From nobody Thu Jan 2 10:34:05 2020 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 57F451200F8; Thu, 2 Jan 2020 10:33:54 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.115.0 Auto-Submitted: auto-generated Precedence: bulk Cc: rdd@cert.org, The IESG , cose-chairs@ietf.org, rfc-editor@rfc-editor.org, Ivaylo Petrov , draft-ietf-cose-hash-sig@ietf.org, cose@ietf.org, ivaylo@ackl.io Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Message-ID: <157799003435.6291.6292904662616219156.idtracker@ietfa.amsl.com> Date: Thu, 02 Jan 2020 10:33:54 -0800 Archived-At: Subject: [COSE] Protocol Action: 'Use of the HSS/LMS Hash-based Signature Algorithm with CBOR Object Signing and Encryption (COSE)' to Proposed Standard (draft-ietf-cose-hash-sig-09.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jan 2020 18:33:54 -0000 The IESG has approved the following document: - 'Use of the HSS/LMS Hash-based Signature Algorithm with CBOR Object Signing and Encryption (COSE)' (draft-ietf-cose-hash-sig-09.txt) as Proposed Standard This document is the product of the CBOR Object Signing and Encryption Working Group. The IESG contact persons are Benjamin Kaduk and Roman Danyliw. A URL of this Internet Draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ Technical Summary This document specifies the conventions for using the Hierarchical Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is one form of hash-based digital signature; it is described in RFC 8554. Working Group Summary The document has undergone several revisions since WG last call. These revisions were needed to address comments from the last call and to update a reference to a draft that has since been published. Document Quality There are no known implementations. This document specifies conventions for using HSS/LMS hash-based signature algorithm with COSE that are needed by other working groups. Beyond normal WG processes, Jim Schaad and John Mattsson did an in-depth reviews and had no substantive issues. Personnel Document Shepherd: Ivaylo Petrov (COSE WG chair) AD: Roman Danyliw (Sec AD) From nobody Wed Jan 8 01:50:08 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97A4012006B for ; Wed, 8 Jan 2020 01:50:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.889 X-Spam-Level: X-Spam-Status: No, score=-1.889 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y6b1LHErhdbv for ; Wed, 8 Jan 2020 01:50:04 -0800 (PST) Received: from mail-wm1-x32a.google.com (mail-wm1-x32a.google.com [IPv6:2a00:1450:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BF1D120024 for ; Wed, 8 Jan 2020 01:50:04 -0800 (PST) Received: by mail-wm1-x32a.google.com with SMTP id 20so1758839wmj.4 for ; Wed, 08 Jan 2020 01:50:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=8NE9+1K9v+Y+ZCBHlX4PubNRP810QzZJl1pqenL3hoA=; b=g2LD+p50oKXVkO8SvnfGJuHNvDl8S8ETEEItP5G8u2wzIR6MvyJvwDhHwE/sXpsGxg hj3wvk7leFDs2aZhlDffDxwikTl7h0F9TdCKtFn8rHRkBfOdRwQwKj0+myUizPMSi57k /89Q2729U/WMpSm240TCVZtjIsTYAIhLo4qimHpx0OTNyXD6ciryHmjX/2hqmwEZ/8ZY LDP6i6BM1YtBcX117Vb4YcVsV+OSDIjRJS6/vgcS/1jDSGIMuR2CV2r8DvQj/d+DwWFk aFf2R6Vhin+xP4xSXYpDfvbVTWDjFaOOf0dc7/h3H3uumnVVoFboRX6rYkhkyDY+fKXR keBQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=8NE9+1K9v+Y+ZCBHlX4PubNRP810QzZJl1pqenL3hoA=; b=tFklGOVq5vJDsmJTG7mNFBuwr2Fp9zfqAUYAwd9UeCndb/P9IOrxeW+UmCOdTtn8An wlB6hpHCeWe7YV8AwpTYCrmSQk7oUpZm5+9jYEs+aWO+AWWgFrYqf1KMmcxvk2Bk7ZoS pNRpTxy87oSW+GOR9BINJ5pNjhfCKODqm1ZrAWRouktNgR5eHKmMm/CVzxgRMy5byZ0H fxGRzTvLZ/PAY+XtEE+/Vjo45ZmJHAzbaExILg3mTTXcAowAVG+JXJ7vegeWYFjX9knp ESpSAaDyDkHM3ckPaDsO/fqAnryfOJW0Ty8UqEF4xzHvQl9UYAkFFbgioa9LsxT4WYt/ y1kA== X-Gm-Message-State: APjAAAW9qCCF6J4p6f6gj7QsJLboGfY1dFFHHnb7XYGN2+p79rqcDokT Z7pZelqF/pPsJUdXXtB49neHQz7wf5mZvVFzm51hwQ== X-Google-Smtp-Source: APXvYqw6xpIECajXrDklvbJHZiJtwLJuRoTc7/uy385TIxXZmXDrc7OJ9UiFZ8fKGHjmsG+Xv3/pDoEUmi3dS+VOxKI= X-Received: by 2002:a7b:cb0d:: with SMTP id u13mr2948665wmj.68.1578477002467; Wed, 08 Jan 2020 01:50:02 -0800 (PST) MIME-Version: 1.0 From: Ivaylo Petrov Date: Wed, 8 Jan 2020 10:49:36 +0100 Message-ID: To: draft-ietf-cose-x509@ietf.org Cc: cose Content-Type: multipart/alternative; boundary="00000000000004e29f059b9dd10e" Archived-At: Subject: [COSE] Review of draft-ietf-cose-x509-05 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jan 2020 09:50:07 -0000 --00000000000004e29f059b9dd10e Content-Type: text/plain; charset="UTF-8" [ Posting as an individual ] Dear all, This is my review of draft-ietf-cose-x509. Overall I believe the document is nearly ready with a few nits and phrasings that can be improved as well as one place where additional details could be beneficial in my opinion. == Possibly more information could be beneficial Section 2: * I think some more information can be added to this sentence: As this header attribute implies a trust relationship, the attribute MUST be in the protected attributes. == Nits: Section 1: * s/discussions where held/discussions were held/ In the process of writing [RFC8152] discussions where held on the question of X.509 certificates [RFC5280] and if there was a needed to provide for them. * Improve readability Since that time a number of cases where X.509 certificate support is necessary have been defined. - to be replaced by Since that time a number of cases have been defined where X.509 certificate support is necessary. * Disambiguate situations Some of the constrained device situations are being used where an X.509 PKI is already installed. - to be replaced by Constrained devices are being used in some situations where an X.509 PKI is already installed. * I believe it is understandable, but for me "well understood" could be misunderstood: The use of certificates in this scenario allows for key management to be used which is well understood. - A possible alternative is: In this situation the use of certificates allows for key management using those certificates, the properties of which are well understood. Section 2: * s/distributer/distributor/ This validation can be done via the PKIX rules in [RFC5280] or by using a different trust structure, such as a trusted certificate distributoer for self-signed certificates. * s/establish a trust/establish trust/ If the application cannot establish a trust in the certificate, then it cannot be used. * s/validation the/validation of the/ COSE_Signature and COSE_Sign0 objects, in these objects they identify the certificate to be used for validation of the signature. Section 5: * s/certificate validation/certificate validity/ In any event, both the signature and certificate validity MUST be checked before acting on any requests. Best regards, Ivaylo --00000000000004e29f059b9dd10e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
[ Posting as an indi= vidual ]

Dear all,

This is my review of=C2=A0draft-ietf-cose-x509. Overall = I believe the document is nearly ready with a few nits and phrasings that c= an be improved as well as one place where additional details could be benef= icial=C2=A0in my opinion.

=3D=3D Possibly more information could be beneficia= l

= Section 2:
<= font color=3D"#0b5394">* I think some more information can be added to this= sentence:
=C2=A0=C2=A0=C2=A0=C2=A0As this header attr= ibute implies a trust relationship, the

=C2=A0=C2=A0=C2=A0=C2=A0attribute M= UST be in the protected attributes.


=3D=3D Nits:

Section 1:
* s/discussions where held/discussions= were held/
=C2=A0 =C2=A0=C2=A0In the process of writing [RFC8152] discussions where held o= n the

=C2=A0=C2=A0=C2=A0 question of X.509 certificates [RFC5280] and if t= here was a needed to

=C2=A0=C2=A0=C2=A0 provide for them.

* Improve readabilit= y

=C2=A0 =C2=A0=C2=A0Since that time a number of cases where X.509 <= /span>

certificate support is necessary have = been defined.

=C2=A0 - to be replaced by

=C2=A0 =C2=A0=C2=A0Since that time a number of cases have been defined where X.509

certific= ate support is necessary.

* Disambiguate sit= uations

=C2=A0 =C2=A0 =C2=A0Some of the constrained device situations are being used where an=

=C2=A0= =C2=A0=C2=A0 X.509 PKI is already installed.

=C2=A0 - to= be replaced by
=C2=A0 =C2=A0 =C2=A0Constrained devices are being used in some situa= tions where an X.509=C2=A0
=C2=A0 =C2=A0 =C2=A0 PKI is already installed.

* I believ= e it is understandable, but for me "well understood" could be mis= understood:

The use of certificates in this scenario allows for key managem= ent to be used

=C2=A0=C2=A0=C2=A0which = is well understood.

- A possible alternative is:

=C2=A0 =C2=A0 In this situation the use of cert= ificates allows for key management using those certificates, the properties= of which are well understood.=C2=A0


Se= ction 2:=C2=A0 =C2=A0

* s/distributer/distributor/

=C2=A0=C2=A0This validation can be done via the PKIX rules in

=C2=A0=C2=A0=C2=A0= [RFC5280] or by using a different trust structure, such as a trusted=

=C2=A0= =C2=A0=C2=A0certificate distributoer for self-signed certificates.=

* s/establis= h=C2=A0a trust/establish=C2=A0trust/

=C2=A0=C2=A0If the applicatio= n cannot establish

=C2=A0=C2=A0=C2=A0a trust in the certificate, = then it cannot be used.

* s/validation the/validation of the/

= COSE_Signature and COSE_Sign0 objects, in these objects they

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0identify the certificate to be us= ed for validation of = the signature.


Section 5:=C2= =A0 =C2=A0

* s/certificate validation/certificate = validity/
=C2=A0 =C2=A0 In any event, both the s= ignature and certificate = validity
=C2=A0 =C2=A0 =C2=A0MUST be checked before acting on any= requests.

Best regards,
Ivaylo

--00000000000004e29f059b9dd10e-- From nobody Wed Jan 15 06:44:27 2020 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 61363120025; Wed, 15 Jan 2020 06:43:34 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: ivaylo@ackl.io, cose-chairs@ietf.org, kaduk@mit.edu, cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.116.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <157909941432.4671.2028991824213206615.idtracker@ietfa.amsl.com> Date: Wed, 15 Jan 2020 06:43:34 -0800 Archived-At: Subject: [COSE] cose - New Meeting Session Request for IETF 107 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Jan 2020 14:43:34 -0000 A new meeting session request has just been submitted by Ivaylo Petrov, a Chair of the cose working group. --------------------------------------------------------- Working Group Name: CBOR Object Signing and Encryption Area Name: Security Area Session Requester: Ivaylo Petrov Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 60 Conflicts to Avoid: Chair Conflict: core dispatch lamps lpwan saag secdispatch t2trg Technology Overlap: cfrg rats teep Key Participant Conflict: ace cbor People who must be present: Matthew A. Miller Benjamin Kaduk Ivaylo Petrov Resources Requested: Special Requests: --------------------------------------------------------- From nobody Sun Jan 19 22:16:42 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B813C120043 for ; Sun, 19 Jan 2020 22:16:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.298 X-Spam-Level: X-Spam-Status: No, score=-0.298 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=elandsys.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EGRNCVZ7kQYx for ; Sun, 19 Jan 2020 22:16:39 -0800 (PST) Received: from mx.elandsys.com (mx.elandsys.com [162.213.2.210]) by ietfa.amsl.com (Postfix) with ESMTP id 1A659120025 for ; Sun, 19 Jan 2020 22:16:39 -0800 (PST) Received: from DESKTOP-K6V9C2L.elandsys.com ([102.116.56.26]) (authenticated bits=0) by mx.elandsys.com (8.15.2/8.14.5) with ESMTPSA id 00K6GOxD008938 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 19 Jan 2020 22:16:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=elandsys.com; s=mail; t=1579500997; x=1579587397; i=@elandsys.com; bh=1KDOJti+kEPwDMmGm6x38pKvAEvTrq8EQKg7Lpkmpio=; h=Date:To:From:Subject:In-Reply-To:References; b=piQRwVtFJ5Oj/AYGtwKVozg7qrLBX0G/Gc5+YqgF6y1bhktt0tKWKq3jM92iXbKuk kbXrot1MeKE+dAQTMxg7l3xVyIuuSkiuG2p/yDf5ei1fV7UrYPEUjpu7QMR9vmJb// MrJ0/Zo0QlcjfzkSESogVkOzKVLBOpvuSNwybZb4= Message-Id: <6.2.5.6.2.20200119220551.10df87b8@elandnews.com> X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6 Date: Sun, 19 Jan 2020 22:15:06 -0800 To: Derek Atkins , cose@ietf.org From: S Moonesamy In-Reply-To: References: <087819e292adcd619684ac745a8a243f.squirrel@www.rfc-editor.org> <5F28BE43-1AB5-4CA6-9435-BB841778EBD8@inf.ethz.ch> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Archived-At: Subject: Re: [COSE] draft-atkins-suit-cose-walnutdsa on the Independent Stream X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jan 2020 06:16:40 -0000 Hi Derek, Section 6.1 of draft-atkins-suit-cose-walnutdsa-02 has the following: "Value between -256 to 256 to be assigned ..." Shouldn't it be "255" instead of "256"? Regards, S. Moonesamy From nobody Sun Jan 26 23:50:33 2020 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 56EFB120104; Sun, 26 Jan 2020 23:50:29 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.116.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <158011142931.30645.7251747475703889899@ietfa.amsl.com> Date: Sun, 26 Jan 2020 23:50:29 -0800 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-webauthn-algorithms-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jan 2020 07:50:29 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : COSE and JOSE Registrations for WebAuthn Algorithms Author : Michael B. Jones Filename : draft-ietf-cose-webauthn-algorithms-04.txt Pages : 13 Date : 2020-01-26 Abstract: The W3C Web Authentication (WebAuthn) specification and the FIDO Alliance Client to Authenticator Protocol (CTAP) specification use CBOR Object Signing and Encryption (COSE) algorithm identifiers. This specification registers the following algorithms in the IANA "COSE Algorithms" registry, which are used by WebAuthn and CTAP implementations: RSASSA-PKCS1-v1_5 using SHA-256, SHA-384, SHA-512, and SHA-1, and ECDSA using the secp256k1 curve and SHA-256. It registers the secp256k1 elliptic curve in the IANA "COSE Elliptic Curves" registry. Also, for use with JSON Object Signing and Encryption (JOSE), it registers the algorithm ECDSA using the secp256k1 curve and SHA-256 in the IANA "JSON Web Signature and Encryption Algorithms" registry and the secp256k1 elliptic curve in the IANA "JSON Web Key Elliptic Curve" registry. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-webauthn-algorithms/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-04 https://datatracker.ietf.org/doc/html/draft-ietf-cose-webauthn-algorithms-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-webauthn-algorithms-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jan 27 02:55:57 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60E5C120133 for ; Mon, 27 Jan 2020 02:55:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VvBGSzzWdt9q for ; Mon, 27 Jan 2020 02:55:53 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650133.outbound.protection.outlook.com [40.107.65.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E54B8120116 for ; Mon, 27 Jan 2020 02:55:52 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Hu0cYNoGH86UnvMKkRQUHP7aWm5/KJM+N3UTJYJk3tPIZGM7jzttfu5SKYCxh97HF7EUj5eeej3QsOM4PnTsOpK8oLfXeGFNBb0zqYp9dEFWIyaVAcHSkRNDFCDsy7t4oNhAvWt8L8/afTEjNhuKM90JARAo8/Ce4ITFfk1v5m5t/UWjs+WXUaylSXPn8Gx2n9003Nr5BAwgFrQPxoJaPKBHcFhJgnCJ+GXCac2XFI5iFbB8WopHOBr+QyocJx/ImmgrM74paOn17mhg7gYZewTo46c91G7NsQh2mm2yUUYLe7aMEEvX9HS0OtN+kQ7lvI3DWKhQXQuI6pksLyos0A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0vFoYQG3Hiz38iPh9ujVPb9DliwlgJcRmXky6hDXdBQ=; b=E/KSCAs1Z/f3Umh5baHFvYZuOQ4zGAURc6Z1hifXfVnrMFwHT2mXMWGWJRweM7/l5VFnBGICpANnujyiGnNSJQSj3aNF5AnoVFKiZB6JiOBndmvkCq46rU1dUS10HFEUArr0rQ1Pnf2AbHA4Lzmsz9ESNpfl+gmWedwzIO7YWN2H5vTZEuDWLbx2o5ijsFEZP8tfsh4WonqMxO+8MOUQ0IjIcjqp0V5rjnKCD2wVT/JZfZO0FpAoxlllAYLmyCFwBQ+WM/4LReateDVo3a8l0V34X7tDC+3Fml60WdtFfLVVoO04D0TPHmizg6othOXd8/mMSAKwUvVK9x03Nosmlw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0vFoYQG3Hiz38iPh9ujVPb9DliwlgJcRmXky6hDXdBQ=; b=PeynO0p52upPLUQ7gwytck75aw0gZ0ZVC3l0qpKre+nFL72VZ3pZxgIrxmzr2Hxv0uVHsBMQLs9qe9+dOO9lsL2Rg2CgxYU/K0GjQ/fmoUJZxut1oa90lYm6+NS9oe7q8ZjBP9ksmhf48dM+egIY1B28xC/Kr1TeY1jALX1NlEE= Received: from BY5PR00MB0676.namprd00.prod.outlook.com (52.135.55.15) by BY5PR00MB0657.namprd00.prod.outlook.com (52.135.53.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2720.0; Mon, 27 Jan 2020 10:55:42 +0000 Received: from BY5PR00MB0676.namprd00.prod.outlook.com ([fe80::78fd:8830:e5c8:1b12]) by BY5PR00MB0676.namprd00.prod.outlook.com ([fe80::78fd:8830:e5c8:1b12%2]) with mapi id 15.20.2719.000; Mon, 27 Jan 2020 10:55:42 +0000 From: Mike Jones To: "cose@ietf.org" Thread-Topic: COSE and JOSE Registrations for WebAuthn Algorithms spec adding explanatory comments on design decisions Thread-Index: AdXU//TpQYWf2tu7SSaeQay/k+49MQ== Date: Mon, 27 Jan 2020 10:55:42 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=be015218-2699-4d72-a41e-0000cf99dbc5; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-01-27T10:53:02Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [123.221.184.10] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 7a6475f8-2b98-42d0-ac88-08d7a3177469 x-ms-traffictypediagnostic: BY5PR00MB0657: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 02951C14DC x-forefront-antispam-report: SFV:NSPM; SFS:(10001)(10019020)(4636009)(39860400002)(366004)(376002)(136003)(346002)(396003)(199004)(189003)(33656002)(21615005)(26005)(8990500004)(6916009)(10290500003)(316002)(8936002)(966005)(2906002)(478600001)(186003)(86362001)(6506007)(81156014)(81166006)(4744005)(8676002)(71200400001)(55016002)(9686003)(5660300002)(66946007)(76116006)(64756008)(66446008)(52536014)(66556008)(66476007)(7696005)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY5PR00MB0657; H:BY5PR00MB0676.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata: q9HDmM5HACi4toJl6u6o4CYtoNJ0im6wj6wcxfwfBaGzP87SNXvM/5/kOaGhmJRgpHIkgoEgUtCABqt7/AYpAm0d8DGptyN44w6earco0Or5+iWvYAuRZGr+3z52p5ry/Gcw2xScqB8AmS4aU/H8gg== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BY5PR00MB06763B077BC9F40E6A7D8A3FF50B0BY5PR00MB0676namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7a6475f8-2b98-42d0-ac88-08d7a3177469 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Jan 2020 10:55:42.7468 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Mvf1YbRqr+YRf6fHiB2uhjvVBbC6b2LwgNwfhiXYVVRCjODfm4ynXaDMUBJiyzns5bC5uFh4AHLsOuObalX59w== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR00MB0657 Archived-At: Subject: [COSE] COSE and JOSE Registrations for WebAuthn Algorithms spec adding explanatory comments on design decisions X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jan 2020 10:55:55 -0000 --_000_BY5PR00MB06763B077BC9F40E6A7D8A3FF50B0BY5PR00MB0676namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The "COSE and JOSE Registrations for WebAuthn Algorithms" specification has= been updated to add explanatory comments on design decisions made that wer= e discussed on the mailing list that Jim Schaad requested be added to the d= raft. The specification is available at: * https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-04 An HTML-formatted version is also available at: * https://self-issued.info/docs/draft-ietf-cose-webauthn-algorithms-04.= html -- Mike P.S. This notice was also posted at https://self-issued.info/?p=3D2039 and= as @selfissued. --_000_BY5PR00MB06763B077BC9F40E6A7D8A3FF50B0BY5PR00MB0676namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The “COSE and JOSE Registrations for WebAuthn = Algorithms” specification has been updated to add explanatory comment= s on design decisions made that were discussed on the mailing list that Jim= Schaad requested be added to the draft.

 

The specification is available at:

 

An HTML-formatted version is also available at:=

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;        -- Mike

 

P.S.  This notice was also posted at https://self-issued.info/?p=3D2039 and as @selfissued.

 

 

--_000_BY5PR00MB06763B077BC9F40E6A7D8A3FF50B0BY5PR00MB0676namp_-- From nobody Wed Jan 29 05:45:29 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00486120128 for ; Wed, 29 Jan 2020 05:45:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.1 X-Spam-Level: X-Spam-Status: No, score=0.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, PDS_TONAME_EQ_TOLOCAL_SHORT=1.999, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JJZHc3HeZv-2 for ; Wed, 29 Jan 2020 05:45:21 -0800 (PST) Received: from mail-wr1-x432.google.com (mail-wr1-x432.google.com [IPv6:2a00:1450:4864:20::432]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BCD9512011A for ; Wed, 29 Jan 2020 05:45:20 -0800 (PST) Received: by mail-wr1-x432.google.com with SMTP id k11so5551235wrd.9 for ; Wed, 29 Jan 2020 05:45:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=+EIxUYo2VQm/43wm4ISMusIH7PXElEs1Re7c4a/gUIg=; b=oMm9lWJAR/bx+43oIvqlrvywLWv2OPupVFD+OthgQilWGt7jYdHZ9xaHG4e/xHSO4/ 1HJ7T6vfo5oiJBDffcAfJ4c+0D/6JNfTiUKwkpK+2na+N7OOnji5J8aw+tG0DfjBLCHv A0xuR6vRCNu9w4G78YnChsnUUGTcv60IJt0v1ZJUHg7H6UnWlYDwCiEuKolZ6iT6HENa M3HEJvHE5RDhVCyxeerOrWYilkvg4+v+/KhfkpCV5tyPyCHLRbCrmVHUuLMnnASySg0t ACAmC0SAxFP+3Y4WxB1mzzD3E/X5LupwLdVApB+xZZWp+NAp04Re/pBv639vMU74jKr4 aaVg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=+EIxUYo2VQm/43wm4ISMusIH7PXElEs1Re7c4a/gUIg=; b=EmOy9HGQH41F0Lj5PXkGtKcHOvcePOvwkpnD2NpFlg3LipmutyIV2yD81HAOtRJI4f 7j//w4XY/NGTaYEiGIwMynSQ0e10jSsWFRQinV19zdc3n6Uda2mDj99RPKFDddgv2PCO gzvj6B/RiGkoWMj8pN1/WH4s79iQcBGQR+Kf8t/FqSqvoaGeWt11dtN0mfoQXyMpDqgk ++3Geof9YDCS1Ug+U9IayR5K6hfv0mG9JxgLFbdrNuMWDtN7AFxymm1uuliknBXLe5Eu 7xtCo1oDGNDqjyJ53Qk+FNc8P27p1xtfEov16udEBljm6QoXkYyCKFJ6PXJdTwOSCFqR PiGw== X-Gm-Message-State: APjAAAUal51kKKObH2kJQw2ywJYjvqMecOc2vztICNS8dE4QnBRbXa8s NHktLzzSlGQ3YJ/ID5sSP//K5JmC4ca7AMMovH9hrDgd3cUCzQ== X-Google-Smtp-Source: APXvYqw7uW/SnbVICq8fyTeESBC+ymswdNfttfEXF6r2wz1IX3ulxdBcQH98S278abgnr2Qi5itlCjs1LTKxHZxXxAs= X-Received: by 2002:adf:fe43:: with SMTP id m3mr37732963wrs.213.1580305518944; Wed, 29 Jan 2020 05:45:18 -0800 (PST) MIME-Version: 1.0 From: Ivaylo Petrov Date: Wed, 29 Jan 2020 14:44:52 +0100 Message-ID: To: cose , jose@ietf.org Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [COSE] WGLC of draft-ietf-cose-webauthn-algorithms ENDED X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jan 2020 13:45:23 -0000 Dear all, The working group last call for [WebAuthn] has ended; thank you to everyone that commented. The latest revisions appear to address all of the comments received, and no objections were raised. We will soon be completing the shepherd writeup for this document and requesting publication. - Matthew and Ivaylo COSE Chairs [WebAuthn]: https://datatracker.ietf.org/doc/draft-ietf-cose-webauthn-algorithms/ From nobody Wed Jan 29 06:20:55 2020 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DB8212011A; Wed, 29 Jan 2020 06:20:50 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.116.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <158030765007.2811.3194177082375242744@ietfa.amsl.com> Date: Wed, 29 Jan 2020 06:20:50 -0800 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-webauthn-algorithms-05.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jan 2020 14:20:50 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : COSE and JOSE Registrations for WebAuthn Algorithms Author : Michael B. Jones Filename : draft-ietf-cose-webauthn-algorithms-05.txt Pages : 13 Date : 2020-01-29 Abstract: The W3C Web Authentication (WebAuthn) specification and the FIDO Alliance Client to Authenticator Protocol (CTAP) specification use CBOR Object Signing and Encryption (COSE) algorithm identifiers. This specification registers the following algorithms in the IANA "COSE Algorithms" registry, which are used by WebAuthn and CTAP implementations: RSASSA-PKCS1-v1_5 using SHA-256, SHA-384, SHA-512, and SHA-1, and ECDSA using the secp256k1 curve and SHA-256. It registers the secp256k1 elliptic curve in the IANA "COSE Elliptic Curves" registry. Also, for use with JSON Object Signing and Encryption (JOSE), it registers the algorithm ECDSA using the secp256k1 curve and SHA-256 in the IANA "JSON Web Signature and Encryption Algorithms" registry and the secp256k1 elliptic curve in the IANA "JSON Web Key Elliptic Curve" registry. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-webauthn-algorithms/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-05 https://datatracker.ietf.org/doc/html/draft-ietf-cose-webauthn-algorithms-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-webauthn-algorithms-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jan 31 03:26:52 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32124120124 for ; Tue, 28 Jan 2020 06:31:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=securerf.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GLNrYf4R7XLl for ; Tue, 28 Jan 2020 06:31:09 -0800 (PST) Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12on2106.outbound.protection.outlook.com [40.107.237.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74E6812011A for ; Tue, 28 Jan 2020 06:31:09 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=C4BGhGonzOyS4LyxgkLvqt2ua9TkCxDsBgrIKvQtNqxGDIvqV3lnlaJo+JWTZ+n5+fniHT2O2POTvcFwUYVTZuKfqjTo+Q1sD7BFyQkl4xdHWjiKC/CGv0f+SPeM72UPTdGzLbTz3LTmc0WHwvyvf3ku2Dv9tLCVM82QNMGxRAIatMmB9wA0lvSnY0Ahk2DZqPySkMHEIiI4e5NziSghMSDqDygGu97ES/OtHotSwGaJAMoEfbYloWljQf3rxFeQ35DzCW10Vmcj1CSryAfh3n1pXBLYDCnE/vnO9pUelFQEe7/QGGyiLBGzl1vdY27VG2y/ihBK/jOCUR/SBdTYyg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZdUvtwqZjw8QpjxhTVqqcQKLQHKTD83ztzpYk8eCPs0=; b=G+14x1vIDzQtkdWOFCCwf3FXVrZePBDTd+zTfjEaPI5G1/1+YVCWv1CF7fjGiWB9lXb6uCmQrbFPhYmza8cDgSbRdlF4jnp4jeAXx3gyfTXk4Syq+21Z+tGFRlxyaSnSwBQECzYr6DOxQfcUbPZxVgUQXg7YGf+ux9yYOR61qX8P6FufykFfA/Psq1OKx65wyl4ChgKJ4uRakww9sODwbmvxfjQkIP4Hkb6GQr8KJwdQlOx4P7921uULKNunEa7SxcpotrwYhbVxhgQi0z/hIH8voODs/eham+BidkY+sE1+PsWXwgv71J7MQuJWoyUKe5AqoGae1vopDRdLM4EwTQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=veridify.com; dmarc=pass action=none header.from=veridify.com; dkim=pass header.d=veridify.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=SecureRF.onmicrosoft.com; s=selector2-SecureRF-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZdUvtwqZjw8QpjxhTVqqcQKLQHKTD83ztzpYk8eCPs0=; b=hKXLlXGlPoDc0yzQoGWtqNjR0HTmOXQPePaoVXsLuwxUNLYH9WmAH3dCfh38XCE+8xDz0YzTJKI4GIM5l+H0FQ+6oa803/5eB0lIWXhx3hxaU02ajMioY63wmMMmhGKTjGJgeV19ndvQOOCqKgecYe5DLFkfBwspyZ7xjHRLrm8= Received: from BN7PR03MB3636.namprd03.prod.outlook.com (20.176.22.139) by BN7PR03MB3489.namprd03.prod.outlook.com (20.176.17.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2665.24; Tue, 28 Jan 2020 14:31:07 +0000 Received: from BN7PR03MB3636.namprd03.prod.outlook.com ([fe80::89e2:e87:cc2a:9df9]) by BN7PR03MB3636.namprd03.prod.outlook.com ([fe80::89e2:e87:cc2a:9df9%7]) with mapi id 15.20.2665.026; Tue, 28 Jan 2020 14:31:07 +0000 From: Derek Atkins To: "sm+ietf@elandsys.com" , "cose@ietf.org" Thread-Topic: draft-atkins-suit-cose-walnutdsa on the Independent Stream Thread-Index: AQHVz1kv34RLfMWGs06szxXQC3aOKqgAMHMA Date: Tue, 28 Jan 2020 14:31:07 +0000 Message-ID: References: <087819e292adcd619684ac745a8a243f.squirrel@www.rfc-editor.org> <5F28BE43-1AB5-4CA6-9435-BB841778EBD8@inf.ethz.ch> <6.2.5.6.2.20200119220551.10df87b8@elandnews.com> In-Reply-To: <6.2.5.6.2.20200119220551.10df87b8@elandnews.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=datkins@veridify.com; x-originating-ip: [75.6.198.131] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 344d5c21-f9bc-4ef6-dbff-08d7a3feb699 x-ms-traffictypediagnostic: BN7PR03MB3489: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 029651C7A1 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39830400003)(396003)(376002)(366004)(346002)(189003)(199004)(86362001)(6486002)(66574012)(5660300002)(6512007)(71200400001)(316002)(2906002)(66446008)(66556008)(66476007)(110136005)(64756008)(8936002)(81156014)(81166006)(8676002)(6506007)(76116006)(26005)(186003)(36756003)(508600001)(66946007)(2616005); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR03MB3489; H:BN7PR03MB3636.namprd03.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: veridify.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: ih5VUwiAyYPjvusPUdi3Ago8nIBmJY1Qoof08VVPPFZ2dpqbM7wxmsIyundHoA9bACt6eTYJTzaWUJq2QSgQ6QjPOoIItEGe5rQO0GIP7ZKHLnbOHzte91iZctEM8Mb6Xk/KC1d8IymOq4ixkp90Xwn3SMKo/llpa6EKgwHFXIvcWnFQUSXzexen8MaljAwb8FGArMz4J+OfezD7ZIdwt2/B6DojyZfQULqKP8rEB6xu253KtILOICui8s6I7Y6xF2FJLv5M5d3rIRLYrFkf65FNJB8MS1zrkxcx7P9tFmj3aST+P3EVVsLyIUqP2JuJZT2+uQS5tjb+h2iObWTYgY6b87NI/bqCog2Y4NqvdzP5XOEk+uG4pOLoLtYBC7M7B/O0luHDrXadslSu9tqaOxPMzjPW3x5oOtTNsaPoaf2X7qQC2CXQsXlC5vekptM9 x-ms-exchange-antispam-messagedata: 8bNIfxfaSgCQ+Eg+c0yIQyKG0hg01sW3vMebCCxUGfEVB3SHdBUfM3v13uRb2H6sJJWQefqpOn2BytK3U2v+bV+VXXb9kiusE8tUYjzz8V5QkOh1rZVMKfSesq1wuMzLHk2g8o9XWbyQzGK7YG71zQ== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_c23b3e413ccf3b50f15d8ddfbb479da873786f53camelVeridifyco_" MIME-Version: 1.0 X-OriginatorOrg: veridify.com X-MS-Exchange-CrossTenant-Network-Message-Id: 344d5c21-f9bc-4ef6-dbff-08d7a3feb699 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jan 2020 14:31:07.5062 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4d55c92e-ab29-41b6-ae3c-75858302a1d4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: cdcnliGlO43MYcVcu8pTFSs7Lq4s8x/PqHUxUqtzT0XQPbyDMluPy26O8Pu0WVd4mP3etB+LxcdZDKmANNr1Qg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR03MB3489 Archived-At: X-Mailman-Approved-At: Fri, 31 Jan 2020 03:26:49 -0800 Subject: Re: [COSE] draft-atkins-suit-cose-walnutdsa on the Independent Stream X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2020 14:31:11 -0000 --_000_c23b3e413ccf3b50f15d8ddfbb479da873786f53camelVeridifyco_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQpUaGFuayB5b3UgZm9yIG5vdGljaW5nIHRoaXMuIFlvdSBhcmUgY29ycmVjdCwgYW5kIEkg aGF2ZSBmaXhlZCB0aGlzIGluIHRoZSBzb3VyY2UuDQotZGVyZWsNCg0KT24gU3VuLCAyMDIwLTAx LTE5IGF0IDIyOjE1IC0wODAwLCBTIE1vb25lc2FteSB3cm90ZToNCg0KSGkgRGVyZWssDQoNCg0K U2VjdGlvbiA2LjEgb2YgZHJhZnQtYXRraW5zLXN1aXQtY29zZS13YWxudXRkc2EtMDIgaGFzIHRo ZSBmb2xsb3dpbmc6DQoNCiJWYWx1ZSBiZXR3ZWVuIC0yNTYgdG8gMjU2IHRvIGJlIGFzc2lnbmVk IC4uLiIgIFNob3VsZG4ndCBpdCBiZSAiMjU1Ig0KDQppbnN0ZWFkIG9mICIyNTYiPw0KDQoNClJl Z2FyZHMsDQoNClMuIE1vb25lc2FteQ0KDQoNCi0tDQoNCkRlcmVrIEF0a2lucw0KQ2hpZWYgVGVj aG5vbG9neSBPZmZpY2VyDQpWZXJpZGlmeSBTZWN1cml0eSAtIFNlY3VyaW5nIHRoZSBJbnRlcm5l dCBvZiBUaGluZ3PCrg0KRm9ybWVybHkgU2VjdXJlUkYgQ29ycG9yYXRpb24NCg0KT2ZmaWNlOiAy MDMuMjI3LjMxNTEgIHgxMzQzDQpEaXJlY3Q6IDYxNy42MjMuMzc0NQ0KTW9iaWxlOiA2MTcuMjkw LjUzNTUNCkVtYWlsOiBEQXRraW5zQFZlcmlkaWZ5LmNvbQ0KPG1haWx0bzpEQXRraW5zQFNlY3Vy ZVJGLmNvbT4NClRoaXMgZW1haWwgbWVzc2FnZSBtYXkgY29udGFpbiBjb25maWRlbnRpYWwsIHBy b3ByaWV0YXJ5IGFuZCAvIG9yIGxlZ2FsbHkgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbiBhbmQgaW50 ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW50ZW5kZWQgcmVjaXBpZW50KHMpIGFuZCBv dGhlcnMgc3BlY2lmaWNhbGx5IGF1dGhvcml6ZWQuIEFueSBkaXNjbG9zdXJlLCBkaXNzZW1pbmF0 aW9uLCBjb3B5aW5nLCBkaXN0cmlidXRpb24gb3IgdXNlIG9mIHRoZSBpbmZvcm1hdGlvbiBjb250 YWluZWQgaW4gdGhpcyBlbWFpbCBtZXNzYWdlLCBpbmNsdWRpbmcgYW55IGF0dGFjaG1lbnRzLCB0 byBvciBieSBhbnlvbmUgb3RoZXIgdGhhbiB0aGUgaW50ZW5kZWQgcmVjaXBpZW50IGlzIHN0cmlj dGx5IHByb2hpYml0ZWQuICBJZiB5b3UgcmVjZWl2ZWQgdGhpcyBpbiBlcnJvciwgcGxlYXNlIGlt bWVkaWF0ZWx5IGFkdmlzZSB0aGUgc2VuZGVyIGJ5IHJlcGx5IGVtYWlsIG9yIGF0IHRoZSB0ZWxl cGhvbmUgbnVtYmVyIGFib3ZlLCBhbmQgdGhlbiBkZWxldGUsIHNocmVkLCBvciBvdGhlcndpc2Ug ZGlzcG9zZSBvZiB0aGlzIG1lc3NhZ2UuDQo= --_000_c23b3e413ccf3b50f15d8ddfbb479da873786f53camelVeridifyco_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgZGlyPSJsdHIiPg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUi IGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8L2hlYWQ+DQo8Ym9keSBzdHls ZT0idGV4dC1hbGlnbjpsZWZ0OyBkaXJlY3Rpb246bHRyOyI+DQo8ZGl2PkhpLDwvZGl2Pg0KPGRp dj5UaGFuayB5b3UgZm9yIG5vdGljaW5nIHRoaXMuIFlvdSBhcmUgY29ycmVjdCwgYW5kIEkgaGF2 ZSBmaXhlZCB0aGlzIGluIHRoZSBzb3VyY2UuPC9kaXY+DQo8ZGl2Pi1kZXJlazwvZGl2Pg0KPGRp dj48YnI+DQo8L2Rpdj4NCjxkaXY+T24gU3VuLCAyMDIwLTAxLTE5IGF0IDIyOjE1IC0wODAwLCBT IE1vb25lc2FteSB3cm90ZTo8L2Rpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIHN0eWxlPSJt YXJnaW46MCAwIDAgLjhleDsgYm9yZGVyLWxlZnQ6MnB4ICM3MjlmY2Ygc29saWQ7cGFkZGluZy1s ZWZ0OjFleCI+DQo8cHJlPkhpIERlcmVrLDwvcHJlPg0KPHByZT48YnI+PC9wcmU+DQo8cHJlPlNl Y3Rpb24gNi4xIG9mIGRyYWZ0LWF0a2lucy1zdWl0LWNvc2Utd2FsbnV0ZHNhLTAyIGhhcyB0aGUg Zm9sbG93aW5nOiA8L3ByZT4NCjxwcmU+JnF1b3Q7VmFsdWUgYmV0d2VlbiAtMjU2IHRvIDI1NiB0 byBiZSBhc3NpZ25lZCAuLi4mcXVvdDsgIFNob3VsZG4ndCBpdCBiZSAmcXVvdDsyNTUmcXVvdDsg PC9wcmU+DQo8cHJlPmluc3RlYWQgb2YgJnF1b3Q7MjU2JnF1b3Q7PzwvcHJlPg0KPHByZT48YnI+ PC9wcmU+DQo8cHJlPlJlZ2FyZHMsPC9wcmU+DQo8cHJlPlMuIE1vb25lc2FteTwvcHJlPg0KPHBy ZT48YnI+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxzcGFuPg0KPHByZT4tLSA8YnI+PC9w cmU+DQpEZXJlayBBdGtpbnM8YnI+DQpDaGllZiBUZWNobm9sb2d5IE9mZmljZXI8YnI+DQo8ZGl2 PlZlcmlkaWZ5IFNlY3VyaXR5IC0gPGk+U2VjdXJpbmcgdGhlIEludGVybmV0IG9mIFRoaW5nc8Ku PC9pPjwvZGl2Pg0KPGRpdj5Gb3JtZXJseSBTZWN1cmVSRiBDb3Jwb3JhdGlvbjxicj4NCjwvZGl2 Pg0KPGJyPg0KT2ZmaWNlOiAyMDMuMjI3LjMxNTEmbmJzcDsgeDEzNDM8YnI+DQpEaXJlY3Q6IDYx Ny42MjMuMzc0NTxicj4NCk1vYmlsZTogNjE3LjI5MC41MzU1PGJyPg0KRW1haWw6IDxhIGhyZWY9 Im1haWx0bzpEQXRraW5zQFNlY3VyZVJGLmNvbSI+REF0a2luc0BWZXJpZGlmeS5jb208YnI+DQo8 L2E+PGJyPg0KPGk+PGZvbnQgY29sb3I9IiM3ZjdmN2YiPlRoaXMgZW1haWwgbWVzc2FnZSBtYXkg Y29udGFpbiBjb25maWRlbnRpYWwsIHByb3ByaWV0YXJ5IGFuZCAvIG9yIGxlZ2FsbHkgcHJpdmls ZWdlZCBpbmZvcm1hdGlvbiBhbmQgaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW50 ZW5kZWQgcmVjaXBpZW50KHMpIGFuZCBvdGhlcnMgc3BlY2lmaWNhbGx5IGF1dGhvcml6ZWQuIEFu eSBkaXNjbG9zdXJlLCBkaXNzZW1pbmF0aW9uLCBjb3B5aW5nLA0KIGRpc3RyaWJ1dGlvbiBvciB1 c2Ugb2YgdGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIGVtYWlsIG1lc3NhZ2UsIGlu Y2x1ZGluZyBhbnkgYXR0YWNobWVudHMsIHRvIG9yIGJ5IGFueW9uZSBvdGhlciB0aGFuIHRoZSBp bnRlbmRlZCByZWNpcGllbnQgaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4mbmJzcDsgSWYgeW91IHJl Y2VpdmVkIHRoaXMgaW4gZXJyb3IsIHBsZWFzZSBpbW1lZGlhdGVseSBhZHZpc2UgdGhlIHNlbmRl ciBieSByZXBseSBlbWFpbA0KIG9yIGF0IHRoZSB0ZWxlcGhvbmUgbnVtYmVyIGFib3ZlLCBhbmQg dGhlbiBkZWxldGUsIHNocmVkLCBvciBvdGhlcndpc2UgZGlzcG9zZSBvZiB0aGlzIG1lc3NhZ2Uu PC9mb250PjwvaT4NCjwvc3Bhbj48L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_c23b3e413ccf3b50f15d8ddfbb479da873786f53camelVeridifyco_--