From nobody Fri Nov 1 18:48:24 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EFED2120219; Fri, 1 Nov 2019 18:48:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157265930162.31899.13581705244175991971@ietfa.amsl.com> Date: Fri, 01 Nov 2019 18:48:21 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-hash-sig-06.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2019 01:48:22 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : Use of the HSS/LMS Hash-based Signature Algorithm with CBOR Object Signing and Encryption (COSE) Author : Russ Housley Filename : draft-ietf-cose-hash-sig-06.txt Pages : 15 Date : 2019-11-01 Abstract: This document specifies the conventions for using the Hierarchical Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is one form of hash-based digital signature; it is described in RFC 8554. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-hash-sig-06 https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-hash-sig-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Nov 1 18:52:13 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41554120AC5 for ; Fri, 1 Nov 2019 18:52:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id twOHt2u_ZpFD for ; Fri, 1 Nov 2019 18:52:09 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5012120142 for ; Fri, 1 Nov 2019 18:51:11 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 3E30B300B0E for ; Fri, 1 Nov 2019 21:51:10 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id XELAy9CBS5sX for ; Fri, 1 Nov 2019 21:51:08 -0400 (EDT) Received: from [5.5.33.37] (unknown [204.194.23.17]) by mail.smeinc.net (Postfix) with ESMTPSA id 9D7D93005DF for ; Fri, 1 Nov 2019 21:51:08 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 1 Nov 2019 21:51:08 -0400 References: <157265930162.31899.13581705244175991971@ietfa.amsl.com> To: cose In-Reply-To: <157265930162.31899.13581705244175991971@ietfa.amsl.com> Message-Id: X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [COSE] I-D Action: draft-ietf-cose-hash-sig-06.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2019 01:52:11 -0000 This version puts the examples in the format used in RFC 8152 as = requested by Laurence Lundblade. Many thanks to Jim Schaad for doing = the actual examples. Russ > On Nov 1, 2019, at 9:48 PM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the CBOR Object Signing and Encryption WG = of the IETF. >=20 > Title : Use of the HSS/LMS Hash-based Signature = Algorithm with CBOR Object Signing and Encryption (COSE) > Author : Russ Housley > Filename : draft-ietf-cose-hash-sig-06.txt > Pages : 15 > Date : 2019-11-01 >=20 > Abstract: > This document specifies the conventions for using the Hierarchical > Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based > signature algorithm with the CBOR Object Signing and Encryption > (COSE) syntax. The HSS/LMS algorithm is one form of hash-based > digital signature; it is described in RFC 8554. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-cose-hash-sig-06 > https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig-06 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-hash-sig-06 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Fri Nov 1 19:49:40 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 29F971209CA; Fri, 1 Nov 2019 19:49:39 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157266297909.31800.13764245202141847310@ietfa.amsl.com> Date: Fri, 01 Nov 2019 19:49:39 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-webauthn-algorithms-03.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2019 02:49:39 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : COSE and JOSE Registrations for WebAuthn Algorithms Author : Michael B. Jones Filename : draft-ietf-cose-webauthn-algorithms-03.txt Pages : 13 Date : 2019-11-01 Abstract: The W3C Web Authentication (WebAuthn) specification and the FIDO Alliance Client to Authenticator Protocol (CTAP) specification use CBOR Object Signing and Encryption (COSE) algorithm identifiers. This specification registers the following algorithms in the IANA "COSE Algorithms" registry, which are used by WebAuthn and CTAP implementations: RSASSA-PKCS1-v1_5 using SHA-256, SHA-384, SHA-512, and SHA-1, and ECDSA using the secp256k1 curve and SHA-256. It registers the secp256k1 elliptic curve in the IANA "COSE Elliptic Curves" registry. Also, for use with JSON Object Signing and Encryption (JOSE), it registers the algorithm ECDSA using the secp256k1 curve and SHA-256 in the IANA "JSON Web Signature and Encryption Algorithms" registry and the secp256k1 elliptic curve in the IANA "JSON Web Key Elliptic Curve" registry. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-webauthn-algorithms/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-03 https://datatracker.ietf.org/doc/html/draft-ietf-cose-webauthn-algorithms-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-webauthn-algorithms-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Nov 1 20:03:44 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9C54120A1A for ; Fri, 1 Nov 2019 20:03:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.89 X-Spam-Level: X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id euKKzlQKWOTf for ; Fri, 1 Nov 2019 20:03:38 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-dm3nam06on070d.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe56::70d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE2011209A6 for ; Fri, 1 Nov 2019 20:03:30 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ay7+U16TwIVtIq7GaoMaWfw91rUgTqnc9+uCFd7LNL5yH9WHYoqKr5ykGAZEiaFdEeA9q76qe3s/RmuxUjS2D0yUHUy/qMcX6E3OfP+L8EjsFfKf/8X+aPzhhn1aR90liiGZKgC7j5ZTh/Gdk4fVdacC215DDA9yGJyXsLhz27w+vCNFy6cUZfqCubWYsQTLF/ALvCb1wEyI6WdDMK1JQQwXXX8zN+nRjjg8WtCG4q0Aufmt8v4uwrxj8sClAWNrA1atnNulH16Nv4/Mt+RvS4jMj+R0QKUt///yCW/jRaV6vbp7i/WPtSXQJ2h/XY0ONgmx/TUFhceg0kJScd1AgQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ySDQHIhBSSM2EqLY/6Ojuy434DT5pxZliOQZo7oXfHg=; b=cMBRcuEDzcPC24BUa+9juD4e/NMUacSYc2yAZ7VyfiQ8meFBpU4b+jmWNNUkKeKkT+YwJ4vdZOB0u6DPOVxdjQLe4gFj1NQFCx+si7hYbkTK/HjW4X2oPvgFMEziE7AKQsQX+SChWacPfUZoi8tGxXBK68zIiBEFKJ/XdGSpXUzVQPweVKfAIpPqwtFjo9CSIUn4jp0bPUPhVLZ98riMKK3rGqOQytx5X1Z24hr7xo+JMqW4Wcc7y3+fouVTAALyaZThReaHPYW3Pkj5vTjDwYP+oG18ruYenbbnynhh9OH1VnJB6NvzAWxv+uhhIuIsXlGxpodnww5qk8HZGbCyzA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ySDQHIhBSSM2EqLY/6Ojuy434DT5pxZliOQZo7oXfHg=; b=FxE0Kbx2JGonYFE0exynnmo4YszJS9zwWuvLw3Y1+qfZ3hLQ9tLzF9S3SQSe4vPdZva6etcgABWuDp49V1kDJG8c0JjtRp4vDA0YVeR4qZ+yPbAdslrcHBYd64yyu02bR6iR9C9PjwEb+ziSfL7+f79d+h0gzuxo5GCMqgHSAh8= Received: from BYAPR00MB0565.namprd00.prod.outlook.com (20.179.56.23) by BYAPR00MB0565.namprd00.prod.outlook.com (20.179.56.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2450.0; Sat, 2 Nov 2019 03:03:23 +0000 Received: from BYAPR00MB0565.namprd00.prod.outlook.com ([fe80::fc38:10d3:6060:8b60]) by BYAPR00MB0565.namprd00.prod.outlook.com ([fe80::fc38:10d3:6060:8b60%5]) with mapi id 15.20.2450.000; Sat, 2 Nov 2019 03:03:22 +0000 From: Mike Jones To: Jim Schaad , "cose@ietf.org" Thread-Topic: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt Thread-Index: AdWKzH1ZtLW2gCD0TXmPehr3YYoMsAD0VUcwAKMJBBA= Date: Sat, 2 Nov 2019 03:03:22 +0000 Message-ID: References: <041a01d58e90$9449ff90$bcddfeb0$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=493681de-f555-455f-931b-0000516ad6f2; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-29T21:14:17Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.93.218] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d5398966-5d92-484e-c20e-08d75f4138f0 x-ms-traffictypediagnostic: BYAPR00MB0565: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0209425D0A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(366004)(346002)(396003)(136003)(376002)(189003)(199004)(13464003)(5660300002)(11346002)(52536014)(316002)(14444005)(22452003)(256004)(74316002)(110136005)(86362001)(966005)(10290500003)(14454004)(33656002)(478600001)(2501003)(66574012)(25786009)(606006)(229853002)(66066001)(6116002)(790700001)(76116006)(446003)(66946007)(66476007)(486006)(6306002)(55016002)(54896002)(9686003)(53546011)(6436002)(102836004)(6506007)(76176011)(99286004)(3846002)(7696005)(2906002)(236005)(4001150100001)(81166006)(8936002)(6246003)(81156014)(8676002)(7736002)(8990500004)(71200400001)(476003)(71190400001)(186003)(26005)(64756008)(66446008)(66556008)(10090500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0565; H:BYAPR00MB0565.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: fU6NS8rdRoIRFiXlS7TZ4ZajXPhcONQa99VGMrZnfBW83Mk4BKlmAnAemUqkS8RLWo7d3q3X/tOVCD35AZtoc22HtIMlWe4YQiK45JwPYszGdvGMxTWtdFD7dF3pOFq7/6SMniKAcs5DidNMtyqvJ0MvkJX+dYacnvEvG7FvwaSEkYtLgfuoabfqVkcJYhB52QRfP9i2skaaUqEwBrPYk143D8+GttLH78S3j4wDokObE1GxZy+swK2Wpi6SZvpOHD6hSjQBP6RVPsxkei42uMy+kb6D1DcCfVOZpWNNJbEEyLXq6WCUTtcyW5/7HwCVNWs+p+uCctjRN2nRs44KNP/0rj0HSfdofCr7bgLXnu0We4TkZ1b9reQlI0fF+dGre1/h8lHf//VAnZdzUI/uDpibwLOhikHzHPA8Qre5I4DPMB3XfUCw0PyKpwwCh963 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR00MB056562BCB6482049BDD2FC74F57D0BYAPR00MB0565namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: d5398966-5d92-484e-c20e-08d75f4138f0 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2019 03:03:22.7480 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mlZeWJAehOQ/ixvT8DoYlTuJmPLaZ9P6nROr6imONkdj6GXDi4ov2RuGCArZS0pDw1D0Ppba10QHu2j8yC2rdg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0565 Archived-At: Subject: Re: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2019 03:03:43 -0000 --_000_BYAPR00MB056562BCB6482049BDD2FC74F57D0BYAPR00MB0565namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -03 has been published, which addresses Jim's review comments on -02 in the= manner described in the reply below. Thanks again for your reviews, Jim. -- Mike From: Mike Jones Sent: Tuesday, October 29, 2019 4:20 PM To: Jim Schaad ; cose@ietf.org Subject: RE: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt Replies are inline, prefixed by "Mike>". -----Original Message----- From: COSE > On Behalf = Of Jim Schaad Sent: Tuesday, October 29, 2019 12:39 PM To: cose@ietf.org Subject: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt 1. The document needs to have a short title added to it. Mike> I've added this "abbrev" value in the current editor's draft "COSE & = JOSE Registrations for WebAuthn Algs", which fits in the available space. 2. Abstract - The text "FIDO Alliance FIDO2 Client to Authenticator Protoco= l" needs to get cleaned up. It is not clear to me if FIDO2 is supposed to = be an abbreviation of the previous FIDO Alliance or not. Flip the sentence= to use from or insert specification earlier. Mike> I've deleted "FIDO2" (which was being used as an adjective applying t= he spec name). 3. Section 1 - I am not sure why you are using the term "related" rather t= han "the" in this section. This seems to be different than the abstract in= that feature. Relate makes me think that it is something that is differen= t but similar in this case. Mike> I've deleted "related". 4. While I guess it is reasonable to have the description of why things ar= e not recommended in the security considerations, I myself would not really= think of them as such. However not having a pointer from section 2 to tha= t information seems harsh as we are saying the are not recommended without = have a pointer to the discussion. Mike> I've added the pointers. 5. I have problems with the following text: "Implementation of this algori= thm is RECOMMENDED because of its widespread use in decentralized systems a= nd those that chose it over the NIST curves." Firstly, this is an incorrec= t use of the RFC 2119 language, this is not a protocol statement. Mike> I've lowercased "recommended". Secondly, this is not what the recommended column in table 2 means and thus= is trying to overload that column with something that is not real. Third,= the fact that people chose this over the NIST curves is not necessarily a = reason for the IETF to recommended its implementation. Mike> Recall that the JOSE algorithms come with Implementation Requirements= (see https://tools.ietf.org/html/rfc7518#section-7.1.1), whose values are = one of Required, Recommended, Optional, Deprecated, or Prohibited. It's in= that sense that the word "Recommended" is being used - more than Optional = but less than Required. The COSE registry value that seems to most closely= correspond with this is "Recommended: True". (As I see it, it's unfortuna= te that COSE compressed these five values down to two, but I realize that t= hat's water under the bridge, unless we want to reconsider this choice in t= he BIS COSE registry instructions.) 6. I still want to see in the text the reasoning behind not just using the= current ECDSA algorithm in COSE. Mike> I provided the reasoning in my response to your previous review. Hav= ing a curve-specific algorithm identifier lets implementations do what you = asked about - ensuring that the curve associated with a key cannot be chang= ed and the modified key still be used. 7. Add text on checking point is on the curve to section 5.4 Mike> I assume you're talking about adding text like that in https://tools.= ietf.org/html/draft-ietf-oauth-jwt-bcp-07#section-3.4. I'll admit that I'm= not enough of an expert on secp256k1 usage to know whether an on-curve che= ck is what is called for or a different validation procedure. A definitive= reference would be highly appreciated. In particular, I don't know whethe= r the Galois y=B2 =3D x=B3 + 7 finite field form used with secp256k1 is ame= nable to a check that the (x, y) pair are on the curve or whether a differe= nt check is needed. Thanks again for your detailed reviews, Jim. I'll plan to publish a new dr= aft incorporating these issue resolutions before Monday's submission cutoff= . -- Mike -----Original Message----- From: COSE > On Behalf = Of internet-drafts@ietf.org Sent: Thursday, October 24, 2019 2:35 PM To: i-d-announce@ietf.org Cc: cose@ietf.org Subject: [COSE] I-D Action: draft-ietf-cose-webauthn-algorithms-02.txt A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the CBOR Object Signing and Encryption WG of t= he IETF. Title : COSE and JOSE Registrations for WebAuthn Algorithms Author : Michael B. Jones Filename : draft-ietf-cose-webauthn-algorithms-02.tx= t Pages : 13 Date : 2019-10-24 Abstract: The W3C Web Authentication (WebAuthn) specification and the FIDO Alliance FIDO2 Client to Authenticator Protocol (CTAP) specification use CBOR Object Signing and Encryption (COSE) algorithm identifiers. This specification registers the following algorithms in the IANA "COSE Algorithms" registry, which are used by WebAuthn and CTAP implementations: RSASSA-PKCS1-v1_5 using SHA-256, SHA-384, SHA-512, and SHA-1, and ECDSA using the secp256k1 curve and SHA-256. It registers the secp256k1 elliptic curve in the IANA "COSE Elliptic Curves" registry. Also, for use with JSON Object Signing and Encryption (JOSE), it registers the algorithm ECDSA using the secp256k1 curve and SHA-256 in the IANA "JSON Web Signature and Encryption Algorithms" registry and the secp256k1 elliptic curve in the IANA "JSON Web Key Elliptic Curve" registry. The IETF datatracker status page for this draft is: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdatatra= cker.ietf.org%2Fdoc%2Fdraft-ietf-cose-webauthn-algorithms%2F&data=3D02%= 7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C7= 2f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata=3DP5= WknFu56wOZwH1i%2BRJMvqjHYjF9VD32CSrkWBg5bA8%3D&reserved=3D0 There are also htmlized versions available at: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftools.i= etf.org%2Fhtml%2Fdraft-ietf-cose-webauthn-algorithms-02&data=3D02%7C01%= 7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988= bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata=3DZutAl6J= aemEvVdC5KZFeTthXl75YYP1ebBgrNWcSi1A%3D&reserved=3D0 https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdatatra= cker.ietf.org%2Fdoc%2Fhtml%2Fdraft-ietf-cose-webauthn-algorithms-02&dat= a=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c= 308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sda= ta=3DR%2FKt7qEM0q3v4%2FFvm0WSLoHPkQP8vHK5I4qXyFQXBIk%3D&reserved=3D0 A diff from the previous version is available at: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Frfcdiff%3Furl2%3Ddraft-ietf-cose-webauthn-algorithms-02&data=3D= 02%7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%= 7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata= =3DZt9aIA57AKdF2PlPPtlm2E%2F6OjAvizDxU%2BoRrkpTwKI%3D&reserved=3D0 Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ COSE mailing list COSE@ietf.org https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Fmailman%2Flistinfo%2Fcose&data=3D02%7C01%7CMichael.Jones%40micr= osoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011= db47%7C1%7C0%7C637079747916555344&sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0= iLSMbIex5nYmV0%3D&reserved=3D0 _______________________________________________ COSE mailing list COSE@ietf.org https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Fmailman%2Flistinfo%2Fcose&data=3D02%7C01%7CMichael.Jones%40micr= osoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011= db47%7C1%7C0%7C637079747916555344&sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0= iLSMbIex5nYmV0%3D&reserved=3D0 --_000_BYAPR00MB056562BCB6482049BDD2FC74F57D0BYAPR00MB0565namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

-03 has been published= , which addresses Jim’s review comments on -02 in the manner describe= d in the reply below.  Thanks again for your reviews, Jim.<= /span>

 

   &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p; -- Mike

 

From: Mike Jones
Sent: Tuesday, October 29, 2019 4:20 PM
To: Jim Schaad <ietf@augustcellars.com>; cose@ietf.org
Subject: RE: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.tx= t

 

Replies are inline, prefixed by “Mike>”.

 

-----Original Message-----
From: COSE <cose-bounces@ietf.o= rg> On Behalf Of Jim Schaad
Sent: Tuesday, October 29, 2019 12:39 PM
To: cose@ietf.org
Subject: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt

 

1.  The document needs to have a short title= added to it.

 

Mike> I’ve= added this “abbrev” value in the current editor’s draft = “COSE & JOSE Registrations for WebAuthn Algs”, which fits i= n the available space.

 

2. Abstract - The text "FIDO Alliance FIDO2 = Client to Authenticator Protocol" needs to get cleaned up.  It is= not clear to me if FIDO2 is supposed to be an abbreviation of the previous= FIDO Alliance or not.  Flip the sentence to use from or insert specification earlier.

 

Mike> I’ve= deleted “FIDO2” (which was being used as an adjective applying= the spec name).

 

3.  Section 1 - I am not sure why you are us= ing the term "related" rather than "the" in this sectio= n.  This seems to be different than the abstract in that feature. = ; Relate makes me think that it is something that is different but similar in this case.

 

Mike> I’ve= deleted “related”.

 

4.  While I guess it is reasonable to have t= he description of why things are not recommended in the security considerat= ions, I myself would not really think of them as such.  However not ha= ving a pointer from section 2 to that information seems harsh as we are saying the are not recommended without have a pointe= r to the discussion.

 

Mike> I’ve= added the pointers.

 

5.  I have problems with the following text:= "Implementation of this algorithm is RECOMMENDED because of its wides= pread use in decentralized systems and those that chose it over the NIST cu= rves."  Firstly, this is an incorrect use of the RFC 2119 language, this is not a protocol statement.

 

Mike> I’ve= lowercased “recommended”.

 

Secondly, this is not what the recommended column= in table 2 means and thus is trying to overload that column with something= that is not real.  Third, the fact that people chose this over the NI= ST curves is not necessarily a reason for the IETF to recommended its implementation.

 

Mike> Recall tha= t the JOSE algorithms come with Implementation Requirements (see https://tools= .ietf.org/html/rfc7518#section-7.1.1), whose values are one of Required, Recommended, Optional, Deprecated, = or Prohibited.  It’s in that sense that the word “Recommen= ded” is being used – more than Optional but less than Required.=   The COSE registry value that seems to most closely correspond with this is “Recommended: True”.  (As I see it, it’= ;s unfortunate that COSE compressed these five values down to two, but I re= alize that that’s water under the bridge, unless we want to reconside= r this choice in the BIS COSE registry instructions.)

 

6.  I still want to see in the text the reas= oning behind not just using the current ECDSA algorithm in COSE. 

 

Mike> I provided= the reasoning in my response to your previous review.  Having a curve= -specific algorithm identifier lets implementations do what you asked about= – ensuring that the curve associated with a key cannot be changed and the modified key still be used.

 

7.  Add text on checking point is on the cur= ve to section 5.4

 

Mike> I assume y= ou’re talking about adding text like that in https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-07#section-3.4.  I’ll admit that I’m not enough of an expert on secp256= k1 usage to know whether an on-curve check is what is called for or a different validation procedure.  A definitive refe= rence would be highly appreciated.  In particular, I don’t know = whether the Galois y=B2 =3D x=B3 + 7 finite field form used with secp25= 6k1 is amenable to a check that the (x, y) pair are on the curve or whether a different check is needed.

 

Thanks again for yo= ur detailed reviews, Jim.  I’ll plan to publish a new draft inco= rporating these issue resolutions before Monday’s submission cutoff.<= o:p>

 

   &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;          -- Mike

 

-----Original Message-----

From: COSE <cose-bounces@i= etf.org> On Behalf Of internet-drafts@ietf.org

Sent: Thursday, October 24, 2019 2:35 PM

To: i-d-announce@ietf.org

Cc: cose@ietf.org

Subject: [COSE] I-D Action: draft-ietf-cose-webau= thn-algorithms-02.txt

 

 

A New Internet-Draft is available from the on-lin= e Internet-Drafts directories.

This draft is a work item of the CBOR Object Sign= ing and Encryption WG of the IETF.

 

        Title =           : COSE and JOSE= Registrations for WebAuthn

Algorithms

        Author=           : Michael B. Jones

        &= nbsp;       Filename    &= nbsp;   : draft-ietf-cose-webauthn-algorithms-02.txt

        &= nbsp;       Pages    &nbs= p;      : 13

        &= nbsp;       Date     = ;       : 2019-10-24

 

Abstract:

   The W3C Web Authentication (WebAuthn= ) specification and the FIDO

   Alliance FIDO2 Client to Authenticat= or Protocol (CTAP) specification

   use CBOR Object Signing and Encrypti= on (COSE) algorithm identifiers.

   This specification registers the fol= lowing algorithms in the IANA

   "COSE Algorithms" registry= , which are used by WebAuthn and CTAP

   implementations: RSASSA-PKCS1-v1_5 u= sing SHA-256, SHA-384, SHA-512,

   and SHA-1, and ECDSA using the secp2= 56k1 curve and SHA-256.  It

   registers the secp256k1 elliptic cur= ve in the IANA "COSE Elliptic

   Curves" registry.  Also, f= or use with JSON Object Signing and

   Encryption (JOSE), it registers the = algorithm ECDSA using the

   secp256k1 curve and SHA-256 in the I= ANA "JSON Web Signature and

   Encryption Algorithms" registry= and the secp256k1 elliptic curve in

   the IANA "JSON Web Key Elliptic= Curve" registry.

 

 

The IETF datatracker status page for this draft i= s:

https://nam06.safelinks.protection.outlook.com/?url=3Dhtt= ps%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-ietf-cose-webauthn-algorithms= %2F&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4a= c5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63707974791= 6555344&amp;sdata=3DP5WknFu56wOZwH1i%2BRJMvqjHYjF9VD32CSrkWBg5bA8%3D&am= p;amp;reserved=3D0

 

There are also htmlized versions available at:

https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2= F%2Ftools.ietf.org%2Fhtml%2Fdraft-ietf-cose-webauthn-algorithms-02&amp;= data=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75c= a7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&= amp;sdata=3DZutAl6JaemEvVdC5KZFeTthXl75YYP1ebBgrNWcSi1A%3D&amp;reserved= =3D0

https://nam06.safelinks.protection.outlook.com/?= url=3Dhttps%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Fdraft-ietf-cose-web= authn-algorithms-02&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.com%= 7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7= C0%7C637079747916555344&amp;sdata=3DR%2FKt7qEM0q3v4%2FFvm0WSLoHPkQP8vHK= 5I4qXyFQXBIk%3D&amp;reserved=3D0

 

A diff from the previous version is available at:=

https://nam06.safelinks.protection.outlook.com/?url= =3Dhttps%3A%2F%2Fwww.ietf.org%2Frfcdiff%3Furl2%3Ddraft-ietf-cose-webauthn-a= lgorithms-02&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce2799= 55f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63= 7079747916555344&amp;sdata=3DZt9aIA57AKdF2PlPPtlm2E%2F6OjAvizDxU%2BoRrk= pTwKI%3D&amp;reserved=3D0

 

 

Please note that it may take a couple of minutes = from the time of submission until the htmlized version and diff are availab= le at tools.ietf.org.

 

Internet-Drafts are also available by anonymous F= TP at:

<= span style=3D"color:windowtext;text-decoration:none">ftp://ftp.ietf.org/int= ernet-drafts/

 

_______________________________________________

COSE mailing list

COSE@ietf.org

https://nam= 06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmai= lman%2Flistinfo%2Fcose&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.c= om%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C= 1%7C0%7C637079747916555344&amp;sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0iLS= MbIex5nYmV0%3D&amp;reserved=3D0

 

_______________________________________________

COSE mailing list

COSE@ietf.org

https://nam= 06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmai= lman%2Flistinfo%2Fcose&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.c= om%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C= 1%7C0%7C637079747916555344&amp;sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0iLS= MbIex5nYmV0%3D&amp;reserved=3D0

--_000_BYAPR00MB056562BCB6482049BDD2FC74F57D0BYAPR00MB0565namp_-- From nobody Fri Nov 1 20:15:01 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 002F4120A1A for ; Fri, 1 Nov 2019 20:14:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.788 X-Spam-Level: X-Spam-Status: No, score=-1.788 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TqNmZGMCwRfp for ; Fri, 1 Nov 2019 20:14:56 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89E1C120809 for ; Fri, 1 Nov 2019 20:14:27 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Fri, 1 Nov 2019 20:14:19 -0700 From: Jim Schaad To: 'Mike Jones' , References: <041a01d58e90$9449ff90$bcddfeb0$@augustcellars.com> In-Reply-To: Date: Fri, 1 Nov 2019 20:14:16 -0700 Message-ID: <005501d5912b$9e0497a0$da0dc6e0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0056_01D590F0.F1AAEFC0" X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AQLO0b0mizVkkD0RYgFqUDfnG8tj+gNTZI3upWoWj3A= X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2019 03:14:59 -0000 ------=_NextPart_000_0056_01D590F0.F1AAEFC0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =20 =20 From: Mike Jones =20 Sent: Tuesday, October 29, 2019 4:20 PM To: Jim Schaad ; cose@ietf.org Subject: RE: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt =20 Replies are inline, prefixed by =93Mike>=94. =20 -----Original Message----- From: COSE > On = Behalf Of Jim Schaad Sent: Tuesday, October 29, 2019 12:39 PM To: cose@ietf.org =20 Subject: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt =20 =20 5. I have problems with the following text: "Implementation of this algorithm is RECOMMENDED because of its widespread use in decentralized systems and those that chose it over the NIST curves." Firstly, this is = an incorrect use of the RFC 2119 language, this is not a protocol = statement. =20 Mike> I=92ve lowercased =93recommended=94. =20 Secondly, this is not what the recommended column in table 2 means and = thus is trying to overload that column with something that is not real. = Third, the fact that people chose this over the NIST curves is not necessarily = a reason for the IETF to recommended its implementation. =20 Mike> Recall that the JOSE algorithms come with Implementation = Requirements (see https://tools.ietf.org/html/rfc7518#section-7.1.1), whose values = are one of Required, Recommended, Optional, Deprecated, or Prohibited. = It=92s in that sense that the word =93Recommended=94 is being used =96 more than = Optional but less than Required. The COSE registry value that seems to most = closely correspond with this is =93Recommended: True=94. (As I see it, it=92s = unfortunate that COSE compressed these five values down to two, but I realize that that=92s water under the bridge, unless we want to reconsider this = choice in the BIS COSE registry instructions.) [JLS] What COSE does is aligned with what the TLS working group does = with this. We do not specify implementation requirements which is what JOSE = did. =20 6. I still want to see in the text the reasoning behind not just using = the current ECDSA algorithm in COSE. =20 =20 Mike> I provided the reasoning in my response to your previous review. Having a curve-specific algorithm identifier lets implementations do = what you asked about =96 ensuring that the curve associated with a key cannot = be changed and the modified key still be used. =20 [JLS] I want to see this in the text itself. Given that this is not the same way that one would expect it to be done in COSE from history that = needs to be placed in the document. I would completely disagree with your = second statement.=20 =20 7. Add text on checking point is on the curve to section 5.4 =20 Mike> I assume you=92re talking about adding text like that in https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-07#section-3.4. = I=92ll admit that I=92m not enough of an expert on secp256k1 usage to know = whether an on-curve check is what is called for or a different validation = procedure. A definitive reference would be highly appreciated. In particular, I = don=92t know whether the Galois y=B2 =3D x=B3 + 7 finite field form used with = secp256k1 is amenable to a check that the (x, y) pair are on the curve or whether a different check is needed. =20 [JLS] section 3.2.2 of SEC 1. =20 Thanks again for your detailed reviews, Jim. I=92ll plan to publish a = new draft incorporating these issue resolutions before Monday=92s submission cutoff. =20 -- Mike=20 =20 -----Original Message----- From: COSE < cose-bounces@ietf.org> On = Behalf Of internet-drafts@ietf.org Sent: Thursday, October 24, 2019 2:35 PM To: i-d-announce@ietf.org Cc: cose@ietf.org Subject: [COSE] I-D Action: draft-ietf-cose-webauthn-algorithms-02.txt =20 =20 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG = of the IETF. =20 Title : COSE and JOSE Registrations for WebAuthn Algorithms Author : Michael B. Jones Filename : = draft-ietf-cose-webauthn-algorithms-02.txt Pages : 13 Date : 2019-10-24 =20 Abstract: The W3C Web Authentication (WebAuthn) specification and the FIDO Alliance FIDO2 Client to Authenticator Protocol (CTAP) specification use CBOR Object Signing and Encryption (COSE) algorithm identifiers. This specification registers the following algorithms in the IANA "COSE Algorithms" registry, which are used by WebAuthn and CTAP implementations: RSASSA-PKCS1-v1_5 using SHA-256, SHA-384, SHA-512, and SHA-1, and ECDSA using the secp256k1 curve and SHA-256. It registers the secp256k1 elliptic curve in the IANA "COSE Elliptic Curves" registry. Also, for use with JSON Object Signing and Encryption (JOSE), it registers the algorithm ECDSA using the secp256k1 curve and SHA-256 in the IANA "JSON Web Signature and Encryption Algorithms" registry and the secp256k1 elliptic curve in the IANA "JSON Web Key Elliptic Curve" registry. =20 =20 The IETF datatracker status page for this draft is: =20 https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdatat= racke r.ietf.org%2Fdoc%2Fdraft-ietf-cose-webauthn-algorithms%2F&data=3D02%7= C01%7 CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f98= 8bf 86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata=3DP5WknFu= 56wOZ wH1i%2BRJMvqjHYjF9VD32CSrkWBg5bA8%3D&reserved=3D0 =20 There are also htmlized versions available at: =20 https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftools= .ietf .org%2Fhtml%2Fdraft-ietf-cose-webauthn-algorithms-02&data=3D02%7C01%7= CMich ael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86= f14 1af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata=3DZutAl6JaemEv= VdC5K ZFeTthXl75YYP1ebBgrNWcSi1A%3D&reserved=3D0 =20 https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdatat= racke r.ietf.org%2Fdoc%2Fhtml%2Fdraft-ietf-cose-webauthn-algorithms-02&data= =3D02 %7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%= 7C7 2f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata=3D= R%2FK t7qEM0q3v4%2FFvm0WSLoHPkQP8vHK5I4qXyFQXBIk%3D&reserved=3D0 =20 A diff from the previous version is available at: =20 https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.i= etf.o rg%2Frfcdiff%3Furl2%3Ddraft-ietf-cose-webauthn-algorithms-02&data=3D0= 2%7C0 1%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72= f98 8bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata=3DZt9a= IA57A KdF2PlPPtlm2E%2F6OjAvizDxU%2BoRrkpTwKI%3D&reserved=3D0 =20 =20 Please note that it may take a couple of minutes from the time of = submission until the htmlized version and diff are available at tools.ietf.org. =20 Internet-Drafts are also available by anonymous FTP at: = ftp://ftp.ietf.org/internet-drafts/ =20 _______________________________________________ COSE mailing list COSE@ietf.org =20 https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.i= etf.o rg%2Fmailman%2Flistinfo%2Fcose&data=3D02%7C01%7CMichael.Jones%40micro= soft. com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47= %7C 1%7C0%7C637079747916555344&sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0iLSMb= Iex5n YmV0%3D&reserved=3D0 =20 _______________________________________________ COSE mailing list COSE@ietf.org =20 https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.i= etf.o rg%2Fmailman%2Flistinfo%2Fcose&data=3D02%7C01%7CMichael.Jones%40micro= soft. com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47= %7C 1%7C0%7C637079747916555344&sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0iLSMb= Iex5n YmV0%3D&reserved=3D0 ------=_NextPart_000_0056_01D590F0.F1AAEFC0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

 

 

From: Mike Jones = <Michael.Jones@microsoft.com>
Sent: Tuesday, October = 29, 2019 4:20 PM
To: Jim Schaad = <ietf@augustcellars.com>; cose@ietf.org
Subject: RE: = [COSE] Review = draft-ietf-cose-webauthn-algorithms-02.txt

 

Replies = are inline, prefixed by “Mike>”.

 

-----Original Message-----
From: COSE <cose-bounces@ietf.org> On = Behalf Of Jim Schaad
Sent: Tuesday, October 29, 2019 12:39 PM
To: = cose@ietf.org
Subject: [COSE] = Review draft-ietf-cose-webauthn-algorithms-02.txt

 

 

5.  I have problems with the following text: = "Implementation of this algorithm is RECOMMENDED because of its = widespread use in decentralized systems and those that chose it over the = NIST curves."  Firstly, this is an incorrect use of the RFC = 2119 language, this is not a protocol statement.

 

Mike> I’ve = lowercased “recommended”.

 

Secondly, this is not what the recommended column = in table 2 means and thus is trying to overload that column with = something that is not real.  Third, the fact that people chose this = over the NIST curves is not necessarily a reason for the IETF to = recommended its implementation.

 

Mike> Recall that = the JOSE algorithms come with Implementation Requirements (see https://tools.= ietf.org/html/rfc7518#section-7.1.1), whose values are one of = Required, Recommended, Optional, = Deprecated, or Prohibited.  It’s in that sense that the word = “Recommended” is being used – more than Optional but = less than Required.  The COSE registry value that seems to most = closely correspond with this is “Recommended: True”.  = (As I see it, it’s unfortunate that COSE compressed these five = values down to two, but I realize that that’s water under the = bridge, unless we want to reconsider this choice in the BIS COSE = registry instructions.)

[JLS] What COSE does is aligned with what the TLS = working group does with this.=A0 We do not specify implementation = requirements which is what JOSE did.

 

6.  I still want to see in the text the = reasoning behind not just using the current ECDSA algorithm in = COSE. 

 

Mike> I provided = the reasoning in my response to your previous review.  Having a = curve-specific algorithm identifier lets implementations do what you = asked about – ensuring that the curve associated with a key cannot = be changed and the modified key still be used.

 

[JLS] = I want to see this in the text itself.=A0 Given that this is not the = same way that one would expect it to be done in COSE from history that = needs to be placed in the document.=A0 I would completely disagree with = your second statement.

 

7.  Add text on checking point is on the curve = to section 5.4

 

Mike> I assume you’re talking about = adding text like that in https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-07#section-3.4.  I’ll admit that I’m not enough of an expert on = secp256k1 usage to know whether an on-curve check is what is called for = or a different validation procedure.  A definitive reference would = be highly appreciated.  In particular, I don’t know whether = the Galois y=B2 =3D x=B3 + 7 finite field form used with secp256k1 is = amenable to a check that the (x, y) pair are on the curve or whether a = different check is needed.

 

[JLS] = section 3.2.2 of=A0 SEC 1.

 

Thanks again for your = detailed reviews, Jim.  I’ll plan to publish a new draft = incorporating these issue resolutions before Monday’s submission = cutoff.

 

        &= nbsp;           &n= bsp;           &nb= sp;           &nbs= p;            = ;       -- Mike

 

-----Original Message-----

From: COSE <cose-bounces@ietf.org> On Behalf Of internet-drafts@ietf.org<= /span>

Sent: Thursday, October = 24, 2019 2:35 PM

To: i-d-announce@ietf.org

Cc: cose@ietf.org<= o:p>

Subject: [COSE] I-D Action: = draft-ietf-cose-webauthn-algorithms-02.txt

 

 

A New = Internet-Draft is available from the on-line Internet-Drafts = directories.

This draft is a work = item of the CBOR Object Signing and Encryption WG of the = IETF.

 

        Title =           : COSE and = JOSE Registrations for WebAuthn

Algorithms

        = Author          : Michael = B. Jones

        &nbs= p;       = Filename        : = draft-ietf-cose-webauthn-algorithms-02.txt

        &nbs= p;       = Pages           : = 13

        &nbs= p;       = Date            : = 2019-10-24

 

Abstract:

   The W3C Web Authentication (WebAuthn) = specification and the FIDO

   Alliance FIDO2 Client to Authenticator = Protocol (CTAP) specification

   use CBOR Object Signing and Encryption = (COSE) algorithm identifiers.

   This specification registers the = following algorithms in the IANA

   "COSE Algorithms" registry, = which are used by WebAuthn and CTAP

   implementations: RSASSA-PKCS1-v1_5 = using SHA-256, SHA-384, SHA-512,

   and SHA-1, and ECDSA using the = secp256k1 curve and SHA-256.  It

   registers the secp256k1 elliptic curve = in the IANA "COSE Elliptic

   Curves" registry.  Also, for = use with JSON Object Signing and

   Encryption (JOSE), it registers the = algorithm ECDSA using the

   secp256k1 curve and SHA-256 in the = IANA "JSON Web Signature and

   Encryption Algorithms" registry = and the secp256k1 elliptic curve in

   the IANA "JSON Web Key Elliptic = Curve" registry.

 

 

The = IETF datatracker status page for this draft is:

https://nam06.safelinks.p= rotection.outlook.com/?url=3Dhttps%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fd= raft-ietf-cose-webauthn-algorithms%2F&amp;data=3D02%7C01%7CMichael.Jo= nes%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af= 91ab2d7cd011db47%7C1%7C0%7C637079747916555344&amp;sdata=3DP5WknFu56wO= ZwH1i%2BRJMvqjHYjF9VD32CSrkWBg5bA8%3D&amp;reserved=3D0

 

There are also htmlized versions available = at:

https://nam06.safelinks.p= rotection.outlook.com/?url=3Dhttps%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-= ietf-cose-webauthn-algorithms-02&amp;data=3D02%7C01%7CMichael.Jones%4= 0microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2= d7cd011db47%7C1%7C0%7C637079747916555344&amp;sdata=3DZutAl6JaemEvVdC5= KZFeTthXl75YYP1ebBgrNWcSi1A%3D&amp;reserved=3D0=

https://nam06.safelinks.p= rotection.outlook.com/?url=3Dhttps%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fh= tml%2Fdraft-ietf-cose-webauthn-algorithms-02&amp;data=3D02%7C01%7CMic= hael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf8= 6f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&amp;sdata=3DR%2F= Kt7qEM0q3v4%2FFvm0WSLoHPkQP8vHK5I4qXyFQXBIk%3D&amp;reserved=3D0

 

A diff from the previous version is available = at:

https://nam06.safelinks.p= rotection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Frfcdiff%3Furl2%= 3Ddraft-ietf-cose-webauthn-algorithms-02&amp;data=3D02%7C01%7CMichael= .Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f14= 1af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&amp;sdata=3DZt9aIA57= AKdF2PlPPtlm2E%2F6OjAvizDxU%2BoRrkpTwKI%3D&amp;reserved=3D0

 

 

Please = note that it may take a couple of minutes from the time of submission = until the htmlized version and diff are available at = tools.ietf.org.

 

Internet-Drafts are also available by anonymous FTP = at:

ftp://ftp.ietf.org/intern= et-drafts/

 

_______________________________________________=

COSE mailing list

COSE@ietf.org<= o:p>

https://nam06.safelinks.p= rotection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmailman%2Flisti= nfo%2Fcose&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce2799= 55f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C= 637079747916555344&amp;sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0iLSMbIex5= nYmV0%3D&amp;reserved=3D0

 

_______________________________________________=

COSE mailing list

COSE@ietf.org<= o:p>

https://nam06.safelinks.p= rotection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmailman%2Flisti= nfo%2Fcose&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce2799= 55f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C= 637079747916555344&amp;sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0iLSMbIex5= nYmV0%3D&amp;reserved=3D0

------=_NextPart_000_0056_01D590F0.F1AAEFC0-- From nobody Sat Nov 2 12:29:19 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14DD41200C4 for ; Sat, 2 Nov 2019 12:29:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GlV0w4lnVe72 for ; Sat, 2 Nov 2019 12:29:07 -0700 (PDT) Received: from p3plsmtpa09-01.prod.phx3.secureserver.net (p3plsmtpa09-01.prod.phx3.secureserver.net [173.201.193.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 506B412006F for ; Sat, 2 Nov 2019 12:29:03 -0700 (PDT) Received: from [10.122.0.94] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id Qz54i2ehLnaIyQz54i14rj; Sat, 02 Nov 2019 12:29:02 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Laurence Lundblade In-Reply-To: Date: Sat, 2 Nov 2019 12:29:02 -0700 Cc: cose Content-Transfer-Encoding: quoted-printable Message-Id: <1A2B244C-6949-4E9D-AEEC-9C7D7C574239@island-resort.com> References: <157265930162.31899.13581705244175991971@ietfa.amsl.com> To: Russ Housley X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfD8/5Sx4KlQAcS+QFPzKDu01CX1PGH4n4LU9ycD+mE7m27g3bM8xLsEYbVkHmoHbsCTxlaVXY7ECkOoGOzFlsZtplJeX5EUNcU5pRm8VJ5dPKfp6GqRt AVZCW/DlEzasvQvyGF7kIv02c0430kHOEsHu1TgqiVqL6/aMQ+5Pby4H4CwhdhO1+xdiXbqIM8NP4Q== Archived-At: Subject: Re: [COSE] I-D Action: draft-ietf-cose-hash-sig-06.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2019 19:29:09 -0000 Hi The examples are good now, but it still uses =E2=80=9CCOSE_SIgn0=E2=80=9D = instead of =E2=80=9CCOSE_Sign1=E2=80=9D. Just need: s/COSE_Sign0/COSE_Sign1/ (I believe the origin of this is that COSE-C has lots of APIs and such = that are named COSE_SIgn0. It was before my time with COSE, but I = believe COSE_Sign1 uses to be COSE_Sign0 in the old pre-RFC drafts. = COSE-C hasn=E2=80=99t been updated since the name was changed so it is = still on the old incorrect name). LL > On Nov 1, 2019, at 6:51 PM, Russ Housley wrote: >=20 > This version puts the examples in the format used in RFC 8152 as = requested by Laurence Lundblade. Many thanks to Jim Schaad for doing = the actual examples. >=20 > Russ >=20 >=20 >> On Nov 1, 2019, at 9:48 PM, internet-drafts@ietf.org wrote: >>=20 >>=20 >> A New Internet-Draft is available from the on-line Internet-Drafts = directories. >> This draft is a work item of the CBOR Object Signing and Encryption = WG of the IETF. >>=20 >> Title : Use of the HSS/LMS Hash-based Signature = Algorithm with CBOR Object Signing and Encryption (COSE) >> Author : Russ Housley >> Filename : draft-ietf-cose-hash-sig-06.txt >> Pages : 15 >> Date : 2019-11-01 >>=20 >> Abstract: >> This document specifies the conventions for using the Hierarchical >> Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based >> signature algorithm with the CBOR Object Signing and Encryption >> (COSE) syntax. The HSS/LMS algorithm is one form of hash-based >> digital signature; it is described in RFC 8554. >>=20 >>=20 >> The IETF datatracker status page for this draft is: >> https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ >>=20 >> There are also htmlized versions available at: >> https://tools.ietf.org/html/draft-ietf-cose-hash-sig-06 >> https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig-06 >>=20 >> A diff from the previous version is available at: >> https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-hash-sig-06 >>=20 >>=20 >> Please note that it may take a couple of minutes from the time of = submission >> until the htmlized version and diff are available at tools.ietf.org. >>=20 >> Internet-Drafts are also available by anonymous FTP at: >> ftp://ftp.ietf.org/internet-drafts/ >>=20 >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose >=20 From nobody Sun Nov 3 09:22:44 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DF3BF12008C; Sun, 3 Nov 2019 09:22:42 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157280176283.13465.3971289063256702978@ietfa.amsl.com> Date: Sun, 03 Nov 2019 09:22:42 -0800 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-hash-sig-07.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Nov 2019 17:22:43 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : Use of the HSS/LMS Hash-based Signature Algorithm with CBOR Object Signing and Encryption (COSE) Author : Russ Housley Filename : draft-ietf-cose-hash-sig-07.txt Pages : 15 Date : 2019-11-03 Abstract: This document specifies the conventions for using the Hierarchical Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is one form of hash-based digital signature; it is described in RFC 8554. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-hash-sig-07 https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig-07 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-hash-sig-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Nov 3 09:25:30 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05B57120025 for ; Sun, 3 Nov 2019 09:25:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LpZKNeg8JFcA for ; Sun, 3 Nov 2019 09:25:25 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A69E120018 for ; Sun, 3 Nov 2019 09:25:25 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id AF001300B1A for ; Sun, 3 Nov 2019 12:25:23 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 1_tyLg4vsVuR for ; Sun, 3 Nov 2019 12:25:22 -0500 (EST) Received: from [5.5.33.50] (unknown [204.194.23.17]) by mail.smeinc.net (Postfix) with ESMTPSA id 2A471300460 for ; Sun, 3 Nov 2019 12:25:22 -0500 (EST) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sun, 3 Nov 2019 12:25:22 -0500 References: <157280176316.13465.6456514164761529785.idtracker@ietfa.amsl.com> To: cose In-Reply-To: <157280176316.13465.6456514164761529785.idtracker@ietfa.amsl.com> Message-Id: X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [COSE] New Version Notification for draft-ietf-cose-hash-sig-07.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Nov 2019 17:25:28 -0000 Fixed the COSE_Sign0; it is now correctly COSE_Sign1. Russ > On Nov 3, 2019, at 12:22 PM, internet-drafts@ietf.org wrote: >=20 >=20 > A new version of I-D, draft-ietf-cose-hash-sig-07.txt > has been successfully submitted by Russ Housley and posted to the > IETF repository. >=20 > Name: draft-ietf-cose-hash-sig > Revision: 07 > Title: Use of the HSS/LMS Hash-based Signature = Algorithm with CBOR Object Signing and Encryption (COSE) > Document date: 2019-11-03 > Group: cose > Pages: 15 > URL: = https://www.ietf.org/internet-drafts/draft-ietf-cose-hash-sig-07.txt > Status: = https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ > Htmlized: = https://tools.ietf.org/html/draft-ietf-cose-hash-sig-07 > Htmlized: = https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig > Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-hash-sig-07 >=20 > Abstract: > This document specifies the conventions for using the Hierarchical > Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based > signature algorithm with the CBOR Object Signing and Encryption > (COSE) syntax. The HSS/LMS algorithm is one form of hash-based > digital signature; it is described in RFC 8554. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 From nobody Mon Nov 4 01:41:57 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BED2C12002E; Mon, 4 Nov 2019 01:41:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c1RgB9uDWkAM; Mon, 4 Nov 2019 01:41:49 -0800 (PST) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-he1eur02on0602.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe05::602]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94D3A120997; Mon, 4 Nov 2019 01:41:46 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=bAzuAS5dc++pF+urtrvjWpWFc7TsNCZnCVp5bW0Ysk5S04dZhzLs422MrDX09emIAmyTocNTTOi9iwYx6TltoEQco5fkUKK+AdO8j0RJpfAGO71OwHhMwyNA4mXnzHpxfLzOxSFVuIdG6jnp/zmlW3L4xVcvYaGYgLPOBueTTgwQpoicdDH+LNVM8XfASjG6unGoPTpBDMPM8ozvRXLk1kga9aXsdjZUzChHz+PjsND5iynAXgrW+pJ+AtyUm6qYl90+yphxoAuRFPa1Nn53/iPdY2brBYHw2sZBY6JytbUaiZfjsufOlYsaM8YOcZFceebcqo/jvJM0vvQqQpeFgA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TB0IlH6riqGBc57n+v4c/0Ef8OQuNHXHGdTZKreu6sc=; b=kIhcrvqNcOQvzan9NpGdbqjuOEW05govQGsD28nJ7LUWOUVACYdeo32J+0WnHlqX8gDagMSrJa+kWVJ6jToqNQHVQ87WGAeTPUUqrtBPDfN6AjUGl6tNzpFWu+UCbZAKfZ2Do1QaKz7Wbaaz6AauPk2ZUBy/0SufWGMeQ2aeRRzJbrCUnf085WoJKOv/g39FKecM3NPbGIl2erQo6AVlrAdrkVOGXaMnj6J5h/QgKa2AjB9gfH5M1tl7h0cX3ruE21B2rV9tyJU4Vm0jtU3hpG2Q6NbW7npEY4WS1JYnC5hgq6okdCZJh0A6e/TJzl3wdNPttCVQhwmRJ6iGz0AApA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TB0IlH6riqGBc57n+v4c/0Ef8OQuNHXHGdTZKreu6sc=; b=Hdl5j4J7Vvgem9cOlEomJz+xdZUztWxsU4iVa5+qTbZo0dOjMGjOM47H3RF9WxR1snpfSb39TXljSzfycFMFxZ6lsTZh6/CYEXqEVXFy23ztklsBo2kZtkVayDLFU3iH82YRUtrM7Ak9yJGsabRxiueBDqPCDHCgcv9JwkrjjFI= Received: from VI1PR07MB5469.eurprd07.prod.outlook.com (20.178.14.214) by VI1PR07MB4509.eurprd07.prod.outlook.com (20.177.56.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.16; Mon, 4 Nov 2019 09:41:41 +0000 Received: from VI1PR07MB5469.eurprd07.prod.outlook.com ([fe80::a8d5:a784:a19:5c76]) by VI1PR07MB5469.eurprd07.prod.outlook.com ([fe80::a8d5:a784:a19:5c76%6]) with mapi id 15.20.2430.013; Mon, 4 Nov 2019 09:41:41 +0000 From: Francesca Palombini To: ivaylo petrov , Jim Schaad CC: Cose Chairs Wg , Cose Wg Thread-Topic: [COSE] IANA registry for COSE Alg parameter Thread-Index: AQHVaVGLEK2oeq3ztU6tQ4hjbOEVQKcvhaKAgAAjeoD///jigIAvjEoAgBv394A= Date: Mon, 4 Nov 2019 09:41:41 +0000 Message-ID: <878D3D57-9E3A-420F-AAA3-C7B87DE81E2B@ericsson.com> References: <60C612D1-ADE5-488E-A9CD-3DF7F6260C44@ericsson.com> <9da7b8fcd8030e58fe85547f96efb852@bbhmail.nl> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=francesca.palombini@ericsson.com; x-originating-ip: [192.176.1.84] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d620ba3a-fedc-4639-f627-08d7610b32a1 x-ms-traffictypediagnostic: VI1PR07MB4509: x-ms-exchange-purlcount: 5 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0211965D06 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(346002)(39860400002)(376002)(396003)(136003)(189003)(199004)(110136005)(25786009)(66446008)(3846002)(6116002)(14454004)(81166006)(81156014)(8676002)(2616005)(476003)(14444005)(76176011)(256004)(66066001)(5660300002)(316002)(11346002)(8936002)(236005)(102836004)(6486002)(229853002)(446003)(86362001)(54906003)(6512007)(606006)(6306002)(54896002)(6246003)(66476007)(66556008)(966005)(64756008)(99286004)(66946007)(36756003)(91956017)(26005)(7736002)(53546011)(4326008)(33656002)(2906002)(9326002)(76116006)(71190400001)(486006)(71200400001)(44832011)(6506007)(6436002)(186003)(478600001)(574754004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB4509; H:VI1PR07MB5469.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: /Ge0G4NHbVLXBCTGb5P6h+ufUSrn/DhfyjzsrKdGoDM6p2otauZk4nfevoxIC1VV30HoRt4SDYuFiIVpKuoJOWL0+mjr2DhSQKLVE9DmPTyfLWeC0+c1RDTL5hqKGyDwikTCu9WWr3mV4M9w0f67oEUmbxFu6PBQR5FTY++lCt/A1eD4Z6RHtJ6zu2qZjBNVPjSaEI5i5IdeeGsI6VmYJJiFl1LeGrdPqCCLKMj1j71xaE/Xy192WpGwPMx6yJ+q7f9dtMi7DmHRyidP6qxD/gFgkBK8XRDaqzVqLMG1El03LgSS4JeywiXZX1Np8rYAJ4tKGaHyMIBvrc3lXi6fh8XhLfYZu9do9+D7ZVCKaTvTy4CPfuX5kdE5O+Rlwt0S+SCd157WysykE4GmeurbPD2okoSw6lRfGww6EELeGhLr+SZ5Ky9TD5yp965rSvbBoJN/EcivyzH5xsXiBGGl/4GFuAJYc331zlwqNe/QUbs= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_878D3D579E3A420FAAA3C7B87DE81E2Bericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: d620ba3a-fedc-4639-f627-08d7610b32a1 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2019 09:41:41.6575 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: uer7g7cDTBhJXj4+NQg/ciVqgF4wxT/2rzbht2Qd7OdXfmb2Wf7dytXAvTor2yR4VFnToANUkqV8XPFPweI8TnV79jjo18C6XRX5MMc3f5TcJKOabkyrb9iy1qhQyy8A X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB4509 Archived-At: Subject: Re: [COSE] IANA registry for COSE Alg parameter X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 09:41:55 -0000 --_000_878D3D579E3A420FAAA3C7B87DE81E2Bericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSXZvLA0KDQpUaGFua3MgZm9yIHlvdXIgYW5zd2VyLg0KDQpTaW5jZSB3ZSBoYXZlbuKAmXQg c2VlbiBhbnl0aGluZyBoYXBwZW4gaW4gdGhlIGdpdGh1YiBmb3IgdGhpcyBzdWJtaXNzaW9uIGRl YWRsaW5lLCB3ZSBhcmUga2VlcGluZyB0aGlzIHJlZ2lzdHJ5IGluIHRoZSBDb1JFIGRyYWZ0IGZv ciBub3cgKHNpbmNlIHdlIGNhbuKAmXQgcmVmZXJlbmNlIHRoZSByZWdpc3RyeSBpbiB0aGUgQ09T RSBkb2MpLCBidXQgd2UgaG9wZSB0aGlzIGNhbiBiZSBhZGRlZCB0byBDT1NFIGJ5IFNpbmdhcG9y ZS4gSWYgSmltIGFkZHMgdGhpcyBiZWZvcmUgc3VibWlzc2lvbiBkZWFkbGluZSwgYW5kIGJlZm9y ZSB3ZSBzdWJtaXQgdGhlIENvUkUgZHJhZnQsIHdl4oCZbGwgcmVmZXJlbmNlIGl0Lg0KDQpUaGFu a3MsDQpGcmFuY2VzY2ENCg0KDQoNCkZyb206IGl2YXlsbyBwZXRyb3YgPGl2YXlsb0BhY2tsLmlv Pg0KRGF0ZTogVGh1cnNkYXksIDE3IE9jdG9iZXIgMjAxOSBhdCAxNzozNQ0KVG86IEZyYW5jZXNj YSBQYWxvbWJpbmkgPGZyYW5jZXNjYS5wYWxvbWJpbmlAZXJpY3Nzb24uY29tPiwgSmltIFNjaGFh ZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4NCkNjOiAiY29uc3VsdGFuY3lAdmFuZGVyc3Rvay5v cmciIDxjb25zdWx0YW5jeUB2YW5kZXJzdG9rLm9yZz4sIENvc2UgQ2hhaXJzIFdnIDxjb3NlLWNo YWlyc0BpZXRmLm9yZz4sIENvc2UgV2cgPGNvc2VAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0NP U0VdIElBTkEgcmVnaXN0cnkgZm9yIENPU0UgQWxnIHBhcmFtZXRlcg0KDQpIZWxsbyBGcmFuY2Vz Y2EsIEppbSwgYWxsDQoNClNvcnJ5IGZvciB0aGUgZGVsYXkhIFdlIGRpc2N1c3NlZCB3aXRoIE1h dHRoZXcgYW5kIGZvciB1cyBpdCBzZWVtcyB0aGF0IHRoZSBiZXN0IG9wdGlvbiBpcyB0byBpbmNs dWRlIHRoZSBjcmVhdGlvbiBvZiB0aGlzIHJlZ2lzdHJ5IGluIGRyYWZ0LWlldGYtY29zZS1yZmM4 MTUyYmlzLWFsZ3MgYXMgeW91IHN1Z2dlc3RlZCBpZiBKaW0gaXMgZmluZSB3aXRoIHRoYXQuIFdl IGNvbnNpZGVyIHRoYXQgdGhpcyB3aWxsIGJlIG1vcmUgY29udmVuaWVudCBmb3IgaW1wbGVtZW50 ZXJzIGFuZCBtb3JlIGxvZ2ljYWwgYXMgYSBzdHJ1Y3R1cmUuDQoNCkppbSwgYW5kIGV2ZXJ5b25l IGVsc2UsIHBsZWFzZSBsZXQgdXMga25vdyBhcyBzb29uIGFzIHBvc3NpYmxlIGlmIHlvdSBoYXZl IGFueSBjb25jZXJucyByZWdhcmRpbmcgdGhpcy4gSWYgbm90LCBKaW0sIHBsZWFzZSB1cGRhdGUg ZHJhZnQtaWV0Zi1jb3NlLXJmYzgxNTJiaXMtYWxncyB3aXRoIHRoaXMgY2hhbmdlLCBzbyB0aGF0 IHdlIGNhbiBtb3ZlIGZvcndhcmQuDQoNCkJlc3QgcmVnYXJkcywNCi0gTWF0dGhldyBhbmQgSXZh eWxvDQpDT1NFIENoYWlycw0KDQoNCk9uIFR1ZSwgU2VwIDE3LCAyMDE5IGF0IDExOjI4IEFNIFBl dGVyIHZhbiBkZXIgU3RvayA8c3Rva2NvbnNAYmJobWFpbC5ubDxtYWlsdG86c3Rva2NvbnNAYmJo bWFpbC5ubD4+IHdyb3RlOg0KSGkgRnJhbmNlc2NhLA0KDQpBcyBsb25nIGFzIEkgY2FuIGZpbmQg dGhlIGRlZmluaXRpb25zIGluIHRoZSBDT1NFIElBTkEgcmVnaXN0cnksIEkgYW0gaGFwcHkuDQpU aGUgcmVnaXN0cnkgcG9pbnRzIHRvIHRoZSBvcmlnaW5hbCBwdWJsaXNoaW5nIGRvY3VtZW50Lg0K SSBkb24ndCByZWFsbHkgc2VlIHRoZSBhZGRlZCB2YWx1ZSBvZiBkZWZpbmluZyB0aGVtIGVsc2V3 aGVyZSB0aGFuIGluIHRoZSBkb2N1bWVudCB0aGF0IGZpcnN0IG5lZWRzIHRoZW0uDQpVbmxlc3Mg eW91IHByb3Bvc2UgYSBjaGFuZ2UgdG8gdGhlIG90aGVyIHJlZ2lzdHJpZXMsIHRoYXQgSSBkaWQg bm90IHNlZS4NCg0KUGV0ZXINCg0KDQpGcmFuY2VzY2EgUGFsb21iaW5pIHNjaHJlZWYgb3AgMjAx OS0wOS0xNyAwOTo1NDoNCkhpIFBldGVyLA0KDQpUaGFuayB5b3UgZm9yIHlvdXIgY29tbWVudC4g WWVzLCB0aGF0IGlzIG5vdCBzcGVjaWZpZWQgaW4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtY29yZS1vc2NvcmUtZ3JvdXBjb21tLTA1I3NlY3Rpb24tOS4xIHJpZ2h0IG5v dywgYnV0IHdlIHdlcmUgcGxhbm5pbmcgb24gaGF2aW5nIHRoaXMgbmV3IHJlZ2lzdGVyIGluIHRo ZSBDT1NFIElBTkEgcGFnZSAoaW5kZXBlbmRlbnRseSBvZiB3aGVyZSB0aGlzIHJlZ2lzdHJ5IGlz IGRlZmluZWQpLg0KDQpUaGUgcXVlc3Rpb24gd2UgaGF2ZSBpczogd2hhdCBkb2N1bWVudCBzaG91 bGQgZGVmaW5lIHRoaXMgcmVnaXN0cnkuIEkgdGhpbmsgYSBDT1NFIHdnIGRvY3VtZW50LCBhbmQg cG9zc2libHkgZHJhZnQtaWV0Zi1jb3NlLXJmYzgxNTJiaXMtYWxncywgd291bGQgbWFrZSBtb3Jl IHNlbnNlLiBDaGFpcnMsIGNvdWxkIHlvdSBjb25zaWRlciB0aGlzIHBvaW50IGJlZm9yZSByZXF1 ZXN0aW5nIHB1YmxpY2F0aW9uPw0KDQpMb29raW5nIGZvcndhcmQgdG8gbW9yZSBvcGluaW9ucy4N CkZyYW5jZXNjYQ0KDQpGcm9tOiBQZXRlciB2YW4gZGVyIFN0b2sgPHN0b2tjb25zQGJiaG1haWwu bmw8bWFpbHRvOnN0b2tjb25zQGJiaG1haWwubmw+Pg0KT3JnYW5pc2F0aW9uOiB2YW5kZXJzdG9r IGNvbnN1bHRhbmN5DQpSZXBseSB0bzogImNvbnN1bHRhbmN5QHZhbmRlcnN0b2sub3JnPG1haWx0 bzpjb25zdWx0YW5jeUB2YW5kZXJzdG9rLm9yZz4iIDxjb25zdWx0YW5jeUB2YW5kZXJzdG9rLm9y ZzxtYWlsdG86Y29uc3VsdGFuY3lAdmFuZGVyc3Rvay5vcmc+Pg0KRGF0ZTogVHVlc2RheSwgMTcg U2VwdGVtYmVyIDIwMTkgYXQgMDk6NDcNClRvOiBGcmFuY2VzY2EgUGFsb21iaW5pIDxmcmFuY2Vz Y2EucGFsb21iaW5pQGVyaWNzc29uLmNvbTxtYWlsdG86ZnJhbmNlc2NhLnBhbG9tYmluaUBlcmlj c3Nvbi5jb20+Pg0KQ2M6IENvc2UgV2cgPGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VAaWV0Zi5v cmc+PiwgSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1 c3RjZWxsYXJzLmNvbT4+DQpTdWJqZWN0OiBSZTogW0NPU0VdIElBTkEgcmVnaXN0cnkgZm9yIENP U0UgQWxnIHBhcmFtZXRlcg0KDQpISSBGcmFuY2VzY2EsDQoNCnRoYW5rcyBmb3IgcmFpc2luZyB0 aGUgc3ViamVjdCBvZiByZWdzaXRyYXRpb24uDQoNCkZvciB0aGUgbW9tZW50IEkgYW0gaGFwcHkg dG8gZmluZCBhbGwgQ09TRSByZWxhdGVkIHZhbHVlcyBpbiBodHRwczovL3d3dy5pYW5hLm9yZy9h c3NpZ25tZW50cy9jb3NlL2Nvc2UueGh0bWwuPGh0dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1l bnRzL2Nvc2UvY29zZS54aHRtbD4NCk15IGhvcGUgaXMgdGhhdCBhbGwgZnV0dXJlIENPU0UgcmVn aXN0cmllcyBjYW4gYWxsIGJlIGZvdW5kIGF0IHRoaXMgc2FtZSBwYWdlLg0KDQpHcmVldGluZ3Ms DQoNClBldGVyDQoNCg0KRnJhbmNlc2NhIFBhbG9tYmluaSBzY2hyZWVmIG9wIDIwMTktMDktMTIg MTI6MDU6DQpIaSwNCg0KRm9sbG93aW5nIHVwIG9uIGEgZGlzY3Vzc2lvbiB3aXRoIEppbSBhdCBJ RVRGMTA1LCBhbmQgZGlzY3Vzc2lvbiB3aXRoIG15IGNvLWF1dGhvcnM6IGJvdGggRURIT0MgKGh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1zZWxhbmRlci1hY2UtY29zZS1lY2RoZS0x NCApIGFuZCBPU0NPUkUgR3JvdXBjb21tIChodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtaWV0Zi1jb3JlLW9zY29yZS1ncm91cGNvbW0tMDUgKSB3b3VsZCBiZW5lZml0IGZyb20gYSBz dGFuZGFyZGl6ZWQgd2F5IG9mIGdldHRpbmcgdGhlIENCT1IgZm9ybWF0IChhbmQgb3B0aW9uYWxs eSBwb3NzaWJsZSB2YWx1ZXMpIG9mIHRoZSBwYXJhbWV0ZXJzIGFzc29jaWF0ZWQgdG8gYSBDT1NF IEFsZ29yaXRobS4gQ09TRSBkb2VzIG5vdCBjdXJyZW50bHkgc3BlY2lmeSB0aGF0LCBpdCBkb2Vz IGhhdmUgc29tZSBvZiB0aGlzIGluZm8gZm9yIENPU0UgS2V5IChkZXBlbmRpbmcgb24gdGhlIGtl eSB0eXBlKSwgYnV0IHdlIHdvdWxkIHJlYWxseSByYXRoZXIgaGF2ZSBhIHNpbXBsZSB3YXkgdG8g Z2V0IHRoYXQgaW5mb3JtYXRpb24gZnJvbSB0aGUgYWxnb3JpdGhtIGRpcmVjdGx5LiBUaGF0IG1l YW5zIGZvciBleGFtcGxlLCBzcGVjaWZ5IHRoZSBDQk9SIGVuY29kaW5nIG9mIHRoZSBwYXJhbWV0 ZXIgImN1cnZlIiBmb3IgIEVkRFNBLg0KDQpBcyB3ZSBmaXJzdCBuZWVkZWQgaXQgaW4gT1NDT1JF IEdyb3VwY29tbSwgd2UgaGF2ZSBzb21lIHByb3Bvc2VkIHRleHQgZm9yIGEgSUFOQSByZWdpc3Ry eSB0aGF0IGNvdWxkIGJlIHVzZWQ6IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1p ZXRmLWNvcmUtb3Njb3JlLWdyb3VwY29tbS0wNSNzZWN0aW9uLTkuMSAuIFNpbmNlIHRoaXMgaXMg bW9yZSBnZW5lcmFsIGFuZCB3ZSBuZWVkIHRoaXMgaW4gb3RoZXIgZG9jdW1lbnRzIGFzIHdlbGwg KEVESE9DKSwgd2UgdGhpbmsgaXQgd291bGQgbWFrZSBtb3JlIHNlbnNlIHRvIGFkZCB0aGlzIHRv IG9uZSBvZiB0aGUgZXhpc3RpbmcgQ09TRSBzcGVjaWZpY2F0aW9ucyAoZHJhZnQtaWV0Zi1jb3Nl LXJmYzgxNTJiaXMtYWxncz8pIG9yIGRyYWZ0IGEgbmV3IENPU0UgZG9jdW1lbnQgY292ZXJpbmcg dGhpcy4NCg0KV2Ugd291bGQgYXNrIHRoZSBXRyB0byBjb25zaWRlciBhZGRpbmcgc3VjaCBhbiBJ QU5BIHJlZ2lzdHJ5LCBhbmQgd291bGQgbGlrZSB5b3VyIG9waW5pb24gb24gd2hlcmUgYmV0dGVy IHRvIGhhdmUgdGhpcy4NCg0KVGhhbmtzLA0KRnJhbmNlc2NhDQoNCg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkNPU0UgbWFpbGluZyBsaXN0DQpDT1NF QGlldGYub3JnPG1haWx0bzpDT1NFQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9jb3NlDQo= --_000_878D3D579E3A420FAAA3C7B87DE81E2Bericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <1602AF634D1C9647942DD01A8CA00868@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlZlcmRhbmE7 DQoJcGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBj bTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21z by1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJn aW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0 OjBjbTsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7 fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1z aXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7 DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24x DQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5n PSJFTi1HQiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2Vj dGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxh bmd1YWdlOkVOLVVTIj5IaSBJdm8sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPlRoYW5rcyBmb3IgeW91ciBhbnN3ZXIuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMi PlNpbmNlIHdlIGhhdmVu4oCZdCBzZWVuIGFueXRoaW5nIGhhcHBlbiBpbiB0aGUgZ2l0aHViIGZv ciB0aGlzIHN1Ym1pc3Npb24gZGVhZGxpbmUsIHdlIGFyZSBrZWVwaW5nIHRoaXMgcmVnaXN0cnkg aW4gdGhlIENvUkUgZHJhZnQgZm9yIG5vdyAoc2luY2Ugd2UgY2Fu4oCZdCByZWZlcmVuY2UgdGhl IHJlZ2lzdHJ5IGluIHRoZSBDT1NFIGRvYyksIGJ1dA0KIHdlIGhvcGUgdGhpcyBjYW4gYmUgYWRk ZWQgdG8gQ09TRSBieSBTaW5nYXBvcmUuIElmIEppbSBhZGRzIHRoaXMgYmVmb3JlIHN1Ym1pc3Np b24gZGVhZGxpbmUsIGFuZCBiZWZvcmUgd2Ugc3VibWl0IHRoZSBDb1JFIGRyYWZ0LCB3ZeKAmWxs IHJlZmVyZW5jZSBpdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+VGhhbmtzLDxicj4NCkZyYW5jZXNjYTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1s YW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtw YWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5pdmF5bG8gcGV0cm92ICZs dDtpdmF5bG9AYWNrbC5pbyZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+VGh1cnNkYXksIDE3IE9jdG9i ZXIgMjAxOSBhdCAxNzozNTxicj4NCjxiPlRvOiA8L2I+RnJhbmNlc2NhIFBhbG9tYmluaSAmbHQ7 ZnJhbmNlc2NhLnBhbG9tYmluaUBlcmljc3Nvbi5jb20mZ3Q7LCBKaW0gU2NoYWFkICZsdDtpZXRm QGF1Z3VzdGNlbGxhcnMuY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+JnF1b3Q7Y29uc3VsdGFuY3lA dmFuZGVyc3Rvay5vcmcmcXVvdDsgJmx0O2NvbnN1bHRhbmN5QHZhbmRlcnN0b2sub3JnJmd0Oywg Q29zZSBDaGFpcnMgV2cgJmx0O2Nvc2UtY2hhaXJzQGlldGYub3JnJmd0OywgQ29zZSBXZyAmbHQ7 Y29zZUBpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtDT1NFXSBJQU5BIHJl Z2lzdHJ5IGZvciBDT1NFIEFsZyBwYXJhbWV0ZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwQjUzOTQiPkhl bGxvIEZyYW5jZXNjYSwgSmltLCBhbGw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwQjUzOTQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzBC NTM5NCI+U29ycnkgZm9yIHRoZSBkZWxheSEgV2UgZGlzY3Vzc2VkIHdpdGgmbmJzcDtNYXR0aGV3 IGFuZCBmb3IgdXMgaXQgc2VlbXMgdGhhdCB0aGUgYmVzdCBvcHRpb24gaXMgdG8gaW5jbHVkZSB0 aGUgY3JlYXRpb24gb2YgdGhpcyByZWdpc3RyeSBpbiZuYnNwO2RyYWZ0LWlldGYtY29zZS1yZmM4 MTUyYmlzLWFsZ3MgYXMgeW91IHN1Z2dlc3RlZA0KIGlmIEppbSBpcyBmaW5lIHdpdGggdGhhdC4g V2UgY29uc2lkZXIgdGhhdCB0aGlzIHdpbGwgYmUgbW9yZSBjb252ZW5pZW50IGZvciBpbXBsZW1l bnRlcnMgYW5kIG1vcmUgbG9naWNhbCBhcyBhIHN0cnVjdHVyZS4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwQjUz OTQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzBCNTM5NCI+SmltLCBhbmQgZXZlcnlvbmUgZWxzZSwgcGxlYXNl IGxldCB1cyBrbm93IGFzIHNvb24gYXMgcG9zc2libGUgaWYgeW91IGhhdmUgYW55IGNvbmNlcm5z IHJlZ2FyZGluZyB0aGlzLiBJZiBub3QsIEppbSwgcGxlYXNlIHVwZGF0ZSZuYnNwO2RyYWZ0LWll dGYtY29zZS1yZmM4MTUyYmlzLWFsZ3Mgd2l0aCB0aGlzIGNoYW5nZSwNCiBzbyB0aGF0IHdlIGNh biBtb3ZlJm5ic3A7Zm9yd2FyZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVy ZGFuYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwQjUzOTQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzBCNTM5 NCI+QmVzdCByZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5h JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzBCNTM5NCI+LSBNYXR0aGV3IGFuZCBJdmF5bG88YnI+ DQpDT1NFIENoYWlyczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5PbiBUdWUsIFNlcCAxNywgMjAxOSBhdCAxMToyOCBBTSBQZXRlciB2YW4gZGVyIFN0b2sg Jmx0OzxhIGhyZWY9Im1haWx0bzpzdG9rY29uc0BiYmhtYWlsLm5sIiB0YXJnZXQ9Il9ibGFuayI+ c3Rva2NvbnNAYmJobWFpbC5ubDwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0ND QyAxLjBwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdp bi1yaWdodDowY20iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJp ZiI+SGkgRnJhbmNlc2NhLDxicj4NCjxicj4NCkFzIGxvbmcgYXMgSSBjYW4gZmluZCB0aGUgZGVm aW5pdGlvbnMgaW4gdGhlIENPU0UgSUFOQSByZWdpc3RyeSwgSSBhbSBoYXBweS48YnI+DQpUaGUg cmVnaXN0cnkgcG9pbnRzIHRvIHRoZSBvcmlnaW5hbCBwdWJsaXNoaW5nIGRvY3VtZW50Ljxicj4N CkkgZG9uJ3QgcmVhbGx5IHNlZSB0aGUgYWRkZWQgdmFsdWUgb2YgZGVmaW5pbmcgdGhlbSBlbHNl d2hlcmUgdGhhbiBpbiB0aGUgZG9jdW1lbnQgdGhhdCBmaXJzdCBuZWVkcyB0aGVtLjxicj4NClVu bGVzcyB5b3UgcHJvcG9zZSBhIGNoYW5nZSB0byB0aGUgb3RoZXIgcmVnaXN0cmllcywgdGhhdCBJ IGRpZCBub3Qgc2VlLjxicj4NCjxicj4NClBldGVyPGJyPg0KPGJyPg0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHA+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj5GcmFuY2VzY2EgUGFsb21iaW5pIHNjaHJlZWYg b3AgMjAxOS0wOS0xNyAwOTo1NDo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzEwMTBGRiAxLjVwdDtwYWRkaW5n OjBjbSAwY20gMGNtIDUuMHB0O21hcmdpbi1sZWZ0OjBjbTttYXJnaW4tcmlnaHQ6MGNtIj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYiPkhpIFBldGVyLDwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2Vy aWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7 PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Zl cmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90 OyxzYW5zLXNlcmlmIj5UaGFuayB5b3UgZm9yIHlvdXIgY29tbWVudC4gWWVzLCB0aGF0IGlzIG5v dCBzcGVjaWZpZWQgaW4NCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1pZXRmLWNvcmUtb3Njb3JlLWdyb3VwY29tbS0wNSNzZWN0aW9uLTkuMSIgdGFyZ2V0PSJfYmxh bmsiPg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1vc2NvcmUt Z3JvdXBjb21tLTA1I3NlY3Rpb24tOS4xPC9hPiByaWdodCBub3csIGJ1dCB3ZSB3ZXJlIHBsYW5u aW5nIG9uIGhhdmluZyB0aGlzIG5ldyByZWdpc3RlciBpbiB0aGUgQ09TRSBJQU5BIHBhZ2UgKGlu ZGVwZW5kZW50bHkgb2Ygd2hlcmUgdGhpcyByZWdpc3RyeSBpcyBkZWZpbmVkKS48L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90 OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2Vy aWYiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1Zl cmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+VGhlIHF1ZXN0aW9uIHdlIGhhdmUgaXM6IHdoYXQgZG9j dW1lbnQgc2hvdWxkIGRlZmluZSB0aGlzIHJlZ2lzdHJ5LiBJIHRoaW5rIGEgQ09TRSB3ZyBkb2N1 bWVudCwgYW5kIHBvc3NpYmx5IGRyYWZ0LWlldGYtY29zZS1yZmM4MTUyYmlzLWFsZ3MsDQogd291 bGQgbWFrZSBtb3JlIHNlbnNlLiBDaGFpcnMsIGNvdWxkIHlvdSBjb25zaWRlciB0aGlzIHBvaW50 IGJlZm9yZSByZXF1ZXN0aW5nIHB1YmxpY2F0aW9uPzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEm cXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5z LXNlcmlmIj5Mb29raW5nIGZvcndhcmQgdG8gbW9yZSBvcGluaW9ucy4NCjwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNh bnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+ RnJhbmNlc2NhPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVy ZGFuYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNv bGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5Gcm9tOg0K PC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+UGV0ZXIgdmFuIGRl ciBTdG9rICZsdDs8YSBocmVmPSJtYWlsdG86c3Rva2NvbnNAYmJobWFpbC5ubCIgdGFyZ2V0PSJf YmxhbmsiPnN0b2tjb25zQGJiaG1haWwubmw8L2E+Jmd0Ozxicj4NCjxzdHJvbmc+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+T3JnYW5pc2F0 aW9uOiA8L3NwYW4+PC9zdHJvbmc+dmFuZGVyc3RvayBjb25zdWx0YW5jeTxicj4NCjxzdHJvbmc+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+ UmVwbHkgdG86IDwvc3Bhbj48L3N0cm9uZz4mcXVvdDs8YSBocmVmPSJtYWlsdG86Y29uc3VsdGFu Y3lAdmFuZGVyc3Rvay5vcmciIHRhcmdldD0iX2JsYW5rIj5jb25zdWx0YW5jeUB2YW5kZXJzdG9r Lm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpjb25zdWx0YW5jeUB2YW5kZXJzdG9r Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmNvbnN1bHRhbmN5QHZhbmRlcnN0b2sub3JnPC9hPiZndDs8 YnI+DQo8c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7 LHNhbnMtc2VyaWYiPkRhdGU6IDwvc3Bhbj48L3N0cm9uZz5UdWVzZGF5LCAxNyBTZXB0ZW1iZXIg MjAxOSBhdCAwOTo0Nzxicj4NCjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+VG86IDwvc3Bhbj48L3N0cm9uZz5GcmFuY2VzY2Eg UGFsb21iaW5pICZsdDs8YSBocmVmPSJtYWlsdG86ZnJhbmNlc2NhLnBhbG9tYmluaUBlcmljc3Nv bi5jb20iIHRhcmdldD0iX2JsYW5rIj5mcmFuY2VzY2EucGFsb21iaW5pQGVyaWNzc29uLmNvbTwv YT4mZ3Q7PGJyPg0KPHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFu YSZxdW90OyxzYW5zLXNlcmlmIj5DYzogPC9zcGFuPjwvc3Ryb25nPkNvc2UgV2cgJmx0OzxhIGhy ZWY9Im1haWx0bzpjb3NlQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+Y29zZUBpZXRmLm9yZzwv YT4mZ3Q7LCBKaW0gU2NoYWFkICZsdDs8YSBocmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJz LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0Ozxicj4N CjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fu cy1zZXJpZiI+U3ViamVjdDogPC9zcGFuPjwvc3Ryb25nPlJlOiBbQ09TRV0gSUFOQSByZWdpc3Ry eSBmb3IgQ09TRSBBbGcgcGFyYW1ldGVyPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj4mbmJz cDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJn aW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj5ISSBGcmFuY2VzY2EsPGJyPg0KPGJy Pg0KdGhhbmtzIGZvciByYWlzaW5nIHRoZSBzdWJqZWN0IG9mIHJlZ3NpdHJhdGlvbi48YnI+DQo8 YnI+DQpGb3IgdGhlIG1vbWVudCBJIGFtIGhhcHB5IHRvIGZpbmQgYWxsIENPU0UgcmVsYXRlZCB2 YWx1ZXMgaW4mbmJzcDs8YSBocmVmPSJodHRwczovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50cy9j b3NlL2Nvc2UueGh0bWwiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pYW5hLm9yZy9hc3Np Z25tZW50cy9jb3NlL2Nvc2UueGh0bWwuPC9hPjxicj4NCk15IGhvcGUgaXMgdGhhdCBhbGwgZnV0 dXJlIENPU0UgcmVnaXN0cmllcyBjYW4gYWxsIGJlIGZvdW5kIGF0IHRoaXMgc2FtZSBwYWdlLjxi cj4NCjxicj4NCkdyZWV0aW5ncyw8YnI+DQo8YnI+DQpQZXRlcjxicj4NCjxicj4NCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+RnJhbmNlc2NhIFBhbG9tYmluaSBz Y2hyZWVmIG9wIDIwMTktMDktMTIgMTI6MDU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2Nr cXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICMxMDEwRkYgMS41cHQ7 cGFkZGluZzowY20gMGNtIDBjbSA1LjBwdDttYXJnaW4tbGVmdDowY207bWFyZ2luLXRvcDo1LjBw dDttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOmJsYWNrIj5IaSw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNwOzwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtWZXJk YW5hJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjpibGFjayI+Rm9sbG93aW5nIHVwIG9uIGEgZGlzY3Vzc2lvbiB3aXRo IEppbSBhdCBJRVRGMTA1LCBhbmQgZGlzY3Vzc2lvbiB3aXRoIG15IGNvLWF1dGhvcnM6IGJvdGgg RURIT0MgKDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1zZWxhbmRl ci1hY2UtY29zZS1lY2RoZS0xNCIgdGFyZ2V0PSJfYmxhbmsiIHRpdGxlPSJodHRwczovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtc2VsYW5kZXItYWNlLWNvc2UtZWNkaGUtMTQiPjxzcGFuIHN0 eWxlPSJjb2xvcjojOTU0RjcyIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtc2Vs YW5kZXItYWNlLWNvc2UtZWNkaGUtMTQ8L3NwYW4+PC9hPiZuYnNwOykNCiBhbmQgT1NDT1JFIEdy b3VwY29tbSAoPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYt Y29yZS1vc2NvcmUtZ3JvdXBjb21tLTA1IiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNv bG9yOiM5NTRGNzIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUt b3Njb3JlLWdyb3VwY29tbS0wNTwvc3Bhbj48L2E+Jm5ic3A7KSB3b3VsZCBiZW5lZml0IGZyb20g YSBzdGFuZGFyZGl6ZWQgd2F5IG9mDQogZ2V0dGluZyB0aGUgQ0JPUiBmb3JtYXQgKGFuZCBvcHRp b25hbGx5IHBvc3NpYmxlIHZhbHVlcykgb2YgdGhlIHBhcmFtZXRlcnMgYXNzb2NpYXRlZCB0byBh IENPU0UgQWxnb3JpdGhtLiBDT1NFIGRvZXMgbm90IGN1cnJlbnRseSBzcGVjaWZ5IHRoYXQsIGl0 IGRvZXMgaGF2ZSBzb21lIG9mIHRoaXMgaW5mbyBmb3IgQ09TRSBLZXkgKGRlcGVuZGluZyBvbiB0 aGUga2V5IHR5cGUpLCBidXQgd2Ugd291bGQgcmVhbGx5IHJhdGhlciBoYXZlIGEgc2ltcGxlDQog d2F5IHRvIGdldCB0aGF0IGluZm9ybWF0aW9uIGZyb20gdGhlIGFsZ29yaXRobSBkaXJlY3RseS4g VGhhdCBtZWFucyBmb3IgZXhhbXBsZSwgc3BlY2lmeSB0aGUgQ0JPUiBlbmNvZGluZyBvZiB0aGUg cGFyYW1ldGVyICZxdW90O2N1cnZlJnF1b3Q7IGZvciAmbmJzcDtFZERTQS48L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90Oyxz YW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+QXMgd2UgZmlyc3Qg bmVlZGVkIGl0IGluIE9TQ09SRSBHcm91cGNvbW0sIHdlIGhhdmUgc29tZSBwcm9wb3NlZCB0ZXh0 IGZvciBhIElBTkEgcmVnaXN0cnkgdGhhdCBjb3VsZCBiZSB1c2VkOiZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtb3Njb3JlLWdyb3VwY29t bS0wNSNzZWN0aW9uLTkuMSIgdGFyZ2V0PSJfYmxhbmsiIHRpdGxlPSJodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLW9zY29yZS1ncm91cGNvbW0tMDUjc2VjdGlvbi05 LjEiPjxzcGFuIHN0eWxlPSJjb2xvcjojOTU0RjcyIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQtaWV0Zi1jb3JlLW9zY29yZS1ncm91cGNvbW0tMDUjc2VjdGlvbi05LjE8L3NwYW4+ PC9hPiZuYnNwOy4NCiBTaW5jZSB0aGlzIGlzIG1vcmUgZ2VuZXJhbCBhbmQgd2UgbmVlZCB0aGlz IGluIG90aGVyIGRvY3VtZW50cyBhcyB3ZWxsIChFREhPQyksIHdlIHRoaW5rIGl0IHdvdWxkIG1h a2UgbW9yZSBzZW5zZSB0byBhZGQgdGhpcyB0byBvbmUgb2YgdGhlIGV4aXN0aW5nIENPU0Ugc3Bl Y2lmaWNhdGlvbnMgKGRyYWZ0LWlldGYtY29zZS1yZmM4MTUyYmlzLWFsZ3M/KSBvciBkcmFmdCBh IG5ldyBDT1NFIGRvY3VtZW50IGNvdmVyaW5nIHRoaXMuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNr Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJk YW5hJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPldlIHdvdWxkIGFzayB0aGUgV0cgdG8g Y29uc2lkZXIgYWRkaW5nIHN1Y2ggYW4gSUFOQSByZWdpc3RyeSwgYW5kIHdvdWxkIGxpa2UgeW91 ciBvcGluaW9uIG9uIHdoZXJlIGJldHRlciB0byBoYXZlIHRoaXMuPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1z ZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OmJsYWNrIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPlRoYW5rcyw8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90 OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6YmxhY2siPkZyYW5jZXNjYTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDss c2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlm Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fPGJyPg0KQ09TRSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86 Q09TRUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPkNPU0VAaWV0Zi5vcmc8L2E+PGJyPg0KPGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlIiB0YXJnZXQ9 Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlPC9hPjwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtWZXJk YW5hJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4N CjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_878D3D579E3A420FAAA3C7B87DE81E2Bericssoncom_-- From nobody Mon Nov 4 13:43:13 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 34C81120121; Mon, 4 Nov 2019 13:43:04 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157290378416.13892.9222550792567274490@ietfa.amsl.com> Date: Mon, 04 Nov 2019 13:43:04 -0800 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-hash-algs-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 21:43:04 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Hash Algorithms Author : Jim Schaad Filename : draft-ietf-cose-hash-algs-02.txt Pages : 10 Date : 2019-11-04 Abstract: The CBOR Object Signing and Encryption (COSE) syntax [I-D.ietf-cose-rfc8152bis-struct] does not define any direct methods for using hash algorithms. There are however circumstances where hash algorithms are used: Indirect signatures where the hash of one or more contents are signed. X.509 certificate or other object identification by the use of a thumbprint. This document defines a set of hash algorithms that are identified by COSE Algorithm Identifiers. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-algs/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-hash-algs-02 https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-algs-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-hash-algs-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Nov 4 13:44:09 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4448F120864; Mon, 4 Nov 2019 13:44:02 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157290384218.13932.7637098425324817049@ietfa.amsl.com> Date: Mon, 04 Nov 2019 13:44:02 -0800 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-x509-05.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 21:44:08 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Headers for carrying and referencing X.509 certificates Author : Jim Schaad Filename : draft-ietf-cose-x509-05.txt Pages : 9 Date : 2019-11-04 Abstract: The CBOR Signing And Encrypted Message (COSE) structure uses references to keys in general. For some algorithms, additional properties are defined which carry parts of keys as needed. The COSE Key structure is used for transporting keys outside of COSE messages. This document extends the way that keys can be identified and transported by providing attributes that refer to or contain X.509 certificates. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-x509-05 https://datatracker.ietf.org/doc/html/draft-ietf-cose-x509-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-x509-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Nov 4 14:45:48 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 90CF21201AA; Mon, 4 Nov 2019 14:45:40 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157290754052.13968.13651774314846423357@ietfa.amsl.com> Date: Mon, 04 Nov 2019 14:45:40 -0800 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-rfc8152bis-algs-06.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 22:45:42 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Initial Algorithms Author : Jim Schaad Filename : draft-ietf-cose-rfc8152bis-algs-06.txt Pages : 47 Date : 2019-11-04 Abstract: Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. COSE additionally describes how to represent cryptographic keys using CBOR. In this specification the conventions for the use of a number of cryptographic algorithms with COSE. The details of the structure of COSE are defined in [I-D.ietf-cose-rfc8152bis-struct]. This document along with [I-D.ietf-cose-rfc8152bis-struct] obsoletes RFC8152. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-rfc8152bis-algs/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-algs-06 https://datatracker.ietf.org/doc/html/draft-ietf-cose-rfc8152bis-algs-06 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-rfc8152bis-algs-06 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Nov 11 07:52:58 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 718531208A4 for ; Mon, 11 Nov 2019 07:52:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PItu9GBott85 for ; Mon, 11 Nov 2019 07:52:55 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24F3012008B for ; Mon, 11 Nov 2019 07:52:55 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 11 Nov 2019 07:52:29 -0800 From: Jim Schaad To: CC: 'Francesca Palombini' , 'Marco Tiloca' Date: Mon, 11 Nov 2019 07:52:26 -0800 Message-ID: <001401d598a8$05e06f60$11a14e20$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Content-Language: en-us Thread-Index: AdWYp6hZdYNgVq3XTd+TBSneg8oFBA== X-Originating-IP: [73.180.8.170] Archived-At: Subject: [COSE] Updated drafts X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 15:52:56 -0000 I have finally gotten to the point of sending this message. I updated three drafts before the submission deadline * The X.509 and hash algorithm drafts were updated to address WGLC comments * The Algorithms draft was updated with an attempt to get a more generalized version of what was needed by the group communication algorithm details. I need to get feedback on the new capabilities defintions to see if I have missed anything significant and to see if this will substitute for what was desired by the group communication authors. Jim From nobody Sat Nov 16 02:17:23 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5370C120119 for ; Sat, 16 Nov 2019 02:17:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Msr_rOJUpuB7 for ; Sat, 16 Nov 2019 02:17:19 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130072.outbound.protection.outlook.com [40.107.13.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66393120019 for ; Sat, 16 Nov 2019 02:17:19 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AT56++p/BQaI3FVhCQQttPFU1xUGcGcvMlXLABUSyaljPrsGBIT3Xppz3hYcjsT/I2tZAetvFQhBsohx8CXwXzPkLK/kgFP8dCXPXmm6e6rQ8GtWrp2fnxO9MJ7SbfH0rvLsO3NT6Y0Mj4BdlXFpcOITCjFxtcAJE+hiphrrQLGCTfGeRsI035Yn8lD67E/2N0QtV5x7scXGdCb2iM64qRiYn92OJsz8QXrIWvCS9bKGjmtUxvzjwE0hlT7Ztj/M3dcDw1vM2iOk4HGhNGD2eqxoCcvtzayGNzEXL9IE6q/NeGMMNiM3um856JRDLKkT7MmYkemdkQ+NkYNk1tBNhA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ip+H0JvuHQ349uYa0Y3N4XsoDKObXABZVysHuSzZb6E=; b=NI/c3v2xnTXHKZJ1Zqy1N4qSVu/2Loqqni1pTTQePfPOp0Dx4T2OvFlonJrBPd+dzupbheiBA2671XYlJE2ccMosYJKsM6WI9FzaXBibZGWXdcy4DoW/tJGesxZOO8wsDxqGvJj0xiOAn/CRSRf4O/fxjTvX3BgOBOY49y1aB/wo6R/QDxiFqdIfyjLDBl1dtKanmvNXsMYXatWmf0GBzzsvKzjlvVx/uALxys5ZMFlKRblAME7+wDbW4CxDn109WuawyTB6IwfhHfk4X8NCgwdpVmlWIaQ1S3h+OV+0T7SCZc5mFeDSc+ShcTs2wj9d9kKwqrp21uF1S+3R+/1JKw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ip+H0JvuHQ349uYa0Y3N4XsoDKObXABZVysHuSzZb6E=; b=NYEwA8rGeUtgKFA8xKxieXFxiufzdfakXxxwqK5wYiVw9GiQXX+mw6E0NmXkQozLqXl0VV0aYItVkaa22L2WtC8ocypk7YhJXQSV2wQRGQuPv0/aTrBXvE8aw59sruXzJCGp2PjsJfPF95wBMX7EtJtS2HHGESFLhxe7g3rGaxs= Received: from VI1PR07MB5469.eurprd07.prod.outlook.com (20.178.14.214) by VI1PR07MB6480.eurprd07.prod.outlook.com (10.186.160.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.10; Sat, 16 Nov 2019 10:17:14 +0000 Received: from VI1PR07MB5469.eurprd07.prod.outlook.com ([fe80::a8d5:a784:a19:5c76]) by VI1PR07MB5469.eurprd07.prod.outlook.com ([fe80::a8d5:a784:a19:5c76%6]) with mapi id 15.20.2474.012; Sat, 16 Nov 2019 10:17:07 +0000 From: Francesca Palombini To: Jim Schaad , "cose@ietf.org" CC: 'Marco Tiloca' Thread-Topic: [COSE] Updated drafts Thread-Index: AdWYp6hZdYNgVq3XTd+TBSneg8oFBAEAmWeA Date: Sat, 16 Nov 2019 10:17:07 +0000 Message-ID: References: <001401d598a8$05e06f60$11a14e20$@augustcellars.com> In-Reply-To: <001401d598a8$05e06f60$11a14e20$@augustcellars.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=francesca.palombini@ericsson.com; x-originating-ip: [2001:67c:1232:144:8dcc:1ed9:445a:7667] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 85d4434b-bdfb-4e05-d0ee-08d76a7e22b1 x-ms-traffictypediagnostic: VI1PR07MB6480: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 02234DBFF6 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(346002)(366004)(376002)(396003)(136003)(189003)(199004)(6486002)(99286004)(44832011)(486006)(186003)(14454004)(7736002)(6436002)(305945005)(66946007)(2616005)(46003)(64756008)(66556008)(66476007)(33656002)(446003)(66446008)(15650500001)(6116002)(76116006)(478600001)(476003)(966005)(2906002)(5660300002)(91956017)(86362001)(8676002)(36756003)(76176011)(81156014)(6306002)(81166006)(8936002)(6246003)(4326008)(11346002)(229853002)(110136005)(14444005)(2501003)(25786009)(256004)(6506007)(316002)(102836004)(71200400001)(71190400001)(6512007); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB6480; H:VI1PR07MB5469.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: ygqEAPjFd1Yu+VTeQ9C/19YUNEoci4fu9gGN5Qu+H4UdEoSGtwp6qnPy67+RUzn1+q34PsGlrHINfhlZPGx340jNLTAu6cCAXt9pbinRa8L62VxIP+CC0Uzlaxzt+5IHXujL9RhaSGRtBcjxpE7ikl+8Jo6yda9tNF+PUdyvQdcQUO8DcftnXICBcY+dy43xTM2ORMbFBmHqaJ8XYtNkAT8FsgZGVMukbzAtjbsY7QUXKPiB914NVH63hGxBREZI5580RMFhdMhzTz0tCWRyt4uqcEoqFheBqTG/zhfvvF0FkNhiFsy1hVpfYZse6l0X+vcX0MpXvhPGzHNqHSFSQD7soJxkLK2nWr7XC+uAJGoFGTAzaK1wZYVUeqH4QU0SziMSV7b06wjrVkkUD5nwOJRWBb3GO3wZPxvv5HWnAlro6bDStzP+/NG+Bw2UfmBF x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 85d4434b-bdfb-4e05-d0ee-08d76a7e22b1 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Nov 2019 10:17:07.6077 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: i++dCYWJSvZSc+CPRUX7RBzYStMWZhrgtSLQe5U+Brhmgc/NSHh5EBCKOFMzyHsb6eKjIPyMuuuMRce+zwRYPxVR/UAgJrfOmDU67jhR2ue/jBYGH1F8LP2NKQK2gOyh X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB6480 Archived-At: Subject: Re: [COSE] Updated drafts X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 10:17:22 -0000 SGkgSmltLA0KDQpUaGFuayB5b3UgZm9yIHRoaXMgdXBkYXRlLiBJIGhhdmUgYSBjb3VwbGUgb2Yg cXVlc3Rpb25zIGFib3V0IHRoZSBJQU5BIHJlZ2lzdHJpZXMgaW4gdGhlIGFsZ29yaXRobXMgZHJh ZnQuDQoNCiogV2h5IGRpZCB5b3Ugc2V0IHRoZSAiQ2FwYWJpbGl0aWVzIiBvZiBDT1NFIEtleSBU eXBlcyByZWdpc3RyeSB0byAia3R5LCB4ICI/IEluIHBhcnRpY3VsYXIsIEkgZG8gbm90IHNlZSB3 aHkgaGF2aW5nICJrdHkiIGluIHRoaXMgY29sdW1uIHdvdWxkIGJlIGhlbHBmdWwgYXQgYWxsLiBU aGUga3R5IHZhbHVlIGZvciBlYWNoIGxpbmUgaW4gdGhlICJDYXBhYmlsaXRpZXMiIGNvbHVtbiBz aG91bGQgYmUgdGhlIHNhbWUgYXMgdGhlIHZhbHVlIGluIHRoZSAiTmFtZSIgY29sdW1uLCBpLmUu ICIxLCBjcnYiIGZvciBLZXkgVHlwZSAxLCAiMiwgY3J2IiBmb3IgS2V5IFR5cGUgMiwgIjMiIGZv ciBLZXkgVHlwZSAzIGV0Yy4gSSBzdXNwZWN0IHlvdSBkaWQgYWRkIGl0IHRvIG1hdGNoIHRoZSAi UGFyYW1ldGVycyIgY29sdW1uIG9mIHNlY3Rpb24gOS4yIG9mIE9TQ09SRSBncm91cGNvbW0sIGJ1 dCBpZiB0aGF0J3MgdGhlIGNhc2UsIGhhdmluZyBvbmx5IHRoZSBzZWNvbmQgZWxlbWVudCBvZiB0 aGUgY3VycmVudCBjb2x1bW4gd291bGQgYmUgZW5vdWdoLiBXZSBjb3VsZCB0aGVuIGRlZmluZSBp biBPU0NPUkUgZ3JvdXBjb21tIHRoZSBmb3JtYXQgYXMgImt0eSAodGFrZW4gZnJvbSAiTmFtZSIp LCBYIHRha2VuIGZyb20gQ2FwYWJpbGl0aWVzIGZvciB0aGF0IGt0eSIuDQoNCiogSSB3b3VsZCBl eHBlY3QgdGhpcyBkb2N1bWVudCB0byBkZWZpbmUgZXhhY3RseSBob3cgdGhlIGZpZWxkcyBpbiBD YXBhYmlsaXRpZXMgYXJlIGZvcm1hdHRlZCwgYW5kIHdoYXQgdmFsdWVzIHRoZXkgdGFrZS4gSXQg aXMgZW5vdWdoIHRvIGhhdmUgYSBzZW50ZW5jZSBzYXlpbmcgImNydiBpcyBkZWZpbmVkIGluIHNl Y3Rpb24gVEJELCBhbmQgY2FuIHRha2UgdGhlIGZvbGxvd2luZyB2YWx1ZXM6IFRCRCBmcm9tIHRo aXMgcmVnaXN0cnk6IFRCRCIuIEFsc28sIHRoZSByZWZlcmVuY2UgY29sdW1uIG9mIHRoaXMgcmVn aXN0cnkgc2hvdWxkIGJlIHVwZGF0ZWQgdG8gYWxzbyBwb2ludCB0byB0aGlzIGRvY3VtZW50Lg0K DQoqIEkgaGF2ZSBhIGhhcmQgdGltZSB1bmRlcnN0YW5kaW5nIHRoZSB1cGRhdGUgdG8gQ09TRSBB bGdvcml0aG1zIHJlZ2lzdHJ5LiBZb3UgaGF2ZSBhZGRlZCBhIGNvbHVtbiBjYWxsZWQgIkNhcGFi aWxpdGllcyIsIGFuZCBwb3B1bGF0ZWQgZXZlcnkgcmF3IGZvciBhbGwgdGhlIGFsZ29yaXRobXMg d2l0aCB0aGUgc3RyaW5nICJrdHkiPyBIb3cgZG9lcyB0aGF0IGhlbHA/IE1heWJlIHlvdSB3YW50 ZWQgdG8gcG9pbnQgdG8gdGhlIENPU0UgS2V5IFR5cGUgdG8gdXNlIHdpdGggdGhhdCBhbGdvcml0 aG0/IFRoYXQgd291bGQgbWVhbiBhZGRpbmcgYSAiS2V5IFR5cGUiIGNvbHVtbiAocmF0aGVyIHRo YW4gYSAiQ2FwYWJpbGl0aWVzIiksIHBvcHVsYXRlZCB3aXRoIHRoZSB2YWx1ZSBmcm9tIHRoZSAi TmFtZSIgb3IgIlZhbHVlIiBjb2x1bW4gb2YgQ09TRSBLZXkgVHlwZXMgcmVnaXN0cnksIGZvciBl YWNoIGFsZ29yaXRobS4gVGhlbiB3ZSB3b3VsZCBleHRyYWN0IHRoZSBjYXBhYmlsaXRpZXMgZm9y IHRoYXQgYWxnb3JpdGhtIGJ5IGxvb2tpbmcgYXQgdGhlIENhcGFiaWxpdGllcyBmb3IgdGhlIHJp Z2h0IGtleSB0eXBlLiBBbm90aGVyIG9wdGlvbiB3b3VsZCBiZSB0byBkdXBsaWNhdGUgdGhlIGlu Zm9ybWF0aW9uIGZyb20gIkNPU0UgS2V5IFR5cGVzIiBDYXBhYmlsaXRpZXMgaW50byB0aGUgQ2Fw YWJpbGl0aWVzIGNvbHVtbiBvZiBDT1NFIEFsZ29yaXRobSB0aGF0IHlvdSBkZWZpbmUsIGJ1dCBJ IGRvbid0IGxpa2UgZHVwbGljYXRpbmcgdGhpbmdzLiBJZiB3ZSBjYW5ub3QgYXNzdW1lIHRoYXQg IkNhcGFiaWxpdGllcyIgYXJlIHRoZSBzYW1lIGZvciB0aGUgYWxnb3JpdGhtIGFuZCBmb3IgdGhl IGtleSB0eXBlLCBJIHdvdWxkIGFkZCB0aGUgIkNhcGFibGl0aWVzIiBjb2x1bW4gaW4gdGhlIENP U0UgQWxnb3JpdGhtIGFzIHdlbGwuIEV2ZW4gdGhlbiwgSSBkbyB0aGluayBhICJLZXkgVHlwZSIg Y29sdW1uIHdpdGggdGhlICJOYW1lIiBvciAiVmFsdWUiIGZyb20gQ09TRSBLZXkgVHlwZXMgd291 bGQgYmUgdXNlZnVsLiBUaGF0IGlzIHRoZSB3YXkgdG8gbGluazogIllvdSB1c2UgdGhpcyB0eXBl IG9mIGtleSB3aXRoIHRoaXMgYWxnb3JpdGhtIi4NCg0KRXhhbXBsZSBvZiB3aGF0IEkgdGhpbmsg dGhpcyBzaG91bGQgbG9vayBsaWtlOg0KDQpDT1NFIEtleSBUeXBlcyByZWdpc3RyeToNCg0KTmFt ZSB8wqBWYWx1ZSB8IENhcGFiaWxpdGllcyB8IFJlZg0KICAgICAgICAgMSB8ICAgT0tQIHwgIGNy diB8wqBUaGlzIGRvYw0KICAgICAgICAgMiB8ICAgRUMyICB8ICBjcnYgfCBUaGlzIGRvYw0KDQpD cnYgZmllbGQgZm9yIFZhbHVlIE9LUCB0YWtlcyB0aGUgdmFsdWVzIGZyb20gVGFibGUgMjIgb2Yg UkZDODE1MiBmb3IgS2V5IFR5cGUgT0tQDQpDcnYgZmllbGQgZm9yIFZhbHVlIEVDMiB0YWtlcyB0 aGUgdmFsdWVzIGZyb20gVGFibGUgMjIgb2YgUkZDODE1MiBmb3IgS2V5IFR5cGUgRUMyDQpldGMN Cg0KQ09TRSBBbGdvcml0aG1zIHJlZ2lzdHJ5Og0KDQpBZGQgYSAiS2V5IFR5cGUiIHBhcmFtZXRl ciwgdGhhdCB0YWtlcyBmb3IgdmFsdWUgZm9yIGV4YW1wbGU6DQoNCk5hbWUgIHwgLi4uIHwgS2V5 IFR5cGUNCkVkRFNBIHwgLi4uIHwgT0tQIChvciAxKQ0KZXRjDQoNCkhvcGUgdGhpcyBtYWtlcyBz ZW5zZSwNCkZyYW5jZXNjYQ0KDQrvu79PbiAxMS8xMS8yMDE5LCAyMzo1MywgIkNPU0Ugb24gYmVo YWxmIG9mIEppbSBTY2hhYWQiIDxjb3NlLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGll dGZAYXVndXN0Y2VsbGFycy5jb20+IHdyb3RlOg0KDQogICAgSSBoYXZlIGZpbmFsbHkgZ290dGVu IHRvIHRoZSBwb2ludCBvZiBzZW5kaW5nIHRoaXMgbWVzc2FnZS4NCiAgICANCiAgICBJIHVwZGF0 ZWQgdGhyZWUgZHJhZnRzIGJlZm9yZSB0aGUgc3VibWlzc2lvbiBkZWFkbGluZQ0KICAgIA0KICAg ICogIFRoZSBYLjUwOSBhbmQgaGFzaCBhbGdvcml0aG0gZHJhZnRzIHdlcmUgdXBkYXRlZCB0byBh ZGRyZXNzIFdHTEMgY29tbWVudHMNCiAgICAqICBUaGUgQWxnb3JpdGhtcyBkcmFmdCB3YXMgdXBk YXRlZCB3aXRoIGFuIGF0dGVtcHQgdG8gZ2V0IGEgbW9yZQ0KICAgIGdlbmVyYWxpemVkIHZlcnNp b24gb2Ygd2hhdCB3YXMgbmVlZGVkIGJ5IHRoZSBncm91cCBjb21tdW5pY2F0aW9uIGFsZ29yaXRo bQ0KICAgIGRldGFpbHMuDQogICAgDQogICAgSSBuZWVkIHRvIGdldCBmZWVkYmFjayBvbiB0aGUg bmV3IGNhcGFiaWxpdGllcyBkZWZpbnRpb25zIHRvIHNlZSBpZiBJIGhhdmUNCiAgICBtaXNzZWQg YW55dGhpbmcgc2lnbmlmaWNhbnQgYW5kIHRvIHNlZSBpZiB0aGlzIHdpbGwgc3Vic3RpdHV0ZSBm b3Igd2hhdCB3YXMNCiAgICBkZXNpcmVkIGJ5IHRoZSBncm91cCBjb21tdW5pY2F0aW9uIGF1dGhv cnMuDQogICAgDQogICAgSmltDQogICAgDQogICAgDQogICAgX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICBDT1NFIG1haWxpbmcgbGlzdA0KICAgIENP U0VAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nv c2UNCiAgICANCg0K From nobody Sun Nov 17 18:03:44 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EA56112083C; Sun, 17 Nov 2019 18:03:37 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.110.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157404261789.6400.5855315192110515895@ietfa.amsl.com> Date: Sun, 17 Nov 2019 18:03:37 -0800 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-rfc8152bis-struct-07.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 02:03:38 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Structures and Process Author : Jim Schaad Filename : draft-ietf-cose-rfc8152bis-struct-07.txt Pages : 84 Date : 2019-11-17 Abstract: Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. This specification additionally describes how to represent cryptographic keys using CBOR. This document along with [I-D.ietf-cose-rfc8152bis-algs] obsoletes RFC8152. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-rfc8152bis-struct/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-struct-07 https://datatracker.ietf.org/doc/html/draft-ietf-cose-rfc8152bis-struct-07 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-rfc8152bis-struct-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Nov 17 18:23:54 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B390C1207FD for ; Sun, 17 Nov 2019 18:23:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oNqpYqYuZ2Ae for ; Sun, 17 Nov 2019 18:23:51 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 535B1120048 for ; Sun, 17 Nov 2019 18:23:51 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Sun, 17 Nov 2019 18:23:46 -0800 From: Jim Schaad To: References: <157404261805.6400.15829861192737205404.idtracker@ietfa.amsl.com> In-Reply-To: <157404261805.6400.15829861192737205404.idtracker@ietfa.amsl.com> Date: Mon, 18 Nov 2019 10:23:45 +0800 Message-ID: <006901d59db7$35b52e60$a11f8b20$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQEmc5RKVRM92gu1MEAJMn8jshihfajuhxlg Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: [COSE] FW: New Version Notification for draft-ietf-cose-rfc8152bis-struct-07.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 02:23:53 -0000 I recently noticed that the last time I uploaded the draft it did not = seem to get processed correctly. This is what was supposed to be = updated in Sept. Jim -----Original Message----- From: internet-drafts@ietf.org =20 Sent: Monday, November 18, 2019 10:04 AM To: Jim Schaad Subject: New Version Notification for = draft-ietf-cose-rfc8152bis-struct-07.txt A new version of I-D, draft-ietf-cose-rfc8152bis-struct-07.txt has been successfully submitted by Jim Schaad and posted to the IETF = repository. Name: draft-ietf-cose-rfc8152bis-struct Revision: 07 Title: CBOR Object Signing and Encryption (COSE): Structures and = Process Document date: 2019-11-17 Group: cose Pages: 84 URL: = https://www.ietf.org/internet-drafts/draft-ietf-cose-rfc8152bis-struct-07= .txt Status: = https://datatracker.ietf.org/doc/draft-ietf-cose-rfc8152bis-struct/ Htmlized: = https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-struct-07 Htmlized: = https://datatracker.ietf.org/doc/html/draft-ietf-cose-rfc8152bis-struct Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-rfc8152bis-struct-07 Abstract: Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. This specification additionally describes how to represent cryptographic keys using CBOR. This document along with [I-D.ietf-cose-rfc8152bis-algs] obsoletes RFC8152. = =20 Please note that it may take a couple of minutes from the time of = submission until the htmlized version and diff are available at = tools.ietf.org. The IETF Secretariat From nobody Mon Nov 18 17:40:12 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12A6F120220; Mon, 18 Nov 2019 17:40:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yDrc1oWjWIT6; Mon, 18 Nov 2019 17:40:00 -0800 (PST) Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02on2106.outbound.protection.outlook.com [40.107.91.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF332120B7D; Mon, 18 Nov 2019 17:40:00 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IiWewcZWzpUD3seFj4uZHgQAR4lr2Jpjm2ZWwdzmL6m7d9GyzN7T6Yuw86mtdY01gNNBg3+PKdE4RxLctGdvvQuoN/hE15czJm0du8WgP7OSFjfqXRoMXdsdBD/ju/rI9/SwmBp1ZHxLngFgMq61Ep+p8gv93yfXJ1peMyijKGsEmjyOnML8M1N4BlaG3j6E290hpOdfUsnWYC5NSTztDOuljl94CAkdVo94QpA6L/tKc9U7EBCNlSrt7W0PVx7C1w3B+TUfNwjsq5Kv2Fh5XQoJcnDVV/YBh4pauSa7/EbkqXEuLSPhzsUaD/wntfYeQzE/+7lbYtcVsN1JXaK7tw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=C52JIt1O8IGF8tzRw6TihHD9dvNBJi0iwxmmwxh1GEU=; b=eAEOvhQrD7mYdYURq73zQVIDn91pAuw5Dc41ra9KkaPk1F9Ik9z2U7Ka/fVDoWqhiNM4kTVsB3olBK+9efHtWrIhCJXYqJCswg+p16z6mqVEuOfos8M/WzBV+qhcoNpk4lenViAasYV9vECgjMkHrufUKhOPYPv/i7Q3zSfWs0++rmiQrKBk8lOotrvoMvxZxLiobUIuw7+FIZMz9Jq9TIY6Q60m1uSMU/Ij13r4sjxXG1uHTjdGUUZI6Jlfp9odfGY4TVjFwfAvQp1AevUCGTh1wdgz1IONKPFM90C1Z/3U5/Tl4pD7sanvqfzh2oLlc/I5f4fO0l7PDbm5+4uwyg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=C52JIt1O8IGF8tzRw6TihHD9dvNBJi0iwxmmwxh1GEU=; b=wwsrF7uGSeB5rPccDl+8RdCWWAeXAqlaVHl1zbQwlHzCGL06Mq938ENt2G0R70G66l2ycK21YpfcNtwVCR9O4UwNNe/A5Sqk4/SU5RdSb5v/fY0qIp6kWuCmdG0INMyk/tOiSIDxJ2dr4J8E2quzKNc2G2kzYLsWCy9SlE4NNbw= Received: from BN7PR09MB2819.namprd09.prod.outlook.com (52.135.242.24) by BN7PR09MB2673.namprd09.prod.outlook.com (52.135.247.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.22; Tue, 19 Nov 2019 01:39:59 +0000 Received: from BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310]) by BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310%7]) with mapi id 15.20.2451.031; Tue, 19 Nov 2019 01:39:59 +0000 From: "Waltermire, David A. (Fed)" To: "cose@ietf.org" CC: sacm Thread-Topic: [sacm] CoSWID review Thread-Index: AQHVi0zu4YoCNvAGF0yJOMlWNNVbBKePD0jWgAHz1s+AANn+TQ== Date: Tue, 19 Nov 2019 01:39:58 +0000 Message-ID: References: , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [2001:67c:370:128:440f:2dc1:3eca:7ca4] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 8d2899d1-7ba7-4267-10dc-08d76c91638f x-ms-traffictypediagnostic: BN7PR09MB2673: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:1265; x-forefront-prvs: 022649CC2C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(396003)(136003)(39860400002)(366004)(189003)(199004)(5660300002)(46003)(2906002)(33656002)(14454004)(606006)(74316002)(478600001)(76176011)(99286004)(486006)(966005)(5640700003)(91956017)(4326008)(76116006)(316002)(450100002)(6436002)(14444005)(6916009)(476003)(55016002)(6306002)(54896002)(2473003)(9686003)(236005)(11346002)(446003)(8936002)(2351001)(256004)(6116002)(6506007)(71190400001)(71200400001)(25786009)(102836004)(229853002)(186003)(19627405001)(7696005)(66446008)(8676002)(52536014)(81156014)(81166006)(1730700003)(2501003)(7736002)(64756008)(66556008)(66946007)(66616009)(66476007)(105004)(53546011)(86362001)(482324003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR09MB2673; H:BN7PR09MB2819.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 64oBm3rJ/T1wjkxRZK63YfEBf9IU/rIJXpwj3378kUDgoGfdiV8KFbJuGCOSCPi/sq4TsMVwwXYVVr44LXXNTE0oycmTfkIX8CeUs1ulYWIHNyHHmbHzQSzqnLpcHlt2DjzZmuhtccIJEZQxdbzIRE5Q4PrkxXM70AXwxZZoShrSM4XMO63wVAKxu8CmLhxTlRcbOyrHD4eIDb9C4HX34y6uTPnGUAoEfm4G+2NK7MoDU0FNmM4apa50IZ2FIs2P4SeXoiOYM/pFC6jZIvo4rvV86S7woLiPd+cUfVNWDVR1F5uiqHC0G8RD3ld/FMPs1J8yeriHZ43azCpFI+N15nBmZCXkNvMclCOq7ltQOA4BZDR/xyBSzt68N+sW7FUP1QpGNNHfv822s0y7n09nxSuTu6+dQtvooKj5WQXBRGJ4Lotm23fe2ExMOfn7hpeG x-ms-exchange-transport-forked: True Content-Type: multipart/mixed; boundary="_004_BN7PR09MB281982821C9CD2D11A5F546AF04C0BN7PR09MB2819namp_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: 8d2899d1-7ba7-4267-10dc-08d76c91638f X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2019 01:39:58.9074 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: bBgZuUYuOs9UUizuhWwnRAgAWcs6rwltCyVA1MxlcQiP6PGXZC/k7wZ4ZqTpNPgYgagVBOR8Z9tvgo/kCveHxQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR09MB2673 Archived-At: Subject: [COSE] Fw: [sacm] CoSWID review X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 01:40:06 -0000 --_004_BN7PR09MB281982821C9CD2D11A5F546AF04C0BN7PR09MB2819namp_ Content-Type: multipart/alternative; boundary="_000_BN7PR09MB281982821C9CD2D11A5F546AF04C0BN7PR09MB2819namp_" --_000_BN7PR09MB281982821C9CD2D11A5F546AF04C0BN7PR09MB2819namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable On Sun, Nov 17, 2019 at 6:45 AM Kathleen Moriarty > wrote: Hi Dave, On Sun, Nov 17, 2019 at 3:02 AM Dave Waltermire > wrote: Kathleen, Thank you for the review. I have addressed your comments in the latest draf= t. Some comments on your comments are inline below. From: sacm > on behalf = of Kathleen Moriarty > Date: Fri, October 25, 2019 11:57 PM +0800 To: ">" > Subject: [sacm] CoSWID review Section 2.6: A Thumbprint is specified in this section, should this be referenced for cl= arity on hashes with COSE for object identification: https://datatracker.ie= tf.org/doc/draft-ietf-cose-hash-algs/ Would it be better to tie to the COSE set of supported algorithms (they lik= ely match, but I didn't verify)? The IANA COSE Algorithms registry contains other types of algorithms beyond= hash algorithms. To use this registry, we would need to list the hash-spec= ific algorithms, which is less ideal. Its a shame this registry isn't broke= n out by algorithm type, which would make this decision easy. With the IANA= "Named Information Hash Algorithm Registry", we get only hash algorithms, = which is what we are looking for. Can you live with use of the IANA "Named= Information Hash Algorithm Registry"? COSE is open as is their main draft. This is a problem that can likely be = solved this week... Talk to Jim. Let me and the list know what's possible. Section 5: It might be helpful to list what is being requested at the start of the IAN= A section X registries are established with this request with initial entries for X r= egistries. Values for Z existing registries are requested. Done. Thanks. 5.1: s/This document uses integer/This registry uses integer/ Fixed. Section 5.2.5: s/This document defines a new a new a/This document establishes a/ Fixed a bunch of cases that matched this pattern. Thanks for catching this. Just trying to head off issues at the later review stages :-) . And they we= re all super minor and may have gone through unnoticed. Security Considerations: I'm wondering why CWT [RFC8392] was not used or recommended for signing. Is= it that the other method fits better within SWIMA? COSE was chosen for CoSWID, since it is parallel to the use of XMLDSig.for = SWID tags. We could consider CWTs, but this would require a bunch of additi= onal work, and we are fairly close to shipping this draft to the IESG. Mayb= e a better option might be to write a second draft discussing the use of CW= Ts with CoSWID? This would allow this draft to move forward, while CWT use = is defined. Would you be interested in working on this draft? Yes, I am interested, with coauthors. Are you offering? If CWTs are to be proliferated the way JWTs have been, I suspect it will be= easier for CoSWID to gain traction. I think it would be good to list use = of a CWT as an option, then registering the claims that one might use for l= et's say having the CWT be an EAT and be a remote attestation. I think ado= ption may be better if these are tied together and made simple for regular = readers who will likely start to come across CWTs as opposed to just signin= g with one or more signers. I think what you have us good, but having both= as options would be better. Both options would also create the need for some signature verifiers to sup= port both options. This is something that should be discussed at greater le= ngth, as it could also create potential interoperability issues. I am not a= gainst both options, but we should talk to potential implementors about wha= t they want. This is maybe more reason to do this work in a separate draft = to allow for some time to work out these details.. OK, great point on interoperability. My hunch is that since CWTs are in EA= Ts, there is code and there is an established pattern of use that this woul= d be more likely to be supported (more widely). It may be good to pull thi= s all out as not to create confusion as if it is int he base draft, this wi= ll be seen as necessary as opposed to a choice and as you note, will create= confusion. The claims about the signature may vary from the data in the CoSWID, so thi= s could be potentially useful. Right and minimal claims are possible too. Thanks, Kathleen True. Thank you! -- Best regards, Kathleen -- Best regards, Kathleen -- Best regards, Kathleen --_000_BN7PR09MB281982821C9CD2D11A5F546AF04C0BN7PR09MB2819namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable



On Sun, Nov 17, 2019 at 6:45 AM Kathl= een Moriarty <kathle= en.moriarty.ietf@gmail.com> wrote:
Hi Dave,

On Sun, Nov 17, 2019 at 3:02 AM Dave = Waltermire <davewaltermire@gmail.com> wrote:
Kathleen,

Thank you for the review. I have addressed your comments in the latest= draft. Some comments on your comments are inline below.

From: sacm <sacm-bounces@ietf.org> on behalf of Kathleen Moriarty <kathleen.mo= riarty.ietf@gmail.com>
Date: Fri, October 25, 2019 11:57 PM +0800
To: "<sacm@ietf.= org>" <sa= cm@ietf.org>
Subject: [sacm] CoSWID review


Section 2.6:
A Thumbprint is specified in this section, should this be referenced f= or clarity on hashes with COSE for object identification: https://datatracker.ietf.o= rg/doc/draft-ietf-cose-hash-algs/
Would it be better to tie to the COSE set of supported algorithms (the= y likely match, but I didn't verify)?

The IANA COSE Algorithms registry contains other types of algorithms b= eyond hash algorithms. To use this registry, we would need to list the hash= -specific algorithms, which is less ideal. Its a shame this registry isn't = broken out by algorithm type, which would make this decision easy. With the IANA "Named Information = Hash Algorithm Registry", we get only hash algorithms, which is what w= e are looking for. Can you live with use of the  IANA "Named Info= rmation Hash Algorithm Registry"?

COSE is open as is their main draft.  This is a problem that can = likely be solved this week...  Talk to Jim. Let me and the list know w= hat's possible. 
 
Section 5:
It might be helpful to list what is being requested at the start of th= e IANA section 
X registries are established with this request with initial entries fo= r X registries. Values for Z existing registries are requested. 

Done. 
Thanks. 
 
5.1:
s/This document uses integer/This registry uses integer/

Fixed.
 
Section 5.2.5:

s/This document defines a new a new a/This document establishes a/

Fixed a bunch of cases that matched this pattern. Thanks for catching = this.
Just trying to head off issues at the later review stages :-) . And th= ey were all super minor and may have gone through unnoticed.
 
 
Security Considerations:

I'm wondering why CWT [RFC8392] was not used or recommended for signin= g. Is it that the other method fits better within SWIMA? 

COSE was chosen for CoSWID, since it is parallel to the use of XMLDSig= .for SWID tags. We could consider CWTs, but this would require a bunch of a= dditional work, and we are fairly close to shipping this draft to the IESG.= Maybe a better option might be to write a second draft discussing the use of CWTs with CoSWID? This would= allow this draft to move forward, while CWT use is defined. Would you be i= nterested in working on this draft?

Yes, I am interested, with coauthors. Are you offering?

If CWTs are to be proliferated the way JWTs have been, I suspect it wi= ll be easier for CoSWID to gain traction.  I think it would be good to= list use of a CWT as an option, then registering the claims that one might= use for let's say having the CWT be an EAT and be a remote attestation.  I think adoption may be better i= f these are tied together and made simple for regular readers who will like= ly start to come across CWTs as opposed to just signing with one or more si= gners.  I think what you have us good, but having both as options would be better.

Both options would also create the need for some signature verifiers t= o support both options. This is something that should be discussed at great= er length, as it could also create potential interoperability issues. I am = not against both options, but we should talk to potential implementors about what they want. This is maybe = more reason to do this work in a separate draft to allow for some time to w= ork out these details..

OK, great point on interoperability.  My hunch is that since CWTs= are in EATs, there is code and there is an established pattern of use that= this would be more likely to be supported (more widely).  It may be g= ood to pull this all out as not to create confusion as if it is int he base draft, this will be seen as necessary as= opposed to a choice and as you note, will create confusion.
 
The claims about the signature may vary from the data in the CoSWID, s= o this could be potentially useful.

Right and minimal claims are possible too.  

Thanks,
Kathleen 

True.
 
Thank you!
--

Best regards,
Kathleen


--

Best regards,
Kathleen


--

Best regards,
Kathleen
--_000_BN7PR09MB281982821C9CD2D11A5F546AF04C0BN7PR09MB2819namp_-- --_004_BN7PR09MB281982821C9CD2D11A5F546AF04C0BN7PR09MB2819namp_ Content-Type: text/plain; name="ATT00001.txt" Content-Description: ATT00001.txt Content-Disposition: attachment; filename="ATT00001.txt"; size=409; creation-date="Mon, 18 Nov 2019 12:36:54 GMT"; modification-date="Mon, 18 Nov 2019 12:36:54 GMT" Content-ID: Content-Transfer-Encoding: base64 X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNhY20gbWFp bGluZyBsaXN0DQpzYWNtQGlldGYub3JnDQpodHRwczovL2djYzAxLnNhZmVsaW5rcy5wcm90ZWN0 aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWlsbWFu JTJGbGlzdGluZm8lMkZzYWNtJmFtcDtkYXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQw bmlzdC5nb3YlN0M3NWJhNDVjZDk2YWI0N2MxNDk2ODA4ZDc2YzIzZmQ2MiU3QzJhYjVkODJmZDhm YTQ3OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzAlN0M2MzcwOTY3NzQxMzg0MDM1ODQmYW1wO3Nk YXRhPW9pZmpnRnFxaVBHV2VKSVlWNm5oZzhFcFozYU5HaERoN3dCUzNzTnhmSjAlM0QmYW1wO3Jl c2VydmVkPTANCg== --_004_BN7PR09MB281982821C9CD2D11A5F546AF04C0BN7PR09MB2819namp_-- From nobody Mon Nov 18 17:52:26 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFDBD12004E; Mon, 18 Nov 2019 17:52:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5k3I5GbdL0pS; Mon, 18 Nov 2019 17:52:18 -0800 (PST) Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02on2072a.outbound.protection.outlook.com [IPv6:2a01:111:f400:7d04::72a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 620B112022A; Mon, 18 Nov 2019 17:52:18 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=E5fFmr6nLuNo7YKBLMdOOzuSNFfHP8pgr9DhJ+NVxE8JQdjDMX8457DO0tos/9wEa7JnSXItOMCQ6fmO5H+KChu+y+wUQNnTQpAi7coGWCkEgS/FZybVKZegzNYi9DQ8clsr63yq3RUk98wW8EBsq9TaPLcFB+XNLATSw5nDpbMDIEp25lzE70n1JiLubMeLoFW0lQRCTMuTIwPSD8H78lv4uJ+OuSdx0z0ODf5+Tgq/qHxCBK/KGWTh2K/ctwO2Q3nRPR3it6GEy/Xga1NxfvA+UIfaVXZx1GArTSBNimJBC/go262Lcl9A9ysOShEF/soCKFyUfbV8IaJ2gEAKTg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xaHfYMujn9hzAoLBLZYi6Qb5zd3DpX0dor4aEhdqJhY=; b=UsSEuE51zdajyeDkulqJ+ZKIk7qJC/lst8AulDWHwrLJeUWK7pzt5zejbaHjqks2JwYkpreY0oZqGpIFximbk74sxSlClOLUiA6800Y4H18WD+s3ZMKggL5QjthmrcIt8njA93Cm1b5tnE+RVzCazzuQnb1DF9OOGIQS7m+Pg0O3F4f0qlciNh/ViAxkbH3aX2SAMQa48fXSWNt3LnApCbYuCPzH/5KRiQi/ASbv0gVeM64W4IcKfWA0pn+xfQ2C96syOquMFRxZyNN8khG2COrvRvkKwcutt9Qx84x8cWMR5WuPRhLMESjyBQ/qcvMTeH7ZTlUeKqVaWUPZFirGqg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xaHfYMujn9hzAoLBLZYi6Qb5zd3DpX0dor4aEhdqJhY=; b=klcPeEyJDaSq6NyOL0wcv3GmItSHaqlgJLonZVtR501h9KimNPLA+74deBMqXH0ouVNtZqJyAKpsX8YiCywlw7oCG/xqMKuDALC1ZCM90b9THManSV5CpsVMLlzMdOVsd/0qceVzJ7sUFoP7ctp2wpBAMiYkOerloFiNnALnf9A= Received: from BN7PR09MB2819.namprd09.prod.outlook.com (52.135.242.24) by BN7SPR01MB5.namprd09.prod.outlook.com (20.176.25.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.30; Tue, 19 Nov 2019 01:52:16 +0000 Received: from BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310]) by BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310%7]) with mapi id 15.20.2451.031; Tue, 19 Nov 2019 01:52:16 +0000 From: "Waltermire, David A. (Fed)" To: "cose@ietf.org" CC: sacm Thread-Topic: [sacm] CoSWID review Thread-Index: AQHVi0zu4YoCNvAGF0yJOMlWNNVbBKePD0jWgAHz1s+AANn+TYAAAOYr Date: Tue, 19 Nov 2019 01:52:15 +0000 Message-ID: References: , , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [2001:67c:370:128:440f:2dc1:3eca:7ca4] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 5ef3c90b-778e-4e21-9e7a-08d76c931acb x-ms-traffictypediagnostic: BN7SPR01MB5: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 022649CC2C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(39860400002)(396003)(346002)(136003)(366004)(199004)(189003)(4326008)(105004)(450100002)(71200400001)(71190400001)(8936002)(33656002)(8676002)(81166006)(81156014)(9686003)(2351001)(19627405001)(64756008)(76176011)(52536014)(66446008)(102836004)(66556008)(1730700003)(66946007)(2906002)(76116006)(91956017)(316002)(6506007)(53546011)(6116002)(186003)(2940100002)(606006)(14444005)(7696005)(256004)(5660300002)(66476007)(2501003)(99286004)(966005)(478600001)(86362001)(6306002)(46003)(11346002)(229853002)(476003)(6436002)(14454004)(74316002)(25786009)(7736002)(55016002)(5640700003)(486006)(6916009)(446003)(54896002)(6246003)(236005); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7SPR01MB5; H:BN7PR09MB2819.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: d0/Ksn5Cn22T6vUUeH5ZmTdW3/2zVJlMJT2RcQtd4bqTDENcG6DRs8sueNJBRg7kjfuTT9c06nKlIvFlNJcT44GKULGq3tuo5GdI3iUoX+hAmmFXZTA997WA/fvnhQciYdtj+x6ABWiIvynAfZEFiB73PsQy2yQSsusNfWMdPC3sGcEEcPYqb/999nmmb9bu1iGdbI/LvtlP1c3yW3KWKe5R0C34q5Co5UqHzOTu/PrKN6Z2783nc/B/5uNhexle8l5AUegcvriEiu9O70PUbCx9uFauaGvGGoprZlHMA4LI7jzJ2a3FIVVetLJb1sJjtONrN2S8/RIXMqQBMJQBayWGEZJKgh6q3gFkX7UQfJhFIJ98CN6JmBZogaHjDm0+VHARDgDvxwfa+uJGxCsh3xDdRHFtkOGtyQbDLgKn3frV+pIISI8fFiAtTXjFjSiH x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BN7PR09MB28195DC7222FF17789AAC7EBF04C0BN7PR09MB2819namp_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: 5ef3c90b-778e-4e21-9e7a-08d76c931acb X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2019 01:52:15.9600 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: E3UaBZWGfIE0O0JCWWZXfBce2ODv89wANIGEcvFsHWjAiA0D+t9sDs5Vf8uIBYbwlheY8RU9sBd9pq5yNdrnxw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7SPR01MB5 Archived-At: Subject: Re: [COSE] [sacm] CoSWID review X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 01:52:24 -0000 --_000_BN7PR09MB28195DC7222FF17789AAC7EBF04C0BN7PR09MB2819namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable COSE WG, I accidently sent the last email early. Please ignore it. Kathleen provided comments below on draft-ietf-sacm-coswid suggesting that = we use the COSE proposed algorithm identifiers for hashes in CoSWID. We are= currently using the entries in the IANA Named Information Hash Algorithm R= egistry. It would be great to align with the COSE hash algorithms, but I ca= n't figure out a way to point to only the hash algorithms in the COSE Algor= ithms registry. We can point to the draft-ietf-cose-hash-algs once its publ= ished as an RFC, but this would be less agile in the face of future updates= to COSE hash algorithms. It would very useful if the COSE Algorithms regis= try has a column for algorithm type. That way we could select only the hash= algorithms. Do you have any suggestions on how we might move forward? Regards, Dave Waltermire ________________________________ From: Waltermire, David A. (Fed) Sent: Monday, November 18, 2019 8:39 PM To: cose@ietf.org Cc: sacm Subject: Fw: [sacm] CoSWID review On Sun, Nov 17, 2019 at 6:45 AM Kathleen Moriarty > wrote: Hi Dave, On Sun, Nov 17, 2019 at 3:02 AM Dave Waltermire > wrote: Kathleen, Thank you for the review. I have addressed your comments in the latest draf= t. Some comments on your comments are inline below. From: sacm > on behalf = of Kathleen Moriarty > Date: Fri, October 25, 2019 11:57 PM +0800 To: ">" > Subject: [sacm] CoSWID review Section 2.6: A Thumbprint is specified in this section, should this be referenced for cl= arity on hashes with COSE for object identification: https://datatracker.ie= tf.org/doc/draft-ietf-cose-hash-algs/ Would it be better to tie to the COSE set of supported algorithms (they lik= ely match, but I didn't verify)? The IANA COSE Algorithms registry contains other types of algorithms beyond= hash algorithms. To use this registry, we would need to list the hash-spec= ific algorithms, which is less ideal. Its a shame this registry isn't broke= n out by algorithm type, which would make this decision easy. With the IANA= "Named Information Hash Algorithm Registry", we get only hash algorithms, = which is what we are looking for. Can you live with use of the IANA "Named= Information Hash Algorithm Registry"? COSE is open as is their main draft. This is a problem that can likely be = solved this week... Talk to Jim. Let me and the list know what's possible. --_000_BN7PR09MB28195DC7222FF17789AAC7EBF04C0BN7PR09MB2819namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
COSE WG,

I accidently sent the last email early. Please ignore it.

Kathleen provided comments below on draft-ietf-sacm-coswid suggesting that = we use the COSE proposed algorithm identifiers for hashes in CoSWID. We are= currently using the entries in the IANA Named Information Hash Algorithm R= egistry. It would be great to align with the COSE hash algorithms, but I can't figure out a way to point to on= ly the hash algorithms in the COSE Algorithms registry. We can point to the= draft-ietf-cose-hash-algs once its published as an RFC, but this would be = less agile in the face of future updates to COSE hash algorithms. It would very useful if the COSE Algorithms regist= ry has a column for algorithm type. That way we could select only the hash algorithms.

Do you have any suggestions on how we might move forward?

Regards,
Dave Waltermire

From: Waltermire, David A. = (Fed) <david.waltermire@nist.gov>
Sent: Monday, November 18, 2019 8:39 PM
To: cose@ietf.org <cose@ietf.org>
Cc: sacm <sacm@ietf.org>
Subject: Fw: [sacm] CoSWID review
 



On Sun, Nov 17, 2019 at 6:45 AM Kat= hleen Moriarty <kath= leen.moriarty.ietf@gmail.com> wrote:
Hi Dave,

On Sun, Nov 17, 2019 at 3:02 AM Dav= e Waltermire <davewaltermire@gmail.com> wrote:
Kathleen,

Thank you for the review. I have addressed your comments in the latest= draft. Some comments on your comments are inline below.

From: sacm <sacm-bounces@ietf.org> on behalf of Kathleen Moriarty <kathleen.mo= riarty.ietf@gmail.com>
Date: Fri, October 25, 2019 11:57 PM +0800
To: "<sacm@ietf.= org>" <sa= cm@ietf.org>
Subject: [sacm] CoSWID review


Section 2.6:
A Thumbprint is specified in this section, should this be referenced f= or clarity on hashes with COSE for object identification: https://datatracker.ietf.o= rg/doc/draft-ietf-cose-hash-algs/
Would it be better to tie to the COSE set of supported algorithms (the= y likely match, but I didn't verify)?

The IANA COSE Algorithms registry contains other types of algorithms b= eyond hash algorithms. To use this registry, we would need to list the hash= -specific algorithms, which is less ideal. Its a shame this registry isn't = broken out by algorithm type, which would make this decision easy. With the IANA "Named Information = Hash Algorithm Registry", we get only hash algorithms, which is what w= e are looking for. Can you live with use of the  IANA "Named Info= rmation Hash Algorithm Registry"?

COSE is open as is their main draft.  This is a problem that can = likely be solved this week...  Talk to Jim. Let me and the list know w= hat's possible. 
--_000_BN7PR09MB28195DC7222FF17789AAC7EBF04C0BN7PR09MB2819namp_-- From nobody Mon Nov 18 18:24:57 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89880120232; Mon, 18 Nov 2019 18:24:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lPp3Icm-gpWC; Mon, 18 Nov 2019 18:24:47 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D85C512002E; Mon, 18 Nov 2019 18:24:46 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 18 Nov 2019 18:24:39 -0800 From: Jim Schaad To: "'Waltermire, David A. (Fed)'" , CC: 'sacm' References: , , In-Reply-To: Date: Tue, 19 Nov 2019 10:24:37 +0800 Message-ID: <010401d59e80$7f4be360$7de3aa20$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0105_01D59EC3.8D70AA00" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQHzpN9RYTZyhsYpaTlVDcXoTZlvQAK3gtZBAhXIKp0BmGR9ZACpgMxNAk/8JVUCWvkKc6b35bBw Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] [sacm] CoSWID review X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 02:24:52 -0000 ------=_NextPart_000_0105_01D59EC3.8D70AA00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Do you believe that there is an issue where you cannot say. Use the values from registry X and this must be a hash algorithm without trying to do some type of filter. If we do a filter then we start playing the game of naming all of the different types of algorithms and potentially need to deal with algorithms which would have two algorithm type labels. Jim From: COSE On Behalf Of Waltermire, David A. (Fed) Sent: Tuesday, November 19, 2019 9:52 AM To: cose@ietf.org Cc: sacm Subject: Re: [COSE] [sacm] CoSWID review COSE WG, I accidently sent the last email early. Please ignore it. Kathleen provided comments below on draft-ietf-sacm-coswid suggesting that we use the COSE proposed algorithm identifiers for hashes in CoSWID. We are currently using the entries in the IANA Named Information Hash Algorithm Registry. It would be great to align with the COSE hash algorithms, but I can't figure out a way to point to only the hash algorithms in the COSE Algorithms registry. We can point to the draft-ietf-cose-hash-algs once its published as an RFC, but this would be less agile in the face of future updates to COSE hash algorithms. It would very useful if the COSE Algorithms registry has a column for algorithm type. That way we could select only the hash algorithms. Do you have any suggestions on how we might move forward? Regards, Dave Waltermire _____ From: Waltermire, David A. (Fed) > Sent: Monday, November 18, 2019 8:39 PM To: cose@ietf.org > Cc: sacm > Subject: Fw: [sacm] CoSWID review On Sun, Nov 17, 2019 at 6:45 AM Kathleen Moriarty > wrote: Hi Dave, On Sun, Nov 17, 2019 at 3:02 AM Dave Waltermire > wrote: Kathleen, Thank you for the review. I have addressed your comments in the latest draft. Some comments on your comments are inline below. From: sacm > on behalf of Kathleen Moriarty > Date: Fri, October 25, 2019 11:57 PM +0800 To: " >" > Subject: [sacm] CoSWID review Section 2.6: A Thumbprint is specified in this section, should this be referenced for clarity on hashes with COSE for object identification: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-algs/ Would it be better to tie to the COSE set of supported algorithms (they likely match, but I didn't verify)? The IANA COSE Algorithms registry contains other types of algorithms beyond hash algorithms. To use this registry, we would need to list the hash-specific algorithms, which is less ideal. Its a shame this registry isn't broken out by algorithm type, which would make this decision easy. With the IANA "Named Information Hash Algorithm Registry", we get only hash algorithms, which is what we are looking for. Can you live with use of the IANA "Named Information Hash Algorithm Registry"? COSE is open as is their main draft. This is a problem that can likely be solved this week... Talk to Jim. Let me and the list know what's possible. ------=_NextPart_000_0105_01D59EC3.8D70AA00 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Do you = believe that there is an issue where you cannot say.  Use the = values from registry X and this must be a hash algorithm without trying = to do some type of filter.  If we do a filter then we start playing = the game of naming all of the different types of algorithms and = potentially need to deal with algorithms which would have two algorithm = type labels.

 

Jim

 

 

From: COSE = <cose-bounces@ietf.org> On Behalf Of Waltermire, David A. = (Fed)
Sent: Tuesday, November 19, 2019 9:52 AM
To: = cose@ietf.org
Cc: sacm = <sacm@ietf.org>
Subject: Re: [COSE] [sacm] CoSWID = review

 

COSE = WG,

 

=

I = accidently sent the last email early. Please ignore = it.

 

=

Kathleen provided comments below = on draft-ietf-sacm-coswid suggesting that we use the COSE proposed = algorithm identifiers for hashes in CoSWID. We are currently using the = entries in the IANA Named Information Hash Algorithm Registry. It would = be great to align with the COSE hash algorithms, but I can't figure out = a way to point to only the hash algorithms in the COSE Algorithms = registry. We can point to the draft-ietf-cose-hash-algs once its = published as an RFC, but this would be less agile in the face of future = updates to COSE hash algorithms. It would very useful if the COSE = Algorithms registry has a column for algorithm type. That way we could = select only the hash algorithms.

 

=

Do you have any suggestions on = how we might move forward?

 

=

Regards,

Dave = Waltermire

 

=

From: Waltermire, David A. (Fed) <david.waltermire@nist.gov&g= t;
Sent: Monday, November 18, 2019 8:39 PM
To: cose@ietf.org <cose@ietf.org>
Cc: sacm = <sacm@ietf.org>
Subject: = Fw: [sacm] CoSWID review

 

 

=

 

=

 

=

On Sun, Nov 17, 2019 at 6:45 AM = Kathleen Moriarty <kathleen.moriarty.ietf@g= mail.com> wrote:

Hi Dave,

 

On Sun, Nov 17, 2019 at 3:02 AM Dave Waltermire <davewaltermire@gmail.com> = wrote:

Kathleen,

 

Thank you for the review. I have addressed your = comments in the latest draft. Some comments on your comments are inline = below.

 

From: sacm <sacm-bounces@ietf.org> on behalf of Kathleen = Moriarty <kathleen.moriarty.ietf@gmail.com>

=

Date: Fri, October 25, 2019 11:57 PM +0800
To: = "<sacm@ietf.org>" <sacm@ietf.org>
Subject: [sacm] CoSWID = review

 

 

Section = 2.6:

A Thumbprint is specified in this section, should this = be referenced for clarity on hashes with COSE for object = identification: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-a= lgs/

Would it be = better to tie to the COSE set of supported algorithms (they likely = match, but I didn't = verify)?

 

The IANA COSE Algorithms registry contains other types = of algorithms beyond hash algorithms. To use this registry, we would = need to list the hash-specific algorithms, which is less ideal. Its a = shame this registry isn't broken out by algorithm type, which would make = this decision easy. With the IANA "Named Information Hash = Algorithm Registry", we get only hash algorithms, which is what we = are looking for. Can you live with use of the  IANA "Named = Information Hash Algorithm = Registry"?

 

COSE is open as is their main draft.  This is a = problem that can likely be solved this week...  Talk to Jim. Let me = and the list know what's = possible. 

=
------=_NextPart_000_0105_01D59EC3.8D70AA00-- From nobody Mon Nov 18 19:08:14 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8968C120800; Mon, 18 Nov 2019 19:08:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z5p2Sq5Ivetc; Mon, 18 Nov 2019 19:08:04 -0800 (PST) Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02on2072c.outbound.protection.outlook.com [IPv6:2a01:111:f400:7d04::72c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2EF51207FD; Mon, 18 Nov 2019 19:08:03 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PdON7Bv0zwxl87CPNRdaZ/kGfHbOVqToGdLM8Mqz1tznf93fj4V5h+CKlgNzq84fDxCyF+a69ZZOxv+tT1KTfMtqWCvOfDG/i7JFAqySWzCFYSAg5JTqeiBsL6oDVAxVfdnbnlgxOIKuq0aQ7jTAxdrXMynFmnUd97SsFGo+bFUcn7m6dX+nrnlf+HtB95hL8g7w1T6E8CmQk0CMkT02KY3/sU567MEQ8TRI23HRcVzdVqvk2vqxjLpZEehmRF2aa4Wgyl0oTIEOa/Bset0FCyUUaYr0wkLmgSSgsYXwRFzfa0r+EXQQfaJOAOHonN8PVPR2DwIw1f9y+obnPcWteA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0BaL3iuSiuHZ+QDjxVC3fchJ/vwwJX/QAQxnk2H8NlQ=; b=SfbxEODdzeu1Fdc1Q+dxrSkal6KEAHMAA14G66zxW+0KJFLyZ8OgOoAWoWJt6I2lYl7inkVhjsMEIgLXzF+EEBBaSY7WpDsCJEKj57QzuDt2vJOVJ11Hzv33qSoqBxF70GJuZAEVzMIy8LPuPyLj9B5K1hqzjlcgUcVTL60eIeC+JyYROVJBLvl6midv751hra2cV/MnxwL0xVjOMZEk7U60ir0EOfgbS2r9dCRl5/w5438eAaUsmRT0iuthooVjmm+brQt+s9hDqwyCt1psJxIJGBvlFPSeISC5G5SFlW9oMCJs6WtM8+rDXr9LAuFRzMODZTtvmiEBB2dzaMQ5IA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0BaL3iuSiuHZ+QDjxVC3fchJ/vwwJX/QAQxnk2H8NlQ=; b=iYlC3TPGvs5CAd9usByHL8MrI+cs/abrkNyKYFfMF5eh9wMVxCLN3E18r5wDiWay7qekk2FsKopvzsLariHfo2wzC3sug8qk+P+OGomqNC6fy1CeC/p9UdMhINuinArSlc0cKA/zGoqOT2JdpI+RsCsta/GdJyYsHPZQPwIF87g= Received: from BN7PR09MB2819.namprd09.prod.outlook.com (52.135.242.24) by BN7PR09MB2801.namprd09.prod.outlook.com (52.135.254.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.26; Tue, 19 Nov 2019 03:08:02 +0000 Received: from BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310]) by BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310%7]) with mapi id 15.20.2451.031; Tue, 19 Nov 2019 03:08:02 +0000 From: "Waltermire, David A. (Fed)" To: Jim Schaad , "cose@ietf.org" CC: 'sacm' Thread-Topic: [COSE] [sacm] CoSWID review Thread-Index: AQHVi0zu4YoCNvAGF0yJOMlWNNVbBKePD0jWgAHz1s+AANn+TYAAAOYrgAAMXoCAAAcECw== Date: Tue, 19 Nov 2019 03:08:02 +0000 Message-ID: References: , , , <010401d59e80$7f4be360$7de3aa20$@augustcellars.com> In-Reply-To: <010401d59e80$7f4be360$7de3aa20$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [2001:67c:370:128:440f:2dc1:3eca:7ca4] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: bf7fee89-0026-4715-526c-08d76c9db07c x-ms-traffictypediagnostic: BN7PR09MB2801: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 022649CC2C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(136003)(396003)(346002)(39850400004)(366004)(199004)(189003)(478600001)(8936002)(486006)(64756008)(966005)(476003)(11346002)(46003)(105004)(81156014)(446003)(81166006)(14454004)(71200400001)(71190400001)(606006)(76116006)(8676002)(6116002)(91956017)(33656002)(7736002)(2501003)(66556008)(99286004)(102836004)(19627405001)(74316002)(66946007)(110136005)(66476007)(7696005)(4326008)(256004)(6246003)(14444005)(25786009)(5660300002)(86362001)(6306002)(54896002)(2906002)(186003)(66446008)(6436002)(229853002)(316002)(53546011)(6506007)(55016002)(9686003)(52536014)(236005)(76176011); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR09MB2801; H:BN7PR09MB2819.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: AXWV6kMlMzlpstawJVILS42QnMLA2a9uEx5I2bwi1Esv4rtZJuMSsaqOQMoBPGYgC1uE4tE+HjB6ORkIUV364RvX9kUzn/KTsrhT107dZQ7nOh/NNvuvXh+IwGqFNUtjW9TnFZokE/Gj7MMrAQdMXt6xVCFz9GVrd0qKoz9/HEwm4L2bKpIlYQSK2Ru+szUAKBax+Pq4G7lL5qLPPz/54syKEifbyIzz9G2BQzBReoLbcAH9pNbQOWm8532u6d/Dm/S3WO4pCEcgaCwjQOoCtSkIpbwXI985HK5lfCG0MPN5M7O812j60mpbsWT83CBRJP926S4q/KdICwvBAXcFTWSsuiG+d935RBpK80Lm5TywlIssmVXCPrAerimQxssHRwjYKUpoUixlx0b2A5Z6s1J8AyJ5sC1lhBI5n/95iUveFlaZSv4uREaSwNPZBWmtX9Qq/DBidFJQYNEXlLfbW9putcZpSzpUZ58CT5luvao= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BN7PR09MB2819937DE42C9A1FA0F7C675F04C0BN7PR09MB2819namp_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: bf7fee89-0026-4715-526c-08d76c9db07c X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2019 03:08:02.1758 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Kf2dc+didUmDDux4dry5EI0d6dmZS7EEZybZy86wxOwrPv2nprc/k8broyWa0yR8Ij1EosHCEgLdn3GkgBap1Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR09MB2801 Archived-At: Subject: Re: [COSE] [sacm] CoSWID review X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 03:08:09 -0000 --_000_BN7PR09MB2819937DE42C9A1FA0F7C675F04C0BN7PR09MB2819namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Jim, Your suggestion of expressing the filter by way of text in the CoSWID draft= would provide a path forward. This approach is less clear cut as it leaves= the implementer to decide which algorithms are "hash algorithms". This wil= l likely lead to different implementations choosing a different set of algo= rithms. To address this, I guess we will need to include some text that mak= es sure that a parser will not fail the parse when encountering an unsuppor= ted hash algorithm identifier. Any other ideas that might provide a clearer solution? Thanks, Dave ________________________________ From: Jim Schaad Sent: Monday, November 18, 2019 9:24 PM To: Waltermire, David A. (Fed) ; cose@ietf.org <= cose@ietf.org> Cc: 'sacm' Subject: RE: [COSE] [sacm] CoSWID review Do you believe that there is an issue where you cannot say. Use the values= from registry X and this must be a hash algorithm without trying to do som= e type of filter. If we do a filter then we start playing the game of nami= ng all of the different types of algorithms and potentially need to deal wi= th algorithms which would have two algorithm type labels. Jim From: COSE On Behalf Of Waltermire, David A. (Fed) Sent: Tuesday, November 19, 2019 9:52 AM To: cose@ietf.org Cc: sacm Subject: Re: [COSE] [sacm] CoSWID review COSE WG, I accidently sent the last email early. Please ignore it. Kathleen provided comments below on draft-ietf-sacm-coswid suggesting that = we use the COSE proposed algorithm identifiers for hashes in CoSWID. We are= currently using the entries in the IANA Named Information Hash Algorithm R= egistry. It would be great to align with the COSE hash algorithms, but I ca= n't figure out a way to point to only the hash algorithms in the COSE Algor= ithms registry. We can point to the draft-ietf-cose-hash-algs once its publ= ished as an RFC, but this would be less agile in the face of future updates= to COSE hash algorithms. It would very useful if the COSE Algorithms regis= try has a column for algorithm type. That way we could select only the hash= algorithms. Do you have any suggestions on how we might move forward? Regards, Dave Waltermire ________________________________ From: Waltermire, David A. (Fed) > Sent: Monday, November 18, 2019 8:39 PM To: cose@ietf.org > Cc: sacm > Subject: Fw: [sacm] CoSWID review On Sun, Nov 17, 2019 at 6:45 AM Kathleen Moriarty > wrote: Hi Dave, On Sun, Nov 17, 2019 at 3:02 AM Dave Waltermire > wrote: Kathleen, Thank you for the review. I have addressed your comments in the latest draf= t. Some comments on your comments are inline below. From: sacm > on behalf = of Kathleen Moriarty > Date: Fri, October 25, 2019 11:57 PM +0800 To: ">" > Subject: [sacm] CoSWID review Section 2.6: A Thumbprint is specified in this section, should this be referenced for cl= arity on hashes with COSE for object identification: https://datatracker.ie= tf.org/doc/draft-ietf-cose-hash-algs/ Would it be better to tie to the COSE set of supported algorithms (they lik= ely match, but I didn't verify)? The IANA COSE Algorithms registry contains other types of algorithms beyond= hash algorithms. To use this registry, we would need to list the hash-spec= ific algorithms, which is less ideal. Its a shame this registry isn't broke= n out by algorithm type, which would make this decision easy. With the IANA= "Named Information Hash Algorithm Registry", we get only hash algorithms, = which is what we are looking for. Can you live with use of the IANA "Named= Information Hash Algorithm Registry"? COSE is open as is their main draft. This is a problem that can likely be = solved this week... Talk to Jim. Let me and the list know what's possible. --_000_BN7PR09MB2819937DE42C9A1FA0F7C675F04C0BN7PR09MB2819namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Jim,

Your suggestion of expressing the filter by way of text in the CoSWID= draft would provide a path forward. This approach is less clear cut as it = leaves the implementer to decide which algorithms are "hash algorithms= ". This will likely lead to different implementations choosing a different set of algorithms. To address this, I= guess we will need to include some text that makes sure that a parser will= not fail the parse when encountering an unsupported hash algorithm identif= ier.

Any other ideas that might provide a clearer solution?

Thanks,
Dave

From: Jim Schaad <ietf@a= ugustcellars.com>
Sent: Monday, November 18, 2019 9:24 PM
To: Waltermire, David A. (Fed) <david.waltermire@nist.gov>; co= se@ietf.org <cose@ietf.org>
Cc: 'sacm' <sacm@ietf.org>
Subject: RE: [COSE] [sacm] CoSWID review
 

Do you believe that there is an issue where you cannot say.  Use the v= alues from registry X and this must be a hash algorithm without trying to d= o some type of filter.  If we do a filter then we start playing the ga= me of naming all of the different types of algorithms and potentially need to deal with algorithms which would have t= wo algorithm type labels.

 

Jim

 

 

From: COSE <cose-bounces@ietf.org> On Behalf Of Walterm= ire, David A. (Fed)
Sent: Tuesday, November 19, 2019 9:52 AM
To: cose@ietf.org
Cc: sacm <sacm@ietf.org>
Subject: Re: [COSE] [sacm] CoSWID review

 

COSE WG,

 

I accidently sent the last em= ail early. Please ignore it.

 

Kathleen provided comments be= low on draft-ietf-sacm-coswid suggesting that we use the COSE proposed algo= rithm identifiers for hashes in CoSWID. We are currently using the entries = in the IANA Named Information Hash Algorithm Registry. It would be great to align with the COSE hash algorith= ms, but I can't figure out a way to point to only the hash algorithms in th= e COSE Algorithms registry. We can point to the draft-ietf-cose-hash-algs o= nce its published as an RFC, but this would be less agile in the face of future updates to COSE hash algori= thms. It would very useful if the COSE Algorithms registry has a colum= n for algorithm type. That way we could select only the hash algorithms.

 

Do you have any suggestions o= n how we might move forward?

 

Regards,

Dave Waltermire

 

From:= Waltermire, David A. (Fed) <david.waltermire@nist.gov>
Sent: Monday, November 18, 2019 8:39 PM
To: cose@ietf.org <cose@ietf.org>
Cc: sacm <sacm@ietf.org><= br> Subject: Fw: [sacm] CoSWID review

 

 

 

 

On Sun, Nov 17, 2019 at 6:45 AM Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wro= te:

Hi Dave,

 

On Sun, Nov 17, 2019 at 3:02 AM Dave Waltermire <davewaltermire@gmail.com> wro= te:

Kathleen,

 

Thank you for the review. I have addressed your comments in the latest draf= t. Some comments on your comments are inline below.

 

From: sacm <s= acm-bounces@ietf.org> on behalf of Kathleen Moriarty <kathleen.moriart= y.ietf@gmail.com>

Date: Fri, October 25, 2019 11:57 PM +0800
To: "<sacm@ietf.= org>" <sa= cm@ietf.org>
Subject: [sacm] CoSWID review

 

 

Section 2.6:

A Thumbprint is specified in this section, should this be referenced for cl= arity on hashes with COSE for object identification: https://datatracker.ietf.org/doc/= draft-ietf-cose-hash-algs/

Would it be better to tie to the COSE set of supported algorithms (they lik= ely match, but I didn't verify)?

 

The IANA COSE Algorithms registry contains other types of algorithms beyond= hash algorithms. To use this registry, we would need to list the hash-spec= ific algorithms, which is less ideal. Its a shame this registry isn't broke= n out by algorithm type, which would make this decision easy. With the IANA "Named Information Hash A= lgorithm Registry", we get only hash algorithms, which is what we are = looking for. Can you live with use of the  IANA "Named Informatio= n Hash Algorithm Registry"?

 

COSE is open as is their main draft.  This is a problem that can likel= y be solved this week...  Talk to Jim. Let me and the list know what's= possible. 

--_000_BN7PR09MB2819937DE42C9A1FA0F7C675F04C0BN7PR09MB2819namp_-- From nobody Mon Nov 18 19:22:46 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 257D6120BEC; Mon, 18 Nov 2019 19:22:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ospondq1mwYh; Mon, 18 Nov 2019 19:22:39 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44BF5120B7B; Mon, 18 Nov 2019 19:22:39 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 18 Nov 2019 19:22:32 -0800 From: Jim Schaad To: "'Waltermire, David A. (Fed)'" , CC: 'sacm' References: , , , <010401d59e80$7f4be360$7de3aa20$@augustcellars.com> In-Reply-To: Date: Tue, 19 Nov 2019 11:22:30 +0800 Message-ID: <011a01d59e88$954f7110$bfee5330$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_011B_01D59ECB.A3739B70" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQHzpN9RYTZyhsYpaTlVDcXoTZlvQAK3gtZBAhXIKp0BmGR9ZACpgMxNAk/8JVUCWvkKcwKTCkqPAr2UdpumzXEY8A== Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] [sacm] CoSWID review X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 03:22:45 -0000 ------=_NextPart_000_011B_01D59ECB.A3739B70 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit You probably need to have that text in any event. If a new hash algorithm is added to the table you can still end up with the same problem. Old code vs new code. jim From: Waltermire, David A. (Fed) Sent: Tuesday, November 19, 2019 11:08 AM To: Jim Schaad ; cose@ietf.org Cc: 'sacm' Subject: Re: [COSE] [sacm] CoSWID review Jim, Your suggestion of expressing the filter by way of text in the CoSWID draft would provide a path forward. This approach is less clear cut as it leaves the implementer to decide which algorithms are "hash algorithms". This will likely lead to different implementations choosing a different set of algorithms. To address this, I guess we will need to include some text that makes sure that a parser will not fail the parse when encountering an unsupported hash algorithm identifier. Any other ideas that might provide a clearer solution? Thanks, Dave _____ From: Jim Schaad > Sent: Monday, November 18, 2019 9:24 PM To: Waltermire, David A. (Fed) >; cose@ietf.org > Cc: 'sacm' > Subject: RE: [COSE] [sacm] CoSWID review Do you believe that there is an issue where you cannot say. Use the values from registry X and this must be a hash algorithm without trying to do some type of filter. If we do a filter then we start playing the game of naming all of the different types of algorithms and potentially need to deal with algorithms which would have two algorithm type labels. Jim From: COSE > On Behalf Of Waltermire, David A. (Fed) Sent: Tuesday, November 19, 2019 9:52 AM To: cose@ietf.org Cc: sacm > Subject: Re: [COSE] [sacm] CoSWID review COSE WG, I accidently sent the last email early. Please ignore it. Kathleen provided comments below on draft-ietf-sacm-coswid suggesting that we use the COSE proposed algorithm identifiers for hashes in CoSWID. We are currently using the entries in the IANA Named Information Hash Algorithm Registry. It would be great to align with the COSE hash algorithms, but I can't figure out a way to point to only the hash algorithms in the COSE Algorithms registry. We can point to the draft-ietf-cose-hash-algs once its published as an RFC, but this would be less agile in the face of future updates to COSE hash algorithms. It would very useful if the COSE Algorithms registry has a column for algorithm type. That way we could select only the hash algorithms. Do you have any suggestions on how we might move forward? Regards, Dave Waltermire _____ From: Waltermire, David A. (Fed) > Sent: Monday, November 18, 2019 8:39 PM To: cose@ietf.org > Cc: sacm > Subject: Fw: [sacm] CoSWID review On Sun, Nov 17, 2019 at 6:45 AM Kathleen Moriarty > wrote: Hi Dave, On Sun, Nov 17, 2019 at 3:02 AM Dave Waltermire > wrote: Kathleen, Thank you for the review. I have addressed your comments in the latest draft. Some comments on your comments are inline below. From: sacm > on behalf of Kathleen Moriarty > Date: Fri, October 25, 2019 11:57 PM +0800 To: " >" > Subject: [sacm] CoSWID review Section 2.6: A Thumbprint is specified in this section, should this be referenced for clarity on hashes with COSE for object identification: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-algs/ Would it be better to tie to the COSE set of supported algorithms (they likely match, but I didn't verify)? The IANA COSE Algorithms registry contains other types of algorithms beyond hash algorithms. To use this registry, we would need to list the hash-specific algorithms, which is less ideal. Its a shame this registry isn't broken out by algorithm type, which would make this decision easy. With the IANA "Named Information Hash Algorithm Registry", we get only hash algorithms, which is what we are looking for. Can you live with use of the IANA "Named Information Hash Algorithm Registry"? COSE is open as is their main draft. This is a problem that can likely be solved this week... Talk to Jim. Let me and the list know what's possible. ------=_NextPart_000_011B_01D59ECB.A3739B70 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

You = probably need to have that text in any event.  If a new hash = algorithm is added to the table you can still end up with the same = problem.  Old code vs new code.

 

jim

 

From: Waltermire, David A. (Fed) = <david.waltermire@nist.gov>
Sent: Tuesday, November 19, = 2019 11:08 AM
To: Jim Schaad <ietf@augustcellars.com>; = cose@ietf.org
Cc: 'sacm' = <sacm@ietf.org>
Subject: Re: [COSE] [sacm] CoSWID = review

 

Jim,

 

=

Your suggestion of expressing the = filter by way of text in the CoSWID draft would provide a path forward. = This approach is less clear cut as it leaves the implementer to decide = which algorithms are "hash algorithms". This will likely lead = to different implementations choosing a different set of algorithms. To = address this, I guess we will need to include some text that makes sure = that a parser will not fail the parse when encountering an unsupported = hash algorithm identifier.

 

=

Any other ideas that might = provide a clearer solution?

 

=

Thanks,

Dave

 

=

From: Jim Schaad <ietf@augustcellars.com>
= Sent: Monday, November 18, 2019 9:24 PM
To: Waltermire, = David A. (Fed) <david.waltermire@nist.gov&g= t;; cose@ietf.org <cose@ietf.org>
Cc: 'sacm' = <sacm@ietf.org>
Subject: = RE: [COSE] [sacm] CoSWID review

 

Do you believe that there is an issue where you = cannot say.  Use the values from registry X and this must be a hash = algorithm without trying to do some type of filter.  If we do a = filter then we start playing the game of naming all of the different = types of algorithms and potentially need to deal with algorithms which = would have two algorithm type labels.

 

Jim

 

 

From: COSE <cose-bounces@ietf.org> = On Behalf Of Waltermire, David A. (Fed)
Sent: Tuesday, = November 19, 2019 9:52 AM
To: cose@ietf.org
Cc: sacm = <sacm@ietf.org>
Subject: = Re: [COSE] [sacm] CoSWID review

 

COSE = WG,

 

=

I accidently sent the last email = early. Please ignore it.

 

=

Kathleen provided comments below = on draft-ietf-sacm-coswid suggesting that we use the COSE proposed = algorithm identifiers for hashes in CoSWID. We are currently using the = entries in the IANA Named Information Hash Algorithm Registry. It would = be great to align with the COSE hash algorithms, but I can't figure out = a way to point to only the hash algorithms in the COSE Algorithms = registry. We can point to the draft-ietf-cose-hash-algs once its = published as an RFC, but this would be less agile in the face of future = updates to COSE hash algorithms. It would very useful if the COSE = Algorithms registry has a column for algorithm type. That way we could = select only the hash algorithms.

 

=

Do you have any suggestions on = how we might move forward?

 

=

Regards,

Dave = Waltermire

 

=

From: Waltermire, David A. (Fed) <david.waltermire@nist.gov&g= t;
Sent: Monday, November 18, 2019 8:39 PM
To: cose@ietf.org <cose@ietf.org>
Cc: sacm = <sacm@ietf.org>
Subject: = Fw: [sacm] CoSWID review

 

 

=

 

=

 

=

On Sun, Nov 17, 2019 at 6:45 = AM Kathleen Moriarty <kathleen.moriarty.ietf@g= mail.com> wrote:

Hi Dave,

 

On Sun, Nov 17, 2019 at 3:02 AM Dave Waltermire = <davewaltermire@gmail.com> = wrote:

Kathleen,

 

Thank you for the review. I have addressed your = comments in the latest draft. Some comments on your comments are inline = below.

 

From: sacm <sacm-bounces@ietf.org> on behalf of Kathleen = Moriarty <kathleen.moriarty.ietf@gmail.com>

=

Date: Fri, October 25, 2019 11:57 PM = +0800
To: "<sacm@ietf.org>" <sacm@ietf.org>
Subject: [sacm] CoSWID = review

 

 

Section = 2.6:

A Thumbprint is = specified in this section, should this be referenced for clarity on = hashes with COSE for object identification: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-a= lgs/

Would it be = better to tie to the COSE set of supported algorithms (they likely = match, but I didn't = verify)?

 

The IANA COSE Algorithms registry contains other = types of algorithms beyond hash algorithms. To use this registry, we = would need to list the hash-specific algorithms, which is less ideal. = Its a shame this registry isn't broken out by algorithm type, which = would make this decision easy. With the IANA "Named = Information Hash Algorithm Registry", we get only hash algorithms, = which is what we are looking for. Can you live with use of the  = IANA "Named Information Hash Algorithm = Registry"?

 

COSE is open as is their main draft.  This is a = problem that can likely be solved this week...  Talk to Jim. Let me = and the list know what's = possible. 

=
------=_NextPart_000_011B_01D59ECB.A3739B70-- From nobody Tue Nov 19 22:11:37 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B0011202DD; Tue, 19 Nov 2019 22:11:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kOBkQ-1OfxDS; Tue, 19 Nov 2019 22:11:34 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31F99120802; Tue, 19 Nov 2019 22:11:34 -0800 (PST) Received: from dooku.sandelman.ca (dhcp-896a.meeting.ietf.org [31.133.137.106]) by relay.sandelman.ca (Postfix) with ESMTPS id 6DDEA1F450; Wed, 20 Nov 2019 06:11:32 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 53AA2FD7; Wed, 20 Nov 2019 14:11:31 +0800 (+08) From: Michael Richardson To: cose@ietf.org, 'sacm' In-reply-to: <011a01d59e88$954f7110$bfee5330$@augustcellars.com> References: , , , <010401d59e80$7f4be360$7de3aa20$@augustcellars.com> <011a01d59e88$954f7110$bfee5330$@augustcellars.com> Comments: In-reply-to Jim Schaad message dated "Tue, 19 Nov 2019 11:22:30 +0800." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Wed, 20 Nov 2019 14:11:31 +0800 Message-ID: <10015.1574230291@dooku.sandelman.ca> Archived-At: Subject: Re: [COSE] [sacm] CoSWID review X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 06:11:36 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable In order to understand this thread, I took a look at draft-ietf-cose-hash-a= lgs. MINOR: * I think that the term "Thumbprint" is not often used, and that fingerprin= t is a more common term to use. My understand is that there is a proposal to use an existing registry for t= he list ("COSE Algorithms"), but that this registry has things which are not hash algorithms. There are I think, three entities that care, and I think that there is an over-generality being applied which is causing people to have concerns. 1) There are people who look at the list of algorithms to decide which one = to use for a particular application. I hope these aren't end-users, but rather application writers who need to decide which ones they need to implement. Better is that they are defining some protocol/profile which uses COSE. It's Thread or OPC or Azure IoT, etc. I think that we can depend upon those people to be able to discard things which are of the wrong shape. 2) There is code which creates signatures or hashes to put into objects. It knows which algorithm it is using (it's been programmed to use that one), and finding the right number is trivial. 3) There is code which is validating things, and it needs to know which algorithm is using to avoid the situation where it becomes possible for = an attacker to replace a stronger hash with a weaker one for which a pre-image attack is easier to perform. In case (3), the verifyer has to be ready to accept any hash from the "list= ", and it has to be a valid hash. But, it also has to be for code which the verifier has implemented. I recall attacks against verifies of=20 certificates that had hard coded SHA1 (or maybe it was MD5) and ignored the ASN.1 inside the signature which specified the actual algorithm to use. If an attacker tells me to use the "RC4 hash", and I don't have a hash like that, then I reject the number because I don't have it, not because it's no= t a hash. But, maybe I just don't get the problem. =20=20=20 =2D-=20 Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3U2RIACgkQlUzhVv38 QpDfPwf/Q0WzbzowraB0dcviCbGIMLi+limvwr89UBs8wLkcLbu9flFKnVOxzT+C rtVBRYdAE1P5Z4/71+EF6Y509lL0Kio7Lf6RjIORM06gOgHtpKPF6Keqb9+R4Kmf ffhP0QJLaZworGB/3cskSst7BwnCmJCEg3W5SPyhwaCAgqP1A843G7fMKRC0Wknv qx8F4sewYF7OxnxjUiiDCFdVDii4AMv1cmThm8mKkVRTVidY+p3530Altk06Z9Ju +eDrzENE2ADlhsmh9zGY7QBxwCTF9dRLEAJLlqZDh0/TKKvVwD5gecK49U6i3nfT 7Q6j1LIvbWKu4WAgUOpWoTXQwmrrvw== =zHfd -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Nov 19 22:32:52 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16F5F120AFE; Tue, 19 Nov 2019 22:32:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oZrFqlpcsYPE; Tue, 19 Nov 2019 22:32:46 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84254120A5D; Tue, 19 Nov 2019 22:32:45 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 19 Nov 2019 22:32:39 -0800 From: Jim Schaad To: 'Michael Richardson' , , 'sacm' References: , , , <010401d59e80$7f4be360$7de3aa20$@augustcellars.com> <011a01d59e88$954f7110$bfee5330$@augustcellars.com> <10015.1574230291@dooku.sandelman.ca> In-Reply-To: <10015.1574230291@dooku.sandelman.ca> Date: Wed, 20 Nov 2019 14:32:37 +0800 Message-ID: <021601d59f6c$4eba3c50$ec2eb4f0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQHzpN9RYTZyhsYpaTlVDcXoTZlvQAK3gtZBAhXIKp0BmGR9ZACpgMxNAk/8JVUCWvkKcwKTCkqPAr2UdpsDRFfDHgHj7CHMpqX2ZlA= Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] [sacm] CoSWID review X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 06:32:51 -0000 -----Original Message----- From: COSE On Behalf Of Michael Richardson Sent: Wednesday, November 20, 2019 2:12 PM To: cose@ietf.org; 'sacm' Subject: Re: [COSE] [sacm] CoSWID review In order to understand this thread, I took a look at draft-ietf-cose-hash-algs. MINOR: * I think that the term "Thumbprint" is not often used, and that fingerprint is a more common term to use. [JLS] I betray my past. Microsoft has always used Thumbprint for this term, regardless of what anybody else is calling it. I think it probably makes sense to change it. Jim My understand is that there is a proposal to use an existing registry for the list ("COSE Algorithms"), but that this registry has things which are not hash algorithms. There are I think, three entities that care, and I think that there is an over-generality being applied which is causing people to have concerns. 1) There are people who look at the list of algorithms to decide which one to use for a particular application. I hope these aren't end-users, but rather application writers who need to decide which ones they need to implement. Better is that they are defining some protocol/profile which uses COSE. It's Thread or OPC or Azure IoT, etc. I think that we can depend upon those people to be able to discard things which are of the wrong shape. 2) There is code which creates signatures or hashes to put into objects. It knows which algorithm it is using (it's been programmed to use that one), and finding the right number is trivial. 3) There is code which is validating things, and it needs to know which algorithm is using to avoid the situation where it becomes possible for an attacker to replace a stronger hash with a weaker one for which a pre-image attack is easier to perform. In case (3), the verifyer has to be ready to accept any hash from the "list", and it has to be a valid hash. But, it also has to be for code which the verifier has implemented. I recall attacks against verifies of certificates that had hard coded SHA1 (or maybe it was MD5) and ignored the ASN.1 inside the signature which specified the actual algorithm to use. If an attacker tells me to use the "RC4 hash", and I don't have a hash like that, then I reject the number because I don't have it, not because it's not a hash. But, maybe I just don't get the problem. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- From nobody Thu Nov 21 14:27:21 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C408312016E for ; Thu, 21 Nov 2019 14:27:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mLN02UVTnX1t for ; Thu, 21 Nov 2019 14:27:18 -0800 (PST) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60067.outbound.protection.outlook.com [40.107.6.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBFAC120122 for ; Thu, 21 Nov 2019 14:27:17 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UrduJZMU97Lz3wp5//VkRKsootO+Q/B1K/T2Ly0wS2ptbOZcjQLi55FhgrAtOhYoLkuX4cPithizMGgBX3MRDJ9QKWByS6P8FbxseN2XOAMDCQ5PjL2AV63Kx5RYJgeo82wOGLbwSHnkIK6g7MYXP3cC98xJPSZDBm6LfFDa2DjdgLK93mQNUxcTYc2clhGesh1lIaO7DAMrd+gNn2hefxpooLoyuef4jz140iuxmtfGLvjKl+hzOwbWt1Iz4fyIZZnwxBagKoXNr1jEDWbi8YoMFTWFXLfyKZsHliQ29hcAdKbYiSMtBvh//XoPy6R2HzGnAaonkOp+93gbzZjiWg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=S+C+2noUnjKzoapcZkKsGu/ZkxRoM8MgZZCUhsNO8EI=; b=O8AY3UEdwctXkeZ1THvkLDRGILQ58vMxZwd6tprOM3VzdA/WZXKS4mpoxG47LlNbyCkq9zr6e+5wdwfZQb6xLaA3Mi6DUaEKI5Mg+qxG5d1yUpjmgUyd6OV4dAlQZ47LDQCmUgvIiSmw7KCq3nImX6QY+OchSAUxDQXdjsR9jhpPslAlBEg73bhFSvO7/s8lYgfO5LowZ3ZTQNGmWnbbj14gQf2zlM0f83eOP2bopm3Zdhngly4L3pCyhB9IbAzppqSLKAVYcd7WwzvTQrA8f2YCGzjCrF0nrlWlxxIdKqyhVyELN46+R2OQ/3ZvIWW8f0RtaHUUcjHCKrnVP2s4fA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=S+C+2noUnjKzoapcZkKsGu/ZkxRoM8MgZZCUhsNO8EI=; b=fcXyBU3qO9QjOQBrrpSkBG4UTPoqCD4CQ4FToNGXDCM1wg1oisc2Xg7s9ed4PzS5uyKCZvK2c8XN/ThhFna4obxg2IO1Y+3qPW4NnY09qS1MTDCfNNwLgN8988QZ73GwFnywx5ZPCWCA0pykNTPXCXTYmWuhAYRxd0MdFx8Nns8= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.165.153) by HE1PR07MB3083.eurprd07.prod.outlook.com (10.170.246.25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.13; Thu, 21 Nov 2019 22:27:13 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::21e5:eaae:99ed:41ac]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::21e5:eaae:99ed:41ac%3]) with mapi id 15.20.2474.019; Thu, 21 Nov 2019 22:27:13 +0000 From: John Mattsson To: "cose@ietf.org" Thread-Topic: Comments on draft-ietf-cose-rfc8152bis-struct-07 and draft-ietf-cose-rfc8152bis-algs-06 Thread-Index: AQHVoLrS7Dy1+bemvUCJEOEpTfhbdw== Date: Thu, 21 Nov 2019 22:27:13 +0000 Message-ID: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [61.8.238.244] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 14fb2230-6a2a-45a5-a29c-08d76ed1f54a x-ms-traffictypediagnostic: HE1PR07MB3083: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0228DDDDD7 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(39860400002)(376002)(366004)(136003)(346002)(189003)(199004)(44832011)(6512007)(66066001)(186003)(99286004)(2501003)(26005)(33656002)(8936002)(71190400001)(2351001)(71200400001)(102836004)(6436002)(91956017)(76116006)(25786009)(5640700003)(14454004)(36756003)(58126008)(316002)(66476007)(66556008)(66446008)(6506007)(66946007)(256004)(7736002)(2906002)(6486002)(6916009)(305945005)(14444005)(5660300002)(8676002)(2616005)(86362001)(3846002)(81166006)(81156014)(6116002)(1730700003)(478600001)(64756008); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3083; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: K2X9JGp392g/fUC8iBL51+E/JuV+jLMd54bhZGj1kiFOx2hslQOo6FBOwppkZ1kEUBzGxVjbwXsBJ8yw02jryC2iJXZISoVxtEmX6CYT56CqQszspp7IhuTrC11Xk1TjbdHhjYB2oewEjJmjKC1ySB2WeIvJoZMh6FhBCqP272MMpb0JuwEkMScXaK+rh/5545/Y1s5bkT5LwOAwa/aaZ2kkMNeAwu3+1WHS85Hj9SqWvTzZx6k/ekAw7lJGehZZ9Di1ddE14iMNjfYDM0fnGMyxfYyzok3878H8aGJelgSjSISEoPYZQkjks0JSE3F/tpf3Pzuf/QSzByaUqaTI0pZJskhpB4Tf9y1Em5F1tmCGoXiGOsP5JqUlMX+Ruo75POrpR22iVpAoAljNAkDh71KDS/kSp6AY3+kHAFZ02kY/yBXy/pXLIe7NbU0eSJzN x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <6CFA1BC89B304741A6152F649D5DF633@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 14fb2230-6a2a-45a5-a29c-08d76ed1f54a X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2019 22:27:13.7104 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 4RG3eqDD6epKs1lNBZmZPF5zTRihTGRHEusOS/lLaXj7aKJHntI2XY83hgTWFdjkhvau+Lqo6Mpd4zTxWGcs9kh8N/oFUDr/kxIw3ylgJ1Y= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3083 Archived-At: Subject: [COSE] Comments on draft-ietf-cose-rfc8152bis-struct-07 and draft-ietf-cose-rfc8152bis-algs-06 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 22:27:20 -0000 Q29tbWVudHMgb24gZHJhZnQtaWV0Zi1jb3NlLXJmYzgxNTJiaXMtc3RydWN0LTA3IGFuZCBkcmFm dC1pZXRmLWNvc2UtcmZjODE1MmJpcy1hbGdzLTA2DQoNCkdlbmVyYWw6DQoNCiAtIE1pbm9yIG5v dGU6IFRoZSBhYnN0cmFjdHMgb2YgdGhlIGRvY3VtZW50cyBoYXZlIG1pbm9yIGRpZmZlcmVuY2Vz IGFuZCB0aGUgc3Vic2VjdGlvbnMgaW4gdGhlIGludHJvZHVjdGlvbnMgaGF2ZSBkaWZmZXIgb3Jk ZXJzLg0KDQogLSBBcyBSRkMgODYxMCBpcyBwdWJsaXNoZWQgbm93LCBzaG91bGRu4oCZdCB0aGUg ZG9jdW1lbnRzIGJlIHVwZGF0ZWQgdG8gbWF0Y2ggdGhlIGZpbmFsIENEREwgZ3JhbW1hcj8NCg0K ZHJhZnQtaWV0Zi1jb3NlLXJmYzgxNTJiaXMtc3RydWN0LTA3Og0KDQogLSAiVGhlcmUgaGFzIGJl ZW4gYW4gaW5jcmVhc2VkIGZvY3VzIG9uIHNtYWxsLCBjb25zdHJhaW5lZCBkZXZpY2VzIg0KDQog ICBJIHRoaW5rIHRoZSBkb2N1bWVudCBzaG91bGQgbWVudGlvbiBjb25zdHJhaW5lZCByYWRpbyB0 ZWNobm9sb2dpZXMgYXMgd2VsbA0KDQotICJzdHJpbmdzIiBhcmUgdXNlZCBpbiBpbiB2YXJpb3Vz IHBsYWNlcy4gU2hvdWxkIGJlIGNoYW5nZWQgdG8gImJ5dGUgc3RyaW5nIiBvciAidGV4dCBzdHJp bmciIGFzIENCT1IgaGFzIHR3byB0eXBlcyBvZiBzdHJpbmdzDQoNCi0gIjMuICBUaGUgY29udGVu dCBvZiB0aGUgbWVzc2FnZS4gIFRoZSBjb250ZW50IGlzIGVpdGhlciB0aGUgcGxhaW50ZXh0IG9y IHRoZSBjaXBoZXJ0ZXh0IGFzIGFwcHJvcHJpYXRlLiINCg0KICBUaGlzIHNlZW1zIHRvIG9ubHkg ZGVzY3JpYmUgZW5jcnlwdGlvbi4gRm9yIHNpZ25hdHVyZXMgYW5kIE1BQ3MgaXQgd291bGQgYmUg cGF5bG9hZCwgc2lnbmF0dXJlL3RhZy4NCg0KLSAic3RydWN0dXJlIiwgIm1lc3NhZ2UiLCAib2Jq ZWN0IiwgIm1hcCIsICJhcnJheSIsICJvYmplY3Qgc3RydWN0dXJlIiwgIm1lc3NhZ2Ugc3RydWN0 dXJlIiwgImRhdGEgb2JqZWN0IiwgInN0cnVjdHVyZSBvYmplY3QiLCAibWFwIG9iamVjdCIsICJh cnJheSBvYmplY3QiLCAiZGF0YSBzdHJ1Y3R1cmUiLCAiZGF0YSBpdGVtIiwgIkNCT1Igc3RydWN0 dXJlcyIsICJDT1NFIHN0cnVjdHVyZSIsICJDT1NFIG1hcCIsICJDQk9SIG1hcCIsICJDQk9SIG9i amVjdCIsICJDT1NFIG9iamVjdCINCg0KICBUaGVyZSBpcyBhIGxhcmdlIGFtb3VudCBvZiB0ZXJt cyB1c2VkIGluIHRoZSBkb2N1bWVudHMuIEkgZmVlbCB0aGF0IHRoZXkgY291bGQgYmUgZGVmaW5l ZCBhIGJpdCBtb3JlLiBBbHNvLCBhcmUgYWxsIG9mIHRoZW0gcmVhbGx5IG5lZWRlZD8NCg0KLSBP TEQgIlRoZSBzZXQgb2YgcHJvdGVjdGVkIGhlYWRlciBwYXJhbWV0ZXJzIHdyYXBwZWQgaW4gYSBi c3RyLiINCiAgTkVXICJUaGUgc2V0IG9mIHByb3RlY3RlZCBoZWFkZXIgcGFyYW1ldGVycyBhcyBh IG1hcCB3cmFwcGVkIGluIGEgYnN0ci4iDQoNCi0gVGhlIGRyYWZ0IGhhcyBxdWl0ZSBhIGxvdCBv ZiB0ZXh0IG9uIGRpZmZlcmVudCB0eXBlcyBvZiBzaWduYXR1cmVzIGxpa2Ugc2lnbmF0dXJlcyB3 aXRoIG1lc3NhZ2UgcmVjb3ZlcnkuIFdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBzb21lIHNlbnRlbmNl cyBvbiBzaWduYXR1cmVzIHdpdGggYW5kIHdpdGhvdXQgc3RhdGUuIFRoZSB0ZXh0IG9uIHNpZ25h dHVyZXMgaXMgYWxzbyBtaXNzaW5nIHRoYXQgdGhleSBwcm92aWRlIGRhdGEgYXV0aGVudGljYXRp b24sIGludGVncml0eSBwcm90ZWN0aW9uLCBhbmQgcHJvdmlkZXMgbm9uLXJlcHVkaWF0aW9uLg0K DQotICJUaGV5IHByb3ZpZGUgZWl0aGVyIG5vIG9yIHZlcnkgbGltaXRlZCBkYXRhIG9yaWdpbmF0 aW9uLiINCiAgVGhpcyBzZW50ZW5jZSBvY2N1cnMgaW4gc2V2ZXJhbCBwbGFjZXMuIFRoZSB0ZXJt ICJkYXRhIG9yaWdpbmF0aW9uIiBzZWVtcyB0byBub3QgYmUgdXNlZCB2ZXJ5IG11Y2ggYW5kIGFs c28gaGF2ZSBkaWZmZXJlbnQgbWVhbmluZ3MuDQogIEUuZy4gdGhlIGJvb2sgIkluZm9ybWF0aW9u IFNlY3VyaXR5OiAgIERpY3Rpb25hcnkgb2YgQ29uY2VwdHMsIFN0YW5kYXJkcyBhbmQgVGVybXMi IGRlZmluZXMgaXQgYXMNCiAgICAgImRhdGEgb3JpZ2luYXRpb24uIEluIGNvbXB1dGluZywgdGhl IHRyYW5zbGF0aW9uIG9mIGluZm9ybWF0aW9uIGZyb20gaXRzIG9yaWdpbmFsIGZvcm0gaW50byBt YWNoaW5lIHJlYWRhYmxlIGZvcm0gb3IgZGlyZWN0bHkgaW50byBlbGVjdHJpY2FsIHNpZ25hbHMu Ig0KDQpDb3VsZCB3ZSByZXBsYWNlICJkYXRhIG9yaWdpbmF0aW9uIiB3aXRoICJub24tcmVwdWRp YXRpb24iPw0KDQotICJkaWdlc3N0Ig0KLSAic3R1Y3R1cmUiDQoNCmRyYWZ0LWlldGYtY29zZS1y ZmM4MTUyYmlzLWFsZ3MtMDYNCg0KLSAidGhlIHRoZSINCg0KQ2hlZXJzLA0KSm9obg0KDQo= From nobody Thu Nov 21 14:39:53 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0539F1201CE for ; Thu, 21 Nov 2019 14:39:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BDxB1MdFUQi9 for ; Thu, 21 Nov 2019 14:39:50 -0800 (PST) Received: from gabriel-vm-2.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB67D1201A3 for ; Thu, 21 Nov 2019 14:39:49 -0800 (PST) Received: from dhcp-9c88.meeting.ietf.org (dhcp-9c88.meeting.ietf.org [31.133.156.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.uni-bremen.de (Postfix) with ESMTPSA id 47JvdH4FZkz100G; Thu, 21 Nov 2019 23:39:47 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: Date: Fri, 22 Nov 2019 06:39:44 +0800 Cc: "cose@ietf.org" X-Mao-Original-Outgoing-Id: 596068781.577515-6ec5a6985815d114e2a488eef9159ec1 Content-Transfer-Encoding: quoted-printable Message-Id: <83C79D72-5CA0-41D8-ABE8-A9321FD9BA50@tzi.org> References: To: John Mattsson X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [COSE] Comments on draft-ietf-cose-rfc8152bis-struct-07 and draft-ietf-cose-rfc8152bis-algs-06 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 22:39:52 -0000 On Nov 22, 2019, at 06:27, John Mattsson = wrote: >=20 > Could we replace "data origination" with "non-repudiation"? Preferably not. If you want the thing that often is identified incorrectly by the = latter, please use a more precise term such as =E2=80=9Cthird party = verifiability=E2=80=9D. Non-repudation is a legal term. Provenance is often a term used for the former. BTW, the text might be easier to read when constructs such as = =E2=80=9Cbistro=E2=80=9D, oops, =E2=80=9Cbstr=E2=80=9D, are replaced by = =E2=80=9Cbyte string=E2=80=9D outside of the CDDL (where byte strings = are indeed called =E2=80=9Cbuster=E2=80=9D, oops, =E2=80=9Cbstr=E2=80=9D, = or also simply =E2=80=9Cbytes=E2=80=9D). In the previous sentence, for = demonstration, I left in the autocorrects as they actually happened :-) Gr=C3=BC=C3=9Fe, Carsten From nobody Thu Nov 21 17:29:05 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CA3B1200A3 for ; Thu, 21 Nov 2019 17:29:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MT25zMv6RVmn for ; Thu, 21 Nov 2019 17:29:01 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FE7C120130 for ; Thu, 21 Nov 2019 17:29:01 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Thu, 21 Nov 2019 17:28:55 -0800 From: Jim Schaad To: 'Carsten Bormann' , 'John Mattsson' CC: References: <83C79D72-5CA0-41D8-ABE8-A9321FD9BA50@tzi.org> In-Reply-To: <83C79D72-5CA0-41D8-ABE8-A9321FD9BA50@tzi.org> Date: Fri, 22 Nov 2019 09:28:53 +0800 Message-ID: <03cd01d5a0d4$353f7600$9fbe6200$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQIK7AZ7ZhCgpAnv67kbs957zahDPQK7TWG7pxXzq0A= Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] Comments on draft-ietf-cose-rfc8152bis-struct-07 and draft-ietf-cose-rfc8152bis-algs-06 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 01:29:03 -0000 -----Original Message----- From: COSE On Behalf Of Carsten Bormann Sent: Friday, November 22, 2019 6:40 AM To: John Mattsson Cc: cose@ietf.org Subject: Re: [COSE] Comments on draft-ietf-cose-rfc8152bis-struct-07 and = draft-ietf-cose-rfc8152bis-algs-06 On Nov 22, 2019, at 06:27, John Mattsson = wrote: >=20 > Could we replace "data origination" with "non-repudiation"? Preferably not. [JLS] No really, really not. If you want the thing that often is identified incorrectly by the = latter, please use a more precise term such as =E2=80=9Cthird party = verifiability=E2=80=9D. Non-repudation is a legal term. [JLS] Non-repudiation is not a legal term. Repudiation is a legal term. = There is no such thing as non-repudiation, just a legal argument that = you can or cannot repudiate something. I repudiate this signature = because Carsten was holding a gun to my head when I made it. That is a = repudiate argument and not the reverse. Non-repudiation originally had = some really weird ideas around having a technological way of proving = things like: It was proven that the key was in my possession. It was = proven that only I could have made the signature. I knew what I was = signing a the time. That is things that cannot be shown. Jim Provenance is often a term used for the former. BTW, the text might be easier to read when constructs such as = =E2=80=9Cbistro=E2=80=9D, oops, =E2=80=9Cbstr=E2=80=9D, are replaced by = =E2=80=9Cbyte string=E2=80=9D outside of the CDDL (where byte strings = are indeed called =E2=80=9Cbuster=E2=80=9D, oops, = =E2=80=9Cbstr=E2=80=9D, or also simply =E2=80=9Cbytes=E2=80=9D). In the = previous sentence, for demonstration, I left in the autocorrects as they = actually happened :-) Gr=C3=BC=C3=9Fe, Carsten _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose From nobody Thu Nov 21 20:05:04 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89FD112003F for ; Thu, 21 Nov 2019 20:05:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XE2NX1iO_zsD for ; Thu, 21 Nov 2019 20:05:00 -0800 (PST) Received: from mail-wm1-x32c.google.com (mail-wm1-x32c.google.com [IPv6:2a00:1450:4864:20::32c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2E0112008C for ; Thu, 21 Nov 2019 20:04:39 -0800 (PST) Received: by mail-wm1-x32c.google.com with SMTP id g206so5723224wme.1 for ; Thu, 21 Nov 2019 20:04:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=TUxALexN7dpngu8l7JwZtS2ntAao30LNp/Z76VbpKUM=; b=htzKZYYKbz4CZsswMEzPFipsTwpDZOLJpr20e+aeYSNk7nLzvasE7fKVK2/gIFp4i0 7lPoaYL59aarIz4l9YK1HMIZwCCzB4VUITeg1FY8F0sMLJMF/HiX0ADzMGvHqqFZY9Fn 72EPJWIsA5MaU2DVgK3uvgxsullqtqahRL80KtYnQ9g3LqfFjvyOMhA5SFOrpB4PDshX 3l9BfcxpxY3NwsI0w5OVk8QxEE5RDpsmlCzOtJlrwKr2WpCHloDyaHpsdr51GfxQ40ba 8DkKAhSjZFHX2k5XNu6e7Vacxun5UwlOcU+FBoyc9pZ8HNyOatKS0LLQJIIsJthDxVt1 7fOQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=TUxALexN7dpngu8l7JwZtS2ntAao30LNp/Z76VbpKUM=; b=kaFZHKwohL+/Y+mrh0LQKeZ/diDqT/nOYd9IfVMXymf1owSS4VfK8S3rBqdw7pLWvQ GPhpvMYV6yx80t5aL+2uweaAerylla+uwPdh5kT5u4wRAW1NsiJ+cBt4vH0gy9GVPFIc 7OE9ZcRjvQQI4pGl4d0SDAlj51XVEJq96qY5W2vCsFinfE1JsIlGwQVb5FJN1ZusBuQ8 SQcbYHaNA5THE85oIeL4QVPEGz5asmmwjxjo/UEbdL39cJsTEQJsPZYZk4wHJjEwQsKw HJCXxEb4YQJ0ALsF4ucTJgTv1/XN5ynZwzBaE9e53a1p2y7C56NfSNHgsY/MgNwJIE2k vvnQ== X-Gm-Message-State: APjAAAWatZVG16kGIoO70HkXLtA9xtzyv5yninztXgvrMXDOqYRzkuzx dT177otO176tRYHtGPJnbYGZZeslfe2vx1vRZR7XsiQ8qj8= X-Google-Smtp-Source: APXvYqx/4A+DVNDH9fZP3X3xgtqiUClJeWXNRV405qn+mk45dhRIxqNW9jtlWtV7TAKnpQK38gP/4uJGUjPL7mKkc4Q= X-Received: by 2002:a1c:dd06:: with SMTP id u6mr14437039wmg.109.1574395477843; Thu, 21 Nov 2019 20:04:37 -0800 (PST) MIME-Version: 1.0 From: Ivaylo Petrov Date: Fri, 22 Nov 2019 12:04:11 +0800 Message-ID: To: cose Content-Type: multipart/alternative; boundary="00000000000031798d0597e7830f" Archived-At: Subject: [COSE] WGLC of draft-ietf-cose-hash-algs ENDED X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 04:05:02 -0000 --00000000000031798d0597e7830f Content-Type: text/plain; charset="UTF-8" Dear all, The working group last call for [HASH-ALGS] has ended; thank you to everyone that commented and I apologize for the delayed email. The latest revisions appear to address all of the comments received, and no objections were raised. We will soon be completing the shepherd writeup for these document and requesting publication. - Matthew and Ivaylo COSE Chairs [HASH-ALGS]: < https://datatracker.ietf.org/doc/draft-ietf-cose-hash-algs/ > --00000000000031798d0597e7830f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear all,

The working group last call for = [HASH-ALGS] has ended; thank you to
everyone that commented and I apolog= ize=C2=A0for the delayed email.

The latest revisions appear to addre= ss all of the comments received, and=C2=A0no objections were raised.=C2=A0 = We will soon be completing the shepherd=C2=A0writeup=C2=A0for these documen= t and requesting publication.

- Matthew and Ivaylo=C2=A0
COSE Cha= irs

[HASH-ALGS]: <=C2=A0https://datatracker.ietf.org/doc/draft-ietf-= cose-hash-algs/=C2=A0>
=
--00000000000031798d0597e7830f-- From nobody Thu Nov 21 21:43:36 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37821120232 for ; Thu, 21 Nov 2019 21:43:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N-lkoCOf24t1 for ; Thu, 21 Nov 2019 21:43:33 -0800 (PST) Received: from mail-wm1-x32f.google.com (mail-wm1-x32f.google.com [IPv6:2a00:1450:4864:20::32f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1C2B12002E for ; Thu, 21 Nov 2019 21:43:32 -0800 (PST) Received: by mail-wm1-x32f.google.com with SMTP id z19so6195320wmk.3 for ; Thu, 21 Nov 2019 21:43:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=UXyCgepoXv61eZOVAqmO4bOl7YQBmdzna5Ur04IOLeM=; b=ZMD4sCzJRH46Qz6vtDuUgxpHS7WLM6Dd4CI2SxGmiPfz4vWYCbOHcKuydc1v2YJpmE CVcaZV9/poLAx4j2i4EXNNwMM1R+/JdXYxjvPdt7iEiiwNHk6g6jmlQd8K5xVpBFTi5v Kpj4DtRy9F9WXY6MTM2TcjxbqtboY6+jqEevZ1vRNosnwbrrSYvd/eGD1y9qsrkFZY7Z qS7qHZREWaQyYbLJCwk7LPeUPEqNDLPNgdfY6k3TP4B7rnrIVbO39yr24LZINa7yCmJ/ cu59BYbq6VqSjvFT2t+gpYsuVfGAyTcOVtc533t+BWZAgqHfi865/Rdbmy5Wc5lG4U/V 6q2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=UXyCgepoXv61eZOVAqmO4bOl7YQBmdzna5Ur04IOLeM=; b=COuNCeno0U8SagNEDMtRhqfavmGXESjXpfN4G3kckos0D/GwNC1dPkvG+bCg2BwtqW sPdOcjnI4Gw+EgAu4R2LmvrntEFiVl7fVv1WZd5c/VJOwmsSUCoYDGo8H+Cblf6EI8oo LpBwD2289K+3YUADG+RWuN12LVxcdPnkyFJTbWB90SNfUMQkCxjDDaB+m7+Ozi450evT G68kIFjJXLrRUxkzgdCRpwHykHlrgkjVU7Z3RBECKAQbrZRLaekGLhnxq2BpzxzvFD9L ugnHj3Sux2g3K4y1pn2bhegLLGpWC+1T1jiXMnOwQ7/HAaZbDKdMqsafvJtGjk8M/yLX FNFw== X-Gm-Message-State: APjAAAVnCebuWqmSkoEynWc6NKLZwtxrKhNgaVFkYXys4p3kOvstF5bd Zk2+jggvTMFi/richPHh8BNKuBoGdB2mUghMVI5AqWdn X-Google-Smtp-Source: APXvYqzN+J4oeRDhNu2VePE3NT3tptrJdDyNCgo/v24k4ZiKHaQ7aEpTbUW3Z7fBBKdqL1hREGdbxDLsN6w3A/HDN8Q= X-Received: by 2002:a7b:c34a:: with SMTP id l10mr10406692wmj.66.1574401410936; Thu, 21 Nov 2019 21:43:30 -0800 (PST) MIME-Version: 1.0 From: Ivaylo Petrov Date: Fri, 22 Nov 2019 13:43:04 +0800 Message-ID: To: cose Content-Type: multipart/alternative; boundary="000000000000d549820597e8e4d8" Archived-At: Subject: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-x509?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 05:43:35 -0000 --000000000000d549820597e8e4d8 Content-Type: text/plain; charset="UTF-8" Dear all, This message starts the Working Group Last Call of the draft-ietf-cose-x509 [1]. The working group last call will run for **four weeks**, ending on December 20, 2019. The extended last call is due to travelling and possible holidays of some of the participants. Please review and send any comments or feedback to the working group. Even if your feedback is "this is ready", please let us know. Thank you, - Matthew and Ivaylo COSE Chairs [1]: https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ --000000000000d549820597e8e4d8 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear all,

This messag= e starts the Working Group Last Call of the draft-ietf-cose-x509 [1].
The working group last call will run for **four weeks**, ending on
Dec= ember 20, 2019. The extended last call is due to travelling and possible ho= lidays of some of the participants.

Please review and send any comme= nts or feedback to the working group.=C2=A0Even if your feedback is "t= his is ready", please let us know.

Thank you,

-=C2=A0Matthew and=C2=A0Ivaylo
COSE Cha= irs

[1]:=C2=A0https://datatracker.ietf.org/doc/= draft-ietf-cose-x509/
=
=
--000000000000d549820597e8e4d8-- From nobody Tue Nov 26 02:18:49 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87952120891 for ; Tue, 26 Nov 2019 02:18:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i0x4PJVMah9v for ; Tue, 26 Nov 2019 02:18:45 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20074.outbound.protection.outlook.com [40.107.2.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C52E12085E for ; Tue, 26 Nov 2019 02:18:44 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=eCzK2KoGIwttwCpEnS4IUVsZm04J4qO1Y7JajAR7wdUUPVo/+3HZdLwUxlZoCbBOWXHyOHlLX45gqciQ8YhvgUl7KfVGP91vcIYr0F3FeCqtEe0NVoaOg/EmcQdfgX/T3zqpzJ4HHmmBwGqssfcU5G7CYiMZv+/ga1qbX2ATeMDezPmYevZF44lYBFiP8dzypDfAqeonlz3G8029tdYE7slYkwJyQbOs/mDXOjMqx1Ww39bFaxu6xSogDj63fekBjt8PEwGvPkBO2QiguZR8gnRA3aUkNMHl3Uuxm4QTI1wJBBPHY9U7mH0CtwrI5II6Y8jKzrknjnP8YVikFQoH9Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1vxdESEG1cygCKYP9DXG7AMp4hiZa6R7fAW3a1HKyaA=; b=UUW8O9lq5ZmesJKID0vHt/ter2VnP7WsMXEjN5EUS2iQd9bhbsS9JT5KzB6SVAVM3o+hnM3fJ6q2T0ugyXkRITxFRxgviM6glyV4MWxh8NFsfrdgml7RkHbD2NBmqTKJbNxwGfgQhJqMFNJ2mYKcUmtjv0wQvExKoNsQgvUT1ET3CTRz3TXqVlXVnmyQFXAXvgzIyyLQFdivjj9zymHboeHnSerKaXOUET2prk3BDPu/za5sDoGaIxCKx4NDHaYmfEg3HimJfWyoOL3aUDyzaXsPHyW//sp+KNRiq2XLocNDD11R5wla/6CBB5ImCbsrv5ls9/O+9KFLc1AsBpUAlQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1vxdESEG1cygCKYP9DXG7AMp4hiZa6R7fAW3a1HKyaA=; b=Ssk0q3OBgnXJsxzxjRyo4eIutxW+pruG+ix+8HfGgNYzMmqD/zrKb9Z+edF5W3tewzrjZYpV5hpoNFgWIqUzle29IplI+5VJnxwnThCJMtdg2/6Ncr4NpwTDMg2vNLZ+azrhwhPkl7VuTy2ZCDjX2Lbi0/ueUG1xwDGbOBBti9s= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.165.153) by HE1PR07MB3418.eurprd07.prod.outlook.com (10.170.247.33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.10; Tue, 26 Nov 2019 10:18:42 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::21e5:eaae:99ed:41ac]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::21e5:eaae:99ed:41ac%3]) with mapi id 15.20.2495.014; Tue, 26 Nov 2019 10:18:42 +0000 From: John Mattsson To: Jim Schaad , 'Carsten Bormann' CC: "cose@ietf.org" Thread-Topic: [COSE] Comments on draft-ietf-cose-rfc8152bis-struct-07 and draft-ietf-cose-rfc8152bis-algs-06 Thread-Index: AQHVoLrS7Dy1+bemvUCJEOEpTfhbd6eWN64AgAAvQoCABu4dgA== Date: Tue, 26 Nov 2019 10:18:42 +0000 Message-ID: References: <83C79D72-5CA0-41D8-ABE8-A9321FD9BA50@tzi.org> <03cd01d5a0d4$353f7600$9fbe6200$@augustcellars.com> In-Reply-To: <03cd01d5a0d4$353f7600$9fbe6200$@augustcellars.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [192.176.1.86] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3553ebda-95cb-46b3-27ad-08d7725a0363 x-ms-traffictypediagnostic: HE1PR07MB3418: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 0233768B38 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(346002)(39860400002)(376002)(366004)(136003)(189003)(199004)(13464003)(3846002)(66446008)(8676002)(6116002)(2906002)(8936002)(81166006)(81156014)(305945005)(86362001)(33656002)(7736002)(6512007)(6306002)(6486002)(229853002)(6246003)(25786009)(478600001)(91956017)(71190400001)(76116006)(6436002)(256004)(966005)(4326008)(66476007)(102836004)(26005)(14454004)(446003)(64756008)(66066001)(11346002)(2616005)(58126008)(36756003)(66556008)(76176011)(53546011)(99286004)(6506007)(44832011)(66946007)(110136005)(316002)(71200400001)(5660300002)(186003); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3418; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 9SGn9wgjpJTijZUNOMS+/PNK8OwAQpeW/W4MpZFuckjY151hWYeU6YVOboPoumn5LD3cs3wbQQ9u3wP1iTvthGYFGOcQNffXb1djAIlFNl/8hzgs+QsCq02TGqIp9RxVFrUJqIsxBkAxRYe7D2au84Q187waf73d0H5Z2p7DuSei+e4IbhAeF3KVbC6d5RImA/6goPN/IGf8V1VAJ3iM8D6nt5Qixc4SQrE+VZsbSLhoIYju/7zYo1yJSNIfe24bpyIh0YPSTt+vlGv+0V7QU3oCQv2xx3vKU3ydzw6PrJ5Zm+ZhqLyVu8FTtNqG1XxLzK1F9dH1ph1pqpaEWZaTcnRz1SdXkJlH43xzEt9MDQ5N6/xOopbP+POBxE4pwyaosRjPcJC38qtWcS2ZCc1y2OqWUY05cYoI7ULWUKqRd9KWr9xwsMMd5SnxNVNtJZ9sW6A4O88rG4OlndnaYsN+xEyxZjbxemyb1K/rJYo9ccM= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <3C8F85D71ED1EF47A33A03BDA17F10EF@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3553ebda-95cb-46b3-27ad-08d7725a0363 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Nov 2019 10:18:42.4987 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: b4r8p93BTPRWSQh3h+XPA16YI6/f7C71DHxgw2DOkZkF2+oLPbXFJkwXilMBb6XvNVqmIzi83YaAHbUV16LEv0/R4kIVeKi14tNeqkyAJ4s= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3418 Archived-At: Subject: Re: [COSE] Comments on draft-ietf-cose-rfc8152bis-struct-07 and draft-ietf-cose-rfc8152bis-algs-06 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Nov 2019 10:18:47 -0000 4oCcdGhpcmQgcGFydHkgdmVyaWZpYWJpbGl0eeKAnSB3b3VsZCBiZSBnb29kLiBJbiB0aGUgY3Vy cmVudCB0ZXh0LCBJIGRvIG5vdCB1bmRlcnN0YW5kIHdoYXQgdGhlIGZvdXIgImRhdGEgb3JpZ2lu YXRpb24iLyJ3ZWFrIGRhdGEgb3JpZ2luYXRpb24iIHNlbnRlbmNlcyB3YW50IHRvIHNheSBleGNl cHQg4oCcdGhpcmQgcGFydHkgdmVyaWZpYWJpbGl0eeKAnSAiYW5kIGRhdGEgYXV0aGVudGljYXRp b24iLiANCg0KICAgIk1lc3NhZ2UgQXV0aGVudGljYXRpb24gQ29kZXMgKE1BQ3MpIHByb3ZpZGUg ZGF0YSBhdXRoZW50aWNhdGlvbiBhbmQNCiAgIGludGVncml0eSBwcm90ZWN0aW9uLiAgVGhleSBw cm92aWRlIGVpdGhlciBubyBvciB2ZXJ5IGxpbWl0ZWQgZGF0YQ0KICAgb3JpZ2luYXRpb24uICBB IE1BQywgZm9yIGV4YW1wbGUsIGNhbm5vdCBiZSB1c2VkIHRvIHByb3ZlIHRoZQ0KICAgaWRlbnRp dHkgb2YgdGhlIHNlbmRlciB0byBhIHRoaXJkIHBhcnR5LiINCg0KICAgICJUaGV5IHByb3ZpZGUN CiAgICAgaW50ZWdyaXR5IG9uIHRoZSBkYXRhIHRoYXQgd2FzIGVuY3J5cHRlZDsgaG93ZXZlciwg dGhleSBwcm92aWRlDQogICAgIGVpdGhlciBubyBvciB2ZXJ5IGxpbWl0ZWQgZGF0YSBvcmlnaW5h dGlvbi4gIChPbmUgY2Fubm90LCBmb3INCiAgICAgZXhhbXBsZSwgYmUgdXNlZCB0byBwcm92ZSB0 aGUgaWRlbnRpdHkgb2YgdGhlIHNlbmRlciB0byBhIHRoaXJkDQogICAgIHBhcnR5LikgIFRoZSBh YmlsaXR5IHRvIHByb3ZpZGUgZGF0YSBvcmlnaW5hdGlvbiBpcyBsaW5rZWQgdG8gaG93IHRoZQ0K ICAgICBDRUsgaXMgb2J0YWluZWQuIg0KDQogICAiVGhlIHVzZSBvZiBrZXkgd3JhcCBsb3NlcyB0 aGUNCiAgICAgd2VhayBkYXRhIG9yaWdpbmF0aW9uIHRoYXQgaXMgcHJvdmlkZWQgYnkgdGhlIGRp cmVjdCBlbmNyeXB0aW9uDQogICAgIGFsZ29yaXRobXMuIg0KDQogICAiVGhlIHVzZSBvZiBzdGF0 aWMga2V5cyBhbGxvd3MgZm9yIHRoZQ0KICAgICByZWNpcGllbnQgdG8gZ2V0IGEgd2VhayB2ZXJz aW9uIG9mIGRhdGEgb3JpZ2luYXRpb24gZm9yIHRoZQ0KICAgICBtZXNzYWdlLiINCg0KL0pvaG4N Cg0K77u/LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEppbSBTY2hhYWQgPGlldGZA YXVndXN0Y2VsbGFycy5jb20+DQpEYXRlOiBGcmlkYXksIDIyIE5vdmVtYmVyIDIwMTkgYXQgMDI6 MjkNClRvOiAnQ2Fyc3RlbiBCb3JtYW5uJyA8Y2Fib0B0emkub3JnPiwgSm9obiBNYXR0c3NvbiA8 am9obi5tYXR0c3NvbkBlcmljc3Nvbi5jb20+DQpDYzogImNvc2VAaWV0Zi5vcmciIDxjb3NlQGll dGYub3JnPg0KU3ViamVjdDogUkU6IFtDT1NFXSBDb21tZW50cyBvbiBkcmFmdC1pZXRmLWNvc2Ut cmZjODE1MmJpcy1zdHJ1Y3QtMDcgYW5kIGRyYWZ0LWlldGYtY29zZS1yZmM4MTUyYmlzLWFsZ3Mt MDYNCg0KICAgIA0KICAgIA0KICAgIC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgRnJv bTogQ09TRSA8Y29zZS1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgQ2Fyc3RlbiBCb3Jt YW5uDQogICAgU2VudDogRnJpZGF5LCBOb3ZlbWJlciAyMiwgMjAxOSA2OjQwIEFNDQogICAgVG86 IEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0dHNzb249NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5v cmc+DQogICAgQ2M6IGNvc2VAaWV0Zi5vcmcNCiAgICBTdWJqZWN0OiBSZTogW0NPU0VdIENvbW1l bnRzIG9uIGRyYWZ0LWlldGYtY29zZS1yZmM4MTUyYmlzLXN0cnVjdC0wNyBhbmQgZHJhZnQtaWV0 Zi1jb3NlLXJmYzgxNTJiaXMtYWxncy0wNg0KICAgIA0KICAgIE9uIE5vdiAyMiwgMjAxOSwgYXQg MDY6MjcsIEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0dHNzb249NDBlcmljc3Nvbi5jb21AZG1hcmMu aWV0Zi5vcmc+IHdyb3RlOg0KICAgID4gDQogICAgPiBDb3VsZCB3ZSByZXBsYWNlICJkYXRhIG9y aWdpbmF0aW9uIiB3aXRoICJub24tcmVwdWRpYXRpb24iPw0KICAgIA0KICAgIFByZWZlcmFibHkg bm90Lg0KICAgIFtKTFNdICBObyByZWFsbHksIHJlYWxseSBub3QuDQogICAgDQogICAgSWYgeW91 IHdhbnQgdGhlIHRoaW5nIHRoYXQgb2Z0ZW4gaXMgaWRlbnRpZmllZCBpbmNvcnJlY3RseSBieSB0 aGUgbGF0dGVyLCBwbGVhc2UgdXNlIGEgbW9yZSBwcmVjaXNlIHRlcm0gc3VjaCBhcyDigJx0aGly ZCBwYXJ0eSB2ZXJpZmlhYmlsaXR54oCdLiAgTm9uLXJlcHVkYXRpb24gaXMgYSBsZWdhbCB0ZXJt Lg0KICAgIFtKTFNdIE5vbi1yZXB1ZGlhdGlvbiBpcyBub3QgYSBsZWdhbCB0ZXJtLiAgUmVwdWRp YXRpb24gaXMgYSBsZWdhbCB0ZXJtLiAgVGhlcmUgaXMgbm8gc3VjaCB0aGluZyBhcyBub24tcmVw dWRpYXRpb24sIGp1c3QgYSBsZWdhbCBhcmd1bWVudCB0aGF0IHlvdSBjYW4gb3IgY2Fubm90IHJl cHVkaWF0ZSBzb21ldGhpbmcuICAgSSByZXB1ZGlhdGUgdGhpcyBzaWduYXR1cmUgYmVjYXVzZSBD YXJzdGVuIHdhcyBob2xkaW5nIGEgZ3VuIHRvIG15IGhlYWQgd2hlbiBJIG1hZGUgaXQuICBUaGF0 IGlzIGEgcmVwdWRpYXRlIGFyZ3VtZW50IGFuZCBub3QgdGhlIHJldmVyc2UuICBOb24tcmVwdWRp YXRpb24gb3JpZ2luYWxseSBoYWQgc29tZSByZWFsbHkgd2VpcmQgaWRlYXMgYXJvdW5kIGhhdmlu ZyBhIHRlY2hub2xvZ2ljYWwgd2F5IG9mIHByb3ZpbmcgdGhpbmdzIGxpa2U6ICBJdCB3YXMgcHJv dmVuIHRoYXQgdGhlIGtleSB3YXMgaW4gbXkgcG9zc2Vzc2lvbi4gSXQgd2FzIHByb3ZlbiB0aGF0 IG9ubHkgSSBjb3VsZCBoYXZlIG1hZGUgdGhlIHNpZ25hdHVyZS4gIEkga25ldyB3aGF0IEkgd2Fz IHNpZ25pbmcgYSB0aGUgdGltZS4gICBUaGF0IGlzIHRoaW5ncyB0aGF0IGNhbm5vdCBiZSBzaG93 bi4NCiAgICANCiAgICBKaW0NCiAgICANCiAgICANCiAgICBQcm92ZW5hbmNlIGlzIG9mdGVuIGEg dGVybSB1c2VkIGZvciB0aGUgZm9ybWVyLg0KICAgIA0KICAgIEJUVywgdGhlIHRleHQgbWlnaHQg YmUgZWFzaWVyIHRvIHJlYWQgd2hlbiBjb25zdHJ1Y3RzIHN1Y2ggYXMg4oCcYmlzdHJv4oCdLCBv b3BzLCDigJxic3Ry4oCdLCBhcmUgcmVwbGFjZWQgYnkg4oCcYnl0ZSBzdHJpbmfigJ0gb3V0c2lk ZSBvZiB0aGUgQ0RETCAod2hlcmUgYnl0ZSBzdHJpbmdzIGFyZSBpbmRlZWQgY2FsbGVkIOKAnGJ1 c3RlcuKAnSwgb29wcywg4oCcYnN0cuKAnSwgb3IgYWxzbyBzaW1wbHkg4oCcYnl0ZXPigJ0pLiAg SW4gdGhlIHByZXZpb3VzIHNlbnRlbmNlLCBmb3IgZGVtb25zdHJhdGlvbiwgSSBsZWZ0IGluIHRo ZSBhdXRvY29ycmVjdHMgYXMgdGhleSBhY3R1YWxseSBoYXBwZW5lZCA6LSkNCiAgICANCiAgICBH csO8w59lLCBDYXJzdGVuDQogICAgDQogICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCiAgICBDT1NFIG1haWxpbmcgbGlzdA0KICAgIENPU0VAaWV0Zi5v cmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCiAgICAN CiAgICANCg0K From nobody Tue Nov 26 07:24:28 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D8241208D1 for ; Tue, 26 Nov 2019 07:24:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nfuFrTkR9X_Z for ; Tue, 26 Nov 2019 07:24:25 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30068.outbound.protection.outlook.com [40.107.3.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF44B1202A0 for ; Tue, 26 Nov 2019 07:24:24 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QpmqxMqvwQSrclBOvgsqB3xzwjbFtQxr5BPWRdh90t2AR7Gg9uzTi1v8HgEYnUPaA2vRLnhG7kCkhKTBXdbHeFEi8b7gyDW6Yh4TVsBcbZVDtUn6TVAaPcmtZvHC2VHpi9W6YFGT4qHAVPUkxz7RpdUmG6Fjpq6pD7Z321/rSDRqGGmRYDlHMbWnz9i+BpV+QSwSbXJDkUL+3pIfWjGZzqdbm2SRB0zywD1c8xHzPYEmZP1IOHCXNv7jHs3c/lStFcgrd9MjCvpnDyF4JjssU9qrIUZixuN5eQxnRWwTjBTp85xP2lCQ+5J5vjZb8oYmfELN51OGIgH+KJVDUFmUxg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CtGIOka5DLLxBKA3gpNd7O85sVbPb12MiBGP9KGxgFo=; b=fQm15Lh8dYQOL+0rO6R6LqxISJN0oY97xzqSKR+QwI5z/VyVkFL/NHoGLcmtQXmpl8lx/H49d0Fpgk1VOGItQWqUxPHamVjbHv4AL4fceYPruGUThHzYX4vqj0o5TLwJD7o6btkm83g9EfEquRXOTXeBQtm+mipfRFlCQTXPru9yVFj0CjfjFSRkx4bKAqaQfI9KF/szlrGP+bvllkopeI43lIToZVhYtz3kIeswNqOJA3CVBOOUyGBQBod090+SBmkJ0hzVJQN4ZZz9AbVLvjbfm0Wfxn2n2JWL6AjLtGyjqUj1Gx6ihLPjRfjMRzVSMxehTmU40kvlMWzfAWWWyg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CtGIOka5DLLxBKA3gpNd7O85sVbPb12MiBGP9KGxgFo=; b=uM2qbN5bQA6iS7haszjEvtiDj85VWD0rSV08LfdgxxPuA0gWg/jh9Dd/YgLmd5ht8mc0umj6YtJB6hCo3DDXw6OHA2CtRbt4boCPKsC3d55ZiQwd7wQ3Nt2WwOT2NpK+SUZPlkXJu/hOfL6LdyBJo3FAA+nOW3OMOahX6zT+DtY= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.165.153) by HE1PR07MB4187.eurprd07.prod.outlook.com (20.176.163.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.13; Tue, 26 Nov 2019 15:24:22 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::21e5:eaae:99ed:41ac]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::21e5:eaae:99ed:41ac%3]) with mapi id 15.20.2495.014; Tue, 26 Nov 2019 15:24:22 +0000 From: John Mattsson To: "cose@ietf.org" Thread-Topic: Comments on draft-schaad-cose-more-algs-00 Thread-Index: AQHVpG2UYnkjZpbQzEmh3KcBHi4mXw== Date: Tue, 26 Nov 2019 15:24:22 +0000 Message-ID: <63173D2C-6C97-4404-B958-926F4318D81A@ericsson.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [192.176.1.97] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 850743d8-2a64-4eb2-bc6a-08d77284b6cb x-ms-traffictypediagnostic: HE1PR07MB4187: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 0233768B38 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(39860400002)(396003)(376002)(346002)(366004)(199004)(189003)(2351001)(316002)(305945005)(2501003)(66946007)(66476007)(7736002)(5660300002)(6916009)(81166006)(81156014)(1730700003)(8676002)(99286004)(86362001)(8936002)(6506007)(71190400001)(2616005)(44832011)(2906002)(14444005)(4744005)(76116006)(25786009)(66446008)(64756008)(66066001)(66556008)(6486002)(6116002)(256004)(3846002)(6512007)(71200400001)(478600001)(102836004)(58126008)(5640700003)(186003)(14454004)(33656002)(26005)(6436002)(36756003); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB4187; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: bLr6yC2V5gQkybuy7m82t3ApqXvauay2fgxWBvSvE6zdT6rIEIql5OpQk2gKQFtOT6Tcwod+1447/968L5Mw+wE8AUz8TUVWwc3CRgAVFHCUs1cI+PHfyS4okgc5A4e4AjE9Mobfm3JOhZoevaMX4eheEwEW5vrXmIa2kYLFnDng+E/DFhRx0Iw+CSFgdECyZHHDfvp+qRJr9W+Kj9mODE76jkyHlUzMRF/SWwE5iDD7fkoCKxNUnXl3vXCGEty8/gL091rVmmog3MSHfcm5z8Tq59HSTwOM7o/zoRiAT4GcXOnpm0QsmIW3sU+GV96bphtc6koEbhxKHE/hEMJzyKtp7lOQpJIKpStYWA7YMWuR8K5aO8Cy3vNyqMh3LKRRu5c/1rMWhqmnebZHd7Ji15m0WwhbupE7nMmpQYk5xwiaUAx9psnwWUFX2dX84WIC x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <87E2E7E0945FF148A8969EEB6C2899AB@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 850743d8-2a64-4eb2-bc6a-08d77284b6cb X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Nov 2019 15:24:22.2780 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ng80xMfBDN7AWbUPi0TNpJz/L0d2xE8qKCHhgL17bG1jcH2zu9d6SuQsZB+ic3gEMfaaMtj456dL20rSHZhM/rXZ/Fd1Mzmi8XL9/sse1/o= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB4187 Archived-At: Subject: [COSE] Comments on draft-schaad-cose-more-algs-00 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Nov 2019 15:24:27 -0000 SGksDQoNCklzIEExOTJLVy1QYWQgbmVlZGVkPyBJIGRvbuKAmXQgdGhpbmsgSSBoYXZlIGV2ZXIg c2VlbiBhbiBhcHBsaWNhdGlvbiBhY3R1YWxseSB1c2luZyBBRVMtMTkyLiBBcHBsaWNhdGlvbiB3 YW50aW5nIG1vcmUgdGhhbiAxMjgtYml0IHNlY3VyaXR5IHR5cGljYWxseSB1c2UgQUVTLTI1Niwg ZXZlbiB0b2dldGhlciB3aXRoIGFsZ29yaXRobXMgbGlrZSBQLTM4NCBhbmQgU0hBLTM4NC4NCg0K SSBrbm93IHRoYXQgUkZDIDgxNTIgZGVmaW5lcyBBMTkyS1cgYW5kIGluIGdlbmVyYWwgSSBkb27i gJl0IHNlZSBhIHByb2JsZW0gd2l0aCBkZWZpbmluZyBBMTkyS1ctUGFkLCBidXQgaXQgc2hvdWxk IG1heWJlIG5vdCBiZSBnaXZlbiBvbmUgb2YgdGhlIGxpbWl0ZWQgc21hbGwgdmFsdWVzIGZvciBp dHMgbGFiZWwgKFRCRDIpIHVubGVzcyBzb21lb25lIGV4cHJlc3MgdGhhdCB0aGV5IHdhbnQgdG8g dXNlIEFFUy0xOTIuDQoNCkNoZWVycywNCkpvaG4NCg0K From nobody Tue Nov 26 12:12:04 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03CA61208F8 for ; Tue, 26 Nov 2019 12:12:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PO6z5zwt_FcO for ; Tue, 26 Nov 2019 12:12:01 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65F97120052 for ; Tue, 26 Nov 2019 12:12:01 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 26 Nov 2019 12:11:56 -0800 From: Jim Schaad To: 'John Mattsson' , References: <63173D2C-6C97-4404-B958-926F4318D81A@ericsson.com> In-Reply-To: <63173D2C-6C97-4404-B958-926F4318D81A@ericsson.com> Date: Tue, 26 Nov 2019 12:11:55 -0800 Message-ID: <066901d5a495$c15a2350$440e69f0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQGcMZDGFWaO9fgFbmZkLEehaN0cd6gQxwzw Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] Comments on draft-schaad-cose-more-algs-00 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Nov 2019 20:12:03 -0000 I don't care one way or the other on this. I believe that the 192 key = lengths for AES are being used in some of the US government profiles, = but that would not be relevant here because I don't think those profiles = would be used here. Jim -----Original Message----- From: COSE On Behalf Of John Mattsson Sent: Tuesday, November 26, 2019 7:24 AM To: cose@ietf.org Subject: [COSE] Comments on draft-schaad-cose-more-algs-00 Hi, Is A192KW-Pad needed? I don=E2=80=99t think I have ever seen an = application actually using AES-192. Application wanting more than = 128-bit security typically use AES-256, even together with algorithms = like P-384 and SHA-384. I know that RFC 8152 defines A192KW and in general I don=E2=80=99t see a = problem with defining A192KW-Pad, but it should maybe not be given one = of the limited small values for its label (TBD2) unless someone express = that they want to use AES-192. Cheers, John _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose From nobody Wed Nov 27 00:05:23 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ABE7C120099 for ; Wed, 27 Nov 2019 00:05:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JsvsRVYtCPU6 for ; Wed, 27 Nov 2019 00:05:21 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20071.outbound.protection.outlook.com [40.107.2.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BCB2B1207FB for ; Wed, 27 Nov 2019 00:05:20 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=g6CbxJNygKRkLJ982dU00txeFiPzr/f+6u8sNLLlZGj/imQH+R6Ko8GLoYIiaIajj+BcCGBN8nG/gxlbyFN8Ne1xqpEIb6v7Rc6Gnj/r09x0KohQvtP+OGYTylHb72zvHYxPmLUd9UgSPy3A5mJM7in4sh0gxTiQKmWPXJn77+jQzxLFdRrTBQmgqM0VB7Ahqa9KVDWLEKR2g2hDGfv0sHs/GwwRt5/XT5LWsZ3qwLKvW0DvDk0fSTomJ9APc+VhexBwcW8P1U2aiLBSgBiC5B7jqK5ebLIyDMX7u4TWhpDehUhBqoyIAsQtvOfX3m+w6VamoWUhhoinWBe4t3BlrA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vB4p7dVBjTwpjtY7XEjp5YkOGija5csPJC8G7fNQLk0=; b=BE04L6YbgUqgy9KdD45DV+67JqzN7FNFe5zVgukucLj9elHRW23+hVjJwC6dvXDFFwjacMRAFQMXPKSLzBg6B8HJGd4sgdrJ/UM8YTdfJ7O6AGklPMvOQLCxXDoHE2fJCmROzzIRDvCG/IIvX8YC3uAbIspBIKQUbDoo8zU4Oz446615g+Q6aNBw4SBaENZzl8H1Y53oycRWo+EkiiAdorBDk8x3x8eqNlXLLbPkpDluP7heYlrRsZ2m/Rf3vVkBtkGrrvm4KE4R7bRpo3rHNKnVdgUmwZbaSeDfT0cokqz/6+m+ppd1ZaenI4aMc4kXJGpsNpB7z8bGS0APgr7tRg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vB4p7dVBjTwpjtY7XEjp5YkOGija5csPJC8G7fNQLk0=; b=Jed0E5ambZoqpADAYf6H04MlOC6foarzZlFQlxiMvR7wqIYEMWgJduta41lzps1tuudc2lQ80SPlZ96V6QkHwAtL3oGOfdRg0NxwVHrolMWGdoJJNeF8NG7ocAsDfBhh+9oiP2A2yF5oW2RMX8h8z3p2aqkgTseSDgdDuDQZz1s= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.165.153) by HE1PR07MB3435.eurprd07.prod.outlook.com (10.170.246.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.16; Wed, 27 Nov 2019 08:05:18 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::21e5:eaae:99ed:41ac]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::21e5:eaae:99ed:41ac%3]) with mapi id 15.20.2495.014; Wed, 27 Nov 2019 08:05:18 +0000 From: John Mattsson To: "cose@ietf.org" Thread-Topic: [COSE] Comments on draft-schaad-cose-more-algs-00 Thread-Index: AQHVpPlosPNfN7sqeE+c1z2zz5vO7w== Date: Wed, 27 Nov 2019 08:05:18 +0000 Message-ID: <3634E77C-C915-4C36-8984-B62B0CBBF3A3@ericsson.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [82.214.46.143] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c134531f-50e2-4ab0-af6b-08d773108af2 x-ms-traffictypediagnostic: HE1PR07MB3435: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 023495660C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(396003)(366004)(346002)(39860400002)(136003)(189003)(199004)(51444003)(21124004)(6512007)(6246003)(2351001)(6436002)(5640700003)(66066001)(558084003)(2501003)(81156014)(3846002)(81166006)(8676002)(1730700003)(6116002)(14454004)(478600001)(71200400001)(71190400001)(66556008)(64756008)(316002)(58126008)(2906002)(99286004)(256004)(91956017)(66946007)(76116006)(7736002)(8936002)(102836004)(26005)(305945005)(6506007)(66476007)(66446008)(186003)(5660300002)(36756003)(33656002)(6916009)(25786009)(44832011)(86362001)(6486002)(2616005)(229853002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3435; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: X0LHJD7+XGmFYRL0RrmoILLWEN9JIEho8gVcAEKF1JcBmPHqTaZ/YY/fPaxZ8GzW5ejiAzxh9/1VCNMxxPYJci17zmD1fcqz3QD3PnAM842SVkTTMg+4OqVv1whKwYWLjbDCOWia64Fom0XQiIrtalAfb+h8HB8A7oZpMLVApYHkZfU8s20OIhlzNJS+9yLevWq/yeHUwt84/S+1onvK7QICznpLS2bcSHog1ETVNYqn0JtdJwOHqC/3LpC3S2XaNyQchHD7Unyy3FNB8kyskqfFaupKIav4dQ6zehhDJW5rKptxFxKf+FciiJrDSWnl2Mf/VsUMAzcN5Etw1eNa0RbnR+Bp/7yXI95liEqQOWL0wI64nKvzA0sw5S6KIaCh99Dp6lkxvdkbAUQcgpBK4sOYvN09G5NM8+hYjg+cjBxq0kP/AO1JuThrMD+EzEoi x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <20897A6F561FDE488E2086E2BBDEAAA7@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: c134531f-50e2-4ab0-af6b-08d773108af2 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Nov 2019 08:05:18.2886 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: TwqUXH5gyIyB1FYsVKRSxRS6fkfZsgFXGCBXGQckAl93uyIh+2DXFiZcQLJD4sHq66axaFEZM1O9cpent257oOmMbjjHJzncWQYGoxEdsHs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3435 Archived-At: Subject: Re: [COSE] Comments on draft-schaad-cose-more-algs-00 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 08:05:22 -0000 SmltIFNjaGFhZCB3cm90ZTogDQoNCj5JIGJlbGlldmUgdGhhdCB0aGUgMTkyIGtleSBsZW5ndGhz IGZvciBBRVMgYXJlIGJlaW5nIHVzZWQgaW4gc29tZSBvZiB0aGUgVVMgZ292ZXJubWVudCBwcm9m aWxlcw0KDQpJIHRoaW5rIHRoYXQgd2FzIG9ubHkgaW4gcHJlLeKAnVN1aXRlIELigJ0gdmVyc2lv bnMgb2YgQ05TU1AgUG9saWN5ICMxNS4gV2l0aCBTdWl0ZSBCLCBpdCB3YXMgdXBkYXRlZCB0byBB RVMtMTI4IG9yIEFFUy0yNTYsIGFuZCB3aXRoIHRoZSBDTlNBIHN1aXRlIHRvIG9ubHkgQUVTLTI1 Ni4NCg0K From nobody Thu Nov 28 06:48:37 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 66AC612088A; Thu, 28 Nov 2019 06:48:31 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Dan Romascanu via Datatracker To: Cc: last-call@ietf.org, draft-ietf-cose-hash-sig.all@ietf.org, cose@ietf.org, dromasca@gmail.com X-Test-IDTracker: no X-IETF-IDTracker: 6.111.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Dan Romascanu Message-ID: <157495251138.5727.13087185020265487399@ietfa.amsl.com> Date: Thu, 28 Nov 2019 06:48:31 -0800 Archived-At: Subject: [COSE] Opsdir last call review of draft-ietf-cose-hash-sig-07 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 14:48:31 -0000 Reviewer: Dan Romascanu Review result: Ready Ready. This document specifies conventions for using the Hierarchical Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is described in RFC 8554. The document targets Standards Track, this the Normative Reference to the Informational RFC 8554 is a downref. The shepherd write-up makes a convincing argument why this downref is acceptable, maybe this justification could have been mentioned explicitly in the text. Otherwise this is a clear document, and Section 5 deals with the Operational Considerations. A full RFC 5706 review does not apply, but I do not see any operational or manageability issues that would prevent approval from the OPS-DIR perspective.