From nobody Thu Aug 1 07:47:37 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDC8E120020; Thu, 1 Aug 2019 07:47:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.988 X-Spam-Level: X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ihtfp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LMeG_zxMx0sm; Thu, 1 Aug 2019 07:47:33 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69AA312000E; Thu, 1 Aug 2019 07:47:33 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 4282AE2047; Thu, 1 Aug 2019 10:47:31 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 18185-06; Thu, 1 Aug 2019 10:47:28 -0400 (EDT) Received: from securerf.ihtfp.org (99-46-190-172.lightspeed.tukrga.sbcglobal.net [99.46.190.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (not verified)) by mail2.ihtfp.org (Postfix) with ESMTPS id 6BC9FE2045; Thu, 1 Aug 2019 10:47:28 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ihtfp.com; s=default; t=1564670848; bh=iqB+tvWkFZ3foDNrwnAv6qNxMxpkIA56SKORWJ/X7OA=; h=From:To:Cc:Subject:References:Date:In-Reply-To; b=NvKOy8xDoSSdXGsDqg/tU15kTXbHx3RFHyYErQDyvdTsuJ85NfuOsVKxiZQLzTYQA FXuSjncOyezNWr+71MMvw+sIvlVGja2vQ8egch/nsr+eh+RlJRLpM4hxIvxFX6cdm/ NJ+P5+k3iHzw8zyO3eFiTV5llCemyY0IddzY5MF4= Received: (from warlord@localhost) by securerf.ihtfp.org (8.15.2/8.15.2/Submit) id x71ElK3a029064; Thu, 1 Aug 2019 10:47:20 -0400 From: Derek Atkins To: Russ Housley Cc: cose , suit@ietf.org References: <835.1562080969@localhost> Date: Thu, 01 Aug 2019 10:47:18 -0400 In-Reply-To: (Russ Housley's message of "Wed, 31 Jul 2019 21:29:52 -0400") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Subject: Re: [COSE] draft-atkins-suit-cose-walnutdsa X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Aug 2019 14:47:35 -0000 Russ Housley writes: > Derek: > >>> That's what I would do: just ask for the values via Expert Review, and live >>> for now, with the a five-byte (encoded) COSE Algorithm code, if your market >>> need is urgent. >> >> Yes, I could just request the entries in the registry. However, I am >> trying to be a good netizen; I want to have a document that people can >> look at to understand what the registry items mean. > > I think that a document that includes the code point is the best outcome here. So I guess the question is: Does the COSE WG want to adopt this draft? Or should I submit to ISE? Thanks, > Russ -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Thu Aug 1 15:28:44 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7797C1201CF; Thu, 1 Aug 2019 15:28:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5GglAbL7FWhg; Thu, 1 Aug 2019 15:28:41 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 418CD120241; Thu, 1 Aug 2019 15:28:41 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x71MSafH005893 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 1 Aug 2019 18:28:38 -0400 Date: Thu, 1 Aug 2019 17:28:36 -0500 From: Benjamin Kaduk To: Derek Atkins Cc: Russ Housley , suit@ietf.org, cose Message-ID: <20190801222835.GJ1006@kduck.mit.edu> References: <835.1562080969@localhost> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) Archived-At: Subject: Re: [COSE] [Suit] draft-atkins-suit-cose-walnutdsa X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Aug 2019 22:28:43 -0000 On Thu, Aug 01, 2019 at 10:47:18AM -0400, Derek Atkins wrote: > Russ Housley writes: > > > Derek: > > > >>> That's what I would do: just ask for the values via Expert Review, and live > >>> for now, with the a five-byte (encoded) COSE Algorithm code, if your market > >>> need is urgent. > >> > >> Yes, I could just request the entries in the registry. However, I am > >> trying to be a good netizen; I want to have a document that people can > >> look at to understand what the registry items mean. > > > > I think that a document that includes the code point is the best outcome here. > > So I guess the question is: Does the COSE WG want to adopt this draft? Note that we'd have to recharter to take it on. -Ben > Or should I submit to ISE? > > Thanks, > > > Russ > > -derek > -- > Derek Atkins 617-623-3745 > derek@ihtfp.com www.ihtfp.com > Computer and Internet Security Consultant > > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit From nobody Fri Aug 2 06:09:30 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF0B51200B1; Fri, 2 Aug 2019 06:09:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.989 X-Spam-Level: X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ihtfp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4xezq8W2pTJK; Fri, 2 Aug 2019 06:09:27 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F19F12009C; Fri, 2 Aug 2019 06:09:27 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 65C0CE2046; Fri, 2 Aug 2019 09:09:24 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 08376-06; Fri, 2 Aug 2019 09:09:22 -0400 (EDT) Received: from securerf.ihtfp.org (99-46-190-172.lightspeed.tukrga.sbcglobal.net [99.46.190.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (not verified)) by mail2.ihtfp.org (Postfix) with ESMTPS id 44E41E2045; Fri, 2 Aug 2019 09:09:22 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ihtfp.com; s=default; t=1564751362; bh=pJ5kFYxpz82HEys/G0gvXmViXuyLVzEsRouigaPXaMo=; h=From:To:Cc:Subject:References:Date:In-Reply-To; b=Wv2LAsG1No8lv6Zf4Wn+824/7PQQTCS5wLqjHadUM2KSzrcE/8q/WJbHv24egPDMc W9WT1nxoSjYe280pUDWQVXN7Y+Gu5If1UnK5aKZNuzxDgps5UXaUSEFyUhLXhICX0s sWoHrArcLszeuBekytQbdqdnUD4JS26GYjOxl8r4= Received: (from warlord@localhost) by securerf.ihtfp.org (8.15.2/8.15.2/Submit) id x72D9FWM030300; Fri, 2 Aug 2019 09:09:15 -0400 From: Derek Atkins To: Benjamin Kaduk Cc: Russ Housley , suit@ietf.org, cose References: <835.1562080969@localhost> <20190801222835.GJ1006@kduck.mit.edu> Date: Fri, 02 Aug 2019 09:09:13 -0400 In-Reply-To: <20190801222835.GJ1006@kduck.mit.edu> (Benjamin Kaduk's message of "Thu, 1 Aug 2019 17:28:36 -0500") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Subject: Re: [COSE] [Suit] draft-atkins-suit-cose-walnutdsa X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Aug 2019 13:09:29 -0000 Benjamin Kaduk writes: >> So I guess the question is: Does the COSE WG want to adopt this draft? > > Note that we'd have to recharter to take it on. Indeed. Considering I'm fine with an informational draft, should I approach the ISE? > -Ben > >> Or should I submit to ISE? >> >> Thanks, -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Sun Aug 4 09:37:47 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E1EB120033; Sun, 4 Aug 2019 09:37:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ym0tiCgylzzq; Sun, 4 Aug 2019 09:37:44 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3390120025; Sun, 4 Aug 2019 09:37:44 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x74Gbe0n029413 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 4 Aug 2019 12:37:42 -0400 Date: Sun, 4 Aug 2019 11:37:39 -0500 From: Benjamin Kaduk To: Derek Atkins Cc: Russ Housley , suit@ietf.org, cose Message-ID: <20190804163739.GO1006@kduck.mit.edu> References: <835.1562080969@localhost> <20190801222835.GJ1006@kduck.mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) Archived-At: Subject: Re: [COSE] [Suit] draft-atkins-suit-cose-walnutdsa X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Aug 2019 16:37:46 -0000 On Fri, Aug 02, 2019 at 09:09:13AM -0400, Derek Atkins wrote: > Benjamin Kaduk writes: > > >> So I guess the question is: Does the COSE WG want to adopt this draft? > > > > Note that we'd have to recharter to take it on. > > Indeed. > Considering I'm fine with an informational draft, should I approach the ISE? That, or just go for expert review for a value greater than 65535. -Ben From nobody Mon Aug 12 15:12:55 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9122D120924 for ; Mon, 12 Aug 2019 15:12:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HfWSHaqsFbSa for ; Mon, 12 Aug 2019 15:12:51 -0700 (PDT) Received: from mail-wr1-x430.google.com (mail-wr1-x430.google.com [IPv6:2a00:1450:4864:20::430]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A956121AD2 for ; Mon, 12 Aug 2019 08:41:14 -0700 (PDT) Received: by mail-wr1-x430.google.com with SMTP id t16so14855243wra.6 for ; Mon, 12 Aug 2019 08:41:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=kQl5LrWaxbz4iycqc9NofklRBzKSiUyHkrBOv0OfWYA=; b=ynd1eRZ152Nm8BDeTUtZI+jyVHbhXigO4LKeiZiYZbrW4UXbWSTzVY5fio+LozIRJW ijzjKhMUqfcac/C2rKw1M7a4H9jvSz6Srni25o5lWRrE+vn20bBZBHZwAbL+uOZ1uKoJ cWAnVui1egOlDasn0Gilf2uzbGx1wxayvE373QhwcX8iU8YByjd2jrQcD3P5rBYB39a5 v96lEE8O193NMP0OShl00dDOsZJ4G5p6b/hwNOtQt7bOQW7jaDJlKFUiEAo+ptbUVXZg htcdwQp9AFsOsStMhuDt4IHyZ55V78cOdSReDyQeMs3kk6oBNoXm40z4qRj++UCQzs7t 6zUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=kQl5LrWaxbz4iycqc9NofklRBzKSiUyHkrBOv0OfWYA=; b=JE9b8auhR3e1PnCO84i2zz16D7iX1bMR3COA794u5h1vieKSIrOKVwbuVFETn6gwrm VMierk+TxXPwnTlRddXsPDcLNY/FtVdxtrYcxLBkQZMw+ale4a3sBMx7luiu2ziW4rCG bsiSg+6VROdSV//JVQ5KedSnLWzSyLcnMUJ3dLpKl+fP1kTFdnrfThM/HVLdsSYjrvss IJF4hmAwjNgSrv3dI3n7YFt0LzYCwEFMq08c9edWP58V9KXSSS4LSZ0tgO4bt7mzGnJQ OUjuhawGCls6qt1YRaysiCLRzjghAhi2bsusJmty0pKqGlg2vRWIzecALwbW/R6Tt4nW Gq2Q== X-Gm-Message-State: APjAAAWGzJ14KqybEdebdjH64BV+7M5V5PtJDIQVMnpZQe6jv1wSwspH uXHQ52FLlJlP1Om+CfT29hqpCcnpZnAi28z5q39aH9k2/Hk= X-Google-Smtp-Source: APXvYqzlvFjHx0Migwf8NHd7wFxKwIXyMBpe+7q/98xKDYhds6coO94KcjMQLhF0kdOHTs5i1SstOjRcDdCHoMSifOw= X-Received: by 2002:a5d:568e:: with SMTP id f14mr40359304wrv.167.1565624472466; Mon, 12 Aug 2019 08:41:12 -0700 (PDT) MIME-Version: 1.0 From: ivaylo petrov Date: Mon, 12 Aug 2019 17:40:46 +0200 Message-ID: To: cose Cc: cose-chairs@ietf.org Content-Type: multipart/alternative; boundary="000000000000889773058fed5a4d" Archived-At: Subject: [COSE] 105 Minutes X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Aug 2019 22:12:53 -0000 --000000000000889773058fed5a4d Content-Type: text/plain; charset="UTF-8" Dear all, The minutes from the last COSE WG meeting are on the Datatracker. https://datatracker.ietf.org/doc/minutes-105-cose/ Special thanks to the minute takers ! Please review them and send the chairs (in CC) or the ML a note if you believe there are any errors. Best regards, - Matthew and Ivaylo COSE Chairs --000000000000889773058fed5a4d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear all,

The minutes from the last COSE WG meeting are on the Datatracke= r.
https:= //datatracker.ietf.org/doc/minutes-105-cose/

Special thanks to t= he minute takers !

Please review them and send the chairs (in CC) or= the ML a note if you believe there are any errors.

Best = regards,
- Matthew and Ivaylo
COSE Chairs

=
--000000000000889773058fed5a4d-- From nobody Tue Aug 13 15:23:57 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D57F1208EF; Tue, 13 Aug 2019 15:23:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.651 X-Spam-Level: X-Spam-Status: No, score=-1.651 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.249, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S63DkqXfhcd1; Tue, 13 Aug 2019 15:23:54 -0700 (PDT) Received: from smtp01.icann.org (smtp01.icann.org [192.0.33.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E30F1208E6; Tue, 13 Aug 2019 15:23:54 -0700 (PDT) Received: from request4.lax.icann.org (request1.lax.icann.org [10.32.11.221]) by smtp01.icann.org (Postfix) with ESMTP id 8FB37E0BDE; Tue, 13 Aug 2019 22:23:53 +0000 (UTC) Received: by request4.lax.icann.org (Postfix, from userid 48) id 8FD5C206B2; Tue, 13 Aug 2019 22:23:53 +0000 (UTC) RT-Owner: sabrina.tanamal From: "Sabrina Tanamal via RT" Reply-To: iana-prot-param@iana.org In-Reply-To: <005001d5461d$149a4c70$3dcee550$@augustcellars.com> References: <005001d5461d$149a4c70$3dcee550$@augustcellars.com> Message-ID: X-RT-Loop-Prevention: IANA X-RT-Ticket: IANA #1148103 X-Managed-BY: RT 4.4.3 (http://www.bestpractical.com/rt/) X-RT-Originator: sabrina.tanamal@icann.org To: ietf@augustcellars.com CC: cose@ietf.org, cose-ads@ietf.org Content-Type: text/plain; charset="utf-8" X-RT-Original-Encoding: utf-8 Precedence: bulk Date: Tue, 13 Aug 2019 22:23:53 +0000 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Archived-At: Subject: [COSE] [IANA #1148103] Early Code Point Assignments X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Aug 2019 22:23:55 -0000 Hi Jim, We've made the early allocations for draft-ietf-cose-hash-algs, but we're still waiting to hear back from the experts regarding the assignments in draft-ietf-cose-x509. We'll let you know as soon as we hear from them. These early allocations are complete: SHAKE256 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -45 256-bit SHAKE [draft-ietf-cose-hash-algs] Yes SHA-512 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -44 SHA-2 512-bit Hash [draft-ietf-cose-hash-algs] Yes SHA-384 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -43 SHA-2 384-bit Hash [draft-ietf-cose-hash-algs] Yes SHAKE128 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -18 128-bit SHAKE [draft-ietf-cose-hash-algs] Yes SHA-512/256 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -17 SHA-2 512-bit Hash truncated to 256-bits [draft-ietf-cose-hash-algs] Yes SHA-256 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -16 SHA-2 256-bit Hash [draft-ietf-cose-hash-algs] Yes SHA-256/64 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -15 SHA-2 256-bit Hash truncated to 64-bits [draft-ietf-cose-hash-algs] Filter Only SHA-1 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -14 SHA-1 Hash [draft-ietf-cose-hash-algs] Filter Only If this document hasn't been approved for publication by July 2020, we'll contact you about approving a one-year renewal. Any further renewals would require IESG approval. Best regards, Sabrina Tanamal Senior IANA Services Specialist On Mon Jul 29 14:52:02 2019, ietf@augustcellars.com wrote: > Following the meeting in Montreal where I asked for the ability to do early > point assignment for documents in the working group and got permission, > these are the code points that I am assigning. I am only assigning points > that I know people are asking for now, some points will be setup later. > > For draft-ietf-cose-x509 (https://tools.ietf.org/html/draft-ietf-cose-x509): > > Table COSE Header Parameters > https://www.iana.org/assignments/cose/cose.xhtml#header-parameters > > Name Value > x5bag 32 > x5chain 33 > x5t 34 > x5u 35 > > For draft-ietf-cose-hash-algs > (https://tools.ietf.org/html/draft-ietf-cose-hash-algs): > > Table COSE Algorithms > https://www.iana.org/assignments/cose/cose.xhtml#algorithms > > Name Value > > SHA-1 -14 > SHA-256/64 -15 > SHA-256 -16 > SHA-384 -43 > SHA-512 -44 > SHA-512/256 -17 > SHAKE128 -18 > SHAKE256 -45 > > > Jim > > From nobody Thu Aug 15 14:15:27 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 942D81200CC for ; Thu, 15 Aug 2019 14:15:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mozilla.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wV1iMmhM34BH for ; Thu, 15 Aug 2019 14:15:24 -0700 (PDT) Received: from mail-qt1-x835.google.com (mail-qt1-x835.google.com [IPv6:2607:f8b0:4864:20::835]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C09B51200C7 for ; Thu, 15 Aug 2019 14:15:24 -0700 (PDT) Received: by mail-qt1-x835.google.com with SMTP id u34so3907826qte.2 for ; Thu, 15 Aug 2019 14:15:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mozilla.com; s=google; h=mime-version:from:date:message-id:subject:to:cc; bh=3TG5xqdELfFhukfBLnRoCdILoHiyNTo6k4WkDzRNsmY=; b=drwYxiSDhZyJBLXtEGUy5aWZ6IwIexi5KwkJEt9pPtam7JOtN4zDAzQwz2MipFgV8H J+8B3UD7lkZJOX5gZQPRYGw4vk5ovcU/CI5VplfkkR0NhkG6wBX8CaXtEUol0+pNspuQ ndkacD8DHQEKu6iRZOH+QeeDlxN2n/yOK2bEU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=3TG5xqdELfFhukfBLnRoCdILoHiyNTo6k4WkDzRNsmY=; b=KdjX1VygYCMJHtNDxhtW9/TbzWGcypVVHN5O9cIAhMIBraj0ifAFE0kcMj3ixfx9Kr ayI0oY4fshxF2px61FnpBKHCsNZsqst5Oxhjtia6xXyKSSNlsLtRnSUxyZ4MM4zYrcso UkWDkMCSTTaqFqf0w2D4gKcpcZtbfG1Clnyqvhk8VqooIO7yV9oqk4HaUxO4QFTxeXhq +2wQCYMmQEITgBSgNNiL/T/TtvvAR9ZQSATcYyASBdYbLlQsYSeYE/1apl9iXGBPT6aR +PwAtAymXaJ6NAc4w0haTAjq5rTY2DMCTsLMthVQKJeFWjHvwWvtnVYwjlGgAO8eoQGn 7aqA== X-Gm-Message-State: APjAAAUgYsYwJh9d28mVw1O7KTet0tz17kzfeE6qn6+0IzhOEkffy0jN op7CtL41/lCCBv5RA31nEO8lU5CuBHmcfWQUW9o8ydtUfeI= X-Google-Smtp-Source: APXvYqxZ/y6edOIaG4VHbKkTb1j+UZbbb7lwnaK5H/c3qXXiUGNqQCmX21n5McgHTUxjqMOaK6eykeCp8pw6oEItRSc= X-Received: by 2002:aed:3747:: with SMTP id i65mr5933297qtb.166.1565903723440; Thu, 15 Aug 2019 14:15:23 -0700 (PDT) MIME-Version: 1.0 From: "J.C. Jones" Date: Thu, 15 Aug 2019 14:15:11 -0700 Message-ID: To: cose@ietf.org Cc: Kevin Jacobs Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Aug 2019 21:15:27 -0000 All, We reviewed draft-ietf-cose-webauthn-algorithms-01 and only have pair of comments about the security considerations. Regarding section 5.3: While section 5.2 refers to RFC7518's guidance, currently 5.3 does not. Perhaps note in 5.3 something akin to "if you have an existing implementation, the exponent restrictions from RFC7518 also apply." Regarding section 5.4: The first sentence uses the FIPS186-3 form P-256 when everything else in this document would imply we'd refer to it as secp256r1, though rfc8152bis uses the P-256 form. Perhaps all readers of this document would be able to avoid confusion, but since it's a section _about_ confusion, it seems worth pointing out. Perhaps a parenthetical could be added? Kevin Jacobs and J.C. Jones From nobody Fri Aug 16 06:05:43 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 367CF1200A1 for ; Fri, 16 Aug 2019 06:05:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=risecloud.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fhp37i4-7wTP for ; Fri, 16 Aug 2019 06:05:37 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10055.outbound.protection.outlook.com [40.107.1.55]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18C0A120089 for ; Fri, 16 Aug 2019 06:05:36 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hyT4LAalXW0a7QT06oAhkzZHtKwZcPrx7mD5tRZH2VT0i+wMQgicg4w/RQr08m3fJbDTRG2twbJmwZXmH7qX2Q7pPnNovsBF3xFmsjn3hPusxoKtzGLAyPDliWvrj9YPZoshjEdmq7VqJ2Mkx2C/3yU1kVjgNBpo0doGS8YAfUpqnIbUJzFjXMXdopWRR6wWa0Gr14ksReBBpT4wLBBo7r/bIjKFCRjvQWe4RRxT3QD+nPLzO63t8Mgkoymjgsg1V5C0iGhO2nOb0PjTge90zihjYdBTx6Z5oWz4W1oNOEQXUJageyZ2ZUccJ9mnpF30+z4d3YZfXXJdGkocYSxSrw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=S/PKGLgPv6tyE5OhqgWLmOUED7oJiZ6eSeT0l+Y/C9M=; b=d3SefMgtTpviUM2EXEmVSyOJ9bbvRA7WPKUNFud5lI8dHrjHgPTIEeEAT1Q11FflJb3SrwA2HmQrn8NluwY+I2c6z84/txGqt5y+ZzaHTzMSdT1reL+zczKF8BvGmJxE39BthIc5ElaXtJmWXFq5lCVgy6Z0CRiLk5uQM7xqKRyNNftsneA5HjEknsuWDg95kjm4pQ96p3pznykio9KicbqzjipBQR3X8bFoiAxWYzQ3ObJ1JW2aOyz1pH0f4ZKysASvYWC7ZRXy7htXfl9twqyZk8cnNe+EvUm2LRWsNvxabFa9iJ4o5QhBMCjkxTVwpZqySpR+5tSJcVu7IsiHWQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 194.218.146.197) smtp.rcpttodomain=augustcellars.com smtp.mailfrom=ri.se; dmarc=pass (p=none sp=none pct=100) action=none header.from=ri.se; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=RISEcloud.onmicrosoft.com; s=selector2-RISEcloud-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=S/PKGLgPv6tyE5OhqgWLmOUED7oJiZ6eSeT0l+Y/C9M=; b=rdJsD4R+UmilIB4oqo0VeSMXTG1uXnIaTgzEn+pslINqle7g/GT8E4L5uc4HGDCApLDcFP1CdZmKuhNHDIaVYR7SoqOBNGdnm0SCFpsVmMPnn0eQWfvNenorL8HplBUKom0BTRbbOKtzy9xc3MYptBKVR70Rq5dddyEBZuvwvfw= Received: from HE1P18901CA0014.EURP189.PROD.OUTLOOK.COM (2603:10a6:3:8b::24) by VI1P18901MB0767.EURP189.PROD.OUTLOOK.COM (2603:10a6:800:123::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2157.15; Fri, 16 Aug 2019 13:05:34 +0000 Received: from VE1EUR02FT033.eop-EUR02.prod.protection.outlook.com (2a01:111:f400:7e06::204) by HE1P18901CA0014.outlook.office365.com (2603:10a6:3:8b::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2178.16 via Frontend Transport; Fri, 16 Aug 2019 13:05:33 +0000 Authentication-Results: spf=pass (sender IP is 194.218.146.197) smtp.mailfrom=ri.se; augustcellars.com; dkim=none (message not signed) header.d=none;augustcellars.com; dmarc=pass action=none header.from=ri.se; Received-SPF: Pass (protection.outlook.com: domain of ri.se designates 194.218.146.197 as permitted sender) receiver=protection.outlook.com; client-ip=194.218.146.197; helo=mail.ri.se; Received: from mail.ri.se (194.218.146.197) by VE1EUR02FT033.mail.protection.outlook.com (10.152.12.99) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.20.2178.16 via Frontend Transport; Fri, 16 Aug 2019 13:05:33 +0000 Received: from [10.112.134.122] (10.100.0.158) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Fri, 16 Aug 2019 15:05:32 +0200 To: , Jim Schaad From: Ludwig Seitz Message-ID: <0cc04acc-bbc8-92f6-f9d5-50d058689dea@ri.se> Date: Fri, 16 Aug 2019 15:05:32 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms020907020701020007010300" X-Originating-IP: [10.100.0.158] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:194.218.146.197; IPV:NLI; CTRY:SE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(376002)(136003)(346002)(39860400002)(396003)(2980300002)(54094003)(189003)(199004)(7736002)(16526019)(110136005)(58126008)(476003)(14444005)(8676002)(5660300002)(33964004)(316002)(235185007)(568964002)(2906002)(70586007)(65826007)(478600001)(70206006)(16586007)(386003)(40036005)(31686004)(16576012)(106002)(22756006)(65956001)(65806001)(26005)(71190400001)(86362001)(81166006)(2616005)(66574012)(53936002)(486006)(126002)(186003)(5024004)(305945005)(336012)(81156014)(8936002)(356004)(44832011)(6116002)(3846002)(31696002)(36756003)(64126003); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1P18901MB0767; H:mail.ri.se; FPR:; SPF:Pass; LANG:en; PTR:InfoDomainNonexistent; MX:1; A:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: bedab531-7e5f-440f-ab52-08d7224a6c13 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(4709080)(1401327)(2017052603328)(7193020); SRVR:VI1P18901MB0767; X-MS-TrafficTypeDiagnostic: VI1P18901MB0767: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:10000; X-Forefront-PRVS: 0131D22242 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: x0MjOWZrUmNyHDFejwbwhZf2ix8KKuibrBZHkB7+KdNkqsUvfI8pKoJn1QVxYWfDayb+fojoQGXHZQlZcRoXcpLAXfbSaqDUwXVhMI5DjNwlYoYnTZ1QUL1+VbkOrwgvlw5ENzR+W+UHvlhplrPdZ69KNi4QEIE+vaNLhxAgVQsWBWaK2y34ncQB9r/AzUehR38Gf0DcM10ARu9/YnaFUcbNqd92WMoXqVZ1Zvx9PvTpEXeOiPqNi1a3OUDPfikvDt8qB3BYm449KjJwjiT8gsyX191awi+EY4AhPzoT2Z90r8WoTj3/c7Ktart53f2MyaWcuT0HstAUwu8JDq2q4IgIkItmqY987Gk/5DmdlA5bNavkAtxHBwFlQn6QY+xtf+5/fhrvBWjgrs54k597ktJV8tTUcdG4Gd/MecaC6SY= X-OriginatorOrg: ri.se X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Aug 2019 13:05:33.1296 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: bedab531-7e5f-440f-ab52-08d7224a6c13 X-MS-Exchange-CrossTenant-Id: 5a9809cf-0bcb-413a-838a-09ecc40cc9e8 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5a9809cf-0bcb-413a-838a-09ecc40cc9e8; Ip=[194.218.146.197]; Helo=[mail.ri.se] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1P18901MB0767 Archived-At: Subject: [COSE] Review of draft-ietf-cose-rfc8152bis-struct-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Aug 2019 13:05:41 -0000 --------------ms020907020701020007010300 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable Hello WG, Jim, here is my review of draft-ietf-cose-rfc8152bis-struct-03. Note that it=20 consists mostly of nits. Regards, Ludwig Nit: Section 1: " o The procedures used to compute build the inputs to the cryptographic functions required for each of the structures. " either "compute" or "build", but both sounds wrong to me. =3D=3D Nit: section 1: "Applications may additionally want to defined additional data fields as part of the stucture." should be "... want to define ... structure" =3D=3D Nit: Section 1.2 "standalong" should be "standalone" =3D=3D Nit: Section 1.4 "Since that time CBOR Data Definition Language (CDDL) [I-D.ietf-cbor-cddl] has been published as an RFC." This (and other places in the draft) should refer to RFC 8610 instead of = the I-D. =3D=3D Nit: Section 1.6 "Authenticated Encryption with Authenticated Data (AEAD) [RFC5116]" RFC 5116 expands AEAD to 'Authenticated Encryption with Associated Data' =3D=3D Nit: Section 3 "The structure of COSE has been designed to have two buckets ..." and then after the second paragraph: "Two buckets are provided for each layer" This essentially repeats the same information, and feels unnecessary. Perhaps: "The two buckets provided for each layer are:" =3D=3D Section 3 "empty_or_serialized_map =3D bstr .cbor header_map / bstr .size 0" This CDDL uses the operators '.cbor' and '.size', which are not defined=20 in section 1.4 although the text in section 1.4 makes it appear such as=20 if it was presenting all the CDDL operators that are used in this documen= t. I suggest to provide a short definition of these operators in section 1.4= =3D=3D Section 3.1 "Parameters defined in this document do not need to be included as they should be understood by all implementations." I wonder if this 'should' should be a MUST? =3D=3D Nit: Section 3.1 "Partial IV: [...] The IV can be placed in the unprotected header ..." This should read "The Partial IV can be placed in the ..." =3D=3D Section 3.1 "The message IV is generated by the following steps: 1. Left-pad the Partial IV with zeros to the length of IV. 2. XOR the padded Partial IV with the context IV. " There seems to be a part missing here, since "context IV" is not=20 mentioned anywhere else in this document. =3D=3D Nit: 4.3 "these fields use a TLV structure so they can be concatenated without any problems." This is the first use of the abbreviation TLV, so it should be expanded. =3D=3D Nit: 4.4 " 4. Place the resulting signature value in the 'signature' field of the array." Although it is clear from the context, one might whish to specify which=20 array to avoid confusion. =3D=3D Nits: Section 5. "That is the countersignature makes a statement about the existance of a signature and" Should be "existence" (in several places). AND " as oppose to attesting" should be "as opposed to attesting" AND "A tagged COSE_Countersign steruture is identified byt the CBOR tag TBD0.= " should be "structure" and "by" =3D=3D Nit: 5.2 "The object was to keep the countersignature as small as possible ..." should be "The objective ..." =3D=3D Nit: Section 15 "An example of a profile can be found in [I-D.ietf-core-object-security] where a profiles was developed for carrying content in combination with CoAP headers." "profiles" should be "profile" or the whole sentence rephrased to avoid=20 the second occurrence of 'profile*' =3D=3D Nit Section 18. "... at the time of posting of this Internet-Draft" This sentence will be wrong as soon as the RFC is published. =3D=3D Appendix A page 59 "In many cases, applications that make the algorithm identifier implicit will also want to make the context identifier implicit for the same reason." 'context identifier' is not defined as a concept anywhere. Perhaps it=20 would be good to elaborate on what is meant to eliminate possible confusion with=20 e.g. the 'context' used in 13.5. or 7.3. or 6.3. =3D=3D Note: I did not check the correctness of the examples in Appendix C. --=20 Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 --------------ms020907020701020007010300 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DT0wggYWMIID/qADAgECAg8BaKlzCTJTye3phLaz/cIwDQYJKoZIhvcNAQELBQAwRzELMAkG A1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJhMSIwIAYDVQQDDBlUZWxpYVNvbmVyYSBD bGFzcyAyIENBIHYyMB4XDTE5MDIwMTE0MjUxNVoXDTIxMDIwMTE0MjUxNFowgYsxCzAJBgNV BAYTAlNFMS4wLAYDVQQKDCVSSVNFIFJlc2VhcmNoIEluc3RpdHV0ZXMgb2YgU3dlZGVuIEFC MRUwEwYDVQQDDAxMdWR3aWcgU2VpdHoxEjAQBgNVBAUTCUx1ZHdpZ1NlaTEhMB8GCSqGSIb3 DQEJARYSbHVkd2lnLnNlaXR6QHJpLnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJNmRfcsto5I/yXrBIi9QroZtfAMttc1Eznv5iPCK++eFUArODhITO7k9rtlQX5D8vYF v4vzZex58YWZhvGMzDj9FdpD/PHKOxL/frlrreChuissPWo5M88DmL3V1oyGzvgeRqaafpEi 0/2+gezMFlABm/BXj3/0Fiw5Sxub7essE27EtDK05nAbUB69kfLHBEytbTAuuSb11hC1dpTf itMZkzSFwsBCyPtIv3GRt9xgnOPK4RRpHidv1GLYXNQQ7xEGhFy4qbZ2NSfM+56SSRswvW9P 5n81ZmZ4FWkiJouUIYtZ2ifncBJL4DC2chjsywDEz5No7kYrGxc5oOm1YQIDAQABo4IBuDCC AbQwHwYDVR0jBBgwFoAUnhn/5Q06/gCXFT9p8dxaPKoMlIMwHQYDVR0OBBYEFKZHZ8MZNNP5 tXMPjeFiw01pUWbtMA4GA1UdDwEB/wQEAwIFoDBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEB DDA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEu Y29tL0NQUzAdBgNVHREEFjAUgRJsdWR3aWcuc2VpdHpAcmkuc2UwTQYDVR0fBEYwRDBCoECg PoY8aHR0cDovL2NybC0yLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYWNsYXNz MmNhdjIuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjB+BggrBgEFBQcBAQRy MHAwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnRydXN0LnRlbGlhLmNvbTBFBggrBgEFBQcw AoY5aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYWNsYXNzMmNh djIuY2VyMA0GCSqGSIb3DQEBCwUAA4ICAQCk0GOalOCjEJObuBeMg0QREtBP/2ona16npn+T v5R3Vjk5UsQdOaOosgVjADX68C83dyfPiWR4UfNJoTBcM8JLpEXIm+xC4BiDPTPHYvgkhgXt 9VWCRWXOMfT/UPXjiGsbPuNWja1LQzF5KOmM826kHVZItHuDY6kJLE4OZ+apFvVKtSLQJJLA 4MlDVwp5+XsZi4cftcX5HdgLdChodUPKq3XVfALfXM/p81XEFBTYOHNplr3cQytDQjsnCZnS Ic4UpsxrArNxDO9+AKu/s1Fbq494AhHj4oHcg4DIjhHUzbPCLP19Gqp4dflr/V7Ulg3d+4Zh bmSAn1cffrzvvkjVrqMgQOoHQTl2QyO9n/oJ/9CSYRmhFsQMPun9LM/p5l58dTZp53B3LgA6 FFrxnntlZnTPh3bvsMJvUQ+AoiXyQwnkdxUrhoM+gUz36t3JSA8g48h7BhPsnwQ/YrarAhJ8 ifuzykTQmDseWLjJKyFflddy/azAlPQjgSMMWOZCo2s+l+WwPISf33nls2Aec/vvG5auYHS6 pwWuVKuwZTPgJfHanZTNpBM5y0jVBz6tr8AHZypnCONgyUYA4uec3v5oWz4FvLEnlKnMGoK3 OeFGvfHG0tbP25HbdN3AJYP0EUo56wfkBOYsnmn4mEYdk2GHkJNfaQRBJljH0T7TOcmcDjCC Bx8wggUHoAMCAQICEGN8C9eFpb8p2mAtfE16cLEwDQYJKoZIhvcNAQELBQAwNzEUMBIGA1UE CgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMTQx MDE2MDgzOTMwWhcNMzIxMDE2MDUwNDAwWjBHMQswCQYDVQQGEwJTRTEUMBIGA1UECgwLVGVs aWFTb25lcmExIjAgBgNVBAMMGVRlbGlhU29uZXJhIENsYXNzIDIgQ0EgdjIwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC0PpW2qcWGnStqfa5DjrUi79Kz2SySUlJ1kiEQ1Pd/ LWbnsEwFYPqOJwAf6ZtEDtQ/9Z1VkVNQ6MkD++keqk7648x0YANgMyiJsWrbd0TKOObtlXdJ pb5qesJ5nOAdVeL3z6lgrkZx+fsUfTV+lLRGRh2+RWzZTjPAvKotY3nAwXCHtwI5v3FKuR10 aJ9+CEOka02KSUzGjcGZwMk2io0DxLELf1gPRvqE9xmn4ioXLqpluozb4Fo9ewydufTLQc3/ I63uPQh8BlLPPIGzWb4iBDq2zbWlbx0KlH/UlUZ7fjzp6N6cAqZ2NnDaCOnnIRfUYeNXFG8/ aiBeFOpEeEpclr5QUwr9HLKL1QiyQtc/wW8acQFoKuGi8myiAch7k7S0rmU5gT05je+OTzWh Oaw7gmDdndYY1mjkPkzpQ+hxyfnwUsAitUq9j0imFOLxKWLH4QNbyuDIMvDyezzJWzMy3XPB LiLSH9CBLVQHRoQ+WW8xD4rnmvQtoGZM72og2iNf4/JCHL1AJYhQtaRjYgm3rhvAP0HhSVAB Z5aHM52ylJHC3JwUyuFm8S9A2ffY9rUTffMLWmDCnX0QAP9bKr6+ACogm4DBUj3ftYodI2TD 6F8+VjSFuCzGDPuCjK+fQ2c3wqziwFl+NgoGI9Vgc6x5+0ocKkiQAIYFaQ3SyGmI6QIDAQAB o4ICFTCCAhEwgYoGCCsGAQUFBwEBBH4wfDAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AudHJ1 c3QudGVsaWFzb25lcmEuY29tMEsGCCsGAQUFBzAChj9odHRwOi8vcmVwb3NpdG9yeS50cnVz dC50ZWxpYXNvbmVyYS5jb20vdGVsaWFzb25lcmFyb290Y2F2MS5jZXIwEgYDVR0TAQH/BAgw BgEB/wIBADBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEBAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzAOBgNVHQ8BAf8EBAMC AQYwgcYGA1UdHwSBvjCBuzBAoD6gPIY6aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJh LmNvbS90ZWxpYXNvbmVyYXJvb3RjYXYxLmNybDB3oHWgc4ZxbGRhcDovL2NybC0xLnRydXN0 LnRlbGlhc29uZXJhLmNvbS9jbj1UZWxpYVNvbmVyYSUyMFJvb3QlMjBDQSUyMHYxLG89VGVs aWFTb25lcmE/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDtiaW5hcnkwHQYDVR0OBBYEFJ4Z /+UNOv4AlxU/afHcWjyqDJSDMB8GA1UdIwQYMBaAFPCPWTgAs/WPmpYM1ev6e6oX6BMSMA0G CSqGSIb3DQEBCwUAA4ICAQB5wuZFNXR5ko9cu7PcpIyH8xaoGfpimP2GTg7qVuL92D/idIlj pqMm93WC9mgL/Uy6DExoF8xSLurLaiajoU+VG6ZWg0F7P1AXARNt0RpWI5SphxBQYM2751S8 vC/22k8Vi+qpQVIREqQPVXCIEH7U6eCY9gEVzdq9l1yPoI8n0D2a8V6GCv0RVkmIpa16rNYD tTw4j3Ha56/Ua33C3qeZh1dIfkaU2h4CGHd2Em3v5LLMsEh8dqUeG9yIcCU+8RUgDahNxWMe MGxzrhwk8WBV6xeoQp20p7cSHbSbyHJURC1n+nVrgdh8hbw6WOgFhNA5tCPDZ0oSF+uHfj+b ioZE3AlYdcEqHJA9A9sO58F4/Qg/yp9oYuT0ZpKb4hmzeqDXvk5KRFNfHlhTt35i+qmas9wB 11MXbYd5WwqEhZH6HWO5H7XKJP7olxmEC0W3OKlpKafq1iPsBN5ycRfUrXFss0Ax6vpCq0XA 3LYePpQ44hOU+qrkR1M0a7Eo3++3TpP4cV+FZiO4aZYZ3yZftSRHwWpGiDBdWOdTKR2GJi7Z z/OxacrmwmM1Z+WcigldbG8f3IMnOLK4X0uXjhVeAHrhuttQuM8i+4TNXgsZbmfEKNDQIQPO /lbacsGHWFB/U2y6SXVEkZs2xIciRA0iZNTv7mbIL8SZmf5wpbjDCYHiCjGCAzgwggM0AgEB MFowRzELMAkGA1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJhMSIwIAYDVQQDDBlUZWxp YVNvbmVyYSBDbGFzcyAyIENBIHYyAg8BaKlzCTJTye3phLaz/cIwDQYJYIZIAWUDBAIBBQCg ggGvMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE5MDgxNjEz MDUzMlowLwYJKoZIhvcNAQkEMSIEIEFfJlphoXrnP3PDsdTwwJBCMzaWs8n9YXF0h9YcRCZs MGkGCSsGAQQBgjcQBDFcMFowRzELMAkGA1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJh MSIwIAYDVQQDDBlUZWxpYVNvbmVyYSBDbGFzcyAyIENBIHYyAg8BaKlzCTJTye3phLaz/cIw awYLKoZIhvcNAQkQAgsxXKBaMEcxCzAJBgNVBAYTAlNFMRQwEgYDVQQKDAtUZWxpYVNvbmVy YTEiMCAGA1UEAwwZVGVsaWFTb25lcmEgQ2xhc3MgMiBDQSB2MgIPAWipcwkyU8nt6YS2s/3C MGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0D BzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwIC ASgwDQYJKoZIhvcNAQEBBQAEggEAOqRErHzdaXSAVjJdfEkan5Y5/LUw2/ymXxgXIw0/FqRV NKGvbxp0LRUuLHxqXPuidpUeqtAky3ZPN/BRP1pRiaDbFJp399t1zQm0mSqGrWiXBmf1vn5S FWelUNIyVsenKbEOVHALio99/Jj3bWmoZVcJS4RDGinpYK6oBPU7zEfh+v5EpEIoXsvLaSK8 EQSL/tyxoLxWB7/ji4adJvbNY0hLrIEtSfWaE0kg67aBqEBUU9VtEznaA0SGjGxqNVQJYD4c fEZt+Z6AyMnEBq6kqLU7gIECOqWdpGR4M4fMbF2Wx1sVifnEUxIy00/1uMkpkB+AKs5svpwX c4G0//UxGgAAAAAAAA== --------------ms020907020701020007010300-- From nobody Fri Aug 16 06:08:07 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 215C8120089 for ; Fri, 16 Aug 2019 06:08:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=risecloud.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id skNKSLZ2YIEA for ; Fri, 16 Aug 2019 06:08:04 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-he1eur02on060b.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe05::60b]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24BE81200A1 for ; Fri, 16 Aug 2019 06:08:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CU6HjkotUI75uf2ElXBq8kJcgGEwQLmeELAETbhSnRUxtxAlngbn9UeXRl5cmX4/oFC8aotr6obX/21lw4jFjAhGeY/yxoqep0IttLPC8pSzxbehutYBGz1bt9pWFb0olKbPdetaAJjo2AjNTRjYFrWrgo3MIUOoSN6fF8ZslXP/5l12lQkJVPmR1DhROVU15k1HccXJus+I6eX2VTk3/ff3Vac4JT4JytJTv1dkGWzwCyVh74YCu7osR1urr2amtirdbVSNi2H9efU4d2tupCQLwOOWPdY2TuOuS8DU+nFEqS30um0UyZjcPUdiymdSskqcMwA5Gd5BilovkuJKmw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=q7YLsjVD8A2rWr+ZPlyLIrPhOxRAATOw6AN1qebHiHE=; b=BifYkPSYol6cLtT6XFJAKldw5yT4rOFfTnlFZY3uvlHxjPL+d40NFL939m/x8+2MsOkMdGViFExyBkgisLXdrUSawzmxkeegz6PsF9Y3lYm5Ijj2axFBFLhI2Pu3zdZVRsB2RBgxNcQJmggBpgbyiTw3oD/imXPOTj0qqySxhPgZIhx2eVUxj+s0KtXvp4dcJkwvFrnN6e+m8Y1c4NzW402Mrj/kDSLtdOSnEHoFp23sDMSTnidPBEJ/Kv1SON232G7xoRoxiRXhcwwnTjoRUGSYNYHc0Uawee8DYBO2AQc3HV+ZY/OkFEfkBt6C9hIaNZ+VML3CC8CzPEy5U+lRew== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 194.218.146.197) smtp.rcpttodomain=ietf.org smtp.mailfrom=ri.se; dmarc=pass (p=none sp=none pct=100) action=none header.from=ri.se; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=RISEcloud.onmicrosoft.com; s=selector2-RISEcloud-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=q7YLsjVD8A2rWr+ZPlyLIrPhOxRAATOw6AN1qebHiHE=; b=PRP7yJxVyS7PTcK/TWZgWKpcXwxghCXfKz6H8lxEGHBMwtptcpnq9mkkXXAAxqUPpWmBuKSYi1hQq2BhQf0ACnpbuK3UL0XSMsxfEfhaM+WZk6jzwFFel5xb5cMDdxwWzYF7kSm/9msF8DZHQeZtg2/kSp56smk/d2wxRiTuC8U= Received: from HE1P189CA0003.EURP189.PROD.OUTLOOK.COM (2603:10a6:7:53::16) by VI1P18901MB0768.EURP189.PROD.OUTLOOK.COM (2603:10a6:800:11e::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2178.16; Fri, 16 Aug 2019 13:08:00 +0000 Received: from VE1EUR02FT050.eop-EUR02.prod.protection.outlook.com (2a01:111:f400:7e06::209) by HE1P189CA0003.outlook.office365.com (2603:10a6:7:53::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2178.16 via Frontend Transport; Fri, 16 Aug 2019 13:08:00 +0000 Authentication-Results: spf=pass (sender IP is 194.218.146.197) smtp.mailfrom=ri.se; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=pass action=none header.from=ri.se; Received-SPF: Pass (protection.outlook.com: domain of ri.se designates 194.218.146.197 as permitted sender) receiver=protection.outlook.com; client-ip=194.218.146.197; helo=mail.ri.se; Received: from mail.ri.se (194.218.146.197) by VE1EUR02FT050.mail.protection.outlook.com (10.152.13.198) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.20.2178.16 via Frontend Transport; Fri, 16 Aug 2019 13:07:59 +0000 Received: from [10.112.134.122] (10.100.0.158) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Fri, 16 Aug 2019 15:07:59 +0200 To: References: <0cc04acc-bbc8-92f6-f9d5-50d058689dea@ri.se> From: Ludwig Seitz Message-ID: Date: Fri, 16 Aug 2019 15:07:59 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: <0cc04acc-bbc8-92f6-f9d5-50d058689dea@ri.se> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms080703040406030608020007" X-Originating-IP: [10.100.0.158] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:194.218.146.197; IPV:NLI; CTRY:SE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(136003)(346002)(39860400002)(396003)(376002)(2980300002)(199004)(189003)(3846002)(6116002)(106002)(64126003)(81166006)(446003)(16586007)(568964002)(16576012)(58126008)(316002)(70586007)(70206006)(7736002)(305945005)(478600001)(71190400001)(33964004)(16526019)(229853002)(2906002)(386003)(53546011)(26005)(40036005)(22756006)(31696002)(76176011)(186003)(336012)(356004)(65956001)(36756003)(65806001)(86362001)(2351001)(5000100001)(31686004)(65826007)(486006)(126002)(11346002)(235185007)(5660300002)(8676002)(81156014)(53936002)(6916009)(44832011)(8936002)(476003)(5024004)(14444005)(6246003)(2616005); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1P18901MB0768; H:mail.ri.se; FPR:; SPF:Pass; LANG:en; PTR:InfoDomainNonexistent; A:1; MX:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 445ca3ce-2c82-4b34-c9ac-08d7224ac392 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(4709080)(1401327)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:VI1P18901MB0768; X-MS-TrafficTypeDiagnostic: VI1P18901MB0768: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:7691; X-Forefront-PRVS: 0131D22242 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: kPDJRQaq+rk0004DWHEHiiCg/Qel1ZK9vM9u3UVqpGb2043NGDY7WpARRI//vK/jmNB/ouTjQYhMAqUCvP+ir7yxwR0ikovyVy+xPL8HfKhgE8UcOqUVuYDY6IVZkvLiqXbblXPK66lmpWdSJdp0oPc8k9cBaoMmu9ihVLdj3nWlBKee1OPIMggJ0OIuLjreelEQBPV/gFmqxUYdmV07twz59Z1OQPyzvlCMOibomf2Bz2YIYmoEX53/64ZZOlKawqyvhOk2q/HumAOqcLlQKfBOx2jLephY5iGwJefRCq+bWLrCbM8F0hiCM1ccU7bA0Hq4R+cehwnZsbmotxtMIuexiNhEu90Zzvm+iIDtx8GLSRk6lw9zUHOi0Gz69LbECpB7I40EiYBzOFCF6DgDn5t8c+eYPoPgddogFcXOMB8= X-OriginatorOrg: ri.se X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Aug 2019 13:07:59.9216 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 445ca3ce-2c82-4b34-c9ac-08d7224ac392 X-MS-Exchange-CrossTenant-Id: 5a9809cf-0bcb-413a-838a-09ecc40cc9e8 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5a9809cf-0bcb-413a-838a-09ecc40cc9e8; Ip=[194.218.146.197]; Helo=[mail.ri.se] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1P18901MB0768 Archived-At: Subject: Re: [COSE] Review of draft-ietf-cose-rfc8152bis-struct-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Aug 2019 13:08:06 -0000 --------------ms080703040406030608020007 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 16/08/2019 15:05, Ludwig Seitz wrote: > =3D=3D > Nit: Section 15 >=20 > "An example of a profile can be found in > =C2=A0=C2=A0 [I-D.ietf-core-object-security] where a profiles was deve= loped for > =C2=A0=C2=A0 carrying content in combination with CoAP headers." >=20 > "profiles" should be "profile" or the whole sentence rephrased to avoid= =20 > the second occurrence of 'profile*' >=20 >=20 > =3D=3D I forgot to add: the reference should be updated to RFC 8613. /Ludwig --=20 Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 --------------ms080703040406030608020007 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DT0wggYWMIID/qADAgECAg8BaKlzCTJTye3phLaz/cIwDQYJKoZIhvcNAQELBQAwRzELMAkG A1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJhMSIwIAYDVQQDDBlUZWxpYVNvbmVyYSBD bGFzcyAyIENBIHYyMB4XDTE5MDIwMTE0MjUxNVoXDTIxMDIwMTE0MjUxNFowgYsxCzAJBgNV BAYTAlNFMS4wLAYDVQQKDCVSSVNFIFJlc2VhcmNoIEluc3RpdHV0ZXMgb2YgU3dlZGVuIEFC MRUwEwYDVQQDDAxMdWR3aWcgU2VpdHoxEjAQBgNVBAUTCUx1ZHdpZ1NlaTEhMB8GCSqGSIb3 DQEJARYSbHVkd2lnLnNlaXR6QHJpLnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJNmRfcsto5I/yXrBIi9QroZtfAMttc1Eznv5iPCK++eFUArODhITO7k9rtlQX5D8vYF v4vzZex58YWZhvGMzDj9FdpD/PHKOxL/frlrreChuissPWo5M88DmL3V1oyGzvgeRqaafpEi 0/2+gezMFlABm/BXj3/0Fiw5Sxub7essE27EtDK05nAbUB69kfLHBEytbTAuuSb11hC1dpTf itMZkzSFwsBCyPtIv3GRt9xgnOPK4RRpHidv1GLYXNQQ7xEGhFy4qbZ2NSfM+56SSRswvW9P 5n81ZmZ4FWkiJouUIYtZ2ifncBJL4DC2chjsywDEz5No7kYrGxc5oOm1YQIDAQABo4IBuDCC AbQwHwYDVR0jBBgwFoAUnhn/5Q06/gCXFT9p8dxaPKoMlIMwHQYDVR0OBBYEFKZHZ8MZNNP5 tXMPjeFiw01pUWbtMA4GA1UdDwEB/wQEAwIFoDBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEB DDA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEu Y29tL0NQUzAdBgNVHREEFjAUgRJsdWR3aWcuc2VpdHpAcmkuc2UwTQYDVR0fBEYwRDBCoECg PoY8aHR0cDovL2NybC0yLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYWNsYXNz MmNhdjIuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjB+BggrBgEFBQcBAQRy MHAwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnRydXN0LnRlbGlhLmNvbTBFBggrBgEFBQcw AoY5aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYWNsYXNzMmNh djIuY2VyMA0GCSqGSIb3DQEBCwUAA4ICAQCk0GOalOCjEJObuBeMg0QREtBP/2ona16npn+T v5R3Vjk5UsQdOaOosgVjADX68C83dyfPiWR4UfNJoTBcM8JLpEXIm+xC4BiDPTPHYvgkhgXt 9VWCRWXOMfT/UPXjiGsbPuNWja1LQzF5KOmM826kHVZItHuDY6kJLE4OZ+apFvVKtSLQJJLA 4MlDVwp5+XsZi4cftcX5HdgLdChodUPKq3XVfALfXM/p81XEFBTYOHNplr3cQytDQjsnCZnS Ic4UpsxrArNxDO9+AKu/s1Fbq494AhHj4oHcg4DIjhHUzbPCLP19Gqp4dflr/V7Ulg3d+4Zh bmSAn1cffrzvvkjVrqMgQOoHQTl2QyO9n/oJ/9CSYRmhFsQMPun9LM/p5l58dTZp53B3LgA6 FFrxnntlZnTPh3bvsMJvUQ+AoiXyQwnkdxUrhoM+gUz36t3JSA8g48h7BhPsnwQ/YrarAhJ8 ifuzykTQmDseWLjJKyFflddy/azAlPQjgSMMWOZCo2s+l+WwPISf33nls2Aec/vvG5auYHS6 pwWuVKuwZTPgJfHanZTNpBM5y0jVBz6tr8AHZypnCONgyUYA4uec3v5oWz4FvLEnlKnMGoK3 OeFGvfHG0tbP25HbdN3AJYP0EUo56wfkBOYsnmn4mEYdk2GHkJNfaQRBJljH0T7TOcmcDjCC Bx8wggUHoAMCAQICEGN8C9eFpb8p2mAtfE16cLEwDQYJKoZIhvcNAQELBQAwNzEUMBIGA1UE CgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMTQx MDE2MDgzOTMwWhcNMzIxMDE2MDUwNDAwWjBHMQswCQYDVQQGEwJTRTEUMBIGA1UECgwLVGVs aWFTb25lcmExIjAgBgNVBAMMGVRlbGlhU29uZXJhIENsYXNzIDIgQ0EgdjIwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC0PpW2qcWGnStqfa5DjrUi79Kz2SySUlJ1kiEQ1Pd/ LWbnsEwFYPqOJwAf6ZtEDtQ/9Z1VkVNQ6MkD++keqk7648x0YANgMyiJsWrbd0TKOObtlXdJ pb5qesJ5nOAdVeL3z6lgrkZx+fsUfTV+lLRGRh2+RWzZTjPAvKotY3nAwXCHtwI5v3FKuR10 aJ9+CEOka02KSUzGjcGZwMk2io0DxLELf1gPRvqE9xmn4ioXLqpluozb4Fo9ewydufTLQc3/ I63uPQh8BlLPPIGzWb4iBDq2zbWlbx0KlH/UlUZ7fjzp6N6cAqZ2NnDaCOnnIRfUYeNXFG8/ aiBeFOpEeEpclr5QUwr9HLKL1QiyQtc/wW8acQFoKuGi8myiAch7k7S0rmU5gT05je+OTzWh Oaw7gmDdndYY1mjkPkzpQ+hxyfnwUsAitUq9j0imFOLxKWLH4QNbyuDIMvDyezzJWzMy3XPB LiLSH9CBLVQHRoQ+WW8xD4rnmvQtoGZM72og2iNf4/JCHL1AJYhQtaRjYgm3rhvAP0HhSVAB Z5aHM52ylJHC3JwUyuFm8S9A2ffY9rUTffMLWmDCnX0QAP9bKr6+ACogm4DBUj3ftYodI2TD 6F8+VjSFuCzGDPuCjK+fQ2c3wqziwFl+NgoGI9Vgc6x5+0ocKkiQAIYFaQ3SyGmI6QIDAQAB o4ICFTCCAhEwgYoGCCsGAQUFBwEBBH4wfDAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AudHJ1 c3QudGVsaWFzb25lcmEuY29tMEsGCCsGAQUFBzAChj9odHRwOi8vcmVwb3NpdG9yeS50cnVz dC50ZWxpYXNvbmVyYS5jb20vdGVsaWFzb25lcmFyb290Y2F2MS5jZXIwEgYDVR0TAQH/BAgw BgEB/wIBADBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEBAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzAOBgNVHQ8BAf8EBAMC AQYwgcYGA1UdHwSBvjCBuzBAoD6gPIY6aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJh LmNvbS90ZWxpYXNvbmVyYXJvb3RjYXYxLmNybDB3oHWgc4ZxbGRhcDovL2NybC0xLnRydXN0 LnRlbGlhc29uZXJhLmNvbS9jbj1UZWxpYVNvbmVyYSUyMFJvb3QlMjBDQSUyMHYxLG89VGVs aWFTb25lcmE/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDtiaW5hcnkwHQYDVR0OBBYEFJ4Z /+UNOv4AlxU/afHcWjyqDJSDMB8GA1UdIwQYMBaAFPCPWTgAs/WPmpYM1ev6e6oX6BMSMA0G CSqGSIb3DQEBCwUAA4ICAQB5wuZFNXR5ko9cu7PcpIyH8xaoGfpimP2GTg7qVuL92D/idIlj pqMm93WC9mgL/Uy6DExoF8xSLurLaiajoU+VG6ZWg0F7P1AXARNt0RpWI5SphxBQYM2751S8 vC/22k8Vi+qpQVIREqQPVXCIEH7U6eCY9gEVzdq9l1yPoI8n0D2a8V6GCv0RVkmIpa16rNYD tTw4j3Ha56/Ua33C3qeZh1dIfkaU2h4CGHd2Em3v5LLMsEh8dqUeG9yIcCU+8RUgDahNxWMe MGxzrhwk8WBV6xeoQp20p7cSHbSbyHJURC1n+nVrgdh8hbw6WOgFhNA5tCPDZ0oSF+uHfj+b ioZE3AlYdcEqHJA9A9sO58F4/Qg/yp9oYuT0ZpKb4hmzeqDXvk5KRFNfHlhTt35i+qmas9wB 11MXbYd5WwqEhZH6HWO5H7XKJP7olxmEC0W3OKlpKafq1iPsBN5ycRfUrXFss0Ax6vpCq0XA 3LYePpQ44hOU+qrkR1M0a7Eo3++3TpP4cV+FZiO4aZYZ3yZftSRHwWpGiDBdWOdTKR2GJi7Z z/OxacrmwmM1Z+WcigldbG8f3IMnOLK4X0uXjhVeAHrhuttQuM8i+4TNXgsZbmfEKNDQIQPO /lbacsGHWFB/U2y6SXVEkZs2xIciRA0iZNTv7mbIL8SZmf5wpbjDCYHiCjGCAzgwggM0AgEB MFowRzELMAkGA1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJhMSIwIAYDVQQDDBlUZWxp YVNvbmVyYSBDbGFzcyAyIENBIHYyAg8BaKlzCTJTye3phLaz/cIwDQYJYIZIAWUDBAIBBQCg ggGvMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE5MDgxNjEz MDc1OVowLwYJKoZIhvcNAQkEMSIEIBwHVbtwHnD28vYDe26E0xwTawah7SuHMXNI407VGBHI MGkGCSsGAQQBgjcQBDFcMFowRzELMAkGA1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJh MSIwIAYDVQQDDBlUZWxpYVNvbmVyYSBDbGFzcyAyIENBIHYyAg8BaKlzCTJTye3phLaz/cIw awYLKoZIhvcNAQkQAgsxXKBaMEcxCzAJBgNVBAYTAlNFMRQwEgYDVQQKDAtUZWxpYVNvbmVy YTEiMCAGA1UEAwwZVGVsaWFTb25lcmEgQ2xhc3MgMiBDQSB2MgIPAWipcwkyU8nt6YS2s/3C MGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0D BzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwIC ASgwDQYJKoZIhvcNAQEBBQAEggEAB/WfXvZdZwO0JqDJtQSCnW7fmHlgBCK8o8PMisyze9+f QJZchAMeCs797qh+cf379eaGc2bsY6ua+BamwNNdFKL7Wn07rmbOF7rPhrpRSTnfTTV6Yad8 Lc3XUeKT5+kInnKs+ki/PhePt2R0QodHYFWjMUd1bd7fhaqbW4wa+S7d+jbEWFnwwvPT6LWe O+6+TdymwV+eEDGqTT6H5rRNs3M0Oeq9ypzPfiY1cHW36Rs3xmQK1bAm78nBGhXFZR8wp3DK f1jG8Nv3zzJ2i+5rREAfNqJeXtZFfUb/6i92Oe+esbkcrthjElctvvdNuSvbpzHzLTQa7f04 dYZBtsrlFwAAAAAAAA== --------------ms080703040406030608020007-- From nobody Fri Aug 16 15:12:04 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 448DA1200C5 for ; Fri, 16 Aug 2019 15:12:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tfIn9R9USSYw for ; Fri, 16 Aug 2019 15:12:00 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D81A2120018 for ; Fri, 16 Aug 2019 15:11:59 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Fri, 16 Aug 2019 15:11:33 -0700 From: Jim Schaad To: 'cose' References: <231B99C3-B47B-4601-9F50-A232A9E63755@seantek.com> <00f301d5547d$38404940$a8c0dbc0$@augustcellars.com> In-Reply-To: <00f301d5547d$38404940$a8c0dbc0$@augustcellars.com> Date: Fri, 16 Aug 2019 15:11:31 -0700 Message-ID: <010301d5547f$90140ab0$b03c2010$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0104_01D55444.E3B5CEF0" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQF7qsVUgHcNFXfXW9ZfYps8Cd7BYgJEErfmp5+I6/A= Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: [COSE] FW: draft-ietf-cose-x509 typos and technical points X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Aug 2019 22:12:02 -0000 ------=_NextPart_000_0104_01D55444.E3B5CEF0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Forgot to add the mailing list like I was going to. =20 From: Jim Schaad =20 Sent: Friday, August 16, 2019 2:55 PM To: 'Sean Leonard' ; draft-ietf-cose-x509@ietf.org Subject: RE: draft-ietf-cose-x509 typos and technical points =20 =20 =20 From: Sean Leonard > = Sent: Saturday, August 10, 2019 12:28 PM To: draft-ietf-cose-x509@ietf.org = Subject: draft-ietf-cose-x509 typos and technical points =20 Hello: =20 I found the following typos in draft-ietf-cose-x509: =20 * If multiple certificates are conveyed, a CBOR array of bstrs is used. Each certificate being in it's own slot. =20 =20 Should be: =20 * If multiple certificates are conveyed, a CBOR array of bstrs is used, = with each certificate being in its own bstr. =20 =20 [JLS] FIxed =20 =20 The x5u header attribute description discusses =E2=80=9CURL=E2=80=9D but = the IETF parlance is =E2=80=9CURI=E2=80=9D. Please sub = =E2=80=9CURI=E2=80=9D instead of URL as appropriate. =20 =20 [JLS] I am still a bit old fashion on this. In part because the use of = IRI is so fraught. Done. =20 application/pem-certificate-chain is not an appropriate media type to = use for PKIX certificates. If it is in PKIX textual format (RFC 7468), = text/plain needs to be acceptable. You are asking a parser to parse = through plain text. =20 [JLS] I was never really sold on doing this, the question is how often = would it ever be done in real life today. For now I am just going to = delete this unless people say that this is frequently used. =20 I would like to see identification by IssuerAndSerialNumber. The reason = is because many certificate databases index certificates by Issuer + = Serial Number, so this lookup will be fast. The serial number is just a = bstr. The issuer is just the DER blob of the issuer field (therefore, a = bstr). It could be a tstr as well with the textual representation of the = issuer field, but I do not know if we want to go there and introduce = LDAP string parsing. =20 [JLS] I am very loathe to include issuer/serial number as an option. = While I understand that many databases are indexed by this pair of = values, I think that just as many of them are also indexed by one or = more instances of a hash function. My problem with using this is that = it is known not to be a unique identifier of a certificate for any = number of reasons. The same problem exists if one uses the SKI = extension to identify a certificate, there may be multiple certificates = with the same value. (Indeed I routinely make this value a fixed = constant for a number of certificates just to make people angry.) When = this was realized for S/MIME, it was a high priority to add the hash of = the certificate to the signed attributes so that this would be fixed. I = am less worried at the moment about dealing with cross certificates as I = don=E2=80=99t believe that this will be an IoT problem, so I did not do = an attribute with a chain of hashes corresponding to the certification = chain. =20 Jim =20 =20 Thanks, =20 Sean ------=_NextPart_000_0104_01D55444.E3B5CEF0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Forgot to add the mailing list like I was going = to.

 

From: Jim Schaad = <ietf@augustcellars.com>
Sent: Friday, August 16, 2019 = 2:55 PM
To: 'Sean Leonard' <dev+ietf@seantek.com>; = draft-ietf-cose-x509@ietf.org
Subject: RE: = draft-ietf-cose-x509 typos and technical = points

 

 

 

From: Sean Leonard <dev+ietf@seantek.com> =
Sent: Saturday, August 10, 2019 12:28 PM
To: draft-ietf-cose-x509@ietf.o= rg
Subject: draft-ietf-cose-x509 typos and technical = points

 

Hello:

 

I = found the following typos in = draft-ietf-cose-x509:

 

      *  If =
multiple certificates are conveyed, a CBOR array of bstrs =
is
         =
used.  Each certificate being in it's own =
slot.

 

 

Should be:

 

* = If multiple certificates are conveyed, a CBOR array of bstrs is used, = with each certificate being in its own bstr.

 

 

[JLS] = FIxed

 

 

The x5u header attribute description discusses = =E2=80=9CURL=E2=80=9D but the IETF parlance is =E2=80=9CURI=E2=80=9D. = Please sub =E2=80=9CURI=E2=80=9D instead of URL as = appropriate.

 

 

[JLS] I am = still a bit old fashion on this.  In part because the use of IRI is = so fraught.  Done.

 

application/pem-certificate-chain is not an = appropriate media type to use for PKIX certificates. If it is in PKIX = textual format (RFC 7468), text/plain needs to be acceptable. You are = asking a parser to parse through plain text.

 

[JLS] I was = never really sold on doing this, the question is how often would it ever = be done in real life today.  For now I am just going to delete this = unless people say that this is frequently = used.

 

I = would like to see identification by IssuerAndSerialNumber. The reason is = because many certificate databases index certificates by Issuer + Serial = Number, so this lookup will be fast. The serial number is just a bstr. = The issuer is just the DER blob of the issuer field (therefore, a bstr). = It could be a tstr as well with the textual representation of the issuer = field, but I do not know if we want to go there and introduce LDAP = string parsing.

 

[JLS]  = I am very loathe to include issuer/serial number as an option.  = While I understand that many databases are indexed by this pair of = values, I think that just as many of them are also indexed by one or = more instances of a hash function.  My problem with using this is = that it is known not to be a unique identifier of a certificate for any = number of reasons.  The same problem exists if one uses the SKI = extension to identify a certificate, there may be multiple certificates = with the same value.  (Indeed I routinely make this value a fixed = constant for a number of certificates just to make people angry.)  = When this was realized for S/MIME, it was a high priority to add the = hash of the certificate to the signed attributes so that this would be = fixed.  I am less worried at the moment about dealing with cross = certificates as I don=E2=80=99t believe that this will be an IoT = problem, so I did not do an attribute with a chain of hashes = corresponding to the certification chain.

 

Jim

 

 

Thanks,

 

Sean

------=_NextPart_000_0104_01D55444.E3B5CEF0-- From nobody Fri Aug 16 17:07:30 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A4C71200DE for ; Fri, 16 Aug 2019 17:07:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nhwKNaxemPie for ; Fri, 16 Aug 2019 17:07:26 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 75FDE120113 for ; Fri, 16 Aug 2019 17:07:25 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Fri, 16 Aug 2019 17:07:18 -0700 From: Jim Schaad To: 'Ludwig Seitz' , References: <0cc04acc-bbc8-92f6-f9d5-50d058689dea@ri.se> In-Reply-To: <0cc04acc-bbc8-92f6-f9d5-50d058689dea@ri.se> Date: Fri, 16 Aug 2019 17:07:16 -0700 Message-ID: <011701d5548f$bbfc2c60$33f48520$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQLMBMKYftPfdfZKlJzXdvvwAnaYx6UQ8d1Q Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] Review of draft-ietf-cose-rfc8152bis-struct-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Aug 2019 00:07:28 -0000 -----Original Message----- From: Ludwig Seitz =20 Sent: Friday, August 16, 2019 6:06 AM To: cose@ietf.org; Jim Schaad Subject: Review of draft-ietf-cose-rfc8152bis-struct-03 Hello WG, Jim, here is my review of draft-ietf-cose-rfc8152bis-struct-03. Note that it=20 consists mostly of nits. Regards, Ludwig Nit: Section 1: " o The procedures used to compute build the inputs to the cryptographic functions required for each of the structures. " either "compute" or "build", but both sounds wrong to me. [JLS] Me too. - fixed =3D=3D Nit: section 1: "Applications may additionally want to defined additional data fields as part of the stucture." should be "... want to define ... structure" [JLS] Fixed =3D=3D Nit: Section 1.2 "standalong" should be "standalone" [JLS] Already fixed. =3D=3D Nit: Section 1.4 "Since that time CBOR Data Definition Language (CDDL) [I-D.ietf-cbor-cddl] has been published as an RFC." This (and other places in the draft) should refer to RFC 8610 instead of = the I-D. [JLS] Already fixed, but fixed it in the algs draft as well. =3D=3D Nit: Section 1.6 "Authenticated Encryption with Authenticated Data (AEAD) [RFC5116]" RFC 5116 expands AEAD to 'Authenticated Encryption with Associated Data' [JLS] Fixed here and in the algs draft. =3D=3D Nit: Section 3 "The structure of COSE has been designed to have two buckets ..." and then after the second paragraph: "Two buckets are provided for each layer" This essentially repeats the same information, and feels unnecessary. Perhaps: "The two buckets provided for each layer are:" [JLS] I looked at this and trimmed it down even more to "The two buckets = are:" =3D=3D Section 3 "empty_or_serialized_map =3D bstr .cbor header_map / bstr .size 0" This CDDL uses the operators '.cbor' and '.size', which are not defined=20 in section 1.4 although the text in section 1.4 makes it appear such as=20 if it was presenting all the CDDL operators that are used in this = document. I suggest to provide a short definition of these operators in section = 1.4 [JLS] I agree, I should have done then when Carsten suggested using them = originally. =3D=3D Section 3.1 "Parameters defined in this document do not need to be included as they should be understood by all implementations." I wonder if this 'should' should be a MUST? [JLS] No I don't think so. As an example, many implementations in the = IoT world are going understand only one of IV and PartialIV. There is = no real reason for them to understand both if they are only using OSCORE = as an example. (An OSCORE implementation would not need to understand = any of these headers.) Specific applications can be designed so that = this would not be true. =3D=3D Nit: Section 3.1 "Partial IV: [...] The IV can be placed in the unprotected header ..." This should read "The Partial IV can be placed in the ..." [JLS] Fixed =3D=3D Section 3.1 "The message IV is generated by the following steps: 1. Left-pad the Partial IV with zeros to the length of IV. 2. XOR the padded Partial IV with the context IV. " There seems to be a part missing here, since "context IV" is not=20 mentioned anywhere else in this document. [JLS] Fixed - I re-wrote the second sentence to define both the context = and partial IV values. =3D=3D Nit: 4.3 "these fields use a TLV structure so they can be concatenated without any problems." This is the first use of the abbreviation TLV, so it should be expanded. [JLS] This is not required as it is on the RFC Editor list of well = known abbreviations. = https://www.rfc-editor.org/materials/abbrev.expansion.txt =3D=3D Nit: 4.4 " 4. Place the resulting signature value in the 'signature' field of the array." Although it is clear from the context, one might whish to specify which=20 array to avoid confusion. [JLS] It is a bit problematical to say which array it is going into = because this is one of three different arrays. However, it would go = into a non-array for CounterSignature0. Hmmmmmm. =3D=3D Nits: Section 5. "That is the countersignature makes a statement about the existance of a signature and" Should be "existence" (in several places). AND " as oppose to attesting" should be "as opposed to attesting" AND "A tagged COSE_Countersign steruture is identified byt the CBOR tag = TBD0." should be "structure" and "by" [JLS] FIxed =3D=3D Nit: 5.2 "The object was to keep the countersignature as small as possible ..." should be "The objective ..." [JLS] Fixed =3D=3D Nit: Section 15 "An example of a profile can be found in [I-D.ietf-core-object-security] where a profiles was developed for carrying content in combination with CoAP headers." "profiles" should be "profile" or the whole sentence rephrased to avoid=20 the second occurrence of 'profile*' [JLS] Fixed =3D=3D Nit Section 18. "... at the time of posting of this Internet-Draft" This sentence will be wrong as soon as the RFC is published. [JLS] And is academic since the section is to be removed prior to = publish as an RFC. =3D=3D Appendix A page 59 "In many cases, applications that make the algorithm identifier implicit will also want to make the context identifier implicit for the same reason." 'context identifier' is not defined as a concept anywhere. Perhaps it=20 would be good to elaborate on what is meant to eliminate possible confusion with=20 e.g. the 'context' used in 13.5. or 7.3. or 6.3. [JLS] I put in a reference to 'key context' in the terminology section = so it is now defined (albeit indirectly). =3D=3D Note: I did not check the correctness of the examples in Appendix C. [JLS] You get the same answer as Matt - these have not changed and were = auto-generated for RFC 8152. They are also in the examples project on = github. Everything is in a pull request = https://github.com/cose-wg/cose-rfc8152bis/pull/13 along with the = changes from Matt's review. Jim --=20 Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 From nobody Sun Aug 18 10:40:15 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 52C7A120047; Sun, 18 Aug 2019 10:40:14 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.100.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <156615001417.3752.7265224991272265260@ietfa.amsl.com> Date: Sun, 18 Aug 2019 10:40:14 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-rfc8152bis-struct-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Aug 2019 17:40:14 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Structures and Process Author : Jim Schaad Filename : draft-ietf-cose-rfc8152bis-struct-04.txt Pages : 83 Date : 2019-08-18 Abstract: Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. This specification additionally describes how to represent cryptographic keys using CBOR. This document along with [I-D.ietf-cose-rfc8152bis-algs] obsoletes RFC8152. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-rfc8152bis-struct/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-struct-04 https://datatracker.ietf.org/doc/html/draft-ietf-cose-rfc8152bis-struct-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-rfc8152bis-struct-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Aug 18 10:52:05 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 735391200B6; Sun, 18 Aug 2019 10:52:03 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.100.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <156615072339.3787.10968503132986942300@ietfa.amsl.com> Date: Sun, 18 Aug 2019 10:52:03 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-rfc8152bis-struct-05.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Aug 2019 17:52:04 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Structures and Process Author : Jim Schaad Filename : draft-ietf-cose-rfc8152bis-struct-05.txt Pages : 86 Date : 2019-08-18 Abstract: Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. This specification additionally describes how to represent cryptographic keys using CBOR. This document along with [I-D.ietf-cose-rfc8152bis-algs] obsoletes RFC8152. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-rfc8152bis-struct/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-struct-05 https://datatracker.ietf.org/doc/html/draft-ietf-cose-rfc8152bis-struct-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-rfc8152bis-struct-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Aug 18 11:11:33 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15C1412013C for ; Sun, 18 Aug 2019 11:11:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pfEdY8rvggwg for ; Sun, 18 Aug 2019 11:11:29 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0229A120133 for ; Sun, 18 Aug 2019 11:11:28 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Sun, 18 Aug 2019 11:11:24 -0700 From: Jim Schaad To: References: <156615072361.3787.17767043249686909354.idtracker@ietfa.amsl.com> In-Reply-To: <156615072361.3787.17767043249686909354.idtracker@ietfa.amsl.com> Date: Sun, 18 Aug 2019 11:11:22 -0700 Message-ID: <015f01d555f0$58cc6580$0a653080$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQD/46vMA/iaRqxRMUVwCGJcxVxDbqisGKpw Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: [COSE] FW: New Version Notification for draft-ietf-cose-rfc8152bis-struct-05.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Aug 2019 18:11:31 -0000 I have just published two versions of this draft. -04 addresses the two reviews that I have gotten so far, and is = published so that people can easily see just those changes -05 moves the vocabulary from xml2rfc v2 to v3. There is a lot of = structural changes and there are some known problems with the current = formatter (for example the use of Section c.2 rather than Appendix C.2) = so these sorts of things should not be reported as errors. With any luck the data tracker will start giving a true HTML version to = look at some time in the near future. Jim -----Original Message----- From: internet-drafts@ietf.org =20 Sent: Sunday, August 18, 2019 10:52 AM To: Jim Schaad Subject: New Version Notification for = draft-ietf-cose-rfc8152bis-struct-05.txt A new version of I-D, draft-ietf-cose-rfc8152bis-struct-05.txt has been successfully submitted by Jim Schaad and posted to the IETF = repository. Name: draft-ietf-cose-rfc8152bis-struct Revision: 05 Title: CBOR Object Signing and Encryption (COSE): Structures and = Process Document date: 2019-08-18 Group: cose Pages: 86 URL: = https://www.ietf.org/internet-drafts/draft-ietf-cose-rfc8152bis-struct-05= .txt Status: = https://datatracker.ietf.org/doc/draft-ietf-cose-rfc8152bis-struct/ Htmlized: = https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-struct-05 Htmlized: = https://datatracker.ietf.org/doc/html/draft-ietf-cose-rfc8152bis-struct Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-rfc8152bis-struct-05 Abstract: Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. This specification additionally describes how to represent cryptographic keys using CBOR. This document along with [I-D.ietf-cose-rfc8152bis-algs] obsoletes RFC8152. = =20 Please note that it may take a couple of minutes from the time of = submission until the htmlized version and diff are available at = tools.ietf.org. The IETF Secretariat From nobody Sun Aug 18 14:36:31 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0453C120110; Sun, 18 Aug 2019 14:36:30 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.100.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <156616418996.3792.13387041040617475855@ietfa.amsl.com> Date: Sun, 18 Aug 2019 14:36:30 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-rfc8152bis-algs-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Aug 2019 21:36:30 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Initial Algorithms Author : Jim Schaad Filename : draft-ietf-cose-rfc8152bis-algs-04.txt Pages : 44 Date : 2019-08-18 Abstract: Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. COSE additionally describes how to represent cryptographic keys using CBOR. In this specification the conventions for the use of a number of cryptographic algorithms with COSE. The details of the structure of COSE are defined in [I-D.ietf-cose-rfc8152bis-struct]. This document along with [I-D.ietf-cose-rfc8152bis-struct] obsoletes RFC8152. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-rfc8152bis-algs/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-algs-04 https://datatracker.ietf.org/doc/html/draft-ietf-cose-rfc8152bis-algs-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-rfc8152bis-algs-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Aug 18 14:40:44 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63A6C120110 for ; Sun, 18 Aug 2019 14:40:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 887qS8mjhjrb for ; Sun, 18 Aug 2019 14:40:40 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D9DA120047 for ; Sun, 18 Aug 2019 14:40:40 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Sun, 18 Aug 2019 14:40:33 -0700 From: Jim Schaad To: References: <156616419013.3792.10027224570650836754.idtracker@ietfa.amsl.com> In-Reply-To: <156616419013.3792.10027224570650836754.idtracker@ietfa.amsl.com> Date: Sun, 18 Aug 2019 14:40:31 -0700 Message-ID: <017e01d5560d$912a4dd0$b37ee970$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQHuMUTZqKQLi3QXLfH9KZqGOpsBkabPuGdw Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: [COSE] FW: New Version Notification for draft-ietf-cose-rfc8152bis-algs-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Aug 2019 21:40:42 -0000 This drop is a result of=20 1) Changes that flowed over from the structure document reviews 2) A switch from the v2 to the v3 xml2rfc vocabulary. Jim -----Original Message----- From: internet-drafts@ietf.org =20 Sent: Sunday, August 18, 2019 2:37 PM To: Jim Schaad Subject: New Version Notification for = draft-ietf-cose-rfc8152bis-algs-04.txt A new version of I-D, draft-ietf-cose-rfc8152bis-algs-04.txt has been successfully submitted by Jim Schaad and posted to the IETF = repository. Name: draft-ietf-cose-rfc8152bis-algs Revision: 04 Title: CBOR Object Signing and Encryption (COSE): Initial Algorithms Document date: 2019-08-18 Group: cose Pages: 44 URL: = https://www.ietf.org/internet-drafts/draft-ietf-cose-rfc8152bis-algs-04.t= xt Status: = https://datatracker.ietf.org/doc/draft-ietf-cose-rfc8152bis-algs/ Htmlized: = https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-algs-04 Htmlized: = https://datatracker.ietf.org/doc/html/draft-ietf-cose-rfc8152bis-algs Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-rfc8152bis-algs-04 Abstract: Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. COSE additionally describes how to represent cryptographic keys using CBOR. In this specification the conventions for the use of a number of cryptographic algorithms with COSE. The details of the structure of COSE are defined in [I-D.ietf-cose-rfc8152bis-struct]. This document along with [I-D.ietf-cose-rfc8152bis-struct] obsoletes RFC8152. = =20 Please note that it may take a couple of minutes from the time of = submission until the htmlized version and diff are available at = tools.ietf.org. The IETF Secretariat From nobody Sun Aug 18 18:16:44 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C66C012013B; Sun, 18 Aug 2019 18:16:42 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.100.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <156617740273.3654.15233138318859123200@ietfa.amsl.com> Date: Sun, 18 Aug 2019 18:16:42 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-x509-03.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Aug 2019 01:16:43 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Headers for carrying and referencing X.509 certificates Author : Jim Schaad Filename : draft-ietf-cose-x509-03.txt Pages : 9 Date : 2019-08-18 Abstract: The CBOR Signing And Encrypted Message (COSE) structure uses references to keys in general. For some algorithms, additional properties are defined which carry parts of keys as needed. The COSE Key structure is used for transporting keys outside of COSE messages. This document extends the way that keys can be identified and transported by providing attributes that refer to or contain X.509 certificates. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-x509-03 https://datatracker.ietf.org/doc/html/draft-ietf-cose-x509-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-x509-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Aug 18 18:20:22 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE9421201EA for ; Sun, 18 Aug 2019 18:20:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UfbxK9ReTwiA for ; Sun, 18 Aug 2019 18:20:19 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BFDAC120052 for ; Sun, 18 Aug 2019 18:20:18 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Sun, 18 Aug 2019 18:20:12 -0700 From: Jim Schaad To: References: <156617740291.3654.4375240126563431928.idtracker@ietfa.amsl.com> In-Reply-To: <156617740291.3654.4375240126563431928.idtracker@ietfa.amsl.com> Date: Sun, 18 Aug 2019 18:20:11 -0700 Message-ID: <019201d5562c$4042ff60$c0c8fe20$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQJJ2hcsqY3l9Rlo27h39c10WCLGT6YYpCcw Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: [COSE] FW: New Version Notification for draft-ietf-cose-x509-03.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Aug 2019 01:20:21 -0000 This version has the following changes: 1. Updates from Sean's mail 2. Update from v2 to v3 xml2rfc vocabulary. Jim -----Original Message----- From: internet-drafts@ietf.org =20 Sent: Sunday, August 18, 2019 6:17 PM To: Jim Schaad Subject: New Version Notification for draft-ietf-cose-x509-03.txt A new version of I-D, draft-ietf-cose-x509-03.txt has been successfully = submitted by Jim Schaad and posted to the IETF repository. Name: draft-ietf-cose-x509 Revision: 03 Title: CBOR Object Signing and Encryption (COSE): Headers for carrying = and referencing X.509 certificates Document date: 2019-08-18 Group: cose Pages: 9 URL: = https://www.ietf.org/internet-drafts/draft-ietf-cose-x509-03.txt Status: https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ Htmlized: https://tools.ietf.org/html/draft-ietf-cose-x509-03 Htmlized: = https://datatracker.ietf.org/doc/html/draft-ietf-cose-x509 Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-x509-03 Abstract: The CBOR Signing And Encrypted Message (COSE) structure uses references to keys in general. For some algorithms, additional properties are defined which carry parts of keys as needed. The COSE Key structure is used for transporting keys outside of COSE messages. This document extends the way that keys can be identified and transported by providing attributes that refer to or contain X.509 certificates. = =20 Please note that it may take a couple of minutes from the time of = submission until the htmlized version and diff are available at = tools.ietf.org. The IETF Secretariat From nobody Mon Aug 19 04:04:16 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3C111200EC for ; Mon, 19 Aug 2019 04:04:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=risecloud.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bu53PVswLQS5 for ; Mon, 19 Aug 2019 04:04:12 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130070.outbound.protection.outlook.com [40.107.13.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70417120103 for ; Mon, 19 Aug 2019 04:04:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=A4Vi7XYGCtILXkhXKCGsr/CMjMTbZlDso48qg91p/P6VlVkLJKrZ1t9Wm8i021dHRHpyzAnv/UI6xd+qigwLZoeWmArRoxMaNQwQLkK8kj1NP4l43wAcuriy30KjIm7YQvUM+ZtK5dUc3MnC+PCGiadGAAdLROeXYlRs5FygL/4iJ6aQyrMhot89jxTMTP8/r7LEvIEJNOm4+xlP3A+2P6DyFhDM6GOwBMKFDXFBPgAaFsNa1xmWcYzAxwJqtLkEumscsgHMxFYs8IYdcfA0tY27+z+80ztypcB3LeQBj9e8x3G2SEBf4YXShE+083rPbmtDfe/fYClvW7IesVcAyg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TGcgzd1SJtvATVRIkfMPeB866Cke0pO+VUkReqaZhe0=; b=fV2yRrQfG2dR6DqhAH0b5B6HYFtGeJlDe8FFUA5TFL4kBBUJI0UxTeId6Iicg2DK/BzDeYG4mo3hMwq9N/yhRH5fxDe1jwL6QCrwNLhF/f0v1hsRd68s2QnH75e19QFC+KLD/1V63cmiFe0kVDPs06Vq4FNZpM+IAou2Vrsedkm6om7U4X7V7EZ3WPwlvpbIQ0yTd7VqDjmDY6N8yJoQ4ZnWOhze3jE3lESUDWd1lVdguUUkIPHpwpGxtkMb3oul0JDtVUpeYUj2269W+SfCse87SYEogzTBygVWxfvc3P32ixlix0ke8fyfhocsSMfx6Gdnj1a3uhF6ZPvGPBVgFQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 194.218.146.197) smtp.rcpttodomain=augustcellars.com smtp.mailfrom=ri.se; dmarc=pass (p=none sp=none pct=100) action=none header.from=ri.se; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=RISEcloud.onmicrosoft.com; s=selector2-RISEcloud-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TGcgzd1SJtvATVRIkfMPeB866Cke0pO+VUkReqaZhe0=; b=TfeXNYpNMYKXJpF20TFXKeWAT8DtESjGpX09n6PMWH5L/pKrSYoSR055v1MR/WSi2CFOmQmGfFkAxvgQ2+grzyjKiRb5uy0lwCCkYRGB7ft/2zsMTrxuh/7NQKEbLWde1OHeJYtp2mVz6MkQBhXR0ZatOzUU1JW3LnEEV/Wc+DA= Received: from AM5P189CA0013.EURP189.PROD.OUTLOOK.COM (2603:10a6:206:15::26) by VI1P18901MB0768.EURP189.PROD.OUTLOOK.COM (2603:10a6:800:11e::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2178.16; Mon, 19 Aug 2019 11:04:08 +0000 Received: from AM5EUR02FT059.eop-EUR02.prod.protection.outlook.com (2a01:111:f400:7e1e::205) by AM5P189CA0013.outlook.office365.com (2603:10a6:206:15::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2178.16 via Frontend Transport; Mon, 19 Aug 2019 11:04:08 +0000 Authentication-Results: spf=pass (sender IP is 194.218.146.197) smtp.mailfrom=ri.se; augustcellars.com; dkim=none (message not signed) header.d=none;augustcellars.com; dmarc=pass action=none header.from=ri.se; Received-SPF: Pass (protection.outlook.com: domain of ri.se designates 194.218.146.197 as permitted sender) receiver=protection.outlook.com; client-ip=194.218.146.197; helo=mail.ri.se; Received: from mail.ri.se (194.218.146.197) by AM5EUR02FT059.mail.protection.outlook.com (10.152.9.204) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.20.2178.16 via Frontend Transport; Mon, 19 Aug 2019 11:04:07 +0000 Received: from [10.112.134.122] (10.100.0.158) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Mon, 19 Aug 2019 13:04:07 +0200 To: , Jim Schaad From: Ludwig Seitz Message-ID: <94fb6c83-63cb-2714-95c7-86f8c30f7812@ri.se> Date: Mon, 19 Aug 2019 13:03:55 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030805050801060208090505" X-Originating-IP: [10.100.0.158] X-ClientProxiedBy: sp-mail-3.sp.se (10.100.0.163) To sp-mail-2.sp.se (10.100.0.162) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:194.218.146.197; IPV:NLI; CTRY:SE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(136003)(39850400004)(376002)(346002)(396003)(2980300002)(189003)(199004)(5024004)(14444005)(70206006)(16526019)(70586007)(26005)(186003)(386003)(40036005)(31686004)(36756003)(64126003)(235185007)(31696002)(356004)(22756006)(568964002)(2906002)(22746008)(71190400001)(6116002)(3846002)(5660300002)(486006)(5000100001)(86362001)(316002)(6666004)(65956001)(33964004)(44832011)(58126008)(8676002)(81166006)(65826007)(2616005)(16586007)(126002)(476003)(110136005)(81156014)(305945005)(53936002)(336012)(478600001)(8936002)(106002)(7736002)(65806001)(16576012); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1P18901MB0768; H:mail.ri.se; FPR:; SPF:Pass; LANG:en; PTR:InfoDomainNonexistent; MX:1; A:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 1a56233a-8ed1-4f1b-25b3-08d72494f500 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(4709080)(1401327)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:VI1P18901MB0768; X-MS-TrafficTypeDiagnostic: VI1P18901MB0768: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:7691; X-Forefront-PRVS: 0134AD334F X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: 75BGlp/WQ/TSzEd8ol+An/k0BBQhO3U417Jt/rZdgnzDNCQop/1rv8e+BZroyQpZAM9hdIghpt16/Ocu4GABpS3HhQmaw8iCW0IaptRgjYozgBsii7a1eZ/VQYWQyKhvC7iipOSa9ZbkbuoSzgYzIfzHKXlSuqjYNztDIHslrdBEnB3zmuFGB0TXqCZYUbcqOZIqggBbFeLWWA2KqpIttAO7ooqj0bxt2ATRhFseWZeczRL3YEExvJKCQ153+jVdFxOgaUZDGTJ8qkObZCerx+O9w5JhMjwzy33MfN6BVoCWjZHZ406KnMzVxaLAP5uRTWqnVRhN/w4N2OsZ4JlABladPjKmVZDaMRSYKgzMWqNMzA83EVUmrMTKy7FZ/0LowYCboJCKa/RRikN5c8SsOrMq8ywrO4W4fci6Fa84zOQ= X-OriginatorOrg: ri.se X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Aug 2019 11:04:07.9270 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 1a56233a-8ed1-4f1b-25b3-08d72494f500 X-MS-Exchange-CrossTenant-Id: 5a9809cf-0bcb-413a-838a-09ecc40cc9e8 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5a9809cf-0bcb-413a-838a-09ecc40cc9e8; Ip=[194.218.146.197]; Helo=[mail.ri.se] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1P18901MB0768 Archived-At: Subject: [COSE] Review of draft-ietf-cose-rc8152bis-algs-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Aug 2019 11:04:15 -0000 --------------ms030805050801060208090505 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable Hello group, Jim here is my review of draft-ietf-cose-rfc8152bis-algs-03, omitting the=20 parts that Jim fixed in response to my review of the other draft. I did only find two nits in that document. /Ludwig =3D=3D Nit: Section 3. "Section 10 of [I-D.ietf-cose-rfc8152bis-struct] [I-D.ietf-cose-rfc8152bis-struct] contains a generic description of MAC algorithms." The reference seems to be duplicated here. =3D=3D Nit: 3.1 "For use in constrained environments, we define one HMAC algorithms that = is truncated." should be "algorithm" since it is only one. --=20 Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 --------------ms030805050801060208090505 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DT0wggYWMIID/qADAgECAg8BaKlzCTJTye3phLaz/cIwDQYJKoZIhvcNAQELBQAwRzELMAkG A1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJhMSIwIAYDVQQDDBlUZWxpYVNvbmVyYSBD bGFzcyAyIENBIHYyMB4XDTE5MDIwMTE0MjUxNVoXDTIxMDIwMTE0MjUxNFowgYsxCzAJBgNV BAYTAlNFMS4wLAYDVQQKDCVSSVNFIFJlc2VhcmNoIEluc3RpdHV0ZXMgb2YgU3dlZGVuIEFC MRUwEwYDVQQDDAxMdWR3aWcgU2VpdHoxEjAQBgNVBAUTCUx1ZHdpZ1NlaTEhMB8GCSqGSIb3 DQEJARYSbHVkd2lnLnNlaXR6QHJpLnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJNmRfcsto5I/yXrBIi9QroZtfAMttc1Eznv5iPCK++eFUArODhITO7k9rtlQX5D8vYF v4vzZex58YWZhvGMzDj9FdpD/PHKOxL/frlrreChuissPWo5M88DmL3V1oyGzvgeRqaafpEi 0/2+gezMFlABm/BXj3/0Fiw5Sxub7essE27EtDK05nAbUB69kfLHBEytbTAuuSb11hC1dpTf itMZkzSFwsBCyPtIv3GRt9xgnOPK4RRpHidv1GLYXNQQ7xEGhFy4qbZ2NSfM+56SSRswvW9P 5n81ZmZ4FWkiJouUIYtZ2ifncBJL4DC2chjsywDEz5No7kYrGxc5oOm1YQIDAQABo4IBuDCC AbQwHwYDVR0jBBgwFoAUnhn/5Q06/gCXFT9p8dxaPKoMlIMwHQYDVR0OBBYEFKZHZ8MZNNP5 tXMPjeFiw01pUWbtMA4GA1UdDwEB/wQEAwIFoDBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEB DDA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEu Y29tL0NQUzAdBgNVHREEFjAUgRJsdWR3aWcuc2VpdHpAcmkuc2UwTQYDVR0fBEYwRDBCoECg PoY8aHR0cDovL2NybC0yLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYWNsYXNz MmNhdjIuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjB+BggrBgEFBQcBAQRy MHAwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnRydXN0LnRlbGlhLmNvbTBFBggrBgEFBQcw AoY5aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYWNsYXNzMmNh djIuY2VyMA0GCSqGSIb3DQEBCwUAA4ICAQCk0GOalOCjEJObuBeMg0QREtBP/2ona16npn+T v5R3Vjk5UsQdOaOosgVjADX68C83dyfPiWR4UfNJoTBcM8JLpEXIm+xC4BiDPTPHYvgkhgXt 9VWCRWXOMfT/UPXjiGsbPuNWja1LQzF5KOmM826kHVZItHuDY6kJLE4OZ+apFvVKtSLQJJLA 4MlDVwp5+XsZi4cftcX5HdgLdChodUPKq3XVfALfXM/p81XEFBTYOHNplr3cQytDQjsnCZnS Ic4UpsxrArNxDO9+AKu/s1Fbq494AhHj4oHcg4DIjhHUzbPCLP19Gqp4dflr/V7Ulg3d+4Zh bmSAn1cffrzvvkjVrqMgQOoHQTl2QyO9n/oJ/9CSYRmhFsQMPun9LM/p5l58dTZp53B3LgA6 FFrxnntlZnTPh3bvsMJvUQ+AoiXyQwnkdxUrhoM+gUz36t3JSA8g48h7BhPsnwQ/YrarAhJ8 ifuzykTQmDseWLjJKyFflddy/azAlPQjgSMMWOZCo2s+l+WwPISf33nls2Aec/vvG5auYHS6 pwWuVKuwZTPgJfHanZTNpBM5y0jVBz6tr8AHZypnCONgyUYA4uec3v5oWz4FvLEnlKnMGoK3 OeFGvfHG0tbP25HbdN3AJYP0EUo56wfkBOYsnmn4mEYdk2GHkJNfaQRBJljH0T7TOcmcDjCC Bx8wggUHoAMCAQICEGN8C9eFpb8p2mAtfE16cLEwDQYJKoZIhvcNAQELBQAwNzEUMBIGA1UE CgwLVGVsaWFTb25lcmExHzAdBgNVBAMMFlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMTQx MDE2MDgzOTMwWhcNMzIxMDE2MDUwNDAwWjBHMQswCQYDVQQGEwJTRTEUMBIGA1UECgwLVGVs aWFTb25lcmExIjAgBgNVBAMMGVRlbGlhU29uZXJhIENsYXNzIDIgQ0EgdjIwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC0PpW2qcWGnStqfa5DjrUi79Kz2SySUlJ1kiEQ1Pd/ LWbnsEwFYPqOJwAf6ZtEDtQ/9Z1VkVNQ6MkD++keqk7648x0YANgMyiJsWrbd0TKOObtlXdJ pb5qesJ5nOAdVeL3z6lgrkZx+fsUfTV+lLRGRh2+RWzZTjPAvKotY3nAwXCHtwI5v3FKuR10 aJ9+CEOka02KSUzGjcGZwMk2io0DxLELf1gPRvqE9xmn4ioXLqpluozb4Fo9ewydufTLQc3/ I63uPQh8BlLPPIGzWb4iBDq2zbWlbx0KlH/UlUZ7fjzp6N6cAqZ2NnDaCOnnIRfUYeNXFG8/ aiBeFOpEeEpclr5QUwr9HLKL1QiyQtc/wW8acQFoKuGi8myiAch7k7S0rmU5gT05je+OTzWh Oaw7gmDdndYY1mjkPkzpQ+hxyfnwUsAitUq9j0imFOLxKWLH4QNbyuDIMvDyezzJWzMy3XPB LiLSH9CBLVQHRoQ+WW8xD4rnmvQtoGZM72og2iNf4/JCHL1AJYhQtaRjYgm3rhvAP0HhSVAB Z5aHM52ylJHC3JwUyuFm8S9A2ffY9rUTffMLWmDCnX0QAP9bKr6+ACogm4DBUj3ftYodI2TD 6F8+VjSFuCzGDPuCjK+fQ2c3wqziwFl+NgoGI9Vgc6x5+0ocKkiQAIYFaQ3SyGmI6QIDAQAB o4ICFTCCAhEwgYoGCCsGAQUFBwEBBH4wfDAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AudHJ1 c3QudGVsaWFzb25lcmEuY29tMEsGCCsGAQUFBzAChj9odHRwOi8vcmVwb3NpdG9yeS50cnVz dC50ZWxpYXNvbmVyYS5jb20vdGVsaWFzb25lcmFyb290Y2F2MS5jZXIwEgYDVR0TAQH/BAgw BgEB/wIBADBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEBAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzAOBgNVHQ8BAf8EBAMC AQYwgcYGA1UdHwSBvjCBuzBAoD6gPIY6aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJh LmNvbS90ZWxpYXNvbmVyYXJvb3RjYXYxLmNybDB3oHWgc4ZxbGRhcDovL2NybC0xLnRydXN0 LnRlbGlhc29uZXJhLmNvbS9jbj1UZWxpYVNvbmVyYSUyMFJvb3QlMjBDQSUyMHYxLG89VGVs aWFTb25lcmE/Y2VydGlmaWNhdGVyZXZvY2F0aW9ubGlzdDtiaW5hcnkwHQYDVR0OBBYEFJ4Z /+UNOv4AlxU/afHcWjyqDJSDMB8GA1UdIwQYMBaAFPCPWTgAs/WPmpYM1ev6e6oX6BMSMA0G CSqGSIb3DQEBCwUAA4ICAQB5wuZFNXR5ko9cu7PcpIyH8xaoGfpimP2GTg7qVuL92D/idIlj pqMm93WC9mgL/Uy6DExoF8xSLurLaiajoU+VG6ZWg0F7P1AXARNt0RpWI5SphxBQYM2751S8 vC/22k8Vi+qpQVIREqQPVXCIEH7U6eCY9gEVzdq9l1yPoI8n0D2a8V6GCv0RVkmIpa16rNYD tTw4j3Ha56/Ua33C3qeZh1dIfkaU2h4CGHd2Em3v5LLMsEh8dqUeG9yIcCU+8RUgDahNxWMe MGxzrhwk8WBV6xeoQp20p7cSHbSbyHJURC1n+nVrgdh8hbw6WOgFhNA5tCPDZ0oSF+uHfj+b ioZE3AlYdcEqHJA9A9sO58F4/Qg/yp9oYuT0ZpKb4hmzeqDXvk5KRFNfHlhTt35i+qmas9wB 11MXbYd5WwqEhZH6HWO5H7XKJP7olxmEC0W3OKlpKafq1iPsBN5ycRfUrXFss0Ax6vpCq0XA 3LYePpQ44hOU+qrkR1M0a7Eo3++3TpP4cV+FZiO4aZYZ3yZftSRHwWpGiDBdWOdTKR2GJi7Z z/OxacrmwmM1Z+WcigldbG8f3IMnOLK4X0uXjhVeAHrhuttQuM8i+4TNXgsZbmfEKNDQIQPO /lbacsGHWFB/U2y6SXVEkZs2xIciRA0iZNTv7mbIL8SZmf5wpbjDCYHiCjGCAzgwggM0AgEB MFowRzELMAkGA1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJhMSIwIAYDVQQDDBlUZWxp YVNvbmVyYSBDbGFzcyAyIENBIHYyAg8BaKlzCTJTye3phLaz/cIwDQYJYIZIAWUDBAIBBQCg ggGvMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE5MDgxOTEx MDM1NVowLwYJKoZIhvcNAQkEMSIEIHHI2FczMyaUmYWLpnofx/R591HKT2TMdEUhO6jSf/lv MGkGCSsGAQQBgjcQBDFcMFowRzELMAkGA1UEBhMCU0UxFDASBgNVBAoMC1RlbGlhU29uZXJh MSIwIAYDVQQDDBlUZWxpYVNvbmVyYSBDbGFzcyAyIENBIHYyAg8BaKlzCTJTye3phLaz/cIw awYLKoZIhvcNAQkQAgsxXKBaMEcxCzAJBgNVBAYTAlNFMRQwEgYDVQQKDAtUZWxpYVNvbmVy YTEiMCAGA1UEAwwZVGVsaWFTb25lcmEgQ2xhc3MgMiBDQSB2MgIPAWipcwkyU8nt6YS2s/3C MGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0D BzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwIC ASgwDQYJKoZIhvcNAQEBBQAEggEAZmkQpq3ApHu4hnkNcBXqAp7w7aOEL36zjxwJRsp7EWQA UF2AhRGKWK45GjSpLZNo7a+vmsFPbaLqiRAdKNvOiut9612wqERamSldo6AGpqCGSjwZunAY cTI/cCudIPZDk/lLgISf2+2EdjOrwHFPgDC99fyeXBGCPrjMYPTcVofui0Z0mLDNqFtCGD4r hfIlKb7I1F/sf4ZFllGnPpzWEX88ioTEuejDP7zY1+f8v90XQgxAxUd4e2J+bcNAyX1oSsYU BEbt98MeunFQvadOZdio/U23SXGRpJJk8J3vcHXghKokAea1xQ2Onnp6GsbTPUX3UooWo0wu fhoREPOrTAAAAAAAAA== --------------ms030805050801060208090505-- From nobody Mon Aug 19 10:13:26 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C94B212004C for ; Mon, 19 Aug 2019 10:13:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WO9sEeQn3FeK for ; Mon, 19 Aug 2019 10:13:22 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E20BF120043 for ; Mon, 19 Aug 2019 10:13:21 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 19 Aug 2019 10:13:14 -0700 From: Jim Schaad To: 'Ludwig Seitz' , References: <94fb6c83-63cb-2714-95c7-86f8c30f7812@ri.se> In-Reply-To: <94fb6c83-63cb-2714-95c7-86f8c30f7812@ri.se> Date: Mon, 19 Aug 2019 10:13:13 -0700 Message-ID: <01cc01d556b1$63e57580$2bb06080$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQGDLGNqpUe2sbSNLiwFE4ykJ+UrC6enCa8g Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] Review of draft-ietf-cose-rc8152bis-algs-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Aug 2019 17:13:24 -0000 -----Original Message----- From: Ludwig Seitz =20 Sent: Monday, August 19, 2019 4:04 AM To: cose@ietf.org; Jim Schaad Subject: Review of draft-ietf-cose-rc8152bis-algs-03 Hello group, Jim here is my review of draft-ietf-cose-rfc8152bis-algs-03, omitting the=20 parts that Jim fixed in response to my review of the other draft. I did only find two nits in that document. /Ludwig =3D=3D Nit: Section 3. "Section 10 of [I-D.ietf-cose-rfc8152bis-struct] [I-D.ietf-cose-rfc8152bis-struct] contains a generic description of MAC algorithms." The reference seems to be duplicated here. [JLS] I missed this when I tried to be cute about how the reference is = done, I wanted to include both the section and the pointer and it got = clobbered badly. I have fixed this by using the new tag in the = v3 vocabulary which does that right. =3D=3D Nit: 3.1 "For use in constrained environments, we define one HMAC algorithms that = is truncated." should be "algorithm" since it is only one. [JLS] Fixed. --=20 Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 From nobody Tue Aug 20 09:30:00 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7842612082C; Tue, 20 Aug 2019 09:29:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=myidemia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 64pVjGQmv1eU; Tue, 20 Aug 2019 09:29:57 -0700 (PDT) Received: from mx07-0018b601.pphosted.com (mx07-0018b601.pphosted.com [185.132.180.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F1811200EB; Tue, 20 Aug 2019 09:29:57 -0700 (PDT) Received: from pps.filterd (m0136514.ppops.net [127.0.0.1]) by mx08-0018b601.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id x7KGBTKY010031; Tue, 20 Aug 2019 16:29:21 GMT Received: from eur01-he1-obe.outbound.protection.outlook.com (mail-he1eur01lp2052.outbound.protection.outlook.com [104.47.0.52]) by mx08-0018b601.pphosted.com with ESMTP id 2ufwwgadfm-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 20 Aug 2019 16:29:21 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=j//4dIzB0wPX4P6OcM2dgBKRFbWVGHX80VDdGbTA5X5yduElKLYCmnQY+lRsZEnsoMV/PFhiTOpVCncZhFhZA2NAin3isQAp7NRL+fHybsDopjRWf60wWWbtg6PfylKNnkSnH8TcLC8RTmU8ks2fYzzrvAeIGhUVZ7Dn7doEAr4csYzjTeXRyDOzARLt3FDTf69UoYnc3vGZ+8cE/XZ+YB9Hh6x47owfPPx6OJ3TYdeReOUSy7GKDQ5anQF3XM4yN7kiw+eoTxIxeDboXkSElebTOJGpGLFgJfw85JLOtLZcH5M8JqkgFU5ZiclG7+Ja2wzKnLGbFcP5Xm39yTfPmA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=lVJyLjW1F5yc3Z20otg3M2zpKfiigbOfv9szrPp6aPk=; b=iPGCG5mjLL89dxmyJ3gtbjOB7CZNc7SKiO96k//IMXgaGXYyIi/L7ar6PReT2ZFoboQToU7uWefhJ7GsOR5tnts1hORhglBrXYNvXJvkYwoqim1tzr9Vxux7pj4h4w65QswxJMXs4Xg/bjzkKa41/8TaUFSPfkJ6oNZ6B8nzmwTn/WBFFqKIvYOXHdhPsAO5/KxTRSKFJXivsf1IKhr9CUQUZnA06W64qlFZcVFucJKr0ufeBNP4TRwjLAuzO3WDsR1eR0TouCoPAlE0QBCzQSXtKNDNidpvNXa57/Kf7AY9M6c0f6bMsBpfTufMB15Gn8BWX8fZi6mu9RRgn6qHTA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=idemia.com; dmarc=pass action=none header.from=idemia.com; dkim=pass header.d=idemia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=myidemia.onmicrosoft.com; s=selector2-myidemia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=lVJyLjW1F5yc3Z20otg3M2zpKfiigbOfv9szrPp6aPk=; b=kzh44fb+et7nNKOuLz8AVz6DQ0t2nbA0x1ExKunw+X2HVJL2o23xN2Raam4wrGJGruUW3pUOkM932bxTx8yE2dSfUhzd5XrOO4nE5rs9997nnkDvIMT+VYAINO1pxcsGK3nyHYbdnVoOST/PA+hvsrnlF49bcas15rUZEoBkuXo= Received: from VI1P189MB0319.EURP189.PROD.OUTLOOK.COM (10.165.195.140) by VI1P189MB0335.EURP189.PROD.OUTLOOK.COM (10.165.195.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2178.16; Tue, 20 Aug 2019 16:29:18 +0000 Received: from VI1P189MB0319.EURP189.PROD.OUTLOOK.COM ([fe80::dc8:81fa:2b25:907]) by VI1P189MB0319.EURP189.PROD.OUTLOOK.COM ([fe80::dc8:81fa:2b25:907%3]) with mapi id 15.20.2178.018; Tue, 20 Aug 2019 16:29:18 +0000 From: DESPERRIER Jean-Marc To: "iana-prot-param@iana.org" , "ietf@augustcellars.com" CC: "cose-ads@ietf.org" , "cose@ietf.org" Thread-Topic: [COSE] [IANA #1148103] Early Code Point Assignments Thread-Index: AQHVUiXSIokQwC6RnUWaOADD+A3aFKcEQb2Q Date: Tue, 20 Aug 2019 16:29:18 +0000 Message-ID: References: <005001d5461d$149a4c70$3dcee550$@augustcellars.com> In-Reply-To: Accept-Language: fr-FR, en-US Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Enabled=True; MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_SiteId=7694d41c-5504-43d9-9e40-cb254ad755ec; MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Ref=https://api.informationprotection.azure.com/api/7694d41c-5504-43d9-9e40-cb254ad755ec; MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Owner=g578695@mph.morpho.com; MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_SetDate=2019-08-20T18:29:16.6501405+02:00; MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Name=Public; MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Application=Microsoft Azure Information Protection; MSIP_Label_431684b1-a5da-4051-9fb4-5631703e02d5_Extended_MSFT_Method=Automatic; Sensitivity=Public x-originating-ip: [104.129.196.79] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d8b2ac4d-46c5-47f6-6737-08d7258b8ccb x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(1401327)(4534185)(7168020)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:VI1P189MB0335; x-ms-traffictypediagnostic: VI1P189MB0335: x-ms-exchange-purlcount: 4 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 013568035E x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(376002)(366004)(136003)(396003)(39860400002)(346002)(189003)(199004)(54906003)(6436002)(66574012)(3846002)(6116002)(86362001)(2906002)(478600001)(6506007)(14454004)(55236004)(102836004)(26005)(186003)(229853002)(52536014)(99286004)(305945005)(66556008)(66476007)(64756008)(76116006)(14444005)(256004)(66446008)(66066001)(74316002)(71190400001)(71200400001)(7696005)(7736002)(476003)(486006)(446003)(11346002)(9686003)(53936002)(33656002)(6246003)(4326008)(66946007)(316002)(25786009)(76176011)(110136005)(81166006)(55016002)(966005)(6306002)(8936002)(2501003)(81156014)(8676002)(5660300002); DIR:OUT; SFP:1102; SCL:1; SRVR:VI1P189MB0335; H:VI1P189MB0319.EURP189.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: idemia.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: AfnU0D4TayTZlhVT8H+kIRMo3k7ijIfUANc67W00u/ZolAEWhNRy/96vZtZ7pnyLsOZbO0ny/khCsdy3/cW2HVr6CnbcceAcnXHphqUrAAa52Xwz9mhz3+S2jK+lpwDAOXU+fIV+aBy11OcuxMHCxCQDgJ5+SEWUvMZiTmbw4QW1Rm8z5OVl1olvUFC4k6gkKCFV38dM9eGfIfC1tQs0WLRb/euHakBNqTaam3bFEeIfeF2yFsmQl/TKUdGgYUDS9eo9eYziQrHlp8yPLwAJiYTq9qko1Gk+Vls+v15Dhdp3kSlDeiDR3Sv4HSft33bqZYNd5mTrF/LGlY9TSLY1iEisgMSMDFWY7vq0h+DaJca+92AVE/VYhTiQsn2WqGZxDaivheqIYDq8EPPJfrqJME8GZL5ecdxRJn0jpdBhHI0= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: idemia.com X-MS-Exchange-CrossTenant-Network-Message-Id: d8b2ac4d-46c5-47f6-6737-08d7258b8ccb X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Aug 2019 16:29:18.7567 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 7694d41c-5504-43d9-9e40-cb254ad755ec X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: m2CvuDBICBMIQuexYe+MYvxTdU95y9D1p5g7wGaKVpiR0usIjwOJxHzOmzEpZh8vJQcKu8Mok3qYvSDQN1KQcg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1P189MB0335 X-Proofpoint-Virus-Version: vendor=nai engine=6000 definitions=9355 signatures=668684 X-Proofpoint-Spam-Details: rule=outbound_idemia_notspam policy=outbound_idemia score=0 phishscore=0 bulkscore=0 impostorscore=0 malwarescore=0 lowpriorityscore=0 spamscore=0 mlxscore=0 adultscore=0 suspectscore=0 mlxlogscore=999 clxscore=1011 priorityscore=1501 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1906280000 definitions=main-1908200150 Archived-At: Subject: Re: [COSE] [IANA #1148103] Early Code Point Assignments X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Aug 2019 16:30:00 -0000 Hi, I hope you can hear back from the expert about ietf-cose-x509 quickly.=20 Meanwhile in ISO/IEC JTC 1/SC 17/WG 10, for the informal prototype test eve= nt of the current draft of ISO 18013-5 we organized this week-end, we used = the value 33 for x5chain that Jim proposed. Let's hope we don't have to cha= nge it later, and can rapidly reference it in the newer draft. Best regards, Jean-Marc -----Message d'origine----- De=A0: COSE De la part de Sabrina Tanamal via RT Envoy=E9=A0: mercredi 14 ao=FBt 2019 00:24 =C0=A0: ietf@augustcellars.com Cc=A0: cose-ads@ietf.org; cose@ietf.org Objet=A0: [COSE] [IANA #1148103] Early Code Point Assignments Hi Jim,=20 We've made the early allocations for draft-ietf-cose-hash-algs, but we're s= till waiting to hear back from the experts regarding the assignments in dra= ft-ietf-cose-x509. We'll let you know as soon as we hear from them.=20 These early allocations are complete:=20 SHAKE256 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -45 256-bi= t SHAKE [draft-ietf-cose-hash-algs] Yes SHA-512 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -44 SHA-2 5= 12-bit Hash [draft-ietf-cose-hash-algs] Yes SHA-384 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -43 SHA-2 3= 84-bit Hash [draft-ietf-cose-hash-algs] Yes SHAKE128 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -18 128-bi= t SHAKE [draft-ietf-cose-hash-algs] Yes SHA-512/256 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -17 SHA= -2 512-bit Hash truncated to 256-bits [draft-ietf-cose-hash-algs] Yes SHA-256 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -16 SHA-2 2= 56-bit Hash [draft-ietf-cose-hash-algs] Yes SHA-256/64 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -15 SHA-= 2 256-bit Hash truncated to 64-bits [draft-ietf-cose-hash-algs] Filter Only SHA-1 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -14 SHA-1 Has= h [draft-ietf-cose-hash-algs] Filter Only If this document hasn't been approved for publication by July 2020, we'll c= ontact you about approving a one-year renewal. Any further renewals would r= equire IESG approval. Best regards, Sabrina Tanamal Senior IANA Services Specialist On Mon Jul 29 14:52:02 2019, ietf@augustcellars.com wrote: > Following the meeting in Montreal where I asked for the ability to do=20 > early point assignment for documents in the working group and got permiss= ion, > these are the code points that I am assigning. I am only assigning poin= ts > that I know people are asking for now, some points will be setup later. >=20 > For draft-ietf-cose-x509 (https://urldefense.com/v3/__https://tools.ietf.= org/html/draft-ietf-cose-x509__;!U11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2nX3= wx4mddkqAX-AXr5yijD3btkT8QN5cqdYkQdceWs-22$ ): >=20 > Table COSE Header Parameters > https://urldefense.com/v3/__https://www.iana.org/assignments/cose/cose > .xhtml*header-parameters__;Iw!U11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2n > X3wx4mddkqAX-AXr5yijD3btkT8QN5cqdYkQdWsgiY8C$ >=20 > Name Value > x5bag 32 > x5chain 33 > x5t 34 > x5u 35 >=20 > For draft-ietf-cose-hash-algs > (https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-cose-= hash-algs__;!U11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2nX3wx4mddkqAX-AXr5yijD3= btkT8QN5cqdYkQdTBumviG$ ): >=20 > Table COSE Algorithms > https://urldefense.com/v3/__https://www.iana.org/assignments/cose/cose > .xhtml*algorithms__;Iw!U11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2nX3wx4md > dkqAX-AXr5yijD3btkT8QN5cqdYkQdTHbtJY4$ >=20 > Name Value >=20 > SHA-1 -14 > SHA-256/64 -15 > SHA-256 -16 > SHA-384 -43 > SHA-512 -44 > SHA-512/256 -17 > SHAKE128 -18 > SHAKE256 -45 >=20 >=20 > Jim >=20 >=20 _______________________________________________ COSE mailing list COSE@ietf.org https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/cose__;!U= 11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2nX3wx4mddkqAX-AXr5yijD3btkT8QN5cqdYkQ= dfhP1OAe$=20 From nobody Tue Aug 20 09:48:57 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4E1C12096B for ; Tue, 20 Aug 2019 09:48:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outer-planes-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dY9JMzRauaMh for ; Tue, 20 Aug 2019 09:48:52 -0700 (PDT) Received: from mail-io1-xd33.google.com (mail-io1-xd33.google.com [IPv6:2607:f8b0:4864:20::d33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB0D31209B0 for ; Tue, 20 Aug 2019 09:48:52 -0700 (PDT) Received: by mail-io1-xd33.google.com with SMTP id s21so13617085ioa.1 for ; Tue, 20 Aug 2019 09:48:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outer-planes-net.20150623.gappssmtp.com; s=20150623; h=sender:subject:to:cc:references:from:openpgp:autocrypt:message-id :date:user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=U2pKLoD+ZWXLYpR8/dZtTXmR7G2Mm0Tb/1q3h61iyLk=; b=wha36mDWSGWisAk+Thh0MWNXArg+5TGfK/UHJ9fvNBMYBlei1c32NlL8s0sA2IfG17 z/JyuiSXdBOSLHxe0XoN0bBhj7/jCpSB6pug/aQJ7TzX2YHlqv7MpFv5Vj+28+tpxrCW 96zk5Tj6i4JvDw3Tzh23PRi9i/YHWjLd9HxPJB6d5F3xv+H/CihXLuUp7MOFkRs1/3r+ X90EeeiiRcCvNpjsapHIX7dzd4RShmZLDnDrJgdKua3QSUJJynHfWmiG1VSIzSvznuUa MZixkq6WVRk6ZLuQZN5Xt2yR6B5mkmKts9w3TWB1lbtCEb7BOHjMF+1xTPFGofxBSNnu BCnw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:subject:to:cc:references:from:openpgp :autocrypt:message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=U2pKLoD+ZWXLYpR8/dZtTXmR7G2Mm0Tb/1q3h61iyLk=; b=evtUPWxdN+2wjD0etr75MQXr6VqUHYkdppNS1aMNELSS3IFoEblODx0Wz8ogjQ2gcc khN963DqlC7sjpNa9ukHGUNDqOPBKQDkzDg6OYqguleIjKJ4j4yEWlkEnxQl58VgUxCV 5GZjCXX8J+OFyzINHWqKWz1iQaemKO4jBgD/aSTc0WGKbPO2ezN6qC0HH7HyRrezS837 +q0HvSv8LsEM3A2XXxLekCy/Gs9bu5xW4g7Ixj0clKkpTk4mSiyar4tVfWmMoGt8RCrC M2Ph8yvM+7d7MauPwuE3quk0yZd++o9yjRIvKBfcEzmAEDb2fA8q2x3pEI5uOwaTm63E tOIw== X-Gm-Message-State: APjAAAXIkYqAV/S0r1C2bmMVnM4KPhcUMyk3zXwTdHbPExHGrxxLhBeN KG5sgh58UYSgnz8YlQ2YoaAZvqIzHDrwfSdK X-Google-Smtp-Source: APXvYqwkMoT1D7YxqUWZYvPa6vQoPn3URCQtMnXvakdcHXEiECCvyzuWMRJRLQbw534Im4GIuA8zEw== X-Received: by 2002:a02:10:: with SMTP id 16mr4750283jaa.96.1566319731689; Tue, 20 Aug 2019 09:48:51 -0700 (PDT) Received: from mmiller-44677.local ([207.126.127.114]) by smtp.gmail.com with ESMTPSA id n203sm16404910iod.28.2019.08.20.09.48.50 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 20 Aug 2019 09:48:51 -0700 (PDT) Sender: Matthew Miller To: DESPERRIER Jean-Marc , "ietf@augustcellars.com" Cc: "cose-ads@ietf.org" , "cose@ietf.org" References: <005001d5461d$149a4c70$3dcee550$@augustcellars.com> From: "Matthew A. Miller" Openpgp: preference=signencrypt Autocrypt: addr=linuxwolf+ietf@outer-planes.net; prefer-encrypt=mutual; keydata= mQENBFJoAooBCADQmEtpbpY/4wTeKgZIuyG7HkxIFgiUeqOvtiBKj/pCA73d7Q5hCvQdGcKJ 6uZsYz3Il9oKoKFxVt90iEXspbE39g6ek19e6RsB4j0Q10l4QvH+EqeD760gs0H2yf/eYj9i uk9/VY6axdQlPsmid1zoQgCNjSM7X4/K26WGMs03sbXJpKdoonelzIlJSNfzi0q546iplo72 D2cCm9BriMkQvcGnsm4B9eBIBn3GKmVx1tsmPNeNTyun2DvaLnrYxbA0Ivo1DzZReds9NZ25 uROI/+b+lcg9/kmHzhK+q8NMQCFWmqpS/lZRKxVBSijKGpGr5h8VLVf5iURHtwG+B/QxABEB AAG0M01hdHRoZXcgQS4gTWlsbGVyIDxsaW51eHdvbGYraWV0ZkBvdXRlci1wbGFuZXMubmV0 PokBPQQTAQoAJwUCWKsJ1AIbAwUJC8ckMQULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRDs 9HJOEJ4Fu1iBCADAcW06d/7GTlBjTlYuMGgjzDBoWeQ9/zxgMnSrgNb6yO7wHzE65CeFs6OI 6LQ4A34CNM3hhcWDIzlqrV25fVyy7qCh6bCNMs1pOT63+Od4kcjHtUnGGTONT5fXSGY7mCtl XJFjb3TwyLUZXQCifhCIaUdF/4SVoGk96W9ssbDKN+5xq7B7gyVkwB0WM67zxt/kC6TPcXXL 5m7jsNRpRmFQqOlIF+HrQAcSr1lKRWgetb1VHfXCgcmDaTKn1QC7s0Ml+27dc0SoIkBI8cnv inJ4oFYWrvnTlOvv+v8AFXZnPrxZ/JYvnVD/y5PX7v08Z8RFXm1AmVxIWjXPI6TySkGvuQEN BFJoAooBCADA/ruHwYlQ7pdjJY6twkZcMmedkQNL6r5tNBeQkwVrvitUjHTKKipjxB2kEkUZ oxPgMI1h7/enDrVlMMMqq6RIJ86H+yx13zNIZNBlJfmVHgHj7TT8spa6A/qIccdiIRNsFVvl vFxpH8sTjVbHfPYexbdOR5kHpZWTzYxNyVLXMK5jen0B4K+vjbgFJAvsoLfzLZ5Bz3kb6dpu xUNzqhDyhk5/UPaCIFvZWBtiRKmkqPwEq8G2aMJq5Z4Sr8CRkpoMB25rxCPS8R+ByiHxpq+U 8mKuqPVg1LJzcA7hHmms8aBN6lxSlbyKnzEg8AWgld+6+xlJXu5U/fqDAClTj5mfABEBAAGJ ATwEGAEKACYCGwwWIQQx11iN7JBpDWvMmODs9HJOEJ4FuwUCWm+kiwUJC8tagQAKCRDs9HJO EJ4Fu40cB/9xyEnuQegivmL6OBVG5HvUAaXGUxtWiWdLm3NrduL0h7rctF060xQTekNRCjbl xZ1w/unPDBEEIMPYbF8i7IwJZoRLTG1B1MjI04AUU60G0IU6uw0ST6IsC7oYGvhDNJApbVBb j9u9x+kzaktCftl3qdpSKgRh9McIyZgevuFBdo80RDtX8niktUA3xsfJWBD1yJA33UNSzqOe 54wFRbsM2+4erREPMD659h2lACPCXjPW/6ucnv0/cdPF8V2JNMCT0yPJVCSUfFLTrtyYtiRI 6S52cI4eEOZIXCQp30TA4E27O2mMLOYzlKA5P5T+Icf4gz8e/puNUKIBDlY6KF7p Message-ID: Date: Tue, 20 Aug 2019 10:48:50 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [COSE] [IANA #1148103] Early Code Point Assignments X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Aug 2019 16:48:56 -0000 Hello Jean-Marc, Two reviewers have approved of the header parameters, so I believe the value 33 should be safe. I will follow up with IANA to see when that will be reflected in the registry. - m&m Matthew A. Miller one each of Expert Reviewers and COSE chairs On 19/08/20 10:29, DESPERRIER Jean-Marc wrote: > Hi, > > I hope you can hear back from the expert about ietf-cose-x509 quickly. > Meanwhile in ISO/IEC JTC 1/SC 17/WG 10, for the informal prototype test event of the current draft of ISO 18013-5 we organized this week-end, we used the value 33 for x5chain that Jim proposed. Let's hope we don't have to change it later, and can rapidly reference it in the newer draft. > > Best regards, > Jean-Marc > > -----Message d'origine----- > De : COSE De la part de Sabrina Tanamal via RT > Envoyé : mercredi 14 août 2019 00:24 > À : ietf@augustcellars.com > Cc : cose-ads@ietf.org; cose@ietf.org > Objet : [COSE] [IANA #1148103] Early Code Point Assignments > > Hi Jim, > > We've made the early allocations for draft-ietf-cose-hash-algs, but we're still waiting to hear back from the experts regarding the assignments in draft-ietf-cose-x509. We'll let you know as soon as we hear from them. > > These early allocations are complete: > > SHAKE256 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -45 256-bit SHAKE [draft-ietf-cose-hash-algs] Yes > SHA-512 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -44 SHA-2 512-bit Hash [draft-ietf-cose-hash-algs] Yes > SHA-384 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -43 SHA-2 384-bit Hash [draft-ietf-cose-hash-algs] Yes > SHAKE128 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -18 128-bit SHAKE [draft-ietf-cose-hash-algs] Yes > SHA-512/256 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -17 SHA-2 512-bit Hash truncated to 256-bits [draft-ietf-cose-hash-algs] Yes > SHA-256 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -16 SHA-2 256-bit Hash [draft-ietf-cose-hash-algs] Yes > SHA-256/64 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -15 SHA-2 256-bit Hash truncated to 64-bits [draft-ietf-cose-hash-algs] Filter Only > SHA-1 (TEMPORARY - registered 2019-08-13, expires 2020-08-13) -14 SHA-1 Hash [draft-ietf-cose-hash-algs] Filter Only > > If this document hasn't been approved for publication by July 2020, we'll contact you about approving a one-year renewal. Any further renewals would require IESG approval. > > Best regards, > > Sabrina Tanamal > Senior IANA Services Specialist > > On Mon Jul 29 14:52:02 2019, ietf@augustcellars.com wrote: >> Following the meeting in Montreal where I asked for the ability to do >> early point assignment for documents in the working group and got permission, >> these are the code points that I am assigning. I am only assigning points >> that I know people are asking for now, some points will be setup later. >> >> For draft-ietf-cose-x509 (https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-cose-x509__;!U11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2nX3wx4mddkqAX-AXr5yijD3btkT8QN5cqdYkQdceWs-22$ ): >> >> Table COSE Header Parameters >> https://urldefense.com/v3/__https://www.iana.org/assignments/cose/cose >> .xhtml*header-parameters__;Iw!U11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2n >> X3wx4mddkqAX-AXr5yijD3btkT8QN5cqdYkQdWsgiY8C$ >> >> Name Value >> x5bag 32 >> x5chain 33 >> x5t 34 >> x5u 35 >> >> For draft-ietf-cose-hash-algs >> (https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-cose-hash-algs__;!U11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2nX3wx4mddkqAX-AXr5yijD3btkT8QN5cqdYkQdTBumviG$ ): >> >> Table COSE Algorithms >> https://urldefense.com/v3/__https://www.iana.org/assignments/cose/cose >> .xhtml*algorithms__;Iw!U11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2nX3wx4md >> dkqAX-AXr5yijD3btkT8QN5cqdYkQdTHbtJY4$ >> >> Name Value >> >> SHA-1 -14 >> SHA-256/64 -15 >> SHA-256 -16 >> SHA-384 -43 >> SHA-512 -44 >> SHA-512/256 -17 >> SHAKE128 -18 >> SHAKE256 -45 >> >> >> Jim >> >> > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/cose__;!U11cABxz5NU!l1Wgt4J1m7vpUmVAJc210eIq0w2nX3wx4mddkqAX-AXr5yijD3btkT8QN5cqdYkQdfhP1OAe$ > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Tue Aug 20 15:52:11 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13C2A120837; Tue, 20 Aug 2019 15:52:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.65 X-Spam-Level: X-Spam-Status: No, score=-1.65 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.249, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HDkS-59zGz6b; Tue, 20 Aug 2019 15:52:07 -0700 (PDT) Received: from smtp01.icann.org (smtp01.icann.org [192.0.33.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BEA5120835; Tue, 20 Aug 2019 15:52:07 -0700 (PDT) Received: from request4.lax.icann.org (request1.lax.icann.org [10.32.11.221]) by smtp01.icann.org (Postfix) with ESMTP id 4F7B7E13B6; Tue, 20 Aug 2019 22:52:07 +0000 (UTC) Received: by request4.lax.icann.org (Postfix, from userid 48) id 4CD0C205B8; Tue, 20 Aug 2019 22:52:07 +0000 (UTC) RT-Owner: sabrina.tanamal From: "Sabrina Tanamal via RT" Reply-To: iana-prot-param@iana.org In-Reply-To: <005001d5461d$149a4c70$3dcee550$@augustcellars.com> References: <005001d5461d$149a4c70$3dcee550$@augustcellars.com> Message-ID: X-RT-Loop-Prevention: IANA X-RT-Ticket: IANA #1148103 X-Managed-BY: RT 4.4.3 (http://www.bestpractical.com/rt/) X-RT-Originator: sabrina.tanamal@icann.org To: ietf@augustcellars.com CC: linuxwolf+ietf@outer-planes.net, cose@ietf.org, cose-ads@ietf.org Content-Type: text/plain; charset="utf-8" X-RT-Original-Encoding: utf-8 Precedence: bulk Date: Tue, 20 Aug 2019 22:52:07 +0000 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Archived-At: Subject: [COSE] [IANA #1148103] Early Code Point Assignments (draft-ietf-cose-x509 - draft-ietf-cose-hash-algs) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Aug 2019 22:52:09 -0000 Hi all, Thank you for your patience. We've made the early allocations for draft-ietf-cose-x509: x5bag (TEMPORARY - registered 2019-08-20, expires 2020-08-20) 32 COSE_X509 An unordered bag of X.509 certificates [draft-ietf-cose-x509] x5chain (TEMPORARY - registered 2019-08-20, expires 2020-08-20) 33 COSE_X509 An ordered chain of X.509 certificates [draft-ietf-cose-x509] x5t (TEMPORARY - registered 2019-08-20, expires 2020-08-20) 34 COSE_CertHash Hash of an X.509 certificate [draft-ietf-cose-x509] x5u (TEMPORARY - registered 2019-08-20, expires 2020-08-20) 35 uri URI pointing to an X.509 certificate [draft-ietf-cose-x509] Please see https://www.iana.org/assignments/cose If this document hasn't been approved for publication by August 2020, we'll contact you about approving a one-year renewal. Any further renewals would require IESG approval. Best regards, Sabrina Tanamal Senior IANA Services Specialist On Mon Jul 29 14:52:02 2019, ietf@augustcellars.com wrote: > Following the meeting in Montreal where I asked for the ability to do early > point assignment for documents in the working group and got permission, > these are the code points that I am assigning. I am only assigning points > that I know people are asking for now, some points will be setup later. > > For draft-ietf-cose-x509 (https://tools.ietf.org/html/draft-ietf-cose-x509): > > Table COSE Header Parameters > https://www.iana.org/assignments/cose/cose.xhtml#header-parameters > > Name Value > x5bag 32 > x5chain 33 > x5t 34 > x5u 35 > > For draft-ietf-cose-hash-algs > (https://tools.ietf.org/html/draft-ietf-cose-hash-algs): > > Table COSE Algorithms > https://www.iana.org/assignments/cose/cose.xhtml#algorithms > > Name Value > > SHA-1 -14 > SHA-256/64 -15 > SHA-256 -16 > SHA-384 -43 > SHA-512 -44 > SHA-512/256 -17 > SHAKE128 -18 > SHAKE256 -45 > > > Jim > >