCg0KDQotLQ0KDQpCZXN0 IHJlZ2FyZHMsDQpLYXRobGVlbg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K VGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIG1lc3NhZ2UgbWF5IGJlIGNvbmZpZGVu dGlhbCBhbmQgbGVnYWxseSBwcm90ZWN0ZWQgdW5kZXIgYXBwbGljYWJsZSBsYXcuIFRoZSBtZXNz YWdlIGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIGFkZHJlc3NlZShzKS4gSWYgeW91IGFyZSBu b3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBh bnkgdXNlLCBmb3J3YXJkaW5nLCBkaXNzZW1pbmF0aW9uLCBvciByZXByb2R1Y3Rpb24gb2YgdGhp cyBtZXNzYWdlIGlzIHN0cmljdGx5IHByb2hpYml0ZWQgYW5kIG1heSBiZSB1bmxhd2Z1bC4gSWYg eW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIGNvbnRhY3QgdGhlIHNl bmRlciBieSByZXR1cm4gZS1tYWlsIGFuZCBkZXN0cm95IGFsbCBjb3BpZXMgb2YgdGhlIG9yaWdp bmFsIG1lc3NhZ2UuDQo= --_000_0c5214ec37df4c6081e3d7bb35e5078dVI1PR9003MB0237MGDPHGem_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLmhvZW56Yg0KCXttc28t c3R5bGUtbmFtZTpob2VuemI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29s b3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlv bjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGlu O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNw aWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBk YXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0K PGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFz cz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj5JIHN0cm9uZ2x5IGFncmVlIHdpdGggcHJldmlvdXMgY29tbWVudHMgb24g dGhlIE1MIHRoYXQgdGhlIENPU0UgbXNnIGlzIGtpbmQgb2YgaW5jb21wbGV0ZSB3aXRob3V0IGRl c2NyaWJpbmcgaG93IHRvIGNvbnZleSB0aGUgY2VydGlmaWNhdGUgY2hhaW4uIEkgY2FuIHNlZSBh DQogZmV3IHVwY29taW5nIHByb3RvY29scyAoQU5JTUEsIDZ0aXNjaCBib290c3RyYXApIHdoZXJl IHRoaXMgY291bGQgYmUgYXBwbGllZC4gSSBzdXBwb3J0IHRvIHJlLW9wZW4gYW5kIGNvbXBsZXRl IHRoaXMgd29yay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlNh bmRlZXA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5n OjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPiBDT1NFIFttYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnXQ0KPGI+ T24gQmVoYWxmIE9mIDwvYj5LYXRobGVlbiBNb3JpYXJ0eTxicj4NCjxiPlNlbnQ6PC9iPiBXZWRu ZXNkYXksIE5vdmVtYmVyIDMwLCAyMDE2IDQ6MzEgUE08YnI+DQo8Yj5Ubzo8L2I+IEx1ZHdpZyBT ZWl0eiAmbHQ7bHVkd2lnQHNpY3Muc2UmZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBjb3NlQGlldGYub3Jn PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbQ09TRV0gRlc6IE5ldyBWZXJzaW9uIE5vdGlmaWNh dGlvbiBmb3IgZHJhZnQtc2NoYWFkLWNvc2UteDUwOS0wMC50eHQ8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gV2VkLCBOb3YgMzAsIDIwMTYgYXQgOTo0MSBBTSwg THVkd2lnIFNlaXR6ICZsdDs8YSBocmVmPSJtYWlsdG86bHVkd2lnQHNpY3Muc2UiIHRhcmdldD0i X2JsYW5rIj5sdWR3aWdAc2ljcy5zZTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJs b2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4w cHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmln aHQ6MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIDIwMTYtMTEtMzAgMTU6MjEsIEt1bWFy LCBTYW5kZWVwIHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBp biA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+QSBnb29kIHN0YXJ0IGFuZCBh IHZlcnkgdXNlZnVsIGRvY3VtZW50LiBXaWxsIHRoaXMgZG9jdW1lbnQgZXZvbHZlIGZ1cnRoZXIg aW4gdGhlIENPU0Ugd2c/PGJyPg0KPGJyPg0KU2FuZGVlcDxvOnA+PC9vOnA+PC9wPg0KPC9ibG9j a3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KU2luY2UgdGhlIFdHIGlzIGNsb3Np bmcsIEkgZG9uJ3QgdGhpbmsgc28uPG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaW1pbmcgaXMgZXZlcnl0aGluZyA6LSkgJm5ic3A7 V2UgY2FuIHJlLW9wZW4gdGhlIFdHIHdpdGggYSBjaGFuZ2UgaW4gY2hhcnRlciBpZiB0aGF0IGlz IHRoZSBkZXNpcmVkIG9wdGlvbiBmb3IgdGhlIFdHLiZuYnNwOyBUaGUgY2hhaXJzIGNhbiBoZWxw IGZpZ3VyZSBvdXQgaWYgdGhlcmUgaXMgZW5vdWdoIG1vbWVudHVtIHRvIGtlZXAgdGhlIGdyb3Vw IG9wZW4vcmUtb3BlbiBmb3IgdGhpcyBkcmFmdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+S2F0aGxlZW48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg I0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0 O21hcmdpbi1yaWdodDowaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KU2Vl IEthdGhsZWVuJ3MgY29tbWVudDo8YnI+DQpPbiAyMDE2LTExLTIzIDIwOjAwLCBLYXRobGVlbiBN b3JpYXJ0eSB3cm90ZTo8YnI+DQomZ3Q7IEhlbGxvLDxicj4NCiZndDs8YnI+DQomZ3Q7IFRoYW5r IHlvdSB2ZXJ5IG11Y2ggdG8gdGhlIGNoYWlycywgZWRpdG9ycywgYW5kIGNvbnRyaWJ1dG9ycyB0 byB0aGUgQ09TRTxicj4NCiZndDsgd29ya2luZyBncm91cCBmb3Igd29ya2luZyB0b2dldGhlciB0 byBxdWlja2x5IGFjaGlldmUgdGhlIGdvYWxzIHNldDxicj4NCiZndDsgZm9ydGggaW4gdGhlIGNo YXJ0ZXIgYW5kIGJyaW5naW5nIHRoZSBXRyB0byBhIGNsb3NlITxicj4NCiZndDsmbmJzcDsgZHJh ZnQtaWV0Zi1jb3NlLW1zZyB3YXMganVzdCBhcHByb3ZlZCBmb3IgcHVibGljYXRpb24gdGhhbmtz IHRvIHlvdXI8YnI+DQomZ3Q7IGhhcmQgd29yay4mbmJzcDsgSSdsbCByZXF1ZXN0IGNsb3Npbmcg dGhlIHdvcmtpbmcgZ3JvdXAgc2hvcnRseS48YnI+DQomZ3Q7PGJyPg0KJmd0OyAtLTxicj4NCiZn dDs8YnI+DQomZ3Q7IEJlc3QgcmVnYXJkcyw8YnI+DQomZ3Q7IEthdGhsZWVuPG86cD48L286cD48 L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+PGJyPg0KJmd0Ozxicj4NCiZndDs8YnI+DQomZ3Q7IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KJmd0OyBDT1NFIG1haWxpbmcg bGlzdDxicj4NCiZndDsgPGEgaHJlZj0ibWFpbHRvOkNPU0VAaWV0Zi5vcmciIHRhcmdldD0iX2Js YW5rIj5DT1NFQGlldGYub3JnPC9hPjxicj4NCiZndDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlPC9hPjxicj4NCiZndDs8YnI+DQo8YnI+DQo8 YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIGNsYXNzPSJob2VuemIiPjxzcGFu IHN0eWxlPSJjb2xvcjojODg4ODg4Ij4vTHVkd2lnPC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0i Y29sb3I6Izg4ODg4OCI+PGJyPg0KPGJyPg0KPHNwYW4gY2xhc3M9ImhvZW56YiI+LS0gPC9zcGFu Pjxicj4NCjxzcGFuIGNsYXNzPSJob2VuemIiPkx1ZHdpZyBTZWl0eiwgUGhEJm5ic3A7ICZuYnNw O1NJQ1MgU3dlZGlzaCBJQ1QgQUI8L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9ImhvZW56YiI+SWRl b24gU2NpZW5jZSBQYXJrLCBCdWlsZGluZyBCZXRhIDI8L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9 ImhvZW56YiI+U2NoZWVsZXbDpGdlbiAxNywgU0UtMjIzIDcwIEx1bmQ8L3NwYW4+PGJyPg0KPHNw YW4gY2xhc3M9ImhvZW56YiI+UGhvbmUgPGEgaHJlZj0idGVsOiUyQjQ2JTI4MCUyOTcwLTM0OSUy MDkyJTIwNTEiIHRhcmdldD0iX2JsYW5rIj4NCiYjNDM7NDYoMCk3MC0zNDkgOTIgNTE8L2E+PC9z cGFuPjxicj4NCjxicj4NCjxzcGFuIGNsYXNzPSJob2VuemIiPlRoZSBSSVNFIGluc3RpdHV0ZXMg U1AsIFN3ZWRpc2ggSUNUIGFuZCBJbm52ZW50aWEgYXJlIG1lcmdpbmcgaW4gb3JkZXIgdG8gY3Jl YXRlIGEgdW5pZmllZCBpbnN0aXR1dGUgc2VjdG9yIGFuZCBiZWNvbWUgYSBzdHJvbmdlciBpbm5v dmF0aW9uIHBhcnRuZXIgZm9yIGJ1c2luZXNzZXMgYW5kIHNvY2lldHkuIEF0IHRoZSBlbmQgb2Yg dGhlIHllYXIgd2Ugd2lsbCBjaGFuZ2Ugb3VyIG5hbWUgdG8gUklTRS4gUmVhZA0KIG1vcmUgYXQg PGEgaHJlZj0iaHR0cDovL3d3dy5yaS5zZS9lbi9hYm91dC1yaXNlIiB0YXJnZXQ9Il9ibGFuayI+ d3d3LnJpLnNlL2VuL2Fib3V0LXJpc2U8L2E+PC9zcGFuPjxicj4NCjxicj4NCjwvc3Bhbj48YnI+ DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCkNP U0UgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOkNPU0VAaWV0Zi5vcmciPkNPU0VA aWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9jb3NlIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9jb3NlPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LS0gPG86cD48L286cD48L3A+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlc3QgcmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkthdGhsZWVuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxi cj4NCjxocj4NCjxmb250IGZhY2U9IkFyaWFsIiBjb2xvcj0iR3JheSIgc2l6ZT0iMSI+VGhlIGlu Zm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIG1lc3NhZ2UgbWF5IGJlIGNvbmZpZGVudGlhbCBh bmQgbGVnYWxseSBwcm90ZWN0ZWQgdW5kZXIgYXBwbGljYWJsZSBsYXcuIFRoZSBtZXNzYWdlIGlz IGludGVuZGVkIHNvbGVseSBmb3IgdGhlIGFkZHJlc3NlZShzKS4gSWYgeW91IGFyZSBub3QgdGhl IGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQNCiB0aGF0IGFueSB1 c2UsIGZvcndhcmRpbmcsIGRpc3NlbWluYXRpb24sIG9yIHJlcHJvZHVjdGlvbiBvZiB0aGlzIG1l c3NhZ2UgaXMgc3RyaWN0bHkgcHJvaGliaXRlZCBhbmQgbWF5IGJlIHVubGF3ZnVsLiBJZiB5b3Ug YXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2UgY29udGFjdCB0aGUgc2VuZGVy IGJ5IHJldHVybiBlLW1haWwgYW5kIGRlc3Ryb3kgYWxsIGNvcGllcyBvZiB0aGUgb3JpZ2luYWwg bWVzc2FnZS48YnI+DQo8L2ZvbnQ+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_0c5214ec37df4c6081e3d7bb35e5078dVI1PR9003MB0237MGDPHGem_-- From nobody Wed Nov 30 11:20:42 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76E25129981 for ; Wed, 30 Nov 2016 11:20:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.797 X-Spam-Level: X-Spam-Status: No, score=-4.797 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.896, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K_1e2Weosejt for ; Wed, 30 Nov 2016 11:20:34 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 39B0512996A for ; Wed, 30 Nov 2016 11:20:34 -0800 (PST) Received: from hebrews (24.21.96.37) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 30 Nov 2016 11:40:14 -0800 From: Jim Schaad To: "'Kumar, Sandeep'" , References: <147987163959.30322.14158962529156430503.idtracker@ietfa.amsl.com> <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> In-Reply-To: Date: Wed, 30 Nov 2016 11:20:26 -0800 Message-ID: <00b501d24b3e$cf966040$6ec320c0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQGas+U5hOX2ZwwTfdISQ4lSrZ9yRQGKptd0Ab+bGHuhRsOIsA== Content-Language: en-us X-Originating-IP: [24.21.96.37] Archived-At: Subject: Re: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 19:20:39 -0000 My intention was to do this as an individual draft rather than as a working group draft. At this point I am still looking for technical feedback on what is required and if the current document meets those requirements. Jim > -----Original Message----- > From: Kumar, Sandeep [mailto:sandeep.kumar@philips.com] > Sent: Wednesday, November 30, 2016 6:21 AM > To: Jim Schaad ; cose@ietf.org > Subject: RE: [COSE] FW: New Version Notification for draft-schaad-cose-x509- > 00.txt > > A good start and a very useful document. Will this document evolve further in > the COSE wg? > > Sandeep > > > -----Original Message----- > > From: COSE [mailto:cose-bounces@ietf.org] On Behalf Of Jim Schaad > > Sent: Wednesday, November 23, 2016 6:01 AM > > To: cose@ietf.org > > Subject: [COSE] FW: New Version Notification for > > draft-schaad-cose-x509- 00.txt > > > > This is a rough draft of what a set of X.509 headers could look like. > > There is lots of things that are incomplete or missing, but I said I > > would write up a fast version for people to look at so here it is. > > > > If you are interested, please comment on the headers. The pointer to > > the github repository is in the document. > > > > Jim > > > > > > > -----Original Message----- > > > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > > > Sent: Tuesday, November 22, 2016 7:27 PM > > > To: Jim Schaad > > > Subject: New Version Notification for draft-schaad-cose-x509-00.txt > > > > > > > > > A new version of I-D, draft-schaad-cose-x509-00.txt has been > > > successfully submitted by Jim Schaad and posted to the IETF repository. > > > > > > Name:draft-schaad-cose-x509 > > > Revision:00 > > > Title:CBOR Encoded Message Syntax (COSE): Headers for carrying and > > > referencing X.509 certificates Document date:2016-11-22 > > > Group:Individual Submission > > > Pages:6 > > > URL: https://www.ietf.org/internet-drafts/draft-schaad-cose-x509- > > 00.txt > > > Status: https://datatracker.ietf.org/doc/draft-schaad-cose-x509/ > > > Htmlized: https://tools.ietf.org/html/draft-schaad-cose-x509-00 > > > > > > > > > Abstract: > > > This document defines the headers and usage for referring to and > > > transporting X.509 certificates in the CBOR Encoded Message (COSE) > > > Syntax. > > > > > > Contributing to this document > > > > > > The source for this draft is being maintained in GitHub. Suggested > > > changes should be submitted as pull requests at > > cose-wg/X509>. Instructions are on that page as well. Editorial > > > changes can be managed in GitHub, but any substantial issues need to > > > be discussed on the COSE mailing list. > > > > > > > > > > > > > > > Please note that it may take a couple of minutes from the time of > > > submission until the htmlized version and diff are available at tools.ietf.org. > > > > > > The IETF Secretariat > > > > > > _______________________________________________ > > COSE mailing list > > COSE@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > ________________________________ > The information contained in this message may be confidential and legally > protected under applicable law. The message is intended solely for the > addressee(s). If you are not the intended recipient, you are hereby notified that > any use, forwarding, dissemination, or reproduction of this message is strictly > prohibited and may be unlawful. If you are not the intended recipient, please > contact the sender by return e-mail and destroy all copies of the original > message. From nobody Wed Nov 30 11:22:32 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5072129670 for ; Wed, 30 Nov 2016 11:22:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.096 X-Spam-Level: X-Spam-Status: No, score=-7.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-2.896, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 45F6XqtUmQA5 for ; Wed, 30 Nov 2016 11:22:28 -0800 (PST) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2DA201293D8 for ; Wed, 30 Nov 2016 11:22:28 -0800 (PST) X-AuditID: 1209190f-2afff70000003dda-f5-583f26f364ec Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by (Symantec Messaging Gateway) with SMTP id C2.EC.15834.3F62F385; Wed, 30 Nov 2016 14:22:27 -0500 (EST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id uAUJMQtg022009 for ; Wed, 30 Nov 2016 14:22:27 -0500 Received: from [192.168.128.57] (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id uAUJMPBx006998 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for ; Wed, 30 Nov 2016 14:22:26 -0500 To: cose@ietf.org References: <147987163959.30322.14158962529156430503.idtracker@ietfa.amsl.com> <004901d24546$8e76bfe0$ab643fa0$@augustcellars.com> <46b30a15-cd8f-79c8-8b06-e8a78936fcfa@sics.se> From: Justin Richer Message-ID: Date: Wed, 30 Nov 2016 14:22:17 -0500 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.5.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------82ECF33EF9785E8B9C69A54D" X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrNIsWRmVeSWpSXmKPExsUixCmqrftZzT7C4OcyXotpW6eyOjB6LFny kymAMYrLJiU1J7MstUjfLoErY/bD7UwFE30qLr1sZmpg/GjUxcjJISFgInFoxS+WLkYuDiGB NiaJY9P+MEM4RxkljtzvgXLeM0ls3LOPFaRFWCBEYufdB4xdjBwcIgKCEnc7zSFqTjBJdE6+ zAZSwyagKjF9TQsTiM0rYCWxrXcBWC8LUHzThAZmEFtUIEbi07q/7BA1ghInZz5hAbE5BQIl JnQ/AKtnFgiT2HdrKesERr5ZSMpmIUlB2LYSd+buZoaw5SWat86GsnUlFm1bwY4svoCRbRWj bEpulW5uYmZOcWqybnFyYl5eapGuiV5uZoleakrpJkZwuEry72Cc0+B9iFGAg1GJh3fHXbsI IdbEsuLK3EOMkhxMSqK8RxnsI4T4kvJTKjMSizPii0pzUosPMUpwMCuJ8NYpAeV4UxIrq1KL 8mFS0hwsSuK8/92+hgsJpCeWpGanphakFsFkZTg4lCR4J6oCNQoWpaanVqRl5pQgpJk4OEGG 8wAND1YBGV5ckJhbnJkOkT/FqMuxZ9arB0xCLHn5ealS4rwTQYoEQIoySvPg5oDSTMLbw6av GMWB3hLmPQKyjgeYouAmvQJawgS05O1ra5AlJYkIKakGRvNiMY+Vf4JP53bVv5njulHEyC4l KuTfC/dla35PmccQsN9c5k+u+6N9x532t15Ldv2gOKne8vFPwd07yo/c+Oxqldmw8QZj43M9 nwiurpfGvqFPHd9KSc3stgq59Db4rdLlqQs91kTert/9XnrKO5u9S3cYrv987E+y5rLXc+5/ +bDzxIuaYm8lluKMREMt5qLiRABWbYlPDgMAAA== Archived-At: Subject: Re: [COSE] FW: New Version Notification for draft-schaad-cose-x509-00.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 19:22:31 -0000 This is a multi-part message in MIME format. --------------82ECF33EF9785E8B9C69A54D Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit The current plan is to keep the group closed. If there's a groundswell of support for this work, and another group doesn't want to pick it up themselves (which they're free to do), then we can all consider rechartering COSE. The mailing list will remain open, as stated in the announcement. -- Justin On 11/30/2016 10:31 AM, Kathleen Moriarty wrote: > > > On Wed, Nov 30, 2016 at 9:41 AM, Ludwig Seitz > wrote: > > On 2016-11-30 15:21, Kumar, Sandeep wrote: > > A good start and a very useful document. Will this document > evolve further in the COSE wg? > > Sandeep > > > Since the WG is closing, I don't think so. > > > Timing is everything :-) We can re-open the WG with a change in > charter if that is the desired option for the WG. The chairs can help > figure out if there is enough momentum to keep the group open/re-open > for this draft. > > Thanks, > Kathleen > > > > See Kathleen's comment: > On 2016-11-23 20:00, Kathleen Moriarty wrote: > > Hello, > > > > Thank you very much to the chairs, editors, and contributors to > the COSE > > working group for working together to quickly achieve the goals set > > forth in the charter and bringing the WG to a close! > > draft-ietf-cose-msg was just approved for publication thanks to > your > > hard work. I'll request closing the working group shortly. > > > > -- > > > > Best regards, > > Kathleen > > > > > > > _______________________________________________ > > COSE mailing list > > COSE@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > > > > > > /Ludwig > > -- > Ludwig Seitz, PhD SICS Swedish ICT AB > Ideon Science Park, Building Beta 2 > Scheelevägen 17, SE-223 70 Lund > Phone +46(0)70-349 92 51 > > The RISE institutes SP, Swedish ICT and Innventia are merging in > order to create a unified institute sector and become a stronger > innovation partner for businesses and society. At the end of the > year we will change our name to RISE. Read more at > www.ri.se/en/about-rise > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > > > > > -- > > Best regards, > Kathleen > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --------------82ECF33EF9785E8B9C69A54D Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit

The current plan is to keep the group closed. If there's a groundswell of support for this work, and another group doesn't want to pick it up themselves (which they're free to do), then we can all consider rechartering COSE.

The mailing list will remain open, as stated in the announcement.

 -- Justin


On 11/30/2016 10:31 AM, Kathleen Moriarty wrote:


On Wed, Nov 30, 2016 at 9:41 AM, Ludwig Seitz <ludwig@sics.se> wrote:
On 2016-11-30 15:21, Kumar, Sandeep wrote:
A good start and a very useful document. Will this document evolve further in the COSE wg?

Sandeep


 Since the WG is closing, I don't think so.

Timing is everything :-)  We can re-open the WG with a change in charter if that is the desired option for the WG.  The chairs can help figure out if there is enough momentum to keep the group open/re-open for this draft.

Thanks,
Kathleen
 


See Kathleen's comment:
On 2016-11-23 20:00, Kathleen Moriarty wrote:
> Hello,
>
> Thank you very much to the chairs, editors, and contributors to the COSE
> working group for working together to quickly achieve the goals set
> forth in the charter and bringing the WG to a close!
>  draft-ietf-cose-msg was just approved for publication thanks to your
> hard work.  I'll request closing the working group shortly.
>
> --
>
> Best regards,
> Kathleen

>
>
> _______________________________________________
> COSE mailing list
> COSE@ietf.org
> https://www.ietf.org/mailman/listinfo/cose
>



/Ludwig

--
Ludwig Seitz, PhD   SICS Swedish ICT AB
Ideon Science Park, Building Beta 2
Scheelevägen 17, SE-223 70 Lund
Phone +46(0)70-349 92 51

The RISE institutes SP, Swedish ICT and Innventia are merging in order to create a unified institute sector and become a stronger innovation partner for businesses and society. At the end of the year we will change our name to RISE. Read more at www.ri.se/en/about-rise


_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose




--

Best regards,
Kathleen


_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

--------------82ECF33EF9785E8B9C69A54D-- From nobody Wed Nov 30 15:42:11 2016 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F6AD129BC8 for ; Wed, 30 Nov 2016 15:42:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4uckeH5NuEGs for ; Wed, 30 Nov 2016 15:42:01 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0132.outbound.protection.outlook.com [104.47.41.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1F0D129BBC for ; Wed, 30 Nov 2016 15:42:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=28YL5kvv+1wbo5J0ySm1I1mbvL/W9pzmy1iJw0TZBbI=; b=GciFlyo7KFz6+ZDLR87QTkhfwroXLfXjh/ADoXk/wDoXs5RcRfHzFX1O1omommeHhPDbzLBLLvae8x2Sny1Wk5jJ6jn9GHRE1ZjAw5izPmPFE5Asc6Ol4GQQhO3nz8vKrvOo9rKzFXkZhUQ+jU+vFCukSuDYiV+L2s111cyu0NY= Received: from BN3PR03MB2355.namprd03.prod.outlook.com (10.166.74.150) by BN3PR03MB2354.namprd03.prod.outlook.com (10.166.74.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.13; Wed, 30 Nov 2016 23:41:59 +0000 Received: from BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) by BN3PR03MB2355.namprd03.prod.outlook.com ([10.166.74.150]) with mapi id 15.01.0747.018; Wed, 30 Nov 2016 23:41:59 +0000 From: Mike Jones To: "rfc-editor@rfc-editor.org" , "cose@ietf.org" Thread-Topic: Inconsistencies in COSE registry names Thread-Index: AdJLW99SlzMLCIrmQwmmIG2x2VFJ3g== Date: Wed, 30 Nov 2016 23:41:58 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:1::650] x-ms-office365-filtering-correlation-id: 33456984-78ca-424a-8aae-08d4197a7a16 x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN3PR03MB2354; x-microsoft-exchange-diagnostics: 1; BN3PR03MB2354; 7:DHNXjBlg0wu+07UqEypCUzBhANFXI2riwe7zDji2TFlJSTA/d0N9uVnqluRgyJjfHua4I9C5y8SezgtmfuZdCfJv69x9i0CGbUsKLH8ZDnDDDuhVpajfHRHpYhInaoXzFRWZSk4K8M2mH2GzK3PuXSdGO/4AdjJnCYc3hA/v5YOXy5u1dTT9/2kSfbiPdhMZPDkx7+OvsoE5pr2BbhQHLW8JFb0EI//TW943cPtY/huu2yMy6bJcJ1mFmoUP0i2x0Ai0tWAWE3UqD1PXTvWzlmHt18lUsGi/KUKxZJkdPy5XWtBnXxcRX7ni0AuuQ3p5M2Clc6A0diD9bTkhgSN7IsOAenjgK/r8704BB9ecOAomVk54yOVZd/kf53xOxXuL4lmzXGPGQcRBXr9N+gzxPMhHcYJSQnbthzryCg/6w5CMoIAYV/1AjMtN6Gqk8ZQ3BqsO1inPi8hC+3ugiRoN+pcTVyqMtPXrbbZYerlCbdc= x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040375)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041248)(20161123560025)(20161123564025)(20161123555025)(20161123562025)(6042181)(6047074)(6072148); SRVR:BN3PR03MB2354; BCL:0; PCL:0; RULEID:; SRVR:BN3PR03MB2354; x-forefront-prvs: 0142F22657 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(199003)(189002)(77096006)(33656002)(76576001)(99286002)(5660300001)(3280700002)(2900100001)(4326007)(5005710100001)(68736007)(7696004)(106356001)(189998001)(92566002)(10290500002)(9686002)(105586002)(10090500001)(3660700001)(8936002)(5001770100001)(2501003)(7736002)(74316002)(86362001)(8990500004)(97736004)(6116002)(81166006)(39060400001)(7846002)(86612001)(2906002)(81156014)(54356999)(6506003)(101416001)(8676002)(50986999)(606004)(7906003)(790700001)(122556002)(38730400001)(102836003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR03MB2354; H:BN3PR03MB2355.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN3PR03MB23557F3466DD41466B6EFF98F58C0BN3PR03MB2355namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Nov 2016 23:41:58.8352 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR03MB2354 Archived-At: Cc: Jim Schaad , Kathleen Moriarty Subject: [COSE] Inconsistencies in COSE registry names X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 23:42:09 -0000 --_000_BN3PR03MB23557F3466DD41466B6EFF98F58C0BN3PR03MB2355namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable While working on another spec using COSE https://tools.ietf.org/html/draft-= ietf-cose-msg-24, I noticed that multiple inconsistent names are used for t= he same registries in some cases. I hope that this can be addressed by the= RFC Editor (included in this communication) before publication. 1. Where multiple names appear on the same line below, I believe they refe= r to the same registry. What I believe to be the correct name is first: "COSE Header Parameters", "COSE Header Labels" "COSE Algorithms", "COSE Algorithm Value", "COSE Algorithm = Values" "COSE Key Type Parameters", "COSE Key Type Parameter Labels= " 2. The registry name "COSE Curves" is used in the table in 13.1.1 (Double = Coordinate Curves) but doesn't refer to any registry I'm aware of. 3. I believe that the name "COSE Key Type" should be changed to "COSE Key = Types" for consistency sake, since all the other registry names use plurals= . 4. There are several places in the running text in which the word "Registr= y" is included in the registry name in quotation marks, rather than being p= laced outside the quotation marks. For instance, I believe these changes s= hould be made in the body text: "COSE Key Type Registry" -> "COSE Key Type" registry "COSE Key Common Parameters Registry" -> "COSE Key Common P= arameters" registry For completeness, I believe these registry names and their usages are fine: "COSE Header Algorithm Parameters" "COSE Key Common Parameters" "COSE Elliptic Curve Parameters" -- Mike --_000_BN3PR03MB23557F3466DD41466B6EFF98F58C0BN3PR03MB2355namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

While working on another spec using COSE https://tools.ietf.org/html/draft-ietf-cose-msg-24, I noticed that mult= iple inconsistent names are used for the same registries in some cases.&nbs= p; I hope that this can be addressed by the RFC Editor (included in this co= mmunication) before publication.

 

1.  Where multiple names appear on the same lin= e below, I believe they refer to the same registry.  What I believe to= be the correct name is first:

        &nbs= p;       "COSE Header Parameters", = “COSE Header Labels”

        &nbs= p;       "COSE Algorithms", "C= OSE Algorithm Value", "COSE Algorithm Values"

        &nbs= p;       "COSE Key Type Parameters"= , "COSE Key Type Parameter Labels"

 

2.  The registry name “COSE Curves”= is used in the table in 13.1.1 (Double Coordinate Curves) but doesn’= t refer to any registry I’m aware of.

 

3.  I believe that the name "COSE Key Type= " should be changed to "COSE Key Types" for consistency sake= , since all the other registry names use plurals.

 

4.  There are several places in the running tex= t in which the word “Registry” is included in the registry name= in quotation marks, rather than being placed outside the quotation marks.&= nbsp; For instance, I believe these changes should be made in the body text:

        &nbs= p;       "COSE Key Type Registry" -= > "COSE Key Type" registry

        &nbs= p;       "COSE Key Common Parameters Reg= istry" -> "COSE Key Common Parameters" registry

 

For completeness, I believe these registry names and= their usages are fine:

        &nbs= p;       "COSE Header Algorithm Paramete= rs"

        &nbs= p;       "COSE Key Common Parameters&quo= t;

        &nbs= p;       "COSE Elliptic Curve Parameters= "

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;     -- Mike

 

--_000_BN3PR03MB23557F3466DD41466B6EFF98F58C0BN3PR03MB2355namp_--