From nobody Tue Jun 5 13:47:52 2018 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8564D131197 for ; Tue, 5 Jun 2018 13:47:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.694 X-Spam-Level: X-Spam-Status: No, score=-5.694 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, TRACKER_ID=1.306] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nsxyih4s3Lot for ; Tue, 5 Jun 2018 13:47:46 -0700 (PDT) Received: from wolverine01.qualcomm.com (wolverine01.qualcomm.com [199.106.114.254]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 223C8130DDD for ; Tue, 5 Jun 2018 13:47:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1528231666; x=1559767666; h=from:to:subject:date:message-id:mime-version; bh=jY8SwTWzrJICFilOB1sBQM8aSou+4hN6gLuoFlhIoCo=; b=kMr5sGsxDxX9S/WszRXrcivcTkf/JXLwYS5+Lpnq9Q2101/r2zOqdUMy 5Jvn7NDJvZR66EyQS9Y43EbkHZPQV+208n8xjiCM0wGiVcro5kwT9JI5F HWw3Yni937Fi17j5nmSsYbDUjwpBdrMI7tkOXTY3GCzkfGFOlcAvd3LYO 0=; X-IronPort-AV: E=Sophos;i="5.49,479,1520924400"; d="scan'208,217";a="343639464" Received: from unknown (HELO ironmsg02-sd.qualcomm.com) ([10.53.140.142]) by wolverine01.qualcomm.com with ESMTP; 05 Jun 2018 13:47:45 -0700 Received: from nasanexm01d.na.qualcomm.com ([10.85.0.84]) by ironmsg02-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 05 Jun 2018 13:47:45 -0700 Received: from NASANEXM01B.na.qualcomm.com (10.85.0.82) by NASANEXM01D.na.qualcomm.com (10.85.0.84) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Tue, 5 Jun 2018 13:47:45 -0700 Received: from NASANEXM01B.na.qualcomm.com ([10.85.0.82]) by NASANEXM01B.na.qualcomm.com ([10.85.0.82]) with mapi id 15.00.1365.000; Tue, 5 Jun 2018 13:47:45 -0700 From: Laurence Lundblade To: cose Thread-Topic: Confirmation / interop for COSE Encrypt with RSA OEAP and AES GCM Thread-Index: AQHT/Q5zmQAGM3CmB0CryXIjvvEFTw== Date: Tue, 5 Jun 2018 20:47:44 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3273) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.80.80.8] Content-Type: multipart/alternative; boundary="_000_B5F7C7CF3F6A4DB699E178B00E182A5Aqtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: [COSE] Confirmation / interop for COSE Encrypt with RSA OEAP and AES GCM X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jun 2018 20:47:49 -0000 --_000_B5F7C7CF3F6A4DB699E178B00E182A5Aqtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 V2XigJlyZSB0cnlpbmcgdG8gZm9sbG93IFJGQyA4MTUyICsgUkZDIDgyMzAgdG8gZG8gQ09TRSBF bmNyeXB0aW9uIHdpdGggUlNBIE9FQVAgYW5kIEFFUyBHQ00uIEJhc2ljYWxseSB3ZSBoYXZlIGFu IFJTQS1iYXNlZCBYLjUwOSBjZXJ0aWZpY2F0ZSBoaWVyYXJjaHkgdGhhdCB3ZeKAmXZlIGJlZW4g dXNpbmcgd2l0aCBDTVMgdG8gZG8gYmxvYiBlbmNyeXB0aW9uIGFuZCB3YW50IHRvIG1vdmUgdG8g Q09TRS4NCg0KUkZDIDgyMzAgaGFzIG5vIGV4YW1wbGUgbGlrZSB0aGUgb25lcyBpbiA4MTUyIGZv ciBFQy1iYXNlZCBlbmNyeXB0aW9uLiAgV2UgYWxzbyBoYXZlbuKAmXQgZm91bmQgYW55IG90aGVy IGNvZGUgdG8gaW50ZXJvcCB3aXRoLiBXZeKAmXJlIGxvb2tpbmcgZm9yIHNvbWUgY29uZmlybWF0 aW9uIC8gaW50ZXJvcCB0aGF0IHdlIGdvdCBpdCByaWdodC4NCg0KQmVsb3cgaXMgYW4gZXhhbXBs ZSB3ZeKAmXZlIHByb2R1Y2VkICh0aGlzIGNhbiBiZSB1c2VkIGZvciBhbiBleGFtcGxlIGluIGFu IFJGQyBpZiBkZXNpcmVkKS4NCg0KV2hhdCB3ZSBmaW5kIG5vdCB2ZXJ5IGNsZWFyIGlzIHdoYXQg dGhlIGFjdHVhbCBieXRlcyBlbmNyeXB0ZWQgYnkgdGhlIFJTQSBPRUFQIG9wZXJhdGlvbiBzaG91 bGQgYmUuIEluIHRoZSBleGFtcGxlIGJlbG93IGl0IGlzIHRoZSByYXcgQ0VLIGFuZCBhcyBmYXIg d2UgY2FuIHRlbGwgdGhpcyBpcyBjb3JyZWN0LiBXZeKAmXJlIE5PVCBjcmVhdGluZyBhIEVuY19z dHJ1Y3R1cmUgZm9yIHRoZSBpbnB1dCB0byB0aGUgUlNBIG9wZXJhdGlvbiAod2UgYXJlIGZvciB0 aGUgaW5wdXQgdG8gQUVTIEdDTSkuDQoNCldlIHRoaW5rIFJTQSBPRUFQIGlzIGFuIGluc3RhbmNl IG9mIEtleSBUcmFuc3BvcnQgYXMgbWVudGlvbmVkIGluIHNlY3Rpb24gMTIuMyBpbiBSRkMgODE1 MTIgYW5kIHRodXMgdGhlcmUgYXJlIG5vIHByb3RlY3RlZCBoZWFkZXJzIGluIHRoZSByZWNpcGll bnQgc3RydWN0dXJlLiBSU0EgT0VBUCBoYXMgbm8gd2F5IHRvIGF1dGhlbnRpY2F0ZSB0aGUgcHJv dGVjdGVkIGhlYWRlcnMgc28gdGhlcmUgYXJlIG5vbmUuDQoNCldvdWxkIGFwcHJlY2lhdGUgY29u ZmlybWF0aW9uIHRoYXQgdGhpcyBpcyBhbGwgY29ycmVjdCBhbmQvb3Igc29tZSBTVyB0byBpbnRl cm9wIHdpdGguIFRoYW5rcyENCg0KTEwNCg0KDQoNCg0KDQoNClRoZSBwYXlsb2FkIGVuY3J5cHRl ZCBpcyB0aGUgNyBieXRlIHN0cmluZyDigJxwYXlsb2Fk4oCdLg0KDQpkOCA2MCA4NCA0MyBhMSAw MSAwMyBhMSAwNSA0YyBhNSA3MiBjNiBhMA0KYTggMzcgN2QgMWYgMDUgODIgMjUgZDQgNTcgOTQg MWIgN2IgMWYgODMgYzEgYWYNCjUyIDViIGYxIGI4IGI4IGJiIGYzIGNmIDFjIGE2IGI3IDA1IDhm IGViIGM5IDFkDQo4MSA4MyA0MCBhMiAwMSAzOCAyOCAwNCA0NSA2YiA2NSA3OSA0OSA0NCA1OSAw MQ0KMDAgOWIgNTQgNzQgOGEgMTEgMDcgYTAgZWUgZTcgOGYgOTMgM2IgNDggNDYgZTgNCjk4IDdm IGI5IDk3IDQ1IDFmIGZkIDE0IDgwIDNmIDFiIGIyIGI1IGZjIGMzIDQ0DQo3MiA1ZCAwZSAzMSAx MyA4ZCBjZiAzYyA2YyAwZiBkYiBlZiA4MyA2MSA4NCBjMw0KY2YgMTUgODYgNTUgOWMgNTMgMWIg NjkgMWYgNzQgZWIgMGUgY2UgN2EgNDcgNDcNCjFiIDVkIDQxIDExIDk3IDQzIDAyIDg2IDQ0IGJi IGU1IGUxIDBkIDYwIGFkIDQ0DQpjNyA1NSAwYSBkNSA3ZCBmNCAzMCA5ZiBlNCAwNSBlOSA1MiAx ZCA2NyAwZCBkNg0KNTIgMzEgOGEgYmIgNmUgMTUgNWUgMzUgZmEgNTMgYjkgODkgZDIgOWEgMWUg MmENCjE1IGMzIDg3IDc1IDI0IDBkIGQwIDgyIGVmIGIzIDZkIDA4IGYxIGM1IDc3IGUwDQozMCA1 YyA3OCBmNSA4MSBkNSBjOCA0NCA0NCA4MyA4ZiBmOCA5YyA1MyA1MiA3Mg0KYTUgZTkgODUgYzgg OWUgOGYgZmUgNGYgMWQgNzcgODMgZTIgYjggN2MgN2UgYWINCjM2IDEyIDczIDg5IDVkIDYxIDkw IDZhIDZmIDJjIGRhIDAyIDE3IDcyIDY2IGFkDQplZCA4OCA2YiBlNyA1NiBmOSBmNyA3ZSAzMSAz YyA1MCBkOCBkMSAxNSA3YiBmOA0KNDIgZmMgMDkgZGEgNmYgNDAgMzUgZmMgY2QgOGQgMTIgNjMg MDIgNWYgM2IgNTMNCjQ5IDIxIGFhIGRiIDU1IDM4IDFiIGFiIDE3IGVhIDIxIDViIDczIGQyIDUw IDVkDQo3MSA3ZiA3OSAwYSBkNyBiYSAwYyBkYSA3NSBmOCAyZCBjYSA4YyA4YSBjMiA3OQ0KNzgg YTggZWEgMjggYmIgZjcgODEgMWUgNzQgYzAgZDEgNTUgNjQgZGEgZDggYWENCmFkDQoNCg0KICA5 NygNCiAgICBbDQogICAgICAvIHByb3RlY3RlZCAvIGgnQTEwMTAzJyAvIHsNCiAgICAgICAgICBc IGFsZyBcIDE6MyBcIEFFUy1HQ00gbW9kZSB3LyAyNTYtYml0IGtleSwgMTI4LWJpdCB0YWcgXA0K ICAgICAgICB9IC8gLA0KICAgICAgLyB1bnByb3RlY3RlZCAvIHsNCiAgICAgICAgLyBpdiAvIDU6 aCdBNTcyQzZBMEE4Mzc3RDFGMDU4MjI1RDQnDQogICAgICB9LA0KICAgICAgLyBjaXBoZXJ0ZXh0 IC8gaCc5NDFCN0IxRjgzQzFBRjUyNUJGMUI4QjhCQkYzQ0YxQ0E2QjcwNThGRUJDOTFEJywNCiAg ICAgIC8gcmVjaXBpZW50cyAvIFsNCiAgICAgICAgWw0KICAgICAgICAgIC8gcHJvdGVjdGVkIC8g aCcnLA0KICAgICAgICAgIC8gdW5wcm90ZWN0ZWQgLyB7DQogICAgICAgICAgICAvIGFsZyAvIDE6 LTQxIC8gUlNBRVMtT0FFUCB3LyBTSEEtMjU2IC8sDQogICAgICAgICAgICAvIGtpZCAvIDQ6J2tl eUlEJw0KICAgICAgICAgIH0sDQogICAgICAgICAgLyBjaXBoZXJ0ZXh0IC8gaCc5QjU0NzQ4QTEx MDdBMEVFRTc4RjkzM0I0ODQ2RTg5ODdGQjk5NzQ1MUZGRDE0ODAzRjFCQjJCNUZDQzM0NDcyDQog ICAgICAgICAgICAgICAgICAgICAgICAgICA1RDBFMzExMzhEQ0YzQzZDMEZEQkVGODM2MTg0QzND RjE1ODY1NTlDNTMxQjY5MUY3NEVCMEVDRTdBNDc0NzFCDQogICAgICAgICAgICAgICAgICAgICAg ICAgICA1RDQxMTE5NzQzMDI4NjQ0QkJFNUUxMEQ2MEFENDRDNzU1MEFENTdERjQzMDlGRTQwNUU5 NTIxRDY3MERENjUyDQogICAgICAgICAgICAgICAgICAgICAgICAgICAzMThBQkI2RTE1NUUzNUZB NTNCOTg5RDI5QTFFMkExNUMzODc3NTI0MEREMDgyRUZCMzZEMDhGMUM1NzdFMDMwDQogICAgICAg ICAgICAgICAgICAgICAgICAgICA1Qzc4RjU4MUQ1Qzg0NDQ0ODM4RkY4OUM1MzUyNzJBNUU5ODVD ODlFOEZGRTRGMUQ3NzgzRTJCODdDN0VBQjM2DQogICAgICAgICAgICAgICAgICAgICAgICAgICAx MjczODk1RDYxOTA2QTZGMkNEQTAyMTc3MjY2QURFRDg4NkJFNzU2RjlGNzdFMzEzQzUwRDhEMTE1 N0JGODQyDQogICAgICAgICAgICAgICAgICAgICAgICAgICBGQzA5REE2RjQwMzVGQ0NEOEQxMjYz MDI1RjNCNTM0OTIxQUFEQjU1MzgxQkFCMTdFQTIxNUI3M0QyNTA1RDcxDQogICAgICAgICAgICAg ICAgICAgICAgICAgICA3Rjc5MEFEN0JBMENEQTc1RjgyRENBOEM4QUMyNzk3OEE4RUEyOEJCRjc4 MTFFNzRDMEQxNTU2NERBRDhBQUFEJw0KICAgICAgICBdDQogICAgICBdDQogICAgXQ0KICApDQoN Cg0KUlNBIEtleSBNYXRlcmlhbDoNCg0Ka2V5IGJpdHMgPSAyMDQ4DQoNCm4gPSBoJ2FlNDVlZDU2 MDFjZWM2YjhjYzA1ZjgwMzkzNWM2NzRkZGJlMGQ3NWM0YzA5ZmQ3OTUxZmM2YjBjYWVjMzEzYThk ZjM5OTcwYzUxOGJmZg0KICAgICAgYmE1ZWQ2OGYzZjBkN2YyMmE0MDI5ZDQxM2YxYWUwN2U0ZWJl OWU0MTc3Y2UyM2U3ZjU0MDRiNTY5ZTRlZTFiZGNmM2MxZmIwM2VmMTEzDQogICAgICA4MDJkNGY4 NTVlYjliNTEzNGI1YTdjODA4NWFkY2FlNmZhMmZhMTQxN2VjMzc2M2JlMTcxYjBjNjJiNzYwZWRl MjNjMTJhZDkyYjk4MDgNCiAgICAgIDg0YzY0MWY1YThmYWMyNmJkYWQ0YTAzMzgxYTIyZmUxYjc1 NDg4NTA5NGM4MjUwNmQ0MDE5YTUzNWEyODZhZmViMjcxYmI5YmE1OTJkZQ0KICAgICAgMThkY2Y2 MDBjMmFlZWFlNTZlMDJmN2NmNzlmYzE0Y2YzYmRjN2NkODRmZWJiYmY5NTBjYTkwMzA0YjIyMTlh N2FhMDYzYWVmYTJjM2MxDQogICAgICA5ODBlNTYwY2Q2NGFmZTc3OTU4NWI2MTA3NjU3Yjk1Nzg1 N2VmZGU2MDEwOTg4YWI3ZGU0MTdmYzg4ZDhmMzg0YzRlNmU3MmMzZjk0M2UNCiAgICAgIDBjMzFj MGM0YTVjYzM2Zjg3OWQ4YTNhYzlkN2Q1OTg2MGVhYWRhNmI4M2JiJw0KDQpwID0gaCcnDQoNCnEg PSBoJycNCg0KZSA9IGgnMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwDQogICAgICAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDANCiAgICAgIDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMA0KICAgICAgMDAwMDAwMDAwMDAw MDAwMDAxMDAwMScNCg0KZCA9IGgnMDU2YjA0MjE2ZmU1ZjM1NGFjNzcyNTBhNGI2YjBjODUyNWE4 NWM1OWIwYmQ4MGM1NjQ1MGEyMmQ1ZjQzOGU1OTZhMzMzYWE4NzVlMjkxDQogICAgICBkZDQzZjQ4 Y2I4OGI5ZDVmYzBkNDk5ZjlmY2QxYzM5N2Y5YWZjMDcwY2Q5ZTM5OGM4ZDE5ZTYxZGI3Yzc0MTBh NmIyNjc1ZGZiZjVkMzQNCiAgICAgIDViODA0ZDIwMWFkZDUwMmQ1Y2UyZGZjYjA5MWNlOTk5N2Ji ZWJlNTczMDZmMzgzZTRkNTg4MTAzZjAzNmY3ZTg1ZDE5MzRkMTUyYTMyMw0KICAgICAgZTRhOGRi NDUxZDZmNGE1YjFiMGYxMDJjYzE1MGUwMmZlZWUyYjg4ZGVhNGFkNGMxYmFjY2IyNGQ4NDA3MmQx NGUxZDI0YTY3NzFmNzQwDQogICAgICA4ZWUzMDU2NGZiODZkNDM5M2EzNGJjZjBiNzg4NTAxZDE5 MzMwM2YxM2EyMjg0YjAwMWYwZjY0OWVhZjc5MzI4ZDRhYzVjNDMwYWI0NDENCiAgICAgIDQ5MjBh OTQ2MGVkMWI3YmM0MGVjNjUzZTg3NmQwOWFiYzUwOWFlNDViNTI1MTkwMTE2YTBjMjYxMDE4NDgy OTg1MDljMWMzYmYzYTQ4Mw0KICAgICAgZTcyNzQwNTRlMTVlOTcwNzUwMzZlOTg5ZjYwOTMyODA3 YjUyNTc3NTFlNzknDQo= --_000_B5F7C7CF3F6A4DB699E178B00E182A5Aqtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: <9F9D82E38BD68B4888042E29E92A27CC@qualcomm.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KV2XigJlyZSB0cnlpbmcgdG8gZm9s bG93IFJGQyA4MTUyICYjNDM7IFJGQyZuYnNwOzgyMzAmbmJzcDt0byBkbyBDT1NFIEVuY3J5cHRp b24gd2l0aCBSU0EgT0VBUCBhbmQgQUVTIEdDTS4gQmFzaWNhbGx5IHdlIGhhdmUgYW4gUlNBLWJh c2VkIFguNTA5IGNlcnRpZmljYXRlIGhpZXJhcmNoeSB0aGF0IHdl4oCZdmUgYmVlbiB1c2luZyB3 aXRoIENNUyB0byBkbyBibG9iIGVuY3J5cHRpb24gYW5kIHdhbnQgdG8gbW92ZSB0byBDT1NFLg0K PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+UkZDIDgy MzAgaGFzIG5vIGV4YW1wbGUgbGlrZSB0aGUgb25lcyBpbiA4MTUyIGZvciBFQy1iYXNlZCBlbmNy eXB0aW9uLiAmbmJzcDtXZSBhbHNvIGhhdmVu4oCZdCBmb3VuZCBhbnkgb3RoZXIgY29kZSB0byBp bnRlcm9wIHdpdGguIFdl4oCZcmUgbG9va2luZyBmb3Igc29tZSBjb25maXJtYXRpb24gLyBpbnRl cm9wIHRoYXQgd2UgZ290IGl0IHJpZ2h0LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+QmVsb3cgaXMgYW4gZXhhbXBsZSB3ZeKAmXZlIHBy b2R1Y2VkICh0aGlzIGNhbiBiZSB1c2VkIGZvciBhbiBleGFtcGxlIGluIGFuIFJGQyBpZiBkZXNp cmVkKS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPldoYXQgd2UgZmluZCBub3QgdmVyeSBjbGVhciBpcyB3aGF0IHRoZSBhY3R1YWwgYnl0 ZXMgZW5jcnlwdGVkIGJ5IHRoZSBSU0EgT0VBUCBvcGVyYXRpb24gc2hvdWxkIGJlLiBJbiB0aGUg ZXhhbXBsZSBiZWxvdyBpdCBpcyB0aGUgcmF3IENFSyBhbmQgYXMgZmFyIHdlIGNhbiB0ZWxsIHRo aXMgaXMgY29ycmVjdC4gV2XigJlyZSBOT1QgY3JlYXRpbmcgYSZuYnNwOzxmb250IHNpemU9IjIi IGNsYXNzPSIiPkVuY19zdHJ1Y3R1cmUgZm9yIHRoZQ0KIGlucHV0IHRvIHRoZSBSU0Egb3BlcmF0 aW9uICh3ZSBhcmUgZm9yIHRoZSZuYnNwO2lucHV0IHRvIEFFUyBHQ00pLiZuYnNwOzwvZm9udD48 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgc2l6ZT0iMiIgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBzaXplPSIyIiBjbGFzcz0iIj5X ZSB0aGluayBSU0EgT0VBUCBpcyBhbiBpbnN0YW5jZSBvZiBLZXkgVHJhbnNwb3J0IGFzIG1lbnRp b25lZCBpbiBzZWN0aW9uIDEyLjMgaW4gUkZDIDgxNTEyIGFuZCB0aHVzIHRoZXJlIGFyZSBubyBw cm90ZWN0ZWQgaGVhZGVycyBpbiB0aGUgcmVjaXBpZW50IHN0cnVjdHVyZS4gUlNBIE9FQVAgaGFz IG5vIHdheSB0byBhdXRoZW50aWNhdGUgdGhlIHByb3RlY3RlZCBoZWFkZXJzIHNvDQogdGhlcmUg YXJlIG5vbmUuPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBzaXplPSIyIiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IHNp emU9IjIiIGNsYXNzPSIiPldvdWxkIGFwcHJlY2lhdGUgY29uZmlybWF0aW9uIHRoYXQgdGhpcyZu YnNwO2lzIGFsbCBjb3JyZWN0IGFuZC9vciBzb21lIFNXIHRvIGludGVyb3Agd2l0aC4gVGhhbmtz ITwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgc2l6ZT0iMiIgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBzaXplPSIyIiBj bGFzcz0iIj5MTDwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgc2l6ZT0iMiIgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5UaGUgcGF5bG9hZCBlbmNyeXB0ZWQgaXMgdGhlIDcgYnl0 ZSBzdHJpbmcg4oCccGF5bG9hZOKAnS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0i Ij5kOCA2MCA4NCA0MyBhMSAwMSAwMyBhMSAwNSA0YyBhNSA3MiBjNiBhMDwvZm9udD48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPmE4IDM3IDdk IDFmIDA1IDgyIDI1IGQ0IDU3IDk0IDFiIDdiIDFmIDgzIGMxIGFmPC9mb250PjwvZGl2Pg0KPGRp diBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+NTIgNWIgZjEgYjgg YjggYmIgZjMgY2YgMWMgYTYgYjcgMDUgOGYgZWIgYzkgMWQ8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNs YXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj44MSA4MyA0MCBhMiAwMSAz OCAyOCAwNCA0NSA2YiA2NSA3OSA0OSA0NCA1OSAwMTwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPjAwIDliIDU0IDc0IDhhIDExIDA3 IGEwIGVlIGU3IDhmIDkzIDNiIDQ4IDQ2IGU4PC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+OTggN2YgYjkgOTcgNDUgMWYgZmQgMTQg ODAgM2YgMWIgYjIgYjUgZmMgYzMgNDQ8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250 IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj43MiA1ZCAwZSAzMSAxMyA4ZCBjZiAzYyA2YyAw ZiBkYiBlZiA4MyA2MSA4NCBjMzwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFj ZT0iQ291cmllciBOZXciIGNsYXNzPSIiPmNmIDE1IDg2IDU1IDljIDUzIDFiIDY5IDFmIDc0IGVi IDBlIGNlIDdhIDQ3IDQ3PC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgY2xhc3M9IiI+MWIgNWQgNDEgMTEgOTcgNDMgMDIgODYgNDQgYmIgZTUgZTEg MGQgNjAgYWQgNDQ8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJp ZXIgTmV3IiBjbGFzcz0iIj5jNyA1NSAwYSBkNSA3ZCBmNCAzMCA5ZiBlNCAwNSBlOSA1MiAxZCA2 NyAwZCBkNjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBO ZXciIGNsYXNzPSIiPjUyIDMxIDhhIGJiIDZlIDE1IDVlIDM1IGZhIDUzIGI5IDg5IGQyIDlhIDFl IDJhPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIg Y2xhc3M9IiI+MTUgYzMgODcgNzUgMjQgMGQgZDAgODIgZWYgYjMgNmQgMDggZjEgYzUgNzcgZTA8 L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFz cz0iIj4zMCA1YyA3OCBmNSA4MSBkNSBjOCA0NCA0NCA4MyA4ZiBmOCA5YyA1MyA1MiA3MjwvZm9u dD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIi PmE1IGU5IDg1IGM4IDllIDhmIGZlIDRmIDFkIDc3IDgzIGUyIGI4IDdjIDdlIGFiPC9mb250Pjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+MzYg MTIgNzMgODkgNWQgNjEgOTAgNmEgNmYgMmMgZGEgMDIgMTcgNzIgNjYgYWQ8L2ZvbnQ+PC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj5lZCA4OCA2 YiBlNyA1NiBmOSBmNyA3ZSAzMSAzYyA1MCBkOCBkMSAxNSA3YiBmODwvZm9udD48L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPjQyIGZjIDA5IGRh IDZmIDQwIDM1IGZjIGNkIDhkIDEyIDYzIDAyIDVmIDNiIDUzPC9mb250PjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+NDkgMjEgYWEgZGIgNTUg MzggMWIgYWIgMTcgZWEgMjEgNWIgNzMgZDIgNTAgNWQ8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj43MSA3ZiA3OSAwYSBkNyBiYSAw YyBkYSA3NSBmOCAyZCBjYSA4YyA4YSBjMiA3OTwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPjc4IGE4IGVhIDI4IGJiIGY3IDgxIDFl IDc0IGMwIGQxIDU1IDY0IGRhIGQ4IGFhPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9u dCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+YWQ8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Zv bnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9 IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsgOTcoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyBbPC9m b250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9 IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgLyBwcm90ZWN0ZWQgLyBoJ0ExMDEwMycgLyB7PC9mb250 PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+ Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBcIGFsZyBcIDE6MyBcIEFFUy1HQ00g bW9kZSB3LyAyNTYtYml0IGtleSwgMTI4LWJpdCB0YWcgXDwvZm9udD48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyB9IC8gLDwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0i Q291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IC8gdW5wcm90ZWN0ZWQg LyB7PC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIg Y2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IC8gaXYgLyA1OmgnQTU3MkM2QTBB ODM3N0QxRjA1ODIyNUQ0JzwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0i Q291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IH0sPC9mb250PjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgLyBjaXBoZXJ0ZXh0IC8gaCc5NDFCN0IxRjgzQzFBRjUyNUJGMUI4QjhC QkYzQ0YxQ0E2QjcwNThGRUJDOTFEJyw8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250 IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAvIHJlY2lw aWVudHMgLyBbPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVy IE5ldyIgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IFs8L2ZvbnQ+PC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IC8gcHJvdGVjdGVkIC8gaCcnLDwvZm9udD48L2Rp dj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgLyB1bnByb3RlY3RlZCAvIHs8L2ZvbnQ+PC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj4mbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAvIGFsZyAvIDE6LTQxIC8gUlNB RVMtT0FFUCB3LyBTSEEtMjU2IC8sPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBm YWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgLyBraWQgLyA0OidrZXlJRCc8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7IH0sPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAv IGNpcGhlcnRleHQgLyBoJzlCNTQ3NDhBMTEwN0EwRUVFNzhGOTMzQjQ4NDZFODk4N0ZCOTk3NDUx RkZEMTQ4MDNGMUJCMkI1RkNDMzQ0NzI8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250 IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7NUQwRTMxMTM4RENGM0M2QzBGREJFRjgzNjE4NEMzQ0YxNTg2NTU5QzUzMUI2 OTFGNzRFQjBFQ0U3QTQ3NDcxQjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFj ZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDs1RDQxMTE5NzQzMDI4NjQ0QkJFNUUxMEQ2MEFENDRDNzU1MEFENTdERjQzMDlGRTQw NUU5NTIxRDY3MERENjUyPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOzMxOEFCQjZFMTU1RTM1RkE1M0I5ODlEMjlBMUUyQTE1QzM4Nzc1MjQwREQwODJFRkIzNkQw OEYxQzU3N0UwMzA8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJp ZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 NUM3OEY1ODFENUM4NDQ0NDgzOEZGODlDNTM1MjcyQTVFOTg1Qzg5RThGRkU0RjFENzc4M0UyQjg3 QzdFQUIzNjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBO ZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsxMjcz ODk1RDYxOTA2QTZGMkNEQTAyMTc3MjY2QURFRDg4NkJFNzU2RjlGNzdFMzEzQzUwRDhEMTE1N0JG ODQyPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIg Y2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0ZDMDlEQTZG NDAzNUZDQ0Q4RDEyNjMwMjVGM0I1MzQ5MjFBQURCNTUzODFCQUIxN0VBMjE1QjczRDI1MDVENzE8 L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFz cz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7N0Y3OTBBRDdCQTBD REE3NUY4MkRDQThDOEFDMjc5NzhBOEVBMjhCQkY3ODExRTc0QzBEMTU1NjREQUQ4QUFBRCc8L2Zv bnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0i Ij4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgXTwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7 IF08L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBj bGFzcz0iIj4mbmJzcDsgJm5ic3A7IF08L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250 IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsgKTwvZm9udD48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDs8 L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZh Y2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj5SU0EgS2V5IE1hdGVyaWFsOjwvZm9udD48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBO ZXciIGNsYXNzPSIiPmtleSBiaXRzID0gMjA0ODwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZm9udD48 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPm4g PSBoJ2FlNDVlZDU2MDFjZWM2YjhjYzA1ZjgwMzkzNWM2NzRkZGJlMGQ3NWM0YzA5ZmQ3OTUxZmM2 YjBjYWVjMzEzYThkZjM5OTcwYzUxOGJmZjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZv bnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IGJhNWVk NjhmM2YwZDdmMjJhNDAyOWQ0MTNmMWFlMDdlNGViZTllNDE3N2NlMjNlN2Y1NDA0YjU2OWU0ZWUx YmRjZjNjMWZiMDNlZjExMzwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0i Q291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IDgwMmQ0Zjg1NWViOWI1 MTM0YjVhN2M4MDg1YWRjYWU2ZmEyZmExNDE3ZWMzNzYzYmUxNzFiMGM2MmI3NjBlZGUyM2MxMmFk OTJiOTgwODwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBO ZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IDg0YzY0MWY1YThmYWMyNmJkYWQ0YTAz MzgxYTIyZmUxYjc1NDg4NTA5NGM4MjUwNmQ0MDE5YTUzNWEyODZhZmViMjcxYmI5YmE1OTJkZTwv Zm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNz PSIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7IDE4ZGNmNjAwYzJhZWVhZTU2ZTAyZjdjZjc5ZmMxNGNm M2JkYzdjZDg0ZmViYmJmOTUwY2E5MDMwNGIyMjE5YTdhYTA2M2FlZmEyYzNjMTwvZm9udD48L2Rp dj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNw OyAmbmJzcDsgJm5ic3A7IDk4MGU1NjBjZDY0YWZlNzc5NTg1YjYxMDc2NTdiOTU3ODU3ZWZkZTYw MTA5ODhhYjdkZTQxN2ZjODhkOGYzODRjNGU2ZTcyYzNmOTQzZTwvZm9udD48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsg Jm5ic3A7IDBjMzFjMGM0YTVjYzM2Zjg3OWQ4YTNhYzlkN2Q1OTg2MGVhYWRhNmI4M2JiJzwvZm9u dD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIi PiZuYnNwOyAmbmJzcDsgJm5ic3A7Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+cCA9IGgnJzwvZm9udD48L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXci IGNsYXNzPSIiPnEgPSBoJyc8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9 IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2ZvbnQ+PC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj5lID0gaCcwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAmbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZh Y2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDA8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJp ZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDA8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBj bGFzcz0iIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAwMDAwMDAwMDAwMDAwMDAwMDEwMDAxJzwvZm9u dD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIi PiZuYnNwOyAmbmJzcDsgJm5ic3A7Jm5ic3A7PC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+ZCA9IGgnMDU2YjA0MjE2ZmU1ZjM1NGFj NzcyNTBhNGI2YjBjODUyNWE4NWM1OWIwYmQ4MGM1NjQ1MGEyMmQ1ZjQzOGU1OTZhMzMzYWE4NzVl MjkxPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIg Y2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgZGQ0M2Y0OGNiODhiOWQ1ZmMwZDQ5OWY5ZmNk MWMzOTdmOWFmYzA3MGNkOWUzOThjOGQxOWU2MWRiN2M3NDEwYTZiMjY3NWRmYmY1ZDM0PC9mb250 PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+ Jm5ic3A7ICZuYnNwOyAmbmJzcDsgNWI4MDRkMjAxYWRkNTAyZDVjZTJkZmNiMDkxY2U5OTk3YmJl YmU1NzMwNmYzODNlNGQ1ODgxMDNmMDM2ZjdlODVkMTkzNGQxNTJhMzIzPC9mb250PjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7ICZu YnNwOyAmbmJzcDsgZTRhOGRiNDUxZDZmNGE1YjFiMGYxMDJjYzE1MGUwMmZlZWUyYjg4ZGVhNGFk NGMxYmFjY2IyNGQ4NDA3MmQxNGUxZDI0YTY3NzFmNzQwPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJz cDsgOGVlMzA1NjRmYjg2ZDQzOTNhMzRiY2YwYjc4ODUwMWQxOTMzMDNmMTNhMjI4NGIwMDFmMGY2 NDllYWY3OTMyOGQ0YWM1YzQzMGFiNDQxPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9u dCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgNDkyMGE5 NDYwZWQxYjdiYzQwZWM2NTNlODc2ZDA5YWJjNTA5YWU0NWI1MjUxOTAxMTZhMGMyNjEwMTg0ODI5 ODUwOWMxYzNiZjNhNDgzPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgZTcyNzQwNTRlMTVlOTcw NzUwMzZlOTg5ZjYwOTMyODA3YjUyNTc3NTFlNzknPC9mb250PjwvZGl2Pg0KPC9kaXY+DQo8L2Jv ZHk+DQo8L2h0bWw+DQo= --_000_B5F7C7CF3F6A4DB699E178B00E182A5Aqtiqualcommcom_-- From nobody Tue Jun 5 19:09:44 2018 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18B41130E1F for ; Tue, 5 Jun 2018 19:09:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.594 X-Spam-Level: X-Spam-Status: No, score=-0.594 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, TRACKER_ID=1.306] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KogGnqCyRtnn for ; Tue, 5 Jun 2018 19:09:38 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7008130E18 for ; Tue, 5 Jun 2018 19:09:37 -0700 (PDT) Received: from Jude (216.53.143.123) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 5 Jun 2018 19:06:40 -0700 From: Jim Schaad To: 'Laurence Lundblade' , 'cose' References: In-Reply-To: Date: Tue, 5 Jun 2018 22:09:27 -0400 Message-ID: <00fa01d3fd3b$67b29150$3717b3f0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00FB_01D3FD19.E0A2C610" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQJ7uYvV6+uVYLBgQza563KtXFokn6MDA54w Content-Language: en-us X-Originating-IP: [216.53.143.123] Archived-At: Subject: Re: [COSE] Confirmation / interop for COSE Encrypt with RSA OEAP and AES GCM X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jun 2018 02:09:40 -0000 ------=_NextPart_000_00FB_01D3FD19.E0A2C610 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable I can get to this next week. I think I might have all of the code but = am not sure. =20 Jim =20 =20 From: COSE On Behalf Of Laurence Lundblade Sent: Tuesday, June 5, 2018 4:48 PM To: cose Subject: [COSE] Confirmation / interop for COSE Encrypt with RSA OEAP = and AES GCM =20 We=E2=80=99re trying to follow RFC 8152 + RFC 8230 to do COSE Encryption = with RSA OEAP and AES GCM. Basically we have an RSA-based X.509 = certificate hierarchy that we=E2=80=99ve been using with CMS to do blob = encryption and want to move to COSE.=20 =20 RFC 8230 has no example like the ones in 8152 for EC-based encryption. = We also haven=E2=80=99t found any other code to interop with. = We=E2=80=99re looking for some confirmation / interop that we got it = right. =20 Below is an example we=E2=80=99ve produced (this can be used for an = example in an RFC if desired). =20 What we find not very clear is what the actual bytes encrypted by the = RSA OEAP operation should be. In the example below it is the raw CEK and = as far we can tell this is correct. We=E2=80=99re NOT creating a = Enc_structure for the input to the RSA operation (we are for the input = to AES GCM).=20 =20 We think RSA OEAP is an instance of Key Transport as mentioned in = section 12.3 in RFC 81512 and thus there are no protected headers in the = recipient structure. RSA OEAP has no way to authenticate the protected = headers so there are none. =20 Would appreciate confirmation that this is all correct and/or some SW to = interop with. Thanks! =20 LL =20 =20 =20 =20 =20 =20 The payload encrypted is the 7 byte string =E2=80=9Cpayload=E2=80=9D. =20 d8 60 84 43 a1 01 03 a1 05 4c a5 72 c6 a0 a8 37 7d 1f 05 82 25 d4 57 94 1b 7b 1f 83 c1 af 52 5b f1 b8 b8 bb f3 cf 1c a6 b7 05 8f eb c9 1d 81 83 40 a2 01 38 28 04 45 6b 65 79 49 44 59 01 00 9b 54 74 8a 11 07 a0 ee e7 8f 93 3b 48 46 e8 98 7f b9 97 45 1f fd 14 80 3f 1b b2 b5 fc c3 44 72 5d 0e 31 13 8d cf 3c 6c 0f db ef 83 61 84 c3 cf 15 86 55 9c 53 1b 69 1f 74 eb 0e ce 7a 47 47 1b 5d 41 11 97 43 02 86 44 bb e5 e1 0d 60 ad 44 c7 55 0a d5 7d f4 30 9f e4 05 e9 52 1d 67 0d d6 52 31 8a bb 6e 15 5e 35 fa 53 b9 89 d2 9a 1e 2a 15 c3 87 75 24 0d d0 82 ef b3 6d 08 f1 c5 77 e0 30 5c 78 f5 81 d5 c8 44 44 83 8f f8 9c 53 52 72 a5 e9 85 c8 9e 8f fe 4f 1d 77 83 e2 b8 7c 7e ab 36 12 73 89 5d 61 90 6a 6f 2c da 02 17 72 66 ad ed 88 6b e7 56 f9 f7 7e 31 3c 50 d8 d1 15 7b f8 42 fc 09 da 6f 40 35 fc cd 8d 12 63 02 5f 3b 53 49 21 aa db 55 38 1b ab 17 ea 21 5b 73 d2 50 5d 71 7f 79 0a d7 ba 0c da 75 f8 2d ca 8c 8a c2 79 78 a8 ea 28 bb f7 81 1e 74 c0 d1 55 64 da d8 aa ad =20 =20 97( [ / protected / h'A10103' / { \ alg \ 1:3 \ AES-GCM mode w/ 256-bit key, 128-bit tag \ } / , / unprotected / { / iv / 5:h'A572C6A0A8377D1F058225D4' }, / ciphertext / h'941B7B1F83C1AF525BF1B8B8BBF3CF1CA6B7058FEBC91D', / recipients / [ [ / protected / h'', / unprotected / { / alg / 1:-41 / RSAES-OAEP w/ SHA-256 /, / kid / 4:'keyID' }, / ciphertext / = h'9B54748A1107A0EEE78F933B4846E8987FB997451FFD14803F1BB2B5FCC34472 = 5D0E31138DCF3C6C0FDBEF836184C3CF1586559C531B691F74EB0ECE7A47471B = 5D41119743028644BBE5E10D60AD44C7550AD57DF4309FE405E9521D670DD652 = 318ABB6E155E35FA53B989D29A1E2A15C38775240DD082EFB36D08F1C577E030 = 5C78F581D5C84444838FF89C535272A5E985C89E8FFE4F1D7783E2B87C7EAB36 = 1273895D61906A6F2CDA02177266ADED886BE756F9F77E313C50D8D1157BF842 = FC09DA6F4035FCCD8D1263025F3B534921AADB55381BAB17EA215B73D2505D71 = 7F790AD7BA0CDA75F82DCA8C8AC27978A8EA28BBF7811E74C0D15564DAD8AAAD' ] ] ] ) =20 =20 RSA Key Material: =20 key bits =3D 2048 =20 n =3D = h'ae45ed5601cec6b8cc05f803935c674ddbe0d75c4c09fd7951fc6b0caec313a8df39970= c518bff = ba5ed68f3f0d7f22a4029d413f1ae07e4ebe9e4177ce23e7f5404b569e4ee1bdcf3c1fb03= ef113 = 802d4f855eb9b5134b5a7c8085adcae6fa2fa1417ec3763be171b0c62b760ede23c12ad92= b9808 = 84c641f5a8fac26bdad4a03381a22fe1b754885094c82506d4019a535a286afeb271bb9ba= 592de = 18dcf600c2aeeae56e02f7cf79fc14cf3bdc7cd84febbbf950ca90304b2219a7aa063aefa= 2c3c1 = 980e560cd64afe779585b6107657b957857efde6010988ab7de417fc88d8f384c4e6e72c3= f943e 0c31c0c4a5cc36f879d8a3ac9d7d59860eaada6b83bb' =20 p =3D h'' =20 q =3D h'' =20 e =3D = h'00000000000000000000000000000000000000000000000000000000000000000000000= 0000000=20 = 0000000000000000000000000000000000000000000000000000000000000000000000000= 00000 = 0000000000000000000000000000000000000000000000000000000000000000000000000= 00000 0000000000000000010001' =20 d =3D = h'056b04216fe5f354ac77250a4b6b0c8525a85c59b0bd80c56450a22d5f438e596a333aa= 875e291 = dd43f48cb88b9d5fc0d499f9fcd1c397f9afc070cd9e398c8d19e61db7c7410a6b2675dfb= f5d34 = 5b804d201add502d5ce2dfcb091ce9997bbebe57306f383e4d588103f036f7e85d1934d15= 2a323 = e4a8db451d6f4a5b1b0f102cc150e02feee2b88dea4ad4c1baccb24d84072d14e1d24a677= 1f740 = 8ee30564fb86d4393a34bcf0b788501d193303f13a2284b001f0f649eaf79328d4ac5c430= ab441 = 4920a9460ed1b7bc40ec653e876d09abc509ae45b525190116a0c26101848298509c1c3bf= 3a483 e7274054e15e97075036e989f60932807b5257751e79' ------=_NextPart_000_00FB_01D3FD19.E0A2C610 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

I can get to this next week.=C2=A0 I think I might = have all of the code but am not sure.

 

Jim

 

 

From: COSE = <cose-bounces@ietf.org> On Behalf Of Laurence = Lundblade
Sent: Tuesday, June 5, 2018 4:48 PM
To: = cose <cose@ietf.org>
Subject: [COSE] Confirmation / = interop for COSE Encrypt with RSA OEAP and AES = GCM

 

We=E2=80=99re trying to follow RFC 8152 + = RFC 8230 to do COSE Encryption with RSA OEAP and AES GCM. = Basically we have an RSA-based X.509 certificate hierarchy that = we=E2=80=99ve been using with CMS to do blob encryption and want to move = to COSE.

 

RFC 8230 has no example like the ones in 8152 for = EC-based encryption.  We also haven=E2=80=99t found any other code = to interop with. We=E2=80=99re looking for some confirmation / interop = that we got it right.

 

Below is an example we=E2=80=99ve produced (this can = be used for an example in an RFC if = desired).

 

What we find not very clear is what the actual bytes = encrypted by the RSA OEAP operation should be. In the example below it = is the raw CEK and as far we can tell this is correct. We=E2=80=99re NOT = creating a Enc_structure for the = input to the RSA operation (we are for the input to AES = GCM). 

 

We think RSA OEAP is = an instance of Key Transport as mentioned in section 12.3 in RFC 81512 = and thus there are no protected headers in the recipient structure. RSA = OEAP has no way to authenticate the protected headers so there are = none.

 

Would appreciate = confirmation that this is all correct and/or some SW to interop = with. Thanks!

 

LL

 

 

 

 

 

 

The payload encrypted is the 7 byte string = =E2=80=9Cpayload=E2=80=9D.

 

d8 60 84 43 = a1 01 03 a1 05 4c a5 72 c6 a0

a8 37 7d 1f = 05 82 25 d4 57 94 1b 7b 1f 83 c1 af

52 5b f1 b8 = b8 bb f3 cf 1c a6 b7 05 8f eb c9 1d

81 83 40 a2 = 01 38 28 04 45 6b 65 79 49 44 59 01

00 9b 54 74 = 8a 11 07 a0 ee e7 8f 93 3b 48 46 e8

98 7f b9 97 = 45 1f fd 14 80 3f 1b b2 b5 fc c3 44

72 5d 0e 31 = 13 8d cf 3c 6c 0f db ef 83 61 84 c3

cf 15 86 55 = 9c 53 1b 69 1f 74 eb 0e ce 7a 47 47

1b 5d 41 11 = 97 43 02 86 44 bb e5 e1 0d 60 ad 44

c7 55 0a d5 = 7d f4 30 9f e4 05 e9 52 1d 67 0d d6

52 31 8a bb = 6e 15 5e 35 fa 53 b9 89 d2 9a 1e 2a

15 c3 87 75 = 24 0d d0 82 ef b3 6d 08 f1 c5 77 e0

30 5c 78 f5 = 81 d5 c8 44 44 83 8f f8 9c 53 52 72

a5 e9 85 c8 = 9e 8f fe 4f 1d 77 83 e2 b8 7c 7e ab

36 12 73 89 = 5d 61 90 6a 6f 2c da 02 17 72 66 ad

ed 88 6b e7 = 56 f9 f7 7e 31 3c 50 d8 d1 15 7b f8

42 fc 09 da = 6f 40 35 fc cd 8d 12 63 02 5f 3b 53

49 21 aa db = 55 38 1b ab 17 ea 21 5b 73 d2 50 5d

71 7f 79 0a = d7 ba 0c da 75 f8 2d ca 8c 8a c2 79

78 a8 ea 28 = bb f7 81 1e 74 c0 d1 55 64 da d8 aa

ad

 

 

  = 97(

    = [

      / protected / = h'A10103' / {

          \ = alg \ 1:3 \ AES-GCM mode w/ 256-bit key, 128-bit tag = \

        } / = ,

      / unprotected / = {

        / iv / = 5:h'A572C6A0A8377D1F058225D4'

  =     },

  =     / ciphertext / = h'941B7B1F83C1AF525BF1B8B8BBF3CF1CA6B7058FEBC91D',

<= /div>

      / recipients / = [

        = [

          / = protected / h'',

  =         / unprotected / = {

          =   / alg / 1:-41 / RSAES-OAEP w/ SHA-256 = /,

          =   / kid / 4:'keyID'

  =         },

  =         / ciphertext / = h'9B54748A1107A0EEE78F933B4846E8987FB997451FFD14803F1BB2B5FCC34472=

          =                 =  5D0E31138DCF3C6C0FDBEF836184C3CF1586559C531B691F74EB0ECE7A47471B

          =                 =  5D41119743028644BBE5E10D60AD44C7550AD57DF4309FE405E9521D670DD652

          =                 =  318ABB6E155E35FA53B989D29A1E2A15C38775240DD082EFB36D08F1C577E030

          =                 =  5C78F581D5C84444838FF89C535272A5E985C89E8FFE4F1D7783E2B87C7EAB36

          =                 =  1273895D61906A6F2CDA02177266ADED886BE756F9F77E313C50D8D1157BF842

          =                 =  FC09DA6F4035FCCD8D1263025F3B534921AADB55381BAB17EA215B73D2505D71

          =                 =  7F790AD7BA0CDA75F82DCA8C8AC27978A8EA28BBF7811E74C0D15564DAD8AAAD'

        = ]

      = ]

    = ]

  = )

  =  

 

RSA Key = Material:

 

key bits =3D = 2048

 

n =3D = h'ae45ed5601cec6b8cc05f803935c674ddbe0d75c4c09fd7951fc6b0caec313a8df39970= c518bff

      = ba5ed68f3f0d7f22a4029d413f1ae07e4ebe9e4177ce23e7f5404b569e4ee1bdcf3c1fb03= ef113

      = 802d4f855eb9b5134b5a7c8085adcae6fa2fa1417ec3763be171b0c62b760ede23c12ad92= b9808

      = 84c641f5a8fac26bdad4a03381a22fe1b754885094c82506d4019a535a286afeb271bb9ba= 592de

      = 18dcf600c2aeeae56e02f7cf79fc14cf3bdc7cd84febbbf950ca90304b2219a7aa063aefa= 2c3c1

      = 980e560cd64afe779585b6107657b957857efde6010988ab7de417fc88d8f384c4e6e72c3= f943e

      = 0c31c0c4a5cc36f879d8a3ac9d7d59860eaada6b83bb'

=

      

p =3D = h''

 

q =3D = h''

 

e =3D = h'00000000000000000000000000000000000000000000000000000000000000000000000= 0000000 

      = 0000000000000000000000000000000000000000000000000000000000000000000000000= 00000

      = 0000000000000000000000000000000000000000000000000000000000000000000000000= 00000

      = 0000000000000000010001'

  =     

d =3D = h'056b04216fe5f354ac77250a4b6b0c8525a85c59b0bd80c56450a22d5f438e596a333aa= 875e291

      = dd43f48cb88b9d5fc0d499f9fcd1c397f9afc070cd9e398c8d19e61db7c7410a6b2675dfb= f5d34

      = 5b804d201add502d5ce2dfcb091ce9997bbebe57306f383e4d588103f036f7e85d1934d15= 2a323

      = e4a8db451d6f4a5b1b0f102cc150e02feee2b88dea4ad4c1baccb24d84072d14e1d24a677= 1f740

      = 8ee30564fb86d4393a34bcf0b788501d193303f13a2284b001f0f649eaf79328d4ac5c430= ab441

      = 4920a9460ed1b7bc40ec653e876d09abc509ae45b525190116a0c26101848298509c1c3bf= 3a483

      = e7274054e15e97075036e989f60932807b5257751e79'

=
------=_NextPart_000_00FB_01D3FD19.E0A2C610-- From nobody Thu Jun 7 15:30:11 2018 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F33BF130FFB for ; Thu, 7 Jun 2018 15:30:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ai_J6a_m2gOa for ; Thu, 7 Jun 2018 15:30:05 -0700 (PDT) Received: from alexa-out-sd-01.qualcomm.com (alexa-out-sd-01.qualcomm.com [199.106.114.38]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EAE58130DDD for ; Thu, 7 Jun 2018 15:30:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1528410604; x=1559946604; h=from:to:subject:date:message-id:mime-version; bh=R8lrod+J7/fkMWy0kgyfvIB/ByuAQSpqt3GWhXS8KqI=; b=Mp1m246US9o6Jxe/BLdE30z66hUX61ta+epCmdmzUhJuOSPwOQYxHkEq byi3/eY3LPkMWqhMX2UjuC4y9EK7oIEsMYPK6y7rBbVvdMY8E++1K3ow+ D4Aw2WbDebPU4iNtqegjc/0U4YcEu6JIOKV6irEpiSteSBtg43gFpgp3J E=; Received: from unknown (HELO ironmsg05-sd.qualcomm.com) ([10.53.140.145]) by alexa-out-sd-01.qualcomm.com with ESMTP; 07 Jun 2018 15:30:04 -0700 X-IronPort-AV: E=McAfee;i="5900,7806,8917"; a="104025291" Received: from nasanexm01a.na.qualcomm.com ([10.85.0.81]) by ironmsg05-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 07 Jun 2018 15:30:04 -0700 Received: from NASANEXM01B.na.qualcomm.com (10.85.0.82) by nasanexm01a.na.qualcomm.com (10.85.0.81) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Thu, 7 Jun 2018 15:30:03 -0700 Received: from NASANEXM01B.na.qualcomm.com ([10.85.0.82]) by NASANEXM01B.na.qualcomm.com ([10.85.0.82]) with mapi id 15.00.1365.000; Thu, 7 Jun 2018 15:30:03 -0700 From: Laurence Lundblade To: cose Thread-Topic: "EAT" -- new IETF draft on attestation Thread-Index: AQHT/q8UeD6QchoSrEusilKluBMIwA== Date: Thu, 7 Jun 2018 22:30:03 +0000 Message-ID: <9FDFD5A0-2363-4880-819F-1E4C5D43E62E@qti.qualcomm.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3273) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.80.80.8] Content-Type: multipart/alternative; boundary="_000_9FDFD5A023634880819F1E4C5D43E62Eqtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: [COSE] "EAT" -- new IETF draft on attestation X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jun 2018 22:30:09 -0000 --_000_9FDFD5A023634880819F1E4C5D43E62Eqtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8sDQoNCkEgZmV3IG9mIHVzIGhhdmUgcHV0IHRvZ2V0aGVyIGFuIElFVEYgZHJhZnQgY2Fs bGVkIEVudGl0eSBBdHRlc3RhdGlvbiBUb2tlbiwgb3Ig4oCcRUFU4oCdLiBJdCBpcyBhIGdlbmVy YWwgQ0JPUiAvIENPU0UgYmFzZWQgZGVzaWduIGZvciBkaWdpdGFsbHkgc2lnbmVkIGRldmljZSBh dHRlc3RhdGlvbnMuIEl0IGhhcyBzb21lIHNpbWlsYXJpdGllcyB0byBhdHRlc3RhdGlvbiB0eXBl cyB1c2VkIGJ5IEZJRE8sIHRoZSBhdHRlc3RhdGlvbiBmZWF0dXJlIGluIHJlY2VudCB2ZXJzaW9u cyBvZiBBbmRyb2lkLCBidXQgaXMgdHJ5aW5nIHRvIGJlIGdlbmVyYWwgcHVycG9zZS4gV2Ugd2Fu dCB0byBiZSBzdXJlIGl0IGNvdmVycyBzbWFsbCBJb1QgZGV2aWNlcyBzaW5jZSBhdHRlc3RhdGlv biBpcyB2ZXJ5IGltcG9ydGFudCBmb3IgdGhvc2UgdXNlIGNhc2VzLg0KDQpXZeKAmXJlIGdvdCBh IG5vbi1XRyBJRVRGIG1haWxpbmcgbGlzdCB0byBnYXVnZSBpbnRlcmVzdCBhbmQgc2VlIGlmIGEg V0cgc2hvdWxkIGJlIGZvcm1lZCBhcm91bmQgaXQuIEkgd2FudGVkIHRvIGxldCB5b3UgQ09TRSBm b2xrcyBrbm93IGFib3V0IHRoaXMgd29yayBhbmQgaW52aXRlIHlvdSB0byBwYXJ0aWNpcGF0ZS4N Cg0KSGVyZeKAmXMgdGhlIG1haW4gaW5mbzoNCg0KU3Vic2NyaXB0aW9uOiBodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KV2VsY29tZSBtZXNzYWdlOiBodHRwczovL21h aWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL2VhdC9EOF9SSjNjZlZ5OXV4UHY0NHdtUml3WFlD ZVENCklFVEYgRHJhZnQ6IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LW1h bmR5YW0tZWF0Lw0KDQpUaGFua3MsDQoNCkxMDQoNCg0KUC5TLiBNeSBwYXJ0aWNpcGF0aW9uIGlu IHRoaXMgd29yayBzbyBmYXIgaGFzIGJlZW4gYXMgYSBRdWFsY29tbSBlbXBsb3llZS4gSXQgd2ls bCBob3dldmVyIGNvbnRpbnVlIGFzIGFuIGluZGVwZW5kZW50IElFVEYgY2l0aXplbiBhcyB0aGlz IGlzIG15IGxhc3Qgd2VlayBhcyBhIFF1YWxjb21tIGVtcGxveWVlLiBPdGhlciBRdWFsY29tbSBm b2xrcyB3aWxsIGNvbnRpbnVlIHRvIHBhcnRpY2lwYXRlLg0KDQoNCg== --_000_9FDFD5A023634880819F1E4C5D43E62Eqtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: <22090F858C2D1D429B58374368D578C7@qualcomm.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGVsbG8sDQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5BIGZldyBvZiB1cyBoYXZlIHB1 dCB0b2dldGhlciBhbiBJRVRGIGRyYWZ0IGNhbGxlZCBFbnRpdHkgQXR0ZXN0YXRpb24gVG9rZW4s IG9yIOKAnEVBVOKAnS4gSXQgaXMgYSBnZW5lcmFsIENCT1IgLyBDT1NFIGJhc2VkIGRlc2lnbiBm b3IgZGlnaXRhbGx5IHNpZ25lZCBkZXZpY2UgYXR0ZXN0YXRpb25zLiBJdCBoYXMgc29tZSBzaW1p bGFyaXRpZXMgdG8gYXR0ZXN0YXRpb24gdHlwZXMgdXNlZCBieSBGSURPLCB0aGUgYXR0ZXN0YXRp b24NCiBmZWF0dXJlIGluIHJlY2VudCB2ZXJzaW9ucyBvZiBBbmRyb2lkLCBidXQgaXMgdHJ5aW5n IHRvIGJlIGdlbmVyYWwgcHVycG9zZS4gV2Ugd2FudCB0byBiZSBzdXJlIGl0IGNvdmVycyBzbWFs bCBJb1QgZGV2aWNlcyBzaW5jZSBhdHRlc3RhdGlvbiBpcyB2ZXJ5IGltcG9ydGFudCBmb3IgdGhv c2UgdXNlIGNhc2VzLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+V2XigJlyZSBnb3QgYSBub24tV0cgSUVURiBtYWlsaW5nIGxpc3QgdG8g Z2F1Z2UgaW50ZXJlc3QgYW5kIHNlZSBpZiBhIFdHIHNob3VsZCBiZSBmb3JtZWQgYXJvdW5kIGl0 LiBJIHdhbnRlZCB0byBsZXQgeW91IENPU0UgZm9sa3Mga25vdyBhYm91dCB0aGlzIHdvcmsgYW5k IGludml0ZSB5b3UgdG8gcGFydGljaXBhdGUuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5IZXJl4oCZcyB0aGUgbWFpbiBpbmZvOjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPlN1YnNjcmlwdGlvbjombmJzcDs8YSBocmVmPSJodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdCIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9lYXQ8L2E+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPldlbGNvbWUgbWVz c2FnZTombmJzcDs8YSBocmVmPSJodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNn L2VhdC9EOF9SSjNjZlZ5OXV4UHY0NHdtUml3WFlDZVEiIGNsYXNzPSIiPmh0dHBzOi8vbWFpbGFy Y2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvZWF0L0Q4X1JKM2NmVnk5dXhQdjQ0d21SaXdYWUNlUTwv YT48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SUVURiBEcmFmdDombmJzcDs8YSBocmVmPSJodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tYW5keWFtLWVhdC8iIGNsYXNzPSIiPmh0 dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LW1hbmR5YW0tZWF0LzwvYT48L2Rp dj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+VGhhbmtzLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+TEw8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5Q LlMuIE15IHBhcnRpY2lwYXRpb24gaW4gdGhpcyB3b3JrIHNvIGZhciBoYXMgYmVlbiBhcyBhIFF1 YWxjb21tIGVtcGxveWVlLiBJdCB3aWxsIGhvd2V2ZXIgY29udGludWUgYXMgYW4gaW5kZXBlbmRl bnQgSUVURiBjaXRpemVuIGFzIHRoaXMgaXMgbXkgbGFzdCB3ZWVrIGFzIGEgUXVhbGNvbW0gZW1w bG95ZWUuIE90aGVyIFF1YWxjb21tIGZvbGtzIHdpbGwgY29udGludWUgdG8gcGFydGljaXBhdGUu PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_9FDFD5A023634880819F1E4C5D43E62Eqtiqualcommcom_-- From nobody Fri Jun 8 09:32:21 2018 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DF7B130F19 for ; Fri, 8 Jun 2018 09:32:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u6XoULOuOme2 for ; Fri, 8 Jun 2018 09:32:18 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E8D0130F23 for ; Fri, 8 Jun 2018 09:32:18 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 4D4B9300558 for ; Fri, 8 Jun 2018 12:32:16 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id T09gBa7l99me for ; Fri, 8 Jun 2018 12:32:15 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id F2F13300445 for ; Fri, 8 Jun 2018 12:32:14 -0400 (EDT) From: Russ Housley Content-Type: multipart/alternative; boundary="Apple-Mail=_B3556367-18C9-4B03-B3C4-AA733392AC81" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: <5087519E-4739-4CCB-8775-A997E5E5DCEA@vigilsec.com> References: <152769328559.27675.9111953735277048667.idtracker@ietfa.amsl.com> To: cose@ietf.org Date: Fri, 8 Jun 2018 12:32:20 -0400 X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [COSE] draft-housley-suit-cose-hash-sig-00 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jun 2018 16:32:21 -0000 --Apple-Mail=_B3556367-18C9-4B03-B3C4-AA733392AC81 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii In London, I advocated the use of hash-based signatures in the SUIT WG. = To date, no one had written down how to use hash-based signatures with = COSE. So, I wrote an Internet-Draft. Please review and post comments = to suit@ietf.org. Thanks, Russ > From: internet-drafts@ietf.org > Subject: New Version Notification for = draft-housley-suit-cose-hash-sig-00.txt > Date: May 30, 2018 at 11:14:45 AM EDT > To: "Russ Housley" > >=20 >=20 > A new version of I-D, draft-housley-suit-cose-hash-sig-00.txt > has been successfully submitted by Russ Housley and posted to the > IETF repository. >=20 > Name: draft-housley-suit-cose-hash-sig > Revision: 00 > Title: Use of the Hash-based Signature Algorithm with = CBOR Object Signing and Encryption (COSE) > Document date: 2018-05-30 > Group: Individual Submission > Pages: 10 > URL: = https://www.ietf.org/internet-drafts/draft-housley-suit-cose-hash-sig-00.t= xt = > Status: = https://datatracker.ietf.org/doc/draft-housley-suit-cose-hash-sig/ = > Htmlized: = https://tools.ietf.org/html/draft-housley-suit-cose-hash-sig-00 = > Htmlized: = https://datatracker.ietf.org/doc/html/draft-housley-suit-cose-hash-sig = >=20 >=20 > Abstract: > This document specifies the conventions for using the = Leighton-Micali > Signature (LMS) algorithm for digital signatures with the CBOR = Object > Signing and Encryption (COSE) syntax. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org = . >=20 > The IETF Secretariat --Apple-Mail=_B3556367-18C9-4B03-B3C4-AA733392AC81 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
In London, I advocated the use of hash-based signatures in = the SUIT WG.  To date, no one had written down how to use = hash-based signatures with COSE.  So, I wrote an Internet-Draft. =  Please review and post comments to suit@ietf.org.

Thanks,
  Russ


From: internet-drafts@ietf.org
Subject: = New Version = Notification for draft-housley-suit-cose-hash-sig-00.txt
Date: = May 30, 2018 at 11:14:45 AM = EDT
To: = "Russ Housley" <housley@vigilsec.com>


A new version = of I-D, draft-housley-suit-cose-hash-sig-00.txt
has been = successfully submitted by Russ Housley and posted to the
IETF repository.

Name: = draft-housley-suit-cose-hash-sig
Revision: 00
Title:= = Use of the Hash-based Signature Algorithm with CBOR Object = Signing and Encryption (COSE)
Document date: = 2018-05-30
Group: Individual Submission
Pages:= = 10
URL: =            https://www.ietf.org/internet-drafts/draft-housley-suit-cose-ha= sh-sig-00.txt
Status: =         https://datatracker.ietf.org/doc/draft-housley-suit-cose-hash-s= ig/
Htmlized:       https://tools.ietf.org/html/draft-housley-suit-cose-hash-sig-00=
Htmlized:       https://datatracker.ietf.org/doc/html/draft-housley-suit-cose-h= ash-sig


Abstract:
  This document specifies the conventions for = using the Leighton-Micali
  Signature (LMS) = algorithm for digital signatures with the CBOR Object
=   Signing and Encryption (COSE) syntax.




Please note that = it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat
= --Apple-Mail=_B3556367-18C9-4B03-B3C4-AA733392AC81-- From nobody Wed Jun 13 10:46:24 2018 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E666130F5B for ; Wed, 13 Jun 2018 10:46:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.594 X-Spam-Level: X-Spam-Status: No, score=-0.594 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, TRACKER_ID=1.306] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 93bU0yuU3_iD for ; Wed, 13 Jun 2018 10:46:20 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 585DC130F3A for ; Wed, 13 Jun 2018 10:46:19 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 13 Jun 2018 10:43:19 -0700 From: Jim Schaad To: 'Laurence Lundblade' , 'cose' References: In-Reply-To: Date: Wed, 13 Jun 2018 10:46:11 -0700 Message-ID: <04da01d4033e$6c9c1110$45d43330$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_04DB_01D40303.C03FF830" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQJ7uYvV6+uVYLBgQza563KtXFokn6MO+OOg Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] Confirmation / interop for COSE Encrypt with RSA OEAP and AES GCM X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jun 2018 17:46:23 -0000 ------=_NextPart_000_04DB_01D40303.C03FF830 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Here is what I found in trying to process: =20 1. You got the tag wrong =E2=80=93 it should be 96 not 97 (right in the = bytes, wrong in the pretty print) 2. I had a small problem because COSE does require all of the RSA = private keys be present in a COSE key which is what I use and you only = provided d. =20 I successfully decrypted the message and from a visual check it looks = like you have all of the parameters in the correct location. =20 I should be updating my set of examples by the end of the week with more = examples for OAEP as well as some PSS examples. =20 Jim =20 =20 From: COSE On Behalf Of Laurence Lundblade Sent: Tuesday, June 5, 2018 1:48 PM To: cose Subject: [COSE] Confirmation / interop for COSE Encrypt with RSA OEAP = and AES GCM =20 We=E2=80=99re trying to follow RFC 8152 + RFC 8230 to do COSE Encryption = with RSA OEAP and AES GCM. Basically we have an RSA-based X.509 = certificate hierarchy that we=E2=80=99ve been using with CMS to do blob = encryption and want to move to COSE.=20 =20 RFC 8230 has no example like the ones in 8152 for EC-based encryption. = We also haven=E2=80=99t found any other code to interop with. = We=E2=80=99re looking for some confirmation / interop that we got it = right. =20 Below is an example we=E2=80=99ve produced (this can be used for an = example in an RFC if desired). =20 What we find not very clear is what the actual bytes encrypted by the = RSA OEAP operation should be. In the example below it is the raw CEK and = as far we can tell this is correct. We=E2=80=99re NOT creating a = Enc_structure for the input to the RSA operation (we are for the input = to AES GCM).=20 =20 We think RSA OEAP is an instance of Key Transport as mentioned in = section 12.3 in RFC 81512 and thus there are no protected headers in the = recipient structure. RSA OEAP has no way to authenticate the protected = headers so there are none. =20 Would appreciate confirmation that this is all correct and/or some SW to = interop with. Thanks! =20 LL =20 =20 =20 =20 =20 =20 The payload encrypted is the 7 byte string =E2=80=9Cpayload=E2=80=9D. =20 d8 60 84 43 a1 01 03 a1 05 4c a5 72 c6 a0 a8 37 7d 1f 05 82 25 d4 57 94 1b 7b 1f 83 c1 af 52 5b f1 b8 b8 bb f3 cf 1c a6 b7 05 8f eb c9 1d 81 83 40 a2 01 38 28 04 45 6b 65 79 49 44 59 01 00 9b 54 74 8a 11 07 a0 ee e7 8f 93 3b 48 46 e8 98 7f b9 97 45 1f fd 14 80 3f 1b b2 b5 fc c3 44 72 5d 0e 31 13 8d cf 3c 6c 0f db ef 83 61 84 c3 cf 15 86 55 9c 53 1b 69 1f 74 eb 0e ce 7a 47 47 1b 5d 41 11 97 43 02 86 44 bb e5 e1 0d 60 ad 44 c7 55 0a d5 7d f4 30 9f e4 05 e9 52 1d 67 0d d6 52 31 8a bb 6e 15 5e 35 fa 53 b9 89 d2 9a 1e 2a 15 c3 87 75 24 0d d0 82 ef b3 6d 08 f1 c5 77 e0 30 5c 78 f5 81 d5 c8 44 44 83 8f f8 9c 53 52 72 a5 e9 85 c8 9e 8f fe 4f 1d 77 83 e2 b8 7c 7e ab 36 12 73 89 5d 61 90 6a 6f 2c da 02 17 72 66 ad ed 88 6b e7 56 f9 f7 7e 31 3c 50 d8 d1 15 7b f8 42 fc 09 da 6f 40 35 fc cd 8d 12 63 02 5f 3b 53 49 21 aa db 55 38 1b ab 17 ea 21 5b 73 d2 50 5d 71 7f 79 0a d7 ba 0c da 75 f8 2d ca 8c 8a c2 79 78 a8 ea 28 bb f7 81 1e 74 c0 d1 55 64 da d8 aa ad =20 =20 97( [ / protected / h'A10103' / { \ alg \ 1:3 \ AES-GCM mode w/ 256-bit key, 128-bit tag \ } / , / unprotected / { / iv / 5:h'A572C6A0A8377D1F058225D4' }, / ciphertext / h'941B7B1F83C1AF525BF1B8B8BBF3CF1CA6B7058FEBC91D', / recipients / [ [ / protected / h'', / unprotected / { / alg / 1:-41 / RSAES-OAEP w/ SHA-256 /, / kid / 4:'keyID' }, / ciphertext / = h'9B54748A1107A0EEE78F933B4846E8987FB997451FFD14803F1BB2B5FCC34472 = 5D0E31138DCF3C6C0FDBEF836184C3CF1586559C531B691F74EB0ECE7A47471B = 5D41119743028644BBE5E10D60AD44C7550AD57DF4309FE405E9521D670DD652 = 318ABB6E155E35FA53B989D29A1E2A15C38775240DD082EFB36D08F1C577E030 = 5C78F581D5C84444838FF89C535272A5E985C89E8FFE4F1D7783E2B87C7EAB36 = 1273895D61906A6F2CDA02177266ADED886BE756F9F77E313C50D8D1157BF842 = FC09DA6F4035FCCD8D1263025F3B534921AADB55381BAB17EA215B73D2505D71 = 7F790AD7BA0CDA75F82DCA8C8AC27978A8EA28BBF7811E74C0D15564DAD8AAAD' ] ] ] ) =20 =20 RSA Key Material: =20 key bits =3D 2048 =20 n =3D = h'ae45ed5601cec6b8cc05f803935c674ddbe0d75c4c09fd7951fc6b0caec313a8df39970= c518bff = ba5ed68f3f0d7f22a4029d413f1ae07e4ebe9e4177ce23e7f5404b569e4ee1bdcf3c1fb03= ef113 = 802d4f855eb9b5134b5a7c8085adcae6fa2fa1417ec3763be171b0c62b760ede23c12ad92= b9808 = 84c641f5a8fac26bdad4a03381a22fe1b754885094c82506d4019a535a286afeb271bb9ba= 592de = 18dcf600c2aeeae56e02f7cf79fc14cf3bdc7cd84febbbf950ca90304b2219a7aa063aefa= 2c3c1 = 980e560cd64afe779585b6107657b957857efde6010988ab7de417fc88d8f384c4e6e72c3= f943e 0c31c0c4a5cc36f879d8a3ac9d7d59860eaada6b83bb' =20 p =3D h'' =20 q =3D h'' =20 e =3D = h'00000000000000000000000000000000000000000000000000000000000000000000000= 0000000=20 = 0000000000000000000000000000000000000000000000000000000000000000000000000= 00000 = 0000000000000000000000000000000000000000000000000000000000000000000000000= 00000 0000000000000000010001' =20 d =3D = h'056b04216fe5f354ac77250a4b6b0c8525a85c59b0bd80c56450a22d5f438e596a333aa= 875e291 = dd43f48cb88b9d5fc0d499f9fcd1c397f9afc070cd9e398c8d19e61db7c7410a6b2675dfb= f5d34 = 5b804d201add502d5ce2dfcb091ce9997bbebe57306f383e4d588103f036f7e85d1934d15= 2a323 = e4a8db451d6f4a5b1b0f102cc150e02feee2b88dea4ad4c1baccb24d84072d14e1d24a677= 1f740 = 8ee30564fb86d4393a34bcf0b788501d193303f13a2284b001f0f649eaf79328d4ac5c430= ab441 = 4920a9460ed1b7bc40ec653e876d09abc509ae45b525190116a0c26101848298509c1c3bf= 3a483 e7274054e15e97075036e989f60932807b5257751e79' ------=_NextPart_000_04DB_01D40303.C03FF830 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Here is what I found in trying to = process:

 

  1. You got the tag wrong = =E2=80=93 it should be 96 not 97 (right in the bytes, wrong in the = pretty print)
  2. I had a small problem = because COSE does require all of the RSA private keys be present in a = COSE key which is what I use and you only provided = d.

 

I successfully decrypted the message and from a visual = check it looks like you have all of the parameters in the correct = location.

 

I should be updating my set of examples by the end of = the week with more examples for OAEP as well as some PSS = examples.

 

Jim

 

 

From: COSE = <cose-bounces@ietf.org> On Behalf Of Laurence = Lundblade
Sent: Tuesday, June 5, 2018 1:48 PM
To: = cose <cose@ietf.org>
Subject: [COSE] Confirmation / = interop for COSE Encrypt with RSA OEAP and AES = GCM

 

We=E2=80=99re trying to follow RFC 8152 + = RFC 8230 to do COSE Encryption with RSA OEAP and AES GCM. = Basically we have an RSA-based X.509 certificate hierarchy that = we=E2=80=99ve been using with CMS to do blob encryption and want to move = to COSE.

 

RFC 8230 has no example like the ones in 8152 for = EC-based encryption.  We also haven=E2=80=99t found any other code = to interop with. We=E2=80=99re looking for some confirmation / interop = that we got it right.

 

Below is an example we=E2=80=99ve produced (this can = be used for an example in an RFC if = desired).

 

What we find not very clear is what the actual bytes = encrypted by the RSA OEAP operation should be. In the example below it = is the raw CEK and as far we can tell this is correct. We=E2=80=99re NOT = creating a Enc_structure for the = input to the RSA operation (we are for the input to AES = GCM). 

 

We think RSA OEAP is = an instance of Key Transport as mentioned in section 12.3 in RFC 81512 = and thus there are no protected headers in the recipient structure. RSA = OEAP has no way to authenticate the protected headers so there are = none.

 

Would appreciate = confirmation that this is all correct and/or some SW to interop = with. Thanks!

 

LL

 

 

 

 

 

 

The payload encrypted is the 7 byte string = =E2=80=9Cpayload=E2=80=9D.

 

d8 60 84 43 = a1 01 03 a1 05 4c a5 72 c6 a0

a8 37 7d 1f = 05 82 25 d4 57 94 1b 7b 1f 83 c1 af

52 5b f1 b8 = b8 bb f3 cf 1c a6 b7 05 8f eb c9 1d

81 83 40 a2 = 01 38 28 04 45 6b 65 79 49 44 59 01

00 9b 54 74 = 8a 11 07 a0 ee e7 8f 93 3b 48 46 e8

98 7f b9 97 = 45 1f fd 14 80 3f 1b b2 b5 fc c3 44

72 5d 0e 31 = 13 8d cf 3c 6c 0f db ef 83 61 84 c3

cf 15 86 55 = 9c 53 1b 69 1f 74 eb 0e ce 7a 47 47

1b 5d 41 11 = 97 43 02 86 44 bb e5 e1 0d 60 ad 44

c7 55 0a d5 = 7d f4 30 9f e4 05 e9 52 1d 67 0d d6

52 31 8a bb = 6e 15 5e 35 fa 53 b9 89 d2 9a 1e 2a

15 c3 87 75 = 24 0d d0 82 ef b3 6d 08 f1 c5 77 e0

30 5c 78 f5 = 81 d5 c8 44 44 83 8f f8 9c 53 52 72

a5 e9 85 c8 = 9e 8f fe 4f 1d 77 83 e2 b8 7c 7e ab

36 12 73 89 = 5d 61 90 6a 6f 2c da 02 17 72 66 ad

ed 88 6b e7 = 56 f9 f7 7e 31 3c 50 d8 d1 15 7b f8

42 fc 09 da = 6f 40 35 fc cd 8d 12 63 02 5f 3b 53

49 21 aa db = 55 38 1b ab 17 ea 21 5b 73 d2 50 5d

71 7f 79 0a = d7 ba 0c da 75 f8 2d ca 8c 8a c2 79

78 a8 ea 28 = bb f7 81 1e 74 c0 d1 55 64 da d8 aa

ad

 

 

  = 97(

    = [

      / protected / = h'A10103' / {

          \ = alg \ 1:3 \ AES-GCM mode w/ 256-bit key, 128-bit tag = \

        } / = ,

      / unprotected / = {

        / iv / = 5:h'A572C6A0A8377D1F058225D4'

  =     },

  =     / ciphertext / = h'941B7B1F83C1AF525BF1B8B8BBF3CF1CA6B7058FEBC91D',

<= /div>

      / recipients / = [

        = [

          / = protected / h'',

  =         / unprotected / = {

          =   / alg / 1:-41 / RSAES-OAEP w/ SHA-256 = /,

          =   / kid / 4:'keyID'

  =         },

  =         / ciphertext / = h'9B54748A1107A0EEE78F933B4846E8987FB997451FFD14803F1BB2B5FCC34472=

          =                 =  5D0E31138DCF3C6C0FDBEF836184C3CF1586559C531B691F74EB0ECE7A47471B

          =                 =  5D41119743028644BBE5E10D60AD44C7550AD57DF4309FE405E9521D670DD652

          =                 =  318ABB6E155E35FA53B989D29A1E2A15C38775240DD082EFB36D08F1C577E030

          =                 =  5C78F581D5C84444838FF89C535272A5E985C89E8FFE4F1D7783E2B87C7EAB36

          =                 =  1273895D61906A6F2CDA02177266ADED886BE756F9F77E313C50D8D1157BF842

          =                 =  FC09DA6F4035FCCD8D1263025F3B534921AADB55381BAB17EA215B73D2505D71

          =                 =  7F790AD7BA0CDA75F82DCA8C8AC27978A8EA28BBF7811E74C0D15564DAD8AAAD'

        = ]

      = ]

    = ]

  = )

  =  

 

RSA Key = Material:

 

key bits =3D = 2048

 

n =3D = h'ae45ed5601cec6b8cc05f803935c674ddbe0d75c4c09fd7951fc6b0caec313a8df39970= c518bff

      = ba5ed68f3f0d7f22a4029d413f1ae07e4ebe9e4177ce23e7f5404b569e4ee1bdcf3c1fb03= ef113

      = 802d4f855eb9b5134b5a7c8085adcae6fa2fa1417ec3763be171b0c62b760ede23c12ad92= b9808

      = 84c641f5a8fac26bdad4a03381a22fe1b754885094c82506d4019a535a286afeb271bb9ba= 592de

      = 18dcf600c2aeeae56e02f7cf79fc14cf3bdc7cd84febbbf950ca90304b2219a7aa063aefa= 2c3c1

      = 980e560cd64afe779585b6107657b957857efde6010988ab7de417fc88d8f384c4e6e72c3= f943e

      = 0c31c0c4a5cc36f879d8a3ac9d7d59860eaada6b83bb'

=

      

p =3D = h''

 

q =3D = h''

 

e =3D = h'00000000000000000000000000000000000000000000000000000000000000000000000= 0000000 

      = 0000000000000000000000000000000000000000000000000000000000000000000000000= 00000

      = 0000000000000000000000000000000000000000000000000000000000000000000000000= 00000

      = 0000000000000000010001'

  =     

d =3D = h'056b04216fe5f354ac77250a4b6b0c8525a85c59b0bd80c56450a22d5f438e596a333aa= 875e291

      = dd43f48cb88b9d5fc0d499f9fcd1c397f9afc070cd9e398c8d19e61db7c7410a6b2675dfb= f5d34

      = 5b804d201add502d5ce2dfcb091ce9997bbebe57306f383e4d588103f036f7e85d1934d15= 2a323

      = e4a8db451d6f4a5b1b0f102cc150e02feee2b88dea4ad4c1baccb24d84072d14e1d24a677= 1f740

      = 8ee30564fb86d4393a34bcf0b788501d193303f13a2284b001f0f649eaf79328d4ac5c430= ab441

      = 4920a9460ed1b7bc40ec653e876d09abc509ae45b525190116a0c26101848298509c1c3bf= 3a483

      = e7274054e15e97075036e989f60932807b5257751e79'

=
------=_NextPart_000_04DB_01D40303.C03FF830-- From nobody Sat Jun 16 06:34:59 2018 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7DAD130E43; Sat, 16 Jun 2018 06:34:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XF0dZeYVGIMU; Sat, 16 Jun 2018 06:34:33 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BD5B130E3E; Sat, 16 Jun 2018 06:34:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w5GDYTh3016843; Sat, 16 Jun 2018 15:34:29 +0200 (CEST) Received: from [192.168.217.114] (p5DC7E3F3.dip0.t-ipconnect.de [93.199.227.243]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 417JHT4FM3zDXmH; Sat, 16 Jun 2018 15:34:29 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 550848867.3362-46253f92ae822c5022ffbc08a3f25e61 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\)) Date: Sat, 16 Jun 2018 15:34:28 +0200 Message-Id: To: ace , Core , cose , cbor@ietf.org, t2trg@irtf.org X-Mailer: Apple Mail (2.3445.8.2) Archived-At: Subject: [COSE] Constrained Node/Network Cluster @ IETF102: DRAFT AGENDA X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jun 2018 13:34:37 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF102. Remember that there is still quite some potential for changes. ACE vs. DISPATCH seems to become a common occurrance; at this rate, I'll probably never see a DISPATCH meeting again. CBOR vs. 6LO is maybe just a personal problem for me, throwing in TEEP on top is a bit weird, though. 6TISCH vs. SUIT is probably painful for the few individuals who care about security in both. All times are EDT (UTC-0400). (You can get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten SATURDAY/SUNDAY -- Hackathon (including various interops) (Centre Ville) -- Sun 1800-2000: HotRFC (Viger) MONDAY, July 16, 2018 0930-1200 Morning Session I Duluth ART dispatch Dispatch WG - Joint with ARTAREA Laurier INT 6man IPv6 Maintenance WG Place du Canada RTG detnet Deterministic Networking WG Viger SEC *** ace Authentication and Authorization for = Constrained Environments WG 1330-1530 Afternoon Session I Viger INT ipwave IP Wireless Access in Vehicular = Environments WG Place du Canada SEC tls Transport Layer Security WG 1550-1750 Afternoon Session II Viger ART *** core Constrained RESTful Environments WG Place du Canada INT intarea Internet Area Working Group WG 1810-1940 Afternoon Session III Laurier GEN rfcplusplus The label "RFC" BOF TUESDAY, July 17, 2018 0930-1200 Morning Session I Place du Canada IRTF irtfopen IRTF Open Meeting St-Paul/St-Cath RTG babel Babel routing protocol WG Duluth RTG *** roll Routing Over Low power and Lossy = networks WG 1330-1530 Afternoon Session I Duluth ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Van Horne INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Laurier RTG rtgarea Routing Area Open Meeting Viger SEC *** teep Trusted Execution Environment = Provisioning WG 1550-1820 Afternoon Session II Place du Canada ART httpbis Hypertext Transfer Protocol WG Viger IRTF cfrg Crypto Forum - 1720 - 1820 Centre Ville IRTF icnrg Information-Centric Networking Van Horne SEC acme Automated Certificate Management = Environment WG - 1720 - 1820 Van Horne SEC oauth Web Authorization Protocol WG - 1550 - = 1720 Duluth TSV taps Transport Services WG WEDNESDAY, July 18, 2018 0930-1200 Morning Session I Van Horne OPS anima Autonomic Networking Integrated Model = and Approach WG St-Paul/St-Cath RTG bier Bit Indexed Explicit Replication WG Duluth SEC secdispatch Security Dispatch WG Place du Canada TSV quic QUIC WG 1330-1500 Afternoon Session I Laurier ART httpbis Hypertext Transfer Protocol WG Van Horne INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Centre Ville SEC *** suit Software Updates for Internet of Things = WG 1520-1650 Afternoon Session II Centre Ville INT homenet Home Networking WG Viger TSV tsvarea Transport Area Open Meeting THURSDAY, July 19, 2018 0930-1200 Morning Session I Duluth INT dnssd Extensions for Scalable DNS Service = Discovery WG Centre Ville INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Place du Canada IRTF maprg Measurement and Analysis for Protocols Viger SEC mls Messaging Layer Security WG Van Horne SEC oauth Web Authorization Protocol WG - 0930 - = 1100 1330-1530 Afternoon Session I Centre Ville OPS v6ops IPv6 Operations WG Viger RTG rift Routing In Fat Trees WG Place du Canada SEC saag Security Area Open Meeting 1550-1750 Afternoon Session II Viger IRTF*** t2trg Thing-to-Thing Duluth OPS driu DNS Resolver Identification and Use BOF Centre Ville TSV tsvwg Transport Area Working Group WG 1810-1910 Afternoon Session III Van Horne ART *** core Constrained RESTful Environments WG Place du Canada SEC tls Transport Layer Security WG Centre Ville TSV tsvwg Transport Area Working Group WG FRIDAY, July 20, 2018 0930-1130 Morning Session I Duluth IRTF*** dinrg Decentralized Internet Infrastructure = Proposed RG Place du Canada OPS v6ops IPv6 Operations WG St-Paul/St-Cath TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1150-1320 Afternoon Session I Duluth INT *** lwig Light-Weight Implementation Guidance WG Laurier IRTF panrg Path Aware Networking Proposed RG Centre Ville SEC tokbind Token Binding WG