From nobody Mon Apr 1 09:56:50 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E28F112033F for ; Mon, 1 Apr 2019 09:56:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GV8SiiTi6dZy for ; Mon, 1 Apr 2019 09:56:46 -0700 (PDT) Received: from mail-it1-x12c.google.com (mail-it1-x12c.google.com [IPv6:2607:f8b0:4864:20::12c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A991912048F for ; Mon, 1 Apr 2019 09:56:46 -0700 (PDT) Received: by mail-it1-x12c.google.com with SMTP id g17so213651ita.2 for ; Mon, 01 Apr 2019 09:56:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=1vr3zD4zvIJfaMRx5UZe7N22N+5Ys4874wW3RW9uuCU=; b=lkDUR1pgP6lboF+n+jX5ieedNEDA/9fIptl6jdnuP1PCKtDPOW1ekAWY5A+XIJXFQF uucr7Ho2DdZHXPjCsQTuDUbcJNWtF6CpduMx6ahcJr4pCEVxTm6bsHUhlStSBbGvUpq1 OuGcfBXa7SpEJLsnEQg/LyAIW+YKeya9ccfGiHd/9jFi4z+o2WnGUzoAaga1RbauHysg a//Y8Hd8km0dNTrwFs17MLZ9tdTR2mqcKr4z5siKHTK2pcA1G5us4JdjoEvq0woVWI1L iuvGiAkGXjhNZmfN8kUiRVKLsA/MhjCir2frw2qzjuREwk7KGTuN5Y/YdglxHt//32q1 azRA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=1vr3zD4zvIJfaMRx5UZe7N22N+5Ys4874wW3RW9uuCU=; b=nmlpvt3GIPL+fDK52WocALVjfs06JIn/7DzPBxWZHe/QJUq1UpltPZTB+lvwA9vVCT ozf7Ym2HByJAtiyU1Je9HZ4XCu37hg5ZR6/68NO+oKuSPesDZSeX1Ze4JsdCPcVkbrQN gJCww6uYOh95IUcWSP0sdZ4E8F4t2DVFIyC2SUydAdllJyPQuRnxPwiH5KvAyi7K9mHA MIpcYjeSw9tbnMcfe6zF+EhnmejBbAWaFLwJhQYq6BmR5pnYjDEqNkHaw55rNUafEoE3 lkmk5XKMNxuypiFWaN7IA3djWuKpPojngWDkk5QlJVV0XqxEWRU2iqfScMgURY/YHA7P V9CQ== X-Gm-Message-State: APjAAAUzHZnV3ktO9KHe9hvR71+KknVDLgGX0TB8+vY/Tya6L4dSsDov Ki+5xgXF5DkZer5LOwRGFytzXFdx5wFq55YFPBR84H9O X-Google-Smtp-Source: APXvYqyjxObw/jK+Uh79a+4JGuAHNKnw87sbsoym+wGH1cUth0M8FwKjmvyZMf8gpZD7YQaenJHT5vgUi1/TYNPSVg8= X-Received: by 2002:a02:1384:: with SMTP id 126mr8173776jaz.72.1554137805807; Mon, 01 Apr 2019 09:56:45 -0700 (PDT) MIME-Version: 1.0 From: Kathleen Moriarty Date: Mon, 1 Apr 2019 12:56:10 -0400 Message-ID: To: cose Content-Type: multipart/alternative; boundary="000000000000d8e65705857ae78b" Archived-At: Subject: [COSE] Draft review https://tools.ietf.org/html/draft-ietf-cose-hash-algs-00 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Apr 2019 16:56:49 -0000 --000000000000d8e65705857ae78b Content-Type: text/plain; charset="UTF-8" Hi Jim, Thanks for your work on this draft! I have a few editorial suggestions: Section 2.1 - Deprecated is spelled incorrectly in several places, including the table. Section 2.3 - Typo OLD: The SHA-3 hash algorithms have a significantly different structure than the SHA-3 hash algorithms. NEW: The SHA-3 hash algorithms have a significantly different structure than the derived SHA-3 SHAKE hash algorithms. For SHAKE, do you want to reference NIST SP 800-185 where the definitions for SHA-3 derived functions are included? And one technical: How will this be included in the structure? Would it be a separate layer to join the object in the case #2 for the work (I imagine so)? Is that covered elsewhere, perhaps it's planned for RFC8152bis-struct? Thanks! -- Best regards, Kathleen --000000000000d8e65705857ae78b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Jim,

Tha= nks for your work on this draft!=C2=A0 I have a few editorial suggestions:<= /div>

Section 2.1 - Deprecated is spelled incorrect= ly in several places, including the table.=C2=A0

S= ection 2.3 - Typo
OLD:
=C2=A0The SHA-3 hash algorithms = have a significantly different structure
=C2=A0 =C2=A0than the SH= A-3 hash algorithms.=C2=A0
NEW:
=C2=A0The SHA-3 hash al= gorithms have a significantly different structure
=C2=A0 =C2=A0th= an the derived SHA-3 SHAKE hash algorithms.=C2=A0

= For SHAKE, do you want to reference NIST SP 800-185 where the definitions f= or SHA-3 derived functions are included?

And= one technical:

How will this be included in the s= tructure?=C2=A0 Would it be a separate layer to join the object in the case= #2 for the work (I imagine so)?=C2=A0 Is that covered elsewhere, perhaps i= t's planned for RFC8152bis-struct?

Thanks!--

Best regards,
Kathleen
--000000000000d8e65705857ae78b-- From nobody Mon Apr 1 10:50:54 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1648120187 for ; Mon, 1 Apr 2019 10:50:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NmCSlwQRdW4M for ; Mon, 1 Apr 2019 10:50:50 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9C5C1204F3 for ; Mon, 1 Apr 2019 10:50:49 -0700 (PDT) Received: from Jude (173.160.180.5) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 1 Apr 2019 10:50:41 -0700 From: Jim Schaad To: 'Kathleen Moriarty' , 'cose' References: In-Reply-To: Date: Mon, 1 Apr 2019 10:50:39 -0700 Message-ID: <01ed01d4e8b3$6c9bd910$45d38b30$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_01EE_01D4E878.C03EAEC0" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQIKObUaN8UrWCepvp2KmTPjj8ijMKW88Lyg Content-Language: en-us X-Originating-IP: [173.160.180.5] Archived-At: Subject: Re: [COSE] Draft review https://tools.ietf.org/html/draft-ietf-cose-hash-algs-00 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Apr 2019 17:50:54 -0000 ------=_NextPart_000_01EE_01D4E878.C03EAEC0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable =20 =20 From: COSE On Behalf Of Kathleen Moriarty Sent: Monday, April 1, 2019 9:56 AM To: cose Subject: [COSE] Draft review = https://tools.ietf.org/html/draft-ietf-cose-hash-algs-00 =20 Hi Jim, =20 Thanks for your work on this draft! I have a few editorial suggestions: =20 Section 2.1 - Deprecated is spelled incorrectly in several places, = including the table.=20 =20 [JLS] Will fix this =20 Section 2.3 - Typo OLD: The SHA-3 hash algorithms have a significantly different structure than the SHA-3 hash algorithms.=20 NEW: The SHA-3 hash algorithms have a significantly different structure than the derived SHA-3 SHAKE hash algorithms.=20 =20 [JLS] I had noticed this, however the correct change I that is different = from the SHA-2 algorithms. =20 =20 For SHAKE, do you want to reference NIST SP 800-185 where the = definitions for SHA-3 derived functions are included? =20 And one technical: =20 How will this be included in the structure? Would it be a separate = layer to join the object in the case #2 for the work (I imagine so)? Is = that covered elsewhere, perhaps it's planned for RFC8152bis-struct? =20 [JLS] This is part of what I was asking in the F2F about defining some = type of general COSE_Hash structure in this document. There is some = introductory text in the introduction of RFC8152bis-struct which I = should copy into this document and there is a structure that is being = used in the X.509 draft. My general view is that this is frequently = something that is very application specific. One would expect an array = of elements =E2=80=93 but the exact set of elements beyond the hash = algorithm identifier and the hash value may be variable. Do you = include a random value to make pre-image attacks harder? Do you include = a pointer to someplace else in the document or external with a URI or a = manifest number (suit manifests)? =20 =20 Doing something in this document may be useful, but it also may be = restrictive on others. =20 Jim =20 =20 Thanks! --=20 =20 Best regards, Kathleen ------=_NextPart_000_01EE_01D4E878.C03EAEC0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

 

 

From: COSE = <cose-bounces@ietf.org> On Behalf Of Kathleen = Moriarty
Sent: Monday, April 1, 2019 9:56 AM
To: = cose <cose@ietf.org>
Subject: [COSE] Draft review = https://tools.ietf.org/html/draft-ietf-cose-hash-algs-00

 

Hi Jim,

 

Thanks for your work on this draft!  I have a few = editorial suggestions:

 

Section 2.1 - Deprecated is spelled incorrectly in = several places, including the table. 

 

[JLS] Will fix = this

 

Section 2.3 - Typo

OLD:

 The SHA-3 hash algorithms have a significantly = different structure

  =  than the SHA-3 hash algorithms. 

NEW:

 The SHA-3 hash algorithms have a significantly = different structure

  =  than the derived SHA-3 SHAKE hash = algorithms. 

 

[JLS] I had noticed this, however the correct = change I that is different from the SHA-2 algorithms.=C2=A0 =

 

For SHAKE, do you want to reference NIST SP 800-185 = where the definitions for SHA-3 derived functions are = included?

 

And one technical:

 

How will this be included in the structure?  = Would it be a separate layer to join the object in the case #2 for the = work (I imagine so)?  Is that covered elsewhere, perhaps it's = planned for RFC8152bis-struct?

 

[JLS] This is part of what I was asking in the = F2F about defining some type of general COSE_Hash structure in this = document.=C2=A0 There is some introductory text in the introduction of = RFC8152bis-struct which I should copy into this document and there is a = structure that is being used in the X.509 draft.=C2=A0 =C2=A0My general = view is that this is frequently something that is very application = specific.=C2=A0 One would expect an array of elements =E2=80=93 but the = exact set of elements beyond the hash algorithm identifier and the hash = value may be variable.=C2=A0=C2=A0 Do you include a random value to make = pre-image attacks harder?=C2=A0 Do you include a pointer to someplace = else in the document or external with a URI or a manifest number (suit = manifests)?=C2=A0

 

Doing something in this = document may be useful, but it also may be restrictive on = others.

 

Jim

 

 

Thanks!

-- =

 

Best = regards,

Kathleen

------=_NextPart_000_01EE_01D4E878.C03EAEC0-- From nobody Mon Apr 1 11:02:42 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A54DC1201A1 for ; Mon, 1 Apr 2019 11:02:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fXhKZy9qZOW7 for ; Mon, 1 Apr 2019 11:02:38 -0700 (PDT) Received: from smtp.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 15353120170 for ; Mon, 1 Apr 2019 11:02:38 -0700 (PDT) Received: from [192.168.217.120] (p54A6CE73.dip0.t-ipconnect.de [84.166.206.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.uni-bremen.de (Postfix) with ESMTPSA id 44Y0YR2CNQzyvF; Mon, 1 Apr 2019 20:02:35 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <01ed01d4e8b3$6c9bd910$45d38b30$@augustcellars.com> Date: Mon, 1 Apr 2019 20:02:33 +0200 Cc: Kathleen Moriarty , cose X-Mao-Original-Outgoing-Id: 575834551.295289-21ab25bdbb7802d2e438f763f31ea6b3 Content-Transfer-Encoding: quoted-printable Message-Id: References: <01ed01d4e8b3$6c9bd910$45d38b30$@augustcellars.com> To: Jim Schaad X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [COSE] Draft review https://tools.ietf.org/html/draft-ietf-cose-hash-algs-00 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Apr 2019 18:02:41 -0000 On Apr 1, 2019, at 19:50, Jim Schaad wrote: >=20 > Doing something in this document may be useful, but it also may be = restrictive on others. I had wanted to speak up during the meeting, but I think didn=E2=80=99t = see a need when I perceived that the discussion went into the direction = of defining a structure that is explicitly given as an example =E2=80=94 = that may then be copied where it just drops in but would otherwise not = be considered a requirement for the use of the hash algorithms registry. Gr=C3=BC=C3=9Fe, Carsten From nobody Wed Apr 3 10:46:57 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81B9D120162 for ; Wed, 3 Apr 2019 10:46:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DMtcRI4lftEl for ; Wed, 3 Apr 2019 10:46:52 -0700 (PDT) Received: from mail-it1-x12a.google.com (mail-it1-x12a.google.com [IPv6:2607:f8b0:4864:20::12a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C652112015D for ; Wed, 3 Apr 2019 10:46:52 -0700 (PDT) Received: by mail-it1-x12a.google.com with SMTP id s3so12530921itk.1 for ; Wed, 03 Apr 2019 10:46:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=c+NJKB67xr3Td5wY7zl8T1CEaOrQgB8s8c2rGHiq80Y=; b=Xlx2Itf/LxVPEoIjZ95hJ1qWUbV3L+2Bq/hWq35ekB+XuOkobL4NtC0xiy8Hc8VNys I4vOlY0iZIYIFnMdD9XDjNU0EmTz+eS6rvx7pQ5KYHEqcmV5HHBSBSb4Jz3HAPGh2OPr JSj6BcmOnrHbq8+EYS/hfUMI049aLPrAXyp1ecRI2lwn2h/yi2Yq4rk20LxalTZ9JwK6 G0nHzavnqgfTkRTvsRZJYjwEH6S0fVCRVwtxxo2DxjwfHjFf3Uz/YcmyJ0366ZBIfjwE +LBXPiOCacGLoPhn+b03nd9dorDSlnXwfoTraKtKbSQtRZrQSV0wWqJ4bf9NmORVWxre X2pA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=c+NJKB67xr3Td5wY7zl8T1CEaOrQgB8s8c2rGHiq80Y=; b=VsdZjOxtfOL0Q1DqbV4/cTOvvPBt0PYBAxG+dlXMxzIizyXuztFVj4jXDYHmj60ACU dfbcCmF2v0EdEOTeT5JGeerfk0UmMDgbkV/18741MOJ+aWRdase3XCafpEO2LQlM2VRx bWBtQw7w8/bpPtVBzbkmcOvSBpT0OcBGzjMZUgzvEsy2s4oY3Do22RmiMlD3pS/Ae6xQ +RwaLINsSp3Jq5VaPRy/Cd+FC+610FHGerNbXaPVF5NxEY61yauhzuSC9FZXMdzjsDWx VojGXt9hqZaqfpeyBFbRZse6Mjx2slWPwsHwsKvBecf7efPLCvX4m5yrCdN4GC/pGhhw l7Tw== X-Gm-Message-State: APjAAAUy2EwBw8oHuVPi+mNKYREfpbp52PBGsYaIl9wB6PJ1X/vtj55+ PrT6L4MIcYC56tKLssz3op3h0TtoPx4ZG1yCsyk/CA== X-Google-Smtp-Source: APXvYqxvxz5m8BQXbFwiyvezKOhqQwrD63YcEWbBYsDlZMj9D79RAVAqzcP9BUN60PrvnmkyAz7Ow/YRHI3nuDz1U9Y= X-Received: by 2002:a24:1342:: with SMTP id 63mr1279140itz.69.1554313612088; Wed, 03 Apr 2019 10:46:52 -0700 (PDT) MIME-Version: 1.0 References: <01ed01d4e8b3$6c9bd910$45d38b30$@augustcellars.com> In-Reply-To: <01ed01d4e8b3$6c9bd910$45d38b30$@augustcellars.com> From: Kathleen Moriarty Date: Wed, 3 Apr 2019 13:46:15 -0400 Message-ID: To: Jim Schaad Cc: cose Content-Type: multipart/alternative; boundary="000000000000b7dc000585a3d6f1" Archived-At: Subject: Re: [COSE] Draft review https://tools.ietf.org/html/draft-ietf-cose-hash-algs-00 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Apr 2019 17:46:56 -0000 --000000000000b7dc000585a3d6f1 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Replying to Jim as Carsten snipped too much :-) On Mon, Apr 1, 2019 at 1:50 PM Jim Schaad wrote: > > > > > *From:* COSE *On Behalf Of *Kathleen Moriarty > *Sent:* Monday, April 1, 2019 9:56 AM > *To:* cose > *Subject:* [COSE] Draft review > https://tools.ietf.org/html/draft-ietf-cose-hash-algs-00 > > > > Hi Jim, > > > > Thanks for your work on this draft! I have a few editorial suggestions: > > > > Section 2.1 - Deprecated is spelled incorrectly in several places, > including the table. > > > > [JLS] Will fix this > > > > Section 2.3 - Typo > > OLD: > > The SHA-3 hash algorithms have a significantly different structure > > than the SHA-3 hash algorithms. > > NEW: > > The SHA-3 hash algorithms have a significantly different structure > > than the derived SHA-3 SHAKE hash algorithms. > > > > [JLS] I had noticed this, however the correct change I that is different > from the SHA-2 algorithms. > Thanks > > > For SHAKE, do you want to reference NIST SP 800-185 where the definitions > for SHA-3 derived functions are included? > > > > And one technical: > > > > How will this be included in the structure? Would it be a separate layer > to join the object in the case #2 for the work (I imagine so)? Is that > covered elsewhere, perhaps it's planned for RFC8152bis-struct? > > > > [JLS] This is part of what I was asking in the F2F about defining some > type of general COSE_Hash structure in this document. There is some > introductory text in the introduction of RFC8152bis-struct which I should > copy into this document and there is a structure that is being used in th= e > X.509 draft. My general view is that this is frequently something that = is > very application specific. One would expect an array of elements =E2=80= =93 but the > exact set of elements beyond the hash algorithm identifier and the hash > value may be variable. Do you include a random value to make pre-image > attacks harder? Do you include a pointer to someplace else in the docume= nt > or external with a URI or a manifest number (suit manifests)? > > > > Doing something in this document may be useful, but it also may be > restrictive on others. > I'd like it to be optional as I agree with your point, but do see it useful to be able to associate the encrypted object with the hash. Agreed that the set of elements would be variable, even with similar use cases. As for pre-image attacks, SHA-1 is already discouraged. From what I've read, it's computationally difficult with SHA-256, but bitcoin decided to hash twice (I don't think that's the best option here). The pointer may be useful with a URI or manifest number. If there's not a lot of demand for this, leave it out as you have it now? Best regards, Kathleen > > > Jim > > > > > > Thanks! > > -- > > > > Best regards, > > Kathleen > --=20 Best regards, Kathleen --000000000000b7dc000585a3d6f1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Replying to Jim as Carsten snipped too mu= ch :-)

On Mon, Apr 1, 2019 at 1:50 PM Jim Schaad <ietf@augustcellars.com> wrote:

=C2= =A0

=C2=A0

From: COSE <cose-bounces@ietf.org> On Behalf Of Kathleen Moriarty
Sent: Monday, April 1, 2019 9= :56 AM
To: cose <cose@ietf.org>
Subject: [COSE] Draft review https://tools.ietf.org/html/draft-ietf-cose-hash-algs-00=

=C2=A0

Hi Jim,

=C2=A0

Th= anks for your work on this draft!=C2=A0 I have a few editorial suggestions:=

=C2=A0

Section 2.1 - Deprecated is spelled= incorrectly in several places, including the table.=C2=A0

=C2=A0

[JLS] Will fix this

=C2=A0

Section 2.3 - Typo

OLD:

=C2= =A0The SHA-3 hash algorithms have a significantly different structure

=C2=A0 =C2=A0than the SHA-3 h= ash algorithms.=C2=A0

NE= W:

=C2=A0The SHA-3 hash = algorithms have a significantly different structure

=

=C2=A0 =C2=A0than the derived SHA-3 SHAKE hash = algorithms.=C2=A0

=C2=A0<= /u>

[JLS] I = had noticed this, however the correct change I that is different from the S= HA-2 algorithms.=C2=A0

=

Thanks=C2=A0

=C2=A0=

For SHAKE, do you want to refe= rence NIST SP 800-185 where the definitions for SHA-3 derived functions are= included?

= =C2=A0

And one technical:

=C2=A0

How will this be included in the structure?=C2= =A0 Would it be a separate layer to join the object in the case #2 for the = work (I imagine so)?=C2=A0 Is that covered elsewhere, perhaps it's plan= ned for RFC8152bis-struct?

= =C2=A0

[JLS] This is part of what I was asking in the F2F about defining some ty= pe of general COSE_Hash structure in this document.=C2=A0 There is some int= roductory text in the introduction of RFC8152bis-struct which I should copy= into this document and there is a structure that is being used in the X.50= 9 draft.=C2=A0 =C2=A0My general view is that this is frequently something t= hat is very application specific.=C2=A0 One would expect an array of elemen= ts =E2=80=93 but the exact set of elements beyond the hash algorithm identi= fier and the hash value may be variable.=C2=A0=C2=A0 Do you include a rando= m value to make pre-image attacks harder?=C2=A0 Do you include a pointer to= someplace else in the document or external with a URI or a manifest number= (suit manifests)?=C2=A0

=C2=A0

Doing something in this= document may be useful, but it also may be restrictive on others.


I= 9;d like it to be optional as I agree with your point, but do see it useful= to be able to associate the encrypted object with the hash.=C2=A0 Agreed t= hat the set of elements would be variable, even with similar use cases.=C2= =A0 As for pre-image attacks, SHA-1 is already discouraged.=C2=A0 From what= I've read, it's computationally difficult with SHA-256, but bitcoi= n decided to hash twice (I don't think that's the best option here)= .=C2=A0 The pointer may be useful with a URI or manifest number.
=
If there's not a lot of demand for this, leave it out as= you have it now?

Best regards,
Kathleen=

= =C2=A0

Jim

= =C2=A0

=C2=A0<= /u>

Thanks!

--

<= u>=C2=A0

Best regards,<= /u>

Kathleen



--

Best regards,
Kathleen
--000000000000b7dc000585a3d6f1-- From nobody Thu Apr 4 12:37:03 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F86C120124 for ; Thu, 4 Apr 2019 12:37:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JAh8eNmBMdg3 for ; Thu, 4 Apr 2019 12:36:59 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640096.outbound.protection.outlook.com [40.107.64.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A23701200DE for ; Thu, 4 Apr 2019 12:36:59 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=testarcselector01; d=microsoft.com; cv=none; b=u45ksE0pWtl86Hm6nHOCuPBO2uxPhUIv/CsDQSGk17zSsP/yfjCxamaZh5LgdtTOerEMo5AYui0stI5tBRWBhmhxaHJ1ftW5IW//iMQSqmrq6nbj4zCJcQrGyMc7alUirTL0wzHoQyw3ofKoVlok0pK+bpYf9SptMmrzZVil2+4= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=testarcselector01; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mtBVimo84MEVbsQjq00n3Byc9PV85qoco4dHFbCfX9M=; b=lamqXmCCu4MwqHp+AZcTBMlNrigYNDUtRUH6yEjG+S2CYCe+8VHnFpR6+96qYt5BWpBecuCcHXZzOeLnPIDnq3M3Wyi23cYvq1vKjvhtPqfC9e3Nxx1rey57PSYdIL/8Ze5aQtmuO4ZaIfFuYI6eAHYaezw5GM478mA7CSuF6ko= ARC-Authentication-Results: i=1; test.office365.com 1;dmarc=none action=none header.from=microsoft.com;arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mtBVimo84MEVbsQjq00n3Byc9PV85qoco4dHFbCfX9M=; b=WDinEiq1/XQ5j3JEy1h+N8I5Rl3l3PEoynWffMI6wMCh313afgojIGEkqEK0ENDGV6/AP8+gNnN6xfNKSGKxOobhdaVzOgBUX7oQsLbMXglWOSghGfCEUyDs/z1pJAxo+Cd7LZbHrskMZdcSMTKRDjjr+8FoTBny3xBb24Zhshg= Received: from SN6PR00MB0304.namprd00.prod.outlook.com (52.132.117.158) by SN6PR00MB0383.namprd00.prod.outlook.com (52.132.118.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1813.0; Thu, 4 Apr 2019 19:36:57 +0000 Received: from SN6PR00MB0304.namprd00.prod.outlook.com ([fe80::d017:ba79:6e59:70b]) by SN6PR00MB0304.namprd00.prod.outlook.com ([fe80::d017:ba79:6e59:70b%3]) with mapi id 15.20.1813.000; Thu, 4 Apr 2019 19:36:57 +0000 From: Mike Jones To: Filip Skokan , "cose@ietf.org" Thread-Topic: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms Thread-Index: AQHU5J9bsQ8/O+HBUkWOsDZ9qRHT/6YscJGQ Date: Thu, 4 Apr 2019 19:36:57 +0000 Message-ID: References: <64A280DE-04BF-4443-8ED5-EFF25E38E4C2@gmail.com> In-Reply-To: <64A280DE-04BF-4443-8ED5-EFF25E38E4C2@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=84adcae8-08e9-416c-99de-0000a5c25f98; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-04-04T19:30:49-0800; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:f:458f:f5b:f278:f69] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f05a41ce-6509-4e2c-cd45-08d6b934e675 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600139)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:SN6PR00MB0383; x-ms-traffictypediagnostic: SN6PR00MB0383: x-ms-exchange-purlcount: 5 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0997523C40 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(366004)(39860400002)(376002)(346002)(396003)(199004)(189003)(7696005)(186003)(97736004)(966005)(10290500003)(7736002)(72206003)(229853002)(46003)(8676002)(81166006)(81156014)(68736007)(606006)(6246003)(8936002)(106356001)(55016002)(236005)(99286004)(21615005)(33656002)(105586002)(14454004)(6506007)(53546011)(2501003)(52536014)(478600001)(76176011)(54896002)(25786009)(256004)(102836004)(6116002)(6306002)(5660300002)(8990500004)(9686003)(86612001)(71190400001)(71200400001)(22452003)(86362001)(790700001)(486006)(110136005)(2906002)(476003)(66574012)(316002)(74316002)(10090500001)(6436002)(53936002)(446003)(11346002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR00MB0383; H:SN6PR00MB0304.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: Mh0etAKK85q9AvFI/+sj3UmTtu52IXu6gic1BKlL6UbET1hQ+LUCAgCPjg1d8kscMn7UavY/S4bIsbOvAxsQVKIKmuaUKnI3vO7QRYAq2si6wnCWdElDgLNIW9EkvLTDvwYiPGtTbRxJ9+vihMs7Mnw0xazAf5Wx9hajP4GKdt1javJ3cio9Hujn6A4B7YI1hJ6TEFu8FYb4jvBXyrJQ7Tdw7IVEomtjbWHxM3h5ADxFuPvGCCsA4h7y8Bt65T+JaN7aY/tqTc05whLOYyv1/JXl3znsjPIivaS/lp0Al+Pm42RaYqThPRlfvB/ypK34jO9q63KgsMtm/mcGDHY7uW1t62ml5WuwQU+NgWMSMEtyJZ9QBKdCj3oI9uhGWLk1kEdCe8Uz60BbGVIgagpSBzve3ClIuGpUGXwMudnRrhQ= Content-Type: multipart/alternative; boundary="_000_SN6PR00MB0304FF17D8F88C687D3E2075F5500SN6PR00MB0304namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f05a41ce-6509-4e2c-cd45-08d6b934e675 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Apr 2019 19:36:57.3752 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR00MB0383 Archived-At: Subject: Re: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Apr 2019 19:37:03 -0000 --_000_SN6PR00MB0304FF17D8F88C687D3E2075F5500SN6PR00MB0304namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TW9yZSB2b2ljZXMgb24gdGhlIHN1YmplY3Qgb2Ygd2hhdCBKT1NFIGN1cnZlIGlkZW50aWZpZXIg c2hvdWxkIGJlIHVzZWQgd291bGQgYmUgdXNlZnVsLCBhcyBJIHdhbnQgdG8gcHVibGlzaCBhbiB1 cGRhdGVkIGRyYWZ0IGFkZHJlc3NpbmcgcmV2aWV3IGNvbW1lbnRzIHJlY2VpdmVkIHRvIGRhdGUu ICBUbyBkYXRlLCB0aGUgaW5wdXQgSeKAmXZlIHJlY2VpdmVkIGlzOg0KDQogICogICBGb3Ig4oCc UC0yNTZL4oCdOiAgRmlsaXAgU2tva2FuIGFuZCBWbGFkaW1pciBEemh1dmlub3YgKG9mZiBsaXN0 KQ0KICAqICAgRm9yIOKAnHNlY3AyNTZrMeKAnTogIEppbSBTY2hhYWQgYW5kIEpvaG4gTWF0dHNz b24NCg0KV2hhdCBkbyBvdGhlcnMgdGhpbms/DQoNCkFsc28sIGFzIGl0IG1pZ2h0IGFpZCBpbiB0 aGlua2luZyBhYm91dCB0aGUgY2hvaWNlcywgd2hhdCBpcyB0aGUgbWVhbmluZyBvZiB0aGUg4oCc UOKAnSBpbiB0aGUgaWRlbnRpZmllcnMgZm9yIHRoZSBOSVNUIGN1cnZlcyDigJxQLTI1NuKAnSwg ZXRjLj8NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFRoYW5rcywNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZyb206IENPU0UgPGNvc2UtYm91bmNlc0BpZXRmLm9y Zz4gT24gQmVoYWxmIE9mIEZpbGlwIFNrb2thbg0KU2VudDogV2VkbmVzZGF5LCBNYXJjaCAyNywg MjAxOSA2OjE3IEFNDQpUbzogY29zZUBpZXRmLm9yZw0KU3ViamVjdDogW0NPU0VdICJQLTI1Nksi IGluIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zDQoNCkhlbGxvLA0KDQpPbmNl IG1vcmUgdG8gdGhlIGNvcnJlY3QgbWFpbGluZyBsaXN0Li4uDQoNCnRoaXMgZHJhZnQgaGFzIGNh dWdodCBteSBhdHRlbnRpb24gc2luY2UgaXQgdG91Y2hlcyBKT1NFIGFzIHdlbGwsIHNwZWNpZmlj YWxseSBpdCBwcm9wb3NlcyByZWdpc3RyYXRpb24gZm9yIHRoZSB1c2VzIG9mIHNlY3AyNTZrMSAi Yml0Y29pbiIgY3VydmUuIEkgbGVhcm5lZCBmcm9tIE1pa2UgSm9uZXMgdGhhdCB0aGVyZSdzIGEg ZGlzY3Vzc2lvbiBhcm91bmQgbmFtaW5nIHRoZSBrZXkncyBjdXJ2ZSBhbmQgdGhlIEpXQSBhbGdv cml0aG0uDQoNCi0gIlAtMjU2SyINCkRvIHdlIHJlYWxseSBuZWVkIGEgbmV3IG5hbWUgZm9yIHNl Y3AyNTZrMT8gSSB3b3VsZCBzdWdnZXN0IG5vdC4gTW9zdCBvZiB0aGUgZG9jdW1lbnQgdGFsa3Mg YWJvdXQgc2VjcDI1NmsxIGFueXdheS4gR2l2aW5nIHNlY3AyNTZrMSB0aGUgYWxpYXMgUC0yNTZL IGdpdmVzIHRoZSBpbXByZXNzaW9uIHRoYXQgaXQgaXMgYSBjdXJ2ZSBzdGFuZGFyZGl6ZWQgYnkg TklTVCwgd2hpY2ggaXQgaXMgbm90LiBNaWtlPiBPdGhlcnMgaGF2ZSBhbHNvIHN1Z2dlc3RlZCBz aW1wbHkgdXNpbmcgdGhlIG5hbWUgInNlY3AyNTZrMSIuIEknbSBmaW5lIHdpdGggdGhhdC4NCg0K SSdkIGxpa2UgdG8gYWR2b2NhdGUgZm9yIHN0aWNraW5nIHdpdGggdGhlIHByb3Bvc2VkIChpbiBj dXJyZW50IGRyYWZ0KSAiUC0yNTZLIiBmb3IgRUMga2V5J3MgY3J2LCBhbmQgIkVTMjU2SyIgZm9y IHRoZSBKV0EgYWxnLiBUaGVzZSB2YWx1ZXMgYXJlIGFscmVhZHkgcXVpdGUgY29tbW9uIGluIGV4 aXN0aW5nIGltcGxlbWVudGF0aW9ucywgcXVpdGUgYSBmZXcgaGl0cyBmb3IgdGhpcy4NCg0KWzFd IGh0dHBzOi8vZG9jcy5taWNyb3NvZnQuY29tL2VuLXVzL2RvdG5ldC9hcGkvbWljcm9zb2Z0LmF6 dXJlLmtleXZhdWx0LmVja2V5LnAyNTZrP3ZpZXc9YXp1cmUtZG90bmV0DQpbMl0gaHR0cHM6Ly9j b25uZWN0MmlkLmNvbS9wcm9kdWN0cy9uaW1idXMtam9zZS1qd3QvZXhhbXBsZXMvand0LXdpdGgt ZXMyNTZrLXNpZ25hdHVyZQ0KWzNdIGh0dHBzOi8vc3RhdGljLmphdmFkb2MuaW8vY29tLm5pbWJ1 c2RzL25pbWJ1cy1qb3NlLWp3dC81LjEwL2NvbS9uaW1idXNkcy9qb3NlL2p3ay9FQ0tleS5odG1s DQpbNF0gaHR0cHM6Ly9naXRodWIuY29tL3BhbnZhL2pvc2UvYmxvYi9tYXN0ZXIvbGliL2p3ay9r ZXkvZWMuanMjTDIyLUwyMw0KWzVdIGh0dHBzOi8vZ2l0aHViLmNvbS9yZWxvY2F0ZWx5L2VjLWtl eQ0KDQpBcyBtZW50aW9uZWQgaW4gdGhlIElFVEYgMTA0IG1lZXRpbmcgb24gVHVlc2RheSB0aGUg b3RoZXIgZW5jb3VudGVyZWQgbmFtaW5nIG9mIHRoaXMgaXMgIkstMjU2IiBidXQgdGhlcmUncyBj b25zaWRlcmFibHkgbGVzcyBoaXRzIHNlYXJjaGluZyBmb3IgaW1wbGVtZW50YXRpb25zIHVzaW5n IHRoYXQgb25lLg0KDQpJIHVuZGVyc3RhbmQgdGhlIENPU0UgZ3JvdXAgZG9lcyBub3QgKHByb2Jh Ymx5KSBoYXZlIGV4aXN0aW5nIGltcGxlbWVudGF0aW9ucyBvZiBzZWNwMjU2azEgYW5kIHRoYXQn cyB3aHkgdGhlIG5vdGlvbiBvZiBqdXN0IG5hbWluZyBpdCBzZWNwMjU2azEgcmVzb25hdGVzLCBi dXQgbWF5YmUgY29uc2lkZXIgb25seSBkb2luZyBzbyBmb3IgQ09TRS4gSk9TRSBjb3VsZCB1c2Ug bGVzcyBmcmFnbWVudGF0aW9uIGFtb25nc3QgaXRzIGltcGxlbWVudGF0aW9ucyBhbmQgdGhlcmVm b3JlIHN0aWNraW5nIHRvIHRoZSBtb3N0IGNvbW1vbiBuYW1pbmcgYWxyZWFkeSBpbiB0aGUgd2ls ZCB3b3VsZCBiZSB3ZWxjb21lLg0KDQpUaGUgc2FtZSBhcHBsaWVzIHRvIHRoZSBwcmVzZW50ZWQg cXVlc3Rpb24gYWJvdXQgQ29tcHJlc3NlZCB2cy4gTm9uLWNvbXByZXNzZWQgUG9pbnRzIGZvciBz ZWNwMjU2azEsIGknZCBhZHZvY2F0ZSB0aGF0IGF0IGxlYXN0IGZvciBKT1NFIHRoZSB1c2VkIHBv aW50cyByZW1haW4gaW4tbGluZSB3aXRoIHdoYXQncyBhbHJlYWR5IHVzZWQgaW4gd2l0aCB0aGUg ZXhpc3Rpbmcga2V5cyBhbmQgYWxnb3JpdGhtcy4NCg0KQmVzdCwNCkZpbGlwIFNrb2thbg0K --_000_SN6PR00MB0304FF17D8F88C687D3E2075F5500SN6PR00MB0304namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlz dFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7 bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDow aW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWww DQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs LXJlcGx5Ow0KCWNvbG9yOiMwMDIwNjA7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjEN Cgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30N CmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0 aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MTAyNTc5MTgxNTsNCgltc28tbGlzdC10 eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTExNDY2ODA1NiA2NzY5ODY4OSA2 NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5 ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1z dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsMw0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0K CW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0 IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlz dCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5Oldpbmdk aW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBp bjt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0 cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRt YXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5k aWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1 cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPk1vcmUgdm9pY2VzIG9uIHRoZSBzdWJqZWN0IG9m IHdoYXQgSk9TRSBjdXJ2ZSBpZGVudGlmaWVyIHNob3VsZCBiZSB1c2VkIHdvdWxkIGJlIHVzZWZ1 bCwgYXMgSSB3YW50IHRvIHB1Ymxpc2ggYW4gdXBkYXRlZCBkcmFmdCBhZGRyZXNzaW5nIHJldmll dyBjb21tZW50cyByZWNlaXZlZCB0byBkYXRlLiZuYnNwOyBUbyBkYXRlLCB0aGUgaW5wdXQgSeKA mXZlIHJlY2VpdmVkIGlzOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCBzdHlsZT0ibWFyZ2lu LXRvcDowaW4iIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHls ZT0iY29sb3I6IzAwMjA2MDttYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEi Pg0KRm9yIOKAnDxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+UC0yNTZLPC9zcGFuPuKAnTombmJzcDsgRmlsaXAgU2tva2FuIGFuZCBWbGFkaW1pciBEemh1 dmlub3YgKG9mZiBsaXN0KTxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3Jh cGgiIHN0eWxlPSJjb2xvcjojMDAyMDYwO21hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZl bDEgbGZvMSI+DQpGb3Ig4oCcPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij5zZWNwMjU2azE8L3NwYW4+4oCdOiZuYnNwOyBKaW0gU2NoYWFkIGFuZCBKb2hu IE1hdHRzc29uPG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPldoYXQgZG8gb3Ro ZXJzIHRoaW5rPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+QWxzbywgYXMg aXQgbWlnaHQgYWlkIGluIHRoaW5raW5nIGFib3V0IHRoZSBjaG9pY2VzLCB3aGF0IGlzIHRoZSBt ZWFuaW5nIG9mIHRoZSDigJxQ4oCdIGluIHRoZSBpZGVudGlmaWVycyBmb3IgdGhlIE5JU1QgY3Vy dmVzIOKAnFAtMjU24oCdLCBldGMuPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2 MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFRoYW5rcyw8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Y29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5n OjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBD T1NFICZsdDtjb3NlLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IDxiPk9uIEJlaGFsZiBPZiA8L2I+DQpG aWxpcCBTa29rYW48YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBNYXJjaCAyNywgMjAxOSA2 OjE3IEFNPGJyPg0KPGI+VG86PC9iPiBjb3NlQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+ IFtDT1NFXSAmcXVvdDtQLTI1NksmcXVvdDsgaW4gZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFs Z29yaXRobXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhl bGxvLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48aT5PbmNlIG1vcmUgdG8gdGhlIGNvcnJlY3QgbWFpbGluZyBsaXN0Li4uPC9pPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj50aGlzIGRyYWZ0 IGhhcyBjYXVnaHQgbXkgYXR0ZW50aW9uIHNpbmNlIGl0IHRvdWNoZXMgSk9TRSBhcyB3ZWxsLCBz cGVjaWZpY2FsbHkgaXQgcHJvcG9zZXMgcmVnaXN0cmF0aW9uIGZvciB0aGUgdXNlcyBvZiBzZWNw MjU2azEmbmJzcDsmcXVvdDtiaXRjb2luJnF1b3Q7IGN1cnZlLiBJIGxlYXJuZWQgZnJvbSBNaWtl IEpvbmVzIHRoYXQgdGhlcmUncyBhIGRpc2N1c3Npb24gYXJvdW5kIG5hbWluZyB0aGUga2V5J3Mg Y3VydmUgYW5kIHRoZQ0KIEpXQSBhbGdvcml0aG0uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0Mg MS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4t cmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gJnF1b3Q7UC0yNTZLJnF1b3Q7PGJy Pg0KRG8gd2UgcmVhbGx5IG5lZWQgYSBuZXcgbmFtZSBmb3Igc2VjcDI1NmsxPyBJIHdvdWxkIHN1 Z2dlc3Qgbm90LiBNb3N0IG9mIHRoZSBkb2N1bWVudCB0YWxrcyBhYm91dCBzZWNwMjU2azEgYW55 d2F5LiBHaXZpbmcgc2VjcDI1NmsxIHRoZSBhbGlhcyBQLTI1NksgZ2l2ZXMgdGhlIGltcHJlc3Np b24gdGhhdCBpdCBpcyBhIGN1cnZlIHN0YW5kYXJkaXplZCBieSBOSVNULCB3aGljaCBpdCBpcyBu b3QuIE1pa2UmZ3Q7IE90aGVycyBoYXZlIGFsc28gc3VnZ2VzdGVkDQogc2ltcGx5IHVzaW5nIHRo ZSBuYW1lICZxdW90O3NlY3AyNTZrMSZxdW90Oy4gSSdtIGZpbmUgd2l0aCB0aGF0LjxvOnA+PC9v OnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSdk IGxpa2UgdG8gYWR2b2NhdGUgZm9yIHN0aWNraW5nIHdpdGggdGhlIHByb3Bvc2VkIChpbiBjdXJy ZW50IGRyYWZ0KSAmcXVvdDs8Yj5QLTI1Nks8L2I+JnF1b3Q7IGZvciBFQyBrZXkncyBjcnYsIGFu ZCAmcXVvdDs8Yj5FUzI1Nks8L2I+JnF1b3Q7IGZvciB0aGUgSldBIGFsZy4gVGhlc2UgdmFsdWVz IGFyZSBhbHJlYWR5IHF1aXRlIGNvbW1vbiBpbiBleGlzdGluZyBpbXBsZW1lbnRhdGlvbnMsIHF1 aXRlIGEgZmV3IGhpdHMgZm9yIHRoaXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+WzFdJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9k b2NzLm1pY3Jvc29mdC5jb20vZW4tdXMvZG90bmV0L2FwaS9taWNyb3NvZnQuYXp1cmUua2V5dmF1 bHQuZWNrZXkucDI1Nms/dmlldz1henVyZS1kb3RuZXQiPmh0dHBzOi8vZG9jcy5taWNyb3NvZnQu Y29tL2VuLXVzL2RvdG5ldC9hcGkvbWljcm9zb2Z0LmF6dXJlLmtleXZhdWx0LmVja2V5LnAyNTZr P3ZpZXc9YXp1cmUtZG90bmV0PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+WzJdJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9jb25uZWN0MmlkLmNv bS9wcm9kdWN0cy9uaW1idXMtam9zZS1qd3QvZXhhbXBsZXMvand0LXdpdGgtZXMyNTZrLXNpZ25h dHVyZSI+aHR0cHM6Ly9jb25uZWN0MmlkLmNvbS9wcm9kdWN0cy9uaW1idXMtam9zZS1qd3QvZXhh bXBsZXMvand0LXdpdGgtZXMyNTZrLXNpZ25hdHVyZTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlszXSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8v c3RhdGljLmphdmFkb2MuaW8vY29tLm5pbWJ1c2RzL25pbWJ1cy1qb3NlLWp3dC81LjEwL2NvbS9u aW1idXNkcy9qb3NlL2p3ay9FQ0tleS5odG1sIj5odHRwczovL3N0YXRpYy5qYXZhZG9jLmlvL2Nv bS5uaW1idXNkcy9uaW1idXMtam9zZS1qd3QvNS4xMC9jb20vbmltYnVzZHMvam9zZS9qd2svRUNL ZXkuaHRtbDwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPls0XSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9wYW52YS9qb3NlL2Js b2IvbWFzdGVyL2xpYi9qd2sva2V5L2VjLmpzI0wyMi1MMjMiPmh0dHBzOi8vZ2l0aHViLmNvbS9w YW52YS9qb3NlL2Jsb2IvbWFzdGVyL2xpYi9qd2sva2V5L2VjLmpzI0wyMi1MMjM8L2E+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5bNV0mbmJzcDs8 YSBocmVmPSJodHRwczovL2dpdGh1Yi5jb20vcmVsb2NhdGVseS9lYy1rZXkiPmh0dHBzOi8vZ2l0 aHViLmNvbS9yZWxvY2F0ZWx5L2VjLWtleTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QXMgbWVudGlvbmVkIGluIHRoZSBJRVRGIDEwNCBt ZWV0aW5nIG9uIFR1ZXNkYXkgdGhlIG90aGVyIGVuY291bnRlcmVkIG5hbWluZyBvZiB0aGlzIGlz ICZxdW90O0stMjU2JnF1b3Q7IGJ1dCB0aGVyZSdzIGNvbnNpZGVyYWJseSBsZXNzIGhpdHMgc2Vh cmNoaW5nIGZvciBpbXBsZW1lbnRhdGlvbnMgdXNpbmcgdGhhdCBvbmUuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgdW5kZXJzdGFuZCB0aGUg Q09TRSBncm91cCBkb2VzIG5vdCAocHJvYmFibHkpIGhhdmUgZXhpc3RpbmcgaW1wbGVtZW50YXRp b25zIG9mJm5ic3A7c2VjcDI1NmsxIGFuZCB0aGF0J3Mgd2h5IHRoZSBub3Rpb24gb2YganVzdCBu YW1pbmcgaXQmbmJzcDtzZWNwMjU2azEgcmVzb25hdGVzLCBidXQgbWF5YmUgY29uc2lkZXIgb25s eSBkb2luZyBzbyBmb3IgQ09TRS4gSk9TRSBjb3VsZCB1c2UgbGVzcyBmcmFnbWVudGF0aW9uIGFt b25nc3QNCiBpdHMgaW1wbGVtZW50YXRpb25zIGFuZCB0aGVyZWZvcmUgc3RpY2tpbmcgdG8gdGhl IG1vc3QgY29tbW9uIG5hbWluZyBhbHJlYWR5IGluIHRoZSB3aWxkIHdvdWxkIGJlIHdlbGNvbWUu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRo ZSBzYW1lIGFwcGxpZXMgdG8gdGhlIHByZXNlbnRlZCBxdWVzdGlvbiBhYm91dCA8aT5Db21wcmVz c2VkIHZzLiBOb24tY29tcHJlc3NlZCBQb2ludHM8L2k+Jm5ic3A7Zm9yJm5ic3A7c2VjcDI1Nmsx LCBpJ2QgYWR2b2NhdGUgdGhhdCBhdCBsZWFzdCBmb3IgSk9TRSB0aGUgdXNlZCBwb2ludHMgcmVt YWluIGluLWxpbmUgd2l0aCB3aGF0J3MgYWxyZWFkeSB1c2VkIGluIHdpdGggdGhlIGV4aXN0aW5n IGtleXMgYW5kIGFsZ29yaXRobXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZXN0LDxicj4NCjxiPkZpbGlwIFNrb2thbjwvYj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_SN6PR00MB0304FF17D8F88C687D3E2075F5500SN6PR00MB0304namp_-- From nobody Thu Apr 4 13:21:13 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B5AA1200B2 for ; Thu, 4 Apr 2019 13:21:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2VYyxefdg_dm for ; Thu, 4 Apr 2019 13:21:08 -0700 (PDT) Received: from mail-ot1-x32a.google.com (mail-ot1-x32a.google.com [IPv6:2607:f8b0:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E31D12016C for ; Thu, 4 Apr 2019 13:21:08 -0700 (PDT) Received: by mail-ot1-x32a.google.com with SMTP id e5so3551344otk.12 for ; Thu, 04 Apr 2019 13:21:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=xwn4WijHRq2FT/LpojzfhaxpBB6sfQWoK9CQBLdUjVw=; b=QPBnu4DSxxFHNWiL+A9IuXSSNvKai1mFXihG2hyTBb9HWxElbc87z4y5rTZitXMYHC A0pj8hUouwRHl9Yd6l7rRzUM7gavpDFlC8rnCrpurleQhl9w+92PLK44He1yBTOsz3BQ xZ9ZutHgBEN+q0ZJNMmxFHAvlrud1hpCLYMKAHIvOu7r1g9ggeIyx1ANe6E6y4sM0d5z nW39UZf72PMs7e53CVaLeFpSJ3iBU3PCWqz4irjQlw0BxLMARV0OVYVHjusTJXPDqd50 87PB2BCvF1E9/U3zAy46dBGkyuunnqMKIi9T4OpuG270rafzEQbHGX4XPlfghiVjuqpv N/0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=xwn4WijHRq2FT/LpojzfhaxpBB6sfQWoK9CQBLdUjVw=; b=AVykm5jcMnuC9Faa7DTJWtKweOxwuDQUiIT2LzttSG1+JSQig2ewypuhHm2ItQypCR CyY+ytqlh1HZcLy//VcosYqRKARPqOMh4WeOkqoVhePN+WfCJUZVQMtgzZ3OxIiYs12K 2UU20IUbGdDb7/mx5Qsu9vomSvIuqd6dMUOjJm3cXH1CU20PRQ7APfiCzmehCLJ9A/O3 5HfgzzOEQjhBK5ySvYgU+X7f1rNIiG2A45h3ayNYha+tGt2SzqKzM6zZqhS3Z+GRQwgH EqPagX6bjQ+Wnr0mr/uNZ9PDdv1/Mr1G0hPzg9nepkVCuHWsyaSWoSNqh1ifUbEYNX/3 8qNA== X-Gm-Message-State: APjAAAXBVJbPavrURJJctm3xRV5IB0XBnmFu6iPpAcIsjQxzAa4VWIX2 32k7mwaS1Ml8kmZf+0AtvpHXGVTueQyKr50huQ== X-Google-Smtp-Source: APXvYqyo9BURgOeYElg+DaO8q3j+o4mlsjzt/fm9AbqPl3QDYlvGlWq4ow6cshGTH5ukYB+LbMFBHw+cil7vq06COCU= X-Received: by 2002:a05:6830:164a:: with SMTP id h10mr5775024otr.323.1554409267679; Thu, 04 Apr 2019 13:21:07 -0700 (PDT) MIME-Version: 1.0 References: <64A280DE-04BF-4443-8ED5-EFF25E38E4C2@gmail.com> In-Reply-To: From: Filip Skokan Date: Thu, 4 Apr 2019 22:20:56 +0200 Message-ID: To: Mike Jones Cc: "cose@ietf.org" Content-Type: multipart/alternative; boundary="0000000000003c574a0585ba1ce7" Archived-At: Subject: Re: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Apr 2019 20:21:11 -0000 --0000000000003c574a0585ba1ce7 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable IIRC Jim mentioned preferring just secp256k1 for COSE, but was indifferent to what the JOSE naming should be. S pozdravem, *Filip Skokan* On Thu, 4 Apr 2019 at 21:36, Mike Jones wrote= : > More voices on the subject of what JOSE curve identifier should be used > would be useful, as I want to publish an updated draft addressing review > comments received to date. To date, the input I=E2=80=99ve received is: > > - For =E2=80=9CP-256K=E2=80=9D: Filip Skokan and Vladimir Dzhuvinov (= off list) > - For =E2=80=9Csecp256k1=E2=80=9D: Jim Schaad and John Mattsson > > > > What do others think? > > > > Also, as it might aid in thinking about the choices, what is the meaning > of the =E2=80=9CP=E2=80=9D in the identifiers for the NIST curves =E2=80= =9CP-256=E2=80=9D, etc.? > > > > Thanks, > > -- Mike > > > > *From:* COSE *On Behalf Of * Filip Skokan > *Sent:* Wednesday, March 27, 2019 6:17 AM > *To:* cose@ietf.org > *Subject:* [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms > > > > Hello, > > > > *Once more to the correct mailing list...* > > > > this draft has caught my attention since it touches JOSE as well, > specifically it proposes registration for the uses of secp256k1 "bitcoin" > curve. I learned from Mike Jones that there's a discussion around naming > the key's curve and the JWA algorithm. > > > > - "P-256K" > Do we really need a new name for secp256k1? I would suggest not. Most of > the document talks about secp256k1 anyway. Giving secp256k1 the alias > P-256K gives the impression that it is a curve standardized by NIST, whic= h > it is not. Mike> Others have also suggested simply using the name > "secp256k1". I'm fine with that. > > > > I'd like to advocate for sticking with the proposed (in current draft) " > *P-256K*" for EC key's crv, and "*ES256K*" for the JWA alg. These values > are already quite common in existing implementations, quite a few hits fo= r > this. > > > > [1] > https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.keyvault.ecke= y.p256k?view=3Dazure-dotnet > > [2] > https://connect2id.com/products/nimbus-jose-jwt/examples/jwt-with-es256k-= signature > > [3] > https://static.javadoc.io/com.nimbusds/nimbus-jose-jwt/5.10/com/nimbusds/= jose/jwk/ECKey.html > > [4] https://github.com/panva/jose/blob/master/lib/jwk/key/ec.js#L22-L23 > > [5] https://github.com/relocately/ec-key > > > > As mentioned in the IETF 104 meeting on Tuesday the other encountered > naming of this is "K-256" but there's considerably less hits searching fo= r > implementations using that one. > > > > I understand the COSE group does not (probably) have existing > implementations of secp256k1 and that's why the notion of just naming > it secp256k1 resonates, but maybe consider only doing so for COSE. JOSE > could use less fragmentation amongst its implementations and therefore > sticking to the most common naming already in the wild would be welcome. > > > > The same applies to the presented question about *Compressed vs. > Non-compressed Points* for secp256k1, i'd advocate that at least for JOSE > the used points remain in-line with what's already used in with the > existing keys and algorithms. > > > > Best, > *Filip Skokan* > --0000000000003c574a0585ba1ce7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
IIRC=C2=A0Jim mentioned preferring just s= ecp256k1 for COSE, but was indifferent to what the JOSE naming should be.

S pozdravem,
Filip Skokan

=
On Thu= , 4 Apr 2019 at 21:36, Mike Jones <Michael.Jones@microsoft.com> wrote:

More voices on th= e subject of what JOSE curve identifier should be used would be useful, as = I want to publish an updated draft addressing review comments received to d= ate.=C2=A0 To date, the input I=E2=80=99ve received is:

  • For =E2=80=9CP-256K=E2=80=9D:=C2=A0 Filip Skokan and Vladimir Dzhuvinov (off list)
  • For =E2=80=9Csecp256k1<= /span>=E2=80=9D:=C2=A0 Jim Schaad and John Mattsson

=C2=A0<= /u>

What do others th= ink?

=C2=A0<= /u>

Also, as it might= aid in thinking about the choices, what is the meaning of the =E2=80=9CP= =E2=80=9D in the identifiers for the NIST curves =E2=80=9CP-256=E2=80=9D, e= tc.?

=C2=A0<= /u>

=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 Thanks,

=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 -- Mike

=C2=A0<= /u>

From: COSE <cose-bounces@ietf.org> On Behalf Of = Filip Skokan
Sent: Wednesday, March 27, 2019 6:17 AM
To: cose@ietf.org=
Subject: [COSE] "P-256K" in draft-ietf-cose-webauthn-algor= ithms

=C2=A0

Hello,

=C2=A0

Once more to the correct mailing list...

=C2=A0

this draft has caught my attention since it touches = JOSE as well, specifically it proposes registration for the uses of secp256= k1=C2=A0"bitcoin" curve. I learned from Mike Jones that there'= ;s a discussion around naming the key's curve and the JWA algorithm.

=C2=A0

- "P-256K"
Do we really need a new name for secp256k1? I would suggest not. Most of th= e document talks about secp256k1 anyway. Giving secp256k1 the alias P-256K = gives the impression that it is a curve standardized by NIST, which it is n= ot. Mike> Others have also suggested simply using the name "secp256k1". I'm fine with that.

=C2=A0

I'd like to advocate for sticking with the propo= sed (in current draft) "P-256K" for EC key's crv, and = "ES256K" for the JWA alg. These values are already quite c= ommon in existing implementations, quite a few hits for this.=

=C2=A0

=C2=A0

As mentioned in the IETF 104 meeting on Tuesday the = other encountered naming of this is "K-256" but there's consi= derably less hits searching for implementations using that one.

=C2=A0

I understand the COSE group does not (probably) have= existing implementations of=C2=A0secp256k1 and that's why the notion o= f just naming it=C2=A0secp256k1 resonates, but maybe consider only doing so= for COSE. JOSE could use less fragmentation amongst its implementations and therefore sticking to the most common naming alrea= dy in the wild would be welcome.

=C2=A0

The same applies to the presented question about = Compressed vs. Non-compressed Points=C2=A0for=C2=A0secp256k1, i'd a= dvocate that at least for JOSE the used points remain in-line with what'= ;s already used in with the existing keys and algorithms.

=C2=A0

Best,
Filip Skokan

--0000000000003c574a0585ba1ce7-- From nobody Thu Apr 4 18:49:21 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91C201200BA for ; Thu, 4 Apr 2019 18:49:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OLXq18nSJHbi for ; Thu, 4 Apr 2019 18:49:17 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19031120025 for ; Thu, 4 Apr 2019 18:49:17 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Thu, 4 Apr 2019 18:49:10 -0700 From: Jim Schaad To: 'Mike Jones' , 'Filip Skokan' , References: <64A280DE-04BF-4443-8ED5-EFF25E38E4C2@gmail.com> In-Reply-To: Date: Thu, 4 Apr 2019 18:49:05 -0700 Message-ID: <00dd01d4eb51$c257f690$4707e3b0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00DE_01D4EB17.15FAA530" X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQER9m6eNFCPstQ/baLQv9xV3UomGgEwp1Rhp6kxQ3A= X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Apr 2019 01:49:21 -0000 ------=_NextPart_000_00DE_01D4EB17.15FAA530 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable You have not received any input from me on what the JOSE curve = identifier should be called. I only care about the naming for the COSE = curve identifier. =20 Jim =20 =20 From: COSE On Behalf Of Mike Jones Sent: Thursday, April 4, 2019 12:37 PM To: Filip Skokan ; cose@ietf.org Subject: Re: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms =20 More voices on the subject of what JOSE curve identifier should be used = would be useful, as I want to publish an updated draft addressing review = comments received to date. To date, the input I=E2=80=99ve received is: * For =E2=80=9CP-256K=E2=80=9D: Filip Skokan and Vladimir Dzhuvinov = (off list) * For =E2=80=9Csecp256k1=E2=80=9D: Jim Schaad and John Mattsson =20 What do others think? =20 Also, as it might aid in thinking about the choices, what is the meaning = of the =E2=80=9CP=E2=80=9D in the identifiers for the NIST curves = =E2=80=9CP-256=E2=80=9D, etc.? =20 Thanks, -- Mike =20 From: COSE > On = Behalf Of Filip Skokan Sent: Wednesday, March 27, 2019 6:17 AM To: cose@ietf.org =20 Subject: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms =20 Hello, =20 Once more to the correct mailing list... =20 this draft has caught my attention since it touches JOSE as well, = specifically it proposes registration for the uses of secp256k1 = "bitcoin" curve. I learned from Mike Jones that there's a discussion = around naming the key's curve and the JWA algorithm. =20 - "P-256K" Do we really need a new name for secp256k1? I would suggest not. Most of = the document talks about secp256k1 anyway. Giving secp256k1 the alias = P-256K gives the impression that it is a curve standardized by NIST, = which it is not. Mike> Others have also suggested simply using the name = "secp256k1". I'm fine with that. =20 I'd like to advocate for sticking with the proposed (in current draft) = "P-256K" for EC key's crv, and "ES256K" for the JWA alg. These values = are already quite common in existing implementations, quite a few hits = for this. =20 [1] = https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.keyvault.ecke= y.p256k?view=3Dazure-dotnet [2] = https://connect2id.com/products/nimbus-jose-jwt/examples/jwt-with-es256k-= signature [3] = https://static.javadoc.io/com.nimbusds/nimbus-jose-jwt/5.10/com/nimbusds/= jose/jwk/ECKey.html [4] https://github.com/panva/jose/blob/master/lib/jwk/key/ec.js#L22-L23 [5] https://github.com/relocately/ec-key =20 As mentioned in the IETF 104 meeting on Tuesday the other encountered = naming of this is "K-256" but there's considerably less hits searching = for implementations using that one. =20 I understand the COSE group does not (probably) have existing = implementations of secp256k1 and that's why the notion of just naming it = secp256k1 resonates, but maybe consider only doing so for COSE. JOSE = could use less fragmentation amongst its implementations and therefore = sticking to the most common naming already in the wild would be welcome. =20 The same applies to the presented question about Compressed vs. = Non-compressed Points for secp256k1, i'd advocate that at least for JOSE = the used points remain in-line with what's already used in with the = existing keys and algorithms. =20 Best, Filip Skokan ------=_NextPart_000_00DE_01D4EB17.15FAA530 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

You have = not received any input from me on what the JOSE curve identifier should = be called.=C2=A0 I only care about the naming for the COSE curve = identifier.

 

Jim

 

 

From: COSE = <cose-bounces@ietf.org> On Behalf Of Mike = Jones
Sent: Thursday, April 4, 2019 12:37 PM
To: = Filip Skokan <panva.ip@gmail.com>; = cose@ietf.org
Subject: Re: [COSE] "P-256K" in = draft-ietf-cose-webauthn-algorithms

 

More voices on the subject of what JOSE curve = identifier should be used would be useful, as I want to publish an = updated draft addressing review comments received to date.  To = date, the input I=E2=80=99ve received is:

  • For = =E2=80=9CP-256K=E2=80=9D:  Filip Skokan and Vladimir Dzhuvinov = (off list)
  • For = =E2=80=9Csecp256k1=E2=80=9D:  Jim Schaad and John = Mattsson

 

What do others = think?

 

Also, as it might aid in = thinking about the choices, what is the meaning of the = =E2=80=9CP=E2=80=9D in the identifiers for the NIST curves = =E2=80=9CP-256=E2=80=9D, etc.?

 

        &= nbsp;           &n= bsp;           &nb= sp;           &nbs= p;          = Thanks,

        &= nbsp;           &n= bsp;           &nb= sp;           &nbs= p;          -- = Mike

 

From: COSE <cose-bounces@ietf.org> = On Behalf Of Filip Skokan
Sent: Wednesday, March 27, = 2019 6:17 AM
To: cose@ietf.org
Subject: = [COSE] "P-256K" in = draft-ietf-cose-webauthn-algorithms

 

Hello,

 

Once more to the correct mailing = list...

 

this draft has caught my attention since it touches = JOSE as well, specifically it proposes registration for the uses of = secp256k1 "bitcoin" curve. I learned from Mike Jones that = there's a discussion around naming the key's curve and the JWA = algorithm.

 

- "P-256K"
Do we really need a = new name for secp256k1? I would suggest not. Most of the document talks = about secp256k1 anyway. Giving secp256k1 the alias P-256K gives the = impression that it is a curve standardized by NIST, which it is not. = Mike> Others have also suggested simply using the name = "secp256k1". I'm fine with = that.

 

I'd like to advocate for sticking with the proposed = (in current draft) "P-256K" for EC key's crv, and = "ES256K" for the JWA alg. These values are already = quite common in existing implementations, quite a few hits for = this.

 

=

 

As mentioned in the IETF 104 meeting on Tuesday the = other encountered naming of this is "K-256" but there's = considerably less hits searching for implementations using that = one.

 

I = understand the COSE group does not (probably) have existing = implementations of secp256k1 and that's why the notion of just = naming it secp256k1 resonates, but maybe consider only doing so for = COSE. JOSE could use less fragmentation amongst its implementations and = therefore sticking to the most common naming already in the wild would = be welcome.

 

The same applies to the presented question about = Compressed vs. Non-compressed Points for secp256k1, i'd = advocate that at least for JOSE the used points remain in-line with = what's already used in with the existing keys and = algorithms.

 

Best,
Filip = Skokan

=
------=_NextPart_000_00DE_01D4EB17.15FAA530-- From nobody Fri Apr 5 01:49:15 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C445C1201BE for ; Fri, 5 Apr 2019 01:49:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jxM7vCWJH12H for ; Fri, 5 Apr 2019 01:49:10 -0700 (PDT) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40052.outbound.protection.outlook.com [40.107.4.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A1E5120072 for ; Fri, 5 Apr 2019 01:49:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XSXJmu1wbH8ccnP32/wzmwi3eR2eGgXwmCIPKYV/cfE=; b=XR/zI7MyycnKO70j44+LH46gjQsggJ5nTGKvRDJh/bDcSseZ8Ymsx/ruOBiiAL4d7cllZvP0P0ujV41k8ihZjkbnRZrFFqeh0k0ePYfv6917s9VjBOpHmBVMXJ/mF6WK+4yHTKkLYqud4bzzTRADGx7j1za1cXtD0oZz/k1HxRQ= Received: from VI1PR07MB4175.eurprd07.prod.outlook.com (20.176.6.24) by VI1PR07MB3903.eurprd07.prod.outlook.com (52.134.27.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.11; Fri, 5 Apr 2019 08:49:06 +0000 Received: from VI1PR07MB4175.eurprd07.prod.outlook.com ([fe80::6df6:7394:f531:2436]) by VI1PR07MB4175.eurprd07.prod.outlook.com ([fe80::6df6:7394:f531:2436%2]) with mapi id 15.20.1771.011; Fri, 5 Apr 2019 08:49:06 +0000 From: John Mattsson To: Mike Jones , Filip Skokan , "cose@ietf.org" Thread-Topic: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms Thread-Index: AQHU5J9fhf9NombN+UazBa6AtljwbKYsckiAgAD+2gA= Date: Fri, 5 Apr 2019 08:49:06 +0000 Message-ID: References: <64A280DE-04BF-4443-8ED5-EFF25E38E4C2@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.17.1.190326 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [192.176.1.85] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 733d3f40-e519-45f9-fbdc-08d6b9a3901c x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600139)(711020)(4605104)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:VI1PR07MB3903; x-ms-traffictypediagnostic: VI1PR07MB3903: x-ms-exchange-purlcount: 5 x-microsoft-antispam-prvs: x-forefront-prvs: 0998671D02 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(136003)(346002)(376002)(39860400002)(366004)(199004)(189003)(5660300002)(6486002)(58126008)(229853002)(3846002)(2906002)(8676002)(81166006)(54896002)(25786009)(236005)(478600001)(606006)(71200400001)(97736004)(45080400002)(6512007)(82746002)(53936002)(71190400001)(6246003)(966005)(6306002)(2501003)(8936002)(6436002)(81156014)(76176011)(6506007)(83716004)(66066001)(66574012)(26005)(68736007)(36756003)(6116002)(44832011)(316002)(53546011)(7736002)(99286004)(2616005)(186003)(106356001)(33656002)(256004)(476003)(486006)(446003)(105586002)(11346002)(102836004)(86362001)(14454004)(790700001)(21615005)(110136005); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB3903; H:VI1PR07MB4175.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: YAr0pZFDYeyPJ28oyuhbiFeKdDHaEJ9jyRWiO0bU9OhsrlH+7fQDJKtdmMyjnzniGqJZBfCu44MAx/P8/Wer+KJNlFFpIPIdOplU1fqcv4aL9kYSbM/feeTce2iewaKh0h0o4VExLj4UfHJbvG6cfMYJ8ixZljBEi0cge3u/V9Mj3CwKHDwU8+L12/H3uimbFtuXGKleFRil9hgTU11ZsFh+bFHGIR3ZYulF5wKCS7b/DuQKurDjMCTOp/nOZjzKSdVZi9nugKlfkV4pQKiehZJ2DNb+gv4JHcqs3a816CIoHBteUN5jgsmG9bDWj5e54X9l9cUpXTD3uOP9dHKLyElqejOF4+lOnHnz3HrdI2HEMMNDV42eIwb2wI3T2ddppoATKoe91aCgLGPPzCTRZREbuxDCjzYb8vrTrmppm2Q= Content-Type: multipart/alternative; boundary="_000_F18E55B6633647CCAA5A32C6197657D3ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 733d3f40-e519-45f9-fbdc-08d6b9a3901c X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Apr 2019 08:49:06.7309 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB3903 Archived-At: Subject: Re: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Apr 2019 08:49:14 -0000 --_000_F18E55B6633647CCAA5A32C6197657D3ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCkdvb2dsaW5nIGdpdmVzIHRoZSBmb2xsb3dpbmcgcmVzdWx0czoNCg0KIlAtMjU2SyIg ICAgICAgICAgICAgQWJvdXQgMSAwMTAgcmVzdWx0cyAgICh3aGVyZSBtb3N0IGhpdHMgYXJlIGFi b3V0IDI1Nksgb3IgbWVtb3J5KQ0KInNlY3AyNTZrMSIgICAgICBBYm91dCA5NyA3MDAgcmVzdWx0 cw0KDQpJIGRpc2xpa2UgIlAtMjU2SyIgaW4gYW55IElFVEYgc3BlY2lmaWNhdGlvbiAoSk9TRSwg Q09TRSwgZXRjLikgZm9yIHR3byByZWFzb25zOg0KDQoxLiBUaGUgc2l0dWF0aW9uIHdpdGggMyBk aWZmZXJlbnQgU0RPcyBnaXZpbmcgZGlmZmVyZW50IG5hbWVzIHRvIHRoZSBzYW1lIGN1cnZlcyBh cyBzdW1tYXJpemVkIGluIEFwcGVuZGl4IEEgb2YgUkZDIDg0NDIgaXMgYmFkIGVub3VnaC4gSUVU RiBkb2VzIG5vdCBuZWVkIHRvIG1ha2UgdGhlIHNpdHVhdGlvbiB3b3JzZSBieSBhc3NpZ25pbmcg YSBuZXcgbmFtZSB0byBzZWNwMjU2azEuIFRocmVlIGNvbHVtbnMgaW4gdGhlIHRhYmxlIGlzIG1v cmUgdGhhbiBlbm91Z2guDQoNCjIuIElmIElFVEYgbmVlZCB0byBhc3NpZ24gYSBuZXcgbmFtZSB0 byBzZWNwMjU2azEgSSB0aGluayAiUC0yNTZLIiBpcyBhIGJhZCBjaG9pY2UgYXMgaXQgZ2l2ZXMg dGhlIGltcHJlc3Npb24gdGhhdCBpdCBpcyBhIGN1cnZlIHN0YW5kYXJkaXplZCBieSBOSVNUICh3 aGljaCBpdCBpcyBub3QpLiBJIGhhdmUgYWxyZWFkeSBoZWFyZCBrbm93bGVkZ2VhYmxlIHBlb3Bs ZSB0aGlua2luZyB0aGF0IGl0IGlzIGEgTklTVCBjdXJ2ZS4gR2l2ZW4gdGhlIHJlY2VudCBJRVRG IGZ1cnkgYWJvdXQgSVRVIG5hbWluZyBhIHByb3RvY29sIGVUTFMsIEkgdGhpbmsgSUVURiBzaG91 bGQgcmVmcmFpbiBmcm9tIHRoaXMgdW5sZXNzIHdlIGdldCBvayBmcm9tIE5JU1QuDQoNCkkgaGF2 ZSBubyBvYmplY3Rpb25zIHRvIHRoZSBjdXJ2ZSBpdHNlbGYgb3IgdGhlIG5hbWUgRVMyNTZLLg0K DQo+d2hhdCBpcyB0aGUgbWVhbmluZyBvZiB0aGUg4oCcUOKAnSBpbiB0aGUgaWRlbnRpZmllcnMg Zm9yIHRoZSBOSVNUIGN1cnZlcyDigJxQLTI1NuKAnSwgZXRjLj8NCg0KVGhlIFAgaW4gTklTVCBj dXJ2ZXMgKFAtMjU2LCBQLTM4NCwgZXRjLikgbWVhbnMgUHJpbWUNClRoZSBLIGluIE5JU1QgY3Vy dmVzIChLLTIzMywgSy0yODMsIGV0Yy4pIG1lYW5zIEtvYmxpdHoNClRoZSBCIGluIE5JU1QgY3Vy dmVzIChCLTIzMywgQi0yODMsIGV0Yy4pIG1lYW5zIEJpbmFyeQ0KDQpUaGUgciBpbiBTRUNHIGN1 cnZlcyAoc2VjcDI1NnIxLCBzZWNwMzg0cjEpIG1lYW5zIHJhbmRvbQ0KVGhlIGsgaW4gU0VDRyBj dXJ2ZXMgKHNlY3AyNTZrMSwgc2VjdDIzM2sxKSBtZWFucyBrb2JsaXR6DQpUaGUgcCBpbiBTRUNH IGN1cnZlcyAoc2VjcDI1NnIxLCBzZWNwMjU2azEpIG1lYW5zIHByaW1lDQpUaGUgdCBpbiBTRUNH IGN1cnZlcyAoc2VjdDIzM3IxLCBzZWN0MjMzazEpIG1lYW5zIHR3bz8NCg0KSm9obg0KDQpGcm9t OiBDT1NFIDxjb3NlLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBNaWtlIEpvbmVzIDxN aWNoYWVsLkpvbmVzPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4NCkRhdGU6IFRodXJz ZGF5LCA0IEFwcmlsIDIwMTkgYXQgMjE6MzcNClRvOiBGaWxpcCBTa29rYW4gPHBhbnZhLmlwQGdt YWlsLmNvbT4sICJjb3NlQGlldGYub3JnIiA8Y29zZUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBb Q09TRV0gIlAtMjU2SyIgaW4gZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMNCg0K TW9yZSB2b2ljZXMgb24gdGhlIHN1YmplY3Qgb2Ygd2hhdCBKT1NFIGN1cnZlIGlkZW50aWZpZXIg c2hvdWxkIGJlIHVzZWQgd291bGQgYmUgdXNlZnVsLCBhcyBJIHdhbnQgdG8gcHVibGlzaCBhbiB1 cGRhdGVkIGRyYWZ0IGFkZHJlc3NpbmcgcmV2aWV3IGNvbW1lbnRzIHJlY2VpdmVkIHRvIGRhdGUu ICBUbyBkYXRlLCB0aGUgaW5wdXQgSeKAmXZlIHJlY2VpdmVkIGlzOg0KDQrCtyAgICAgICAgIEZv ciDigJxQLTI1NkvigJ06ICBGaWxpcCBTa29rYW4gYW5kIFZsYWRpbWlyIER6aHV2aW5vdiAob2Zm IGxpc3QpDQoNCsK3ICAgICAgICAgRm9yIOKAnHNlY3AyNTZrMeKAnTogIEppbSBTY2hhYWQgYW5k IEpvaG4gTWF0dHNzb24NCg0KV2hhdCBkbyBvdGhlcnMgdGhpbms/DQoNCkFsc28sIGFzIGl0IG1p Z2h0IGFpZCBpbiB0aGlua2luZyBhYm91dCB0aGUgY2hvaWNlcywgd2hhdCBpcyB0aGUgbWVhbmlu ZyBvZiB0aGUg4oCcUOKAnSBpbiB0aGUgaWRlbnRpZmllcnMgZm9yIHRoZSBOSVNUIGN1cnZlcyDi gJxQLTI1NuKAnSwgZXRjLj8NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIFRoYW5rcywNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZyb206IENPU0UgPGNvc2UtYm91 bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIEZpbGlwIFNrb2thbg0KU2VudDogV2VkbmVzZGF5 LCBNYXJjaCAyNywgMjAxOSA2OjE3IEFNDQpUbzogY29zZUBpZXRmLm9yZw0KU3ViamVjdDogW0NP U0VdICJQLTI1NksiIGluIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zDQoNCkhl bGxvLA0KDQpPbmNlIG1vcmUgdG8gdGhlIGNvcnJlY3QgbWFpbGluZyBsaXN0Li4uDQoNCnRoaXMg ZHJhZnQgaGFzIGNhdWdodCBteSBhdHRlbnRpb24gc2luY2UgaXQgdG91Y2hlcyBKT1NFIGFzIHdl bGwsIHNwZWNpZmljYWxseSBpdCBwcm9wb3NlcyByZWdpc3RyYXRpb24gZm9yIHRoZSB1c2VzIG9m IHNlY3AyNTZrMSAiYml0Y29pbiIgY3VydmUuIEkgbGVhcm5lZCBmcm9tIE1pa2UgSm9uZXMgdGhh dCB0aGVyZSdzIGEgZGlzY3Vzc2lvbiBhcm91bmQgbmFtaW5nIHRoZSBrZXkncyBjdXJ2ZSBhbmQg dGhlIEpXQSBhbGdvcml0aG0uDQoNCi0gIlAtMjU2SyINCkRvIHdlIHJlYWxseSBuZWVkIGEgbmV3 IG5hbWUgZm9yIHNlY3AyNTZrMT8gSSB3b3VsZCBzdWdnZXN0IG5vdC4gTW9zdCBvZiB0aGUgZG9j dW1lbnQgdGFsa3MgYWJvdXQgc2VjcDI1NmsxIGFueXdheS4gR2l2aW5nIHNlY3AyNTZrMSB0aGUg YWxpYXMgUC0yNTZLIGdpdmVzIHRoZSBpbXByZXNzaW9uIHRoYXQgaXQgaXMgYSBjdXJ2ZSBzdGFu ZGFyZGl6ZWQgYnkgTklTVCwgd2hpY2ggaXQgaXMgbm90LiBNaWtlPiBPdGhlcnMgaGF2ZSBhbHNv IHN1Z2dlc3RlZCBzaW1wbHkgdXNpbmcgdGhlIG5hbWUgInNlY3AyNTZrMSIuIEknbSBmaW5lIHdp dGggdGhhdC4NCg0KSSdkIGxpa2UgdG8gYWR2b2NhdGUgZm9yIHN0aWNraW5nIHdpdGggdGhlIHBy b3Bvc2VkIChpbiBjdXJyZW50IGRyYWZ0KSAiUC0yNTZLIiBmb3IgRUMga2V5J3MgY3J2LCBhbmQg IkVTMjU2SyIgZm9yIHRoZSBKV0EgYWxnLiBUaGVzZSB2YWx1ZXMgYXJlIGFscmVhZHkgcXVpdGUg Y29tbW9uIGluIGV4aXN0aW5nIGltcGxlbWVudGF0aW9ucywgcXVpdGUgYSBmZXcgaGl0cyBmb3Ig dGhpcy4NCg0KWzFdIGh0dHBzOi8vZG9jcy5taWNyb3NvZnQuY29tL2VuLXVzL2RvdG5ldC9hcGkv bWljcm9zb2Z0LmF6dXJlLmtleXZhdWx0LmVja2V5LnAyNTZrP3ZpZXc9YXp1cmUtZG90bmV0DQpb Ml0gaHR0cHM6Ly9jb25uZWN0MmlkLmNvbS9wcm9kdWN0cy9uaW1idXMtam9zZS1qd3QvZXhhbXBs ZXMvand0LXdpdGgtZXMyNTZrLXNpZ25hdHVyZQ0KWzNdIGh0dHBzOi8vc3RhdGljLmphdmFkb2Mu aW8vY29tLm5pbWJ1c2RzL25pbWJ1cy1qb3NlLWp3dC81LjEwL2NvbS9uaW1idXNkcy9qb3NlL2p3 ay9FQ0tleS5odG1sDQpbNF0gaHR0cHM6Ly9naXRodWIuY29tL3BhbnZhL2pvc2UvYmxvYi9tYXN0 ZXIvbGliL2p3ay9rZXkvZWMuanMjTDIyLUwyMw0KWzVdIGh0dHBzOi8vZ2l0aHViLmNvbS9yZWxv Y2F0ZWx5L2VjLWtleQ0KDQpBcyBtZW50aW9uZWQgaW4gdGhlIElFVEYgMTA0IG1lZXRpbmcgb24g VHVlc2RheSB0aGUgb3RoZXIgZW5jb3VudGVyZWQgbmFtaW5nIG9mIHRoaXMgaXMgIkstMjU2IiBi dXQgdGhlcmUncyBjb25zaWRlcmFibHkgbGVzcyBoaXRzIHNlYXJjaGluZyBmb3IgaW1wbGVtZW50 YXRpb25zIHVzaW5nIHRoYXQgb25lLg0KDQpJIHVuZGVyc3RhbmQgdGhlIENPU0UgZ3JvdXAgZG9l cyBub3QgKHByb2JhYmx5KSBoYXZlIGV4aXN0aW5nIGltcGxlbWVudGF0aW9ucyBvZiBzZWNwMjU2 azEgYW5kIHRoYXQncyB3aHkgdGhlIG5vdGlvbiBvZiBqdXN0IG5hbWluZyBpdCBzZWNwMjU2azEg cmVzb25hdGVzLCBidXQgbWF5YmUgY29uc2lkZXIgb25seSBkb2luZyBzbyBmb3IgQ09TRS4gSk9T RSBjb3VsZCB1c2UgbGVzcyBmcmFnbWVudGF0aW9uIGFtb25nc3QgaXRzIGltcGxlbWVudGF0aW9u cyBhbmQgdGhlcmVmb3JlIHN0aWNraW5nIHRvIHRoZSBtb3N0IGNvbW1vbiBuYW1pbmcgYWxyZWFk eSBpbiB0aGUgd2lsZCB3b3VsZCBiZSB3ZWxjb21lLg0KDQpUaGUgc2FtZSBhcHBsaWVzIHRvIHRo ZSBwcmVzZW50ZWQgcXVlc3Rpb24gYWJvdXQgQ29tcHJlc3NlZCB2cy4gTm9uLWNvbXByZXNzZWQg UG9pbnRzIGZvciBzZWNwMjU2azEsIGknZCBhZHZvY2F0ZSB0aGF0IGF0IGxlYXN0IGZvciBKT1NF IHRoZSB1c2VkIHBvaW50cyByZW1haW4gaW4tbGluZSB3aXRoIHdoYXQncyBhbHJlYWR5IHVzZWQg aW4gd2l0aCB0aGUgZXhpc3Rpbmcga2V5cyBhbmQgYWxnb3JpdGhtcy4NCg0KQmVzdCwNCkZpbGlw IFNrb2thbg0K --_000_F18E55B6633647CCAA5A32C6197657D3ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlz dFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7 bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGNtOw0KCW1hcmdpbi1yaWdodDow Y207DQoJbWFyZ2luLWJvdHRvbTowY207DQoJbWFyZ2luLWxlZnQ6MzYuMHB0Ow0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1h bDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRv Ow0KCW1hcmdpbi1yaWdodDowY207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFy Z2luLWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u YWw7DQoJY29sb3I6IzAwMjA2MDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglj b2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4wcHQ7fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRp b25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDoxMDgzNzE3MzsNCgltc28tbGlzdC10ZW1w bGF0ZS1pZHM6LTE4ODQ5Mjg1Nzg7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NzIuMHB0Ow0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1z by1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGww OmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxMDguMHB0Ow0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6 ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDoxNDQuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDox ODAuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot MTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyMTYuMHB0Ow0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1h bnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxl dmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyNTIuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZTox MC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZl bC10YWItc3RvcDoyODguMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1m YW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozMjQu MHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTgu MHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjEwMjU3OTE4MTU7DQoJbXNvLWxpc3QtdHlwZTpoeWJy aWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0xMTQ2NjgwNTYgNjc2OTg2ODkgNjc2OTg2OTEg Njc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2 OTg2OTM7fQ0KQGxpc3QgbDE6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBw dDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwxOmxldmVsMw0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTps ZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDE6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDE6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7 DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwxOmxldmVsNw0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDgNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlz dCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5n ZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTow Y207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu ZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iU1YiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJw bGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIj5IaSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkdvb2dsaW5nIGdpdmVzIHRo ZSBmb2xsb3dpbmcgcmVzdWx0czo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZxdW90O1AtMjU2SyZxdW90 OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBBYm91dCAxIDAxMCByZXN1bHRzJm5ic3A7Jm5ic3A7ICh3aGVyZSBt b3N0IGhpdHMgYXJlIGFib3V0IDI1Nksgb3IgbWVtb3J5KTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj4mcXVvdDtzZWNwMjU2azEm cXVvdDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgQWJvdXQgOTcgNzAwIHJlc3VsdHM8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiPkkgZGlzbGlrZSAmcXVvdDtQLTI1NksmcXVvdDsgaW4gYW55IElF VEYgc3BlY2lmaWNhdGlvbiAoSk9TRSwgQ09TRSwgZXRjLikgZm9yIHR3byByZWFzb25zOjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyI+MS4gVGhlIHNpdHVhdGlvbiB3aXRoIDMgZGlmZmVyZW50IFNET3MgZ2l2 aW5nIGRpZmZlcmVudCBuYW1lcyB0byB0aGUgc2FtZSBjdXJ2ZXMgYXMgc3VtbWFyaXplZCBpbiBB cHBlbmRpeCBBIG9mIFJGQyA4NDQyIGlzIGJhZCBlbm91Z2guIElFVEYgZG9lcyBub3QgbmVlZCB0 byBtYWtlIHRoZSBzaXR1YXRpb24gd29yc2UgYnkgYXNzaWduaW5nIGEgbmV3IG5hbWUgdG8gc2Vj cDI1NmsxLg0KIFRocmVlIGNvbHVtbnMgaW4gdGhlIHRhYmxlIGlzIG1vcmUgdGhhbiBlbm91Z2gu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIj4yLiBJZiBJRVRGIG5lZWQgdG8gYXNzaWduIGEgbmV3IG5hbWUg dG8gc2VjcDI1NmsxIEkgdGhpbmsgJnF1b3Q7UC0yNTZLJnF1b3Q7IGlzIGEgYmFkIGNob2ljZSBh cyBpdCBnaXZlcyB0aGUgaW1wcmVzc2lvbiB0aGF0IGl0IGlzIGEgY3VydmUgc3RhbmRhcmRpemVk IGJ5IE5JU1QgKHdoaWNoIGl0IGlzIG5vdCkuIEkgaGF2ZSBhbHJlYWR5IGhlYXJkIGtub3dsZWRn ZWFibGUgcGVvcGxlIHRoaW5raW5nDQogdGhhdCBpdCBpcyBhIE5JU1QgY3VydmUuIEdpdmVuIHRo ZSByZWNlbnQgSUVURiBmdXJ5IGFib3V0IElUVSBuYW1pbmcgYSBwcm90b2NvbCBlVExTLCBJIHRo aW5rIElFVEYgc2hvdWxkIHJlZnJhaW4gZnJvbSB0aGlzIHVubGVzcyB3ZSBnZXQgb2sgZnJvbSBO SVNULjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+SSBoYXZlIG5vIG9iamVjdGlvbnMgdG8gdGhlIGN1cnZl IGl0c2VsZiBvciB0aGUgbmFtZSBFUzI1NksuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29s b3I6IzAwMjA2MCI+Jmd0O3doYXQgaXMgdGhlIG1lYW5pbmcgb2YgdGhlIOKAnFDigJ0gaW4gdGhl IGlkZW50aWZpZXJzIGZvciB0aGUgTklTVCBjdXJ2ZXMg4oCcUC0yNTbigJ0sIGV0Yy4/PC9zcGFu PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPlRoZSBQIGluIE5JU1QgY3Vy dmVzIChQLTI1NiwgUC0zODQsIGV0Yy4pIG1lYW5zIFByaW1lPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPlRoZSBLIGluIE5JU1Qg Y3VydmVzIChLLTIzMywgSy0yODMsIGV0Yy4pIG1lYW5zIEtvYmxpdHo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIEIgaW4g TklTVCBjdXJ2ZXMgKEItMjMzLCBCLTI4MywgZXRjLikgbWVhbnMgQmluYXJ5PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIj5UaGUgciBpbiBTRUNHIGN1cnZlcyAoc2VjcDI1NnIxLCBzZWNwMzg0cjEpIG1lYW5z IHJhbmRvbTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIj5UaGUgayBpbiBTRUNHIGN1cnZlcyAoc2VjcDI1NmsxLCBzZWN0MjMzazEp IG1lYW5zIGtvYmxpdHo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIHAgaW4gU0VDRyBjdXJ2ZXMgKHNlY3AyNTZyMSwgc2Vj cDI1NmsxKSBtZWFucyBwcmltZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUgdCBpbiBTRUNHIGN1cnZlcyAoc2VjdDIzM3Ix LCBzZWN0MjMzazEpIG1lYW5zIHR3bz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkpvaG48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5n OjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6YmxhY2siPkZy b206DQo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6YmxhY2siPkNP U0UgJmx0O2Nvc2UtYm91bmNlc0BpZXRmLm9yZyZndDsgb24gYmVoYWxmIG9mIE1pa2UgSm9uZXMg Jmx0O01pY2hhZWwuSm9uZXM9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnJmd0Ozxicj4N CjxiPkRhdGU6IDwvYj5UaHVyc2RheSwgNCBBcHJpbCAyMDE5IGF0IDIxOjM3PGJyPg0KPGI+VG86 IDwvYj5GaWxpcCBTa29rYW4gJmx0O3BhbnZhLmlwQGdtYWlsLmNvbSZndDssICZxdW90O2Nvc2VA aWV0Zi5vcmcmcXVvdDsgJmx0O2Nvc2VAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9i PlJlOiBbQ09TRV0gJnF1b3Q7UC0yNTZLJnF1b3Q7IGluIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRo bi1hbGdvcml0aG1zPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iY29sb3I6IzAwMjA2MCI+TW9yZSB2b2ljZXMgb24gdGhlIHN1YmplY3Qgb2Ygd2hhdCBKT1NF IGN1cnZlIGlkZW50aWZpZXIgc2hvdWxkIGJlIHVzZWQgd291bGQgYmUgdXNlZnVsLCBhcyBJIHdh bnQgdG8gcHVibGlzaCBhbiB1cGRhdGVkIGRyYWZ0IGFkZHJlc3NpbmcgcmV2aWV3IGNvbW1lbnRz IHJlY2VpdmVkIHRvIGRhdGUuJm5ic3A7DQogVG8gZGF0ZSwgdGhlIGlucHV0IEnigJl2ZSByZWNl aXZlZCBpczo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0O3Rl eHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzMiPg0KPCFbaWYgIXN1cHBv cnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTpTeW1ib2w7Y29s b3I6IzAwMjA2MCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0i Zm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFb ZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Rm9yIOKAnDwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOiMwMDIwNjAiPlAtMjU2Szwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImNvbG9yOiMwMDIwNjAiPuKAnTombmJzcDsgRmlsaXAgU2tva2FuIGFuZCBWbGFkaW1p ciBEemh1dmlub3YgKG9mZiBsaXN0KTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0O3RleHQtaW5kZW50Oi0x OC4wcHQ7bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzMiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTpTeW1ib2w7Y29sb3I6IzAwMjA2MCI+ PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAm cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Rm9yIOKAnDwvc3Bhbj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOiMwMDIwNjAiPnNlY3AyNTZrMTwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNv bG9yOiMwMDIwNjAiPuKAnTombmJzcDsgSmltIFNjaGFhZCBhbmQgSm9obiBNYXR0c3NvbjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7 PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImNvbG9yOiMwMDIwNjAiPldoYXQgZG8gb3RoZXJzIHRoaW5rPzwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJj b2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+QWxzbywgYXMgaXQg bWlnaHQgYWlkIGluIHRoaW5raW5nIGFib3V0IHRoZSBjaG9pY2VzLCB3aGF0IGlzIHRoZSBtZWFu aW5nIG9mIHRoZSDigJxQ4oCdIGluIHRoZSBpZGVudGlmaWVycyBmb3IgdGhlIE5JU1QgY3VydmVz IOKAnFAtMjU24oCdLCBldGMuPzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IFRoYW5rcyw8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRp bmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiPkZyb206PC9zcGFuPjwvYj48c3Bh biBsYW5nPSJFTi1VUyI+IENPU0UgJmx0O2Nvc2UtYm91bmNlc0BpZXRmLm9yZyZndDsNCjxiPk9u IEJlaGFsZiBPZiA8L2I+RmlsaXAgU2tva2FuPGJyPg0KPGI+U2VudDo8L2I+IFdlZG5lc2RheSwg TWFyY2ggMjcsIDIwMTkgNjoxNyBBTTxicj4NCjxiPlRvOjwvYj4gY29zZUBpZXRmLm9yZzxicj4N CjxiPlN1YmplY3Q6PC9iPiBbQ09TRV0gJnF1b3Q7UC0yNTZLJnF1b3Q7IGluIGRyYWZ0LWlldGYt Y29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJF Ti1VUyI+SGVsbG8sPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4t VVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxpPjxzcGFuIGxhbmc9IkVO LVVTIj5PbmNlIG1vcmUgdG8gdGhlIGNvcnJlY3QgbWFpbGluZyBsaXN0Li4uPC9zcGFuPjwvaT48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFu Zz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9 IkVOLVVTIj50aGlzIGRyYWZ0IGhhcyBjYXVnaHQgbXkgYXR0ZW50aW9uIHNpbmNlIGl0IHRvdWNo ZXMgSk9TRSBhcyB3ZWxsLCBzcGVjaWZpY2FsbHkgaXQgcHJvcG9zZXMgcmVnaXN0cmF0aW9uIGZv ciB0aGUgdXNlcyBvZiBzZWNwMjU2azEmbmJzcDsmcXVvdDtiaXRjb2luJnF1b3Q7IGN1cnZlLiBJ IGxlYXJuZWQgZnJvbSBNaWtlIEpvbmVzIHRoYXQgdGhlcmUncyBhIGRpc2N1c3Npb24NCiBhcm91 bmQgbmFtaW5nIHRoZSBrZXkncyBjdXJ2ZSBhbmQgdGhlIEpXQSBhbGdvcml0aG0uPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJn aW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowY207bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+LSAmcXVvdDtQLTI1NksmcXVvdDs8YnI+DQpEbyB3ZSBy ZWFsbHkgbmVlZCBhIG5ldyBuYW1lIGZvciBzZWNwMjU2azE/IEkgd291bGQgc3VnZ2VzdCBub3Qu IE1vc3Qgb2YgdGhlIGRvY3VtZW50IHRhbGtzIGFib3V0IHNlY3AyNTZrMSBhbnl3YXkuIEdpdmlu ZyBzZWNwMjU2azEgdGhlIGFsaWFzIFAtMjU2SyBnaXZlcyB0aGUgaW1wcmVzc2lvbiB0aGF0IGl0 IGlzIGEgY3VydmUgc3RhbmRhcmRpemVkIGJ5IE5JU1QsIHdoaWNoIGl0IGlzIG5vdC4gTWlrZSZn dDsgT3RoZXJzIGhhdmUgYWxzbyBzdWdnZXN0ZWQNCiBzaW1wbHkgdXNpbmcgdGhlIG5hbWUgJnF1 b3Q7c2VjcDI1NmsxJnF1b3Q7LiBJJ20gZmluZSB3aXRoIHRoYXQuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+SSdkIGxpa2UgdG8gYWR2b2NhdGUg Zm9yIHN0aWNraW5nIHdpdGggdGhlIHByb3Bvc2VkIChpbiBjdXJyZW50IGRyYWZ0KSAmcXVvdDs8 Yj5QLTI1Nks8L2I+JnF1b3Q7IGZvciBFQyBrZXkncyBjcnYsIGFuZCAmcXVvdDs8Yj5FUzI1Nks8 L2I+JnF1b3Q7IGZvciB0aGUgSldBIGFsZy4gVGhlc2UgdmFsdWVzIGFyZSBhbHJlYWR5IHF1aXRl IGNvbW1vbiBpbiBleGlzdGluZw0KIGltcGxlbWVudGF0aW9ucywgcXVpdGUgYSBmZXcgaGl0cyBm b3IgdGhpcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9 IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJF Ti1VUyI+WzFdJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9kb2NzLm1pY3Jvc29mdC5jb20vZW4tdXMv ZG90bmV0L2FwaS9taWNyb3NvZnQuYXp1cmUua2V5dmF1bHQuZWNrZXkucDI1Nms/dmlldz1henVy ZS1kb3RuZXQiPmh0dHBzOi8vZG9jcy5taWNyb3NvZnQuY29tL2VuLXVzL2RvdG5ldC9hcGkvbWlj cm9zb2Z0LmF6dXJlLmtleXZhdWx0LmVja2V5LnAyNTZrP3ZpZXc9YXp1cmUtZG90bmV0PC9hPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5bMl0mbmJzcDs8 YSBocmVmPSJodHRwczovL2Nvbm5lY3QyaWQuY29tL3Byb2R1Y3RzL25pbWJ1cy1qb3NlLWp3dC9l eGFtcGxlcy9qd3Qtd2l0aC1lczI1Nmstc2lnbmF0dXJlIj5odHRwczovL2Nvbm5lY3QyaWQuY29t L3Byb2R1Y3RzL25pbWJ1cy1qb3NlLWp3dC9leGFtcGxlcy9qd3Qtd2l0aC1lczI1Nmstc2lnbmF0 dXJlPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5b M10mbmJzcDs8YSBocmVmPSJodHRwczovL3N0YXRpYy5qYXZhZG9jLmlvL2NvbS5uaW1idXNkcy9u aW1idXMtam9zZS1qd3QvNS4xMC9jb20vbmltYnVzZHMvam9zZS9qd2svRUNLZXkuaHRtbCI+aHR0 cHM6Ly9zdGF0aWMuamF2YWRvYy5pby9jb20ubmltYnVzZHMvbmltYnVzLWpvc2Utand0LzUuMTAv Y29tL25pbWJ1c2RzL2pvc2UvandrL0VDS2V5Lmh0bWw8L2E+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPls0XSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vZ2l0 aHViLmNvbS9wYW52YS9qb3NlL2Jsb2IvbWFzdGVyL2xpYi9qd2sva2V5L2VjLmpzI0wyMi1MMjMi Pmh0dHBzOi8vZ2l0aHViLmNvbS9wYW52YS9qb3NlL2Jsb2IvbWFzdGVyL2xpYi9qd2sva2V5L2Vj LmpzI0wyMi1MMjM8L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0i RU4tVVMiPls1XSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9yZWxvY2F0ZWx5L2Vj LWtleSI+aHR0cHM6Ly9naXRodWIuY29tL3JlbG9jYXRlbHkvZWMta2V5PC9hPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+QXMgbWVudGlvbmVkIGluIHRoZSBJ RVRGIDEwNCBtZWV0aW5nIG9uIFR1ZXNkYXkgdGhlIG90aGVyIGVuY291bnRlcmVkIG5hbWluZyBv ZiB0aGlzIGlzICZxdW90O0stMjU2JnF1b3Q7IGJ1dCB0aGVyZSdzIGNvbnNpZGVyYWJseSBsZXNz IGhpdHMgc2VhcmNoaW5nIGZvciBpbXBsZW1lbnRhdGlvbnMgdXNpbmcgdGhhdCBvbmUuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5JIHVuZGVyc3RhbmQgdGhl IENPU0UgZ3JvdXAgZG9lcyBub3QgKHByb2JhYmx5KSBoYXZlIGV4aXN0aW5nIGltcGxlbWVudGF0 aW9ucyBvZiZuYnNwO3NlY3AyNTZrMSBhbmQgdGhhdCdzIHdoeSB0aGUgbm90aW9uIG9mIGp1c3Qg bmFtaW5nIGl0Jm5ic3A7c2VjcDI1NmsxIHJlc29uYXRlcywgYnV0IG1heWJlIGNvbnNpZGVyIG9u bHkgZG9pbmcgc28gZm9yDQogQ09TRS4gSk9TRSBjb3VsZCB1c2UgbGVzcyBmcmFnbWVudGF0aW9u IGFtb25nc3QgaXRzIGltcGxlbWVudGF0aW9ucyBhbmQgdGhlcmVmb3JlIHN0aWNraW5nIHRvIHRo ZSBtb3N0IGNvbW1vbiBuYW1pbmcgYWxyZWFkeSBpbiB0aGUgd2lsZCB3b3VsZCBiZSB3ZWxjb21l LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIHNhbWUg YXBwbGllcyB0byB0aGUgcHJlc2VudGVkIHF1ZXN0aW9uIGFib3V0DQo8aT5Db21wcmVzc2VkIHZz LiBOb24tY29tcHJlc3NlZCBQb2ludHM8L2k+Jm5ic3A7Zm9yJm5ic3A7c2VjcDI1NmsxLCBpJ2Qg YWR2b2NhdGUgdGhhdCBhdCBsZWFzdCBmb3IgSk9TRSB0aGUgdXNlZCBwb2ludHMgcmVtYWluIGlu LWxpbmUgd2l0aCB3aGF0J3MgYWxyZWFkeSB1c2VkIGluIHdpdGggdGhlIGV4aXN0aW5nIGtleXMg YW5kIGFsZ29yaXRobXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0i RU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBs YW5nPSJFTi1VUyI+QmVzdCw8YnI+DQo8Yj5GaWxpcCBTa29rYW48L2I+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_F18E55B6633647CCAA5A32C6197657D3ericssoncom_-- From nobody Fri Apr 5 01:56:17 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98281120397 for ; Fri, 5 Apr 2019 01:56:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.301 X-Spam-Level: X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uCHoyQNYDupJ for ; Fri, 5 Apr 2019 01:56:13 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4656120391 for ; Fri, 5 Apr 2019 01:56:12 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 45440BE55; Fri, 5 Apr 2019 09:56:09 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aTX348gXcfss; Fri, 5 Apr 2019 09:56:07 +0100 (IST) Received: from [10.244.2.138] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id AB9EABE51; Fri, 5 Apr 2019 09:56:07 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1554454567; bh=2nluuwCIC7w3NLIBMnMMWNsOYAhe9cyCtXLOLXm/mCQ=; h=Subject:To:References:From:Date:In-Reply-To:From; b=k0iYE6Du+V5Xbie6L8hxizoqf2oiZlpOv+j6fb/34O7bSKmQ6Sl9jfaOOwGSKKQXw AdTyBTjxGcB9Nmb+6K39QsUdoQaCDx1TjObX1VglMRfR9t8eDnpyvri+IEtEYcWico 9T2MxjHpe3TWjrvbszyODYwIUatKmaS+MBiMgYMM= To: John Mattsson , Mike Jones , Filip Skokan , "cose@ietf.org" References: <64A280DE-04BF-4443-8ED5-EFF25E38E4C2@gmail.com> From: Stephen Farrell Openpgp: id=5BB5A6EA5765D2C5863CAE275AB2FAF17B172BEA; url= Autocrypt: addr=stephen.farrell@cs.tcd.ie; prefer-encrypt=mutual; keydata= mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nemCP5PMvmh 5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kTq0IqYzsEv5HI58S+ QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtEgvw4fVhVWJuyy3w//0F2tzKr EMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy+pAh4EKzS1FE7BOZp9daMu9MUQmDqtZU bUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqO Vz+7L+WiVfxLbeVqBwV+4uL9to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJg b097ZaNyuY1ETghVB5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k 4LyM2lp5FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9tlyWxn5Xi HzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQABtDJTdGVwaGVuIEZh cnJlbGwgKDIwMTcpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPokCQAQTAQgAKgIbAwUJ CZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAUCWj6jdwIZAQAKCRBasvrxexcr6o7QD/9m x9DPJetmW794RXmNTrbTJ44zc/tJbcLdRBh0KBn9OW/EaAqjDmgNJeCMyJTKr1ywaps8HGUN hLEVkc14NUpgi4/Zkrbi3DmTp25OHj6wXBS5qVMyVynTMEIjOfeFFyxG+48od+Xn7qg6LT7G rHeNf+z/r0v9+8eZ1Ip63kshQDGhhpmRMKu4Ws9ZvTW2ACXkkTFaSGYJj3yIP4R6IgwBYGMz DXFX6nS4LA1s3pcPNxOgrvCyb60AiJZTLcOk/rRrpZtXB1XQc23ZZmrlTkl2HaThL6w3YKdi Ti1NbuMeOxZqtXcUshII45sANm4HuWNTiRh93Bn5bN6ddjgsaXEZBKUBuUaPBl7gQiQJcAlS 3MmGgVS4ZoX8+VaPGpXdQVFyBMRFlOKOC5XJESt7wY0RE2C8PFm+5eywSO/P1fkl9whkMgml 3OEuIQiP2ehRt/HVLMHkoM9CPQ7t6UwdrXrvX+vBZykav8x9U9M6KTgfsXytxUl6Vx5lPMLi 2/Jrsz6Mzh/IVZa3xjhq1OLFSI/tT2ji4FkJDQbO+yYUDhcuqfakDmtWLMxecZsY6O58A/95 8Qni6Xeq+Nh7zJ7wNcQOMoDGj+24di2TX1cKLzdDMWFaWzlNP5dB5VMwS9Wqj1Z6TzKjGjru q8soqohwb2CK9B3wzFg0Bs1iBI+2RuFnxLkCDQRaPVAyARAA+g3R0HzGr/Dl34Y07XqGqzq5 SU0nXIu9u8Ynsxj7gR5qb3HgUWYEWrHW2jHOByXnvkffucf5yzwrsvw8Q8iI8CFHiTYHPpey 4yPVn6R0w/FOMcY70eTIu/k6EEFDlDbs09DtKcrsT9bmN0XoRxITlXwWTufYqUnmS+YkAuk+ TLCtUin7OdaS2uU6Ata3PLQSeM2ZsUQMmYmHPwB9rmf+q2I005AJ9Q1SPQ2KNg/8xOGxo13S VuaSqYRQdpV93RuCOzg4vuXtR+gP0KQrus/P2ZCEPvU9cXF/2MIhXgOz207lv3iE2zGyNXld /n8spvWk+0bH5Zqd9Wcba/rGcBhmX9NKKDARZqjkv/zVEP1X97w1HsNYeUFNcg2lk9zQKb4v l1jx/Uz8ukzH2QNhU4R39dbF/4AwWuSVkGW6bTxHJqGs6YimbfdQqxTzmqFwz3JP0OtXX5q/ 6D4pHwcmJwEiDNzsBLl6skPSQ0Xyq3pua/qAP8MVm+YxCxJQITqZ8qjDLzoe7s9X6FLLC/DA L9kxl5saVSfDbuI3usH/emdtn0NA9/M7nfgih92zD92sl1yQXHT6BDa8xW1j+RU4P+E0wyd7 zgB2UeYgrp2IIcfG+xX2uFG5MJQ/nYfBoiALb0+dQHNHDtFnNGY3Oe8z1M9c5aDG3/s29QbJ +w7hEKKo9YMAEQEAAYkCJQQYAQgADwUCWj1QMgIbDAUJCZQmAAAKCRBasvrxexcr6qwvD/9b Rek3kfN8Q+jGrKl8qwY8HC5s4mhdDJZI/JP2FImf5J2+d5/e8UJ4fcsT79E0/FqX3Z9wZr6h sofPqLh1/YzDsYkZDHTYSGrlWGP/I5kXwUmFnBZHzM3WGrL3S7ZmCYMdudhykxXXjq7M6Do1 oxM8JofrXGtwBTLv5wfvvygJouVCVe87Ge7mCeY5vey1eUi4zSSF1zPpR6gg64w2g4TXM5qt SwkZVOv1g475LsGlYWRuJV8TA67yp1zJI7HkNqCo8KyHX0DPOh9c+Sd9ZX4aqKfqH9HIpnCL AYEgj7vofeix7gM3kQQmwynqq32bQGQBrKJEYp2vfeO30VsVx4dzuuiC5lyjUccVmw5D72J0 FlGrfEm0kw6D1qwyBg0SAMqamKN6XDdjhNAtXIaoA2UMZK/vZGGUKbqTgDdk0fnzOyb2zvXK CiPFKqIPAqKaDHg0JHdGI3KpQdRNLLzgx083EqEc6IAwWA6jSz+6lZDV6XDgF0lYqAYIkg3+ 6OUXUv6plMlwSHquiOc/MQXHfgUP5//Ra5JuiuyCj954FD+MBKIj8eWROfnzyEnBplVHGSDI ZLzL3pvV14dcsoajdeIH45i8DxnVm64BvEFHtLNlnliMrLOrk4shfmWyUqNlzilXN2BTFVFH 4MrnagFdcFnWYp1JPh96ZKjiqBwMv/H0kw== Message-ID: <0a0af734-26c3-3af7-5765-e692d1a64713@cs.tcd.ie> Date: Fri, 5 Apr 2019 09:56:07 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Khba5HnK7gQkH4uLVtGX9R2dI1b2MGsjG" Archived-At: Subject: Re: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Apr 2019 08:56:16 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Khba5HnK7gQkH4uLVtGX9R2dI1b2MGsjG Content-Type: multipart/mixed; boundary="sQOAvB3OPN8HLQoZKshsxNcdGG8muetDK"; protected-headers="v1" From: Stephen Farrell To: John Mattsson , Mike Jones , Filip Skokan , "cose@ietf.org" Message-ID: <0a0af734-26c3-3af7-5765-e692d1a64713@cs.tcd.ie> Subject: Re: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms References: <64A280DE-04BF-4443-8ED5-EFF25E38E4C2@gmail.com> In-Reply-To: --sQOAvB3OPN8HLQoZKshsxNcdGG8muetDK Content-Type: multipart/mixed; boundary="------------B0241EE73D4C230CCD5EA998" Content-Language: en-GB This is a multi-part message in MIME format. --------------B0241EE73D4C230CCD5EA998 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 05/04/2019 09:49, John Mattsson wrote: > Given the recent IETF fury about ITU naming a protocol eTLS,=20 That was ETSI not ITU. There wasn't fury that I saw, more like irritation that ETSI would clone an IETF protocol, damage a major feature (adding highly imperfect forward secrecy ala draft-green) so as to enable eavesdropping and then name the result confusingly. Perhaps fury would've been more appropriate though, dealing with such muppetry;-) S. --------------B0241EE73D4C230CCD5EA998 Content-Type: application/pgp-keys; name="0x5AB2FAF17B172BEA.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x5AB2FAF17B172BEA.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nem CP5PMvmh5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kT q0IqYzsEv5HI58S+QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtE gvw4fVhVWJuyy3w//0F2tzKrEMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy +pAh4EKzS1FE7BOZp9daMu9MUQmDqtZUbUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5 iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqOVz+7L+WiVfxLbeVqBwV+4uL9 to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJgb097ZaNyuY1ETghV B5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k4LyM2lp5 FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9t lyWxn5XiHzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQAB tCFTdGVwaGVuIEZhcnJlbGwgPHN0ZXBoZW5AamVsbC5pZT6JAj0EEwEIACcFAlo9 UYwCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQWrL68XsXK+qG CxAApYHWYgGOIL3G6/OpkejdAkQoCVQAK8LJUSf6vzwost4iVfxIKcKW/3RqKNKk rRl8beJ7j1CWXAz9+VXAOsE9+zNxXIDgGA7HlvJnhffl+qwibVgiHgUcJFhCSbBr sjC+1uULaTU8zYEyET//GOGPLF+X+degkE/sesh4zcEAjF7fGPnlncdCCH3tvPZZ sdTcjwOCRVonKsDgQzBTCMz/RPBfEFX44HZx4g1UQAcCA4xlucY8QkJEyCrSNGpG nvGK8DcGSmnstl1/a9fnlhpdFxieX3oY2phJ1WKkYTn6Advrek3UP71CKxpgtPmk d3iUUz/VZa0Cv6YxQXskspRDVEvdCMYSQBtJPQ4y2+5UxVR9GIQXenwYp9AP2niv Voh+ITsDWWeWnnvYMq07rSDjq0nGdj41MJkNX+Yb2PXVyXItcj5ybE3T2+y3pSBG FEZYJGuaL4NwtBJFMOdOtBmUOPbetS2971EL3Izxb7ibOZWDwexv+8R6SWYfP1wV N3p46RyBQuXqJV8ccE11m6vtZTGSYgnLUUFZMRQYH+0hwuYe0T3AA18xDdSYsa8v ovCCd3l5S4UNzIM2PMChqGrEzKapUpZg7+8ACcxRU3b9Ihd7WYjJ+pQPCoWYKozv tEvenbNpE/govO/ED3B14e+R2yevRPjRrsN7PJzSf15fQLuJARwEEAEIAAYFAlo9 UqAACgkQLzyHNoBfjaLrSwf+MIHbFRQ4O5cmLYR5sIByWelN3SuRN/gW8rpKo9Ok Cz6An8uV/iCXy5tNMLzzi0BFl8f22DwBcC5qy9qnlIAdogWam1qWoTAoAD8veEqm uKhYrqJsCcAyNrKYmK0hP3rpHxx1LySDmKYXmw/8qtBXKHTouMm+5tSsznhykRMT AAr2p7PSaHgo+hIVaW/rKSspHjDhhZS+G9mtOZad1IH29M6G1Q1NCO0Ywe8krKLQ IAQlFxtgvOqpPOZNzeKBa/+KbE8TGgMWrkOhC8OeEM5PVzdDhlhD9kPzB/pCKDF5 DofJ/ZRqnDpbKPQ0bsW38AOig3kOc0A27awiBEw3urqR1YkCMwQQAQgAHRYhBH4X CgRchM9GDit5oBDvedn9g1MSBQJbtyScAAoJEBDvedn9g1MSI/oP/0A9J9nrnBMq Zpm857lfYWw+rshLK+tyeP4OQeOqnDFvs9jePpcyJLG3DF2r6VbVKPQq+AE6Uf5h cJBDEN6BjEhRPSbLcqG3A1cz/nNwm8rPmNp+oKhmaBBQGxwciMLmzgynsDydnjPp MyEs04zvsbsl4vrp2095o105l8KcrrxQrioFjbwveGwHQK9bxJKhx9D+gIk+MouB ur45UDKTZkMZrr9FGrtkyXCGAxvKdcNC5Oa8z9sj1rcUJfG/OpVAMWhArdlZbFUQ yoX6pU2Zb1CR2qpWAVerGSfBhmfCyStjARqaKxlftjO+Bj3Jj73Cr5eqej3qB5+V 4BCsPjr4RLvVbYUCPsRdxWc+nBLlfVYkRURu21g1hFm5KFPjgUkyo1s4vjUOY8Dy I+xLGF7f/IhUBG6l+Vswhpwu7ydalZkeFiPx5xna5NfbEYxvsIf71DvipGvIOaHv X4egWoFgm8n/9c3rcMxJtpwHPSsUt5dgLsyu6VE0IbvOAc3dN7CWJ355DVFJq9Zg 2YVf0izSpyyzJeGsgkfjW6xpmdvZxuT2UcN4BTcm6vYqueASGrb3lfhzC5gpeVsc /MoSjTS65vNWbpzONZWMZuLEFraxWJzC0JrDK3NCd0VN3kstqGkVbUIiYOnUm8Vu 4zoVMLlGWzHLIGoPRG2nRezn1YyNfyb5iQGcBBABCgAGBQJbxcflAAoJEGo7ETk8 pK1gE7QL/ApC5P68W5DrI1787WJVZv1u4t/g39vTr7Xer3UMTVQg10vpa7pmqOGh jIDzDMg3Pe3K3M7fVzfAlUA1qw6ne4RCueVoRKpubeF4AlYbMr0K6hNCPjt5uAxm bBVuejKTc6pru5rv5gKL0nDbr+Snft5xt7juBLSSimw0/41sZnkjCxo9rF/RA/v6 +uWyK171RKmsEYu8fFtw1eqUNt/Xj792TUixE3pxXheNtQtZGk/9P3W83ChhG4Fh 5EQsn0pIh9wZIAbMRLpgRKyW87fWHZC8/YH8h7afarvn9Thl5pFUldCe22mNJj6K LChn2aEHQd+PdY1GBpZEcmNEUPuovwzatM0h64hCzTm41eDqRfihZVBT7TbfXQnv 8rywa42Mk756RGzzEZcQEhwQXZcMQUfxIQQ2VyJo0zG36VdZTQF7TF/4Lz7/3cJ5 6jOIm+dwPXtu+C2wAQuD4USOLt4JWPYpqzDfHYJIND/497P9Z9SuQeahr2ez3DRB g3qsHEjBV7QyU3RlcGhlbiBGYXJyZWxsICgyMDE3KSA8c3RlcGhlbi5mYXJyZWxs QGNzLnRjZC5pZT6JAkAEEwEIACoCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwEC HgECF4AFAlo+o3cCGQEACgkQWrL68XsXK+qO0A//ZsfQzyXrZlu/eEV5jU620yeO M3P7SW3C3UQYdCgZ/TlvxGgKow5oDSXgjMiUyq9csGqbPBxlDYSxFZHNeDVKYIuP 2ZK24tw5k6duTh4+sFwUualTMlcp0zBCIzn3hRcsRvuPKHfl5+6oOi0+xqx3jX/s /69L/fvHmdSKet5LIUAxoYaZkTCruFrPWb01tgAl5JExWkhmCY98iD+EeiIMAWBj Mw1xV+p0uCwNbN6XDzcToK7wsm+tAIiWUy3DpP60a6WbVwdV0HNt2WZq5U5Jdh2k 4S+sN2CnYk4tTW7jHjsWarV3FLISCOObADZuB7ljU4kYfdwZ+WzenXY4LGlxGQSl AblGjwZe4EIkCXAJUtzJhoFUuGaF/PlWjxqV3UFRcgTERZTijguVyREre8GNERNg vDxZvuXssEjvz9X5JfcIZDIJpdzhLiEIj9noUbfx1SzB5KDPQj0O7elMHa1671/r wWcpGr/MfVPTOik4H7F8rcVJelceZTzC4tvya7M+jM4fyFWWt8Y4atTixUiP7U9o 4uBZCQ0GzvsmFA4XLqn2pA5rVizMXnGbGOjufAP/efEJ4ul3qvjYe8ye8DXEDjKA xo/tuHYtk19XCi83QzFhWls5TT+XQeVTMEvVqo9Wek8yoxo67qvLKKqIcG9givQd 8MxYNAbNYgSPtkbhZ8SJARwEEAEIAAYFAlo9UqAACgkQLzyHNoBfjaLzHAgAlWT6 NXEGtw/r1miKNGcopzvzILQ9oB8rKI9U9EL6tOf/y2V5oYee/GyQDb3ZdoPxxYYc Jf+RyiH1nMoqUIZiZJaf3bJXinDZ5+AdfE++UR2NBvqaNyC6u3r24jo1B/sagKbY tWgsYtRqHLD4IWi37MZrVyjBuF7u14Q07+uhjq6mX2O/tHpCYw/Q82tbeTRPyUf1 WQOAfD1kfBpW9PvAva5Iw9FWeXpCXRzwxnCZhYfGfqtuSw6CPBYLdbikqML6FZ7E DuTBb/8um1wK7Y9bgeIQC+CYjhYB5RXa1tDJRab2Js4luCvSR0w/CgHw26293tlv e2Q6UTrmHxP5U22DlokCPQQTAQgAJwUCWj1QMgIbAwUJCZQmAAULCQgHAgYVCAkK CwIEFgIDAQIeAQIXgAAKCRBasvrxexcr6tJpD/4rrILH+meP07vrx8wW5eYuqCiP GYnh/CXxIF8eLrfbe5d4QRgtq+w6UeQPMyzKRIRiCoBXB2oJLBZHyxBPxZlg33dT MrEGn8QWKx2iNuz9rZMXyOSWFetuO01d/aUPd5BnbLbIyK5of8xCQlXM6KH8bc+9 gQ7edR9mfLTdvBf2FR522hg8BRBM1imKc3vO8v39+qIHHRjuiwxBBCAOhHtHRsZX ripS0uFA07dM46Oi/E8osjx6fQt/lH5z/PN+2adxYSrLSAXfr1oD3RxYNhuWgyGF L64/VCQb1YGjf0Z5MBPnWm9jgUoOY5K9eNSS0L83WeJjlF5+Q/WOgB+rb49Prm2D Feo9+S9f2V53Llz1WIspXJg6f+n9lmHE94MfQj1GAHCzI0FeL19lvM+LhD8jJSCb hrC3+yobyy/AUOs5Z3E+njjX1FF/VCVAs6iOa6i+XG+Y1hh3ir2y1kckJ5auT10M SU8GEZu9ayU4M3o3N9yxOjaoP0NuQ4MMLL/n/u4u94AeZaHPNBXn/hVfVRRmpRXt GKvJtFAEppGEYezB+bLKIm6XlpPkhnwYzleLZ7AMEco2C6QM8QPB3g3JpS3sqRhA 5rEP4lL16BmijmF+CHoPE/zwgKZbKpyVDqvIW5IDgvfIC2X4pbZDRvGIUKaGSB4+ ksZgUUnNyvfQr2p7jokCMwQQAQgAHRYhBH4XCgRchM9GDit5oBDvedn9g1MSBQJb tySbAAoJEBDvedn9g1MSeKkQAJm44jt1kwHgQgeDBKdjdvl0AjE0xVEQxriZ6lP/ l//34YT0auFfzsYIrChSpQXAEtobBAr4Ohw1Us+BZe+H5P8vm6LRuPwozC3SjwfX 4Iec8+9ot6tIVg4sbedDSgb/CCFVjsmIGcQ1P73JLJTBJ6mxYCV/gn3QC6bwDOFo 7kD9FDHCjRN8XfhHQ4Q9cYyt06uF31qG/aumgWYC9geCGgAwiHgwxNYb9GoJ0iZj CROwbYvLTcQgsVUW2bTmsVR13UVKDsdl02sRV7qcVYW6R0a3Ra8KudX+nt25H5DR Gd382KZ5W8pydsy/viTvD9z6v0ulChBYxAedIvGIClrhbxlLEPmIg4ImVOLGqsUg Vm32J95WOjEkk4PEZ12xSDBtwhSJqmJNboWlfmw43KdIbY8zNhffIO3N6O7FsdGx mqyHeLoTpqY+ySVUPpbuyW8ujnI/J//+6hdTZ9dQsEJQlWngKuWOQ5ma58MPSN88 zllsqhZAFQjNxqnkSzL6ZQ+v/jvuRRe16B80AeO55DsmbWsMv/YLLD1mSi7+Khy2 EtMBhgojWwrGMvdLN6X3mnzNJEscYyLxM9tSk+iySP2sLthK0BVgpAzBSdaf/ezI z60P+neHDzteNFf8Mn7lmgYk1amvZoJ29s5+n2HwxyRL5dVMyMdyQmntubbctfqr Z0tIiQGcBBABCgAGBQJbxcflAAoJEGo7ETk8pK1gnCYMAJY4FeIYjlIXGghFWzsB 4fYwK1+iaFpU3fSto5qcrqVtVPjXpwqczqBWeXGyQxiB0kan4OVAXydIeaP8EAuF CA7paP3s9STLJBO3KurkwyRkPW5zo0X7xVqaVToRsX2Ul98KVJoHYQD1KdezEtwl vpNwiiBr42AYR751Vm6JBVAbQXuFpB3c8bUV0OkkRxNFtL8/2PieHar58n5dntGk bPlPkztahsFqktgacIgXHX5vaT+7YeeZ1DWLOYjGO0wNhkOSeroCmxwJUikU7joB p823L7r5KfpqWTPpSCzVstQKZUGmmoE1qCswY/Ud5wvp9SccpIILkRXj0rZRtfnE 5MpL3hjmtNzfDd9qIsJtBJlSB2hZwAsVm1l+EWN9hG3tqyA43niUMy2n6q690of3 berSiQ+kvY/aC9Hx8I+bKzOV9/J2VUTqfaPZa4Uy2rVX5Q2p69n/PMj7mEer0rCL 3j9V16J9c+s0BSkXoKdtYdB0TWVhBgUybd9qtYcwHWvhP7QuU3RlcGhlbiBGYXJy ZWxsIDxzdGVwaGVuQHRvbGVyYW50bmV0d29ya3MuY29tPokCPQQTAQgAJwUCWj1R WgIbAwUJCZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBasvrxexcr6jsc EADEcB0WQEZn2AkrzDs1RhL0Lp6cZi0BigofkbcGfdhJyMSs19C0dhvncrAFClVI 6/Udw3yFtDyYtOCf2W3M3A1K6/RfEizCLzTsdFIhni9gOJLlUpXViQtgrlstjk7h qVV3Ooz4BlCqS4cG7rfqf4LQQPpTAuFUEV9I28FBUB2irqC+v4gTysIgpMw0bA1y BU9sX5jE/tRkzqnuzZrkwiobDtRFJ9qp+7O2JtcY4EsVtLAsaodJKc5cF8R4OvB1 n66vxxcgg9Eh4JNWZ47xsaCmAGo1Bcb2jIY35OtgAL7gCGLRSMKTtAaPy1/fEgIq hCljJ9x40Fkn/3r2BX21WC9HFSPFTBz2RluLRzxdgxOrkYK8EiHUPoE5b1AEzZKw 2AbeXfr57f5zYsN3IqfbQLUjMYtUN1wK3Pjb+idD972wyXMWt8uOzlI7b9Ocu+nY m2whBfJv9Pmp3QYTmPz+LB9lH65VNVUSxSXVr5iWXO3qx1HtEiGEqkporMQCTh3T 5Ud3PvMSRBFFKNs9WhJ/Lxz+SV30WLwG6dr5mQqlzAhb4Phc/zekZyXRdS/oDKrB LUucS36O//49JeyRi1QvOfxnfmIqRIAf/k3PoYJmTo5E82//r5Qj3YGlRu78ba0H Arxs+ACD6AnEHHcbswpbtVEKYzlSu0Ar0Dc7vRWM/IyQdIkBHAQQAQgABgUCWj1S oAAKCRAvPIc2gF+NosIsB/9f/29FNla3BJfGIEIDnhrqGD0i9bSa89SqBd++uG06 TQgW5wsqtNcrwn81yZTq6XE6i9VtD4GKfqC0d4KZJr9bnbeD81cI64VOdL8zJWJs 0vj5EIXCobKyX74Kb4uePUyZqwT2Q74I116u/HwA9/FXsPo5isbh4ZqD4t0VHpWk mfq1FPT9a/JPyX46qKqB2Fce/7Qy+SQP1NfkuUlbhUH/JG9aSSYvk3lznNiH41x9 M+FDlL106itXOubrl3oi2fT3fsSedq7uzt+IV0DQEeNaoQAUuwEhdB8IWOMqN2wo DjGVKJftfsSWY9ilZrnDBNDrp0vRqcx33LUMkIw4d7iBiQIzBBABCAAdFiEEfhcK BFyEz0YOK3mgEO952f2DUxIFAlu3JJwACgkQEO952f2DUxJjuw/6ApHSsVTWD4a0 H6FJ23A9Ftpy+aXZ4vYlzkSrfsn2ECrEfK3lXQh/uzwjJUDYZeB1/BQsFZtcYNQO JSSHbQ49BFRLwb1J/wBZG4bbmrkLxnNbKDKQvzxEpclkMW0Dj0J6o7kGrmzIGGrh B+JJN99AcineHRug8ZSFIERRCmigxdhAKU0BFD7P+5HNHltSL3DF1c2fFOf2JrgB KVoE+9RhMZjWNbYetFFLCkjXb5Rpay9zeMm1DxfSTGAnuOwUXW6qq4hnl5+VC/48 ceDZElLLfu7RQUZv44pkSTOWZs+iQoJiHMFHk9wPqyB2Vok1yJ2a2j27WhXrJlPw nZbgJO5RyWDG3p/eVmpl5Uuc2dsfIpR17KnAuWpghK6V+cyFncDoGCl/YG2Mvool sW08FiZh3Ej4dnJjj25TZkeFG74JJDXLvMYpJfSBGnmETv4Dhcm2xPqVMuFuL1qJ lMbVLrMo2GXeo03OzNyvbs+u8WLIaGm5hC7N1CXY8wZs4jo6OJ/expvnc07dEuws 4zT3AiWv3nIouWReRStZy9QkavDocqbyPmilcdPCYk4BsOlzpwwO74hNG7iyl0Kd AlwTxGQ7y0rJou6HYa1TmRhIEr3vKvlW+JfUUrqtjXgsuacTXo4+Ira2JUErL2cY zQMq1j4r1ZyhFnuz93s7Rsx/Nw0+0YuJAZwEEAEKAAYFAlvFx+UACgkQajsROTyk rWCJqwv+NLVPE4sD4sDA2/6Ek7UsRIUkg+S39fhqWsLc4rtw/mDunv8Un61I3K04 fZ2Ry4nF9hZM0a710UvXFbStvrzRJO3EAAcdJR9LTCd19e8UeruQbIee3YT91U4N kC9JMpecfq62/teOAU2e5P3fWYaLs5ZX7zCLwWuBcW2l3SyoljQczM85HhJ3XHm+ FnwQ6D9xRle+lvWTcuC9d1yAyUb8IOospcL2lJTmy8e3r79R24hPlSB4LDe0wEN8 AXbagrcAQZjwyaHyWxjJbTwZ0b43WGdfIqZ1ElOeoffbketPGRmWvx5xUvb2ALFB BdETzV270gs5XDJgJ1SIIKOyDADxwvroTe2jD8C/841eEql5QSow3s/U3zRqk3mt tto8Qw/DN71aeh6dmYSsvd2UjsHw/vofOPRBGxZLEkKTEvMnhmMW9hiKPkPia+Qg evYE020qpKSxLEdWA8nprHwxmGiDNesCfXSC6vm1qfyj5g8HzxSckq9ZaMhKMCo7 vxflUEDuuQINBFo9UDIBEAD6DdHQfMav8OXfhjTteoarOrlJTSdci727xiezGPuB HmpvceBRZgRasdbaMc4HJee+R9+5x/nLPCuy/DxDyIjwIUeJNgc+l7LjI9WfpHTD 8U4xxjvR5Mi7+ToQQUOUNuzT0O0pyuxP1uY3RehHEhOVfBZO59ipSeZL5iQC6T5M sK1SKfs51pLa5ToC1rc8tBJ4zZmxRAyZiYc/AH2uZ/6rYjTTkAn1DVI9DYo2D/zE 4bGjXdJW5pKphFB2lX3dG4I7ODi+5e1H6A/QpCu6z8/ZkIQ+9T1xcX/YwiFeA7Pb TuW/eITbMbI1eV3+fyym9aT7Rsflmp31Zxtr+sZwGGZf00ooMBFmqOS//NUQ/Vf3 vDUew1h5QU1yDaWT3NApvi+XWPH9TPy6TMfZA2FThHf11sX/gDBa5JWQZbptPEcm oazpiKZt91CrFPOaoXDPck/Q61dfmr/oPikfByYnASIM3OwEuXqyQ9JDRfKrem5r +oA/wxWb5jELElAhOpnyqMMvOh7uz1foUssL8MAv2TGXmxpVJ8Nu4je6wf96Z22f Q0D38zud+CKH3bMP3ayXXJBcdPoENrzFbWP5FTg/4TTDJ3vOAHZR5iCunYghx8b7 Ffa4UbkwlD+dh8GiIAtvT51Ac0cO0Wc0Zjc57zPUz1zloMbf+zb1Bsn7DuEQoqj1 gwARAQABiQIlBBgBCAAPBQJaPVAyAhsMBQkJlCYAAAoJEFqy+vF7FyvqrC8P/1tF 6TeR83xD6MasqXyrBjwcLmziaF0Mlkj8k/YUiZ/knb53n97xQnh9yxPv0TT8Wpfd n3BmvqGyh8+ouHX9jMOxiRkMdNhIauVYY/8jmRfBSYWcFkfMzdYasvdLtmYJgx25 2HKTFdeOrszoOjWjEzwmh+tca3AFMu/nB++/KAmi5UJV7zsZ7uYJ5jm97LV5SLjN JIXXM+lHqCDrjDaDhNczmq1LCRlU6/WDjvkuwaVhZG4lXxMDrvKnXMkjseQ2oKjw rIdfQM86H1z5J31lfhqop+of0cimcIsBgSCPu+h96LHuAzeRBCbDKeqrfZtAZAGs okRina9947fRWxXHh3O66ILmXKNRxxWbDkPvYnQWUat8SbSTDoPWrDIGDRIAypqY o3pcN2OE0C1chqgDZQxkr+9kYZQpupOAN2TR+fM7JvbO9coKI8Uqog8CopoMeDQk d0YjcqlB1E0svODHTzcSoRzogDBYDqNLP7qVkNXpcOAXSVioBgiSDf7o5RdS/qmU yXBIeq6I5z8xBcd+BQ/n/9Frkm6K7IKP3ngUP4wEoiPx5ZE5+fPIScGmVUcZIMhk vMvem9XXh1yyhqN14gfjmLwPGdWbrgG8QUe0s2WeWIyss6uTiyF+ZbJSo2XOKVc3 YFMVUUfgyudqAV1wWdZinUk+H3pkqOKoHAy/8fST =3DYzQY -----END PGP PUBLIC KEY BLOCK----- --------------B0241EE73D4C230CCD5EA998-- --sQOAvB3OPN8HLQoZKshsxNcdGG8muetDK-- --Khba5HnK7gQkH4uLVtGX9R2dI1b2MGsjG Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEW7Wm6ldl0sWGPK4nWrL68XsXK+oFAlynGCcACgkQWrL68XsX K+qCoA//aGDjk234aj6kcKCnyxJXHML0tvEfMtfKJeAsPXHA8keVupVRhergS8nK HQDJrWNHILcgNqLjriEhjHUJHs0OFCvekiyez36UksnLtXS2n0ekM64EdWbl1lgY UvLQea95yFI0JwvFzP0XUz30qj+vGPm8Wx7bIV/VbnOiZx6e2nDIGc113Tct4VsZ NZHscMSb3vEGiE6Sm72AGKILnC6D5jZZ6YK1TaXuk+uJSMew1J4ZgN/ke0rRbPdh DoxJs6vP3d9AaE4tJ9Zj/b33EQrf+XlDc/pQ444V2KotX4SZ9CUMMDyeqzMokt/i +ENDeOn5ng0RMT073sGE+rUuREUW+6i5N/t+3uphsM2ocYrv4zUC+6JgDhoILS7a Ftlz93ABFpcL8SudPYa4t8gQIggXXNWHLbhZBDYfg3M8vOnH2uSwO1b1kT5TUHXM 1q1fBLBrkwQW0uKwwZGoZ0H7WJ3rQu5fay9QHHMinjJ/8E+xDHp2fQRYDZ2Yqvuk wHe/BAXO1NmyNCgltVBb8U29zsJbjdCRqflk4f032GF2hCZQ2K9b1tT1FVOXykb2 x87FZMuUYG446dwRZ5SKyw7lCr/f2sgSNnWozLGOvMPDY/Wwnb2nOIcP+kxtIPGk KlAq/qSl4V2OoYWi/GzSTixZ7fAGZ8V7YJ9q7tvLMslMO2/xzTE= =48ow -----END PGP SIGNATURE----- --Khba5HnK7gQkH4uLVtGX9R2dI1b2MGsjG-- From nobody Fri Apr 5 02:10:11 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64A46120398 for ; Fri, 5 Apr 2019 02:10:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UYMdBkbt0aLo for ; Fri, 5 Apr 2019 02:10:08 -0700 (PDT) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140078.outbound.protection.outlook.com [40.107.14.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4080C1201BE for ; Fri, 5 Apr 2019 02:10:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GM7TQ1sx36eLHZ03QXY1XJozuJPT9jPByphrRu2mdRM=; b=P1DD+qmfINgD8KuA+WFTVnBgR3lpp33y8EzlZUNSPxZNljEfCwXYRnVIpXYorVAHVHYPNuZIDk4KvK+wXvty4FXFsO2IVOIOgej3TIwvU7KtpmLfzU29Yz/bBVnVq5XgZ1n5CRXtBjyB6JE7qdy84lx9X2rMmm803TGc9SX65DY= Received: from VI1PR07MB4175.eurprd07.prod.outlook.com (20.176.6.24) by VI1PR07MB4926.eurprd07.prod.outlook.com (20.177.63.224) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.9; Fri, 5 Apr 2019 09:10:05 +0000 Received: from VI1PR07MB4175.eurprd07.prod.outlook.com ([fe80::6df6:7394:f531:2436]) by VI1PR07MB4175.eurprd07.prod.outlook.com ([fe80::6df6:7394:f531:2436%2]) with mapi id 15.20.1771.011; Fri, 5 Apr 2019 09:10:05 +0000 From: John Mattsson To: Stephen Farrell , Mike Jones , Filip Skokan , "cose@ietf.org" Thread-Topic: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms Thread-Index: AQHU5J9fhf9NombN+UazBa6AtljwbKYsckiAgAD+2gD//+BvgIAAJW0A Date: Fri, 5 Apr 2019 09:10:05 +0000 Message-ID: References: <64A280DE-04BF-4443-8ED5-EFF25E38E4C2@gmail.com> <0a0af734-26c3-3af7-5765-e692d1a64713@cs.tcd.ie> In-Reply-To: <0a0af734-26c3-3af7-5765-e692d1a64713@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.17.1.190326 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [192.176.1.85] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e0809c93-0f6a-424f-ba11-08d6b9a67e64 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600139)(711020)(4605104)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:VI1PR07MB4926; x-ms-traffictypediagnostic: VI1PR07MB4926: x-microsoft-antispam-prvs: x-forefront-prvs: 0998671D02 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(396003)(136003)(39860400002)(346002)(366004)(189003)(199004)(13464003)(6246003)(6486002)(53936002)(105586002)(229853002)(86362001)(2501003)(8676002)(76176011)(110136005)(58126008)(6436002)(6116002)(316002)(93886005)(81166006)(99286004)(106356001)(256004)(8936002)(14454004)(3846002)(446003)(71190400001)(2616005)(53546011)(33656002)(6506007)(186003)(2906002)(476003)(7736002)(44832011)(26005)(71200400001)(11346002)(5660300002)(83716004)(296002)(81156014)(102836004)(486006)(478600001)(6512007)(305945005)(66066001)(36756003)(68736007)(25786009)(4744005)(82746002)(97736004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB4926; H:VI1PR07MB4175.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: b03IrTgMhCfPQ+B+LPnysSzI0RUsG4phPLO8Qh71Y4p6z6cpTsiUfxnOz9ifbXVl1a2uKg2aMqVKxkYD3RXmI3gxLFAAnT65nw0mH/vLe43igeaeS0QYkuxEJ0LZWbZZYll1DL9sNJXICvFA5RQzJJvlYvj6YlF4ImxfeAe0UV0Qs2ix489zqvdNkj2s07MAEAl45JwfVyrhDnAqIHETsGsFcpowgfUma78fY+EPldT5w0pcs+S/iJciBWu2Ir79v9wq5Lu/gGg7GBhXYMdta+c6p2DqyYayNSEg3iXUazcvjmlPnyXhRGW+k4uRRBYRBfHpxRmVTfO6L3uwSpXRedqZOFehwo5G/ZuB7YfZ3S1v978J1/NC7BjxqXyglGPe6aptLZ/oOmu2UhZ26RnM2vsQYv37a6Vr88u0IRJlmAU= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: e0809c93-0f6a-424f-ba11-08d6b9a67e64 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Apr 2019 09:10:05.5103 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB4926 Archived-At: Subject: Re: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Apr 2019 09:10:11 -0000 DQoNCu+7vy0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBTdGVwaGVuIEZhcnJlbGwg PHN0ZXBoZW4uZmFycmVsbEBjcy50Y2QuaWU+DQpEYXRlOiBGcmlkYXksIDUgQXByaWwgMjAxOSBh dCAxMDo1Ng0KVG86IEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPiwg TWlrZSBKb25lcyA8TWljaGFlbC5Kb25lcz00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc+ LCBGaWxpcCBTa29rYW4gPHBhbnZhLmlwQGdtYWlsLmNvbT4sICJjb3NlQGlldGYub3JnIiA8Y29z ZUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbQ09TRV0gIlAtMjU2SyIgaW4gZHJhZnQtaWV0Zi1j b3NlLXdlYmF1dGhuLWFsZ29yaXRobXMNCg0KICAgIA0KICAgIA0KICAgIE9uIDA1LzA0LzIwMTkg MDk6NDksIEpvaG4gTWF0dHNzb24gd3JvdGU6DQogICAgPiBHaXZlbiB0aGUgcmVjZW50IElFVEYg ZnVyeSBhYm91dCBJVFUgbmFtaW5nIGEgcHJvdG9jb2wgZVRMUywgDQogICAgDQogICAgVGhhdCB3 YXMgRVRTSSBub3QgSVRVLg0KDQpUcnVlLCBteSBmYXVsdC4NCiAgICANCiAgICBUaGVyZSB3YXNu J3QgZnVyeSB0aGF0IEkgc2F3LCBtb3JlIGxpa2UgaXJyaXRhdGlvbiB0aGF0IEVUU0kNCiAgICB3 b3VsZCBjbG9uZSBhbiBJRVRGIHByb3RvY29sLCBkYW1hZ2UgYSBtYWpvciBmZWF0dXJlIChhZGRp bmcNCiAgICBoaWdobHkgaW1wZXJmZWN0IGZvcndhcmQgc2VjcmVjeSBhbGEgZHJhZnQtZ3JlZW4p IHNvIGFzIHRvDQogICAgZW5hYmxlIGVhdmVzZHJvcHBpbmcgYW5kIHRoZW4gbmFtZSB0aGUgcmVz dWx0IGNvbmZ1c2luZ2x5Lg0KDQpJIHRoaW5rIGl0IHdhcyBnb29kIHRoYXQgSUVURiByZWFjdGVk LCBpZiBFVFNJIHdhbnRzIHRvIHN0YW5kYXJkaXplIHNvbWV0aGluZyBsaWtlIHRoaXMsIHRoZXkg c2hvdWxkIGNhbGwgaXQgc29tZXRoaW5nIGVsc2UuDQoNCkFuZCB0byBjbGFyaWZ5LiBUaGUgb25s eSBzaW1pbGFyaXR5IHdpdGggUC0yNTZLIGlzIHRoZSBjb25mdXNpb24gcGFydC4gc2VjcDI1Nmsx IGlzIG5vdCBhIGJhZCBjdXJ2ZSBpbiBhbnkgd2F5Lg0KICAgIA0KICAgIFBlcmhhcHMgZnVyeSB3 b3VsZCd2ZSBiZWVuIG1vcmUgYXBwcm9wcmlhdGUgdGhvdWdoLCBkZWFsaW5nDQogICAgd2l0aCBz dWNoIG11cHBldHJ5Oy0pDQogICAgDQogICAgUy4NCiAgICANCg0K From nobody Fri Apr 5 07:48:14 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CA8A4120457; Fri, 5 Apr 2019 07:48:11 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.94.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <155447569174.13173.4572018046688966002@ietfa.amsl.com> Date: Fri, 05 Apr 2019 07:48:11 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-hash-sig-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Apr 2019 14:48:12 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : Use of the Hash-based Signature Algorithm with CBOR Object Signing and Encryption (COSE) Author : Russ Housley Filename : draft-ietf-cose-hash-sig-02.txt Pages : 21 Date : 2019-04-05 Abstract: This document specifies the conventions for using the HSS/LMS hash- based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is one form of hash-based digital signature; it is described in RFC 8554. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-hash-sig-02 https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-hash-sig-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Apr 5 07:52:06 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CF4912045A for ; Fri, 5 Apr 2019 07:52:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r2tQFWtc98dS for ; Fri, 5 Apr 2019 07:52:00 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EF72120462 for ; Fri, 5 Apr 2019 07:52:00 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 2C39E300AA3 for ; Fri, 5 Apr 2019 10:33:42 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id iDwJeghgbMJ5 for ; Fri, 5 Apr 2019 10:33:40 -0400 (EDT) Received: from [192.168.4.65] (unknown [205.231.58.11]) by mail.smeinc.net (Postfix) with ESMTPSA id 8C5E730055E for ; Fri, 5 Apr 2019 10:33:40 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\)) Date: Fri, 5 Apr 2019 10:51:57 -0400 References: <155447569174.13173.4572018046688966002@ietfa.amsl.com> To: cose In-Reply-To: <155447569174.13173.4572018046688966002@ietfa.amsl.com> Message-Id: <195209BC-8C69-42C6-8272-DFFD5EBE8780@vigilsec.com> X-Mailer: Apple Mail (2.3445.102.3) Archived-At: Subject: Re: [COSE] I-D Action: draft-ietf-cose-hash-sig-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Apr 2019 14:52:03 -0000 These are the things that changed: -- Corrected small errors in -01 to align with most recent version of = draft-mcgrew-hash-sigs (now RFC 8554); -- Addressed comments from Jim Schaad; and -- Included examples from Jim Schaad's implementation. I think the document is now ready for COSE WG Last Call. Russ > On Apr 5, 2019, at 10:48 AM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the CBOR Object Signing and Encryption WG = of the IETF. >=20 > Title : Use of the Hash-based Signature Algorithm = with CBOR Object Signing and Encryption (COSE) > Author : Russ Housley > Filename : draft-ietf-cose-hash-sig-02.txt > Pages : 21 > Date : 2019-04-05 >=20 > Abstract: > This document specifies the conventions for using the HSS/LMS hash- > based signature algorithm with the CBOR Object Signing and = Encryption > (COSE) syntax. The HSS/LMS algorithm is one form of hash-based > digital signature; it is described in RFC 8554. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-cose-hash-sig-02 > https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig-02 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-hash-sig-02 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Apr 5 11:49:49 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22CFD12000F for ; Fri, 5 Apr 2019 11:49:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GsCDTul9-PhF for ; Fri, 5 Apr 2019 11:49:43 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650100.outbound.protection.outlook.com [40.107.65.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E64512008D for ; Fri, 5 Apr 2019 11:49:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=g9QGKVnyeZVL1J7+/QBmV559d/4pIa5pyA798BqMCig=; b=bbnBi7f7Omqep0vKyNK5UkR9z6EAlRqyTvuqYqAAx5YIkEjlJvbCCI3DQEx7pQiqB0hTtWGwzb8dbcyMqb/6GIAc3j8f7pae4UISizcNXc7lccz8ipkeYNcOI4Wr3nDuu3UXkboKOaR9QacThykOotApBZUNq+HLew7ol2BJ4vw= Received: from SN6PR00MB0304.namprd00.prod.outlook.com (52.132.117.158) by SN6PR00MB0415.namprd00.prod.outlook.com (52.132.118.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1817.0; Fri, 5 Apr 2019 18:49:39 +0000 Received: from SN6PR00MB0304.namprd00.prod.outlook.com ([fe80::d017:ba79:6e59:70b]) by SN6PR00MB0304.namprd00.prod.outlook.com ([fe80::d017:ba79:6e59:70b%3]) with mapi id 15.20.1813.000; Fri, 5 Apr 2019 18:49:39 +0000 From: Mike Jones To: John Mattsson , Filip Skokan , "cose@ietf.org" Thread-Topic: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms Thread-Index: AQHU5J9bsQ8/O+HBUkWOsDZ9qRHT/6YscJGQgADfCgCAAKbv4A== Date: Fri, 5 Apr 2019 18:49:39 +0000 Message-ID: References: <64A280DE-04BF-4443-8ED5-EFF25E38E4C2@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=330f0c3a-8a9d-4790-87f2-0000e45053fe; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-04-05T18:46:35-0800; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:8:f8e7:fefd:4332:7dfc] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0d49499b-9c29-4e3a-84d3-08d6b9f77562 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600139)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:SN6PR00MB0415; x-ms-traffictypediagnostic: SN6PR00MB0415: x-ms-exchange-purlcount: 5 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0998671D02 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(346002)(136003)(39860400002)(396003)(51914003)(52314003)(199004)(189003)(110136005)(6436002)(8936002)(8676002)(186003)(446003)(81156014)(81166006)(11346002)(76176011)(606006)(966005)(14454004)(25786009)(74316002)(7736002)(256004)(476003)(486006)(229853002)(22452003)(316002)(21615005)(53546011)(33656002)(6506007)(99286004)(7696005)(71190400001)(102836004)(71200400001)(236005)(97736004)(105586002)(53936002)(106356001)(10290500003)(10090500001)(6246003)(86362001)(9686003)(54896002)(6306002)(66574012)(55016002)(2501003)(5660300002)(52536014)(86612001)(46003)(478600001)(72206003)(6116002)(790700001)(8990500004)(2906002)(68736007); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR00MB0415; H:SN6PR00MB0304.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: wfq8vN0/nHSpRa2QLk0IfRFSBZwfXzW7y3Xk7UARaxLON0576DJ/TS9QAc9rZJwO5NWAAuMjZCem8UiN0UMvpDCIEJxcRLRZfUpvaRYh30WcPLgH2b4xXHOnKCtwOjgWVacf+33G55LfrI1o8scINW5d5PS5TWk2phSO9GLOeLp/PLmboMmFk3Tl2ZBnOvj/vu8Hg/dB5/NHrWNy509zQ6VsyA9s2zw0s4bn5MdEjqbsRwo1FXj5DWIY6Jb3azFy5dtWIymhFbF1U0R5XpUV7neL5B1aBE24iPf/v7BXMARgQP7G8DsPQqbJUo/hb2SwHeytpTHcHGvkPvheVkqSohAkD1DvkrxonFaJGUUtgVqRgXETMoTWMicYL2Pom/cmt+f1D8P+usF4GUVwE6Vn6+9apbtMNguFNw86uqOo+s4= Content-Type: multipart/alternative; boundary="_000_SN6PR00MB030435272BC31431D76122A2F5510SN6PR00MB0304namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0d49499b-9c29-4e3a-84d3-08d6b9f77562 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Apr 2019 18:49:39.6115 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR00MB0415 Archived-At: Subject: Re: [COSE] "P-256K" in draft-ietf-cose-webauthn-algorithms X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Apr 2019 18:49:47 -0000 --_000_SN6PR00MB030435272BC31431D76122A2F5510SN6PR00MB0304namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB0aGUgc3VwZXItdXNlZnVsIGNvbnRleHQsIEpvaG4uICBHaXZlbiB0aGF0IHRo aXMgaXNu4oCZdCBhIE5JU1QgY3VydmUsIGl0IHNlZW1zIHRoYXQgdGhlIOKAnFAt4oCdIG5hbWlu ZyBpcyBtaXNsZWFkaW5nIGFuZCBpdOKAmXMgdW5oZWxwZnVsIHRvIGludHJvZHVjZSBhbm90aGVy IG5hbWUgZm9yIHRoZSBzYW1lIHRoaW5nLiAgSSB0aGVyZWZvcmUgcGxhbiB0byBjaGFuZ2UgdGhl IEpPU0UgY3VydmUgbmFtZSB0byDigJxzZWNwMjU2azHigJ0gaW4gdGhlIG5leHQgZHJhZnQuICBZ ZXMsIGVhcmx5IGltcGxlbWVudGF0aW9ucyB3aWxsIG5lZWQgdG8gY2hhbmdlLCBidXQgSSBzdXNw ZWN0IHRoYXQgd2XigJlkIGhhdmUgdG8gZG8gdGhpcyBkdXJpbmcgSUVURiBvciBJRVNHIHJldmll dyBhbnl3YXksIHNvIHByb2JhYmx5IHRoZSBlYXJsaWVyIHdlIG1ha2UgdGhlIGNoYW5nZSwgdGhl IGJldHRlci4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTogQ09TRSA8Y29zZS1ib3VuY2VzQGll dGYub3JnPiBPbiBCZWhhbGYgT2YgSm9obiBNYXR0c3Nvbg0KU2VudDogRnJpZGF5LCBBcHJpbCA1 LCAyMDE5IDE6NDkgQU0NClRvOiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzPTQwbWljcm9zb2Z0 LmNvbUBkbWFyYy5pZXRmLm9yZz47IEZpbGlwIFNrb2thbiA8cGFudmEuaXBAZ21haWwuY29tPjsg Y29zZUBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtDT1NFXSAiUC0yNTZLIiBpbiBkcmFmdC1pZXRm LWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcw0KDQpIaSwNCg0KR29vZ2xpbmcgZ2l2ZXMgdGhlIGZv bGxvd2luZyByZXN1bHRzOg0KDQoiUC0yNTZLIiAgICAgICAgICAgICBBYm91dCAxIDAxMCByZXN1 bHRzICAgKHdoZXJlIG1vc3QgaGl0cyBhcmUgYWJvdXQgMjU2SyBvciBtZW1vcnkpDQoic2VjcDI1 NmsxIiAgICAgIEFib3V0IDk3IDcwMCByZXN1bHRzDQoNCkkgZGlzbGlrZSAiUC0yNTZLIiBpbiBh bnkgSUVURiBzcGVjaWZpY2F0aW9uIChKT1NFLCBDT1NFLCBldGMuKSBmb3IgdHdvIHJlYXNvbnM6 DQoNCjEuIFRoZSBzaXR1YXRpb24gd2l0aCAzIGRpZmZlcmVudCBTRE9zIGdpdmluZyBkaWZmZXJl bnQgbmFtZXMgdG8gdGhlIHNhbWUgY3VydmVzIGFzIHN1bW1hcml6ZWQgaW4gQXBwZW5kaXggQSBv ZiBSRkMgODQ0MiBpcyBiYWQgZW5vdWdoLiBJRVRGIGRvZXMgbm90IG5lZWQgdG8gbWFrZSB0aGUg c2l0dWF0aW9uIHdvcnNlIGJ5IGFzc2lnbmluZyBhIG5ldyBuYW1lIHRvIHNlY3AyNTZrMS4gVGhy ZWUgY29sdW1ucyBpbiB0aGUgdGFibGUgaXMgbW9yZSB0aGFuIGVub3VnaC4NCg0KMi4gSWYgSUVU RiBuZWVkIHRvIGFzc2lnbiBhIG5ldyBuYW1lIHRvIHNlY3AyNTZrMSBJIHRoaW5rICJQLTI1Nksi IGlzIGEgYmFkIGNob2ljZSBhcyBpdCBnaXZlcyB0aGUgaW1wcmVzc2lvbiB0aGF0IGl0IGlzIGEg Y3VydmUgc3RhbmRhcmRpemVkIGJ5IE5JU1QgKHdoaWNoIGl0IGlzIG5vdCkuIEkgaGF2ZSBhbHJl YWR5IGhlYXJkIGtub3dsZWRnZWFibGUgcGVvcGxlIHRoaW5raW5nIHRoYXQgaXQgaXMgYSBOSVNU IGN1cnZlLiBHaXZlbiB0aGUgcmVjZW50IElFVEYgZnVyeSBhYm91dCBJVFUgbmFtaW5nIGEgcHJv dG9jb2wgZVRMUywgSSB0aGluayBJRVRGIHNob3VsZCByZWZyYWluIGZyb20gdGhpcyB1bmxlc3Mg d2UgZ2V0IG9rIGZyb20gTklTVC4NCg0KSSBoYXZlIG5vIG9iamVjdGlvbnMgdG8gdGhlIGN1cnZl IGl0c2VsZiBvciB0aGUgbmFtZSBFUzI1NksuDQoNCj53aGF0IGlzIHRoZSBtZWFuaW5nIG9mIHRo ZSDigJxQ4oCdIGluIHRoZSBpZGVudGlmaWVycyBmb3IgdGhlIE5JU1QgY3VydmVzIOKAnFAtMjU2 4oCdLCBldGMuPw0KDQpUaGUgUCBpbiBOSVNUIGN1cnZlcyAoUC0yNTYsIFAtMzg0LCBldGMuKSBt ZWFucyBQcmltZQ0KVGhlIEsgaW4gTklTVCBjdXJ2ZXMgKEstMjMzLCBLLTI4MywgZXRjLikgbWVh bnMgS29ibGl0eg0KVGhlIEIgaW4gTklTVCBjdXJ2ZXMgKEItMjMzLCBCLTI4MywgZXRjLikgbWVh bnMgQmluYXJ5DQoNClRoZSByIGluIFNFQ0cgY3VydmVzIChzZWNwMjU2cjEsIHNlY3AzODRyMSkg bWVhbnMgcmFuZG9tDQpUaGUgayBpbiBTRUNHIGN1cnZlcyAoc2VjcDI1NmsxLCBzZWN0MjMzazEp IG1lYW5zIGtvYmxpdHoNClRoZSBwIGluIFNFQ0cgY3VydmVzIChzZWNwMjU2cjEsIHNlY3AyNTZr MSkgbWVhbnMgcHJpbWUNClRoZSB0IGluIFNFQ0cgY3VydmVzIChzZWN0MjMzcjEsIHNlY3QyMzNr MSkgbWVhbnMgdHdvPw0KDQpKb2huDQoNCkZyb206IENPU0UgPGNvc2UtYm91bmNlc0BpZXRmLm9y ZzxtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnPj4gb24gYmVoYWxmIG9mIE1pa2UgSm9uZXMg PE1pY2hhZWwuSm9uZXM9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpNaWNo YWVsLkpvbmVzPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4+DQpEYXRlOiBUaHVyc2Rh eSwgNCBBcHJpbCAyMDE5IGF0IDIxOjM3DQpUbzogRmlsaXAgU2tva2FuIDxwYW52YS5pcEBnbWFp bC5jb208bWFpbHRvOnBhbnZhLmlwQGdtYWlsLmNvbT4+LCAiY29zZUBpZXRmLm9yZzxtYWlsdG86 Y29zZUBpZXRmLm9yZz4iIDxjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYub3JnPj4NClN1 YmplY3Q6IFJlOiBbQ09TRV0gIlAtMjU2SyIgaW4gZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFs Z29yaXRobXMNCg0KTW9yZSB2b2ljZXMgb24gdGhlIHN1YmplY3Qgb2Ygd2hhdCBKT1NFIGN1cnZl IGlkZW50aWZpZXIgc2hvdWxkIGJlIHVzZWQgd291bGQgYmUgdXNlZnVsLCBhcyBJIHdhbnQgdG8g cHVibGlzaCBhbiB1cGRhdGVkIGRyYWZ0IGFkZHJlc3NpbmcgcmV2aWV3IGNvbW1lbnRzIHJlY2Vp dmVkIHRvIGRhdGUuICBUbyBkYXRlLCB0aGUgaW5wdXQgSeKAmXZlIHJlY2VpdmVkIGlzOg0KDQrC tyAgICAgICAgIEZvciDigJxQLTI1NkvigJ06ICBGaWxpcCBTa29rYW4gYW5kIFZsYWRpbWlyIER6 aHV2aW5vdiAob2ZmIGxpc3QpDQoNCsK3ICAgICAgICAgRm9yIOKAnHNlY3AyNTZrMeKAnTogIEpp bSBTY2hhYWQgYW5kIEpvaG4gTWF0dHNzb24NCg0KV2hhdCBkbyBvdGhlcnMgdGhpbms/DQoNCkFs c28sIGFzIGl0IG1pZ2h0IGFpZCBpbiB0aGlua2luZyBhYm91dCB0aGUgY2hvaWNlcywgd2hhdCBp cyB0aGUgbWVhbmluZyBvZiB0aGUg4oCcUOKAnSBpbiB0aGUgaWRlbnRpZmllcnMgZm9yIHRoZSBO SVNUIGN1cnZlcyDigJxQLTI1NuKAnSwgZXRjLj8NCg0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFRoYW5rcywNCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZyb206IENP U0UgPGNvc2UtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnPj4g T24gQmVoYWxmIE9mIEZpbGlwIFNrb2thbg0KU2VudDogV2VkbmVzZGF5LCBNYXJjaCAyNywgMjAx OSA2OjE3IEFNDQpUbzogY29zZUBpZXRmLm9yZzxtYWlsdG86Y29zZUBpZXRmLm9yZz4NClN1Ympl Y3Q6IFtDT1NFXSAiUC0yNTZLIiBpbiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGht cw0KDQpIZWxsbywNCg0KT25jZSBtb3JlIHRvIHRoZSBjb3JyZWN0IG1haWxpbmcgbGlzdC4uLg0K DQp0aGlzIGRyYWZ0IGhhcyBjYXVnaHQgbXkgYXR0ZW50aW9uIHNpbmNlIGl0IHRvdWNoZXMgSk9T RSBhcyB3ZWxsLCBzcGVjaWZpY2FsbHkgaXQgcHJvcG9zZXMgcmVnaXN0cmF0aW9uIGZvciB0aGUg dXNlcyBvZiBzZWNwMjU2azEgImJpdGNvaW4iIGN1cnZlLiBJIGxlYXJuZWQgZnJvbSBNaWtlIEpv bmVzIHRoYXQgdGhlcmUncyBhIGRpc2N1c3Npb24gYXJvdW5kIG5hbWluZyB0aGUga2V5J3MgY3Vy dmUgYW5kIHRoZSBKV0EgYWxnb3JpdGhtLg0KDQotICJQLTI1NksiDQpEbyB3ZSByZWFsbHkgbmVl ZCBhIG5ldyBuYW1lIGZvciBzZWNwMjU2azE/IEkgd291bGQgc3VnZ2VzdCBub3QuIE1vc3Qgb2Yg dGhlIGRvY3VtZW50IHRhbGtzIGFib3V0IHNlY3AyNTZrMSBhbnl3YXkuIEdpdmluZyBzZWNwMjU2 azEgdGhlIGFsaWFzIFAtMjU2SyBnaXZlcyB0aGUgaW1wcmVzc2lvbiB0aGF0IGl0IGlzIGEgY3Vy dmUgc3RhbmRhcmRpemVkIGJ5IE5JU1QsIHdoaWNoIGl0IGlzIG5vdC4gTWlrZT4gT3RoZXJzIGhh dmUgYWxzbyBzdWdnZXN0ZWQgc2ltcGx5IHVzaW5nIHRoZSBuYW1lICJzZWNwMjU2azEiLiBJJ20g ZmluZSB3aXRoIHRoYXQuDQoNCkknZCBsaWtlIHRvIGFkdm9jYXRlIGZvciBzdGlja2luZyB3aXRo IHRoZSBwcm9wb3NlZCAoaW4gY3VycmVudCBkcmFmdCkgIlAtMjU2SyIgZm9yIEVDIGtleSdzIGNy diwgYW5kICJFUzI1NksiIGZvciB0aGUgSldBIGFsZy4gVGhlc2UgdmFsdWVzIGFyZSBhbHJlYWR5 IHF1aXRlIGNvbW1vbiBpbiBleGlzdGluZyBpbXBsZW1lbnRhdGlvbnMsIHF1aXRlIGEgZmV3IGhp dHMgZm9yIHRoaXMuDQoNClsxXSBodHRwczovL2RvY3MubWljcm9zb2Z0LmNvbS9lbi11cy9kb3Ru ZXQvYXBpL21pY3Jvc29mdC5henVyZS5rZXl2YXVsdC5lY2tleS5wMjU2az92aWV3PWF6dXJlLWRv dG5ldA0KWzJdIGh0dHBzOi8vY29ubmVjdDJpZC5jb20vcHJvZHVjdHMvbmltYnVzLWpvc2Utand0 L2V4YW1wbGVzL2p3dC13aXRoLWVzMjU2ay1zaWduYXR1cmUNClszXSBodHRwczovL3N0YXRpYy5q YXZhZG9jLmlvL2NvbS5uaW1idXNkcy9uaW1idXMtam9zZS1qd3QvNS4xMC9jb20vbmltYnVzZHMv am9zZS9qd2svRUNLZXkuaHRtbA0KWzRdIGh0dHBzOi8vZ2l0aHViLmNvbS9wYW52YS9qb3NlL2Js b2IvbWFzdGVyL2xpYi9qd2sva2V5L2VjLmpzI0wyMi1MMjMNCls1XSBodHRwczovL2dpdGh1Yi5j b20vcmVsb2NhdGVseS9lYy1rZXkNCg0KQXMgbWVudGlvbmVkIGluIHRoZSBJRVRGIDEwNCBtZWV0 aW5nIG9uIFR1ZXNkYXkgdGhlIG90aGVyIGVuY291bnRlcmVkIG5hbWluZyBvZiB0aGlzIGlzICJL LTI1NiIgYnV0IHRoZXJlJ3MgY29uc2lkZXJhYmx5IGxlc3MgaGl0cyBzZWFyY2hpbmcgZm9yIGlt cGxlbWVudGF0aW9ucyB1c2luZyB0aGF0IG9uZS4NCg0KSSB1bmRlcnN0YW5kIHRoZSBDT1NFIGdy b3VwIGRvZXMgbm90IChwcm9iYWJseSkgaGF2ZSBleGlzdGluZyBpbXBsZW1lbnRhdGlvbnMgb2Yg c2VjcDI1NmsxIGFuZCB0aGF0J3Mgd2h5IHRoZSBub3Rpb24gb2YganVzdCBuYW1pbmcgaXQgc2Vj cDI1NmsxIHJlc29uYXRlcywgYnV0IG1heWJlIGNvbnNpZGVyIG9ubHkgZG9pbmcgc28gZm9yIENP U0UuIEpPU0UgY291bGQgdXNlIGxlc3MgZnJhZ21lbnRhdGlvbiBhbW9uZ3N0IGl0cyBpbXBsZW1l bnRhdGlvbnMgYW5kIHRoZXJlZm9yZSBzdGlja2luZyB0byB0aGUgbW9zdCBjb21tb24gbmFtaW5n IGFscmVhZHkgaW4gdGhlIHdpbGQgd291bGQgYmUgd2VsY29tZS4NCg0KVGhlIHNhbWUgYXBwbGll cyB0byB0aGUgcHJlc2VudGVkIHF1ZXN0aW9uIGFib3V0IENvbXByZXNzZWQgdnMuIE5vbi1jb21w cmVzc2VkIFBvaW50cyBmb3Igc2VjcDI1NmsxLCBpJ2QgYWR2b2NhdGUgdGhhdCBhdCBsZWFzdCBm b3IgSk9TRSB0aGUgdXNlZCBwb2ludHMgcmVtYWluIGluLWxpbmUgd2l0aCB3aGF0J3MgYWxyZWFk eSB1c2VkIGluIHdpdGggdGhlIGV4aXN0aW5nIGtleXMgYW5kIGFsZ29yaXRobXMuDQoNCkJlc3Qs DQpGaWxpcCBTa29rYW4NCg== --_000_SN6PR00MB030435272BC31431D76122A2F5510SN6PR00MB0304namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlz dFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7 bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDow aW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWww DQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs Ow0KCWNvbG9yOiMwMDIwNjA7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWw7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCgljb2xvcjojMDAyMDYwO30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0K QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAx LjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjEwMjU3 OTE4MTU7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0x MTQ2NjgwNTYgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2 OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2 ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpv Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9 DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5 OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsNg0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGww OmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwN Cgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxp bms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMw MDIwNjAiPlRoYW5rcyBmb3IgdGhlIHN1cGVyLXVzZWZ1bCBjb250ZXh0LCBKb2huLiZuYnNwOyBH aXZlbiB0aGF0IHRoaXMgaXNu4oCZdCBhIE5JU1QgY3VydmUsIGl0IHNlZW1zIHRoYXQgdGhlIOKA nFAt4oCdIG5hbWluZyBpcyBtaXNsZWFkaW5nIGFuZCBpdOKAmXMgdW5oZWxwZnVsIHRvIGludHJv ZHVjZSBhbm90aGVyIG5hbWUgZm9yIHRoZSBzYW1lIHRoaW5nLiZuYnNwOyBJDQogdGhlcmVmb3Jl IHBsYW4gdG8gY2hhbmdlIHRoZSBKT1NFIGN1cnZlIG5hbWUgdG8g4oCcPC9zcGFuPnNlY3AyNTZr MTxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMwMDIwNjAiPuKAnSBpbiB0aGUg bmV4dCBkcmFmdC4mbmJzcDsgWWVzLCBlYXJseSBpbXBsZW1lbnRhdGlvbnMgd2lsbCBuZWVkIHRv IGNoYW5nZSwgYnV0IEkgc3VzcGVjdCB0aGF0IHdl4oCZZCBoYXZlIHRvIGRvIHRoaXMgZHVyaW5n IElFVEYgb3IgSUVTRyByZXZpZXcgYW55d2F5LCBzbw0KIHByb2JhYmx5IHRoZSBlYXJsaWVyIHdl IG1ha2UgdGhlIGNoYW5nZSwgdGhlIGJldHRlci48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMDAy MDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMw MDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij4gQ09TRSAmbHQ7Y29zZS1ib3VuY2VzQGlldGYub3JnJmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwv Yj5Kb2huIE1hdHRzc29uPGJyPg0KPGI+U2VudDo8L2I+IEZyaWRheSwgQXByaWwgNSwgMjAxOSAx OjQ5IEFNPGJyPg0KPGI+VG86PC9iPiBNaWtlIEpvbmVzICZsdDtNaWNoYWVsLkpvbmVzPTQwbWlj cm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZyZndDs7IEZpbGlwIFNrb2thbiAmbHQ7cGFudmEuaXBA Z21haWwuY29tJmd0OzsgY29zZUBpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0NP U0VdICZxdW90O1AtMjU2SyZxdW90OyBpbiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3Jp dGhtczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpLDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Hb29nbGluZyBnaXZlcyB0aGUgZm9sbG93aW5nIHJlc3Vs dHM6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZxdW90O1AtMjU2SyZxdW90OyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBBYm91dCAxIDAxMCByZXN1bHRzJm5ic3A7Jm5ic3A7ICh3aGVyZSBtb3N0IGhpdHMgYXJl IGFib3V0IDI1Nksgb3IgbWVtb3J5KTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+JnF1b3Q7c2VjcDI1NmsxJnF1b3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEFi b3V0IDk3IDcwMCByZXN1bHRzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgZGlzbGlrZSAmcXVv dDtQLTI1NksmcXVvdDsgaW4gYW55IElFVEYgc3BlY2lmaWNhdGlvbiAoSk9TRSwgQ09TRSwgZXRj LikgZm9yIHR3byByZWFzb25zOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4xLiBUaGUgc2l0dWF0 aW9uIHdpdGggMyBkaWZmZXJlbnQgU0RPcyBnaXZpbmcgZGlmZmVyZW50IG5hbWVzIHRvIHRoZSBz YW1lIGN1cnZlcyBhcyBzdW1tYXJpemVkIGluIEFwcGVuZGl4IEEgb2YgUkZDIDg0NDIgaXMgYmFk IGVub3VnaC4gSUVURiBkb2VzIG5vdCBuZWVkIHRvIG1ha2UgdGhlIHNpdHVhdGlvbiB3b3JzZSBi eSBhc3NpZ25pbmcgYSBuZXcgbmFtZSB0byBzZWNwMjU2azEuIFRocmVlIGNvbHVtbnMgaW4NCiB0 aGUgdGFibGUgaXMgbW9yZSB0aGFuIGVub3VnaC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Mi4g SWYgSUVURiBuZWVkIHRvIGFzc2lnbiBhIG5ldyBuYW1lIHRvIHNlY3AyNTZrMSBJIHRoaW5rICZx dW90O1AtMjU2SyZxdW90OyBpcyBhIGJhZCBjaG9pY2UgYXMgaXQgZ2l2ZXMgdGhlIGltcHJlc3Np b24gdGhhdCBpdCBpcyBhIGN1cnZlIHN0YW5kYXJkaXplZCBieSBOSVNUICh3aGljaCBpdCBpcyBu b3QpLiBJIGhhdmUgYWxyZWFkeSBoZWFyZCBrbm93bGVkZ2VhYmxlIHBlb3BsZSB0aGlua2luZyB0 aGF0IGl0IGlzIGEgTklTVA0KIGN1cnZlLiBHaXZlbiB0aGUgcmVjZW50IElFVEYgZnVyeSBhYm91 dCBJVFUgbmFtaW5nIGEgcHJvdG9jb2wgZVRMUywgSSB0aGluayBJRVRGIHNob3VsZCByZWZyYWlu IGZyb20gdGhpcyB1bmxlc3Mgd2UgZ2V0IG9rIGZyb20gTklTVC48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SSBoYXZlIG5vIG9iamVjdGlvbnMgdG8gdGhlIGN1cnZlIGl0c2VsZiBvciB0aGUgbmFt ZSBFUzI1NksuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAy MDYwIj4mZ3Q7d2hhdCBpcyB0aGUgbWVhbmluZyBvZiB0aGUg4oCcUOKAnSBpbiB0aGUgaWRlbnRp ZmllcnMgZm9yIHRoZSBOSVNUIGN1cnZlcyDigJxQLTI1NuKAnSwgZXRjLj88L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBQIGluIE5JU1QgY3VydmVzIChQLTI1NiwgUC0zODQsIGV0 Yy4pIG1lYW5zIFByaW1lPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUg SyBpbiBOSVNUIGN1cnZlcyAoSy0yMzMsIEstMjgzLCBldGMuKSBtZWFucyBLb2JsaXR6PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgQiBpbiBOSVNUIGN1cnZlcyAoQi0y MzMsIEItMjgzLCBldGMuKSBtZWFucyBCaW5hcnk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhl IHIgaW4gU0VDRyBjdXJ2ZXMgKHNlY3AyNTZyMSwgc2VjcDM4NHIxKSBtZWFucyByYW5kb208bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBrIGluIFNFQ0cgY3VydmVzIChz ZWNwMjU2azEsIHNlY3QyMzNrMSkgbWVhbnMga29ibGl0ejxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+VGhlIHAgaW4gU0VDRyBjdXJ2ZXMgKHNlY3AyNTZyMSwgc2VjcDI1Nmsx KSBtZWFucyBwcmltZTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIHQg aW4gU0VDRyBjdXJ2ZXMgKHNlY3QyMzNyMSwgc2VjdDIzM2sxKSBtZWFucyB0d28/PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkpvaG48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xp ZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+RnJvbTogPC9zcGFuPg0KPC9iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Q09TRSAm bHQ7PGEgaHJlZj0ibWFpbHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZyI+Y29zZS1ib3VuY2VzQGll dGYub3JnPC9hPiZndDsgb24gYmVoYWxmIG9mIE1pa2UgSm9uZXMgJmx0OzxhIGhyZWY9Im1haWx0 bzpNaWNoYWVsLkpvbmVzPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZyI+TWljaGFlbC5K b25lcz00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPkRhdGU6 IDwvYj5UaHVyc2RheSwgNCBBcHJpbCAyMDE5IGF0IDIxOjM3PGJyPg0KPGI+VG86IDwvYj5GaWxp cCBTa29rYW4gJmx0OzxhIGhyZWY9Im1haWx0bzpwYW52YS5pcEBnbWFpbC5jb20iPnBhbnZhLmlw QGdtYWlsLmNvbTwvYT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyI+ Y29zZUBpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpjb3NlQGlldGYub3Jn Ij5jb3NlQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtDT1NFXSAm cXVvdDtQLTI1NksmcXVvdDsgaW4gZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8 L3NwYW4+PHNwYW4gbGFuZz0iU1YiIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+TW9yZSB2b2ljZXMgb24g dGhlIHN1YmplY3Qgb2Ygd2hhdCBKT1NFIGN1cnZlIGlkZW50aWZpZXIgc2hvdWxkIGJlIHVzZWQg d291bGQgYmUgdXNlZnVsLCBhcyBJIHdhbnQgdG8gcHVibGlzaCBhbiB1cGRhdGVkIGRyYWZ0IGFk ZHJlc3NpbmcgcmV2aWV3IGNvbW1lbnRzIHJlY2VpdmVkIHRvIGRhdGUuJm5ic3A7IFRvIGRhdGUs IHRoZQ0KIGlucHV0IEnigJl2ZSByZWNlaXZlZCBpczo8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQt aW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExp c3RzXT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6U3ltYm9sO2NvbG9yOiMwMDIwNjAiPjxzcGFu IHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBzdHls ZT0iY29sb3I6IzAwMjA2MCI+Rm9yIOKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzAwMjA2MCI+UC0yNTZLPC9zcGFuPjxzcGFu IHN0eWxlPSJjb2xvcjojMDAyMDYwIj7igJ06Jm5ic3A7IEZpbGlwIFNrb2thbiBhbmQgVmxhZGlt aXIgRHpodXZpbm92IChvZmYgbGlzdCk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0u MjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6U3ltYm9sO2NvbG9yOiMwMDIwNjAiPjxzcGFuIHN0eWxlPSJt c28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBzdHlsZT0iY29sb3I6 IzAwMjA2MCI+Rm9yIOKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6IzAwMjA2MCI+c2VjcDI1NmsxPC9zcGFuPjxzcGFuIHN0eWxl PSJjb2xvcjojMDAyMDYwIj7igJ06Jm5ic3A7IEppbSBTY2hhYWQgYW5kIEpvaG4gTWF0dHNzb248 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+V2hhdCBkbyBvdGhlcnMgdGhpbms/PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPkFsc28sIGFzIGl0IG1pZ2h0IGFpZCBpbiB0aGlua2lu ZyBhYm91dCB0aGUgY2hvaWNlcywgd2hhdCBpcyB0aGUgbWVhbmluZyBvZiB0aGUg4oCcUOKAnSBp biB0aGUgaWRlbnRpZmllcnMgZm9yIHRoZSBOSVNUIGN1cnZlcyDigJxQLTI1NuKAnSwgZXRjLj88 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IFRoYW5rcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIw NjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBNaWtlPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAj RTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPkZyb206PC9iPiBDT1NFICZsdDs8YSBo cmVmPSJtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnIj5jb3NlLWJvdW5jZXNAaWV0Zi5vcmc8 L2E+Jmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwvYj5GaWxpcCBTa29rYW48YnI+DQo8Yj5TZW50Ojwv Yj4gV2VkbmVzZGF5LCBNYXJjaCAyNywgMjAxOSA2OjE3IEFNPGJyPg0KPGI+VG86PC9iPiA8YSBo cmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJq ZWN0OjwvYj4gW0NPU0VdICZxdW90O1AtMjU2SyZxdW90OyBpbiBkcmFmdC1pZXRmLWNvc2Utd2Vi YXV0aG4tYWxnb3JpdGhtczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5I ZWxsbyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48aT5P bmNlIG1vcmUgdG8gdGhlIGNvcnJlY3QgbWFpbGluZyBsaXN0Li4uPC9pPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPnRoaXMgZHJhZnQgaGFzIGNhdWdodCBt eSBhdHRlbnRpb24gc2luY2UgaXQgdG91Y2hlcyBKT1NFIGFzIHdlbGwsIHNwZWNpZmljYWxseSBp dCBwcm9wb3NlcyByZWdpc3RyYXRpb24gZm9yIHRoZSB1c2VzIG9mIHNlY3AyNTZrMSZuYnNwOyZx dW90O2JpdGNvaW4mcXVvdDsgY3VydmUuIEkgbGVhcm5lZCBmcm9tIE1pa2UgSm9uZXMgdGhhdCB0 aGVyZSdzIGEgZGlzY3Vzc2lvbiBhcm91bmQgbmFtaW5nDQogdGhlIGtleSdzIGN1cnZlIGFuZCB0 aGUgSldBIGFsZ29yaXRobS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNv bGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0 LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo1LjBw dCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+LSAmcXVv dDtQLTI1NksmcXVvdDs8YnI+DQpEbyB3ZSByZWFsbHkgbmVlZCBhIG5ldyBuYW1lIGZvciBzZWNw MjU2azE/IEkgd291bGQgc3VnZ2VzdCBub3QuIE1vc3Qgb2YgdGhlIGRvY3VtZW50IHRhbGtzIGFi b3V0IHNlY3AyNTZrMSBhbnl3YXkuIEdpdmluZyBzZWNwMjU2azEgdGhlIGFsaWFzIFAtMjU2SyBn aXZlcyB0aGUgaW1wcmVzc2lvbiB0aGF0IGl0IGlzIGEgY3VydmUgc3RhbmRhcmRpemVkIGJ5IE5J U1QsIHdoaWNoIGl0IGlzIG5vdC4gTWlrZSZndDsgT3RoZXJzIGhhdmUgYWxzbyBzdWdnZXN0ZWQN CiBzaW1wbHkgdXNpbmcgdGhlIG5hbWUgJnF1b3Q7c2VjcDI1NmsxJnF1b3Q7LiBJJ20gZmluZSB3 aXRoIHRoYXQuPG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPkknZCBsaWtlIHRvIGFkdm9jYXRlIGZvciBzdGlja2luZyB3aXRoIHRoZSBwcm9wb3Nl ZCAoaW4gY3VycmVudCBkcmFmdCkgJnF1b3Q7PGI+UC0yNTZLPC9iPiZxdW90OyBmb3IgRUMga2V5 J3MgY3J2LCBhbmQgJnF1b3Q7PGI+RVMyNTZLPC9iPiZxdW90OyBmb3IgdGhlIEpXQSBhbGcuIFRo ZXNlIHZhbHVlcyBhcmUgYWxyZWFkeSBxdWl0ZSBjb21tb24gaW4gZXhpc3RpbmcgaW1wbGVtZW50 YXRpb25zLCBxdWl0ZQ0KIGEgZmV3IGhpdHMgZm9yIHRoaXMuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5bMV0mbmJzcDs8YSBocmVmPSJodHRw czovL2RvY3MubWljcm9zb2Z0LmNvbS9lbi11cy9kb3RuZXQvYXBpL21pY3Jvc29mdC5henVyZS5r ZXl2YXVsdC5lY2tleS5wMjU2az92aWV3PWF6dXJlLWRvdG5ldCI+aHR0cHM6Ly9kb2NzLm1pY3Jv c29mdC5jb20vZW4tdXMvZG90bmV0L2FwaS9taWNyb3NvZnQuYXp1cmUua2V5dmF1bHQuZWNrZXku cDI1Nms/dmlldz1henVyZS1kb3RuZXQ8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+WzJdJm5ic3A7 PGEgaHJlZj0iaHR0cHM6Ly9jb25uZWN0MmlkLmNvbS9wcm9kdWN0cy9uaW1idXMtam9zZS1qd3Qv ZXhhbXBsZXMvand0LXdpdGgtZXMyNTZrLXNpZ25hdHVyZSI+aHR0cHM6Ly9jb25uZWN0MmlkLmNv bS9wcm9kdWN0cy9uaW1idXMtam9zZS1qd3QvZXhhbXBsZXMvand0LXdpdGgtZXMyNTZrLXNpZ25h dHVyZTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5bM10mbmJzcDs8YSBocmVmPSJodHRwczovL3N0 YXRpYy5qYXZhZG9jLmlvL2NvbS5uaW1idXNkcy9uaW1idXMtam9zZS1qd3QvNS4xMC9jb20vbmlt YnVzZHMvam9zZS9qd2svRUNLZXkuaHRtbCI+aHR0cHM6Ly9zdGF0aWMuamF2YWRvYy5pby9jb20u bmltYnVzZHMvbmltYnVzLWpvc2Utand0LzUuMTAvY29tL25pbWJ1c2RzL2pvc2UvandrL0VDS2V5 Lmh0bWw8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+WzRdJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9n aXRodWIuY29tL3BhbnZhL2pvc2UvYmxvYi9tYXN0ZXIvbGliL2p3ay9rZXkvZWMuanMjTDIyLUwy MyI+aHR0cHM6Ly9naXRodWIuY29tL3BhbnZhL2pvc2UvYmxvYi9tYXN0ZXIvbGliL2p3ay9rZXkv ZWMuanMjTDIyLUwyMzwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5bNV0mbmJzcDs8YSBocmVmPSJo dHRwczovL2dpdGh1Yi5jb20vcmVsb2NhdGVseS9lYy1rZXkiPmh0dHBzOi8vZ2l0aHViLmNvbS9y ZWxvY2F0ZWx5L2VjLWtleTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj5BcyBtZW50aW9uZWQgaW4gdGhlIElFVEYgMTA0IG1lZXRpbmcgb24gVHVlc2Rh eSB0aGUgb3RoZXIgZW5jb3VudGVyZWQgbmFtaW5nIG9mIHRoaXMgaXMgJnF1b3Q7Sy0yNTYmcXVv dDsgYnV0IHRoZXJlJ3MgY29uc2lkZXJhYmx5IGxlc3MgaGl0cyBzZWFyY2hpbmcgZm9yIGltcGxl bWVudGF0aW9ucyB1c2luZyB0aGF0IG9uZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj5JIHVuZGVyc3RhbmQgdGhlIENPU0UgZ3JvdXAgZG9lcyBub3QgKHBy b2JhYmx5KSBoYXZlIGV4aXN0aW5nIGltcGxlbWVudGF0aW9ucyBvZiZuYnNwO3NlY3AyNTZrMSBh bmQgdGhhdCdzIHdoeSB0aGUgbm90aW9uIG9mIGp1c3QgbmFtaW5nIGl0Jm5ic3A7c2VjcDI1Nmsx IHJlc29uYXRlcywgYnV0IG1heWJlIGNvbnNpZGVyIG9ubHkgZG9pbmcgc28gZm9yIENPU0UuIEpP U0UgY291bGQgdXNlDQogbGVzcyBmcmFnbWVudGF0aW9uIGFtb25nc3QgaXRzIGltcGxlbWVudGF0 aW9ucyBhbmQgdGhlcmVmb3JlIHN0aWNraW5nIHRvIHRoZSBtb3N0IGNvbW1vbiBuYW1pbmcgYWxy ZWFkeSBpbiB0aGUgd2lsZCB3b3VsZCBiZSB3ZWxjb21lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoZSBzYW1lIGFwcGxpZXMgdG8gdGhlIHByZXNlbnRl ZCBxdWVzdGlvbiBhYm91dA0KPGk+Q29tcHJlc3NlZCB2cy4gTm9uLWNvbXByZXNzZWQgUG9pbnRz PC9pPiZuYnNwO2ZvciZuYnNwO3NlY3AyNTZrMSwgaSdkIGFkdm9jYXRlIHRoYXQgYXQgbGVhc3Qg Zm9yIEpPU0UgdGhlIHVzZWQgcG9pbnRzIHJlbWFpbiBpbi1saW5lIHdpdGggd2hhdCdzIGFscmVh ZHkgdXNlZCBpbiB3aXRoIHRoZSBleGlzdGluZyBrZXlzIGFuZCBhbGdvcml0aG1zLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5CZXN0LDxicj4N CjxiPkZpbGlwIFNrb2thbjwvYj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_SN6PR00MB030435272BC31431D76122A2F5510SN6PR00MB0304namp_-- From nobody Mon Apr 8 18:16:30 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00B06120181 for ; Mon, 8 Apr 2019 18:16:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=rkfeng.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hLIrbHJ7UQ5n for ; Mon, 8 Apr 2019 18:16:26 -0700 (PDT) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-eopbgr760040.outbound.protection.outlook.com [40.107.76.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CACF12003E for ; Mon, 8 Apr 2019 18:16:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rkfeng.onmicrosoft.com; s=selector1-rkfeng-com0i; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=b+WODRjsVITFkvwAsMkTYgzGi5CO2koToLrfozo1PDQ=; b=cQOTRsajYJn9nseENc1sCl6BqBY4nOQseZVRpfqSXJHYi/nLIe+IvZJFVyjfJKpUtLFA11ix6xF4uXWtcivM2AdkwBW8GETyVTTrS4TAETXg7mES1XmM1uZ/ec2haCsRZfCfUPvQtd+YAUZ9fnXX/ToNO4M+5IRx+Bp2sCnkOXQ= Received: from CY4PR1301MB2039.namprd13.prod.outlook.com (10.171.240.14) by CY4PR1301MB1942.namprd13.prod.outlook.com (10.171.223.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1792.11; Tue, 9 Apr 2019 01:16:24 +0000 Received: from CY4PR1301MB2039.namprd13.prod.outlook.com ([fe80::c72:6b85:66ca:845c]) by CY4PR1301MB2039.namprd13.prod.outlook.com ([fe80::c72:6b85:66ca:845c%3]) with mapi id 15.20.1792.009; Tue, 9 Apr 2019 01:16:24 +0000 From: Brian Sipos To: "cose@ietf.org" Thread-Topic: COSE authentication tag encoding Thread-Index: AQHU7nHZR0+ZUNBh6EmMJ13RHrToUw== Date: Tue, 9 Apr 2019 01:16:24 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [73.250.91.32] x-mailer: Evolution 3.28.5 (3.28.5-3.fc28) x-clientproxiedby: DM5PR05CA0009.namprd05.prod.outlook.com (2603:10b6:3:d4::19) To CY4PR1301MB2039.namprd13.prod.outlook.com (2603:10b6:910:48::14) authentication-results: spf=none (sender IP is ) smtp.mailfrom=BSipos@rkf-eng.com; x-ms-exchange-messagesentrepresentingtype: 1 x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0ba213ba-2c84-4ce8-5cda-08d6bc88fb55 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(7021145)(8989299)(5600139)(711020)(4605104)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(2017052603328)(7193020); SRVR:CY4PR1301MB1942; x-ms-traffictypediagnostic: CY4PR1301MB1942: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-forefront-prvs: 000227DA0C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(39830400003)(396003)(346002)(366004)(376002)(199004)(189003)(6512007)(86362001)(72206003)(6486002)(8676002)(3480700005)(53936002)(486006)(2351001)(966005)(97736004)(36756003)(6116002)(50226002)(102836004)(1730700003)(81156014)(81166006)(6506007)(5640700003)(6436002)(386003)(2616005)(14454004)(3846002)(8936002)(106356001)(186003)(26005)(476003)(105586002)(316002)(25786009)(5660300002)(66066001)(118296001)(256004)(6916009)(7736002)(2906002)(71190400001)(71200400001)(80792005)(508600001)(2501003)(6306002)(52116002)(99286004)(68736007)(305945005)(99106002); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR1301MB1942; H:CY4PR1301MB2039.namprd13.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: rkf-eng.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: vsQc63tE3JPOnERSOsCIX0Beki/EHAqNPG8o9ePLz3xOQYUcMpsaaj81nbwDPxxCEPmLtLgQS5WJYUPtRvnJfroIRGjfedcklILYJetl1+BaDr+VtO5wqZQMsvChh8B/aSzb5ecF/LUpzwAgynwzuy/iq8KPN0tnhgdeGGSKDV2SyRho2f6rTblKYaabaFWBrIylfsOB2WMazRPO8FU5SMQ06Qzs5yGfrT9k9ZnbZWZtfu9JTWLwXaORV7b2dUkinldnIIiAS1TiqXcIYbfR43D0P5CUozg5QR6z/DMK7XSJ6k90/8Q3bxDSIQ6lZX3x+1qDGRAhzhJmrw5bOF/Yob7YkOuRWU3EeOjsQBSYC4e04YJpZKFy7RIF+H3Jdo4uKUn5jpzWyfQkVGEsepVSIjmn2qdzpAD6A+h+MtJvbvk= Content-Type: text/plain; charset="utf-8" Content-ID: <9E33A74CD85A724EAEDAA2C37C4B3C15@namprd13.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: rkf-eng.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0ba213ba-2c84-4ce8-5cda-08d6bc88fb55 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2019 01:16:24.3377 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4ed8b15b-911f-42bc-8524-d89148858535 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR1301MB1942 Archived-At: Subject: [COSE] COSE authentication tag encoding X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Apr 2019 01:16:29 -0000 SGVsbG8sDQpJIGhhZCBiZWVuIGludGVyZXN0ZWQgaW4gdXNpbmcgQ09TRSBhIHdoaWxlIGJhY2ss IGJlZm9yZSBSRkMgODE1MiB3YXMNCnB1Ymxpc2hlZCwgYW5kIGFtIGp1c3QgZ2V0dGluZyBiYWNr IHRvIGxvb2tpbmcgaW50byBDT1NFIGFzIGEgc3RhbmRhcmQNCmNvbnRhaW5lci4gT25lIHRoaW5n IHRoYXQgSSBzdGlsbCBmaW5kIGNvbmZ1c2luZyBpcyBob3cgdGhlICotR0NNDQplbmNyeXB0aW9u IGFsZ29yaXRobXMgYXJlIHN1cHBvc2VkIHRvIHJlcHJlc2VudCB0aGUgYXV0aGVudGljYXRpb24g dGFnDQpyZXN1bHQuIEkgc2VlIGluIFsxXSB0aGUgc3RhdGVtZW50IHRoYXQgQ09TRSBkb2VzIGRp ZmZlcmVudCB0aGFuIEpPU0UNCnRvICJDb21iaW5lIHRoZSBhdXRoZW50aWNhdGlvbiB0YWcgZm9y IGVuY3J5cHRpb24gYWxnb3JpdGhtcyB3aXRoIHRoZQ0KY2lwaGVydGV4dCIuIE90aGVyIHRoYW4g dGhpcyBvbmUgc3RhdGVtZW50LCBJIGFtIHN0cnVnZ2xpbmcgdG8gc2VlDQp3aGVyZSB0aGUgYXV0 aGVudGljYXRpb24gdGFnIGdldHMgZW5jb2RlZCBiYXNlZCBvbiB0aGUgYWN0dWFsDQpyZXF1aXJl bWVudHMgc3RhdGVtZW50cyBpbiB0aGUgZG9jdW1lbnQuDQoNCkFtIEkganVzdCBtaXNzaW5nIHNv bWV0aGluZyB2ZXJ5IGZ1bmRhbWVudGFsLCBvciBpcyB0aGVyZSBhbiBpbXBsaWNpdA0KYmVoYXZp b3IgdG8gYXBwZW5kIHRoZSBhdXRoZW50aWNhdGlvbiB0YWcgZGF0YSB0byB0aGUgY2lwaGVydGV4 dD8gSXQNCndvdWxkIGJlIHVzZWZ1bCBmb3Igc29tZW9uZSBsaWtlIG1lLCB3aG8gaGFzIG5vdCBm b2xsb3dlZCBKT1NFL0NPU0UgdG9vDQpjbG9zZWx5LCB0byBoYXZlIHRoaXMga2luZCBvZiBkZXRh aWwgaW5kaWNhdGVkIHdpdGggYW4gYWN0dWFsDQpyZXF1aXJlbWVudCBzdGF0ZW1lbnQgd2l0aGlu IHRoZSBhbGdvcml0aG0gZGVzY3JpcHRpb24ocykuDQoNClRoYW5rcyBmb3IgYW55IGd1aWRhbmNl LA0KQnJpYW4gUy4NCg0KWzFdOiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjODE1MiNz ZWN0aW9uLTEuMQ0KDQoNCg== From nobody Tue Apr 9 00:45:46 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD8551203C2 for ; Tue, 9 Apr 2019 00:45:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QC-Bp1nv9gPh for ; Tue, 9 Apr 2019 00:45:41 -0700 (PDT) Received: from welho-filter3.welho.com (welho-filter3.welho.com [83.102.41.25]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40C0C1200FE for ; Tue, 9 Apr 2019 00:45:40 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by welho-filter3.welho.com (Postfix) with ESMTP id 1FC92BC11; Tue, 9 Apr 2019 10:45:38 +0300 (EEST) X-Virus-Scanned: Debian amavisd-new at pp.htv.fi Received: from welho-smtp1.welho.com ([IPv6:::ffff:83.102.41.84]) by localhost (welho-filter3.welho.com [::ffff:83.102.41.25]) (amavisd-new, port 10024) with ESMTP id zR2JBtCP66Bo; Tue, 9 Apr 2019 10:45:37 +0300 (EEST) Received: from LK-Perkele-VII (87-92-19-27.bb.dnainternet.fi [87.92.19.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by welho-smtp1.welho.com (Postfix) with ESMTPSA id 5AA75286; Tue, 9 Apr 2019 10:45:35 +0300 (EEST) Date: Tue, 9 Apr 2019 10:45:34 +0300 From: Ilari Liusvaara To: Brian Sipos Cc: "cose@ietf.org" Message-ID: <20190409074534.GA165029@LK-Perkele-VII> References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) Sender: ilariliusvaara@welho.com Archived-At: Subject: Re: [COSE] COSE authentication tag encoding X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Apr 2019 07:45:44 -0000 On Tue, Apr 09, 2019 at 01:16:24AM +0000, Brian Sipos wrote: > Hello, > I had been interested in using COSE a while back, before RFC 8152 was > published, and am just getting back to looking into COSE as a standard > container. One thing that I still find confusing is how the *-GCM > encryption algorithms are supposed to represent the authentication tag > result. I see in [1] the statement that COSE does different than JOSE > to "Combine the authentication tag for encryption algorithms with the > ciphertext". Other than this one statement, I am struggling to see > where the authentication tag gets encoded based on the actual > requirements statements in the document. > > Am I just missing something very fundamental, or is there an implicit > behavior to append the authentication tag data to the ciphertext? It > would be useful for someone like me, who has not followed JOSE/COSE too > closely, to have this kind of detail indicated with an actual > requirement statement within the algorithm description(s). COSE uses RFC5116 version of AEAD interface. This interface specifies that tag is included in the ciphertext. Now, AES-GCM (in RFC5116) and Chacha20-Poly1305-AEAD (in RFC8439, and as errata for RFC7539) further specify that the tag is to be appended to other ciphertext (i.e., tag is the last 16 bytes of ciphertext output). If more AEAD algorithms are defined in the future, those could do something else than to append with their tags. This is to be documented in the RFC that documents the RFC5116 interface for the algorithm, which RFC about use of it in COSE then references. -Ilari From nobody Tue Apr 9 09:19:04 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3ED39120854 for ; Tue, 9 Apr 2019 09:19:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a-4uaT3Irkyz for ; Tue, 9 Apr 2019 09:19:01 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4CC4120222 for ; Tue, 9 Apr 2019 09:19:00 -0700 (PDT) Received: from Jude (50.248.212.131) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 9 Apr 2019 09:18:51 -0700 From: Jim Schaad To: 'Brian Sipos' CC: References: <20190409074534.GA165029@LK-Perkele-VII> In-Reply-To: <20190409074534.GA165029@LK-Perkele-VII> Date: Tue, 9 Apr 2019 09:18:48 -0700 Message-ID: <00e401d4eeef$eb7fc240$c27f46c0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQJy1i6SUi/vZ/lPh9V992D9X05vmwMmcmnGpN7+jZA= Content-Language: en-us X-Originating-IP: [50.248.212.131] Archived-At: Subject: Re: [COSE] COSE authentication tag encoding X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Apr 2019 16:19:03 -0000 > -----Original Message----- > From: COSE On Behalf Of Ilari Liusvaara > Sent: Tuesday, April 9, 2019 12:46 AM > To: Brian Sipos > Cc: cose@ietf.org > Subject: Re: [COSE] COSE authentication tag encoding > > On Tue, Apr 09, 2019 at 01:16:24AM +0000, Brian Sipos wrote: > > Hello, > > I had been interested in using COSE a while back, before RFC 8152 was > > published, and am just getting back to looking into COSE as a standard > > container. One thing that I still find confusing is how the *-GCM > > encryption algorithms are supposed to represent the authentication tag > > result. I see in [1] the statement that COSE does different than JOSE > > to "Combine the authentication tag for encryption algorithms with the > > ciphertext". Other than this one statement, I am struggling to see > > where the authentication tag gets encoded based on the actual > > requirements statements in the document. > > > > Am I just missing something very fundamental, or is there an implicit > > behavior to append the authentication tag data to the ciphertext? It > > would be useful for someone like me, who has not followed JOSE/COSE > > too closely, to have this kind of detail indicated with an actual > > requirement statement within the algorithm description(s). > > COSE uses RFC5116 version of AEAD interface. This interface specifies that > tag is included in the ciphertext. > > Now, AES-GCM (in RFC5116) and Chacha20-Poly1305-AEAD (in RFC8439, and > as errata for RFC7539) further specify that the tag is to be appended to other > ciphertext (i.e., tag is the last 16 bytes of ciphertext output). > > If more AEAD algorithms are defined in the future, those could do something > else than to append with their tags. This is to be documented in the RFC that > documents the RFC5116 interface for the algorithm, which RFC about use of > it in COSE then references. I will go in and put some more explicit text to cover this in the document. The rule is going to be that it is algorithm specific so it cannot be in a generic place but needs to be specified on a per algorithm basis. Examples of some algorithms where different behavior is going to happen are with Synthetic Initialization Vector (SIV) (RFC 5297) the IV is the authentication tag and thus it would get stored in the IV slot. For the KeyWrap algorithms (RFC 3394) the authentication tag is the first 64-bits of the plain text and is thus part of what one sees as the encrypted bytes. For the algorithms you are looking at as stated above, the authentication tag is appended to the encrypted content to form a single value which is then stored as the encrypted content. Jim > > > -Ilari > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Wed Apr 10 14:47:21 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89C0B120446 for ; Wed, 10 Apr 2019 14:47:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id py_xwgyckrLX for ; Wed, 10 Apr 2019 14:47:08 -0700 (PDT) Received: from mail-wr1-x436.google.com (mail-wr1-x436.google.com [IPv6:2a00:1450:4864:20::436]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11A79120468 for ; Wed, 10 Apr 2019 14:47:08 -0700 (PDT) Received: by mail-wr1-x436.google.com with SMTP id j9so4664173wrn.6 for ; Wed, 10 Apr 2019 14:47:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=DROGp3Pt0KG5O3B2mladZnvoa9K+9rBraQpFq0sfZuw=; b=vgUKhsRSccGA02rQsBHgFt8ZeUkHD2YtPzWMUccx6uTBUYvkD1BRrFdQTHbBpPSjn0 pxhLl8XsTK+Ot+7lV6i/G0sqX0fiNhbZNfw5byGoDHQIsma3J0cdoy92hwQWawmO+Vu8 /Oi7QoYVJDt9xuWY7aFNoI43A7ZKpDPmrB2RFStQsHZx5TXJl2iVuhxIbTzi4XsT3BLa vDgLu37EnbcryIoD3GqH/AJgPI5MmTJ/vT1kNZYqcCm6n/cKMCuIUCkuZkFmUXZR3j17 VIFgnorQZbPWNSGlyrNelyXJqeMvM8xMPWz2DqVBoWgw+7OeJ/whvsgCImLgzkLzNfkJ Z2hA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=DROGp3Pt0KG5O3B2mladZnvoa9K+9rBraQpFq0sfZuw=; b=jcQv6bAWx2RxvZUylWUfc+47LiFlooo+GtWb83y9q3u1nJNqBKENbmV4rUGQ+edtPV G93vV2Cw61wH6IaRuylOB1UKj9KVGvZdanEgGBPSzTO0HrjLHw9m1spyEIa/+coHqAbz rheo7mlWGWn7yvG1nVR+tEFyPCfdLipwQciJWTMNUjuMY0lYQYBX+TCvSNtfqU5Qrt0A BtIOoSrHjHvjNj+ebx1eDaxqvHdHR99QbqRJcW26YpsPkhBP3Q7ZEzm+meFcHy0OeNXL Kz74Ia47ToCPBMs1D9VzQ5IUYXW43aSLMDmXzLQkktTcsNs3ZgC7gbl4AXxo30CYIdmj JO7A== X-Gm-Message-State: APjAAAUdY8hLWCKr+E8Ms/FpA+CVEC0gfgbAoQKCvrfpCd/4OsMHtBIV 5ZOuciTzova1+64hDFsr6H4XL9Ao4tIhEWRbHjFmelhzxOE= X-Google-Smtp-Source: APXvYqwtMXWqZKkBC/k9cu/INoKhasF8TWBdz39GpBo/5nBd4x9/wGxN2PKqrJTEheX6Eq1aZUrzjrVE5vgZUNbxQjo= X-Received: by 2002:a5d:5284:: with SMTP id c4mr9253609wrv.281.1554932826267; Wed, 10 Apr 2019 14:47:06 -0700 (PDT) MIME-Version: 1.0 From: ivaylo petrov Date: Wed, 10 Apr 2019 23:46:40 +0200 Message-ID: To: cose Cc: draft-ietf-cose-hash-sig@ietf.org Content-Type: multipart/alternative; boundary="000000000000c2756f05863402d7" Archived-At: Subject: [COSE] =?utf-8?q?=F0=9F=94=94_WG_Last_Call_of_draft-ietf-cose-ha?= =?utf-8?q?sh-sig-02?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Apr 2019 21:47:19 -0000 --000000000000c2756f05863402d7 Content-Type: text/plain; charset="UTF-8" Dear all, As discussed during the Prague meeting, this email starts a working group last call for draft-ietf-cose-hash-sig-02 [1], ending on 23:59:39 CET on Thursday, April 25, 2019. Please review it and either provide your comments and feedback or if you review the documents without finding concerns, please say so on the list. As a reminder, if you are aware of any patent claims that might apply to this draft, please review BCP 78 and BCP 79 and make any appropriate IPR declarations as soon as possible. If you are not sure whether you need to make a declaration or not, please talk to the chairs and we will help. Best regards, - Matthew and Ivaylo COSE Chairs [1]: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ --000000000000c2756f05863402d7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Dear all,


As discussed during th= e Prague meeting, this email starts a working group last call for draft-iet= f-cose-hash-sig-02 [1], ending on


=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A023:59:39 CET on Thursday, April 25, 2019.


Please= review it and either provide your comments and feedback or if you review t= he documents without finding concerns, please say so on the list.

As a reminder, if you are aware of any patent claims that might apply to= this draft, please review BCP 78 and BCP 79 and make any appropriate IPR d= eclarations as soon as possible. If you are not sure whether you need to ma= ke a declaration or not,

please talk to the chairs and we will hel= p.


Best regards,

- Matthew and Ivaylo

COSE Cha= irs


[1]: https://datatrac= ker.ietf.org/doc/draft-ietf-cose-hash-sig/
--000000000000c2756f05863402d7-- From nobody Sat Apr 13 07:46:59 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F51D1201CF; Sat, 13 Apr 2019 07:46:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DrFc88bBgp8m; Sat, 13 Apr 2019 07:46:34 -0700 (PDT) Received: from wp382.webpack.hosteurope.de (wp382.webpack.hosteurope.de [IPv6:2a01:488:42:1000:50ed:8597::]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD7C11201B8; Sat, 13 Apr 2019 07:46:30 -0700 (PDT) Received: from mail-qt1-f178.google.com ([209.85.160.178]); authenticated by wp382.webpack.hosteurope.de running ExIM with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) id 1hFJvG-0007sV-10; Sat, 13 Apr 2019 16:46:26 +0200 Received: by mail-qt1-f178.google.com with SMTP id k2so14595505qtm.1; Sat, 13 Apr 2019 07:46:25 -0700 (PDT) X-Gm-Message-State: APjAAAUDlUxpbMNyCBwVOaCFYwH/vu5s23jFXDvXcPpkYs+hXz5C/GY5 POYVyeG0Qv/0dxCW2OCAuQ0MMJlA+1Xerg5NPaI= X-Google-Smtp-Source: APXvYqxMUQ6S1XdElMSNLcKnMBrCyFyndiaMqrEiVVvuzDqs1JxeyXZdtBTZ0f7h8ipnl0H5mj49heAjoRUIxghOEaI= X-Received: by 2002:ac8:2a54:: with SMTP id l20mr52037829qtl.193.1555166784978; Sat, 13 Apr 2019 07:46:24 -0700 (PDT) MIME-Version: 1.0 From: Klaus Hartke Date: Sat, 13 Apr 2019 16:45:49 +0200 X-Gmail-Original-Message-ID: Message-ID: To: cose@ietf.org, "core@ietf.org WG" , cbor@ietf.org, Ace@ietf.org Content-Type: text/plain; charset="UTF-8" X-bounce-key: webpack.hosteurope.de; hartke@projectcool.de; 1555166793; 96846234; X-HE-SMSGID: 1hFJvG-0007sV-10 Archived-At: Subject: [COSE] Doodle poll for virtual interims X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Apr 2019 14:46:37 -0000 We are looking for a new time slot for the CoRE/CBOR/COSE virtual interims until IETF 105. Proposed options: 7am PDT / 10am EDT / 4pm CEST / 11pm JST 8am PDT / 11am EDT / 5pm CEST / 12midn JST 9am PDT / 12noon EDT / 6pm CEST / 1am JST 10am PDT / 1pm EDT / 7pm CEST / 2am JST The interims are scheduled to be weekly, alternating between CoRE and CBOR/COSE (and a dash of ACE). Please use this doodle poll to indicate your preference: https://doodle.com/poll/ve7rnyareri2kqer Klaus From nobody Mon Apr 15 08:44:43 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF4D8120382; Mon, 15 Apr 2019 08:44:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f-KUr6A-iG4c; Mon, 15 Apr 2019 08:44:18 -0700 (PDT) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40072.outbound.protection.outlook.com [40.107.4.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F13D912001B; Mon, 15 Apr 2019 08:44:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5dK1KGM6ccgp1ccVmzgQVP2jCMTUmZCcbB3n2MKu81Y=; b=Jf/o4uryFz29y+5le8OzhYGfwMgtZf1zccV+fOkddGUXOrv3jDLWajx7+xxh2FO8A5rDJvgQSIbQhq+VTKbWLJ4eNGVs1exkeCSW3lFlPoJyyMDPtNaOo2pu+8Wo1VxN7ba4My8U6iDZNdcT7YV83GZSpIrSiubOBb8IbsaAs3o= Received: from HE1PR0701MB2746.eurprd07.prod.outlook.com (10.168.185.17) by HE1PR0701MB2874.eurprd07.prod.outlook.com (10.168.92.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1813.9; Mon, 15 Apr 2019 15:44:14 +0000 Received: from HE1PR0701MB2746.eurprd07.prod.outlook.com ([fe80::2489:87b6:bfd8:727d]) by HE1PR0701MB2746.eurprd07.prod.outlook.com ([fe80::2489:87b6:bfd8:727d%6]) with mapi id 15.20.1813.009; Mon, 15 Apr 2019 15:44:14 +0000 From: Francesca Palombini To: "cose@ietf.org" , "core@ietf.org WG" , "cbor@ietf.org" , "Ace@ietf.org" Thread-Topic: [Ace] Doodle poll for virtual interims Thread-Index: AQHU8gfB1xzeYR7XSk63xG16DiVzHaY9YBcv Date: Mon, 15 Apr 2019 15:44:14 +0000 Message-ID: <0A9FF18D-5A9F-483A-B6CB-871CD25626F5@ericsson.com> References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=francesca.palombini@ericsson.com; x-originating-ip: [158.174.219.143] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 5268253e-9e9b-402f-c4fa-08d6c1b93689 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600140)(711020)(4605104)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:HE1PR0701MB2874; x-ms-traffictypediagnostic: HE1PR0701MB2874: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-forefront-prvs: 000800954F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(366004)(376002)(136003)(346002)(396003)(199004)(189003)(5660300002)(26005)(76176011)(97736004)(186003)(25786009)(8676002)(305945005)(102836004)(6246003)(53546011)(6506007)(110136005)(236005)(316002)(6306002)(450100002)(106356001)(6512007)(14454004)(53936002)(33656002)(105586002)(54896002)(2906002)(7736002)(66066001)(229853002)(6486002)(82746002)(2501003)(256004)(86362001)(606006)(966005)(81156014)(476003)(81166006)(11346002)(446003)(2616005)(68736007)(486006)(2201001)(44832011)(8936002)(36756003)(71190400001)(71200400001)(83716004)(478600001)(99286004)(6436002)(6116002)(3846002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR0701MB2874; H:HE1PR0701MB2746.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 07xdM3ITsqNHly274pKCFl3HtDlc0PRK4vMImEiQmDkABrcz5Hmc2dFyIRhSD6YZIUTR8t6WrX2Kr8Y7C/H1VMx2NbhURMwSKeMoF9rVB6Vu+Ao+CZ/3idUFGvu8uCmGmEuHs+B8e7qCa1CBJchdlhwqlMNLReXiXgt4qL//8sMHn1koEa4+VujjoGEtO9vl36o+KFM29wcZrpwqu6DOvGYlbEzYhRVurFQAjVPR2sqrCgG7KJ//Q2fAqZe7vCM5iQ+cMWpUNj4z5PIQcrwcBXRNuC/1RDzTEV3f1gCsF3jvNYcqx17WcJm71oRty6SDxo/RW9+IZVDJKYvno5j5CB7NrhFL1aKgW0PzAY5LLgJOMZQSVzPYee1X/1nHKAw7qWUcNSqh/g+ijAIBLDLKWMVFmGaEwIDDhBnVRouvNvk= Content-Type: multipart/alternative; boundary="_000_0A9FF18D5A9F483AB6CB871CD25626F5ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5268253e-9e9b-402f-c4fa-08d6c1b93689 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Apr 2019 15:44:14.5491 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2874 Archived-At: Subject: Re: [COSE] [Ace] Doodle poll for virtual interims X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2019 15:44:21 -0000 --_000_0A9FF18D5A9F483AB6CB871CD25626F5ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNClBsZWFzZSBlbnRlciB5b3VyIGF2YWlsYWJpbGl0eSBieSB0aGlzIEZyaWRheSwgQXBy aWwgMTl0aDogaHR0cHM6Ly9kb29kbGUuY29tL3BvbGwvdmU3cm55YXJlcmkya3Flcg0KDQpBcyBL bGF1cyBzYWlkLCB0aGUgdGltZSBzbG90cyBhcmUgdG8gY2hvc2UgZm9yIHdlZWtseSBtZWV0aW5n cywgc28gZGlzcmVnYXJkIHRoZSBleGFjdCBkYXRlcyBpbiB0aGUgZG9vZGxlIHBvbGwsIGJ1dCBv bmx5IGNvbnNpZGVyIHRoZSBkYXkgb2YgdGhlIHdlZWsuDQoNClRoZSBnb2FsIGlzIHRvIHJlc3Rh cnQgdGhlIG1lZXRpbmdzIGJ5IHRoZSAybmQgd2VlayBvZiBNYXksIGFuZCB3ZSBuZWVkIGEgY291 cGxlIG9mIHdlZWtzIHRvIHNldCBpdCB1cCB3aXRoIHRoZSBTZWNyZXRhcmlhdC4NCg0KQWxzbyBu b3RlIHRoYXQgdGhlIHRpbWVzbG90cyBhcmUgOTAgbWludXRlcyBsb25nLCB0byBhbGxvdyBmb3Ig bG9uZ2VyIGludGVyaW0gdGltZSBpZiBuZWVkZWQuDQoNCg0KVGhhbmtzLA0KRnJhbmNlc2NhDQoN Cg0KT24gMTMgQXByaWwgMjAxOSBhdCAxNjo0NzowMiBDRVNULCBLbGF1cyBIYXJ0a2UgPGhhcnRr ZUBwcm9qZWN0Y29vbC5kZT4gd3JvdGU6DQpXZSBhcmUgbG9va2luZyBmb3IgYSBuZXcgdGltZSBz bG90IGZvciB0aGUgQ29SRS9DQk9SL0NPU0UgdmlydHVhbA0KaW50ZXJpbXMgdW50aWwgSUVURiAx MDUuDQoNClByb3Bvc2VkIG9wdGlvbnM6DQoNCjdhbSBQRFQgLyAxMGFtIEVEVCAvIDRwbSBDRVNU IC8gMTFwbSBKU1QNCjhhbSBQRFQgLyAxMWFtIEVEVCAvIDVwbSBDRVNUIC8gMTJtaWRuIEpTVA0K OWFtIFBEVCAvIDEybm9vbiBFRFQgLyA2cG0gQ0VTVCAvIDFhbSBKU1QNCjEwYW0gUERUIC8gMXBt IEVEVCAvIDdwbSBDRVNUIC8gMmFtIEpTVA0KDQpUaGUgaW50ZXJpbXMgYXJlIHNjaGVkdWxlZCB0 byBiZSB3ZWVrbHksIGFsdGVybmF0aW5nIGJldHdlZW4gQ29SRSBhbmQNCkNCT1IvQ09TRSAoYW5k IGEgZGFzaCBvZiBBQ0UpLg0KDQpQbGVhc2UgdXNlIHRoaXMgZG9vZGxlIHBvbGwgdG8gaW5kaWNh dGUgeW91ciBwcmVmZXJlbmNlOg0KaHR0cHM6Ly9kb29kbGUuY29tL3BvbGwvdmU3cm55YXJlcmky a3Flcg0KDQpLbGF1cw0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KQWNlIG1haWxpbmcgbGlzdA0KQWNlQGlldGYub3JnDQpodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZQ0K --_000_0A9FF18D5A9F483AB6CB871CD25626F5ericssoncom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5Pg0KPGRpdiBkaXI9Imx0 ciI+SGksDQo8ZGl2IGRpcj0ibHRyIj48YnI+DQo8L2Rpdj4NCjxkaXYgZGlyPSJsdHIiPlBsZWFz ZSBlbnRlciB5b3VyIGF2YWlsYWJpbGl0eSBieSB0aGlzIEZyaWRheSwgQXByaWwgMTl0aDombmJz cDs8c3Bhbj5odHRwczovL2Rvb2RsZS5jb20vcG9sbC92ZTdybnlhcmVyaTJrcWVyJm5ic3A7PC9z cGFuPjwvZGl2Pg0KPGRpdiBkaXI9Imx0ciI+PGJyPg0KPC9kaXY+DQo8ZGl2IGRpcj0ibHRyIj5B cyBLbGF1cyBzYWlkLCB0aGUgdGltZSBzbG90cyBhcmUgdG8gY2hvc2UgZm9yIHdlZWtseSBtZWV0 aW5ncywgc28gZGlzcmVnYXJkIHRoZSBleGFjdCBkYXRlcyBpbiB0aGUgZG9vZGxlIHBvbGwsIGJ1 dCBvbmx5IGNvbnNpZGVyIHRoZSBkYXkgb2YgdGhlIHdlZWsuPC9kaXY+DQo8ZGl2IGRpcj0ibHRy Ij48YnI+DQo8L2Rpdj4NCjxkaXYgZGlyPSJsdHIiPlRoZSBnb2FsIGlzIHRvIHJlc3RhcnQgdGhl IG1lZXRpbmdzIGJ5IHRoZSAybmQgd2VlayBvZiBNYXksIGFuZCB3ZSBuZWVkIGEgY291cGxlIG9m IHdlZWtzIHRvIHNldCBpdCB1cCB3aXRoIHRoZSBTZWNyZXRhcmlhdC48YnI+DQo8L2Rpdj4NCjxk aXYgZGlyPSJsdHIiPjxicj4NCjwvZGl2Pg0KPGRpdiBkaXI9Imx0ciI+QWxzbyBub3RlIHRoYXQg dGhlIHRpbWVzbG90cyBhcmUgOTAgbWludXRlcyBsb25nLCB0byBhbGxvdyBmb3IgbG9uZ2VyIGlu dGVyaW0gdGltZSBpZiBuZWVkZWQuPC9kaXY+DQo8L2Rpdj4NCjxzcGFuIGlkPSJkcmFmdC1icmVh ayI+PC9zcGFuPjxicj4NCjxicj4NClRoYW5rcywNCjxkaXYgZGlyPSJsdHIiPkZyYW5jZXNjYTwv ZGl2Pg0KPHNwYW4gaWQ9ImRyYWZ0LWJyZWFrIj48L3NwYW4+PGJyPg0KPGJyPg0KPGRpdj4NCjxk aXYgY2xhc3M9Im51bGwiIGRpcj0iYXV0byI+T24gMTMgQXByaWwgMjAxOSBhdCAxNjo0NzowMiBD RVNULCBLbGF1cyBIYXJ0a2UgJmx0O2hhcnRrZUBwcm9qZWN0Y29vbC5kZSZndDsgd3JvdGU6PGJy IGNsYXNzPSJudWxsIj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgc3R5bGU9ImJv cmRlci1sZWZ0LXN0eWxlOnNvbGlkO2JvcmRlci13aWR0aDoxcHg7bWFyZ2luLWxlZnQ6MHB4O3Bh ZGRpbmctbGVmdDoxMHB4OyIgY2xhc3M9Im51bGwiPg0KPGRpdiBjbGFzcz0ibnVsbCIgZGlyPSJh dXRvIj4NCjxkaXYgY2xhc3M9Im51bGwiPg0KPG1ldGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50 PSJNaWNyb3NvZnQgRXhjaGFuZ2UgU2VydmVyIiBjbGFzcz0ibnVsbCI+DQo8IS0tIGNvbnZlcnRl ZCBmcm9tIHRleHQgLS0+DQo8ZGl2IGNsYXNzPSJudWxsIj48Zm9udCBzaXplPSIyIiBjbGFzcz0i bnVsbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMXB0OyIgY2xhc3M9Im51bGwiPg0KPGRpdiBu b3A9IlBsYWluVGV4dCIgY2xhc3M9Im51bGwiPldlIGFyZSBsb29raW5nIGZvciBhIG5ldyB0aW1l IHNsb3QgZm9yIHRoZSBDb1JFL0NCT1IvQ09TRSB2aXJ0dWFsPGJyIGNsYXNzPSJudWxsIj4NCmlu dGVyaW1zIHVudGlsIElFVEYgMTA1LjxiciBjbGFzcz0ibnVsbCI+DQo8YnIgY2xhc3M9Im51bGwi Pg0KUHJvcG9zZWQgb3B0aW9uczo8YnIgY2xhc3M9Im51bGwiPg0KPGJyIGNsYXNzPSJudWxsIj4N CjdhbSBQRFQgLyAxMGFtIEVEVCAvIDRwbSBDRVNUIC8gMTFwbSBKU1Q8YnIgY2xhc3M9Im51bGwi Pg0KOGFtIFBEVCAvIDExYW0gRURUIC8gNXBtIENFU1QgLyAxMm1pZG4gSlNUPGJyIGNsYXNzPSJu dWxsIj4NCjlhbSBQRFQgLyAxMm5vb24gRURUIC8gNnBtIENFU1QgLyAxYW0gSlNUPGJyIGNsYXNz PSJudWxsIj4NCjEwYW0gUERUIC8gMXBtIEVEVCAvIDdwbSBDRVNUIC8gMmFtIEpTVDxiciBjbGFz cz0ibnVsbCI+DQo8YnIgY2xhc3M9Im51bGwiPg0KVGhlIGludGVyaW1zIGFyZSBzY2hlZHVsZWQg dG8gYmUgd2Vla2x5LCBhbHRlcm5hdGluZyBiZXR3ZWVuIENvUkUgYW5kPGJyIGNsYXNzPSJudWxs Ij4NCkNCT1IvQ09TRSAoYW5kIGEgZGFzaCBvZiBBQ0UpLjxiciBjbGFzcz0ibnVsbCI+DQo8YnIg Y2xhc3M9Im51bGwiPg0KUGxlYXNlIHVzZSB0aGlzIGRvb2RsZSBwb2xsIHRvIGluZGljYXRlIHlv dXIgcHJlZmVyZW5jZTo8YnIgY2xhc3M9Im51bGwiPg0KPGEgaHJlZj0iaHR0cHM6Ly9kb29kbGUu Y29tL3BvbGwvdmU3cm55YXJlcmkya3FlciIgdGFyZ2V0PSJfQkxBTksiIGNsYXNzPSJudWxsIj5o dHRwczovL2Rvb2RsZS5jb20vcG9sbC92ZTdybnlhcmVyaTJrcWVyPC9hPjxiciBjbGFzcz0ibnVs bCI+DQo8YnIgY2xhc3M9Im51bGwiPg0KS2xhdXM8YnIgY2xhc3M9Im51bGwiPg0KPGJyIGNsYXNz PSJudWxsIj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f PGJyIGNsYXNzPSJudWxsIj4NCkFjZSBtYWlsaW5nIGxpc3Q8YnIgY2xhc3M9Im51bGwiPg0KQWNl QGlldGYub3JnPGJyIGNsYXNzPSJudWxsIj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vYWNlIiB0YXJnZXQ9Il9CTEFOSyIgY2xhc3M9Im51bGwiPmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlPC9hPjxiciBjbGFzcz0ibnVsbCI+ DQo8L2Rpdj4NCjwvc3Bhbj48L2ZvbnQ+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_0A9FF18D5A9F483AB6CB871CD25626F5ericssoncom_-- From nobody Mon Apr 22 12:14:54 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F959120267; Mon, 22 Apr 2019 12:14:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UPRcndmWaV0g; Mon, 22 Apr 2019 12:14:51 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D05512014E; Mon, 22 Apr 2019 12:14:50 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 22 Apr 2019 12:14:44 -0700 From: Jim Schaad To: 'cose' CC: References: In-Reply-To: Date: Mon, 22 Apr 2019 12:14:42 -0700 Message-ID: <012001d4f93f$a5685100$f038f300$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0121_01D4F904.F90A3C50" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQEmBAAUuKsOfa12B3RYpTZhyZ6tBKemb2Lg Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WG_Last_Call_of_draft-ietf-cose-ha?= =?utf-8?q?sh-sig-02?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Apr 2019 19:14:53 -0000 ------=_NextPart_000_0121_01D4F904.F90A3C50 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable I have no problems with this draft progressing. =20 There are two issues that need to be addressed at some point in the = future: =20 1. The examples will need to be re-generated after IANA has completed = the registration. 2. The examples are dumped in the format that I use on the example = github site. There should probably be a pointer to that github site as = well as changing the format of the dump to be CBOR diagnostics. =20 =20 Jim =20 =20 From: COSE On Behalf Of ivaylo petrov Sent: Wednesday, April 10, 2019 2:47 PM To: cose Cc: draft-ietf-cose-hash-sig@ietf.org Subject: [COSE] =F0=9F=94=94 WG Last Call of draft-ietf-cose-hash-sig-02 =20 Dear all, =20 As discussed during the Prague meeting, this email starts a working = group last call for draft-ietf-cose-hash-sig-02 [1], ending on =20 23:59:39 CET on Thursday, April 25, 2019. =20 Please review it and either provide your comments and feedback or if you = review the documents without finding concerns, please say so on the = list. =20 As a reminder, if you are aware of any patent claims that might apply to = this draft, please review BCP 78 and BCP 79 and make any appropriate IPR = declarations as soon as possible. If you are not sure whether you need = to make a declaration or not,=20 please talk to the chairs and we will help. =20 Best regards, - Matthew and Ivaylo COSE Chairs [1]: = https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ ------=_NextPart_000_0121_01D4F904.F90A3C50 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

I have no = problems with this draft progressing.

 

There are = two issues that need to be addressed at some point in the = future:

 

  1. The examples will need = to be re-generated after IANA has completed the = registration.
  2. The examples are = dumped in the format that I use on the example github site.=C2=A0 There = should probably be a pointer to that github site as well as changing the = format of the dump to be CBOR diagnostics.

 

 

Jim

 

 

From: COSE = <cose-bounces@ietf.org> On Behalf Of ivaylo = petrov
Sent: Wednesday, April 10, 2019 2:47 PM
To: = cose <cose@ietf.org>
Cc: = draft-ietf-cose-hash-sig@ietf.org
Subject: [COSE] 🔔 WG = Last Call of draft-ietf-cose-hash-sig-02

 

D= ear all,

 

A= s discussed during the Prague meeting, this email starts a working group = last call for draft-ietf-cose-hash-sig-02 [1], ending on

 

&= nbsp;      23:59:39 CET on Thursday, April = 25, 2019.

 

P= lease review it and either provide your comments and feedback or if you = review the documents without finding concerns, please say so on the = list.

 

A= s a reminder, if you are aware of any patent claims that might apply to = this draft, please review BCP 78 and BCP 79 and make any appropriate IPR = declarations as soon as possible. If you are not sure whether you need = to make a declaration or not,

p= lease talk to the chairs and we will help.

 

B= est regards,

-= Matthew and Ivaylo

C= OSE Chairs


[= 1]: h= ttps://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/=

------=_NextPart_000_0121_01D4F904.F90A3C50-- From nobody Mon Apr 22 14:42:52 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A75C12012C for ; Mon, 22 Apr 2019 14:42:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X_65luWtnn5J for ; Mon, 22 Apr 2019 14:42:49 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B614120128 for ; Mon, 22 Apr 2019 14:42:49 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 3DB7F300A99 for ; Mon, 22 Apr 2019 17:24:31 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id yPd9LeRGYzlI for ; Mon, 22 Apr 2019 17:24:29 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id 88F6B3001F1; Mon, 22 Apr 2019 17:24:29 -0400 (EDT) From: Russ Housley Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_E680CE08-4E84-445B-8DEB-AD7C47F3D4A2" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Date: Mon, 22 Apr 2019 17:42:46 -0400 In-Reply-To: <012001d4f93f$a5685100$f038f300$@augustcellars.com> Cc: cose To: Jim Schaad References: <012001d4f93f$a5685100$f038f300$@augustcellars.com> X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WG_Last_Call_of_draft-ietf-cose-ha?= =?utf-8?q?sh-sig-02?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Apr 2019 21:42:51 -0000 --Apple-Mail=_E680CE08-4E84-445B-8DEB-AD7C47F3D4A2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Jim: Yes, we need to make sure that the examples are correct when the IANA = assignments are made. Please provide a pointer to the GitHub code that you want to reference, = and I'll put it into my edit buffer so it is not forgotten. Russ > On Apr 22, 2019, at 3:14 PM, Jim Schaad = wrote: >=20 > I have no problems with this draft progressing. > =20 > There are two issues that need to be addressed at some point in the = future: > =20 > The examples will need to be re-generated after IANA has completed the = registration. > The examples are dumped in the format that I use on the example github = site. There should probably be a pointer to that github site as well as = changing the format of the dump to be CBOR diagnostics. > =20 > =20 > Jim > =20 > =20 > From: COSE > On = Behalf Of ivaylo petrov > Sent: Wednesday, April 10, 2019 2:47 PM > To: cose > > Cc: draft-ietf-cose-hash-sig@ietf.org = > Subject: [COSE] =F0=9F=94=94 WG Last Call of = draft-ietf-cose-hash-sig-02 > =20 > Dear all, > =20 > As discussed during the Prague meeting, this email starts a working = group last call for draft-ietf-cose-hash-sig-02 [1], ending on > =20 > 23:59:39 CET on Thursday, April 25, 2019. > =20 > Please review it and either provide your comments and feedback or if = you review the documents without finding concerns, please say so on the = list. > =20 > As a reminder, if you are aware of any patent claims that might apply = to this draft, please review BCP 78 and BCP 79 and make any appropriate = IPR declarations as soon as possible. If you are not sure whether you = need to make a declaration or not,=20 > please talk to the chairs and we will help. > =20 > Best regards, > - Matthew and Ivaylo > COSE Chairs >=20 > [1]: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig = / --Apple-Mail=_E680CE08-4E84-445B-8DEB-AD7C47F3D4A2 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Jim:

Yes, = we need to make sure that the examples are correct when the IANA = assignments are made.

Please provide a pointer to the GitHub code that you want to = reference, and I'll put it into my edit buffer so it is not = forgotten.

Russ


On Apr = 22, 2019, at 3:14 PM, Jim Schaad <ietf@augustcellars.com> wrote:

I have no = problems with this draft progressing.
 
There are two issues that need to be = addressed at some point in the future:
 
  1. The = examples will need to be re-generated after IANA has completed the = registration.
  2. The examples are dumped in the format that I use = on the example github site.  There should probably be a pointer to = that github site as well as changing the format of the dump to be CBOR = diagnostics.
 
 
Jim
 
 
From: COSE <cose-bounces@ietf.org> On Behalf = Of ivaylo = petrov
Sent: Wednesday, April 10, 2019 = 2:47 PM
To: cose <cose@ietf.org>
Cc: draft-ietf-cose-hash-sig@ietf.org
Subject: [COSE] =F0=9F=94=94 WG Last Call of = draft-ietf-cose-hash-sig-02
 
Dear all,
 
As = discussed during the Prague meeting, this email starts a working group = last call for draft-ietf-cose-hash-sig-02 [1], ending on
 
       23:59:39 CET on = Thursday, April 25, 2019.
 
Please review it and either provide your comments = and feedback or if you review the documents without finding concerns, = please say so on the list.
 
As a reminder, if you are aware of any patent = claims that might apply to this draft, please review BCP 78 and BCP 79 = and make any appropriate IPR declarations as soon as possible. If you = are not sure whether you need to make a declaration or not, 
please = talk to the chairs and we will help.
 
Best regards,
- Matthew and = Ivaylo
COSE Chairs

[1]: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/
=
= --Apple-Mail=_E680CE08-4E84-445B-8DEB-AD7C47F3D4A2-- From nobody Wed Apr 24 07:13:54 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B46E1200C7 for ; Wed, 24 Apr 2019 07:13:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outer-planes-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xciRxQZYf-AC for ; Wed, 24 Apr 2019 07:13:51 -0700 (PDT) Received: from mail-it1-x133.google.com (mail-it1-x133.google.com [IPv6:2607:f8b0:4864:20::133]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D327312009C for ; Wed, 24 Apr 2019 07:13:51 -0700 (PDT) Received: by mail-it1-x133.google.com with SMTP id u65so6428266itc.2 for ; Wed, 24 Apr 2019 07:13:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outer-planes-net.20150623.gappssmtp.com; s=20150623; h=sender:subject:from:to:references:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to; bh=yACe2nlPH3UrJ987qtqSY2aPKDMBR8Ts43dsc01cgtQ=; b=t/oF8tVH79eIJ9t+/kEtZxUEXuN+0cNXfCayK/IaHO04yiEdI9wwmFkb8qnkn3IeEj hvbZRQ4aGtov475F2UQemyBlyU16bron8LN+B9sMtvIA6LvfZwhSzR3YIwzvhSecjEAV Su0Q5rCkUxefIibJ1RfcnjQRtWI47SKfNpvzyk1qkXDi9KYJz7v3e7U4472BFkuutrrl 75MdgaJn//kr5S07pEJo0qF83sYr+0MyIf7R55tYZ2ZycSUAEsUlyHkixtwXM5NMzU9r dD/m9l13Z2PtpNnsqdya0662tkOMPJP69BlCXw8d0CEDp5s6922BFG38qUpQwh1NBZYk 7buw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:subject:from:to:references:openpgp :autocrypt:message-id:date:user-agent:mime-version:in-reply-to; bh=yACe2nlPH3UrJ987qtqSY2aPKDMBR8Ts43dsc01cgtQ=; b=M/OnmENxX/Ioj94IVHMGqV/6O5KoPstQqdBNf8ykScqhNJLSJbkwzc5T2j6K/VDdYA ClKq8tcpPGdasCfLFg0aPOADJYFQkIAJ9JNb1ktVkSla6EPqRkbyZYEnhA2cqSUxJjsl YDKz2/fqsKjZ2lsHNldaeHZKoG81t3v6mHQ0btionLFAzhYZSjjpvQlJqlCxugmsUC+Z UX+RojjDw3yPSooChgt1IfDyN50AVd87u9b6HNIaGj8QUB51PPWArbrEoV5JGcjIziM7 IpJKbSqS5q5Mf4NJVo8Ol85SHanbSJL47B37p2nyx6SQ6i0UtwCRccNyoMMLoHrmEjJg nZ+w== X-Gm-Message-State: APjAAAWEohpgGY8BuIGb+plHiPML1tgwI5O1cjfXLKwRzMkGKQr2XeYv VRownGx+g/ZgOefXvlA4Ro79LbbU5hEHGQ== X-Google-Smtp-Source: APXvYqwXh5iiFCS+ft20EoJNSYA07VJpUTueCCO3cWr2Xpgz6DqQXmXc3DQA19xgnK+gg/7kIcA0DA== X-Received: by 2002:a24:a505:: with SMTP id k5mr6738005itf.160.1556115230762; Wed, 24 Apr 2019 07:13:50 -0700 (PDT) Received: from mmiller-44677.local (c-24-8-164-51.hsd1.co.comcast.net. [24.8.164.51]) by smtp.gmail.com with ESMTPSA id a124sm5235504itc.18.2019.04.24.07.13.49 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 24 Apr 2019 07:13:49 -0700 (PDT) Sender: Matthew Miller From: "Matthew A. Miller" To: cose References: <46c513b8-f5c0-4230-b3bd-7fd9152d4c4c@outer-planes.net> Openpgp: preference=signencrypt Autocrypt: addr=linuxwolf+ietf@outer-planes.net; prefer-encrypt=mutual; keydata= mQENBFJoAooBCADQmEtpbpY/4wTeKgZIuyG7HkxIFgiUeqOvtiBKj/pCA73d7Q5hCvQdGcKJ 6uZsYz3Il9oKoKFxVt90iEXspbE39g6ek19e6RsB4j0Q10l4QvH+EqeD760gs0H2yf/eYj9i uk9/VY6axdQlPsmid1zoQgCNjSM7X4/K26WGMs03sbXJpKdoonelzIlJSNfzi0q546iplo72 D2cCm9BriMkQvcGnsm4B9eBIBn3GKmVx1tsmPNeNTyun2DvaLnrYxbA0Ivo1DzZReds9NZ25 uROI/+b+lcg9/kmHzhK+q8NMQCFWmqpS/lZRKxVBSijKGpGr5h8VLVf5iURHtwG+B/QxABEB AAG0M01hdHRoZXcgQS4gTWlsbGVyIDxsaW51eHdvbGYraWV0ZkBvdXRlci1wbGFuZXMubmV0 PokBPQQTAQoAJwUCWKsJ1AIbAwUJC8ckMQULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRDs 9HJOEJ4Fu1iBCADAcW06d/7GTlBjTlYuMGgjzDBoWeQ9/zxgMnSrgNb6yO7wHzE65CeFs6OI 6LQ4A34CNM3hhcWDIzlqrV25fVyy7qCh6bCNMs1pOT63+Od4kcjHtUnGGTONT5fXSGY7mCtl XJFjb3TwyLUZXQCifhCIaUdF/4SVoGk96W9ssbDKN+5xq7B7gyVkwB0WM67zxt/kC6TPcXXL 5m7jsNRpRmFQqOlIF+HrQAcSr1lKRWgetb1VHfXCgcmDaTKn1QC7s0Ml+27dc0SoIkBI8cnv inJ4oFYWrvnTlOvv+v8AFXZnPrxZ/JYvnVD/y5PX7v08Z8RFXm1AmVxIWjXPI6TySkGvuQEN BFJoAooBCADA/ruHwYlQ7pdjJY6twkZcMmedkQNL6r5tNBeQkwVrvitUjHTKKipjxB2kEkUZ oxPgMI1h7/enDrVlMMMqq6RIJ86H+yx13zNIZNBlJfmVHgHj7TT8spa6A/qIccdiIRNsFVvl vFxpH8sTjVbHfPYexbdOR5kHpZWTzYxNyVLXMK5jen0B4K+vjbgFJAvsoLfzLZ5Bz3kb6dpu xUNzqhDyhk5/UPaCIFvZWBtiRKmkqPwEq8G2aMJq5Z4Sr8CRkpoMB25rxCPS8R+ByiHxpq+U 8mKuqPVg1LJzcA7hHmms8aBN6lxSlbyKnzEg8AWgld+6+xlJXu5U/fqDAClTj5mfABEBAAGJ ATwEGAEKACYCGwwWIQQx11iN7JBpDWvMmODs9HJOEJ4FuwUCWm+kiwUJC8tagQAKCRDs9HJO EJ4Fu40cB/9xyEnuQegivmL6OBVG5HvUAaXGUxtWiWdLm3NrduL0h7rctF060xQTekNRCjbl xZ1w/unPDBEEIMPYbF8i7IwJZoRLTG1B1MjI04AUU60G0IU6uw0ST6IsC7oYGvhDNJApbVBb j9u9x+kzaktCftl3qdpSKgRh9McIyZgevuFBdo80RDtX8niktUA3xsfJWBD1yJA33UNSzqOe 54wFRbsM2+4erREPMD659h2lACPCXjPW/6ucnv0/cdPF8V2JNMCT0yPJVCSUfFLTrtyYtiRI 6S52cI4eEOZIXCQp30TA4E27O2mMLOYzlKA5P5T+Icf4gz8e/puNUKIBDlY6KF7p Message-ID: Date: Wed, 24 Apr 2019 08:13:48 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <46c513b8-f5c0-4230-b3bd-7fd9152d4c4c@outer-planes.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="BKjm14o36cjKnybs16q6ml8K5EyQF3Y4i" Archived-At: Subject: [COSE] results (Last) Call for Consensus - CounterSignature0 vs CounterSignature1 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Apr 2019 14:13:53 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --BKjm14o36cjKnybs16q6ml8K5EyQF3Y4i Content-Type: multipart/mixed; boundary="noNex4hKHo01C8ggOHIYNGZp0pIEP1uzh"; protected-headers="v1" From: "Matthew A. Miller" To: cose Message-ID: Subject: results (Last) Call for Consensus - CounterSignature0 vs CounterSignature1 References: <46c513b8-f5c0-4230-b3bd-7fd9152d4c4c@outer-planes.net> In-Reply-To: <46c513b8-f5c0-4230-b3bd-7fd9152d4c4c@outer-planes.net> --noNex4hKHo01C8ggOHIYNGZp0pIEP1uzh Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Thank you all who participating in the various rounds, either in-person on on-list. =46rom the comments, it does not appear we have consensus to make the change. The existing context "CounterSignature0" will remain. - Ivaylo and Matthew COSE WG Chairs On 19/03/29 06:06, Matthew A. Miller wrote: > This is another call for consensus, ending April 5. >=20 > The issue is whether to change the counter signature context string fro= m > "CounterSignature0" to "CounterSignature1". >=20 > The changed value would be more consistent with the structure and text > of the document, however this is a breaking change that could cause > interoperability failures with implementations that have not updated. >=20 > This issue has previously been asked on this list, as well as in the > meeting session in Prague. In the meeting session, a number of people > raised objections because this is a breaking change. >=20 > Please respond by April 5, either saying you support the change (and > possibly why), or saying you do not support the change (and why). >=20 >=20 > Thank you, >=20 > - Ivaylo and Matthew > COSE WG Chairs >=20 --noNex4hKHo01C8ggOHIYNGZp0pIEP1uzh-- --BKjm14o36cjKnybs16q6ml8K5EyQF3Y4i Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEMddYjeyQaQ1rzJjg7PRyThCeBbsFAlzAbxwACgkQ7PRyThCe BbtkRgf+PlRLaEK21VMObdEMwyXwSA9q/ycaKbikL/KdTDF+4Ssltyy3clU0N0Kp jKxlg15G0yTrQsTRcrUUkrqw8Z4zKM/m0Jwzdj0d/bk5g4FaJDyREwsUBpWOjrFv RUhHue87m7anPsiaEFEIZj0+e7qrZ6tdKOyAvsq6FBBiycb0yR3w2DGaxAjkIt7H U1U7SC7XXIYZ0IBV4R07fQ25wyFR2kQJ51EiQcyfgoAtr8cYM1+ByW1CUaeWyKhK hRRGVTIH1519usNXP8oRBjiH2ZEthcqifp7mWLOJZ3nrf+5zlhiwrEs6xpBS132Z k8dIXWIz0444HDALmIUE33O+F4eLdw== =6nzP -----END PGP SIGNATURE----- --BKjm14o36cjKnybs16q6ml8K5EyQF3Y4i-- From nobody Mon Apr 29 15:35:57 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A74A61201AA for ; Mon, 29 Apr 2019 15:35:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x6GGTq5plRBR for ; Mon, 29 Apr 2019 15:35:54 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A48B21200EA for ; Mon, 29 Apr 2019 15:35:54 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 963C6300AA2 for ; Mon, 29 Apr 2019 18:17:36 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id kY2vchxyKNU1 for ; Mon, 29 Apr 2019 18:17:34 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id B1CDC3004C7 for ; Mon, 29 Apr 2019 18:17:34 -0400 (EDT) From: Russ Housley Content-Type: multipart/alternative; boundary="Apple-Mail=_BD802234-307A-4997-B5A9-8A4FC6D9D9D0" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Message-Id: <60ADD5AE-B498-4C27-A14F-2A5AA4ED3C1E@vigilsec.com> References: <20190429215902.902E0B81E91@rfc-editor.org> To: cose Date: Mon, 29 Apr 2019 18:35:51 -0400 X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: [COSE] Fwd: RFC 8554 on Leighton-Micali Hash-Based Signatures X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Apr 2019 22:35:57 -0000 --Apple-Mail=_BD802234-307A-4997-B5A9-8A4FC6D9D9D0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii FYI, the LMS/HSS signature algorithm has been published an an = informational RFC. Russ > From: rfc-editor@rfc-editor.org > Subject: [IRTF-Announce] RFC 8554 on Leighton-Micali Hash-Based = Signatures > Date: April 29, 2019 at 5:59:02 PM EDT > To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org, = irtf-announce@irtf.org > Cc: drafts-update-ref@iana.org, cfrg@irtf.org, = rfc-editor@rfc-editor.org >=20 > A new Request for Comments is now available in online RFC libraries. >=20 >=20 > RFC 8554 >=20 > Title: Leighton-Micali Hash-Based Signatures=20 > Author: D. McGrew, > M. Curcio, > S. Fluhrer > Status: Informational > Stream: IRTF > Date: April 2019 > Mailbox: mcgrew@cisco.com,=20 > micurcio@cisco.com,=20 > sfluhrer@cisco.com > Pages: 61 > Characters: 135954 > Updates/Obsoletes/SeeAlso: None >=20 > I-D Tag: draft-mcgrew-hash-sigs-15.txt >=20 > URL: https://www.rfc-editor.org/info/rfc8554 >=20 > DOI: 10.17487/RFC8554 >=20 > This note describes a digital-signature system based on cryptographic > hash functions, following the seminal work in this area of Lamport, > Diffie, Winternitz, and Merkle, as adapted by Leighton and Micali in > 1995. It specifies a one-time signature scheme and a general > signature scheme. These systems provide asymmetric authentication > without using large integer mathematics and can achieve a high > security level. They are suitable for compact implementations, are > relatively simple to implement, and are naturally resistant to > side-channel attacks. Unlike many other signature systems, hash-based > signatures would still be secure even if it proves feasible for an > attacker to build a quantum computer. >=20 > This document is a product of the Crypto Forum Research Group (CFRG) > in the IRTF. This has been reviewed by many researchers, both in the > research group and outside of it. The Acknowledgements section lists > many of them. >=20 >=20 > INFORMATIONAL: This memo provides information for the Internet = community. > It does not specify an Internet standard of any kind. Distribution of > this memo is unlimited. >=20 > This announcement is sent to the IETF-Announce, rfc-dist and = IRTF-Announce lists.To subscribe or unsubscribe, see > https://www.ietf.org/mailman/listinfo/ietf-announce > https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist > https://www.irtf.org/mailman/listinfo/irtf-announce >=20 > For searching the RFC series, see https://www.rfc-editor.org/search > For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk >=20 > Requests for special distribution should be addressed to either the > author of the RFC in question, or to rfc-editor@rfc-editor.org. = Unless > specifically noted otherwise on the RFC itself, all RFCs are for > unlimited distribution. >=20 >=20 > The RFC Editor Team > Association Management Solutions, LLC >=20 --Apple-Mail=_BD802234-307A-4997-B5A9-8A4FC6D9D9D0 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii FYI, = the LMS/HSS signature algorithm has been published an an informational = RFC.

Russ


From: = rfc-editor@rfc-editor.org
Subject: = [IRTF-Announce] = RFC 8554 on Leighton-Micali Hash-Based Signatures
Date: = April 29, 2019 at 5:59:02 PM = EDT
To: = ietf-announce@ietf.org, rfc-dist@rfc-editor.org, irtf-announce@irtf.org
Cc: drafts-update-ref@iana.org, cfrg@irtf.org, rfc-editor@rfc-editor.org

A new Request for Comments is = now available in online RFC libraries.


       RFC 8554

=        Title: =      Leighton-Micali Hash-Based Signatures
       Author: =     D. McGrew,
=             &n= bsp;      M. Curcio,
=             &n= bsp;      S. Fluhrer
=        Status: =     Informational
=        Stream: =     IRTF
=        Date: =       April 2019
=        Mailbox:    mcgrew@cisco.com,
=             &n= bsp;      micurcio@cisco.com, =
=             &n= bsp;      sfluhrer@cisco.com
       Pages: =      61
=        Characters: 135954
=        Updates/Obsoletes/SeeAlso: =   None

=        I-D Tag: =    draft-mcgrew-hash-sigs-15.txt

       URL: =        https://www.rfc-editor.org/info/rfc8554

       DOI: =        10.17487/RFC8554

This note describes a digital-signature system = based on cryptographic
hash functions, following the = seminal work in this area of Lamport,
Diffie, Winternitz, = and Merkle, as adapted by Leighton and Micali in
1995. =  It specifies a one-time signature scheme and a general
signature scheme.  These systems provide asymmetric = authentication
without using large integer mathematics and = can achieve a high
security level.  They are suitable = for compact implementations, are
relatively simple to = implement, and are naturally resistant to
side-channel = attacks.  Unlike many other signature systems, hash-based
signatures would still be secure even if it proves feasible = for an
attacker to build a quantum computer.

This document is a product of the Crypto Forum = Research Group (CFRG)
in the IRTF.  This has been = reviewed by many researchers, both in the
research group = and outside of it.  The Acknowledgements section lists
many of them.


INFORMATIONAL: This memo provides information for the = Internet community.
It does not specify an Internet = standard of any kind. Distribution of
this memo is = unlimited.

This announcement is sent to the = IETF-Announce, rfc-dist and IRTF-Announce lists.To subscribe or = unsubscribe, see
 https://www.ietf.org/mailman/listinfo/ietf-announce
 https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist  https://www.irtf.org/mailman/listinfo/irtf-announce

For searching the RFC series, see https://www.rfc-editor.org/search
For = downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk
Requests for special distribution should be addressed to = either the
author of the RFC in question, or to rfc-editor@rfc-editor.org.  Unless
specifically noted otherwise on the RFC itself, all RFCs are = for
unlimited distribution.

The RFC Editor Team
Association Management = Solutions, LLC


= --Apple-Mail=_BD802234-307A-4997-B5A9-8A4FC6D9D9D0-- From nobody Mon Apr 29 15:52:59 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 688541200DE for ; Mon, 29 Apr 2019 15:52:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zqN4MirePVyz for ; Mon, 29 Apr 2019 15:52:55 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0E88120780 for ; Mon, 29 Apr 2019 15:52:55 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id A2485300ABE for ; Mon, 29 Apr 2019 18:34:37 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id scGYWb8wYlaF for ; Mon, 29 Apr 2019 18:34:36 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id 7C6AB3004C7; Mon, 29 Apr 2019 18:34:36 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) From: Russ Housley In-Reply-To: Date: Mon, 29 Apr 2019 18:52:53 -0400 Cc: "cose@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <0E85D28F-E211-45CA-A651-84D343B8AE94@vigilsec.com> References: To: John Mattsson X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: Re: [COSE] Comments on draft-ietf-cose-hash-sig-01 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Apr 2019 22:52:58 -0000 John: I was revisiting an old comment from you. > - Section 1.1: I think some short info on the threat from Shor's = algorithm would be good. I don't think [BH2013] talked about quantum = computers. There are two major points in this section: advances in cryptanalysis = and advances in the development of quantum computers. The presentation = in [BH2103] is about advances in cryptanalysis, not quantum computers. Does this make that more clear? There have been recent advances in cryptanalysis and advances in the development of quantum computers. Each of these advances pose a threat to widely deployed digital signature algorithms. At Black Hat USA 2013, some researchers gave a presentation on the current state of public key cryptography. They said: "Current cryptosystems depend on discrete logarithm and factoring which has seen some major new developments in the past 6 months" [BH2013]. Due to advances in cryptanalysis, they encouraged preparation for a day when RSA and DSA cannot be depended upon. Peter Shor showed that a large-scale quantum computer could be used to factor a number in polynomial time [S1997], effectively breaking RSA. If large-scale quantum computers are ever built, these computers will be able to break many of the public-key cryptosystems currently in use. A post-quantum cryptosystem [PQC] is a system that is secure against quantum computers that have more than a trivial number of quantum bits (qu-bits). It is open to conjecture when it will be feasible to build such computers; however, RSA, DSA, ECDSA, and EdDSA are all vulnerable if large-scale quantum computers come to pass. The HSS/LMS signature algorithm does not depend on the difficulty of discrete logarithm or factoring, as a result these algorithms are considered to be post-quantum secure. Thanks, Russ From nobody Mon Apr 29 16:04:25 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 280D31206EC for ; Mon, 29 Apr 2019 16:04:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5kNeqF7rwu_o for ; Mon, 29 Apr 2019 16:04:20 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C36811200DE for ; Mon, 29 Apr 2019 16:04:19 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 4856EBE64; Tue, 30 Apr 2019 00:04:16 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OWm6FFK3iFCJ; Tue, 30 Apr 2019 00:04:14 +0100 (IST) Received: from [10.244.2.138] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 571E3BE50; Tue, 30 Apr 2019 00:04:14 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1556579054; bh=/3NoEVBE83V3vIllCwUgBOYABJl+qLHXp4XguOM+Voo=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=Rg/FQ0uukCtDiEK7GSGxDnlrf7lTferarEyfRSNoKCNUaqkhtsUkl21nSi/17SSPY x4pztxLldFY4uNkl8XoB/VCikuYV2kTWScvZRJaJptQhLXkI+X2G8aqK9EzG/iDehX dA+JDozLPIwt0Q8Eh9nHewnDE5G6+an5IWw+BaC4= To: Russ Housley , John Mattsson Cc: "cose@ietf.org" References: <0E85D28F-E211-45CA-A651-84D343B8AE94@vigilsec.com> From: Stephen Farrell Openpgp: id=5BB5A6EA5765D2C5863CAE275AB2FAF17B172BEA; url= Autocrypt: addr=stephen.farrell@cs.tcd.ie; prefer-encrypt=mutual; keydata= mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nemCP5PMvmh 5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kTq0IqYzsEv5HI58S+ QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtEgvw4fVhVWJuyy3w//0F2tzKr EMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy+pAh4EKzS1FE7BOZp9daMu9MUQmDqtZU bUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqO Vz+7L+WiVfxLbeVqBwV+4uL9to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJg b097ZaNyuY1ETghVB5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k 4LyM2lp5FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9tlyWxn5Xi HzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQABtDJTdGVwaGVuIEZh cnJlbGwgKDIwMTcpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPokCQAQTAQgAKgIbAwUJ CZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAUCWj6jdwIZAQAKCRBasvrxexcr6o7QD/9m x9DPJetmW794RXmNTrbTJ44zc/tJbcLdRBh0KBn9OW/EaAqjDmgNJeCMyJTKr1ywaps8HGUN hLEVkc14NUpgi4/Zkrbi3DmTp25OHj6wXBS5qVMyVynTMEIjOfeFFyxG+48od+Xn7qg6LT7G rHeNf+z/r0v9+8eZ1Ip63kshQDGhhpmRMKu4Ws9ZvTW2ACXkkTFaSGYJj3yIP4R6IgwBYGMz DXFX6nS4LA1s3pcPNxOgrvCyb60AiJZTLcOk/rRrpZtXB1XQc23ZZmrlTkl2HaThL6w3YKdi Ti1NbuMeOxZqtXcUshII45sANm4HuWNTiRh93Bn5bN6ddjgsaXEZBKUBuUaPBl7gQiQJcAlS 3MmGgVS4ZoX8+VaPGpXdQVFyBMRFlOKOC5XJESt7wY0RE2C8PFm+5eywSO/P1fkl9whkMgml 3OEuIQiP2ehRt/HVLMHkoM9CPQ7t6UwdrXrvX+vBZykav8x9U9M6KTgfsXytxUl6Vx5lPMLi 2/Jrsz6Mzh/IVZa3xjhq1OLFSI/tT2ji4FkJDQbO+yYUDhcuqfakDmtWLMxecZsY6O58A/95 8Qni6Xeq+Nh7zJ7wNcQOMoDGj+24di2TX1cKLzdDMWFaWzlNP5dB5VMwS9Wqj1Z6TzKjGjru q8soqohwb2CK9B3wzFg0Bs1iBI+2RuFnxLkCDQRaPVAyARAA+g3R0HzGr/Dl34Y07XqGqzq5 SU0nXIu9u8Ynsxj7gR5qb3HgUWYEWrHW2jHOByXnvkffucf5yzwrsvw8Q8iI8CFHiTYHPpey 4yPVn6R0w/FOMcY70eTIu/k6EEFDlDbs09DtKcrsT9bmN0XoRxITlXwWTufYqUnmS+YkAuk+ TLCtUin7OdaS2uU6Ata3PLQSeM2ZsUQMmYmHPwB9rmf+q2I005AJ9Q1SPQ2KNg/8xOGxo13S VuaSqYRQdpV93RuCOzg4vuXtR+gP0KQrus/P2ZCEPvU9cXF/2MIhXgOz207lv3iE2zGyNXld /n8spvWk+0bH5Zqd9Wcba/rGcBhmX9NKKDARZqjkv/zVEP1X97w1HsNYeUFNcg2lk9zQKb4v l1jx/Uz8ukzH2QNhU4R39dbF/4AwWuSVkGW6bTxHJqGs6YimbfdQqxTzmqFwz3JP0OtXX5q/ 6D4pHwcmJwEiDNzsBLl6skPSQ0Xyq3pua/qAP8MVm+YxCxJQITqZ8qjDLzoe7s9X6FLLC/DA L9kxl5saVSfDbuI3usH/emdtn0NA9/M7nfgih92zD92sl1yQXHT6BDa8xW1j+RU4P+E0wyd7 zgB2UeYgrp2IIcfG+xX2uFG5MJQ/nYfBoiALb0+dQHNHDtFnNGY3Oe8z1M9c5aDG3/s29QbJ +w7hEKKo9YMAEQEAAYkCJQQYAQgADwUCWj1QMgIbDAUJCZQmAAAKCRBasvrxexcr6qwvD/9b Rek3kfN8Q+jGrKl8qwY8HC5s4mhdDJZI/JP2FImf5J2+d5/e8UJ4fcsT79E0/FqX3Z9wZr6h sofPqLh1/YzDsYkZDHTYSGrlWGP/I5kXwUmFnBZHzM3WGrL3S7ZmCYMdudhykxXXjq7M6Do1 oxM8JofrXGtwBTLv5wfvvygJouVCVe87Ge7mCeY5vey1eUi4zSSF1zPpR6gg64w2g4TXM5qt SwkZVOv1g475LsGlYWRuJV8TA67yp1zJI7HkNqCo8KyHX0DPOh9c+Sd9ZX4aqKfqH9HIpnCL AYEgj7vofeix7gM3kQQmwynqq32bQGQBrKJEYp2vfeO30VsVx4dzuuiC5lyjUccVmw5D72J0 FlGrfEm0kw6D1qwyBg0SAMqamKN6XDdjhNAtXIaoA2UMZK/vZGGUKbqTgDdk0fnzOyb2zvXK CiPFKqIPAqKaDHg0JHdGI3KpQdRNLLzgx083EqEc6IAwWA6jSz+6lZDV6XDgF0lYqAYIkg3+ 6OUXUv6plMlwSHquiOc/MQXHfgUP5//Ra5JuiuyCj954FD+MBKIj8eWROfnzyEnBplVHGSDI ZLzL3pvV14dcsoajdeIH45i8DxnVm64BvEFHtLNlnliMrLOrk4shfmWyUqNlzilXN2BTFVFH 4MrnagFdcFnWYp1JPh96ZKjiqBwMv/H0kw== Message-ID: Date: Tue, 30 Apr 2019 00:04:12 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <0E85D28F-E211-45CA-A651-84D343B8AE94@vigilsec.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="PGRoMjiDos31qPThoTLDEKqO8a1UhSeiZ" Archived-At: Subject: Re: [COSE] Comments on draft-ietf-cose-hash-sig-01 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Apr 2019 23:04:23 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --PGRoMjiDos31qPThoTLDEKqO8a1UhSeiZ Content-Type: multipart/mixed; boundary="4OeBS3USrZAC9VoKkK8o3yhGg0efLB9WY"; protected-headers="v1" From: Stephen Farrell To: Russ Housley , John Mattsson Cc: "cose@ietf.org" Message-ID: Subject: Re: [COSE] Comments on draft-ietf-cose-hash-sig-01 References: <0E85D28F-E211-45CA-A651-84D343B8AE94@vigilsec.com> In-Reply-To: <0E85D28F-E211-45CA-A651-84D343B8AE94@vigilsec.com> --4OeBS3USrZAC9VoKkK8o3yhGg0efLB9WY Content-Type: multipart/mixed; boundary="------------C58930ABDFD79F929785A6AE" Content-Language: en-GB This is a multi-part message in MIME format. --------------C58930ABDFD79F929785A6AE Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Russ, Sorry, I hadn't read this 'till just now, when the text below made me wonder. I don't get the logic for including most of the text in this draft (other than section 3, the samples and IANA stuff). Why would this draft be introducing Shor and LMS etc? That seems like a thing to be done by reference only. (It may make sense for the draft to include this text but for it to not be in an eventual RFC I guess.) S. On 29/04/2019 23:52, Russ Housley wrote: > John: >=20 > I was revisiting an old comment from you. >=20 >> - Section 1.1: I think some short info on the threat from Shor's algor= ithm would be good. I don't think [BH2013] talked about quantum computers= =2E >=20 > There are two major points in this section: advances in cryptanalysis a= nd advances in the development of quantum computers. The presentation in= [BH2103] is about advances in cryptanalysis, not quantum computers. >=20 > Does this make that more clear? >=20 > There have been recent advances in cryptanalysis and advances in the= > development of quantum computers. Each of these advances pose a > threat to widely deployed digital signature algorithms. >=20 > At Black Hat USA 2013, some researchers gave a presentation on the > current state of public key cryptography. They said: "Current > cryptosystems depend on discrete logarithm and factoring which has > seen some major new developments in the past 6 months" [BH2013]. Du= e > to advances in cryptanalysis, they encouraged preparation for a day > when RSA and DSA cannot be depended upon. >=20 > Peter Shor showed that a large-scale quantum computer could be used > to factor a number in polynomial time [S1997], effectively > breaking RSA. If large-scale quantum computers are ever built, thes= e > computers will be able to break many of the public-key cryptosystems= > currently in use. A post-quantum cryptosystem [PQC] is a system tha= t > is secure against quantum computers that have more than a trivial > number of quantum bits (qu-bits). It is open to conjecture when it > will be feasible to build such computers; however, RSA, DSA, ECDSA, > and EdDSA are all vulnerable if large-scale quantum computers come t= o > pass. >=20 > The HSS/LMS signature algorithm does not depend on the difficulty of= > discrete logarithm or factoring, as a result these algorithms are > considered to be post-quantum secure. >=20 > Thanks, > Russ >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose >=20 --------------C58930ABDFD79F929785A6AE Content-Type: application/pgp-keys; name="0x5AB2FAF17B172BEA.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x5AB2FAF17B172BEA.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nem CP5PMvmh5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kT q0IqYzsEv5HI58S+QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtE gvw4fVhVWJuyy3w//0F2tzKrEMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy +pAh4EKzS1FE7BOZp9daMu9MUQmDqtZUbUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5 iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqOVz+7L+WiVfxLbeVqBwV+4uL9 to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJgb097ZaNyuY1ETghV B5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k4LyM2lp5 FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9t lyWxn5XiHzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQAB tCFTdGVwaGVuIEZhcnJlbGwgPHN0ZXBoZW5AamVsbC5pZT6JAj0EEwEIACcFAlo9 UYwCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQWrL68XsXK+qG CxAApYHWYgGOIL3G6/OpkejdAkQoCVQAK8LJUSf6vzwost4iVfxIKcKW/3RqKNKk rRl8beJ7j1CWXAz9+VXAOsE9+zNxXIDgGA7HlvJnhffl+qwibVgiHgUcJFhCSbBr sjC+1uULaTU8zYEyET//GOGPLF+X+degkE/sesh4zcEAjF7fGPnlncdCCH3tvPZZ sdTcjwOCRVonKsDgQzBTCMz/RPBfEFX44HZx4g1UQAcCA4xlucY8QkJEyCrSNGpG nvGK8DcGSmnstl1/a9fnlhpdFxieX3oY2phJ1WKkYTn6Advrek3UP71CKxpgtPmk d3iUUz/VZa0Cv6YxQXskspRDVEvdCMYSQBtJPQ4y2+5UxVR9GIQXenwYp9AP2niv Voh+ITsDWWeWnnvYMq07rSDjq0nGdj41MJkNX+Yb2PXVyXItcj5ybE3T2+y3pSBG FEZYJGuaL4NwtBJFMOdOtBmUOPbetS2971EL3Izxb7ibOZWDwexv+8R6SWYfP1wV N3p46RyBQuXqJV8ccE11m6vtZTGSYgnLUUFZMRQYH+0hwuYe0T3AA18xDdSYsa8v ovCCd3l5S4UNzIM2PMChqGrEzKapUpZg7+8ACcxRU3b9Ihd7WYjJ+pQPCoWYKozv tEvenbNpE/govO/ED3B14e+R2yevRPjRrsN7PJzSf15fQLuJARwEEAEIAAYFAlo9 UqAACgkQLzyHNoBfjaLrSwf+MIHbFRQ4O5cmLYR5sIByWelN3SuRN/gW8rpKo9Ok Cz6An8uV/iCXy5tNMLzzi0BFl8f22DwBcC5qy9qnlIAdogWam1qWoTAoAD8veEqm uKhYrqJsCcAyNrKYmK0hP3rpHxx1LySDmKYXmw/8qtBXKHTouMm+5tSsznhykRMT AAr2p7PSaHgo+hIVaW/rKSspHjDhhZS+G9mtOZad1IH29M6G1Q1NCO0Ywe8krKLQ IAQlFxtgvOqpPOZNzeKBa/+KbE8TGgMWrkOhC8OeEM5PVzdDhlhD9kPzB/pCKDF5 DofJ/ZRqnDpbKPQ0bsW38AOig3kOc0A27awiBEw3urqR1YkCMwQQAQgAHRYhBH4X CgRchM9GDit5oBDvedn9g1MSBQJbtyScAAoJEBDvedn9g1MSI/oP/0A9J9nrnBMq Zpm857lfYWw+rshLK+tyeP4OQeOqnDFvs9jePpcyJLG3DF2r6VbVKPQq+AE6Uf5h cJBDEN6BjEhRPSbLcqG3A1cz/nNwm8rPmNp+oKhmaBBQGxwciMLmzgynsDydnjPp MyEs04zvsbsl4vrp2095o105l8KcrrxQrioFjbwveGwHQK9bxJKhx9D+gIk+MouB ur45UDKTZkMZrr9FGrtkyXCGAxvKdcNC5Oa8z9sj1rcUJfG/OpVAMWhArdlZbFUQ yoX6pU2Zb1CR2qpWAVerGSfBhmfCyStjARqaKxlftjO+Bj3Jj73Cr5eqej3qB5+V 4BCsPjr4RLvVbYUCPsRdxWc+nBLlfVYkRURu21g1hFm5KFPjgUkyo1s4vjUOY8Dy I+xLGF7f/IhUBG6l+Vswhpwu7ydalZkeFiPx5xna5NfbEYxvsIf71DvipGvIOaHv X4egWoFgm8n/9c3rcMxJtpwHPSsUt5dgLsyu6VE0IbvOAc3dN7CWJ355DVFJq9Zg 2YVf0izSpyyzJeGsgkfjW6xpmdvZxuT2UcN4BTcm6vYqueASGrb3lfhzC5gpeVsc /MoSjTS65vNWbpzONZWMZuLEFraxWJzC0JrDK3NCd0VN3kstqGkVbUIiYOnUm8Vu 4zoVMLlGWzHLIGoPRG2nRezn1YyNfyb5iQGcBBABCgAGBQJbxcflAAoJEGo7ETk8 pK1gE7QL/ApC5P68W5DrI1787WJVZv1u4t/g39vTr7Xer3UMTVQg10vpa7pmqOGh jIDzDMg3Pe3K3M7fVzfAlUA1qw6ne4RCueVoRKpubeF4AlYbMr0K6hNCPjt5uAxm bBVuejKTc6pru5rv5gKL0nDbr+Snft5xt7juBLSSimw0/41sZnkjCxo9rF/RA/v6 +uWyK171RKmsEYu8fFtw1eqUNt/Xj792TUixE3pxXheNtQtZGk/9P3W83ChhG4Fh 5EQsn0pIh9wZIAbMRLpgRKyW87fWHZC8/YH8h7afarvn9Thl5pFUldCe22mNJj6K LChn2aEHQd+PdY1GBpZEcmNEUPuovwzatM0h64hCzTm41eDqRfihZVBT7TbfXQnv 8rywa42Mk756RGzzEZcQEhwQXZcMQUfxIQQ2VyJo0zG36VdZTQF7TF/4Lz7/3cJ5 6jOIm+dwPXtu+C2wAQuD4USOLt4JWPYpqzDfHYJIND/497P9Z9SuQeahr2ez3DRB g3qsHEjBV7QyU3RlcGhlbiBGYXJyZWxsICgyMDE3KSA8c3RlcGhlbi5mYXJyZWxs QGNzLnRjZC5pZT6JAkAEEwEIACoCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwEC HgECF4AFAlo+o3cCGQEACgkQWrL68XsXK+qO0A//ZsfQzyXrZlu/eEV5jU620yeO M3P7SW3C3UQYdCgZ/TlvxGgKow5oDSXgjMiUyq9csGqbPBxlDYSxFZHNeDVKYIuP 2ZK24tw5k6duTh4+sFwUualTMlcp0zBCIzn3hRcsRvuPKHfl5+6oOi0+xqx3jX/s /69L/fvHmdSKet5LIUAxoYaZkTCruFrPWb01tgAl5JExWkhmCY98iD+EeiIMAWBj Mw1xV+p0uCwNbN6XDzcToK7wsm+tAIiWUy3DpP60a6WbVwdV0HNt2WZq5U5Jdh2k 4S+sN2CnYk4tTW7jHjsWarV3FLISCOObADZuB7ljU4kYfdwZ+WzenXY4LGlxGQSl AblGjwZe4EIkCXAJUtzJhoFUuGaF/PlWjxqV3UFRcgTERZTijguVyREre8GNERNg vDxZvuXssEjvz9X5JfcIZDIJpdzhLiEIj9noUbfx1SzB5KDPQj0O7elMHa1671/r wWcpGr/MfVPTOik4H7F8rcVJelceZTzC4tvya7M+jM4fyFWWt8Y4atTixUiP7U9o 4uBZCQ0GzvsmFA4XLqn2pA5rVizMXnGbGOjufAP/efEJ4ul3qvjYe8ye8DXEDjKA xo/tuHYtk19XCi83QzFhWls5TT+XQeVTMEvVqo9Wek8yoxo67qvLKKqIcG9givQd 8MxYNAbNYgSPtkbhZ8SJARwEEAEIAAYFAlo9UqAACgkQLzyHNoBfjaLzHAgAlWT6 NXEGtw/r1miKNGcopzvzILQ9oB8rKI9U9EL6tOf/y2V5oYee/GyQDb3ZdoPxxYYc Jf+RyiH1nMoqUIZiZJaf3bJXinDZ5+AdfE++UR2NBvqaNyC6u3r24jo1B/sagKbY tWgsYtRqHLD4IWi37MZrVyjBuF7u14Q07+uhjq6mX2O/tHpCYw/Q82tbeTRPyUf1 WQOAfD1kfBpW9PvAva5Iw9FWeXpCXRzwxnCZhYfGfqtuSw6CPBYLdbikqML6FZ7E DuTBb/8um1wK7Y9bgeIQC+CYjhYB5RXa1tDJRab2Js4luCvSR0w/CgHw26293tlv e2Q6UTrmHxP5U22DlokCPQQTAQgAJwUCWj1QMgIbAwUJCZQmAAULCQgHAgYVCAkK CwIEFgIDAQIeAQIXgAAKCRBasvrxexcr6tJpD/4rrILH+meP07vrx8wW5eYuqCiP GYnh/CXxIF8eLrfbe5d4QRgtq+w6UeQPMyzKRIRiCoBXB2oJLBZHyxBPxZlg33dT MrEGn8QWKx2iNuz9rZMXyOSWFetuO01d/aUPd5BnbLbIyK5of8xCQlXM6KH8bc+9 gQ7edR9mfLTdvBf2FR522hg8BRBM1imKc3vO8v39+qIHHRjuiwxBBCAOhHtHRsZX ripS0uFA07dM46Oi/E8osjx6fQt/lH5z/PN+2adxYSrLSAXfr1oD3RxYNhuWgyGF L64/VCQb1YGjf0Z5MBPnWm9jgUoOY5K9eNSS0L83WeJjlF5+Q/WOgB+rb49Prm2D Feo9+S9f2V53Llz1WIspXJg6f+n9lmHE94MfQj1GAHCzI0FeL19lvM+LhD8jJSCb hrC3+yobyy/AUOs5Z3E+njjX1FF/VCVAs6iOa6i+XG+Y1hh3ir2y1kckJ5auT10M SU8GEZu9ayU4M3o3N9yxOjaoP0NuQ4MMLL/n/u4u94AeZaHPNBXn/hVfVRRmpRXt GKvJtFAEppGEYezB+bLKIm6XlpPkhnwYzleLZ7AMEco2C6QM8QPB3g3JpS3sqRhA 5rEP4lL16BmijmF+CHoPE/zwgKZbKpyVDqvIW5IDgvfIC2X4pbZDRvGIUKaGSB4+ ksZgUUnNyvfQr2p7jokCMwQQAQgAHRYhBH4XCgRchM9GDit5oBDvedn9g1MSBQJb tySbAAoJEBDvedn9g1MSeKkQAJm44jt1kwHgQgeDBKdjdvl0AjE0xVEQxriZ6lP/ l//34YT0auFfzsYIrChSpQXAEtobBAr4Ohw1Us+BZe+H5P8vm6LRuPwozC3SjwfX 4Iec8+9ot6tIVg4sbedDSgb/CCFVjsmIGcQ1P73JLJTBJ6mxYCV/gn3QC6bwDOFo 7kD9FDHCjRN8XfhHQ4Q9cYyt06uF31qG/aumgWYC9geCGgAwiHgwxNYb9GoJ0iZj CROwbYvLTcQgsVUW2bTmsVR13UVKDsdl02sRV7qcVYW6R0a3Ra8KudX+nt25H5DR Gd382KZ5W8pydsy/viTvD9z6v0ulChBYxAedIvGIClrhbxlLEPmIg4ImVOLGqsUg Vm32J95WOjEkk4PEZ12xSDBtwhSJqmJNboWlfmw43KdIbY8zNhffIO3N6O7FsdGx mqyHeLoTpqY+ySVUPpbuyW8ujnI/J//+6hdTZ9dQsEJQlWngKuWOQ5ma58MPSN88 zllsqhZAFQjNxqnkSzL6ZQ+v/jvuRRe16B80AeO55DsmbWsMv/YLLD1mSi7+Khy2 EtMBhgojWwrGMvdLN6X3mnzNJEscYyLxM9tSk+iySP2sLthK0BVgpAzBSdaf/ezI z60P+neHDzteNFf8Mn7lmgYk1amvZoJ29s5+n2HwxyRL5dVMyMdyQmntubbctfqr Z0tIiQGcBBABCgAGBQJbxcflAAoJEGo7ETk8pK1gnCYMAJY4FeIYjlIXGghFWzsB 4fYwK1+iaFpU3fSto5qcrqVtVPjXpwqczqBWeXGyQxiB0kan4OVAXydIeaP8EAuF CA7paP3s9STLJBO3KurkwyRkPW5zo0X7xVqaVToRsX2Ul98KVJoHYQD1KdezEtwl vpNwiiBr42AYR751Vm6JBVAbQXuFpB3c8bUV0OkkRxNFtL8/2PieHar58n5dntGk bPlPkztahsFqktgacIgXHX5vaT+7YeeZ1DWLOYjGO0wNhkOSeroCmxwJUikU7joB p823L7r5KfpqWTPpSCzVstQKZUGmmoE1qCswY/Ud5wvp9SccpIILkRXj0rZRtfnE 5MpL3hjmtNzfDd9qIsJtBJlSB2hZwAsVm1l+EWN9hG3tqyA43niUMy2n6q690of3 berSiQ+kvY/aC9Hx8I+bKzOV9/J2VUTqfaPZa4Uy2rVX5Q2p69n/PMj7mEer0rCL 3j9V16J9c+s0BSkXoKdtYdB0TWVhBgUybd9qtYcwHWvhP7QuU3RlcGhlbiBGYXJy ZWxsIDxzdGVwaGVuQHRvbGVyYW50bmV0d29ya3MuY29tPokCPQQTAQgAJwUCWj1R WgIbAwUJCZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBasvrxexcr6jsc EADEcB0WQEZn2AkrzDs1RhL0Lp6cZi0BigofkbcGfdhJyMSs19C0dhvncrAFClVI 6/Udw3yFtDyYtOCf2W3M3A1K6/RfEizCLzTsdFIhni9gOJLlUpXViQtgrlstjk7h qVV3Ooz4BlCqS4cG7rfqf4LQQPpTAuFUEV9I28FBUB2irqC+v4gTysIgpMw0bA1y BU9sX5jE/tRkzqnuzZrkwiobDtRFJ9qp+7O2JtcY4EsVtLAsaodJKc5cF8R4OvB1 n66vxxcgg9Eh4JNWZ47xsaCmAGo1Bcb2jIY35OtgAL7gCGLRSMKTtAaPy1/fEgIq hCljJ9x40Fkn/3r2BX21WC9HFSPFTBz2RluLRzxdgxOrkYK8EiHUPoE5b1AEzZKw 2AbeXfr57f5zYsN3IqfbQLUjMYtUN1wK3Pjb+idD972wyXMWt8uOzlI7b9Ocu+nY m2whBfJv9Pmp3QYTmPz+LB9lH65VNVUSxSXVr5iWXO3qx1HtEiGEqkporMQCTh3T 5Ud3PvMSRBFFKNs9WhJ/Lxz+SV30WLwG6dr5mQqlzAhb4Phc/zekZyXRdS/oDKrB LUucS36O//49JeyRi1QvOfxnfmIqRIAf/k3PoYJmTo5E82//r5Qj3YGlRu78ba0H Arxs+ACD6AnEHHcbswpbtVEKYzlSu0Ar0Dc7vRWM/IyQdIkBHAQQAQgABgUCWj1S oAAKCRAvPIc2gF+NosIsB/9f/29FNla3BJfGIEIDnhrqGD0i9bSa89SqBd++uG06 TQgW5wsqtNcrwn81yZTq6XE6i9VtD4GKfqC0d4KZJr9bnbeD81cI64VOdL8zJWJs 0vj5EIXCobKyX74Kb4uePUyZqwT2Q74I116u/HwA9/FXsPo5isbh4ZqD4t0VHpWk mfq1FPT9a/JPyX46qKqB2Fce/7Qy+SQP1NfkuUlbhUH/JG9aSSYvk3lznNiH41x9 M+FDlL106itXOubrl3oi2fT3fsSedq7uzt+IV0DQEeNaoQAUuwEhdB8IWOMqN2wo DjGVKJftfsSWY9ilZrnDBNDrp0vRqcx33LUMkIw4d7iBiQIzBBABCAAdFiEEfhcK BFyEz0YOK3mgEO952f2DUxIFAlu3JJwACgkQEO952f2DUxJjuw/6ApHSsVTWD4a0 H6FJ23A9Ftpy+aXZ4vYlzkSrfsn2ECrEfK3lXQh/uzwjJUDYZeB1/BQsFZtcYNQO JSSHbQ49BFRLwb1J/wBZG4bbmrkLxnNbKDKQvzxEpclkMW0Dj0J6o7kGrmzIGGrh B+JJN99AcineHRug8ZSFIERRCmigxdhAKU0BFD7P+5HNHltSL3DF1c2fFOf2JrgB KVoE+9RhMZjWNbYetFFLCkjXb5Rpay9zeMm1DxfSTGAnuOwUXW6qq4hnl5+VC/48 ceDZElLLfu7RQUZv44pkSTOWZs+iQoJiHMFHk9wPqyB2Vok1yJ2a2j27WhXrJlPw nZbgJO5RyWDG3p/eVmpl5Uuc2dsfIpR17KnAuWpghK6V+cyFncDoGCl/YG2Mvool sW08FiZh3Ej4dnJjj25TZkeFG74JJDXLvMYpJfSBGnmETv4Dhcm2xPqVMuFuL1qJ lMbVLrMo2GXeo03OzNyvbs+u8WLIaGm5hC7N1CXY8wZs4jo6OJ/expvnc07dEuws 4zT3AiWv3nIouWReRStZy9QkavDocqbyPmilcdPCYk4BsOlzpwwO74hNG7iyl0Kd AlwTxGQ7y0rJou6HYa1TmRhIEr3vKvlW+JfUUrqtjXgsuacTXo4+Ira2JUErL2cY zQMq1j4r1ZyhFnuz93s7Rsx/Nw0+0YuJAZwEEAEKAAYFAlvFx+UACgkQajsROTyk rWCJqwv+NLVPE4sD4sDA2/6Ek7UsRIUkg+S39fhqWsLc4rtw/mDunv8Un61I3K04 fZ2Ry4nF9hZM0a710UvXFbStvrzRJO3EAAcdJR9LTCd19e8UeruQbIee3YT91U4N kC9JMpecfq62/teOAU2e5P3fWYaLs5ZX7zCLwWuBcW2l3SyoljQczM85HhJ3XHm+ FnwQ6D9xRle+lvWTcuC9d1yAyUb8IOospcL2lJTmy8e3r79R24hPlSB4LDe0wEN8 AXbagrcAQZjwyaHyWxjJbTwZ0b43WGdfIqZ1ElOeoffbketPGRmWvx5xUvb2ALFB BdETzV270gs5XDJgJ1SIIKOyDADxwvroTe2jD8C/841eEql5QSow3s/U3zRqk3mt tto8Qw/DN71aeh6dmYSsvd2UjsHw/vofOPRBGxZLEkKTEvMnhmMW9hiKPkPia+Qg evYE020qpKSxLEdWA8nprHwxmGiDNesCfXSC6vm1qfyj5g8HzxSckq9ZaMhKMCo7 vxflUEDuuQINBFo9UDIBEAD6DdHQfMav8OXfhjTteoarOrlJTSdci727xiezGPuB HmpvceBRZgRasdbaMc4HJee+R9+5x/nLPCuy/DxDyIjwIUeJNgc+l7LjI9WfpHTD 8U4xxjvR5Mi7+ToQQUOUNuzT0O0pyuxP1uY3RehHEhOVfBZO59ipSeZL5iQC6T5M sK1SKfs51pLa5ToC1rc8tBJ4zZmxRAyZiYc/AH2uZ/6rYjTTkAn1DVI9DYo2D/zE 4bGjXdJW5pKphFB2lX3dG4I7ODi+5e1H6A/QpCu6z8/ZkIQ+9T1xcX/YwiFeA7Pb TuW/eITbMbI1eV3+fyym9aT7Rsflmp31Zxtr+sZwGGZf00ooMBFmqOS//NUQ/Vf3 vDUew1h5QU1yDaWT3NApvi+XWPH9TPy6TMfZA2FThHf11sX/gDBa5JWQZbptPEcm oazpiKZt91CrFPOaoXDPck/Q61dfmr/oPikfByYnASIM3OwEuXqyQ9JDRfKrem5r +oA/wxWb5jELElAhOpnyqMMvOh7uz1foUssL8MAv2TGXmxpVJ8Nu4je6wf96Z22f Q0D38zud+CKH3bMP3ayXXJBcdPoENrzFbWP5FTg/4TTDJ3vOAHZR5iCunYghx8b7 Ffa4UbkwlD+dh8GiIAtvT51Ac0cO0Wc0Zjc57zPUz1zloMbf+zb1Bsn7DuEQoqj1 gwARAQABiQIlBBgBCAAPBQJaPVAyAhsMBQkJlCYAAAoJEFqy+vF7FyvqrC8P/1tF 6TeR83xD6MasqXyrBjwcLmziaF0Mlkj8k/YUiZ/knb53n97xQnh9yxPv0TT8Wpfd n3BmvqGyh8+ouHX9jMOxiRkMdNhIauVYY/8jmRfBSYWcFkfMzdYasvdLtmYJgx25 2HKTFdeOrszoOjWjEzwmh+tca3AFMu/nB++/KAmi5UJV7zsZ7uYJ5jm97LV5SLjN JIXXM+lHqCDrjDaDhNczmq1LCRlU6/WDjvkuwaVhZG4lXxMDrvKnXMkjseQ2oKjw rIdfQM86H1z5J31lfhqop+of0cimcIsBgSCPu+h96LHuAzeRBCbDKeqrfZtAZAGs okRina9947fRWxXHh3O66ILmXKNRxxWbDkPvYnQWUat8SbSTDoPWrDIGDRIAypqY o3pcN2OE0C1chqgDZQxkr+9kYZQpupOAN2TR+fM7JvbO9coKI8Uqog8CopoMeDQk d0YjcqlB1E0svODHTzcSoRzogDBYDqNLP7qVkNXpcOAXSVioBgiSDf7o5RdS/qmU yXBIeq6I5z8xBcd+BQ/n/9Frkm6K7IKP3ngUP4wEoiPx5ZE5+fPIScGmVUcZIMhk vMvem9XXh1yyhqN14gfjmLwPGdWbrgG8QUe0s2WeWIyss6uTiyF+ZbJSo2XOKVc3 YFMVUUfgyudqAV1wWdZinUk+H3pkqOKoHAy/8fST =3DYzQY -----END PGP PUBLIC KEY BLOCK----- --------------C58930ABDFD79F929785A6AE-- --4OeBS3USrZAC9VoKkK8o3yhGg0efLB9WY-- --PGRoMjiDos31qPThoTLDEKqO8a1UhSeiZ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEW7Wm6ldl0sWGPK4nWrL68XsXK+oFAlzHguwACgkQWrL68XsX K+qIPhAAvgO54Fdx5dZd6OhDNVZddGqTa8uekaHX4LFhmDcs0V7UNXuia2HT4wkh 8+aMSfJYYIPYanX0ynDXZaSRpC0p40oLFAegRcntsTUTTmbijin50XiRwDIPol4j fqywJePXCa7dU4w3BQe1QwSgYRMROfuIv0WxNHfXvNJEP5sP93ZB7OmamY4M7spB eacxq1aw4xBrl3vVrv+fdFi8pvRdJrfkxkBqai8FhSjUIZQo+pvgsq23n8rMCmv2 zxp/BMVGlyqTDHGLpL239WHTpbQ0kptwJ5BZRsV1jkVqOR82s6Gv3stpzwCNPqRr tNeEwQOs4pyHugo3jVJEEfmpQkYmISfyGxkFoHOdNrE4msBycuvmelafjvOzTH8f /YZc3+KJEq3lcBB+xUUC3ye60w3R+ynto3GnKuRof6T/tL2SDeOpSTbH6OE6OiI6 v0e5xC3Q+7YlZ3sKUxEpPhwJFVfbJD6SGCUwLdCzSPE1B9fkEkC4uBXAOekkLuni 4dylmSzAYn5flSwNVfm3aymbKGsfo92TDZ7CHCaRS9PjUPbQTCR3WzBXLxngxjnw gz00+jaMRbrwZsrL0vowl+HgU9wiEYvKD2ft8J5MHNJ0e3ZRTFeg/imX61C9+xoh gz0B6PDQCVy7AIU5jqgjrfqMzLQIt2KwTQ0F6561qWzj7IiWaZo= =lpv1 -----END PGP SIGNATURE----- --PGRoMjiDos31qPThoTLDEKqO8a1UhSeiZ-- From nobody Tue Apr 30 04:37:26 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5EA551200E6 for ; Tue, 30 Apr 2019 04:37:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h_oF3DMYoCnZ for ; Tue, 30 Apr 2019 04:37:22 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3019412008C for ; Tue, 30 Apr 2019 04:37:22 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id DFA02300A11 for ; Tue, 30 Apr 2019 07:19:03 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id EUwmC8TXF2kv for ; Tue, 30 Apr 2019 07:19:01 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id D1C70300400; Tue, 30 Apr 2019 07:19:01 -0400 (EDT) From: Russ Housley Message-Id: <64085A04-DFA9-4C58-B267-2CA56E6F67CD@vigilsec.com> Content-Type: multipart/signed; boundary="Apple-Mail=_FEDBAA1B-D538-4DC7-8A5F-46DFB759FB98"; protocol="application/pgp-signature"; micalg=pgp-sha1 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Date: Tue, 30 Apr 2019 07:37:17 -0400 In-Reply-To: Cc: "cose@ietf.org" To: Stephen Farrell References: <0E85D28F-E211-45CA-A651-84D343B8AE94@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: Re: [COSE] Comments on draft-ietf-cose-hash-sig-01 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Apr 2019 11:37:24 -0000 --Apple-Mail=_FEDBAA1B-D538-4DC7-8A5F-46DFB759FB98 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Stephen: This section is just offering the reason for someone to implement = hash-based signatures. Russ > On Apr 29, 2019, at 7:04 PM, Stephen Farrell = wrote: >=20 > Hi Russ, >=20 > Sorry, I hadn't read this 'till just now, when the > text below made me wonder. >=20 > I don't get the logic for including most of the text > in this draft (other than section 3, the samples and > IANA stuff). >=20 > Why would this draft be introducing Shor and LMS etc? > That seems like a thing to be done by reference only. > (It may make sense for the draft to include this text > but for it to not be in an eventual RFC I guess.) >=20 > S. >=20 >=20 > On 29/04/2019 23:52, Russ Housley wrote: >> John: >>=20 >> I was revisiting an old comment from you. >>=20 >>> - Section 1.1: I think some short info on the threat from Shor's = algorithm would be good. I don't think [BH2013] talked about quantum = computers. >>=20 >> There are two major points in this section: advances in cryptanalysis = and advances in the development of quantum computers. The presentation = in [BH2103] is about advances in cryptanalysis, not quantum computers. >>=20 >> Does this make that more clear? >>=20 >> There have been recent advances in cryptanalysis and advances in = the >> development of quantum computers. Each of these advances pose a >> threat to widely deployed digital signature algorithms. >>=20 >> At Black Hat USA 2013, some researchers gave a presentation on the >> current state of public key cryptography. They said: "Current >> cryptosystems depend on discrete logarithm and factoring which has >> seen some major new developments in the past 6 months" [BH2013]. = Due >> to advances in cryptanalysis, they encouraged preparation for a day >> when RSA and DSA cannot be depended upon. >>=20 >> Peter Shor showed that a large-scale quantum computer could be used >> to factor a number in polynomial time [S1997], effectively >> breaking RSA. If large-scale quantum computers are ever built, = these >> computers will be able to break many of the public-key = cryptosystems >> currently in use. A post-quantum cryptosystem [PQC] is a system = that >> is secure against quantum computers that have more than a trivial >> number of quantum bits (qu-bits). It is open to conjecture when it >> will be feasible to build such computers; however, RSA, DSA, ECDSA, >> and EdDSA are all vulnerable if large-scale quantum computers come = to >> pass. >>=20 >> The HSS/LMS signature algorithm does not depend on the difficulty = of >> discrete logarithm or factoring, as a result these algorithms are >> considered to be post-quantum secure. >>=20 >> Thanks, >> Russ --Apple-Mail=_FEDBAA1B-D538-4DC7-8A5F-46DFB759FB98 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iF0EARECAB0WIQRJuTEKFXbtfFQz5huK5O7Q9ZwRywUCXMgzbQAKCRCK5O7Q9ZwR yxiWAJ0diaB1f83MuSHh7R9DCePEAbd31QCgjMSuzFIQ7JsgZR0vVgxvd4QXUGw= =+tw8 -----END PGP SIGNATURE----- --Apple-Mail=_FEDBAA1B-D538-4DC7-8A5F-46DFB759FB98-- From nobody Tue Apr 30 04:54:28 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 611AE12004E for ; Tue, 30 Apr 2019 04:54:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7Kmw-aNHpiu6 for ; Tue, 30 Apr 2019 04:54:23 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BF1E120045 for ; Tue, 30 Apr 2019 04:54:22 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 89637BE6F; Tue, 30 Apr 2019 12:54:20 +0100 (IST) Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bVn0Qb6AvvJ3; Tue, 30 Apr 2019 12:54:20 +0100 (IST) Received: from [134.226.36.93] (unknown [134.226.36.93]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 4D427BE50; Tue, 30 Apr 2019 12:54:20 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1556625260; bh=Pn3gKv9eE1BVLVAPhbYuIseX4mQiZiTxYz4RidzV8M4=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=nSeP4ujmunaWZarU8TbUA5PSJUlmWOETih2dY5xytKpQfQ0l/h+mVJqBa8gvBpbjS zfK+jlLgnEnRFzG/NgD2w2rt6ovvXWLRXMcKuLynDQZ9buJ2rSkfmjPGvLPBfkMCfk N7e4ifcY5fFEClQI7n3LyF1QDlZeQnBqtZ7FvyVQ= To: Russ Housley Cc: "cose@ietf.org" References: <0E85D28F-E211-45CA-A651-84D343B8AE94@vigilsec.com> <64085A04-DFA9-4C58-B267-2CA56E6F67CD@vigilsec.com> From: Stephen Farrell Openpgp: id=5BB5A6EA5765D2C5863CAE275AB2FAF17B172BEA; url= Autocrypt: addr=stephen.farrell@cs.tcd.ie; prefer-encrypt=mutual; keydata= mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nemCP5PMvmh 5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kTq0IqYzsEv5HI58S+ QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtEgvw4fVhVWJuyy3w//0F2tzKr EMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy+pAh4EKzS1FE7BOZp9daMu9MUQmDqtZU bUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqO Vz+7L+WiVfxLbeVqBwV+4uL9to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJg b097ZaNyuY1ETghVB5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k 4LyM2lp5FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9tlyWxn5Xi HzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQABtDJTdGVwaGVuIEZh cnJlbGwgKDIwMTcpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPokCQAQTAQgAKgIbAwUJ CZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAUCWj6jdwIZAQAKCRBasvrxexcr6o7QD/9m x9DPJetmW794RXmNTrbTJ44zc/tJbcLdRBh0KBn9OW/EaAqjDmgNJeCMyJTKr1ywaps8HGUN hLEVkc14NUpgi4/Zkrbi3DmTp25OHj6wXBS5qVMyVynTMEIjOfeFFyxG+48od+Xn7qg6LT7G rHeNf+z/r0v9+8eZ1Ip63kshQDGhhpmRMKu4Ws9ZvTW2ACXkkTFaSGYJj3yIP4R6IgwBYGMz DXFX6nS4LA1s3pcPNxOgrvCyb60AiJZTLcOk/rRrpZtXB1XQc23ZZmrlTkl2HaThL6w3YKdi Ti1NbuMeOxZqtXcUshII45sANm4HuWNTiRh93Bn5bN6ddjgsaXEZBKUBuUaPBl7gQiQJcAlS 3MmGgVS4ZoX8+VaPGpXdQVFyBMRFlOKOC5XJESt7wY0RE2C8PFm+5eywSO/P1fkl9whkMgml 3OEuIQiP2ehRt/HVLMHkoM9CPQ7t6UwdrXrvX+vBZykav8x9U9M6KTgfsXytxUl6Vx5lPMLi 2/Jrsz6Mzh/IVZa3xjhq1OLFSI/tT2ji4FkJDQbO+yYUDhcuqfakDmtWLMxecZsY6O58A/95 8Qni6Xeq+Nh7zJ7wNcQOMoDGj+24di2TX1cKLzdDMWFaWzlNP5dB5VMwS9Wqj1Z6TzKjGjru q8soqohwb2CK9B3wzFg0Bs1iBI+2RuFnxLkCDQRaPVAyARAA+g3R0HzGr/Dl34Y07XqGqzq5 SU0nXIu9u8Ynsxj7gR5qb3HgUWYEWrHW2jHOByXnvkffucf5yzwrsvw8Q8iI8CFHiTYHPpey 4yPVn6R0w/FOMcY70eTIu/k6EEFDlDbs09DtKcrsT9bmN0XoRxITlXwWTufYqUnmS+YkAuk+ TLCtUin7OdaS2uU6Ata3PLQSeM2ZsUQMmYmHPwB9rmf+q2I005AJ9Q1SPQ2KNg/8xOGxo13S VuaSqYRQdpV93RuCOzg4vuXtR+gP0KQrus/P2ZCEPvU9cXF/2MIhXgOz207lv3iE2zGyNXld /n8spvWk+0bH5Zqd9Wcba/rGcBhmX9NKKDARZqjkv/zVEP1X97w1HsNYeUFNcg2lk9zQKb4v l1jx/Uz8ukzH2QNhU4R39dbF/4AwWuSVkGW6bTxHJqGs6YimbfdQqxTzmqFwz3JP0OtXX5q/ 6D4pHwcmJwEiDNzsBLl6skPSQ0Xyq3pua/qAP8MVm+YxCxJQITqZ8qjDLzoe7s9X6FLLC/DA L9kxl5saVSfDbuI3usH/emdtn0NA9/M7nfgih92zD92sl1yQXHT6BDa8xW1j+RU4P+E0wyd7 zgB2UeYgrp2IIcfG+xX2uFG5MJQ/nYfBoiALb0+dQHNHDtFnNGY3Oe8z1M9c5aDG3/s29QbJ +w7hEKKo9YMAEQEAAYkCJQQYAQgADwUCWj1QMgIbDAUJCZQmAAAKCRBasvrxexcr6qwvD/9b Rek3kfN8Q+jGrKl8qwY8HC5s4mhdDJZI/JP2FImf5J2+d5/e8UJ4fcsT79E0/FqX3Z9wZr6h sofPqLh1/YzDsYkZDHTYSGrlWGP/I5kXwUmFnBZHzM3WGrL3S7ZmCYMdudhykxXXjq7M6Do1 oxM8JofrXGtwBTLv5wfvvygJouVCVe87Ge7mCeY5vey1eUi4zSSF1zPpR6gg64w2g4TXM5qt SwkZVOv1g475LsGlYWRuJV8TA67yp1zJI7HkNqCo8KyHX0DPOh9c+Sd9ZX4aqKfqH9HIpnCL AYEgj7vofeix7gM3kQQmwynqq32bQGQBrKJEYp2vfeO30VsVx4dzuuiC5lyjUccVmw5D72J0 FlGrfEm0kw6D1qwyBg0SAMqamKN6XDdjhNAtXIaoA2UMZK/vZGGUKbqTgDdk0fnzOyb2zvXK CiPFKqIPAqKaDHg0JHdGI3KpQdRNLLzgx083EqEc6IAwWA6jSz+6lZDV6XDgF0lYqAYIkg3+ 6OUXUv6plMlwSHquiOc/MQXHfgUP5//Ra5JuiuyCj954FD+MBKIj8eWROfnzyEnBplVHGSDI ZLzL3pvV14dcsoajdeIH45i8DxnVm64BvEFHtLNlnliMrLOrk4shfmWyUqNlzilXN2BTFVFH 4MrnagFdcFnWYp1JPh96ZKjiqBwMv/H0kw== Message-ID: Date: Tue, 30 Apr 2019 12:54:16 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: <64085A04-DFA9-4C58-B267-2CA56E6F67CD@vigilsec.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Xgozjl3L8PTkJxQ1BEDWUAEfD0hRdI37T" Archived-At: Subject: Re: [COSE] Comments on draft-ietf-cose-hash-sig-01 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Apr 2019 11:54:26 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Xgozjl3L8PTkJxQ1BEDWUAEfD0hRdI37T Content-Type: multipart/mixed; boundary="U5hFwzTyBlzmVuex1WlUSGo07jrBZ2cSD"; protected-headers="v1" From: Stephen Farrell To: Russ Housley Cc: "cose@ietf.org" Message-ID: Subject: Re: [COSE] Comments on draft-ietf-cose-hash-sig-01 References: <0E85D28F-E211-45CA-A651-84D343B8AE94@vigilsec.com> <64085A04-DFA9-4C58-B267-2CA56E6F67CD@vigilsec.com> In-Reply-To: <64085A04-DFA9-4C58-B267-2CA56E6F67CD@vigilsec.com> --U5hFwzTyBlzmVuex1WlUSGo07jrBZ2cSD Content-Type: multipart/mixed; boundary="------------6D605C2A37651AA2DE909511" Content-Language: en-GB This is a multi-part message in MIME format. --------------6D605C2A37651AA2DE909511 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hiya, On 30/04/2019 12:37, Russ Housley wrote: > Stephen: >=20 > This section is just offering the reason for someone to implement > hash-based signatures. Sure. I'd suggest not leaving that in the RFC though, otherwise you may end up adding the same text every time you wanna define anything related to hash based sigs, and that text will likely get outdated I'd guess. S. >=20 > Russ >=20 >=20 >> On Apr 29, 2019, at 7:04 PM, Stephen Farrell >> wrote: >>=20 >> Hi Russ, >>=20 >> Sorry, I hadn't read this 'till just now, when the text below made >> me wonder. >>=20 >> I don't get the logic for including most of the text in this draft >> (other than section 3, the samples and IANA stuff). >>=20 >> Why would this draft be introducing Shor and LMS etc? That seems >> like a thing to be done by reference only. (It may make sense for >> the draft to include this text but for it to not be in an eventual >> RFC I guess.) >>=20 >> S. >>=20 >>=20 >> On 29/04/2019 23:52, Russ Housley wrote: >>> John: >>>=20 >>> I was revisiting an old comment from you. >>>=20 >>>> - Section 1.1: I think some short info on the threat from >>>> Shor's algorithm would be good. I don't think [BH2013] talked >>>> about quantum computers. >>>=20 >>> There are two major points in this section: advances in >>> cryptanalysis and advances in the development of quantum >>> computers. The presentation in [BH2103] is about advances in >>> cryptanalysis, not quantum computers. >>>=20 >>> Does this make that more clear? >>>=20 >>> There have been recent advances in cryptanalysis and advances in >>> the development of quantum computers. Each of these advances >>> pose a threat to widely deployed digital signature algorithms. >>>=20 >>> At Black Hat USA 2013, some researchers gave a presentation on >>> the current state of public key cryptography. They said: >>> "Current cryptosystems depend on discrete logarithm and factoring >>> which has seen some major new developments in the past 6 months" >>> [BH2013]. Due to advances in cryptanalysis, they encouraged >>> preparation for a day when RSA and DSA cannot be depended upon. >>>=20 >>> Peter Shor showed that a large-scale quantum computer could be >>> used to factor a number in polynomial time [S1997], effectively=20 >>> breaking RSA. If large-scale quantum computers are ever built, >>> these computers will be able to break many of the public-key >>> cryptosystems currently in use. A post-quantum cryptosystem >>> [PQC] is a system that is secure against quantum computers that >>> have more than a trivial number of quantum bits (qu-bits). It is >>> open to conjecture when it will be feasible to build such >>> computers; however, RSA, DSA, ECDSA, and EdDSA are all vulnerable >>> if large-scale quantum computers come to pass. >>>=20 >>> The HSS/LMS signature algorithm does not depend on the difficulty >>> of discrete logarithm or factoring, as a result these algorithms >>> are considered to be post-quantum secure. >>>=20 >>> Thanks, Russ >=20 >=20 > _______________________________________________ COSE mailing list=20 > COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose >=20 --------------6D605C2A37651AA2DE909511 Content-Type: application/pgp-keys; name="0x5AB2FAF17B172BEA.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x5AB2FAF17B172BEA.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nem CP5PMvmh5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kT q0IqYzsEv5HI58S+QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtE gvw4fVhVWJuyy3w//0F2tzKrEMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy +pAh4EKzS1FE7BOZp9daMu9MUQmDqtZUbUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5 iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqOVz+7L+WiVfxLbeVqBwV+4uL9 to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJgb097ZaNyuY1ETghV B5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k4LyM2lp5 FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9t lyWxn5XiHzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQAB tCFTdGVwaGVuIEZhcnJlbGwgPHN0ZXBoZW5AamVsbC5pZT6JAj0EEwEIACcFAlo9 UYwCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQWrL68XsXK+qG CxAApYHWYgGOIL3G6/OpkejdAkQoCVQAK8LJUSf6vzwost4iVfxIKcKW/3RqKNKk rRl8beJ7j1CWXAz9+VXAOsE9+zNxXIDgGA7HlvJnhffl+qwibVgiHgUcJFhCSbBr sjC+1uULaTU8zYEyET//GOGPLF+X+degkE/sesh4zcEAjF7fGPnlncdCCH3tvPZZ sdTcjwOCRVonKsDgQzBTCMz/RPBfEFX44HZx4g1UQAcCA4xlucY8QkJEyCrSNGpG nvGK8DcGSmnstl1/a9fnlhpdFxieX3oY2phJ1WKkYTn6Advrek3UP71CKxpgtPmk d3iUUz/VZa0Cv6YxQXskspRDVEvdCMYSQBtJPQ4y2+5UxVR9GIQXenwYp9AP2niv Voh+ITsDWWeWnnvYMq07rSDjq0nGdj41MJkNX+Yb2PXVyXItcj5ybE3T2+y3pSBG FEZYJGuaL4NwtBJFMOdOtBmUOPbetS2971EL3Izxb7ibOZWDwexv+8R6SWYfP1wV N3p46RyBQuXqJV8ccE11m6vtZTGSYgnLUUFZMRQYH+0hwuYe0T3AA18xDdSYsa8v ovCCd3l5S4UNzIM2PMChqGrEzKapUpZg7+8ACcxRU3b9Ihd7WYjJ+pQPCoWYKozv tEvenbNpE/govO/ED3B14e+R2yevRPjRrsN7PJzSf15fQLuJARwEEAEIAAYFAlo9 UqAACgkQLzyHNoBfjaLrSwf+MIHbFRQ4O5cmLYR5sIByWelN3SuRN/gW8rpKo9Ok Cz6An8uV/iCXy5tNMLzzi0BFl8f22DwBcC5qy9qnlIAdogWam1qWoTAoAD8veEqm uKhYrqJsCcAyNrKYmK0hP3rpHxx1LySDmKYXmw/8qtBXKHTouMm+5tSsznhykRMT AAr2p7PSaHgo+hIVaW/rKSspHjDhhZS+G9mtOZad1IH29M6G1Q1NCO0Ywe8krKLQ IAQlFxtgvOqpPOZNzeKBa/+KbE8TGgMWrkOhC8OeEM5PVzdDhlhD9kPzB/pCKDF5 DofJ/ZRqnDpbKPQ0bsW38AOig3kOc0A27awiBEw3urqR1YkCMwQQAQgAHRYhBH4X CgRchM9GDit5oBDvedn9g1MSBQJbtyScAAoJEBDvedn9g1MSI/oP/0A9J9nrnBMq Zpm857lfYWw+rshLK+tyeP4OQeOqnDFvs9jePpcyJLG3DF2r6VbVKPQq+AE6Uf5h cJBDEN6BjEhRPSbLcqG3A1cz/nNwm8rPmNp+oKhmaBBQGxwciMLmzgynsDydnjPp MyEs04zvsbsl4vrp2095o105l8KcrrxQrioFjbwveGwHQK9bxJKhx9D+gIk+MouB ur45UDKTZkMZrr9FGrtkyXCGAxvKdcNC5Oa8z9sj1rcUJfG/OpVAMWhArdlZbFUQ yoX6pU2Zb1CR2qpWAVerGSfBhmfCyStjARqaKxlftjO+Bj3Jj73Cr5eqej3qB5+V 4BCsPjr4RLvVbYUCPsRdxWc+nBLlfVYkRURu21g1hFm5KFPjgUkyo1s4vjUOY8Dy I+xLGF7f/IhUBG6l+Vswhpwu7ydalZkeFiPx5xna5NfbEYxvsIf71DvipGvIOaHv X4egWoFgm8n/9c3rcMxJtpwHPSsUt5dgLsyu6VE0IbvOAc3dN7CWJ355DVFJq9Zg 2YVf0izSpyyzJeGsgkfjW6xpmdvZxuT2UcN4BTcm6vYqueASGrb3lfhzC5gpeVsc /MoSjTS65vNWbpzONZWMZuLEFraxWJzC0JrDK3NCd0VN3kstqGkVbUIiYOnUm8Vu 4zoVMLlGWzHLIGoPRG2nRezn1YyNfyb5iQGcBBABCgAGBQJbxcflAAoJEGo7ETk8 pK1gE7QL/ApC5P68W5DrI1787WJVZv1u4t/g39vTr7Xer3UMTVQg10vpa7pmqOGh jIDzDMg3Pe3K3M7fVzfAlUA1qw6ne4RCueVoRKpubeF4AlYbMr0K6hNCPjt5uAxm bBVuejKTc6pru5rv5gKL0nDbr+Snft5xt7juBLSSimw0/41sZnkjCxo9rF/RA/v6 +uWyK171RKmsEYu8fFtw1eqUNt/Xj792TUixE3pxXheNtQtZGk/9P3W83ChhG4Fh 5EQsn0pIh9wZIAbMRLpgRKyW87fWHZC8/YH8h7afarvn9Thl5pFUldCe22mNJj6K LChn2aEHQd+PdY1GBpZEcmNEUPuovwzatM0h64hCzTm41eDqRfihZVBT7TbfXQnv 8rywa42Mk756RGzzEZcQEhwQXZcMQUfxIQQ2VyJo0zG36VdZTQF7TF/4Lz7/3cJ5 6jOIm+dwPXtu+C2wAQuD4USOLt4JWPYpqzDfHYJIND/497P9Z9SuQeahr2ez3DRB g3qsHEjBV7QyU3RlcGhlbiBGYXJyZWxsICgyMDE3KSA8c3RlcGhlbi5mYXJyZWxs QGNzLnRjZC5pZT6JAkAEEwEIACoCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwEC HgECF4AFAlo+o3cCGQEACgkQWrL68XsXK+qO0A//ZsfQzyXrZlu/eEV5jU620yeO M3P7SW3C3UQYdCgZ/TlvxGgKow5oDSXgjMiUyq9csGqbPBxlDYSxFZHNeDVKYIuP 2ZK24tw5k6duTh4+sFwUualTMlcp0zBCIzn3hRcsRvuPKHfl5+6oOi0+xqx3jX/s /69L/fvHmdSKet5LIUAxoYaZkTCruFrPWb01tgAl5JExWkhmCY98iD+EeiIMAWBj Mw1xV+p0uCwNbN6XDzcToK7wsm+tAIiWUy3DpP60a6WbVwdV0HNt2WZq5U5Jdh2k 4S+sN2CnYk4tTW7jHjsWarV3FLISCOObADZuB7ljU4kYfdwZ+WzenXY4LGlxGQSl AblGjwZe4EIkCXAJUtzJhoFUuGaF/PlWjxqV3UFRcgTERZTijguVyREre8GNERNg vDxZvuXssEjvz9X5JfcIZDIJpdzhLiEIj9noUbfx1SzB5KDPQj0O7elMHa1671/r wWcpGr/MfVPTOik4H7F8rcVJelceZTzC4tvya7M+jM4fyFWWt8Y4atTixUiP7U9o 4uBZCQ0GzvsmFA4XLqn2pA5rVizMXnGbGOjufAP/efEJ4ul3qvjYe8ye8DXEDjKA xo/tuHYtk19XCi83QzFhWls5TT+XQeVTMEvVqo9Wek8yoxo67qvLKKqIcG9givQd 8MxYNAbNYgSPtkbhZ8SJARwEEAEIAAYFAlo9UqAACgkQLzyHNoBfjaLzHAgAlWT6 NXEGtw/r1miKNGcopzvzILQ9oB8rKI9U9EL6tOf/y2V5oYee/GyQDb3ZdoPxxYYc Jf+RyiH1nMoqUIZiZJaf3bJXinDZ5+AdfE++UR2NBvqaNyC6u3r24jo1B/sagKbY tWgsYtRqHLD4IWi37MZrVyjBuF7u14Q07+uhjq6mX2O/tHpCYw/Q82tbeTRPyUf1 WQOAfD1kfBpW9PvAva5Iw9FWeXpCXRzwxnCZhYfGfqtuSw6CPBYLdbikqML6FZ7E DuTBb/8um1wK7Y9bgeIQC+CYjhYB5RXa1tDJRab2Js4luCvSR0w/CgHw26293tlv e2Q6UTrmHxP5U22DlokCPQQTAQgAJwUCWj1QMgIbAwUJCZQmAAULCQgHAgYVCAkK CwIEFgIDAQIeAQIXgAAKCRBasvrxexcr6tJpD/4rrILH+meP07vrx8wW5eYuqCiP GYnh/CXxIF8eLrfbe5d4QRgtq+w6UeQPMyzKRIRiCoBXB2oJLBZHyxBPxZlg33dT MrEGn8QWKx2iNuz9rZMXyOSWFetuO01d/aUPd5BnbLbIyK5of8xCQlXM6KH8bc+9 gQ7edR9mfLTdvBf2FR522hg8BRBM1imKc3vO8v39+qIHHRjuiwxBBCAOhHtHRsZX ripS0uFA07dM46Oi/E8osjx6fQt/lH5z/PN+2adxYSrLSAXfr1oD3RxYNhuWgyGF L64/VCQb1YGjf0Z5MBPnWm9jgUoOY5K9eNSS0L83WeJjlF5+Q/WOgB+rb49Prm2D Feo9+S9f2V53Llz1WIspXJg6f+n9lmHE94MfQj1GAHCzI0FeL19lvM+LhD8jJSCb hrC3+yobyy/AUOs5Z3E+njjX1FF/VCVAs6iOa6i+XG+Y1hh3ir2y1kckJ5auT10M SU8GEZu9ayU4M3o3N9yxOjaoP0NuQ4MMLL/n/u4u94AeZaHPNBXn/hVfVRRmpRXt GKvJtFAEppGEYezB+bLKIm6XlpPkhnwYzleLZ7AMEco2C6QM8QPB3g3JpS3sqRhA 5rEP4lL16BmijmF+CHoPE/zwgKZbKpyVDqvIW5IDgvfIC2X4pbZDRvGIUKaGSB4+ ksZgUUnNyvfQr2p7jokCMwQQAQgAHRYhBH4XCgRchM9GDit5oBDvedn9g1MSBQJb tySbAAoJEBDvedn9g1MSeKkQAJm44jt1kwHgQgeDBKdjdvl0AjE0xVEQxriZ6lP/ l//34YT0auFfzsYIrChSpQXAEtobBAr4Ohw1Us+BZe+H5P8vm6LRuPwozC3SjwfX 4Iec8+9ot6tIVg4sbedDSgb/CCFVjsmIGcQ1P73JLJTBJ6mxYCV/gn3QC6bwDOFo 7kD9FDHCjRN8XfhHQ4Q9cYyt06uF31qG/aumgWYC9geCGgAwiHgwxNYb9GoJ0iZj CROwbYvLTcQgsVUW2bTmsVR13UVKDsdl02sRV7qcVYW6R0a3Ra8KudX+nt25H5DR Gd382KZ5W8pydsy/viTvD9z6v0ulChBYxAedIvGIClrhbxlLEPmIg4ImVOLGqsUg Vm32J95WOjEkk4PEZ12xSDBtwhSJqmJNboWlfmw43KdIbY8zNhffIO3N6O7FsdGx mqyHeLoTpqY+ySVUPpbuyW8ujnI/J//+6hdTZ9dQsEJQlWngKuWOQ5ma58MPSN88 zllsqhZAFQjNxqnkSzL6ZQ+v/jvuRRe16B80AeO55DsmbWsMv/YLLD1mSi7+Khy2 EtMBhgojWwrGMvdLN6X3mnzNJEscYyLxM9tSk+iySP2sLthK0BVgpAzBSdaf/ezI z60P+neHDzteNFf8Mn7lmgYk1amvZoJ29s5+n2HwxyRL5dVMyMdyQmntubbctfqr Z0tIiQGcBBABCgAGBQJbxcflAAoJEGo7ETk8pK1gnCYMAJY4FeIYjlIXGghFWzsB 4fYwK1+iaFpU3fSto5qcrqVtVPjXpwqczqBWeXGyQxiB0kan4OVAXydIeaP8EAuF CA7paP3s9STLJBO3KurkwyRkPW5zo0X7xVqaVToRsX2Ul98KVJoHYQD1KdezEtwl vpNwiiBr42AYR751Vm6JBVAbQXuFpB3c8bUV0OkkRxNFtL8/2PieHar58n5dntGk bPlPkztahsFqktgacIgXHX5vaT+7YeeZ1DWLOYjGO0wNhkOSeroCmxwJUikU7joB p823L7r5KfpqWTPpSCzVstQKZUGmmoE1qCswY/Ud5wvp9SccpIILkRXj0rZRtfnE 5MpL3hjmtNzfDd9qIsJtBJlSB2hZwAsVm1l+EWN9hG3tqyA43niUMy2n6q690of3 berSiQ+kvY/aC9Hx8I+bKzOV9/J2VUTqfaPZa4Uy2rVX5Q2p69n/PMj7mEer0rCL 3j9V16J9c+s0BSkXoKdtYdB0TWVhBgUybd9qtYcwHWvhP7QuU3RlcGhlbiBGYXJy ZWxsIDxzdGVwaGVuQHRvbGVyYW50bmV0d29ya3MuY29tPokCPQQTAQgAJwUCWj1R WgIbAwUJCZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBasvrxexcr6jsc EADEcB0WQEZn2AkrzDs1RhL0Lp6cZi0BigofkbcGfdhJyMSs19C0dhvncrAFClVI 6/Udw3yFtDyYtOCf2W3M3A1K6/RfEizCLzTsdFIhni9gOJLlUpXViQtgrlstjk7h qVV3Ooz4BlCqS4cG7rfqf4LQQPpTAuFUEV9I28FBUB2irqC+v4gTysIgpMw0bA1y BU9sX5jE/tRkzqnuzZrkwiobDtRFJ9qp+7O2JtcY4EsVtLAsaodJKc5cF8R4OvB1 n66vxxcgg9Eh4JNWZ47xsaCmAGo1Bcb2jIY35OtgAL7gCGLRSMKTtAaPy1/fEgIq hCljJ9x40Fkn/3r2BX21WC9HFSPFTBz2RluLRzxdgxOrkYK8EiHUPoE5b1AEzZKw 2AbeXfr57f5zYsN3IqfbQLUjMYtUN1wK3Pjb+idD972wyXMWt8uOzlI7b9Ocu+nY m2whBfJv9Pmp3QYTmPz+LB9lH65VNVUSxSXVr5iWXO3qx1HtEiGEqkporMQCTh3T 5Ud3PvMSRBFFKNs9WhJ/Lxz+SV30WLwG6dr5mQqlzAhb4Phc/zekZyXRdS/oDKrB LUucS36O//49JeyRi1QvOfxnfmIqRIAf/k3PoYJmTo5E82//r5Qj3YGlRu78ba0H Arxs+ACD6AnEHHcbswpbtVEKYzlSu0Ar0Dc7vRWM/IyQdIkBHAQQAQgABgUCWj1S oAAKCRAvPIc2gF+NosIsB/9f/29FNla3BJfGIEIDnhrqGD0i9bSa89SqBd++uG06 TQgW5wsqtNcrwn81yZTq6XE6i9VtD4GKfqC0d4KZJr9bnbeD81cI64VOdL8zJWJs 0vj5EIXCobKyX74Kb4uePUyZqwT2Q74I116u/HwA9/FXsPo5isbh4ZqD4t0VHpWk mfq1FPT9a/JPyX46qKqB2Fce/7Qy+SQP1NfkuUlbhUH/JG9aSSYvk3lznNiH41x9 M+FDlL106itXOubrl3oi2fT3fsSedq7uzt+IV0DQEeNaoQAUuwEhdB8IWOMqN2wo DjGVKJftfsSWY9ilZrnDBNDrp0vRqcx33LUMkIw4d7iBiQIzBBABCAAdFiEEfhcK BFyEz0YOK3mgEO952f2DUxIFAlu3JJwACgkQEO952f2DUxJjuw/6ApHSsVTWD4a0 H6FJ23A9Ftpy+aXZ4vYlzkSrfsn2ECrEfK3lXQh/uzwjJUDYZeB1/BQsFZtcYNQO JSSHbQ49BFRLwb1J/wBZG4bbmrkLxnNbKDKQvzxEpclkMW0Dj0J6o7kGrmzIGGrh B+JJN99AcineHRug8ZSFIERRCmigxdhAKU0BFD7P+5HNHltSL3DF1c2fFOf2JrgB KVoE+9RhMZjWNbYetFFLCkjXb5Rpay9zeMm1DxfSTGAnuOwUXW6qq4hnl5+VC/48 ceDZElLLfu7RQUZv44pkSTOWZs+iQoJiHMFHk9wPqyB2Vok1yJ2a2j27WhXrJlPw nZbgJO5RyWDG3p/eVmpl5Uuc2dsfIpR17KnAuWpghK6V+cyFncDoGCl/YG2Mvool sW08FiZh3Ej4dnJjj25TZkeFG74JJDXLvMYpJfSBGnmETv4Dhcm2xPqVMuFuL1qJ lMbVLrMo2GXeo03OzNyvbs+u8WLIaGm5hC7N1CXY8wZs4jo6OJ/expvnc07dEuws 4zT3AiWv3nIouWReRStZy9QkavDocqbyPmilcdPCYk4BsOlzpwwO74hNG7iyl0Kd AlwTxGQ7y0rJou6HYa1TmRhIEr3vKvlW+JfUUrqtjXgsuacTXo4+Ira2JUErL2cY zQMq1j4r1ZyhFnuz93s7Rsx/Nw0+0YuJAZwEEAEKAAYFAlvFx+UACgkQajsROTyk rWCJqwv+NLVPE4sD4sDA2/6Ek7UsRIUkg+S39fhqWsLc4rtw/mDunv8Un61I3K04 fZ2Ry4nF9hZM0a710UvXFbStvrzRJO3EAAcdJR9LTCd19e8UeruQbIee3YT91U4N kC9JMpecfq62/teOAU2e5P3fWYaLs5ZX7zCLwWuBcW2l3SyoljQczM85HhJ3XHm+ FnwQ6D9xRle+lvWTcuC9d1yAyUb8IOospcL2lJTmy8e3r79R24hPlSB4LDe0wEN8 AXbagrcAQZjwyaHyWxjJbTwZ0b43WGdfIqZ1ElOeoffbketPGRmWvx5xUvb2ALFB BdETzV270gs5XDJgJ1SIIKOyDADxwvroTe2jD8C/841eEql5QSow3s/U3zRqk3mt tto8Qw/DN71aeh6dmYSsvd2UjsHw/vofOPRBGxZLEkKTEvMnhmMW9hiKPkPia+Qg evYE020qpKSxLEdWA8nprHwxmGiDNesCfXSC6vm1qfyj5g8HzxSckq9ZaMhKMCo7 vxflUEDuuQINBFo9UDIBEAD6DdHQfMav8OXfhjTteoarOrlJTSdci727xiezGPuB HmpvceBRZgRasdbaMc4HJee+R9+5x/nLPCuy/DxDyIjwIUeJNgc+l7LjI9WfpHTD 8U4xxjvR5Mi7+ToQQUOUNuzT0O0pyuxP1uY3RehHEhOVfBZO59ipSeZL5iQC6T5M sK1SKfs51pLa5ToC1rc8tBJ4zZmxRAyZiYc/AH2uZ/6rYjTTkAn1DVI9DYo2D/zE 4bGjXdJW5pKphFB2lX3dG4I7ODi+5e1H6A/QpCu6z8/ZkIQ+9T1xcX/YwiFeA7Pb TuW/eITbMbI1eV3+fyym9aT7Rsflmp31Zxtr+sZwGGZf00ooMBFmqOS//NUQ/Vf3 vDUew1h5QU1yDaWT3NApvi+XWPH9TPy6TMfZA2FThHf11sX/gDBa5JWQZbptPEcm oazpiKZt91CrFPOaoXDPck/Q61dfmr/oPikfByYnASIM3OwEuXqyQ9JDRfKrem5r +oA/wxWb5jELElAhOpnyqMMvOh7uz1foUssL8MAv2TGXmxpVJ8Nu4je6wf96Z22f Q0D38zud+CKH3bMP3ayXXJBcdPoENrzFbWP5FTg/4TTDJ3vOAHZR5iCunYghx8b7 Ffa4UbkwlD+dh8GiIAtvT51Ac0cO0Wc0Zjc57zPUz1zloMbf+zb1Bsn7DuEQoqj1 gwARAQABiQIlBBgBCAAPBQJaPVAyAhsMBQkJlCYAAAoJEFqy+vF7FyvqrC8P/1tF 6TeR83xD6MasqXyrBjwcLmziaF0Mlkj8k/YUiZ/knb53n97xQnh9yxPv0TT8Wpfd n3BmvqGyh8+ouHX9jMOxiRkMdNhIauVYY/8jmRfBSYWcFkfMzdYasvdLtmYJgx25 2HKTFdeOrszoOjWjEzwmh+tca3AFMu/nB++/KAmi5UJV7zsZ7uYJ5jm97LV5SLjN JIXXM+lHqCDrjDaDhNczmq1LCRlU6/WDjvkuwaVhZG4lXxMDrvKnXMkjseQ2oKjw rIdfQM86H1z5J31lfhqop+of0cimcIsBgSCPu+h96LHuAzeRBCbDKeqrfZtAZAGs okRina9947fRWxXHh3O66ILmXKNRxxWbDkPvYnQWUat8SbSTDoPWrDIGDRIAypqY o3pcN2OE0C1chqgDZQxkr+9kYZQpupOAN2TR+fM7JvbO9coKI8Uqog8CopoMeDQk d0YjcqlB1E0svODHTzcSoRzogDBYDqNLP7qVkNXpcOAXSVioBgiSDf7o5RdS/qmU yXBIeq6I5z8xBcd+BQ/n/9Frkm6K7IKP3ngUP4wEoiPx5ZE5+fPIScGmVUcZIMhk vMvem9XXh1yyhqN14gfjmLwPGdWbrgG8QUe0s2WeWIyss6uTiyF+ZbJSo2XOKVc3 YFMVUUfgyudqAV1wWdZinUk+H3pkqOKoHAy/8fST =3DYzQY -----END PGP PUBLIC KEY BLOCK----- --------------6D605C2A37651AA2DE909511-- --U5hFwzTyBlzmVuex1WlUSGo07jrBZ2cSD-- --Xgozjl3L8PTkJxQ1BEDWUAEfD0hRdI37T Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEW7Wm6ldl0sWGPK4nWrL68XsXK+oFAlzIN2gACgkQWrL68XsX K+rX9RAAhI3wEURagPeRNj0ReKpxUF3dboYV1kaxavTyb7ZXIG4h8bJKL/5X1vWE kenAcEZdJ0WMKJyg9tHrznmr+1vyFdWjHyLvQIhRaIpN+hNn73ydVWb83DyiD/7q 4CRGq3c9xn2P6Gi36tBxYsNgXeGN0kIA1K9MDLFxzkkdRfxpdYtzpTVy819oJqFG ecRBXanD5VACbR4p2PrAV4Q+7c9uzOJTytHuJCQR5C+sNBHFUHjkdibBaZMsFuef 7u/+SfHowFbnqcgQ599g57N+1oU/DV256u4pphVdWBYPLmLOOusWh+ZwVqkSW9m6 9VJS9IrG1dPn3+qo2SQGFbkjftecU3HhkDs9bPby4WB3yF3VSKFfdMZEytKfoi8s Wx+gaIkBjf97YJCOhwYoLzUR5DMMUuiIxhs7nZvh7279BvX+FdLEvUG72pqcyDsI 6JR7T312kYBj0FTwsLi+usvH66A4blwxqIbxoO8ar1SI+mXcdx9Jx8k8M5tAMvlr e1yiBqm7nBGu2gIYBNAR2WituIn6mMqAl+IgjTa2PLUNXtNMOfrSzBvdAQNNp97Q LMqTGzm8/QeRQzu2D/DT96Py4WpkRE4mlHcORKjbEDJeiyFVnes75wTH2f+L6crj q38Hxy2AdpY4pYdsQ0ILJLqHqVRpGL7+HyuGdOj3YCQ7MfewiRc= =pYuw -----END PGP SIGNATURE----- --Xgozjl3L8PTkJxQ1BEDWUAEfD0hRdI37T-- From nobody Tue Apr 30 07:22:42 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C8171200E6 for ; Tue, 30 Apr 2019 07:22:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2BGT_SHD6-cU for ; Tue, 30 Apr 2019 07:22:39 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23A46120075 for ; Tue, 30 Apr 2019 07:22:39 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 0CF32300AA0 for ; Tue, 30 Apr 2019 10:04:21 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id mXZ59m-VHEFz for ; Tue, 30 Apr 2019 10:04:19 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id 60A4C3004E7; Tue, 30 Apr 2019 10:04:19 -0400 (EDT) From: Russ Housley Message-Id: Content-Type: multipart/signed; boundary="Apple-Mail=_4D2A6D35-FED9-4694-B43F-F807CC4C548B"; protocol="application/pgp-signature"; micalg=pgp-sha1 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.8\)) Date: Tue, 30 Apr 2019 10:22:35 -0400 In-Reply-To: Cc: "cose@ietf.org" To: Stephen Farrell References: <0E85D28F-E211-45CA-A651-84D343B8AE94@vigilsec.com> <64085A04-DFA9-4C58-B267-2CA56E6F67CD@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.8) Archived-At: Subject: Re: [COSE] Comments on draft-ietf-cose-hash-sig-01 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Apr 2019 14:22:41 -0000 --Apple-Mail=_4D2A6D35-FED9-4694-B43F-F807CC4C548B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I can drop Section 1.1 if others think that is the best way forward. I = think this document is ready for WG Last Call. Maybe we can explictly = ask whether Section 1.1 should be kept or dropped. Russ > On Apr 30, 2019, at 7:54 AM, Stephen Farrell = wrote: >=20 > Signed PGP part >=20 > Hiya, >=20 > On 30/04/2019 12:37, Russ Housley wrote: >> Stephen: >>=20 >> This section is just offering the reason for someone to implement >> hash-based signatures. >=20 > Sure. I'd suggest not leaving that in the RFC though, > otherwise you may end up adding the same text every > time you wanna define anything related to hash based > sigs, and that text will likely get outdated I'd guess. >=20 > S. >=20 >>=20 >> Russ >>=20 >>=20 >>> On Apr 29, 2019, at 7:04 PM, Stephen Farrell >>> wrote: >>>=20 >>> Hi Russ, >>>=20 >>> Sorry, I hadn't read this 'till just now, when the text below made >>> me wonder. >>>=20 >>> I don't get the logic for including most of the text in this draft >>> (other than section 3, the samples and IANA stuff). >>>=20 >>> Why would this draft be introducing Shor and LMS etc? That seems >>> like a thing to be done by reference only. (It may make sense for >>> the draft to include this text but for it to not be in an eventual >>> RFC I guess.) >>>=20 >>> S. >>>=20 >>>=20 >>> On 29/04/2019 23:52, Russ Housley wrote: >>>> John: >>>>=20 >>>> I was revisiting an old comment from you. >>>>=20 >>>>> - Section 1.1: I think some short info on the threat from >>>>> Shor's algorithm would be good. I don't think [BH2013] talked >>>>> about quantum computers. >>>>=20 >>>> There are two major points in this section: advances in >>>> cryptanalysis and advances in the development of quantum >>>> computers. The presentation in [BH2103] is about advances in >>>> cryptanalysis, not quantum computers. >>>>=20 >>>> Does this make that more clear? >>>>=20 >>>> There have been recent advances in cryptanalysis and advances in >>>> the development of quantum computers. Each of these advances >>>> pose a threat to widely deployed digital signature algorithms. >>>>=20 >>>> At Black Hat USA 2013, some researchers gave a presentation on >>>> the current state of public key cryptography. They said: >>>> "Current cryptosystems depend on discrete logarithm and factoring >>>> which has seen some major new developments in the past 6 months" >>>> [BH2013]. Due to advances in cryptanalysis, they encouraged >>>> preparation for a day when RSA and DSA cannot be depended upon. >>>>=20 >>>> Peter Shor showed that a large-scale quantum computer could be >>>> used to factor a number in polynomial time [S1997], effectively >>>> breaking RSA. If large-scale quantum computers are ever built, >>>> these computers will be able to break many of the public-key >>>> cryptosystems currently in use. A post-quantum cryptosystem >>>> [PQC] is a system that is secure against quantum computers that >>>> have more than a trivial number of quantum bits (qu-bits). It is >>>> open to conjecture when it will be feasible to build such >>>> computers; however, RSA, DSA, ECDSA, and EdDSA are all vulnerable >>>> if large-scale quantum computers come to pass. >>>>=20 >>>> The HSS/LMS signature algorithm does not depend on the difficulty >>>> of discrete logarithm or factoring, as a result these algorithms >>>> are considered to be post-quantum secure. >>>>=20 >>>> Thanks, Russ >>=20 >>=20 >> _______________________________________________ COSE mailing list >> COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose >>=20 > <0x5AB2FAF17B172BEA.asc> >=20 >=20 --Apple-Mail=_4D2A6D35-FED9-4694-B43F-F807CC4C548B Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iF0EARECAB0WIQRJuTEKFXbtfFQz5huK5O7Q9ZwRywUCXMhaLAAKCRCK5O7Q9ZwR y6dgAJ9X3Jc5UP+FItmrXFy5j5U9uF09KQCg7FD4RnICqDZPH2cl9E7wldrBET4= =sOcv -----END PGP SIGNATURE----- --Apple-Mail=_4D2A6D35-FED9-4694-B43F-F807CC4C548B--