From nobody Wed Apr 1 12:47:07 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10DBE3A1858 for ; Wed, 1 Apr 2020 12:47:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, WEIRD_PORT=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outer-planes-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eQdrqJIS99qi for ; Wed, 1 Apr 2020 12:47:03 -0700 (PDT) Received: from mail-io1-xd32.google.com (mail-io1-xd32.google.com [IPv6:2607:f8b0:4864:20::d32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2124A3A1855 for ; Wed, 1 Apr 2020 12:47:02 -0700 (PDT) Received: by mail-io1-xd32.google.com with SMTP id b12so1009834ion.8 for ; Wed, 01 Apr 2020 12:47:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outer-planes-net.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:autocrypt:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=iJerF9C13I6zfpTUqH4Fmt60kzAE/ukUWZOzBQFspDQ=; b=OyUUwgo5rU3MifUZ5wRDKv4oIMLmBrxZ7g3QXKhYoUQaFvNMUKGTdDjbwGHZQ2VtYR b74MlST/7DL4c4kPH9NaI0jwHZnRjLDyZKG7agnLie/5IT1Pd/CQam7KqzbDrffBxjIs j51w0V5z0cYol8VmA8YoePvns2+oKVAK9GltxPP6vNt2wZRkzClSFSIpEBkVytFhXKVY Ng0ENsgXVsajWMBxvvcjxLuUx1TCcL0PYNRG6r+68lAe0raJEEJST3fdV2vOWTmUKrqv af/zuU2IIdn6UdYGVlAO59uWSztRmmMv9OfrtA9FqdvpHKiJIu5gA0gaMSrsr4YLT3NV 769Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:autocrypt:message-id :date:user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=iJerF9C13I6zfpTUqH4Fmt60kzAE/ukUWZOzBQFspDQ=; b=n2m+a2BMJhaW2dFz/Se+SDzZpoen2f0OYDLr0pewbZEu+psQE/DVMSDB9Y0MippOB2 pGr8dSkxGZnG/43K3PLdAuaeivMPOATdfbDLEUV9ZqB98FAC1rJvPVpJBFPHEwzXIIEP CrZIXRy1tORA11SbjfSDA2MoGAwYHvJjfL6yC9uL22Ble0B7PQfCuq8057dHdJkdnH2f YcgaTIXjUIbnCtV38gkckYr6kcuF068mbYwVyWPH0rNIhDQyhE6d+7IgAEvAi4CMZR1T 9c82qDYcBSboT1pQknaZTL7WTNWEsME3KugBPkFIYmJcORrZSPIWwYzxybuYytACgslc QQRg== X-Gm-Message-State: ANhLgQ22ImqXLjGJaxgO6lkCqZlvgExjk6iqMmaeaT1nBUxt3uczR0Zo /JL/8M3RsKvh3CGK1TjAIjSwg8s+irWmfg== X-Google-Smtp-Source: ADFU+vvNh2KZus/hDKGi4rx6w2K80EdEwgB4xf5rnln2pjabnUyyAT7d1c/R4B5C+Mr47lhkNeAhVA== X-Received: by 2002:a02:938f:: with SMTP id z15mr21709427jah.55.1585770421704; Wed, 01 Apr 2020 12:47:01 -0700 (PDT) Received: from mmiller-44677.local ([2601:280:4f00:14a:b938:b157:a5c0:eed]) by smtp.gmail.com with ESMTPSA id d9sm973072ils.14.2020.04.01.12.47.00 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 01 Apr 2020 12:47:01 -0700 (PDT) To: cose@ietf.org References: <158557507682.5229.17442327135544086821@ietfa.amsl.com> From: "Matthew A. Miller" Autocrypt: addr=linuxwolf+ietf@outer-planes.net; prefer-encrypt=mutual; keydata= mQENBFJoAooBCADQmEtpbpY/4wTeKgZIuyG7HkxIFgiUeqOvtiBKj/pCA73d7Q5hCvQdGcKJ 6uZsYz3Il9oKoKFxVt90iEXspbE39g6ek19e6RsB4j0Q10l4QvH+EqeD760gs0H2yf/eYj9i uk9/VY6axdQlPsmid1zoQgCNjSM7X4/K26WGMs03sbXJpKdoonelzIlJSNfzi0q546iplo72 D2cCm9BriMkQvcGnsm4B9eBIBn3GKmVx1tsmPNeNTyun2DvaLnrYxbA0Ivo1DzZReds9NZ25 uROI/+b+lcg9/kmHzhK+q8NMQCFWmqpS/lZRKxVBSijKGpGr5h8VLVf5iURHtwG+B/QxABEB AAG0M01hdHRoZXcgQS4gTWlsbGVyIDxsaW51eHdvbGYraWV0ZkBvdXRlci1wbGFuZXMubmV0 PokBVAQTAQoAPgIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgBYhBDHXWI3skGkNa8yY4Oz0 ck4QngW7BQJeDg4fBQkVMJSlAAoJEOz0ck4QngW7XCcH/RBVW3Nd0ezXtL9XSn5DHJxRTb5q 6ZVIBQgVIMcH2DVzO/aCs3o1ECONHAazVGQ9b6cwHCtPWJpM0ENGx7DERa/Ay4vDeKXc1TEX VuukdGrX2zWOaFHDT/oU1SEg0C+f3JGnaTwYQ7i2KXkFuYNmqROkB+Z0PDaLu4biCYdjhkIm Yu3frzySHhEX2VVMcJA6lcqdBTE3j2+ywQ7icpiWUcvLuhCeuFER1JjTRchcXwtuiOAKPQCZ BM9B70Q73hiKKK4ylNjhLFKGomkWDqsQ6sAENn6YkWyBuXNr5Y66uFxFS0VY938o/ZoXw4tb qUIdBzMnHkHxxiNUUBb6dPkaEGO5AQ0EUmgCigEIAMD+u4fBiVDul2Mljq3CRlwyZ52RA0vq vm00F5CTBWu+K1SMdMoqKmPEHaQSRRmjE+AwjWHv96cOtWUwwyqrpEgnzof7LHXfM0hk0GUl +ZUeAePtNPyylroD+ohxx2IhE2wVW+W8XGkfyxONVsd89h7Ft05HmQellZPNjE3JUtcwrmN6 fQHgr6+NuAUkC+ygt/MtnkHPeRvp2m7FQ3OqEPKGTn9Q9oIgW9lYG2JEqaSo/ASrwbZowmrl nhKvwJGSmgwHbmvEI9LxH4HKIfGmr5TyYq6o9WDUsnNwDuEeaazxoE3qXFKVvIqfMSDwBaCV 37r7GUle7lT9+oMAKVOPmZ8AEQEAAYkBPAQYAQoAJgIbDBYhBDHXWI3skGkNa8yY4Oz0ck4Q ngW7BQJeM+W5BQkPjlg/AAoJEOz0ck4QngW7a+IIANBU7R3t17LKflQo3nSUoqMBLkjxo9/e yzKAb3u0Fjb5md+9ESrFb03w1ZUkKLh/b6leTFq50IJbfxgDlVgkTn/j0XPOmIHpfDtVYPnA /rI5sqMzjb3qFOPFZFX9Til360uv9Zc5mlkJcM57X4aLRl7wSGRXPqh7v356s+JlvLF8rBtZ 7LU5SrCWeoWZu/7NvqW+UNEOOP2xAlOId4BeYWflkpzNcSPkhAkD2Xvw/GmyOm24Im7Ef2O5 scQhEO/dG+3jU4QnSGFtLXHndHpNM20vD6T+uWUpyp5g27KrIHApWq9M3o6KR68pTOLJrMxc th8xmHLOpuWVAKEABNQRDfE= Message-ID: Date: Wed, 1 Apr 2020 13:46:58 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0) Gecko/20100101 Thunderbird/68.6.0 MIME-Version: 1.0 In-Reply-To: <158557507682.5229.17442327135544086821@ietfa.amsl.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [COSE] CBOR Object Signing and Encryption (cose) WG Virtual Meeting: 2020-04-02 (TOMORROW) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2020 19:47:06 -0000 A reminder that our session is tomorrow at 17:00 UTC (10:00 PDT, 18:00 CEST) over Webex: URL: https://ietf.webex.com/ietf/j.php?MTID=m65dc99c8fcf80c2ad60c4bcc24f22477 Meeting Number: 318 487 000 Meeting Password: DkuJ2VDMK79 Our Agenda (with more details): 1. Administrivia (Chairs) - 5 minutes - Note Well - blue sheets (etherpad) - Minutes: https://etherpad.ietf.org:9009/p/notes-ietf-107-cose?useMonospaceFont=true - Jabber: cose@jabber.ietf.org 2. Update on drafts status (Chairs) - 15 Minutes - draft-ietf-cose-hash-sisgs - draft-ietf-cose-webauthn-algorithms - draft-ietf-cose-rfc8152bis-struct - draft-ietf-cose-rfc8152bis-algs - draft-ietf-cose-hash-algs - draft-ietf-cose-x509 3. Cert Compression (John Mattsson) - 10 Minutes - draft-mattsson-cose-cbor-cert-compress 4. Rechartering Discussion (Chairs) - 30 Minutes - draft-schaad-cose-more-algs - draft-mattsson-cose-cbor-cert-compress - Others? 5. AOB - COSE WG Chairs Ivaylo and Matthew From nobody Thu Apr 2 11:56:45 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E07CC3A0C42 for ; Thu, 2 Apr 2020 11:56:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.001 X-Spam-Level: X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bg0KOeZxwNRF for ; Thu, 2 Apr 2020 11:56:43 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C4273A0C3E for ; Thu, 2 Apr 2020 11:56:43 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Thu, 2 Apr 2020 11:56:38 -0700 From: Jim Schaad To: Date: Thu, 2 Apr 2020 11:56:36 -0700 Message-ID: <022f01d60920$70f49950$52ddcbf0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdYJID3jkBJNwP4SROemNGSKLM/ZcQ== Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: [COSE] Re-charter processing X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2020 18:56:45 -0000 I took a task to provide a first cut at a new charter during the meeting today. Here is that first cut. https://github.com/cose-wg/Charter/blob/master/Charter.md Feel free to comment on the list or suggest pull requests about it. I will try to keep up on it. Jim From nobody Fri Apr 3 10:14:11 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D451D3A08A6 for ; Fri, 3 Apr 2020 10:14:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outer-planes-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O0T2Ch04gy2n for ; Fri, 3 Apr 2020 10:14:07 -0700 (PDT) Received: from mail-il1-x12f.google.com (mail-il1-x12f.google.com [IPv6:2607:f8b0:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 599F63A088D for ; Fri, 3 Apr 2020 10:14:07 -0700 (PDT) Received: by mail-il1-x12f.google.com with SMTP id j69so7954782ila.11 for ; Fri, 03 Apr 2020 10:14:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outer-planes-net.20150623.gappssmtp.com; s=20150623; h=to:from:subject:autocrypt:message-id:date:user-agent:mime-version :content-language:content-transfer-encoding; bh=aJzFPzDyR+bpkpgGtCEyY1qfj/rKVX/uv8rFqZ7pW6g=; b=IibD0jC1hyRxl3Jvl34neH+FAfwogHEfYNLlX/bGxS1lfhsC4MZLx0jv7QmFziHlZ6 c8seYs1d//Jz8Z0GT5Exjog+N0phzvyFn7Y8rGRrpToxVoLHSUVhm8SnAX8YP5FeNZj0 psr3oCJs5dVllg8Qu11MPEiDVFGopT0fspOFJpCCiCG/XgG49u9gFsOakT39hm7RsiHu 0Mgrnd8CrBpsivNiLQ5R9cL+T91la/e8Q29MbJb8DGHD22HLTm5PTonrw5CLDwXcKAYC p9PQ3Kn9xv5JGaFAbwHfKm1VSsZBVRv+RMbYFUzl/qCDq9AhkK5lrCsZMfWV6dvGizDO paXw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:autocrypt:message-id:date :user-agent:mime-version:content-language:content-transfer-encoding; bh=aJzFPzDyR+bpkpgGtCEyY1qfj/rKVX/uv8rFqZ7pW6g=; b=VX+WYuA2AgjKpI02bnDP6exvAUK6U6w3iKa8t3HHE3GrcOZ9lzYE4Bh4UzKKVgNdwx BI6qfxFizWgz3v9hxbl3d/302yWxTmAbYW9mrZBaKgUDdW8oO/7WvgouM8ARcvZ/Nicw J6yGNeMp3hbENyTEeEzl3yipo/yL9lwfc9OtxTiIEtMtG/pV7fVZUcOF5OcN5DzVwK7R YATbM3GGiXycNelI9/MYSvbRNsyNmOgtOb3mTxx2LzAud2wmlSYH+6eM/tsUiqKBzd4f KDdA7p7ow4+e94kiIFFwF4xCcBUvomnONf+JgC74Zd9CmfBwqqMtRIDE0wjnjtBFralT ev8w== X-Gm-Message-State: AGi0PuafHVomSePmbcXe+yMYu0tNNagrvmT5jlE5dQZiYCB4/uevMWqv jPXd4s8aUrBHDhFeCyjm9LpWD9WuLI+v2Q== X-Google-Smtp-Source: APiQypLEGooKz1Et0tHPecml1n6PkrHlJASsjDoA4d/7qxRuR/KTS/Ayb2vcoNQZLRmwPAtRpECrvA== X-Received: by 2002:a92:15da:: with SMTP id 87mr9643646ilv.144.1585934046267; Fri, 03 Apr 2020 10:14:06 -0700 (PDT) Received: from mmiller-44677.local ([2601:280:4f00:14a:2ddf:268a:f6ba:216e]) by smtp.gmail.com with ESMTPSA id m71sm2982498ilb.67.2020.04.03.10.14.05 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 03 Apr 2020 10:14:05 -0700 (PDT) To: cose From: "Matthew A. Miller" Autocrypt: addr=linuxwolf+ietf@outer-planes.net; prefer-encrypt=mutual; keydata= mQENBFJoAooBCADQmEtpbpY/4wTeKgZIuyG7HkxIFgiUeqOvtiBKj/pCA73d7Q5hCvQdGcKJ 6uZsYz3Il9oKoKFxVt90iEXspbE39g6ek19e6RsB4j0Q10l4QvH+EqeD760gs0H2yf/eYj9i uk9/VY6axdQlPsmid1zoQgCNjSM7X4/K26WGMs03sbXJpKdoonelzIlJSNfzi0q546iplo72 D2cCm9BriMkQvcGnsm4B9eBIBn3GKmVx1tsmPNeNTyun2DvaLnrYxbA0Ivo1DzZReds9NZ25 uROI/+b+lcg9/kmHzhK+q8NMQCFWmqpS/lZRKxVBSijKGpGr5h8VLVf5iURHtwG+B/QxABEB AAG0M01hdHRoZXcgQS4gTWlsbGVyIDxsaW51eHdvbGYraWV0ZkBvdXRlci1wbGFuZXMubmV0 PokBVAQTAQoAPgIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgBYhBDHXWI3skGkNa8yY4Oz0 ck4QngW7BQJeDg4fBQkVMJSlAAoJEOz0ck4QngW7XCcH/RBVW3Nd0ezXtL9XSn5DHJxRTb5q 6ZVIBQgVIMcH2DVzO/aCs3o1ECONHAazVGQ9b6cwHCtPWJpM0ENGx7DERa/Ay4vDeKXc1TEX VuukdGrX2zWOaFHDT/oU1SEg0C+f3JGnaTwYQ7i2KXkFuYNmqROkB+Z0PDaLu4biCYdjhkIm Yu3frzySHhEX2VVMcJA6lcqdBTE3j2+ywQ7icpiWUcvLuhCeuFER1JjTRchcXwtuiOAKPQCZ BM9B70Q73hiKKK4ylNjhLFKGomkWDqsQ6sAENn6YkWyBuXNr5Y66uFxFS0VY938o/ZoXw4tb qUIdBzMnHkHxxiNUUBb6dPkaEGO5AQ0EUmgCigEIAMD+u4fBiVDul2Mljq3CRlwyZ52RA0vq vm00F5CTBWu+K1SMdMoqKmPEHaQSRRmjE+AwjWHv96cOtWUwwyqrpEgnzof7LHXfM0hk0GUl +ZUeAePtNPyylroD+ohxx2IhE2wVW+W8XGkfyxONVsd89h7Ft05HmQellZPNjE3JUtcwrmN6 fQHgr6+NuAUkC+ygt/MtnkHPeRvp2m7FQ3OqEPKGTn9Q9oIgW9lYG2JEqaSo/ASrwbZowmrl nhKvwJGSmgwHbmvEI9LxH4HKIfGmr5TyYq6o9WDUsnNwDuEeaazxoE3qXFKVvIqfMSDwBaCV 37r7GUle7lT9+oMAKVOPmZ8AEQEAAYkBPAQYAQoAJgIbDBYhBDHXWI3skGkNa8yY4Oz0ck4Q ngW7BQJeM+W5BQkPjlg/AAoJEOz0ck4QngW7a+IIANBU7R3t17LKflQo3nSUoqMBLkjxo9/e yzKAb3u0Fjb5md+9ESrFb03w1ZUkKLh/b6leTFq50IJbfxgDlVgkTn/j0XPOmIHpfDtVYPnA /rI5sqMzjb3qFOPFZFX9Til360uv9Zc5mlkJcM57X4aLRl7wSGRXPqh7v356s+JlvLF8rBtZ 7LU5SrCWeoWZu/7NvqW+UNEOOP2xAlOId4BeYWflkpzNcSPkhAkD2Xvw/GmyOm24Im7Ef2O5 scQhEO/dG+3jU4QnSGFtLXHndHpNM20vD6T+uWUpyp5g27KrIHApWq9M3o6KR68pTOLJrMxc th8xmHLOpuWVAKEABNQRDfE= Message-ID: <39d4d5ae-e8cc-56f9-b5d0-436eeef72f40@outer-planes.net> Date: Fri, 3 Apr 2020 11:14:03 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0) Gecko/20100101 Thunderbird/68.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2020 17:14:09 -0000 Hello All, This message is to confirm the in-meeting consensus to recharter the COSE Working Group. Given the strong consensus in the meeting, we are most concerned with objections to rechartering. With all of the chartered work effectively complete, the question is raised about what to do next. In the virtual meeting today (2020-04-02), there was much support to keep the COSE Working Group open and recharter. Jim Schaad has drafted an initial revised [CHARTER]. The executive summary of that discussion: The working group will recharter to accept a limited set of work: * Algorithm definitions with IETF-level consensus and the WG's approval * A specific (to-be-determined) set of non-algorithm items (currently "compressed certificate encoding") If you have objections to rechartering, or have additional items for the Working Group to consider in its recharter, Please respond with the objections or suggestions the < cose@ietf.org > mailing list by April 17. Thank you, - COSE WG Chairs Ivaylo and Matthew From nobody Sun Apr 5 14:52:53 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 347813A0CFC for ; Sun, 5 Apr 2020 14:52:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AShQrGKADJ2V for ; Sun, 5 Apr 2020 14:52:48 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 152483A0CF8 for ; Sun, 5 Apr 2020 14:52:48 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 7BE89300B4E for ; Sun, 5 Apr 2020 17:52:45 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id ohaf01UfopYS for ; Sun, 5 Apr 2020 17:52:44 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id 49B5D300A01; Sun, 5 Apr 2020 17:52:44 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\)) From: Russ Housley In-Reply-To: <39d4d5ae-e8cc-56f9-b5d0-436eeef72f40@outer-planes.net> Date: Sun, 5 Apr 2020 17:52:45 -0400 Cc: cose Content-Transfer-Encoding: quoted-printable Message-Id: References: <39d4d5ae-e8cc-56f9-b5d0-436eeef72f40@outer-planes.net> To: "Matthew A. Miller" X-Mailer: Apple Mail (2.3445.104.14) Archived-At: Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Apr 2020 21:52:52 -0000 > This message is to confirm the in-meeting consensus to recharter the > COSE Working Group. Given the strong consensus in the meeting, we are > most concerned with objections to rechartering. >=20 > With all of the chartered work effectively complete, the question is > raised about what to do next. In the virtual meeting today > (2020-04-02), there was much support to keep the COSE Working Group = open > and recharter. >=20 > Jim Schaad has drafted an initial revised [CHARTER]. The executive > summary of that discussion: >=20 > The working group will recharter to accept a limited set of work: >=20 > * Algorithm definitions with IETF-level consensus and the WG's = approval > * A specific (to-be-determined) set of non-algorithm items (currently > "compressed certificate encoding") >=20 > If you have objections to rechartering, or have additional items for = the > Working Group to consider in its recharter, Please respond with the > objections or suggestions the < cose@ietf.org > mailing list by April = 17. I support re-charter, but the specific (to-be-determined) set of = non-algorithm items need to be agreed. I also agree that certificate = compression belongs on the list. Russ From nobody Wed Apr 8 23:36:55 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DD683A0C82 for ; Wed, 8 Apr 2020 23:36:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.268 X-Spam-Level: X-Spam-Status: No, score=-2.268 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.168, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SgqZLZkHzVGD for ; Wed, 8 Apr 2020 23:36:52 -0700 (PDT) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140054.outbound.protection.outlook.com [40.107.14.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1E6C93A0C80 for ; Wed, 8 Apr 2020 23:36:51 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Wunag/UMM004vPZHqqKmzV/MXtkRnEFm1v5Ig1faxzlW2M8dPrx6oG83Jg2CP1hDb18XEdctSCAMBBuovR3pQXohzhCG3HH9gWNwz1W5J3UCyKe1blz1ZiS6iMxC7drryOUAlpb76nNJAuSJDsmksVQ8rarZXCi6Pkq6FOOkoX1gafmqufviIJH+N+Ndk9yEaESsN8HhRgJcSrhnkZbVofSGqfpddMnvhQkFZDRnODDVC0pjgy4Dcfi90gP6F3hjxoBaEOLqEOKzl57M5v8ai2qEQkwgBaFsAXc+Wu3o+sAMS3XBeq9BQEZ1jYnGKd1gDlZ6NRLWb8kDNWcleNSBPQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yoXq42IiDcqvKK5U7QEXbOMHR3YTT3UEMWI0EDUyT9c=; b=WFzeJOOMfO3gROl+HB57CsjivsRKUN2PYXIZ3ouWSFE2OLwbimu+TNc/ZGvgZPAy6htwlIKiv03dL0vl0WyI3kNhZf+D+t1hcqwA8qi3KuKyh5CElxu2Bm3A0E0VoaB5uwSzkAja0YINg+luG+JZn7sD62cfZU8lN5ScAkk/nCo6KuwU3Vm1zxaNgU/cN6KkELxCfreYJEBJ8tMTNZx0CbmNH3YzDmbZTbgdzKGlBiEEdPaHbZAyFO9c+Dvr2mCDkankfyArWdhLDm2BtQA86qwSHtpoVHExFd6z4As8NPB07mBJqzoK3q1Xfm+4xNdpgAybVHILQVl0FLOaMQ7Y/A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yoXq42IiDcqvKK5U7QEXbOMHR3YTT3UEMWI0EDUyT9c=; b=ac5ViaTyXrC5WL/L6LQg4p6Or6u1S2Kkss//uOoEWU48cZpR3Gq6ZTHHhpnvrAt/m/7/QZd5CxwDoL0z6VeHbgZ0YAVrwt0NYAShihQcf71eisGrnsd4chtL+FwCFuF3lY+r5pGezWk5pC4ubqeEX9qqQGGJhDQRbwGmUucc714= Received: from AM6PR07MB4584.eurprd07.prod.outlook.com (2603:10a6:20b:17::24) by AM6PR07MB5176.eurprd07.prod.outlook.com (2603:10a6:20b:6c::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2900.14; Thu, 9 Apr 2020 06:36:49 +0000 Received: from AM6PR07MB4584.eurprd07.prod.outlook.com ([fe80::928:dc19:896b:4b91]) by AM6PR07MB4584.eurprd07.prod.outlook.com ([fe80::928:dc19:896b:4b91%6]) with mapi id 15.20.2900.015; Thu, 9 Apr 2020 06:36:49 +0000 From: John Mattsson To: "cose@ietf.org" Thread-Topic: [COSE] Call for Consensus: Begin Recharter of COSE WG Thread-Index: AQHWDjk/YOM5Jw/2e0uiARm+Y0C9JQ== Date: Thu, 9 Apr 2020 06:36:49 +0000 Message-ID: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.35.20030802 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [81.225.97.222] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 2e168b3b-98ae-4778-566f-08d7dc506226 x-ms-traffictypediagnostic: AM6PR07MB5176: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 0368E78B5B x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR07MB4584.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(136003)(376002)(39860400002)(346002)(366004)(396003)(6512007)(86362001)(2906002)(186003)(26005)(6486002)(36756003)(4744005)(44832011)(71200400001)(33656002)(81166007)(316002)(66476007)(64756008)(5660300002)(66556008)(6506007)(2616005)(66446008)(478600001)(8676002)(8936002)(91956017)(81156014)(76116006)(6916009)(66946007); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: hLgimTSI+YexrCAL9Sux1Ie4r/KAINjptz5zXdgHgUUX+c3D0WeFPVlCD5YVNQ1fEad2oDt4C/oTNHvv463wQ7I7dxcUGV8E5rUzvi7zvKl2OYjdTCzr5xHz0tjxETbSrsnijRggbFV8Nb3lJ4U9/xhyBSsAivHT8xZyp2uEwKoD+piiMIQPl32DFqlTjFP6T6chXd7jFtY77mSMt6SGpq9kfZ0Lm17c9u0rzfCP2LZ0aOlFIRtL9QfbbcpkevFnbfpx0QWAVfoXyvb0DVC87xDt4mdt5lTofFUXuFaRyvT3vLJ2vgxSz0yIFCrz5KpM9RJADgN2c6Rq55DEw6uUlxVGh5xn7KefiflUqA15IX8lnvjqsul+Dq7Z8+R5SI0Rxsabn1sf+X+CWJP8J71kDVXKymZFb1Wh/9MXOwHJEVJOe3HhHNddmGzqztHYPlSp x-ms-exchange-antispam-messagedata: tEmuJnP1IBNWw5amYlK6ctbjUqr3f1u/iPEhTsmGf0TjsbRYjlcfDIIDBwp7z7BjZFwa7znutcWhoA1H+8dmGQxj24fAe0wEJ37bkcGQOOE6N0tNf95wFq9FWfcxFDnpxdHUQMRo8SI52ZaJy4+M9g== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2e168b3b-98ae-4778-566f-08d7dc506226 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2020 06:36:49.6619 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: w8sEVmTJx7893dbnHQg3r317L8OSdsaUVrHRfd20wJnC87KBcgTdvIzDoD0imjMZuAiu3+8c/C64UwIhPysgCuQJHR2OuT1+Oz4OITF2+5Y= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR07MB5176 Archived-At: Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2020 06:36:54 -0000 UnVzcyB3cm90ZTogIkkgc3VwcG9ydCByZS1jaGFydGVyLCBidXQgdGhlICBzcGVjaWZpYyAodG8t YmUtZGV0ZXJtaW5lZCkgc2V0IG9mIG5vbi1hbGdvcml0aG0gaXRlbXMgbmVlZCB0byBiZSBhZ3Jl ZWQuICBJIGFsc28gYWdyZWUgdGhhdCBjZXJ0aWZpY2F0ZSBjb21wcmVzc2lvbiBiZWxvbmdzIG9u IHRoZSBsaXN0LiINCg0KKzEgDQoNCkkganVzdCBsZWFybmVkIHRoYXQgSUVURiA2VGlTQ0ggaXMg cmVseWluZyBvbiBJRUVFIDgwMi4xMUFSIHByb2ZpbGVkIFguNTA5IGNlcnRpZmljYXRlcyBpbnN0 ZWFkIG9mIFJGQyA3OTI1IHByb2ZpbGVkIFguNTA5IGNlcnRpZmljYXRlcy4gSXQgbWlnaHQgYmUg dGhhdCB0aGUgQ0JPUiBjb21wcmVzc2lvbiBzaG91bGQgc3VwcG9ydCBib3RoLiBUaGlzIGNvdWxk IGJlIGRvbmUgd2l0aCBzbWFsbCBhZGRpdGlvbnMgYXMgdGhlIHByb2ZpbGVzIGFyZSBxdWl0ZSBz aW1pbGFyLiBJIHRoaW5rIHRoZSBjaGFydGVyIHNob3VsZCBsZWF2ZSB0aGUgc2NvcGUgYSBiaXQg bW9yZSBvcGVuIG9uIHRoaXMgcG9pbnQuDQoNCkpvaG4NCg0KDQo= From nobody Mon Apr 13 14:12:36 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 177BA3A1E3C; Mon, 13 Apr 2020 14:12:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xSRWXlWMZwmU; Mon, 13 Apr 2020 14:12:24 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55E8C3A1E3A; Mon, 13 Apr 2020 14:12:24 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 8E14FF40743; Mon, 13 Apr 2020 14:12:06 -0700 (PDT) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org X-PHP-Originating-Script: 1005:ams_util_lib.php From: rfc-editor@rfc-editor.org Cc: rfc-editor@rfc-editor.org, drafts-update-ref@iana.org, cose@ietf.org Content-type: text/plain; charset=UTF-8 Message-Id: <20200413211206.8E14FF40743@rfc-editor.org> Date: Mon, 13 Apr 2020 14:12:06 -0700 (PDT) Archived-At: Subject: [COSE] =?utf-8?q?RFC_8778_on_Use_of_the_HSS/LMS_Hash-Based_Signa?= =?utf-8?q?ture_Algorithm_with_CBOR_Object_Signing_and_Encryption_=28COSE?= =?utf-8?q?=29?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Apr 2020 21:12:26 -0000 A new Request for Comments is now available in online RFC libraries. RFC 8778 Title: Use of the HSS/LMS Hash-Based Signature Algorithm with CBOR Object Signing and Encryption (COSE) Author: R. Housley Status: Standards Track Stream: IETF Date: April 2020 Mailbox: housley@vigilsec.com Pages: 15 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-cose-hash-sig-09.txt URL: https://www.rfc-editor.org/info/rfc8778 DOI: 10.17487/RFC8778 This document specifies the conventions for using the Hierarchical Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is one form of hash-based digital signature; it is described in RFC 8554. This document is a product of the CBOR Object Signing and Encryption Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet Standards Track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the Official Internet Protocol Standards (https://www.rfc-editor.org/standards) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From nobody Wed Apr 15 11:56:26 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B18563A048D for ; Wed, 15 Apr 2020 11:56:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outer-planes-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z2KP3lr1-U2u for ; Wed, 15 Apr 2020 11:56:22 -0700 (PDT) Received: from mail-io1-xd2a.google.com (mail-io1-xd2a.google.com [IPv6:2607:f8b0:4864:20::d2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C5463A047F for ; Wed, 15 Apr 2020 11:56:22 -0700 (PDT) Received: by mail-io1-xd2a.google.com with SMTP id f3so18336162ioj.1 for ; Wed, 15 Apr 2020 11:56:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outer-planes-net.20150623.gappssmtp.com; s=20150623; h=subject:from:to:references:autocrypt:message-id:date:user-agent :mime-version:in-reply-to; bh=Ab2M4lAIdikCCP9XRD1YIdR7FaLnETuvlTX7IcWcQD4=; b=FOv93BTGmfy4raxKrTUquMJmR+JovTP1GHM3rUOlHBftripGfsqE9xqFPJJ7SzX/Kd v/+BRhTbneajMsTNxLTM7ACHIVzZhtg4Nkq814LoCP0vnW1wdtCTTS+HGs0JSk2KeGui RymYAjuuAXbjhEuN1GLVwGbFFaPh/fksf3jIAh0zqC2Dg7LbUjNmGgzrRK3d1gL/f8H8 //4Bgbv5YTKABR1MflH1INzq+qqJIkdn1360BBo78ceb8i/6o3cNtULNH13fgh1520z+ rkIYKs4qG92K74d7aDzd+3US3p3a/AdU23o6V5bP+RuYtW68dDODJCZGujuijDBY9kQO UmiQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:from:to:references:autocrypt:message-id :date:user-agent:mime-version:in-reply-to; bh=Ab2M4lAIdikCCP9XRD1YIdR7FaLnETuvlTX7IcWcQD4=; b=EoO6gT+UBFeOGo+dAHXSuougdmoXNMFOJNl/9iI4kFR56iFPA+1+wFO8z0UE8plKaD LAnxcPVgntFdn5PLkByzoWbW37vybCGPHbzfJCotwugrE5hIKfsTXa4w5RvBusFu07ec m95irLL50mbrNmJCHQsHoiKgZl1R9P1B/WBOSSlQKeui5RTiG/gZKokaXotVsAnTpcpy 7ukOwMoKBSilow6cGyANBFCILCVU7UuIWQh2seBwRtMRedKAJC8Hi+cVUQSGQbrWvY2g eBaHbFk47uHh0VShJQ/iXCloel1OtZoqBlTSlm39k82ep1rSEjub//SGoJZ7bz8lEgg9 je+A== X-Gm-Message-State: AGi0PubRI0J7eDvCn2ZDWBFx+wiaHPIbp5NbDyGf/M2D0qLZP74IhVIk jH+TIX8sFZ8KRGWdZ6mug5gBBfF4aK78Qw== X-Google-Smtp-Source: APiQypKBXz5JUD1q1EY3tNciMM1dojWUivHQplAy0MDdcM+oGafDu8a0tcz9Y2rQDuSKvQyUxplRLg== X-Received: by 2002:a02:2704:: with SMTP id g4mr16235514jaa.77.1586976980683; Wed, 15 Apr 2020 11:56:20 -0700 (PDT) Received: from mmiller-44677.local ([2601:280:4f00:14a:312a:d2c6:416e:d2a7]) by smtp.gmail.com with ESMTPSA id b12sm2598403ilo.13.2020.04.15.11.56.19 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 15 Apr 2020 11:56:19 -0700 (PDT) From: "Matthew A. Miller" To: cose References: <39d4d5ae-e8cc-56f9-b5d0-436eeef72f40@outer-planes.net> Autocrypt: addr=linuxwolf+ietf@outer-planes.net; prefer-encrypt=mutual; keydata= mQENBFJoAooBCADQmEtpbpY/4wTeKgZIuyG7HkxIFgiUeqOvtiBKj/pCA73d7Q5hCvQdGcKJ 6uZsYz3Il9oKoKFxVt90iEXspbE39g6ek19e6RsB4j0Q10l4QvH+EqeD760gs0H2yf/eYj9i uk9/VY6axdQlPsmid1zoQgCNjSM7X4/K26WGMs03sbXJpKdoonelzIlJSNfzi0q546iplo72 D2cCm9BriMkQvcGnsm4B9eBIBn3GKmVx1tsmPNeNTyun2DvaLnrYxbA0Ivo1DzZReds9NZ25 uROI/+b+lcg9/kmHzhK+q8NMQCFWmqpS/lZRKxVBSijKGpGr5h8VLVf5iURHtwG+B/QxABEB AAG0M01hdHRoZXcgQS4gTWlsbGVyIDxsaW51eHdvbGYraWV0ZkBvdXRlci1wbGFuZXMubmV0 PokBVAQTAQoAPgIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgBYhBDHXWI3skGkNa8yY4Oz0 ck4QngW7BQJeDg4fBQkVMJSlAAoJEOz0ck4QngW7XCcH/RBVW3Nd0ezXtL9XSn5DHJxRTb5q 6ZVIBQgVIMcH2DVzO/aCs3o1ECONHAazVGQ9b6cwHCtPWJpM0ENGx7DERa/Ay4vDeKXc1TEX VuukdGrX2zWOaFHDT/oU1SEg0C+f3JGnaTwYQ7i2KXkFuYNmqROkB+Z0PDaLu4biCYdjhkIm Yu3frzySHhEX2VVMcJA6lcqdBTE3j2+ywQ7icpiWUcvLuhCeuFER1JjTRchcXwtuiOAKPQCZ BM9B70Q73hiKKK4ylNjhLFKGomkWDqsQ6sAENn6YkWyBuXNr5Y66uFxFS0VY938o/ZoXw4tb qUIdBzMnHkHxxiNUUBb6dPkaEGO5AQ0EUmgCigEIAMD+u4fBiVDul2Mljq3CRlwyZ52RA0vq vm00F5CTBWu+K1SMdMoqKmPEHaQSRRmjE+AwjWHv96cOtWUwwyqrpEgnzof7LHXfM0hk0GUl +ZUeAePtNPyylroD+ohxx2IhE2wVW+W8XGkfyxONVsd89h7Ft05HmQellZPNjE3JUtcwrmN6 fQHgr6+NuAUkC+ygt/MtnkHPeRvp2m7FQ3OqEPKGTn9Q9oIgW9lYG2JEqaSo/ASrwbZowmrl nhKvwJGSmgwHbmvEI9LxH4HKIfGmr5TyYq6o9WDUsnNwDuEeaazxoE3qXFKVvIqfMSDwBaCV 37r7GUle7lT9+oMAKVOPmZ8AEQEAAYkBPAQYAQoAJgIbDBYhBDHXWI3skGkNa8yY4Oz0ck4Q ngW7BQJeM+W5BQkPjlg/AAoJEOz0ck4QngW7a+IIANBU7R3t17LKflQo3nSUoqMBLkjxo9/e yzKAb3u0Fjb5md+9ESrFb03w1ZUkKLh/b6leTFq50IJbfxgDlVgkTn/j0XPOmIHpfDtVYPnA /rI5sqMzjb3qFOPFZFX9Til360uv9Zc5mlkJcM57X4aLRl7wSGRXPqh7v356s+JlvLF8rBtZ 7LU5SrCWeoWZu/7NvqW+UNEOOP2xAlOId4BeYWflkpzNcSPkhAkD2Xvw/GmyOm24Im7Ef2O5 scQhEO/dG+3jU4QnSGFtLXHndHpNM20vD6T+uWUpyp5g27KrIHApWq9M3o6KR68pTOLJrMxc th8xmHLOpuWVAKEABNQRDfE= Message-ID: <38786fa8-bd66-d42e-2c19-1c7d45d89882@outer-planes.net> Date: Wed, 15 Apr 2020 12:56:18 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 MIME-Version: 1.0 In-Reply-To: <39d4d5ae-e8cc-56f9-b5d0-436eeef72f40@outer-planes.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="j7OhyhePY32cZc4Z5qJ1YG4fIbx8GiBAd" Archived-At: Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2020 18:56:24 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --j7OhyhePY32cZc4Z5qJ1YG4fIbx8GiBAd Content-Type: multipart/mixed; boundary="GbTMPtH7YV8E0OvzLfUKawkbBHsQ336dS" --GbTMPtH7YV8E0OvzLfUKawkbBHsQ336dS Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Hello All, There's a couple days left on comments regarding rechartering. So far we have: * no objections to rechartering * no additional proposed work on non-algorithms (beyond cert compression)= If you have objections to rechartering, or have additional non-algorithm work items that should be considered, please send in your comments by this Friday, 04-17. Thank you, - COSE WG Chairs Ivaylo and Matthew --GbTMPtH7YV8E0OvzLfUKawkbBHsQ336dS-- --j7OhyhePY32cZc4Z5qJ1YG4fIbx8GiBAd Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEMddYjeyQaQ1rzJjg7PRyThCeBbsFAl6XWNIACgkQ7PRyThCe Bbs77QgAgcEhlmQNSks+AmDU32CC59AoR9XEgVPCBmNAxWBaDJkfWWzATY6ywrWk gmEJiwnXSwAQ02TQiQOZ1kvBnP73NX6+kM+CNrXcwdcNzbmdm9NNPO4crEiK0HTQ PoWY+v+shaUVW2aFoUfsGBMMjXnXrOk2Y2Oqfa2C5W2fW+N0rwqAVKVs+njnmLgi P6KZwSo4mBQUCSHVvsb9iy86dHIb0aRma8Wc/mqkxGZOKpy/Ba/J+E+xLggWfY5+ QEp9IwSVn8TAyqe7nT7e7aYsiKb7rSFQXKBcFlQf7aolcZZC7rnkVmByIEDp9B43 W1N4YvOih+YEjURy/FthLM7VvkCy4A== =+mD2 -----END PGP SIGNATURE----- --j7OhyhePY32cZc4Z5qJ1YG4fIbx8GiBAd-- From nobody Wed Apr 15 12:16:44 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D90D73A07A3 for ; Wed, 15 Apr 2020 12:16:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.268 X-Spam-Level: X-Spam-Status: No, score=-2.268 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.168, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id citlkcNQgCN4 for ; Wed, 15 Apr 2020 12:16:41 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-bl2nam06on0723.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe55::723]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C9A43A0795 for ; Wed, 15 Apr 2020 12:16:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KNA3Sfp7TUc7ofWekCMFK2ZDY6o+sw50jQ9pzWFSXE/m5VsrPKotGiffyZYEclfYnlXOf1aNt+4Y3Y+4ISp/W5uww9WhQkwdCjzST0aRRU0jxt4HklabNkeosll/BLTA1UIZ8+LXA5lWiMtYX3ha1ppfVLgclGxygdHRxHVZPFsFqfnwJfx3g/BjxxtdvzRGK52M88IQ/MXT2bdNnI5T//BAZW6iCN1TVAHZIgFGN9e5HhHs0L3WvNByp3EUHNyTmntOtQpdLYCsT6L0LUFt+JYt3F2EGZRaYLncQz3IBTVgcVkxTRZUsGK2U9qYHu2yh1tSNkW5c+O4qaNdTGfplQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JH5Svccj1sbLMMt615UUWILNGjLAf5liaQyZ22GXAmI=; b=HRpsRY3kakyf0REefiKktcXehrLTRUZGnsYp/Um5unaKSRQNDjjEkp1D7dTyheqZqCftjMPzT5aF5/Y7mgLSF+qZC76QAOslwBVWaKSLk1NJyKxpY72ORt2o/3e6dzJR+xhXI0FjBuiHdBXFoLIp4ofuabrb+Ae5PX9TSFwrNK2FzbdDZDVX26YrOsEffHU598lOAjoKwGb2cTw2Y/+8cOyrfS2bdrelI2kxco21m/KqXA+gNubMzKXzxGkVZtjwE3whtBcGwnCT0kQSLoQhr1e+fDdWpdL8NoQ2l43jfhntQjtay5kXmE3PZJvslIqmS1ZfM4UqXy5wGWWRM5Ilfg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JH5Svccj1sbLMMt615UUWILNGjLAf5liaQyZ22GXAmI=; b=YnFhv0TyznGrQQw8N2ac3T+3t3Ych2TicBtggdCBIHnCk9lWpH8F8rDMN8T4ubiLgmlCx6yOoduzueXFqZwNrCa42e4YKsx7aOJfPV076cV7LVuMymuBxbKmsBqwNVKKCKOqc3ClLvc5b1W11m9gGwyutSa5GZVJ7CMl5H9yp/o= Received: from CH2PR00MB0678.namprd00.prod.outlook.com (2603:10b6:610:a9::23) by CH2PR00MB0844.namprd00.prod.outlook.com (2603:10b6:610:6f::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2955.0; Wed, 15 Apr 2020 19:16:39 +0000 Received: from CH2PR00MB0678.namprd00.prod.outlook.com ([fe80::3033:e668:3e9b:c7bf]) by CH2PR00MB0678.namprd00.prod.outlook.com ([fe80::3033:e668:3e9b:c7bf%7]) with mapi id 15.20.2955.000; Wed, 15 Apr 2020 19:16:39 +0000 From: Mike Jones To: "Matthew A. Miller" , cose Thread-Topic: [COSE] Call for Consensus: Begin Recharter of COSE WG Thread-Index: AdYTWl8X8ozlOCk2TPSb+qkarhAXCw== Date: Wed, 15 Apr 2020 19:16:39 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=8f438ca0-702d-4ce9-92e9-000019ab4622; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-04-15T19:12:44Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.87.252] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 72508b1c-56c6-423f-f484-08d7e1718650 x-ms-traffictypediagnostic: CH2PR00MB0844: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0374433C81 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH2PR00MB0678.namprd00.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(136003)(39860400002)(396003)(346002)(366004)(186003)(86362001)(8936002)(55016002)(52536014)(316002)(4744005)(5660300002)(81156014)(8990500004)(8676002)(9686003)(7696005)(33656002)(26005)(53546011)(10290500003)(2906002)(82950400001)(82960400001)(110136005)(478600001)(76116006)(66446008)(66556008)(64756008)(66476007)(66946007)(71200400001)(6506007); DIR:OUT; SFP:1102; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: GLmqKnd6KcGwjM7pHsHCbFTpwIwC5yjVSTmhRAvoQXIoA3fp2T3pSFGDIbbefYBLyLqGqn66dTU29ra1QidgM/uuCVEJMcm9RJq2l/3cSrwx0FBq/pG3OaTDFi1NzgGh12lOZDSdgpxevbPiwmM87Jnb4U5BlURNdAEgSu4mZ5xjEiGXCPcNLibdG0tAO96B9rR3UUbdForwBcKiIjyjpDcwBhY61k053HAnxfARnvfA3lDKrzYfIq7ces9MUVkHxKyRlLP/7Hp1kNFZWWO1DhjZekxHhjcW9R2IppohAukKjTtWuJajHGD/ZcsJ5cm8G6Iw9GceQi/jdgdOKaEDvVWffL66EDNPrZqpjmbhgR6f+f9CkTMLmermp2qRMEK/lDjcFO/S6hV8Bu4VpN6JoiX6KaeoHFlrx1Ao2Z6MBZ2v0OPPFtlJzQerh/HnkldA x-ms-exchange-antispam-messagedata: IHexTuALg/P40/r1FH+osIpAHzqpUac0VQRdllW7+XTOrqToKXuR5d7XTPd0zm7ksan5THK7s+fYBZ+SRjvEEPg+BDct9PZrruzl4CLf2qO0fYhquZf41PG7KbNgCmzvFvULUqmOf5EkB/xBY866tA== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 72508b1c-56c6-423f-f484-08d7e1718650 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Apr 2020 19:16:39.6205 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6V5A1QXs2F2SCSLheWqH0zSkZLHCw3OlxHs8JMzE7u02pyigQehxwqOFbvWstIewWydoPoz1bFYY2BfZ1gq6mg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR00MB0844 Archived-At: Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2020 19:16:43 -0000 QXMgSSdkIHByZXZpb3VzbHkgd3JpdHRlbiB0byB0aGUgd29ya2luZyBncm91cCwgdGhlIElTTyBN b2JpbGUgRHJpdmVyJ3MgTGljZW5zZSB3b3JrIHdhbnRzIHRvIHJlZ2lzdGVyIENPU0UgaWRlbnRp ZmllcnMgZm9yIHRoZSBCcmFpbnBvb2wgY3VydmVzIGRlZmluZWQgaW4gUkZDIDU2MzkuICBHaXZl biB0aGF0IHdlJ3JlIHJlY2hhcnRlcmluZyB0byB3b3JrIG9uIGFkZGl0aW9uYWwgYWxnb3JpdGht cywgSSdkIGxpa2UgdG8gdmVyaWZ5IHRoYXQgdGhpcyB3b3JrIHdvdWxkIGJlIGluIHNjb3BlLiAg SWYgbm90LCBsZXQncyB0d2VhayB0aGUgY2hhcnRlciBsYW5ndWFnZSBzbyB0aGF0IGl0IGJlY29t ZXMgaW4gc2NvcGUuDQoNCgkJCQlUaGFua3MsDQoJCQkJLS0gTWlrZQ0KDQotLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLQ0KRnJvbTogQ09TRSA8Y29zZS1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhh bGYgT2YgTWF0dGhldyBBLiBNaWxsZXINClNlbnQ6IFdlZG5lc2RheSwgQXByaWwgMTUsIDIwMjAg MTE6NTYgQU0NClRvOiBjb3NlIDxjb3NlQGlldGYub3JnPg0KU3ViamVjdDogW0VYVEVSTkFMXSBS ZTogW0NPU0VdIENhbGwgZm9yIENvbnNlbnN1czogQmVnaW4gUmVjaGFydGVyIG9mIENPU0UgV0cN Cg0KSGVsbG8gQWxsLA0KDQpUaGVyZSdzIGEgY291cGxlIGRheXMgbGVmdCBvbiBjb21tZW50cyBy ZWdhcmRpbmcgcmVjaGFydGVyaW5nLiAgU28gZmFyIHdlIGhhdmU6DQoqIG5vIG9iamVjdGlvbnMg dG8gcmVjaGFydGVyaW5nDQoqIG5vIGFkZGl0aW9uYWwgcHJvcG9zZWQgd29yayBvbiBub24tYWxn b3JpdGhtcyAoYmV5b25kIGNlcnQgY29tcHJlc3Npb24pDQoNCklmIHlvdSBoYXZlIG9iamVjdGlv bnMgdG8gcmVjaGFydGVyaW5nLCBvciBoYXZlIGFkZGl0aW9uYWwgbm9uLWFsZ29yaXRobSB3b3Jr IGl0ZW1zIHRoYXQgc2hvdWxkIGJlIGNvbnNpZGVyZWQsIHBsZWFzZSBzZW5kIGluIHlvdXIgY29t bWVudHMgYnkgdGhpcyBGcmlkYXksIDA0LTE3Lg0KDQoNClRoYW5rIHlvdSwNCg0KLSBDT1NFIFdH IENoYWlycw0KSXZheWxvIGFuZCBNYXR0aGV3DQoNCg== From nobody Wed Apr 15 14:08:34 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 584AC3A07A3 for ; Wed, 15 Apr 2020 14:08:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RdMuv9nwEu5H for ; Wed, 15 Apr 2020 14:08:31 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5E333A079B for ; Wed, 15 Apr 2020 14:08:30 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 15 Apr 2020 14:08:23 -0700 From: Jim Schaad To: 'Mike Jones' , "'Matthew A. Miller'" , 'cose' References: In-Reply-To: Date: Wed, 15 Apr 2020 14:08:21 -0700 Message-ID: <003401d6136a$001007c0$00301740$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQHEqGRl5JWUmAuKVlfUbzYcb1SFbaidgxQQ Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2020 21:08:32 -0000 I would say that this is in scope. I don't know that the WG would adopt this as a WG document. Jim -----Original Message----- From: COSE On Behalf Of Mike Jones Sent: Wednesday, April 15, 2020 12:17 PM To: Matthew A. Miller ; cose Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG As I'd previously written to the working group, the ISO Mobile Driver's License work wants to register COSE identifiers for the Brainpool curves defined in RFC 5639. Given that we're rechartering to work on additional algorithms, I'd like to verify that this work would be in scope. If not, let's tweak the charter language so that it becomes in scope. Thanks, -- Mike -----Original Message----- From: COSE On Behalf Of Matthew A. Miller Sent: Wednesday, April 15, 2020 11:56 AM To: cose Subject: [EXTERNAL] Re: [COSE] Call for Consensus: Begin Recharter of COSE WG Hello All, There's a couple days left on comments regarding rechartering. So far we have: * no objections to rechartering * no additional proposed work on non-algorithms (beyond cert compression) If you have objections to rechartering, or have additional non-algorithm work items that should be considered, please send in your comments by this Friday, 04-17. Thank you, - COSE WG Chairs Ivaylo and Matthew _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose From nobody Wed Apr 15 14:10:04 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63D133A07B9 for ; Wed, 15 Apr 2020 14:10:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z2sqcqnwZOH8 for ; Wed, 15 Apr 2020 14:10:00 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 86A8A3A07AD for ; Wed, 15 Apr 2020 14:10:00 -0700 (PDT) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 15 Apr 2020 14:09:54 -0700 From: Jim Schaad To: 'Mike Jones' , "'Matthew A. Miller'" , 'cose' References: In-Reply-To: Date: Wed, 15 Apr 2020 14:09:52 -0700 Message-ID: <003501d6136a$367310a0$a35931e0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQHEqGRl5JWUmAuKVlfUbzYcb1SFbaidgxQQgAAAOrA= Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2020 21:10:03 -0000 Sorry I should say that it might be in scope. I don't know that the brainpool curves would fall under the scope of IETF recommended algorithms. There has been some historic comments on the CFRG list which say these are not really good curves. -----Original Message----- From: Jim Schaad Sent: Wednesday, April 15, 2020 2:08 PM To: 'Mike Jones' ; 'Matthew A. Miller' ; 'cose' Subject: RE: [COSE] Call for Consensus: Begin Recharter of COSE WG I would say that this is in scope. I don't know that the WG would adopt this as a WG document. Jim -----Original Message----- From: COSE On Behalf Of Mike Jones Sent: Wednesday, April 15, 2020 12:17 PM To: Matthew A. Miller ; cose Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG As I'd previously written to the working group, the ISO Mobile Driver's License work wants to register COSE identifiers for the Brainpool curves defined in RFC 5639. Given that we're rechartering to work on additional algorithms, I'd like to verify that this work would be in scope. If not, let's tweak the charter language so that it becomes in scope. Thanks, -- Mike -----Original Message----- From: COSE On Behalf Of Matthew A. Miller Sent: Wednesday, April 15, 2020 11:56 AM To: cose Subject: [EXTERNAL] Re: [COSE] Call for Consensus: Begin Recharter of COSE WG Hello All, There's a couple days left on comments regarding rechartering. So far we have: * no objections to rechartering * no additional proposed work on non-algorithms (beyond cert compression) If you have objections to rechartering, or have additional non-algorithm work items that should be considered, please send in your comments by this Friday, 04-17. Thank you, - COSE WG Chairs Ivaylo and Matthew _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose From nobody Thu Apr 16 04:17:25 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 561CC3A14AC for ; Thu, 16 Apr 2020 04:17:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.268 X-Spam-Level: X-Spam-Status: No, score=-2.268 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.168, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dq1YlqbiiwoU for ; Thu, 16 Apr 2020 04:17:19 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2061.outbound.protection.outlook.com [40.107.22.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A9803A14A9 for ; Thu, 16 Apr 2020 04:17:18 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mRzL9rVcbpGz4tB9MGyG9E6Hh+DNqXTaJmEsilDfX8Y0z7/26Nqfj1ZqTRt2fR7wXU5XZepR0U9u24uJIc36KmRoYIwJtOeRAMvDCP0Ic8rJLpYf1dN3HlnZ4jMVefaJwu+sFglUD/H+QyH5LbZMMVXuB85ijCKABO5g7b/na161kaNsVHvoXb4m7UZU10eHjKJXGXv49yvUYIrriTqN4i6P/3h3mo1vlMySVNv2V/q6N3g6BUGIZvLU2GmR4u9ZI3d9aqQ65YSL0xoTTFo46lctbwKAcpC+xOLWuCJ5uLNzBbxriR5YYp3kzpi3qwd5ztXS/lmS1hrbzECTyrWlIQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hQm6u2/9iMCULaDKS3GXu7uNtsXlA5KkAjDQeInQX/I=; b=JCRzhlxrMogvjnWOgIBY3LcEW1VEVwA4xxYqRvajIvQLOHOzNQUcDJb8CIMkxsriKOWbNaHm38Xt26cENz7u0Gaxu8DUdMbmGwVomOJLhk+/PrgZNqtMH9WMRYUDVVqfArxGLWCBosJ4aYZIU1+18Jc19/aOix1wvwbtexZUimRRKgQE8CGwFl0THb8jT8gAv1+5E46ekOqXQhp0bgRTiaNtfBPYTT8q363Q/9z1jKNh39x6hVJy4h1aZDaJn0OaUaGuw0/Mv1wp8QnZhcRvMK+ObuVEhp6gAutaENIHcbnxjaKti+5gHQqFdMyQPRwJ+XhoQ3WPba3LHjtyzcnqNA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hQm6u2/9iMCULaDKS3GXu7uNtsXlA5KkAjDQeInQX/I=; b=pMrOX9Sn8NrFL+KAzgmzi8X2u0SzA6dgPdY9474ppO/ExdjCU2YSKXgsB6X1muNmZvQO8Tnmb2XkaO54ne9ysQXFXZ7LgsPMvIWQCof40ByvEmZfEzDPNpAjXwyOm4iq5KTr6IiF7lOkI5waxc+mxDm0QfMbsPpx/iZtINjKgKE= Received: from VI1PR07MB5023.eurprd07.prod.outlook.com (2603:10a6:803:9e::13) by VI1PR07MB5262.eurprd07.prod.outlook.com (2603:10a6:803:aa::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2921.18; Thu, 16 Apr 2020 11:17:14 +0000 Received: from VI1PR07MB5023.eurprd07.prod.outlook.com ([fe80::7c90:eb1a:e7da:2321]) by VI1PR07MB5023.eurprd07.prod.outlook.com ([fe80::7c90:eb1a:e7da:2321%7]) with mapi id 15.20.2937.000; Thu, 16 Apr 2020 11:17:14 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "cose@ietf.org" Thread-Topic: [COSE] Call for Consensus: Begin Recharter of COSE WG Thread-Index: AQHWDjk/YOM5Jw/2e0uiARm+Y0C9Jah7xjyA Date: Thu, 16 Apr 2020 11:17:14 +0000 Message-ID: <093C01B7-3DBC-4E19-AFE0-8E5BD0EE08B7@ericsson.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.36.20041300 authentication-results: spf=none (sender IP is ) smtp.mailfrom=goran.selander@ericsson.com; x-originating-ip: [192.176.1.85] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 57642e23-1feb-4339-89f7-08d7e1f7b74e x-ms-traffictypediagnostic: VI1PR07MB5262: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 0375972289 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:VI1PR07MB5023.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(396003)(136003)(39860400002)(366004)(376002)(346002)(85202003)(66446008)(66556008)(66946007)(4744005)(6506007)(186003)(71200400001)(26005)(8936002)(64756008)(478600001)(6916009)(86362001)(76116006)(66476007)(8676002)(2616005)(81156014)(6512007)(33656002)(316002)(91956017)(36756003)(2906002)(5660300002)(85182001)(6486002); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: u1s1pxWUJ+p1wU5QHei1tavh+U2wusQex/AUZpCHLSuH/bLV6ViCMU6k+gsJ4SFEWpKdJvbNKrngQ/S4kheKXpGM9nWVwPB2nWZbGaYq5U3iUQH3UdIh2HUkFnVGGkQg0N+g2Hayz8dyC0XGcB/8PDBx5fH1tDq44vIwAPJ8ojR8W2e1LafWq6S4OeBeKQrl6lDjgS/Ow+fX+Uiw1Gno92vA2Hp/ivcngu0Rbol7wHsOqRb8GhA8fOLWuQ7Aag6U+efvmfOZX3Xk2gomtBPRoZ1ATIBQxo+BenQBE+t3K0X8IqLqBLXhKRV6xk6/npKmCBkruaFd7dDb6cpE6xdL471qg5RCV5o77XAekNpF0jgh6LdYzmH5mBjA1vVa6KzfqegGHkc8+sCSIDy7gzuXnA9oRjgXN4o42UHX4+asFJvzKy/IhgvnOdsYmUFBa88A x-ms-exchange-antispam-messagedata: nobqKdJPxFDoYOpF1ReI3tTrCNr4g5rR3DtUiB0fdqwG5vDX7I8oADh/wTIJwTA+jbjv5gmctb3OWsDTkvxLXzOk98QSWBFMMMPe81Wx4nyVGa0LfnQNwX3zOuItJAQKTNiqh3jsvNyxIcFTm9AgLw== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <9344903657DE6C4BA29B8FEEC281BA67@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: 57642e23-1feb-4339-89f7-08d7e1f7b74e X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Apr 2020 11:17:14.3894 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 0Wt+Hyh0y1RfkhVbu3ryIUxrGZ4I5d0/EZSpbIsZQ0jLCMdd4XJXNPHbzi4WWjq+5Erl80FRFol0chQUyLq0zpqlAjHX4kVXpf6KdZMf4u0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB5262 Archived-At: Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2020 11:17:24 -0000 KzEgb24gY2hhcnRlciBhbmQgYWRkaXRpb24gYmVsb3cuDQoNCkfDtnJhbg0KDQrvu79PbiAyMDIw LTA0LTA5LCAwODozNywgIkNPU0Ugb24gYmVoYWxmIG9mIEpvaG4gTWF0dHNzb24iIDxjb3NlLWJv dW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGpvaG4ubWF0dHNzb249NDBlcmljc3Nvbi5jb21A ZG1hcmMuaWV0Zi5vcmc+IHdyb3RlOg0KDQogICAgSSBqdXN0IGxlYXJuZWQgdGhhdCBJRVRGIDZU aVNDSCBpcyByZWx5aW5nIG9uIElFRUUgODAyLjExQVIgcHJvZmlsZWQgWC41MDkgY2VydGlmaWNh dGVzIGluc3RlYWQgb2YgUkZDIDc5MjUgcHJvZmlsZWQgWC41MDkgY2VydGlmaWNhdGVzLiBJdCBt aWdodCBiZSB0aGF0IHRoZSBDQk9SIGNvbXByZXNzaW9uIHNob3VsZCBzdXBwb3J0IGJvdGguIFRo aXMgY291bGQgYmUgZG9uZSB3aXRoIHNtYWxsIGFkZGl0aW9ucyBhcyB0aGUgcHJvZmlsZXMgYXJl IHF1aXRlIHNpbWlsYXIuIEkgdGhpbmsgdGhlIGNoYXJ0ZXIgc2hvdWxkIGxlYXZlIHRoZSBzY29w ZSBhIGJpdCBtb3JlIG9wZW4gb24gdGhpcyBwb2ludC4NCg0KDQo= From nobody Fri Apr 17 00:31:06 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9C1B3A0F51 for ; Fri, 17 Apr 2020 00:31:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ahrlTkAvM26W for ; Fri, 17 Apr 2020 00:30:58 -0700 (PDT) Received: from mail-ed1-x532.google.com (mail-ed1-x532.google.com [IPv6:2a00:1450:4864:20::532]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85B063A0D89 for ; Fri, 17 Apr 2020 00:30:52 -0700 (PDT) Received: by mail-ed1-x532.google.com with SMTP id j20so749124edj.0 for ; Fri, 17 Apr 2020 00:30:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=33Nl1m4GLNE3hjP9cmrjarns0Mp7vdlXDnIeTmYAhzU=; b=pPkqZDnjdC3rXWBkXB1xUQAiselo8HRA15f2nhiuXnaXXny9sFkhQ5AiGZej1yvVK2 WWWlxHjHrLMDYUs1i3a0hIfiEniktTLcW/+C1r9wsMLtu8GmWUtKcl51AifzoZQpgI9g bYVtLJuq+AA3jPOfw6Rnisprza5Jbm9AhORluFPqhc3CYk8PuVXybGCohHTrGDqTNjDr j0guYW4QXZlNLwdDYuTQzs4WLoCgdtKq4pBMOLeR7DS0F/FPKpeBl4J9T0ZsCvUzL5QP R0kv3dfiJzwo+Y9Z6H5CW2GrPhpuLa5PNLYUxoqLhMsdh4uYS+9SkgwDhGIrFI9rP2ej e/3g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=33Nl1m4GLNE3hjP9cmrjarns0Mp7vdlXDnIeTmYAhzU=; b=kb+CIk/0x+45m0EDN3V8bxJmZY9IohmOIkbmNgx/Qhd89babzP9m6b7qILbDavKBw8 Kd4nmntO3qH3TxEcirpyOuBrxl3XjvYYadtN/QiO4agaSDKOlkNY+yGe303Wxjqi2odK 84n1PfbWxmfaJAlwiUm3ujPzxdKZN1XFU4AeE2J/voEYxOk91z4N/Y5qGpaNQa3ww8m/ gzoWJ0SULobzoImv/DICya8C75n/hvK9BM304DvVQLlAcsv1zOtsfHUPP3cMqWmxtyC5 nbUd8EhFA1JdTqHPIbVkyq3nf9njIkp3Pmu9g0lfVdsReY6STdVvkHE4Lwg516qD4NcW ud1g== X-Gm-Message-State: AGi0PuZXMzNyOokqujMXkZKWu5sn8pz+FIb8HnqyK3OaouWdmGXH+vbP ovWjGOtMPdZpPrOecUNPBLrufTwXop0sR6nAml/EfL8j7r0= X-Google-Smtp-Source: APiQypL5RV5FpBPZXZH/t2iXXY8WrXl0jlsgUyHnQArp6UQRQanCIeVziuSF6PstpC9y8LYo0VQPH3UabeffbEgFQDw= X-Received: by 2002:a50:c25a:: with SMTP id t26mr1698908edf.20.1587108649487; Fri, 17 Apr 2020 00:30:49 -0700 (PDT) MIME-Version: 1.0 From: =?UTF-8?Q?Joel_H=C3=B6glund?= Date: Fri, 17 Apr 2020 09:30:38 +0200 Message-ID: To: cose@ietf.org Content-Type: multipart/alternative; boundary="00000000000045d2e705a3778781" Archived-At: Subject: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2020 07:31:04 -0000 --00000000000045d2e705a3778781 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi all, I support the charter, with the addition/comment below made by John Mattsson about also keeping the RFC 7925 profile, as it is relevant for the IoT scenarios we are working on. Best Regards Joel H=C3=B6glund >> I just learned that IETF 6TiSCH is relying on IEEE 802.11AR profiled X.509 >> certificates instead of RFC 7925 profiled X.509 certificates. It might be that the >> CBOR compression should support both. This could be done with small >> additions as the profiles are quite similar. I think the charter should leave the >> scope a bit more open on this point. --00000000000045d2e705a3778781 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi all,

I support the charter, with the= addition/comment below made by John Mattsson about also keeping the RFC 79= 25 profile, as it is relevant for the IoT scenarios we are working on.

Best Regards

Joel H=C3=B6glun= d

>> I just learned that IETF 6TiSCH is rely= ing on IEEE 802.11AR profiled X.509=C2=A0
>> certificates i= nstead of RFC 7925 profiled X.509 certificates. It might be that the
<= div>>> CBOR compression should support both. This could be done with = small=C2=A0
>> additions as the profiles are quite similar.= I think the charter should leave the=C2=A0
>> scope a bit = more open on this point.
--00000000000045d2e705a3778781-- From nobody Fri Apr 17 07:28:07 2020 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A702A3A09CB; Fri, 17 Apr 2020 07:28:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Ivaylo Petrov via Datatracker To: X-Test-IDTracker: no X-IETF-IDTracker: 6.127.0 Auto-Submitted: auto-generated Precedence: bulk Cc: ivaylo@ackl.io, Ivaylo Petrov , cose-chairs@ietf.org, cose@ietf.org, iesg-secretary@ietf.org Message-ID: <158713368466.2864.8148607738961827292@ietfa.amsl.com> Date: Fri, 17 Apr 2020 07:28:04 -0700 Archived-At: Subject: [COSE] Publication has been requested for draft-ietf-cose-hash-algs-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2020 14:28:05 -0000 Ivaylo Petrov has requested publication of draft-ietf-cose-hash-algs-03 as Informational on behalf of the COSE working group. Please verify the document's state at https://datatracker.ietf.org/doc/draft-ietf-cose-hash-algs/ From nobody Fri Apr 17 08:06:40 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7CBF3A0CF6 for ; Fri, 17 Apr 2020 08:06:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outer-planes-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tTbbYTHxgvk4 for ; Fri, 17 Apr 2020 08:06:37 -0700 (PDT) Received: from mail-io1-xd34.google.com (mail-io1-xd34.google.com [IPv6:2607:f8b0:4864:20::d34]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBB073A0CF2 for ; Fri, 17 Apr 2020 08:06:36 -0700 (PDT) Received: by mail-io1-xd34.google.com with SMTP id 19so2598942ioz.10 for ; Fri, 17 Apr 2020 08:06:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outer-planes-net.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:autocrypt:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=bzEscPvAr52pPW9N8HglNHWgmBz9S0BLG91MEvf8+yI=; b=1993Ysk+jMu8Qnlp6i0Y8TOh9mQQhIL++9u/bf5JVbewjTiI83ANVHFXQtnmpN4sKf 8HpOBLoTMTmE+iMdrhvWMYzheKf8p6b/vfRLACYqwQAI/WrCqrIxWzLnikqKzvY68wVx SSh+wMkDdlar6ylnw7fMxFT8iw4vwE1RJsSRsqcsy6s3gBEJx3xWHbkME1NuZJC4QQuG tZ+zMEVXJ1pO26enNpVzYDm6Wx/d6DxlilONfOwBpJpmFnFyePXH37lmJT8qOR2Jm9Dh Z6MB0qARKwgHRBqr4OlaBVsrPLoErKBtmPRSGJBRNsoUyEFf0wKWgd7Z6ZtuIRKgmMNX 2IUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:autocrypt:message-id :date:user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=bzEscPvAr52pPW9N8HglNHWgmBz9S0BLG91MEvf8+yI=; b=G1YkRhu7Re0UxuBJERo2UOz3vB8YD2cE7ItnUtSHx5o5FTNjDfPEEn3n3Om43q50iL 5uh077DRVhyKYTr5Fw5pZVKvyAu+0c7K3x4lAtZ00pMjO60qgWD0KM+O5j8uuaIILywo ceK+mklwlLpDQZxKWwldO7QoPySvUwZ86L4wePW24K3pqQO8bf6jZKek4LqzFK1fZlsu Bze08fQQQy59BTxXk5OVP4NODuyrU9JtMKqpbsi2P0F13vIDR24elpqrGvt3G3oTorVB avKTscRgDoy4c8HUPuPMDW5EwCxQ6IpqnK2zWb6FoE1y5HspkMTojyqktpDKhi5V8v7X vGww== X-Gm-Message-State: AGi0PuYV5kx/0Xe9Ps2tHPpkzi46QGyuofm8/QSfxSDnzA8dHxMc1QZ8 kzL/pfB0AjR64esTKYRaF+hp+hCPxUT4jA== X-Google-Smtp-Source: APiQypLWx+dYrVFu3ph1wPcOcXCeMK2nXZqeXxDf5lpo0SNXGDQ9Pwk9qVQGG1POeeBR2LuSHmurYA== X-Received: by 2002:a02:650f:: with SMTP id u15mr3799351jab.53.1587135994827; Fri, 17 Apr 2020 08:06:34 -0700 (PDT) Received: from mmiller-44677.local ([2601:280:4f00:14a:ecbf:888d:c5c4:7f32]) by smtp.gmail.com with ESMTPSA id x29sm8334605ilk.74.2020.04.17.08.06.29 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 17 Apr 2020 08:06:31 -0700 (PDT) To: =?UTF-8?Q?Joel_H=c3=b6glund?= , cose@ietf.org References: From: "Matthew A. Miller" Autocrypt: addr=linuxwolf+ietf@outer-planes.net; prefer-encrypt=mutual; keydata= mQENBFJoAooBCADQmEtpbpY/4wTeKgZIuyG7HkxIFgiUeqOvtiBKj/pCA73d7Q5hCvQdGcKJ 6uZsYz3Il9oKoKFxVt90iEXspbE39g6ek19e6RsB4j0Q10l4QvH+EqeD760gs0H2yf/eYj9i uk9/VY6axdQlPsmid1zoQgCNjSM7X4/K26WGMs03sbXJpKdoonelzIlJSNfzi0q546iplo72 D2cCm9BriMkQvcGnsm4B9eBIBn3GKmVx1tsmPNeNTyun2DvaLnrYxbA0Ivo1DzZReds9NZ25 uROI/+b+lcg9/kmHzhK+q8NMQCFWmqpS/lZRKxVBSijKGpGr5h8VLVf5iURHtwG+B/QxABEB AAG0M01hdHRoZXcgQS4gTWlsbGVyIDxsaW51eHdvbGYraWV0ZkBvdXRlci1wbGFuZXMubmV0 PokBVAQTAQoAPgIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgBYhBDHXWI3skGkNa8yY4Oz0 ck4QngW7BQJeDg4fBQkVMJSlAAoJEOz0ck4QngW7XCcH/RBVW3Nd0ezXtL9XSn5DHJxRTb5q 6ZVIBQgVIMcH2DVzO/aCs3o1ECONHAazVGQ9b6cwHCtPWJpM0ENGx7DERa/Ay4vDeKXc1TEX VuukdGrX2zWOaFHDT/oU1SEg0C+f3JGnaTwYQ7i2KXkFuYNmqROkB+Z0PDaLu4biCYdjhkIm Yu3frzySHhEX2VVMcJA6lcqdBTE3j2+ywQ7icpiWUcvLuhCeuFER1JjTRchcXwtuiOAKPQCZ BM9B70Q73hiKKK4ylNjhLFKGomkWDqsQ6sAENn6YkWyBuXNr5Y66uFxFS0VY938o/ZoXw4tb qUIdBzMnHkHxxiNUUBb6dPkaEGO5AQ0EUmgCigEIAMD+u4fBiVDul2Mljq3CRlwyZ52RA0vq vm00F5CTBWu+K1SMdMoqKmPEHaQSRRmjE+AwjWHv96cOtWUwwyqrpEgnzof7LHXfM0hk0GUl +ZUeAePtNPyylroD+ohxx2IhE2wVW+W8XGkfyxONVsd89h7Ft05HmQellZPNjE3JUtcwrmN6 fQHgr6+NuAUkC+ygt/MtnkHPeRvp2m7FQ3OqEPKGTn9Q9oIgW9lYG2JEqaSo/ASrwbZowmrl nhKvwJGSmgwHbmvEI9LxH4HKIfGmr5TyYq6o9WDUsnNwDuEeaazxoE3qXFKVvIqfMSDwBaCV 37r7GUle7lT9+oMAKVOPmZ8AEQEAAYkBPAQYAQoAJgIbDBYhBDHXWI3skGkNa8yY4Oz0ck4Q ngW7BQJeM+W5BQkPjlg/AAoJEOz0ck4QngW7a+IIANBU7R3t17LKflQo3nSUoqMBLkjxo9/e yzKAb3u0Fjb5md+9ESrFb03w1ZUkKLh/b6leTFq50IJbfxgDlVgkTn/j0XPOmIHpfDtVYPnA /rI5sqMzjb3qFOPFZFX9Til360uv9Zc5mlkJcM57X4aLRl7wSGRXPqh7v356s+JlvLF8rBtZ 7LU5SrCWeoWZu/7NvqW+UNEOOP2xAlOId4BeYWflkpzNcSPkhAkD2Xvw/GmyOm24Im7Ef2O5 scQhEO/dG+3jU4QnSGFtLXHndHpNM20vD6T+uWUpyp5g27KrIHApWq9M3o6KR68pTOLJrMxc th8xmHLOpuWVAKEABNQRDfE= Message-ID: <8d4860f2-af15-3e10-77e2-800fdf673f8b@outer-planes.net> Date: Fri, 17 Apr 2020 09:06:29 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0) Gecko/20100101 Thunderbird/68.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [COSE] Call for Consensus: Begin Recharter of COSE WG X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2020 15:06:39 -0000 With no hat ... Being a little less specific on the profile details in the charter seems worthwhile to me. I don't want it to be an open invitation to come up with a third profile, though. - m&m Matthew A. Miller On 20/04/17 01:30, Joel Höglund wrote: > Hi all, > > I support the charter, with the addition/comment below made by John > Mattsson about also keeping the RFC 7925 profile, as it is relevant for > the IoT scenarios we are working on. > > Best Regards > > Joel Höglund > >>> I just learned that IETF 6TiSCH is relying on IEEE 802.11AR profiled > X.509  >>> certificates instead of RFC 7925 profiled X.509 certificates. It > might be that the >>> CBOR compression should support both. This could be done with small  >>> additions as the profiles are quite similar. I think the charter > should leave the  >>> scope a bit more open on this point. > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Fri Apr 24 05:01:28 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14DF83A0AF8 for ; Fri, 24 Apr 2020 05:01:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.087 X-Spam-Level: X-Spam-Status: No, score=-2.087 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b02YZ3wd0wIk for ; Fri, 24 Apr 2020 05:01:23 -0700 (PDT) Received: from mail-ed1-x52d.google.com (mail-ed1-x52d.google.com [IPv6:2a00:1450:4864:20::52d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EDA683A0AF4 for ; Fri, 24 Apr 2020 05:01:21 -0700 (PDT) Received: by mail-ed1-x52d.google.com with SMTP id a8so6992284edv.2 for ; Fri, 24 Apr 2020 05:01:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=e2rC7TQCf19UZRIt6FQjsynO4s8bBciNQIQwfn2ym4c=; b=TUuE/vbVLPGStEu7gRsT1+DjimPP21f56176jKVqj8xXyuBjqLbD1IcWHerF1F4+wD QtncbDNHcx7rFzVAzwB24bQM3dC8FfU9woqY2Yev1LRGQX56FZMSl+xiE4y06KT8ZzPU xl7d4M6K4SSBJQy0vr7Nmr/o+uim6N2A5DhXiYxeamQT4S/de8Epq/U12Mwi+LTfT3zt beIwZbsjqBdXaNqVdaZVhY0hqjIv6JjrDb0CofFipi0jY2Y7pmaoezRsNLRZQ+qWejlF pQg0W+K/HoJwHhneLbTS1xZsjjx0/vsGStvsSUs6TN+XJY4640UH0E2GluS30pxlMx0Z 8LkA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=e2rC7TQCf19UZRIt6FQjsynO4s8bBciNQIQwfn2ym4c=; b=iIVp3A8OYogkhl7axlozCNF/O6iIk6SsHwfDiXGaK4rpII3+UaHK2oGOggifChUnrv sWM6PplyqBwDFbKDfT8lhrcT6qe8T9agZbqf1zes5fYi6foSFT6ndbllZ8zVHLr9Eiyc 7+2of66iVtXpCgPI6HGaGV5d07qCp7eTHZfoiCzOeQHFu31mkuONoKlPnh6maM4z2x6J eQ3w4ZLSrU2ZPJgMUZFIlwCooEEUDH/8+pGP3AzMefHfe1dDhuAByLKrU/+4oazP0UTv tyAs9aLJkjaXsTphI1PKPo1Cd6lJM3uShJ5zZRIobUMX+zx2G0N0azbyf8vqABkQeZtp 5OGQ== X-Gm-Message-State: AGi0PuYIgp4yOamacdeEK0wNnYtoh4c9cv64BXKo/Dtk1DsPU8sgJRHZ yXn/FYuUrRhuS2o4qozK3SpOFKlrTrtZbkYIST3m7kRx X-Google-Smtp-Source: APiQypLhtz+lzjh7u3jHKYLarHvbHad/qxS147WhBjFQtge/upmjLo75nqeeYUFdmX1BO5pPtNyUm6nhjSGDCSp4M80= X-Received: by 2002:a50:ee0e:: with SMTP id g14mr6948822eds.34.1587729680111; Fri, 24 Apr 2020 05:01:20 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: =?UTF-8?Q?Joel_H=C3=B6glund?= Date: Fri, 24 Apr 2020 14:01:09 +0200 Message-ID: To: cose@ietf.org Content-Type: multipart/alternative; boundary="000000000000951ad505a4081f05" Archived-At: Subject: Re: [COSE] [Ace] draft-raza-ace-cbor-certificates-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Apr 2020 12:01:26 -0000 --000000000000951ad505a4081f05 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi! First a meta comment, sorry for spamming: I=E2=80=99m now answering to both= the ACE and the COSE mailing list. If the working group chairs have recommendations on where to keep the continued discussion I=E2=80=99m eager= to hear. Thank you for your review! Some answers to the questions are inline below. > When you sign CBOR, usually it is wrapped in a bstr. This is important > to be able to use typical CBOR encoders/decoders. This doesn=E2=80=99t se= em > to be the case here, at least I don=E2=80=99t see it in the text near the= end of > section 3. Since this bstr wrapping has become the expected norm we agree this is a good suggestion for an improvement with low overhead, which we will add for the next version. > Was any consideration given to using the COSE algorithm registry rather > than defining a new one? Yes, it is still work in progress to determine if the COSE algorithm registry can accommodate the algorithms deemed useful for inclusion. > But of most interest to me is whether the COSE was considered as the > signing format for native CBOR certs. If COSE is used, then this looks > almost identical to CWT and may be a native CBOR cert is a variant of > a CWT? =E2=80=A6 =E2=80=A6 Our starting point has been to stay close to the original X.509 format while minimizing size. A COSE encoding would re-add some format overhead (close to 10% for the provided example certificate). But if a COSE encoding would help making the format accepted and used, it can definitely be further discussed. Once again, thank you for your comments! and Best Regards Joel H=C3=B6glund *Fr=C3=A5n:* Ace f=C3=B6r Laurence Lundblade < lgl@island-resort.com> *Skickat:* den 22 april 2020 17:23 *Till:* Ace Wg *=C3=84mne:* [Ace] draft-raza-ace-cbor-certificates-04.txt I have a few comments / questions about draft-raza-ace-cbor-certificates-04.txt section 6 on native CBOR certs When you sign CBOR, usually it is wrapped in a bstr. This is important to be able to use typical CBOR encoders/decoders. This doesn=E2=80=99t seem to= be the case here, at least I don=E2=80=99t see it in the text near the end of sect= ion 3.. Was any consideration given to using the COSE algorithm registry rather than defining a new one? But of most interest to me is whether the COSE was considered as the signing format for native CBOR certs. If COSE is used, then this looks almost identical to CWT and may be a native CBOR cert is a variant of a CWT? One advantage of this would be reuse of some of the CWT (and EAT) code. Some of the fields in the CBOR cert might overlap with CWT claims. That might be a good thing. LL _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace --000000000000951ad505a4081f05 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hi!

First a meta comment,= sorry for spamming: I=E2=80=99m now answering to both the ACE and the <= update> COSE mailing list. If the working group chairs have recommendati= ons on where to keep the continued discussion I=E2=80=99m eager to hear.


Thank you for = your review! Some answers to the questions are inline below.


=

= > When you sign CBOR, u= sually it is wrapped in a bstr. This is important

> to be able to use typical CBOR encod= ers/decoders. This doesn=E2=80=99t seem

> to be the case here, at least I don=E2=80=99t = see it in the text near the end of

> section 3.


Since this bstr wrapping has become the expected nor= m we agree this is a good suggestion for an improvement with low overhead, = which we will add for the next version.


> Was any consideration given to using the = COSE algorithm registry rather

> than defining a new one?


Yes, it is still work in progress to deter= mine if the COSE algorithm registry can accommodate the algorithms deemed u= seful for inclusion.


> But of most interest to me is whether the COSE was considered= as the

> sig= ning format for native CBOR certs. If COSE is used, then this looks<= /p>

> almost identical t= o CWT and may be a native CBOR cert is a variant of

> a CWT? =E2=80=A6 =E2=80=A6=C2=A0=


Our startin= g point has been to stay close to the original X.509 format while minimizin= g size. A COSE encoding would re-add some format overhead (close to 10% for= the provided example certificate). But if a COSE encoding would help makin= g the format accepted and used, it can definitely be further discussed.


Once again, tha= nk you for your comments!


and


Best Regards


Joel H=C3=B6glund


= Fr=C3=A5n:=C2=A0Ace <ace-bounces@ietf.org> f=C3=B6r Laurence Lundblade <lgl@island-resort.= com>
Skickat:=C2=A0den 22 april 2020 17:23
Till:= =C2=A0Ace Wg <ace@ietf= .org>
=C3=84mne:=C2=A0[Ace] draft-raza-ace-cbor-certificat= es-04.txt
=C2=A0
I have a few comments / q= uestions about draft-raza-ace-cbor-certificates-04.txt section 6 on native = CBOR certs

When you sign CBOR, usually it is wrapped in a bstr. This= is important to be able to use typical CBOR encoders/decoders. This doesn= =E2=80=99t seem to be the case here, at least I don=E2=80=99t see it in the= text near the end of section 3..

Was any consideration given to usi= ng the COSE algorithm registry rather than defining a new one?

But o= f most interest to me is whether the COSE was considered as the signing for= mat for native CBOR certs. If COSE is used, then this looks almost identica= l to CWT and may be a native CBOR cert is a variant of a CWT? One advantage= of this would be reuse of some of the CWT (and EAT) code. Some of the fiel= ds in the CBOR cert might overlap with CWT claims. That might be a good thi= ng.

LL




__________________________________________= _____
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace
=

--000000000000951ad505a4081f05-- From nobody Fri Apr 24 11:58:01 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 500893A0799 for ; Fri, 24 Apr 2020 11:57:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.885 X-Spam-Level: X-Spam-Status: No, score=-1.885 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RM26MF2aqRxn for ; Fri, 24 Apr 2020 11:57:58 -0700 (PDT) Received: from p3plsmtpa06-04.prod.phx3.secureserver.net (p3plsmtpa06-04.prod.phx3.secureserver.net [173.201.192.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB4F73A0798 for ; Fri, 24 Apr 2020 11:57:56 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id S3WNjEG6VyxohS3WOjhlQH; Fri, 24 Apr 2020 11:57:56 -0700 X-CMAE-Analysis: v=2.3 cv=D4M51cZj c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=pGLkceISAAAA:8 a=foSQlrzi4Z-GncKDjV4A:9 a=QEXdDO2ut3YA:10 a=tAeuQZTzKX1eQzSU:21 a=_W_S_7VecoQA:10 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <8B4A9572-3770-416E-B937-1902AFC07DA7@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_C8F80637-DAB8-4607-9C2E-8486B9AF8B73" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 24 Apr 2020 11:57:55 -0700 In-Reply-To: Cc: cose@ietf.org To: =?utf-8?Q?Joel_H=C3=B6glund?= References: X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfFsxjVcvI8qpyy2IwhL+TJKzJDWd/nY5lJ9SQKn8ucONCmLLmscVVhYY9j0Qy1G6qKmC+r90bNuyIjwe9Qfd9IaZw7rkc1d+GIGEw7pRw7uIsi1quXnr zDnDysGbE25N5fX+glSggGWLrmmMN9sCfZc5t49a+JFQTEvSrVh6enkqsBXwJ6OMxouVmfHV+ai04hWgKF7lOynoDp49VLoj4/Q= Archived-At: Subject: Re: [COSE] [Ace] draft-raza-ace-cbor-certificates-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Apr 2020 18:58:00 -0000 --Apple-Mail=_C8F80637-DAB8-4607-9C2E-8486B9AF8B73 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Apr 24, 2020, at 5:01 AM, Joel H=C3=B6glund = wrote: >=20 > > But of most interest to me is whether the COSE was considered as the > > signing format for native CBOR certs. If COSE is used, then this = looks > > almost identical to CWT and may be a native CBOR cert is a variant = of > > a CWT? =E2=80=A6 =E2=80=A6=20 >=20 > Our starting point has been to stay close to the original X.509 format = while minimizing size. A COSE encoding would re-add some format overhead = (close to 10% for the provided example certificate). But if a COSE = encoding would help making the format accepted and used, it can = definitely be further discussed. >=20 > Once again, thank you for your comments! Hi Joel, I=E2=80=99m just focusing on the native CBOR cert here. The overhead for COSE_Sign1 to encode the algorithm ID, key id = (optional), payload, and signature is tiny and is fixed. If you assume = each of these (IDs, payload, sig) already have to be a CBOR-encoded = integer or string, then the overhead is probably less than ten bytes = total, maybe even less than five for the COSE structure that groups = them. In your example A.3, I don=E2=80=99t see how the to-be-signed bytes are = identified. Some solution, probably using bstr wrapping is needed. COSE = solves with no more overhead than necessary. (You don=E2=80=99t need = this in example A.2, because you reconstruct the X.509 ASN.1/DER which = does identify the to-be-signed bytes). I=E2=80=99m not sure where you got the 10% number, but it seems high. = Also, the COSE overhead is fixed, not proportional to the size of the = certificate. To go on a little more, in the ASN.1 world, X.509 certs didn=E2=80=99t = use CMS structure for signing which meant they couldn=E2=80=99t share = implementations. Seems like X.509 and CMS were developed separately. = Also, CMS isn=E2=80=99t that compact. However, COSE_Sign1 is very compact and efficient. If it could be used = for a native CBOR cert format, then COSE code can be re used. In use = cases like signed SW updates and secured boot that use certificate = chains, both the certificate chain and the signed SW updates would use = the COSE format and share for verifying signatures.=20 LL --Apple-Mail=_C8F80637-DAB8-4607-9C2E-8486B9AF8B73 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Apr 24, 2020, at 5:01 AM, Joel H=C3=B6glund <joel.hoglund@gmail.com> wrote:

> = But of most interest to me is whether the COSE was considered as = the
> signing format for native CBOR certs. If COSE = is used, then this looks
> almost identical to CWT and may = be a native CBOR cert is a variant of
> = a CWT? =E2=80=A6 =E2=80=A6 

Our starting point has been to stay = close to the original X.509 format while minimizing size. A COSE = encoding would re-add some format overhead (close to 10% for the = provided example certificate). But if a COSE encoding would help making = the format accepted and used, it can definitely be further = discussed.

Once again, thank you for your = comments!

Hi Joel,

I=E2=80=99m just focusing on the native CBOR cert = here.

The = overhead for COSE_Sign1 to encode the algorithm ID, key id (optional), = payload, and signature is tiny and is fixed. If you assume each of these = (IDs, payload, sig) already have to be a CBOR-encoded integer or string, = then the overhead is probably less than ten bytes total, maybe even less = than five for the COSE structure that groups them.

In your example A.3, I = don=E2=80=99t see how the to-be-signed bytes are identified. Some = solution, probably using bstr wrapping is needed. COSE solves with no = more overhead than necessary.  (You don=E2=80=99t need this in = example A.2, because you reconstruct the X.509 ASN.1/DER which does = identify the to-be-signed bytes).

I=E2=80=99m not sure where you got the = 10% number, but it seems high. Also, the COSE overhead is fixed, not = proportional to the size of the certificate.


To = go on a little more, in the = ASN.1 world, X.509 certs didn=E2=80=99t use CMS structure for signing = which meant they couldn=E2=80=99t share implementations. Seems like = X.509 and CMS were developed separately. Also, CMS isn=E2=80=99t that = compact.

However, COSE_Sign1 is very compact and efficient. If it = could be used for a native CBOR cert format, then COSE code can be = re used. In use cases like signed SW updates and secured boot that use = certificate chains, both the certificate chain and the signed SW updates = would use the COSE format and share for verifying = signatures. 

LL

= --Apple-Mail=_C8F80637-DAB8-4607-9C2E-8486B9AF8B73-- From nobody Mon Apr 27 05:00:25 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81F9D3A045E; Mon, 27 Apr 2020 05:00:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.1 X-Spam-Level: X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jdj7_PGiqJSf; Mon, 27 Apr 2020 05:00:21 -0700 (PDT) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20044.outbound.protection.outlook.com [40.107.2.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5ACE93A044E; Mon, 27 Apr 2020 05:00:21 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Wnd7mc4Zv0K1smI8lVWz2gH9GuqhkenVzTlX3lrZcVg7mxm9pCIJcxhCyy9JRREj3aA8uZLdndJwKO7Q8VXBWTfj6+5vmeX7T2Tyw2aCWiKguGjSxRxT7iReTBRyPQ4HCzOQeDCOh+nIQ/7dpPgJA+1c+m2luJegNChUtN0/O+Aj+PIZEjq+wdN6DrkkFe4xbAiJnwCQ6tToh9g0QlcytKxc1Zy0ZgcXjGu42XL9D6Mq7L/vY8whbI0LUC9dfwKdhCOgJubJpV2iqRRrrQSnTI1NugE7412Ki0bkRSq0V7cLqh+bztFaWiSSzff+8ueQimBaRfEkqlBNFYa6mAEcww== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ESZ7szV0th7osmMJtRKG9/i1kia6rEztazeOEIiR5U8=; b=oApymZUhboDIxs6VJ8Qe/dqxaXaNqVeVHtddZIabmCcZazvk4ezpjm2A337oqetsobTHoyz8o5TrMrWYXnSarysZZsFH87F53hUP4hFb8uHSIIcKMVk/KRlN+PVu/CTpHvJ7mDpDbGsYhmiFiZbHtfZfk2/saybHySCh/D/7x029lU/H8pgNPIwyAy7j0vOtrXQN8dKC23oCmASXbhfg9bJq6t0G2F41XXJiV3Gonv/phsdr5efuTWAE3N9NvQhQOke8KUI3ykkm+3HYhm/oixStmfp0jGG0jU7P9d1444l3NCFBogzdhYJA25G4IzFu0wX8qzEk09igzpiID1BtcQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ESZ7szV0th7osmMJtRKG9/i1kia6rEztazeOEIiR5U8=; b=QA8uozjKNtSPoiWxwGvYixS/M9VrQKBjvhcR1mQL0CL044BHSd6JrFt6XM+N0B3PwpuNWTTDvVeBLnWOzrHPA1o4D7/AWWUce/WQW283VvO6V6Ued46K1opubjr9zsI/HLx4cAmsAjvnIo1HHfB8Q2G7xgrw084MwE+/LWQMrw4= Received: from VI1PR07MB5023.eurprd07.prod.outlook.com (2603:10a6:803:9e::13) by VI1PR07MB5805.eurprd07.prod.outlook.com (2603:10a6:803:d7::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2958.14; Mon, 27 Apr 2020 12:00:18 +0000 Received: from VI1PR07MB5023.eurprd07.prod.outlook.com ([fe80::7c90:eb1a:e7da:2321]) by VI1PR07MB5023.eurprd07.prod.outlook.com ([fe80::7c90:eb1a:e7da:2321%7]) with mapi id 15.20.2958.014; Mon, 27 Apr 2020 12:00:18 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Laurence Lundblade , =?utf-8?B?Sm9lbCBIw7ZnbHVuZA==?= CC: "cose@ietf.org" , "ace@ietf.org" Thread-Topic: [COSE] [Ace] draft-raza-ace-cbor-certificates-04.txt Thread-Index: AQHWGjAedUYMYk6mBEmSoRUOvFZ8rKiIoCaAgARj1wA= Date: Mon, 27 Apr 2020 12:00:18 +0000 Message-ID: <964634A4-7B61-4CEF-8ED0-6A9A48D984CD@ericsson.com> References: <8B4A9572-3770-416E-B937-1902AFC07DA7@island-resort.com> In-Reply-To: <8B4A9572-3770-416E-B937-1902AFC07DA7@island-resort.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.36.20041300 authentication-results: spf=none (sender IP is ) smtp.mailfrom=goran.selander@ericsson.com; x-originating-ip: [213.89.246.8] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f84a7ff0-ea59-4f21-84a4-08d7eaa28e27 x-ms-traffictypediagnostic: VI1PR07MB5805: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0386B406AA x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:VI1PR07MB5023.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(136003)(366004)(346002)(376002)(39860400002)(110136005)(316002)(6512007)(6486002)(33656002)(8676002)(36756003)(54906003)(85182001)(85202003)(86362001)(81156014)(53546011)(6506007)(2906002)(71200400001)(2616005)(478600001)(66556008)(4326008)(966005)(66574012)(64756008)(26005)(8936002)(5660300002)(66446008)(76116006)(186003)(91956017)(66476007)(66946007); DIR:OUT; SFP:1101; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata: YWOMbKANK5mPWgZOxW7I3IGnXc+ybGInJYCSL4oJRjYlOyxstpIvPY/T7yvCg2Cwo/lqUzOk0IK6NCz/v/6Ad72akQUY5xlrZrVH+yIDSAGK4VrmcNwtNY3YqElSQ894Iz5EsFV0Y8rmjyM1gRq7S3N4nlisLyWqQYxvJYyL4chCuJOZsqhjXc0U0QYRMTDZhH7eyZ9WX1YRQQfSL2eZHPG6rin2Dv8zT3QcpMAhxo4kS++4Ij5MwuKfNU2atea1oTBPh8MULJ0KcR8xGZmE0YWlXXvajF43vQoQOB6UEPQrrkQoBi9hSzhEKz0NleE1oq9y/Lpf5e1hY7Q/YdZ4mTjnCCAaW4K6uiM8a75macu+Vb58aEQlfBMp5MWN29pFFzaVwzo5m5gqUf3QaSnfax7ZV67blCHV1RU8HuxRdH0LL16CUlldqn5bueB97ePoggVqEsqy6QXeBEpexSCZWU+W+xY2gT+d9ofI5juNVLCtmdEA1tiH0t75MiMlHfdUoC5JdnwZueKry9EiETWOjHUTxewa+qYcE3HJNIG9XUtOGB8i47l/nSn3tdqgk535B/Ag67VYuCVrjAjPdkVHQ09JYPDt4+vH9z7lHxUm8iyc/ZHBspB9t3/NHNcxfLFQ17leU/DZYU1tETf19UZE4ACd6L4e8uksRqL/Js4eouO3altuGSO5oNTcLt0CGfbGQKlqNLFLOCMIStqbGZ/4vRhnqRtbJ0iaObXpK81y9QcgHry2yK71vFM3nOo0m+PPEBl7LAOzt9stdWB3zg9DkzWLqHMEXshIpMcganpoXTQ= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_964634A47B614CEF8ED06A9A48D984CDericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: f84a7ff0-ea59-4f21-84a4-08d7eaa28e27 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Apr 2020 12:00:18.5131 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: SlrRtgPkCh8IdENHO+B41R8q2rxUlOABoO613PytTJpcB4LkIM/PShgpfUbBp+nsywbpYBAl0c2xa6jQBZ9VLyxLgVMZ6TBqi+6PXmfZU7M= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB5805 Archived-At: Subject: Re: [COSE] [Ace] draft-raza-ace-cbor-certificates-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 12:00:24 -0000 --_000_964634A47B614CEF8ED06A9A48D984CDericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTGF1cmVuY2UsDQoNCihDb3B5aW5nIGJvdGggQUNFIGFuZCBDT1NFIHBlbmRpbmcgZnVydGhl ciBub3RpY2UgYWJvdXQgcmlnaHQgbWFpbCBsaXN0LikNCg0KQ29tbWVudHMgaW5saW5lLg0KDQpG cm9tOiBDT1NFIDxjb3NlLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBMYXVyZW5jZSBM dW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NCkRhdGU6IEZyaWRheSwgMjQgQXByaWwg MjAyMCBhdCAyMDo1OA0KVG86IEpvZWwgSMO2Z2x1bmQgPGpvZWwuaG9nbHVuZEBnbWFpbC5jb20+ DQpDYzogImNvc2VAaWV0Zi5vcmciIDxjb3NlQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtDT1NF XSBbQWNlXSBkcmFmdC1yYXphLWFjZS1jYm9yLWNlcnRpZmljYXRlcy0wNC50eHQNCg0KDQpPbiBB cHIgMjQsIDIwMjAsIGF0IDU6MDEgQU0sIEpvZWwgSMO2Z2x1bmQgPGpvZWwuaG9nbHVuZEBnbWFp bC5jb208bWFpbHRvOmpvZWwuaG9nbHVuZEBnbWFpbC5jb20+PiB3cm90ZToNCg0KPiBCdXQgb2Yg bW9zdCBpbnRlcmVzdCB0byBtZSBpcyB3aGV0aGVyIHRoZSBDT1NFIHdhcyBjb25zaWRlcmVkIGFz IHRoZQ0KPiBzaWduaW5nIGZvcm1hdCBmb3IgbmF0aXZlIENCT1IgY2VydHMuIElmIENPU0UgaXMg dXNlZCwgdGhlbiB0aGlzIGxvb2tzDQo+IGFsbW9zdCBpZGVudGljYWwgdG8gQ1dUIGFuZCBtYXkg YmUgYSBuYXRpdmUgQ0JPUiBjZXJ0IGlzIGEgdmFyaWFudCBvZg0KPiBhIENXVD8g4oCmIOKApg0K DQpPdXIgc3RhcnRpbmcgcG9pbnQgaGFzIGJlZW4gdG8gc3RheSBjbG9zZSB0byB0aGUgb3JpZ2lu YWwgWC41MDkgZm9ybWF0IHdoaWxlIG1pbmltaXppbmcgc2l6ZS4gQSBDT1NFIGVuY29kaW5nIHdv dWxkIHJlLWFkZCBzb21lIGZvcm1hdCBvdmVyaGVhZCAoY2xvc2UgdG8gMTAlIGZvciB0aGUgcHJv dmlkZWQgZXhhbXBsZSBjZXJ0aWZpY2F0ZSkuIEJ1dCBpZiBhIENPU0UgZW5jb2Rpbmcgd291bGQg aGVscCBtYWtpbmcgdGhlIGZvcm1hdCBhY2NlcHRlZCBhbmQgdXNlZCwgaXQgY2FuIGRlZmluaXRl bHkgYmUgZnVydGhlciBkaXNjdXNzZWQuDQoNCk9uY2UgYWdhaW4sIHRoYW5rIHlvdSBmb3IgeW91 ciBjb21tZW50cyENCg0KSGkgSm9lbCwNCg0KSeKAmW0ganVzdCBmb2N1c2luZyBvbiB0aGUgbmF0 aXZlIENCT1IgY2VydCBoZXJlLg0KDQpbR1NdIFRoYW5rcyBmb3Igc2hvd2luZyBpbnRlcmVzdCEN Cg0KVGhlIG92ZXJoZWFkIGZvciBDT1NFX1NpZ24xIHRvIGVuY29kZSB0aGUgYWxnb3JpdGhtIElE LCBrZXkgaWQgKG9wdGlvbmFsKSwgcGF5bG9hZCwgYW5kIHNpZ25hdHVyZSBpcyB0aW55IGFuZCBp cyBmaXhlZC4gSWYgeW91IGFzc3VtZSBlYWNoIG9mIHRoZXNlIChJRHMsIHBheWxvYWQsIHNpZykg YWxyZWFkeSBoYXZlIHRvIGJlIGEgQ0JPUi1lbmNvZGVkIGludGVnZXIgb3Igc3RyaW5nLCB0aGVu IHRoZSBvdmVyaGVhZCBpcyBwcm9iYWJseSBsZXNzIHRoYW4gdGVuIGJ5dGVzIHRvdGFsLCBtYXli ZSBldmVuIGxlc3MgdGhhbiBmaXZlIGZvciB0aGUgQ09TRSBzdHJ1Y3R1cmUgdGhhdCBncm91cHMg dGhlbS4NCg0KSW4geW91ciBleGFtcGxlIEEuMywgSSBkb27igJl0IHNlZSBob3cgdGhlIHRvLWJl LXNpZ25lZCBieXRlcyBhcmUgaWRlbnRpZmllZC4gU29tZSBzb2x1dGlvbiwgcHJvYmFibHkgdXNp bmcgYnN0ciB3cmFwcGluZyBpcyBuZWVkZWQuIENPU0Ugc29sdmVzIHdpdGggbm8gbW9yZSBvdmVy aGVhZCB0aGFuIG5lY2Vzc2FyeS4gIChZb3UgZG9u4oCZdCBuZWVkIHRoaXMgaW4gZXhhbXBsZSBB LjIsIGJlY2F1c2UgeW91IHJlY29uc3RydWN0IHRoZSBYLjUwOSBBU04uMS9ERVIgd2hpY2ggZG9l cyBpZGVudGlmeSB0aGUgdG8tYmUtc2lnbmVkIGJ5dGVzKS4NCg0KSeKAmW0gbm90IHN1cmUgd2hl cmUgeW91IGdvdCB0aGUgMTAlIG51bWJlciwgYnV0IGl0IHNlZW1zIGhpZ2guIEFsc28sIHRoZSBD T1NFIG92ZXJoZWFkIGlzIGZpeGVkLCBub3QgcHJvcG9ydGlvbmFsIHRvIHRoZSBzaXplIG9mIHRo ZSBjZXJ0aWZpY2F0ZS4NCg0KW0dTXSBJIHRoaW5rIEpvZWwgaXMgbWFraW5nIGEgcm91Z2ggZXN0 aW1hdGUgb2YgdGhlIHNpemUgb2YgYSBDQk9SIGNlcnRpZmljYXRlIHRvIHRoYXQgb2YgYSBDT1NF X1NpZ24xIG9mIGEgQ1dULg0KDQpUbyBnbyBvbiBhIGxpdHRsZSBtb3JlLCBpbiB0aGUgQVNOLjEg d29ybGQsIFguNTA5IGNlcnRzIGRpZG7igJl0IHVzZSBDTVMgc3RydWN0dXJlIGZvciBzaWduaW5n IHdoaWNoIG1lYW50IHRoZXkgY291bGRu4oCZdCBzaGFyZSBpbXBsZW1lbnRhdGlvbnMuIFNlZW1z IGxpa2UgWC41MDkgYW5kIENNUyB3ZXJlIGRldmVsb3BlZCBzZXBhcmF0ZWx5LiBBbHNvLCBDTVMg aXNu4oCZdCB0aGF0IGNvbXBhY3QuDQoNCkhvd2V2ZXIsIENPU0VfU2lnbjEgaXMgdmVyeSBjb21w YWN0IGFuZCBlZmZpY2llbnQuIElmIGl0IGNvdWxkIGJlIHVzZWQgZm9yIGEgbmF0aXZlIENCT1Ig Y2VydCBmb3JtYXQsIHRoZW4gQ09TRSBjb2RlIGNhbiBiZSByZSB1c2VkLiBJbiB1c2UgY2FzZXMg bGlrZSBzaWduZWQgU1cgdXBkYXRlcyBhbmQgc2VjdXJlZCBib290IHRoYXQgdXNlIGNlcnRpZmlj YXRlIGNoYWlucywgYm90aCB0aGUgY2VydGlmaWNhdGUgY2hhaW4gYW5kIHRoZSBzaWduZWQgU1cg dXBkYXRlcyB3b3VsZCB1c2UgdGhlIENPU0UgZm9ybWF0IGFuZCBzaGFyZSBmb3IgdmVyaWZ5aW5n IHNpZ25hdHVyZXMuDQoNCltHU10gVGhlIHJhdGlvbmFsZSBmb3IgbmF0aXZlIENCT1IgY2VydGlm aWNhdGVzIGlzIHRvIHJldXNlIHRoZSBzYW1lIGVuY29kaW5nIGFzIGluIHRoZSBjb21wcmVzc2lv biBzY2hlbWUgZGVmaW5lZCBmb3IgUkZDIDc5MjUsIGJ1dCBzaWduaW5nIHRoZSBDQk9SIGluc3Rl YWQgb2Ygc2lnbmluZyB0aGUgdW5jb21wcmVzc2VkIGRhdGEuIFRoaXMgcHJvdmlkZXMgYSByb2Fk bWFwIHdpdGggbWluaW1hbCBjaGFuZ2VzIHdoZW4gbW92aW5nIGZyb20gY29tcHJlc3NlZCB0byBu YXRpdmUgQ0JPUiBjZXJ0aWZpY2F0ZXMuDQoNCkkgYWdyZWUgd2l0aCB5b3UgdGhhdCB0aGUgb3Zl cmhlYWQgb2YgQ09TRV9TaWduMSBvciBDV1QgaXMgbm90IG1ham9yIGFuZCB0aGVzZSBwb2ludHMg YXJlIG9wZW4gZm9yIGRpc2N1c3Npb24uIFRoZSBtb3JlIGltcG9ydGFudCBxdWVzdGlvbiBpcyB3 aGVyZSB0aGlzIHNob3VsZCBiZSBzdGFuZGFyZGl6ZWQuIFRoZSBjb21wcmVzc2lvbiBzY2hlbWUg aXMgbm93IGluY2x1ZGVkIGluIHRoZSBuZXcgZHJhZnQgY2hhcnRlciBmb3IgQ09TRToNCmh0dHBz Oi8vZ2l0aHViLmNvbS9jb3NlLXdnL0NoYXJ0ZXIvYmxvYi9tYXN0ZXIvQ2hhcnRlci5tZA0KVGhl IGNoYXJ0ZXIgaXMgY3VycmVudGx5IG5vdCBleHBsaWNpdGx5IHN1cHBvcnRpbmcgbmF0aXZlIENC T1IgY2VydGlmaWNhdGVzLiBJZiB5b3UgdGhpbmsgaXQgc2hvdWxkLCBpbiBzb21lIHZhcmlhbnQs IHRoZW4gdGhpcyBpcyBhIGdvb2QgdGltZSB0byByYWlzZSB5b3VyIHZvaWNlLg0KDQpHw7ZyYW4N Cg0K --_000_964634A47B614CEF8ED06A9A48D984CDericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <9A7C81C4F690BB459DE50A957DE05598@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow Y207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs LXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRv d3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJ Zm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5 Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNl Y3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9k eSBsYW5nPSJlbi1TRSIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iU1YiIHN0eWxl PSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SGkgTGF1cmVuY2UsPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iU1YiIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1s YW5ndWFnZTpFTi1VUyI+KENvcHlpbmcgYm90aCBBQ0UgYW5kIENPU0UgcGVuZGluZyBmdXJ0aGVy IG5vdGljZSBhYm91dCByaWdodCBtYWlsIGxpc3QuKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 RU4tVVMiPkNvbW1lbnRzIGlubGluZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10 b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+Q09TRSAmbHQ7Y29zZS1ib3VuY2Vz QGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgTGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNs YW5kLXJlc29ydC5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPkZyaWRheSwgMjQgQXByaWwgMjAy MCBhdCAyMDo1ODxicj4NCjxiPlRvOiA8L2I+Sm9lbCBIw7ZnbHVuZCAmbHQ7am9lbC5ob2dsdW5k QGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5DYzogPC9iPiZxdW90O2Nvc2VAaWV0Zi5vcmcmcXVvdDsg Jmx0O2Nvc2VAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbQ09TRV0gW0Fj ZV0gZHJhZnQtcmF6YS1hY2UtY2Jvci1jZXJ0aWZpY2F0ZXMtMDQudHh0PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0 b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPk9uIEFwciAyNCwgMjAyMCwgYXQgNTowMSBBTSwgSm9lbCBIw7ZnbHVuZCAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmpvZWwuaG9nbHVuZEBnbWFpbC5jb20iPmpvZWwuaG9nbHVuZEBnbWFp bC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmIj4mZ3Q7IEJ1dCBvZiBtb3N0IGludGVyZXN0IHRvIG1lIGlzIHdoZXRoZXIgdGhlIENPU0Ug d2FzIGNvbnNpZGVyZWQgYXMgdGhlPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+Jmd0OyBz aWduaW5nIGZvcm1hdCBmb3IgbmF0aXZlIENCT1IgY2VydHMuIElmIENPU0UgaXMgdXNlZCwgdGhl biB0aGlzIGxvb2tzPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6SGVsdmV0aWNhIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZiI+Jmd0OyBhbG1vc3QgaWRl bnRpY2FsIHRvIENXVCBhbmQgbWF5IGJlIGEgbmF0aXZlIENCT1IgY2VydCBpcyBhIHZhcmlhbnQg b2Y8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRp Y2EiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj4mZ3Q7IGEgQ1dUPyDigKYg4oCmJm5ic3A7 PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj5PdXIgc3RhcnRpbmcg cG9pbnQgaGFzIGJlZW4gdG8gc3RheSBjbG9zZSB0byB0aGUgb3JpZ2luYWwgWC41MDkgZm9ybWF0 IHdoaWxlIG1pbmltaXppbmcgc2l6ZS4gQSBDT1NFIGVuY29kaW5nIHdvdWxkIHJlLWFkZCBzb21l IGZvcm1hdCBvdmVyaGVhZCAoY2xvc2UgdG8gMTAlIGZvciB0aGUNCiBwcm92aWRlZCBleGFtcGxl IGNlcnRpZmljYXRlKS4gQnV0IGlmIGEgQ09TRSBlbmNvZGluZyB3b3VsZCBoZWxwIG1ha2luZyB0 aGUgZm9ybWF0IGFjY2VwdGVkIGFuZCB1c2VkLCBpdCBjYW4gZGVmaW5pdGVseSBiZSBmdXJ0aGVy IGRpc2N1c3NlZC48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTpIZWx2ZXRpY2EiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWYiPk9u Y2UgYWdhaW4sIHRoYW5rIHlvdSBmb3IgeW91ciBjb21tZW50cyE8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PkhpIEpvZWwsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPknigJltIGp1c3QgZm9jdXNpbmcgb24gdGhlIG5hdGl2ZSBDQk9SIGNlcnQgaGVyZS48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFz dC1sYW5ndWFnZTpFTi1VUyI+W0dTXSZuYnNwO1RoYW5rcyBmb3Igc2hvd2luZyBpbnRlcmVzdCE8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPlRoZSBvdmVyaGVhZCBmb3IgQ09TRV9TaWdu MSB0byBlbmNvZGUgdGhlIGFsZ29yaXRobSBJRCwga2V5IGlkIChvcHRpb25hbCksIHBheWxvYWQs IGFuZCBzaWduYXR1cmUgaXMgdGlueSBhbmQgaXMgZml4ZWQuIElmIHlvdSBhc3N1bWUgZWFjaCBv ZiB0aGVzZSAoSURzLCBwYXlsb2FkLCBzaWcpIGFscmVhZHkgaGF2ZSB0byBiZSBhIENCT1ItZW5j b2RlZCBpbnRlZ2VyDQogb3Igc3RyaW5nLCB0aGVuIHRoZSBvdmVyaGVhZCBpcyBwcm9iYWJseSBs ZXNzIHRoYW4gdGVuIGJ5dGVzIHRvdGFsLCBtYXliZSBldmVuIGxlc3MgdGhhbiBmaXZlIGZvciB0 aGUgQ09TRSBzdHJ1Y3R1cmUgdGhhdCBncm91cHMgdGhlbS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SW4geW91ciBleGFtcGxlIEEuMywgSSBkb27i gJl0IHNlZSBob3cgdGhlIHRvLWJlLXNpZ25lZCBieXRlcyBhcmUgaWRlbnRpZmllZC4gU29tZSBz b2x1dGlvbiwgcHJvYmFibHkgdXNpbmcgYnN0ciB3cmFwcGluZyBpcyBuZWVkZWQuIENPU0Ugc29s dmVzIHdpdGggbm8gbW9yZSBvdmVyaGVhZCB0aGFuIG5lY2Vzc2FyeS4gJm5ic3A7KFlvdSBkb27i gJl0IG5lZWQgdGhpcyBpbiBleGFtcGxlDQogQS4yLCBiZWNhdXNlIHlvdSByZWNvbnN0cnVjdCB0 aGUgWC41MDkgQVNOLjEvREVSIHdoaWNoIGRvZXMgaWRlbnRpZnkgdGhlIHRvLWJlLXNpZ25lZCBi eXRlcykuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PknigJltIG5vdCBzdXJlIHdoZXJlIHlvdSBnb3QgdGhlIDEwJSBudW1iZXIsIGJ1dCBpdCBzZWVt cyBoaWdoLiBBbHNvLCB0aGUgQ09TRSBvdmVyaGVhZCBpcyBmaXhlZCwgbm90IHByb3BvcnRpb25h bCB0byB0aGUgc2l6ZSBvZiB0aGUgY2VydGlmaWNhdGUuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIj5bR1NdIEkgdGhpbmsgSm9lbCBpcyBtYWtpbmcgYSByb3VnaCBlc3RpbWF0ZSBvZiB0aGUg c2l6ZSBvZiBhIENCT1IgY2VydGlmaWNhdGUgdG8gdGhhdCBvZiBhIENPU0VfU2lnbjEgb2YgYSBD V1QuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPlRvIGdvIG9uIGEgbGl0dGxlIG1vcmUsIGk8 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+biB0aGUgQVNOLjEgd29ybGQsIFguNTA5IGNl cnRzIGRpZG7igJl0IHVzZSBDTVMgc3RydWN0dXJlIGZvciBzaWduaW5nIHdoaWNoIG1lYW50IHRo ZXkgY291bGRu4oCZdCBzaGFyZSBpbXBsZW1lbnRhdGlvbnMuIFNlZW1zIGxpa2UgWC41MDkgYW5k IENNUyB3ZXJlIGRldmVsb3BlZA0KIHNlcGFyYXRlbHkuIEFsc28sIENNUyBpc27igJl0IHRoYXQg Y29tcGFjdC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5Ib3dldmVyLCBDT1NFX1Np Z24xIGlzIHZlcnkgY29tcGFjdCBhbmQgZWZmaWNpZW50LiBJZiBpdCBjb3VsZCBiZSB1c2VkIGZv ciBhJm5ic3A7bmF0aXZlIENCT1IgY2VydCBmb3JtYXQsIHRoZW4gQ09TRSBjb2RlIGNhbiBiZSBy ZSB1c2VkLiBJbiB1c2UgY2FzZXMgbGlrZSBzaWduZWQgU1cgdXBkYXRlcyBhbmQgc2VjdXJlZA0K IGJvb3QgdGhhdCB1c2UgY2VydGlmaWNhdGUgY2hhaW5zLCBib3RoIHRoZSBjZXJ0aWZpY2F0ZSBj aGFpbiBhbmQgdGhlIHNpZ25lZCBTVyB1cGRhdGVzIHdvdWxkIHVzZSB0aGUgQ09TRSBmb3JtYXQg YW5kIHNoYXJlIGZvciB2ZXJpZnlpbmcgc2lnbmF0dXJlcy4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5bR1NdIFRoZSByYXRpb25hbGUgZm9y IG5hdGl2ZSBDQk9SIGNlcnRpZmljYXRlcyBpcyB0byByZXVzZSB0aGUgc2FtZSBlbmNvZGluZyBh cyBpbiB0aGUgY29tcHJlc3Npb24gc2NoZW1lIGRlZmluZWQgZm9yIFJGQyA3OTI1LCBidXQgc2ln bmluZyB0aGUgQ0JPUiBpbnN0ZWFkIG9mIHNpZ25pbmcgdGhlIHVuY29tcHJlc3NlZCBkYXRhLiBU aGlzIHByb3ZpZGVzIGEgcm9hZG1hcCB3aXRoDQogbWluaW1hbCBjaGFuZ2VzIHdoZW4gbW92aW5n IGZyb20gY29tcHJlc3NlZCB0byBuYXRpdmUgQ0JPUiBjZXJ0aWZpY2F0ZXMuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIj5JIGFncmVlIHdpdGggeW91IHRoYXQgdGhlIG92ZXJoZWFkIG9mIENPU0VfU2lnbjEg b3IgQ1dUIGlzIG5vdCBtYWpvciBhbmQgdGhlc2UgcG9pbnRzIGFyZSBvcGVuIGZvciBkaXNjdXNz aW9uLiBUaGUgbW9yZSBpbXBvcnRhbnQgcXVlc3Rpb24gaXMgd2hlcmUgdGhpcyBzaG91bGQgYmUg c3RhbmRhcmRpemVkLiBUaGUgY29tcHJlc3Npb24gc2NoZW1lIGlzIG5vdyBpbmNsdWRlZCBpbg0K IHRoZSBuZXcgZHJhZnQgY2hhcnRlciBmb3IgQ09TRTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PGEgaHJlZj0iaHR0cHM6Ly9n aXRodWIuY29tL2Nvc2Utd2cvQ2hhcnRlci9ibG9iL21hc3Rlci9DaGFydGVyLm1kIj5odHRwczov L2dpdGh1Yi5jb20vY29zZS13Zy9DaGFydGVyL2Jsb2IvbWFzdGVyL0NoYXJ0ZXIubWQ8L2E+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiPlRoZSBjaGFydGVyIGlzIGN1cnJlbnRseSBub3QgZXhwbGljaXRseSBzdXBwb3J0aW5nIG5h dGl2ZSBDQk9SIGNlcnRpZmljYXRlcy4gSWYgeW91IHRoaW5rIGl0IHNob3VsZCwgaW4gc29tZSB2 YXJpYW50LCB0aGVuIHRoaXMgaXMgYSBnb29kIHRpbWUgdG8gcmFpc2UgeW91ciB2b2ljZS48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiPkfDtnJhbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_964634A47B614CEF8ED06A9A48D984CDericssoncom_-- From nobody Mon Apr 27 11:13:10 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 767853A13F5 for ; Mon, 27 Apr 2020 11:12:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jZy7IQo_uxJh for ; Mon, 27 Apr 2020 11:12:44 -0700 (PDT) Received: from p3plsmtpa06-04.prod.phx3.secureserver.net (p3plsmtpa06-04.prod.phx3.secureserver.net [173.201.192.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 972EC3A13F9 for ; Mon, 27 Apr 2020 11:12:44 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id T8FGjWHD9yxohT8FGjkPdK; Mon, 27 Apr 2020 11:12:43 -0700 X-CMAE-Analysis: v=2.3 cv=D4M51cZj c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=48vgC7mUAAAA:8 a=NeJZvmmVAAAA:20 a=8aHrabQ16hnPy60Vl7wA:9 a=WLYB0anuR71vkHwG:21 a=oUvknMVYQ17N8dzp:21 a=QEXdDO2ut3YA:10 a=1FQnyevworvUIDAmB10A:9 a=deDHt174sL9GY5xG:21 a=_0pdXMZ77TLyqXQk:21 a=VIMNpRtCtqaqwis5:21 a=_W_S_7VecoQA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_46B091B9-CE71-4B27-A9DF-B8F1F6999C6E" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Mon, 27 Apr 2020 11:12:42 -0700 In-Reply-To: <964634A4-7B61-4CEF-8ED0-6A9A48D984CD@ericsson.com> Cc: =?utf-8?Q?Joel_H=C3=B6glund?= , "ace@ietf.org" , "cose@ietf.org" To: =?utf-8?Q?G=C3=B6ran_Selander?= References: <8B4A9572-3770-416E-B937-1902AFC07DA7@island-resort.com> <964634A4-7B61-4CEF-8ED0-6A9A48D984CD@ericsson.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfHCpfS+EpDtJSHNJoUwByozzHqeotVuK0xvXw4KOY9q/a02blW6O12SdXH0UAtuQ+dq64LQ1h0H1rnJ2fqZzRbCKpf63xx5t2rs9CallysKb7Vx63sFA ILOsKDy4VcRsGouFlQamHi8jYF2LI0l+w2z7KBPasdxDxT5A8pu5O5KsRLWwWaBG8DK/mTLlx4XeYIc7/MJFWKH8P8r4S6t7RFJQJFmRS4+htDzJhCjDLQLH A5cq2G5NkHs0X958CnBlU4TeeVapYqGSRqsryON0Ru+uUVwn6YXo6SOMY+vnVAQP Archived-At: Subject: Re: [COSE] [Ace] draft-raza-ace-cbor-certificates-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2020 18:12:49 -0000 --Apple-Mail=_46B091B9-CE71-4B27-A9DF-B8F1F6999C6E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Apr 27, 2020, at 5:00 AM, G=C3=B6ran Selander = wrote: >=20 > [GS] The rationale for native CBOR certificates is to reuse the same = encoding as in the compression scheme defined for RFC 7925, but signing = the CBOR instead of signing the uncompressed data. This provides a = roadmap with minimal changes when moving from compressed to native CBOR = certificates. > =20 > I agree with you that the overhead of COSE_Sign1 or CWT is not major = and these points are open for discussion. The more important question is = where this should be standardized. The compression scheme is now = included in the new draft charter for COSE: > https://github.com/cose-wg/Charter/blob/master/Charter.md = > The charter is currently not explicitly supporting native CBOR = certificates. If you think it should, in some variant, then this is a = good time to raise your voice. To go straight to the issue, I think a designing a native CBOR cert = should be approached differently than compressing / re-encoding an X.509 = cert: Re-encoding - Size is important - Exact compatibility is required - Near zero change to fields and semantics Native CBOR Cert - Clean up some of the mess in X.509; it is an old standard with a lot = of cruft and baggage - Re design extensions so they are in CBOR format - Make many of the fields optional, for example not before can often be = left off, maybe even serial number - Avoid DN structure for issuer and subject for most use cases - Use modern formats like COSE and CWT and COSE_Key - Size is important, but far from the only goal (some size reductions, = like optional fields will be possible here that are not possible with = re-encoding) - Compatibility matters, but not in the same way Seems like the right thing to do here is to remove native CBOR certs = from this document and just focus on compression and re-encoding. Maybe = even call them =E2=80=9CCompressed Certs=E2=80=9D rather than =E2=80=9CCBO= R Certs=E2=80=9D. Where that work should go is above my pay grade. BUT, my main interest here relates to CWT and EAT. CWT seems like a = really good choice on which to base a native CBOR cert. Some of the = fields for an X.509 cert are already defined in CWT (subject, issuer, = expiration, not-before). It has an extension mechanism built in already = in the CWT IANA registry. The crypto and signing are well-handled by = CWT=E2=80=99s use of COSE. In work to fit EAT = in as a CWT, a few issues have come up =E2=80=94 how fields / claims are = managed and registered with IANA, label spaces and other. All these = issues would apply to CWT/COSE/CBOR-based certificate as well.=20 To name just one issue, in CWT the expiration date/time can be a = floating-point number, which is burdensome, not useful. Should we change = CWT to disallow or should it just be disallowed when a CWT is used as an = EAT and when it is used as a Cert? I=E2=80=99m also excited at the idea of re using CWT in a simple form so = there is re use of code between CWT, EAT and native CBOR certs. I=E2=80=99= ve started playing with an implementation like this. LL --Apple-Mail=_46B091B9-CE71-4B27-A9DF-B8F1F6999C6E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Apr 27, 2020, at 5:00 AM, G=C3=B6ran Selander <goran.selander=3D40ericsson.com@dmarc.ietf.org> = wrote:

[GS] = The rationale for native CBOR certificates is to reuse the same encoding = as in the compression scheme defined for RFC 7925, but signing the CBOR = instead of signing the uncompressed data. This provides a roadmap with = minimal changes when moving from compressed to native CBOR = certificates.
 
I agree with you that = the overhead of COSE_Sign1 or CWT is not major and these points are open = for discussion. The more important question is where this should be = standardized. The compression scheme is now included in the new draft = charter for COSE:
https://github.com/cose-wg/Charter/blob/master/Charter.md
The charter is currently not explicitly = supporting native CBOR certificates. If you think it should, in some = variant, then this is a good time to raise your = voice.

To go straight to the issue, I think a designing a native = CBOR cert should be approached differently than compressing / = re-encoding an X.509 cert:

Re-encoding
- Size is = important
- Exact compatibility is = required
- Near zero change to fields and = semantics

Native CBOR Cert
- Clean up some of = the mess in X.509; it is an old standard with a lot of cruft and = baggage
- Re design extensions so they are in CBOR = format
- Make many of the fields optional, for = example not before can often be left off, maybe even serial = number
- Avoid DN structure for issuer and subject = for most use cases
- Use modern formats like COSE = and CWT and COSE_Key
- Size is important, but far = from the only goal (some size reductions, like optional fields will be = possible here that are not possible with re-encoding)
- Compatibility matters, but not in the same way

Seems like the right = thing to do here is to remove native CBOR certs from this document and = just focus on compression and re-encoding. Maybe even call them = =E2=80=9CCompressed Certs=E2=80=9D rather than =E2=80=9CCBOR Certs=E2=80=9D= . Where that work should go is above my pay grade.


BUT, my main interest here relates to CWT and EAT. CWT seems = like a really good choice on which to base a native CBOR cert. Some of = the fields for an X.509 cert are already defined in CWT (subject, = issuer, expiration, not-before). It has an extension mechanism built in = already in the CWT IANA registry. The crypto and signing are = well-handled by CWT=E2=80=99s use of COSE.

In work to fit EAT in as a CWT, a few issues have come up =E2=80=94 = how fields / claims are managed and registered with IANA, label spaces = and other.  All these issues would apply to CWT/COSE/CBOR-based = certificate as well. 

To name just one issue, in CWT the expiration date/time can = be a floating-point number, which is burdensome, not useful. Should we = change CWT to disallow or should it just be disallowed when a CWT is = used as an EAT and when it is used as a Cert?

I=E2=80=99m also excited at the idea of = re using CWT in a simple form so there is re use of code between CWT, = EAT and native CBOR certs. I=E2=80=99ve started playing with an = implementation like this.

LL

= --Apple-Mail=_46B091B9-CE71-4B27-A9DF-B8F1F6999C6E-- From nobody Tue Apr 28 03:23:50 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76DF53A12B1; Tue, 28 Apr 2020 03:23:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.82 X-Spam-Level: X-Spam-Status: No, score=-2.82 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H2=-0.82, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yK2PbUblC9MU; Tue, 28 Apr 2020 03:23:35 -0700 (PDT) Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-eopbgr00046.outbound.protection.outlook.com [40.107.0.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69CF33A12DB; Tue, 28 Apr 2020 03:23:35 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mTXvjMUSxlrHrYOPHD856VyPiVba+BwkEX7W0BE7jcKkoICnhDwt8kQ8zO2qBjVfZ9oWQ/XEf5QPf5MTZzZ6li1cVaOzvu6xQha1SXjo7AB+JZytHw+2XuyYjKNXUOOtjvVa9tLs6d5AZcFDzRIdZPjrzxFZrR3qaiPxHKUmZ1QWw/uLafCAYsqf4w8UdWYiCEwcCOfIsCFH0M2rTyQRZNCJa4UBFKWvWa46z5SVAev0yR4cAQTzt/cYhLyKP3Na7eL23AohncnQiGNJO1ql8F+nkXT0NO1unWTDShyV6FKoRO+kAHV1MsI89+WTUsjxWPadsfZF0mdqM8AFnNAwpw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=opOhOku16BwAH0ODJHVD7RpFoTagNX6OKtnWL3bF45s=; b=CpFiHGjVJrEBHcW/udun2PqkCOKDTPMERo2Zha1Omdh+W6ouQJEYVcDIdoDtl2k2F48P1q2SbPTZ3BFg2LOveBoo8yx41j3yR2Ii/NeIMn2OHCB1TYixr/QdTWAtpyYKRz6CvgfdpUVX6BY07d2ApB91PgJQ8adQfsXu9RSmt4SMSrZWflmd+WnscTsogzJHCpXW2A+z8r4t+2zVKw/Aa/EBJ8dA5LRHHKQTKauP7i6Vlg90+LS8OnWyuClOq7+P5pF6iPd1J7C69u0wf5Jmjb08QPcZZOZW8q0s26zEEes5tTCeoDzRINC24cauQ7klESzv9kMY9mtUiAKGfU/OaA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=opOhOku16BwAH0ODJHVD7RpFoTagNX6OKtnWL3bF45s=; b=bJjRZrA28XkgKkVuMhAKrjst1ShdTcxo3SQUp4r+LX5PmYLJXhdAk9gmMK8CNPjM0CjBWYimkLyvx8iu6bbAoSDGJVCYz82E/OQPikfOrBGGZOSA4yz44AJiBGx2PnnFQK23cLW/UufEmi7UyWN2OGB+7/f3TGXhGqHwuYagRbk= Received: from VI1PR07MB5023.eurprd07.prod.outlook.com (2603:10a6:803:9e::13) by VI1PR07MB5966.eurprd07.prod.outlook.com (2603:10a6:803:be::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2958.14; Tue, 28 Apr 2020 10:23:31 +0000 Received: from VI1PR07MB5023.eurprd07.prod.outlook.com ([fe80::7c90:eb1a:e7da:2321]) by VI1PR07MB5023.eurprd07.prod.outlook.com ([fe80::7c90:eb1a:e7da:2321%7]) with mapi id 15.20.2958.014; Tue, 28 Apr 2020 10:23:31 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Laurence Lundblade , =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= CC: =?utf-8?B?Sm9lbCBIw7ZnbHVuZA==?= , "cose@ietf.org" , "ace@ietf.org" Thread-Topic: [Ace] [COSE] draft-raza-ace-cbor-certificates-04.txt Thread-Index: AQHWHL9/AQkz8jksrU+IVD0bq1nzAqiOdicA Date: Tue, 28 Apr 2020 10:23:31 +0000 Message-ID: <3BB4FFA8-AABD-4520-9B21-1F0B0CAFB08C@ericsson.com> References: <8B4A9572-3770-416E-B937-1902AFC07DA7@island-resort.com> <964634A4-7B61-4CEF-8ED0-6A9A48D984CD@ericsson.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.36.20041300 authentication-results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [192.176.1.85] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: fef454ab-63af-43a2-1163-08d7eb5e3335 x-ms-traffictypediagnostic: VI1PR07MB5966: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 0387D64A71 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:VI1PR07MB5023.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(39860400002)(366004)(346002)(396003)(136003)(54906003)(6512007)(8676002)(6486002)(186003)(2906002)(26005)(8936002)(66476007)(91956017)(76116006)(66946007)(66574012)(66556008)(66446008)(81156014)(478600001)(64756008)(316002)(85182001)(6506007)(5660300002)(53546011)(85202003)(36756003)(4326008)(110136005)(33656002)(966005)(2616005)(71200400001)(86362001); DIR:OUT; SFP:1101; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Q9jJ3aKmZOVYy4wq5MGPAbua7pMNSDaTDChAFjyUtI4FwNL1WwZ9cCSXvtmBTZLoF13QKMDexmxElZMdGlhk5CuNjoSZkngRUmndUY5xqHVthHwiQzvyT3f18TZTML4lvzJIHtJQnGj/MJIprvWXhHh3WYiz6C1+EqRq5l8JIkKT0MqIdEzhfIYHa4bxocGlngFVUJiE+9a7mLF9F+/2Utzs2M2dYKc7tUI++8VwimDlHwTXtCjVGueoFtagapfO8he8VH8vvrmarrr6bYw9iVUTgctznTHPKnSfoRjOnZh/eQ1H6Y/fh92U2HFhAooDcBTdI2Sdr2x5FIs7vIXoRNId+73fvmNTHCgY8NOVVOw3bYBCZIIiQNxKvb2jjFF9ii7d+4/YffzEifCjE9Deu7E1xqkRacOqXQzJcaQ6rJ/iXZ7CZbJxS9c+8SvaKLy2UgWEviNOy94owE5yJdpx9HtQksu/qFRDHvGoJ+djU3eBkGE/yDiUWW9jp3wukkXooO3J5SiaSe9Q7Obzk4DW+Q== x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_3BB4FFA8AABD45209B211F0B0CAFB08Cericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-Network-Message-Id: fef454ab-63af-43a2-1163-08d7eb5e3335 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Apr 2020 10:23:31.3044 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Y/sAem6ofsxz2Dq0lXi1re3AJp8pXah2q+yQhx7LWsW8fWUXCi2jZXtpaMNg/6P5A2Rzu+F0RB7Injvtn/Gl1q2Ov8e7yDGjgr4Ijb4Rbi4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB5966 Archived-At: Subject: Re: [COSE] [Ace] draft-raza-ace-cbor-certificates-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2020 10:23:46 -0000 --_000_3BB4FFA8AABD45209B211F0B0CAFB08Cericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTGF1cmVuY2UsDQoNClRoYW5rcyBmb3Igc2hhcmluZyB5b3VyIHRob3VnaHRzLiBJdCBzZWVt cyB3ZSBhcmUgd29ya2luZyBvbiBzbGlnaHRseSBkaWZmZXJlbnQgcGF0aHMuDQoNClRoZSBwYXJ0 IHlvdSBjYWxsZWQg4oCcQ29tcHJlc3NlZCBDZXJ0c+KAnSBpcyBhbHJlYWR5IGluIHRoZSBkcmFm dCBDT1NFIGNoYXJ0ZXIgd2hlcmUgaXQgaXMgcmVmZXJyZWQgdG8gYXMg4oCcQSBDQk9SIGVuY29k aW5nIG9mIHRoZSBjb21wcmVzc2VkIGNlcnRpZmljYXRlIHByb2ZpbGUgZGVmaW5lZCBpbiBSRkMg NzkyNeKAnSBzbyB3ZSBjYW4gbGVhdmUgdGhhdCBvdXQgZm9yIG5vdy4NCg0KTXkgY29tbWVudCB3 YXMgYWJvdXQgdGhlIG90aGVyIHBhcnQsIHdoYXQgd2UgYm90aCBjYWxsIOKAnG5hdGl2ZSBDQk9S IGNlcnRpZmljYXRlc+KAnSBidXQgbWVhbiBkaWZmZXJlbnQgdGhpbmdzLiBXaGF0IGlzIGNhbGxl ZCBuYXRpdmUgaW4NCmRyYWZ0LXJhemEtYWNlLWNib3ItY2VydGlmaWNhdGVzIGlzIG5vdCBpbnRl bmRlZCBhcyBhIGNlcnRpZmljYXRlIGZvcm1hdCBicmVha2luZyB3aXRoIFguNTA5LiBXaGlsZSB0 aGVyZSBhcmUgbWFueSBwb3RlbnRpYWwgaW1wcm92ZW1lbnRzIHRvIG1ha2Ugb24gWC41MDksIHRo ZXJlIGlzIGEgcmVzaXN0YW5jZSBhZ2FpbnN0IG5ldyBjZXJ0aWZpY2F0ZSBhcmNoaXRlY3R1cmVz IGFzIHdhcyBjbGVhciB3aGVuIHRoaXMgd2FzIGJyb3VnaHQgdXAgaW4gU2VjZGlzcGF0Y2ggYXQg SUVURiAxMDQgYSB5ZWFyIGFnby4gQXMgbWVudGlvbmVkIHByZXZpb3VzbHksIHdoYXQgd2UgbWVh biBieSDigJxuYXRpdmUgQ0JPUuKAnSBpcyB0aGUgbG9zc2xlc3MgY29tcHJlc3Npb24gb2YgdGhl IGNlcnRpZmljYXRlIHByb2ZpbGUgb2YgWC41MDkgaW50byBhIENCT1IgZW5jb2RlZCBmb3JtYXQs IGJ1dCBzaWduaW5nIG92ZXIgdGhlIENCT1IgaW5zdGVhZCBvZiBvbiB0aGUgdW5jb21wcmVzc2Vk IGRhdGEuIEluIHRoaXMgd2F5IGl0IGlzIHBvc3NpYmxlIHRvIGRlZmluZSBhIGJpamVjdGlvbiBi ZXR3ZWVuIG5hdGl2ZSBDQk9SIGNlcnRpZmljYXRlcyBhbmQgcHJvZmlsZWQgWC41MDkgY2VydGlm aWNhdGVzIOKAkyB0aGUgcGF5bG9hZCBvZiB0aGUgY29tcHJlc3NlZCB2ZXJzaW9uIG9mIHRoZSBs YXR0ZXIgd291bGQgYmUgaWRlbnRpY2FsIHRvIHRoZSBmb3JtZXIuIFNvIHRoZSBuYXRpdmUgQ0JP UiBjZXJ0aWZpY2F0ZXMgYXJlIGEgZmFpdGhmdWwgcmVwcmVzZW50YXRpb24gb2YgdGhlc2UgcHJv ZmlsZWQgWC41MDkgY2VydGlmaWNhdGVzLCB1c2luZyB0aGUgc2FtZSBwYXlsb2FkIGFzIGluIHRo ZSBDQk9SIGNvbXByZXNzaW9uIHNjaGVtZS4NCg0KSW4gY29udHJhc3QgdG8gdGhlIGNvbXByZXNz aW9uIHNjaGVtZSwgYSBjb252ZXJzaW9uIGJldHdlZW4gbmF0aXZlIENCT1IgYW5kIFguNTA5IHJl cHJlc2VudGF0aW9ucyByZXF1aXJlcyBhY2Nlc3MgdG8gdGhlIHByaXZhdGUgc2lnbmF0dXJlIGtl eS4NClRoZXJlZm9yZSBhIG1peCBvZiBYLjUwOSBhbmQgbmF0aXZlIENCT1Igd291bGQgcmVxdWly ZSBtdWx0aXBsZSBoYW5kbGVycyBhdCB0aGUgYmFja2VuZCAocGFyc2luZyB0aGUgcGF5bG9hZCB3 b3VsZCBiZSB0aGUgc2FtZSkuIERlZGljYXRlZCBkZXBsb3ltZW50cyBjb3VsZCBvZiBjb3Vyc2Ug dXNlIG5hdGl2ZSBDQk9SIGNlcnRpZmljYXRlcyBleGNsdXNpdmVseS4NCg0KSW4gdGhlIHNhbWUg d2F5IGl0IHdvdWxkIGJlIHBvc3NpYmxlIHRvIGluc3RlYWQgZGVmaW5lIGEgQ09TRV9TaWduMSBh bmQvb3IgYSBDV1QgcmVwcmVzZW50aW5nIHRoZXNlIHByb2ZpbGVkIFguNTA5IGNlcnRpZmljYXRl cywgdGhpcyBpcyB3aGF0IEkgdGhvdWdodCB5b3Ugd2VyZSBhc2tpbmcgYWJvdXQgYnV0IGFwcGFy ZW50bHkgbm90LiBUaGF0IHdvdWxkIGJlIGFuIGFsdGVybmF0aXZlIGFzIGxvbmcgYXMgd2UgY2Fu IGRlY2lkZSBvbiBleGFjdGx5IG9uZSBvZiB0aGVzZSByZXByZXNlbnRhdGlvbnMuDQoNClRoZXJl IGFyZSBhIGxvdCBvZiBmdW4gdGhpbmdzIHRvIGRvIGluIHRoaXMgc3BhY2UsIG15IGNvbmNlcm4g aXMgaG93IHRvIGdldCBvdXQgYSBzdGFuZGFyZC4gVHJ5aW5nIHRvIHJlcGxhY2UgWC41MDkgZG9l c27igJl0IHNlZW0gbGlrZSBhIHByb21pc2luZyB3YXkgZm9yd2FyZCBJ4oCZbSBhZnJhaWQgLiAu IC4NCg0KR8O2cmFuDQoNCg0KRnJvbTogQWNlIDxhY2UtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVo YWxmIG9mIExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KRGF0ZTog TW9uZGF5LCAyNyBBcHJpbCAyMDIwIGF0IDIwOjEzDQpUbzogR8O2cmFuIFNlbGFuZGVyIDxnb3Jh bi5zZWxhbmRlcj00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZz4NCkNjOiBKb2VsIEjDtmds dW5kIDxqb2VsLmhvZ2x1bmRAZ21haWwuY29tPiwgImNvc2VAaWV0Zi5vcmciIDxjb3NlQGlldGYu b3JnPiwgImFjZUBpZXRmLm9yZyIgPGFjZUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbQWNlXSBb Q09TRV0gZHJhZnQtcmF6YS1hY2UtY2Jvci1jZXJ0aWZpY2F0ZXMtMDQudHh0DQoNCk9uIEFwciAy NywgMjAyMCwgYXQgNTowMCBBTSwgR8O2cmFuIFNlbGFuZGVyIDxnb3Jhbi5zZWxhbmRlcj00MGVy aWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86Z29yYW4uc2VsYW5kZXI9NDBlcmljc3Nv bi5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCg0KW0dTXSBUaGUgcmF0aW9uYWxlIGZvciBu YXRpdmUgQ0JPUiBjZXJ0aWZpY2F0ZXMgaXMgdG8gcmV1c2UgdGhlIHNhbWUgZW5jb2RpbmcgYXMg aW4gdGhlIGNvbXByZXNzaW9uIHNjaGVtZSBkZWZpbmVkIGZvciBSRkMgNzkyNSwgYnV0IHNpZ25p bmcgdGhlIENCT1IgaW5zdGVhZCBvZiBzaWduaW5nIHRoZSB1bmNvbXByZXNzZWQgZGF0YS4gVGhp cyBwcm92aWRlcyBhIHJvYWRtYXAgd2l0aCBtaW5pbWFsIGNoYW5nZXMgd2hlbiBtb3ZpbmcgZnJv bSBjb21wcmVzc2VkIHRvIG5hdGl2ZSBDQk9SIGNlcnRpZmljYXRlcy4NCg0KSSBhZ3JlZSB3aXRo IHlvdSB0aGF0IHRoZSBvdmVyaGVhZCBvZiBDT1NFX1NpZ24xIG9yIENXVCBpcyBub3QgbWFqb3Ig YW5kIHRoZXNlIHBvaW50cyBhcmUgb3BlbiBmb3IgZGlzY3Vzc2lvbi4gVGhlIG1vcmUgaW1wb3J0 YW50IHF1ZXN0aW9uIGlzIHdoZXJlIHRoaXMgc2hvdWxkIGJlIHN0YW5kYXJkaXplZC4gVGhlIGNv bXByZXNzaW9uIHNjaGVtZSBpcyBub3cgaW5jbHVkZWQgaW4gdGhlIG5ldyBkcmFmdCBjaGFydGVy IGZvciBDT1NFOg0KaHR0cHM6Ly9naXRodWIuY29tL2Nvc2Utd2cvQ2hhcnRlci9ibG9iL21hc3Rl ci9DaGFydGVyLm1kPGh0dHBzOi8vcHJvdGVjdDIuZmlyZWV5ZS5jb20vdjEvdXJsP2s9ZGQxMjc3 MDktODE5YmQ4YzAtZGQxMjM3OTItMGNjNDdhZDkzZTFjLTViNmJhZTg0YWJjNWM0YTAmcT0xJmU9 NWJiNDEyZmEtZWMxZC00NGEwLThkYmEtYzY2ODQ0ZDFiNzk3JnU9aHR0cHMlM0ElMkYlMkZnaXRo dWIuY29tJTJGY29zZS13ZyUyRkNoYXJ0ZXIlMkZibG9iJTJGbWFzdGVyJTJGQ2hhcnRlci5tZD4N ClRoZSBjaGFydGVyIGlzIGN1cnJlbnRseSBub3QgZXhwbGljaXRseSBzdXBwb3J0aW5nIG5hdGl2 ZSBDQk9SIGNlcnRpZmljYXRlcy4gSWYgeW91IHRoaW5rIGl0IHNob3VsZCwgaW4gc29tZSB2YXJp YW50LCB0aGVuIHRoaXMgaXMgYSBnb29kIHRpbWUgdG8gcmFpc2UgeW91ciB2b2ljZS4NCg0KVG8g Z28gc3RyYWlnaHQgdG8gdGhlIGlzc3VlLCBJIHRoaW5rIGEgZGVzaWduaW5nIGEgbmF0aXZlIENC T1IgY2VydCBzaG91bGQgYmUgYXBwcm9hY2hlZCBkaWZmZXJlbnRseSB0aGFuIGNvbXByZXNzaW5n IC8gcmUtZW5jb2RpbmcgYW4gWC41MDkgY2VydDoNCg0KUmUtZW5jb2RpbmcNCi0gU2l6ZSBpcyBp bXBvcnRhbnQNCi0gRXhhY3QgY29tcGF0aWJpbGl0eSBpcyByZXF1aXJlZA0KLSBOZWFyIHplcm8g Y2hhbmdlIHRvIGZpZWxkcyBhbmQgc2VtYW50aWNzDQoNCk5hdGl2ZSBDQk9SIENlcnQNCi0gQ2xl YW4gdXAgc29tZSBvZiB0aGUgbWVzcyBpbiBYLjUwOTsgaXQgaXMgYW4gb2xkIHN0YW5kYXJkIHdp dGggYSBsb3Qgb2YgY3J1ZnQgYW5kIGJhZ2dhZ2UNCi0gUmUgZGVzaWduIGV4dGVuc2lvbnMgc28g dGhleSBhcmUgaW4gQ0JPUiBmb3JtYXQNCi0gTWFrZSBtYW55IG9mIHRoZSBmaWVsZHMgb3B0aW9u YWwsIGZvciBleGFtcGxlIG5vdCBiZWZvcmUgY2FuIG9mdGVuIGJlIGxlZnQgb2ZmLCBtYXliZSBl dmVuIHNlcmlhbCBudW1iZXINCi0gQXZvaWQgRE4gc3RydWN0dXJlIGZvciBpc3N1ZXIgYW5kIHN1 YmplY3QgZm9yIG1vc3QgdXNlIGNhc2VzDQotIFVzZSBtb2Rlcm4gZm9ybWF0cyBsaWtlIENPU0Ug YW5kIENXVCBhbmQgQ09TRV9LZXkNCi0gU2l6ZSBpcyBpbXBvcnRhbnQsIGJ1dCBmYXIgZnJvbSB0 aGUgb25seSBnb2FsIChzb21lIHNpemUgcmVkdWN0aW9ucywgbGlrZSBvcHRpb25hbCBmaWVsZHMg d2lsbCBiZSBwb3NzaWJsZSBoZXJlIHRoYXQgYXJlIG5vdCBwb3NzaWJsZSB3aXRoIHJlLWVuY29k aW5nKQ0KLSBDb21wYXRpYmlsaXR5IG1hdHRlcnMsIGJ1dCBub3QgaW4gdGhlIHNhbWUgd2F5DQoN ClNlZW1zIGxpa2UgdGhlIHJpZ2h0IHRoaW5nIHRvIGRvIGhlcmUgaXMgdG8gcmVtb3ZlIG5hdGl2 ZSBDQk9SIGNlcnRzIGZyb20gdGhpcyBkb2N1bWVudCBhbmQganVzdCBmb2N1cyBvbiBjb21wcmVz c2lvbiBhbmQgcmUtZW5jb2RpbmcuIE1heWJlIGV2ZW4gY2FsbCB0aGVtIOKAnENvbXByZXNzZWQg Q2VydHPigJ0gcmF0aGVyIHRoYW4g4oCcQ0JPUiBDZXJ0c+KAnS4uIFdoZXJlIHRoYXQgd29yayBz aG91bGQgZ28gaXMgYWJvdmUgbXkgcGF5IGdyYWRlLg0KDQoNCkJVVCwgbXkgbWFpbiBpbnRlcmVz dCBoZXJlIHJlbGF0ZXMgdG8gQ1dUIGFuZCBFQVQuIENXVCBzZWVtcyBsaWtlIGEgcmVhbGx5IGdv b2QgY2hvaWNlIG9uIHdoaWNoIHRvIGJhc2UgYSBuYXRpdmUgQ0JPUiBjZXJ0LiBTb21lIG9mIHRo ZSBmaWVsZHMgZm9yIGFuIFguNTA5IGNlcnQgYXJlIGFscmVhZHkgZGVmaW5lZCBpbiBDV1QgKHN1 YmplY3QsIGlzc3VlciwgZXhwaXJhdGlvbiwgbm90LWJlZm9yZSkuIEl0IGhhcyBhbiBleHRlbnNp b24gbWVjaGFuaXNtIGJ1aWx0IGluIGFscmVhZHkgaW4gdGhlIENXVCBJQU5BIHJlZ2lzdHJ5LiBU aGUgY3J5cHRvIGFuZCBzaWduaW5nIGFyZSB3ZWxsLWhhbmRsZWQgYnkgQ1dU4oCZcyB1c2Ugb2Yg Q09TRS4NCg0KSW4gd29yayB0byBmaXQgRUFUPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1pZXRmLXJhdHMtZWF0LTAzPiBpbiBhcyBhIENXVCwgYSBmZXcgaXNzdWVzIGhhdmUgY29t ZSB1cCDigJQgaG93IGZpZWxkcyAvIGNsYWltcyBhcmUgbWFuYWdlZCBhbmQgcmVnaXN0ZXJlZCB3 aXRoIElBTkEsIGxhYmVsIHNwYWNlcyBhbmQgb3RoZXIuICBBbGwgdGhlc2UgaXNzdWVzIHdvdWxk IGFwcGx5IHRvIENXVC9DT1NFL0NCT1ItYmFzZWQgY2VydGlmaWNhdGUgYXMgd2VsbC4NCg0KVG8g bmFtZSBqdXN0IG9uZSBpc3N1ZSwgaW4gQ1dUIHRoZSBleHBpcmF0aW9uIGRhdGUvdGltZSBjYW4g YmUgYSBmbG9hdGluZy1wb2ludCBudW1iZXIsIHdoaWNoIGlzIGJ1cmRlbnNvbWUsIG5vdCB1c2Vm dWwuIFNob3VsZCB3ZSBjaGFuZ2UgQ1dUIHRvIGRpc2FsbG93IG9yIHNob3VsZCBpdCBqdXN0IGJl IGRpc2FsbG93ZWQgd2hlbiBhIENXVCBpcyB1c2VkIGFzIGFuIEVBVCBhbmQgd2hlbiBpdCBpcyB1 c2VkIGFzIGEgQ2VydD8NCg0KSeKAmW0gYWxzbyBleGNpdGVkIGF0IHRoZSBpZGVhIG9mIHJlIHVz aW5nIENXVCBpbiBhIHNpbXBsZSBmb3JtIHNvIHRoZXJlIGlzIHJlIHVzZSBvZiBjb2RlIGJldHdl ZW4gQ1dULCBFQVQgYW5kIG5hdGl2ZSBDQk9SIGNlcnRzLiBJ4oCZdmUgc3RhcnRlZCBwbGF5aW5n IHdpdGggYW4gaW1wbGVtZW50YXRpb24gbGlrZSB0aGlzLg0KDQpMTA0KDQo= --_000_3BB4FFA8AABD45209B211F0B0CAFB08Cericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <19AD6466657F8D42A98EC19A4CA5E4A5@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQou TXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6 MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCglt YXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7 cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9ImVu LVNFIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9u MSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5IaSBMYXVyZW5jZSwNCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZh cmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFu Z3VhZ2U6RU4tVVMiPlRoYW5rcyBmb3Igc2hhcmluZyB5b3VyIHRob3VnaHRzLiBJdCBzZWVtcyB3 ZSBhcmUgd29ya2luZyBvbiBzbGlnaHRseSBkaWZmZXJlbnQgcGF0aHMuDQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIHBhcnQgeW91IGNh bGxlZCDigJxDb21wcmVzc2VkIENlcnRz4oCdIGlzIGFscmVhZHkgaW4gdGhlIGRyYWZ0IENPU0Ug Y2hhcnRlciB3aGVyZSBpdCBpcyByZWZlcnJlZCB0byBhcyDigJw8L3NwYW4+QSBDQk9SIGVuY29k aW5nIG9mIHRoZSBjb21wcmVzc2VkIGNlcnRpZmljYXRlIHByb2ZpbGUgZGVmaW5lZCBpbiBSRkMg NzkyNTxzcGFuIGxhbmc9IkVOLVVTIj7igJ0gc28gd2UgY2FuIGxlYXZlDQogdGhhdCBvdXQgZm9y IG5vdy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPk15IGNvbW1lbnQgd2FzIGFib3V0IHRoZSBvdGhlciBw YXJ0LCB3aGF0IHdlIGJvdGggY2FsbCDigJxuYXRpdmUgQ0JPUiBjZXJ0aWZpY2F0ZXPigJ0gYnV0 IG1lYW4gZGlmZmVyZW50IHRoaW5ncy4gV2hhdCBpcyBjYWxsZWQgbmF0aXZlIGluDQo8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5kcmFmdC1yYXphLWFjZS1jYm9y LWNlcnRpZmljYXRlcyA8c3BhbiBsYW5nPSJFTi1VUyI+aXMgbm90IGludGVuZGVkIGFzIGEgY2Vy dGlmaWNhdGUgZm9ybWF0IGJyZWFraW5nIHdpdGggWC41MDkuIFdoaWxlIHRoZXJlIGFyZSBtYW55 IHBvdGVudGlhbCBpbXByb3ZlbWVudHMgdG8gbWFrZSBvbiBYLjUwOSwgdGhlcmUgaXMgYSByZXNp c3RhbmNlIGFnYWluc3QgbmV3IGNlcnRpZmljYXRlIGFyY2hpdGVjdHVyZXMgYXMNCiB3YXMgY2xl YXIgd2hlbiB0aGlzIHdhcyBicm91Z2h0IHVwIGluIFNlY2Rpc3BhdGNoIGF0IElFVEYgMTA0IGEg eWVhciBhZ28uIEFzIG1lbnRpb25lZCBwcmV2aW91c2x5LCB3aGF0IHdlIG1lYW4gYnkg4oCcbmF0 aXZlIENCT1LigJ0gaXMgdGhlIGxvc3NsZXNzIGNvbXByZXNzaW9uIG9mIHRoZSBjZXJ0aWZpY2F0 ZSBwcm9maWxlIG9mIFguNTA5IGludG8gYSBDQk9SIGVuY29kZWQgZm9ybWF0LCBidXQgc2lnbmlu ZyBvdmVyIHRoZSBDQk9SIGluc3RlYWQgb2YNCiBvbiB0aGUgdW5jb21wcmVzc2VkIGRhdGEuIElu IHRoaXMgd2F5IGl0IGlzIHBvc3NpYmxlIHRvIGRlZmluZSBhIGJpamVjdGlvbiBiZXR3ZWVuIG5h dGl2ZSBDQk9SIGNlcnRpZmljYXRlcyBhbmQgcHJvZmlsZWQgWC41MDkgY2VydGlmaWNhdGVzIOKA kyB0aGUgcGF5bG9hZCBvZiB0aGUgY29tcHJlc3NlZCB2ZXJzaW9uIG9mIHRoZSBsYXR0ZXIgd291 bGQgYmUgaWRlbnRpY2FsIHRvIHRoZSBmb3JtZXIuIFNvIHRoZSBuYXRpdmUgQ0JPUiBjZXJ0aWZp Y2F0ZXMNCiBhcmUgYSBmYWl0aGZ1bCByZXByZXNlbnRhdGlvbiBvZiB0aGVzZSBwcm9maWxlZCBY LjUwOSBjZXJ0aWZpY2F0ZXMsIHVzaW5nIHRoZSBzYW1lIHBheWxvYWQgYXMgaW4gdGhlIENCT1Ig Y29tcHJlc3Npb24gc2NoZW1lLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5JbiBjb250cmFzdCB0byB0 aGUgY29tcHJlc3Npb24gc2NoZW1lLCBhIGNvbnZlcnNpb24gYmV0d2VlbiBuYXRpdmUgQ0JPUiBh bmQgWC41MDkgcmVwcmVzZW50YXRpb25zIHJlcXVpcmVzIGFjY2VzcyB0byB0aGUgcHJpdmF0ZSBz aWduYXR1cmUga2V5Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiPlRoZXJlZm9yZSBhIG1peCBvZiBYLjUwOSBhbmQgbmF0aXZl IENCT1Igd291bGQgcmVxdWlyZSBtdWx0aXBsZSBoYW5kbGVycyBhdCB0aGUgYmFja2VuZCAocGFy c2luZyB0aGUgcGF5bG9hZCB3b3VsZCBiZSB0aGUgc2FtZSkuIERlZGljYXRlZCBkZXBsb3ltZW50 cyBjb3VsZCBvZiBjb3Vyc2UgdXNlIG5hdGl2ZSBDQk9SIGNlcnRpZmljYXRlcyBleGNsdXNpdmVs eS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiPkluIHRoZSBzYW1lIHdheSBpdCB3b3VsZCBiZSBwb3NzaWJs ZSB0byBpbnN0ZWFkIGRlZmluZSBhIENPU0VfU2lnbjEgYW5kL29yIGEgQ1dUIHJlcHJlc2VudGlu ZyB0aGVzZSBwcm9maWxlZCBYLjUwOSBjZXJ0aWZpY2F0ZXMsIHRoaXMgaXMgd2hhdCBJIHRob3Vn aHQgeW91IHdlcmUgYXNraW5nIGFib3V0IGJ1dCBhcHBhcmVudGx5IG5vdC4gVGhhdCB3b3VsZCBi ZSBhbiBhbHRlcm5hdGl2ZQ0KIGFzIGxvbmcgYXMgd2UgY2FuIGRlY2lkZSBvbiBleGFjdGx5IG9u ZSBvZiB0aGVzZSByZXByZXNlbnRhdGlvbnMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGVyZSBhcmUg YSBsb3Qgb2YgZnVuIHRoaW5ncyB0byBkbyBpbiB0aGlzIHNwYWNlLCBteSBjb25jZXJuIGlzIGhv dyB0byBnZXQgb3V0IGEgc3RhbmRhcmQuIFRyeWluZyB0byByZXBsYWNlIFguNTA5IGRvZXNu4oCZ dCBzZWVtIGxpa2UgYSBwcm9taXNpbmcgd2F5IGZvcndhcmQgSeKAmW0gYWZyYWlkIC4gLiAuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIj5Hw7ZyYW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+QWNlICZsdDthY2UtYm91bmNlc0BpZXRmLm9yZyZn dDsgb24gYmVoYWxmIG9mIExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7bGdsQGlzbGFuZC1yZXNvcnQu Y29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5Nb25kYXksIDI3IEFwcmlsIDIwMjAgYXQgMjA6MTM8 YnI+DQo8Yj5UbzogPC9iPkfDtnJhbiBTZWxhbmRlciAmbHQ7Z29yYW4uc2VsYW5kZXI9NDBlcmlj c3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+Q2M6IDwvYj5Kb2VsIEjDtmdsdW5k ICZsdDtqb2VsLmhvZ2x1bmRAZ21haWwuY29tJmd0OywgJnF1b3Q7Y29zZUBpZXRmLm9yZyZxdW90 OyAmbHQ7Y29zZUBpZXRmLm9yZyZndDssICZxdW90O2FjZUBpZXRmLm9yZyZxdW90OyAmbHQ7YWNl QGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW0FjZV0gW0NPU0VdIGRyYWZ0 LXJhemEtYWNlLWNib3ItY2VydGlmaWNhdGVzLTA0LnR4dDwvc3Bhbj48YnI+DQo8YnI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+T24gQXByIDI3LCAyMDIwLCBhdCA1OjAwIEFNLCBHw7ZyYW4gU2VsYW5kZXIgJmx0 OzxhIGhyZWY9Im1haWx0bzpnb3Jhbi5zZWxhbmRlcj00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRm Lm9yZyI+Z29yYW4uc2VsYW5kZXI9NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0 OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFu IGxhbmc9IkVOLVVTIj5bR1NdIFRoZSByYXRpb25hbGUgZm9yIG5hdGl2ZSBDQk9SIGNlcnRpZmlj YXRlcyBpcyB0byByZXVzZSB0aGUgc2FtZSBlbmNvZGluZyBhcyBpbiB0aGUgY29tcHJlc3Npb24g c2NoZW1lIGRlZmluZWQgZm9yIFJGQyA3OTI1LCBidXQgc2lnbmluZyB0aGUgQ0JPUiBpbnN0ZWFk IG9mIHNpZ25pbmcgdGhlIHVuY29tcHJlc3NlZCBkYXRhLg0KIFRoaXMgcHJvdmlkZXMgYSByb2Fk bWFwIHdpdGggbWluaW1hbCBjaGFuZ2VzIHdoZW4gbW92aW5nIGZyb20gY29tcHJlc3NlZCB0byBu YXRpdmUgQ0JPUiBjZXJ0aWZpY2F0ZXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNw YW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFu IGxhbmc9IkVOLVVTIj5JIGFncmVlIHdpdGggeW91IHRoYXQgdGhlIG92ZXJoZWFkIG9mIENPU0Vf U2lnbjEgb3IgQ1dUIGlzIG5vdCBtYWpvciBhbmQgdGhlc2UgcG9pbnRzIGFyZSBvcGVuIGZvciBk aXNjdXNzaW9uLiBUaGUgbW9yZSBpbXBvcnRhbnQgcXVlc3Rpb24gaXMgd2hlcmUgdGhpcyBzaG91 bGQgYmUgc3RhbmRhcmRpemVkLiBUaGUgY29tcHJlc3Npb24NCiBzY2hlbWUgaXMgbm93IGluY2x1 ZGVkIGluIHRoZSBuZXcgZHJhZnQgY2hhcnRlciBmb3IgQ09TRTo8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48YSBocmVmPSJodHRwczovL3Byb3RlY3QyLmZpcmVleWUuY29tL3YxL3VybD9r PWRkMTI3NzA5LTgxOWJkOGMwLWRkMTIzNzkyLTBjYzQ3YWQ5M2UxYy01YjZiYWU4NGFiYzVjNGEw JmFtcDtxPTEmYW1wO2U9NWJiNDEyZmEtZWMxZC00NGEwLThkYmEtYzY2ODQ0ZDFiNzk3JmFtcDt1 PWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmNvc2Utd2clMkZDaGFydGVyJTJGYmxvYiUyRm1h c3RlciUyRkNoYXJ0ZXIubWQiPmh0dHBzOi8vZ2l0aHViLmNvbS9jb3NlLXdnL0NoYXJ0ZXIvYmxv Yi9tYXN0ZXIvQ2hhcnRlci5tZDwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9 IkVOLVVTIj5UaGUgY2hhcnRlciBpcyBjdXJyZW50bHkgbm90IGV4cGxpY2l0bHkgc3VwcG9ydGlu ZyBuYXRpdmUgQ0JPUiBjZXJ0aWZpY2F0ZXMuIElmIHlvdSB0aGluayBpdCBzaG91bGQsIGluIHNv bWUgdmFyaWFudCwgdGhlbiB0aGlzIGlzIGEgZ29vZCB0aW1lIHRvIHJhaXNlIHlvdXIgdm9pY2Uu PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+VG8gZ28gc3RyYWlnaHQgdG8gdGhlIGlzc3VlLCBJIHRoaW5rIGEg ZGVzaWduaW5nIGEgbmF0aXZlIENCT1IgY2VydCBzaG91bGQgYmUgYXBwcm9hY2hlZCBkaWZmZXJl bnRseSB0aGFuIGNvbXByZXNzaW5nIC8gcmUtZW5jb2RpbmcgYW4gWC41MDkgY2VydDo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHU+UmUtZW5jb2Rp bmc8L3U+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4tIFNpemUgaXMgaW1wb3J0YW50PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij4tIEV4YWN0IGNvbXBhdGliaWxpdHkgaXMgcmVxdWlyZWQ8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPi0gTmVhciB6ZXJvIGNoYW5nZSB0byBmaWVsZHMgYW5kIHNlbWFudGljczxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48dT5OYXRp dmUgQ0JPUiBDZXJ0PC91PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+LSBDbGVhbiB1cCBzb21lIG9m IHRoZSBtZXNzIGluIFguNTA5OyBpdCBpcyBhbiBvbGQgc3RhbmRhcmQgd2l0aCBhIGxvdCBvZiBj cnVmdCBhbmQgYmFnZ2FnZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+LSBSZSBkZXNpZ24gZXh0ZW5z aW9ucyBzbyB0aGV5IGFyZSBpbiBDQk9SIGZvcm1hdDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+LSBN YWtlIG1hbnkgb2YgdGhlIGZpZWxkcyBvcHRpb25hbCwgZm9yIGV4YW1wbGUgbm90IGJlZm9yZSBj YW4gb2Z0ZW4gYmUgbGVmdCBvZmYsIG1heWJlIGV2ZW4gc2VyaWFsIG51bWJlcjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+LSBBdm9pZCBETiBzdHJ1Y3R1cmUgZm9yIGlzc3VlciBhbmQgc3ViamVjdCBm b3IgbW9zdCB1c2UgY2FzZXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPi0gVXNlIG1vZGVybiBmb3Jt YXRzIGxpa2UgQ09TRSBhbmQgQ1dUIGFuZCBDT1NFX0tleTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ LSBTaXplIGlzIGltcG9ydGFudCwgYnV0IGZhciBmcm9tIHRoZSBvbmx5IGdvYWwgKHNvbWUgc2l6 ZSByZWR1Y3Rpb25zLCBsaWtlIG9wdGlvbmFsIGZpZWxkcyB3aWxsIGJlIHBvc3NpYmxlIGhlcmUg dGhhdCBhcmUgbm90IHBvc3NpYmxlIHdpdGggcmUtZW5jb2RpbmcpPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij4tIENvbXBhdGliaWxpdHkgbWF0dGVycywgYnV0IG5vdCBpbiB0aGUgc2FtZSB3YXk8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+U2VlbXMgbGlr ZSB0aGUgcmlnaHQgdGhpbmcgdG8gZG8gaGVyZSBpcyB0byByZW1vdmUgbmF0aXZlIENCT1IgY2Vy dHMgZnJvbSB0aGlzIGRvY3VtZW50IGFuZCBqdXN0IGZvY3VzIG9uIGNvbXByZXNzaW9uIGFuZCBy ZS1lbmNvZGluZy4gTWF5YmUgZXZlbiBjYWxsIHRoZW0g4oCcQ29tcHJlc3NlZCBDZXJ0c+KAnSBy YXRoZXIgdGhhbiDigJxDQk9SIENlcnRz4oCdLi4gV2hlcmUgdGhhdA0KIHdvcmsgc2hvdWxkIGdv IGlzIGFib3ZlIG15IHBheSBncmFkZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij5CVVQsIG15IG1haW4gaW50ZXJlc3QgaGVyZSByZWxhdGVzIHRv IENXVCBhbmQgRUFULiBDV1Qgc2VlbXMgbGlrZSBhIHJlYWxseSBnb29kIGNob2ljZSBvbiB3aGlj aCB0byBiYXNlIGEgbmF0aXZlIENCT1IgY2VydC4gU29tZSBvZiB0aGUgZmllbGRzIGZvciBhbiBY LjUwOSBjZXJ0IGFyZSBhbHJlYWR5IGRlZmluZWQgaW4gQ1dUIChzdWJqZWN0LCBpc3N1ZXIsIGV4 cGlyYXRpb24sDQogbm90LWJlZm9yZSkuIEl0IGhhcyBhbiBleHRlbnNpb24gbWVjaGFuaXNtIGJ1 aWx0IGluIGFscmVhZHkgaW4gdGhlIENXVCBJQU5BIHJlZ2lzdHJ5LiBUaGUgY3J5cHRvIGFuZCBz aWduaW5nIGFyZSB3ZWxsLWhhbmRsZWQgYnkgQ1dU4oCZcyB1c2Ugb2YgQ09TRS48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SW4gd29yayB0byBmaXQm bmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1yYXRz LWVhdC0wMyI+RUFUPC9hPiZuYnNwO2luIGFzIGEgQ1dULCBhIGZldyBpc3N1ZXMgaGF2ZSBjb21l IHVwIOKAlCBob3cgZmllbGRzIC8gY2xhaW1zIGFyZSBtYW5hZ2VkIGFuZCByZWdpc3RlcmVkIHdp dGggSUFOQSwgbGFiZWwgc3BhY2VzIGFuZCBvdGhlci4gJm5ic3A7QWxsDQogdGhlc2UgaXNzdWVz IHdvdWxkIGFwcGx5IHRvIENXVC9DT1NFL0NCT1ItYmFzZWQgY2VydGlmaWNhdGUgYXMgd2VsbC4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ VG8gbmFtZSBqdXN0IG9uZSBpc3N1ZSwgaW4gQ1dUIHRoZSBleHBpcmF0aW9uIGRhdGUvdGltZSBj YW4gYmUgYSBmbG9hdGluZy1wb2ludCBudW1iZXIsIHdoaWNoIGlzIGJ1cmRlbnNvbWUsIG5vdCB1 c2VmdWwuIFNob3VsZCB3ZSBjaGFuZ2UgQ1dUIHRvIGRpc2FsbG93IG9yIHNob3VsZCBpdCBqdXN0 IGJlIGRpc2FsbG93ZWQgd2hlbiBhIENXVCBpcyB1c2VkIGFzIGFuDQogRUFUIGFuZCB3aGVuIGl0 IGlzIHVzZWQgYXMgYSBDZXJ0PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij5J4oCZbSBhbHNvIGV4Y2l0ZWQgYXQgdGhlIGlkZWEgb2YgcmUgdXNpbmcg Q1dUIGluIGEgc2ltcGxlIGZvcm0gc28gdGhlcmUgaXMgcmUgdXNlIG9mIGNvZGUgYmV0d2VlbiBD V1QsIEVBVCBhbmQgbmF0aXZlIENCT1IgY2VydHMuIEnigJl2ZSBzdGFydGVkIHBsYXlpbmcgd2l0 aCBhbiBpbXBsZW1lbnRhdGlvbiBsaWtlIHRoaXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkxMPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_3BB4FFA8AABD45209B211F0B0CAFB08Cericssoncom_-- From nobody Thu Apr 30 10:38:17 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33BEB3A0DD5 for ; Thu, 30 Apr 2020 10:38:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.794 X-Spam-Level: X-Spam-Status: No, score=-1.794 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dqcvH-iCjOAf for ; Thu, 30 Apr 2020 10:38:03 -0700 (PDT) Received: from p3plsmtpa06-01.prod.phx3.secureserver.net (p3plsmtpa06-01.prod.phx3.secureserver.net [173.201.192.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 942363A0DEB for ; Thu, 30 Apr 2020 10:37:50 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id UD89jfnKv5n10UD89jKhC0; Thu, 30 Apr 2020 10:37:50 -0700 X-CMAE-Analysis: v=2.3 cv=PaaBeRpd c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=0FD05c-RAAAA:8 a=48vgC7mUAAAA:8 a=K6EGIJCdAAAA:8 a=pGLkceISAAAA:8 a=NeJZvmmVAAAA:20 a=2JLUh5-gAAAA:8 a=KHoinL0bdrCUc9T8JBIA:9 a=7U3Y6lsKD65v4cBh:21 a=AMCCSmdhPkw5JGql:21 a=QEXdDO2ut3YA:10 a=M3rSEH9b8GxZNhH0rw4A:9 a=vwBSpVPjVxuxrbGC:21 a=JlChb8WPFpb-Vmlo:21 a=atAyMpVNZEWOX9xN:21 a=_W_S_7VecoQA:10 a=l1rpMCqCXRGZwUSuRcM3:22 a=w1C3t2QeGrPiZgrLijVG:22 a=L6pVIi0Kn1GYQfi8-iRI:22 a=hnrGVjIjb-X0WoHtSFqa:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_E5B9BF06-13E0-4B91-9919-5D6573C5F4A1" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 30 Apr 2020 10:37:49 -0700 In-Reply-To: <3BB4FFA8-AABD-4520-9B21-1F0B0CAFB08C@ericsson.com> Cc: =?utf-8?Q?G=C3=B6ran_Selander?= , =?utf-8?Q?Joel_H=C3=B6glund?= , "cose@ietf.org" , "ace@ietf.org" To: =?utf-8?Q?G=C3=B6ran_Selander?= References: <8B4A9572-3770-416E-B937-1902AFC07DA7@island-resort.com> <964634A4-7B61-4CEF-8ED0-6A9A48D984CD@ericsson.com> <3BB4FFA8-AABD-4520-9B21-1F0B0CAFB08C@ericsson.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfC2iBkIfVmcy9LX1RhBjdfpMwH3B1B9T8S+n+MBsBnZQ4EbV9/Sum27hGfCbI3J6ekEWh2b+7wH0St84Il1iri8hZn5Ts3oW1YN0aQRb8FgxYIsG/wQU CCgLVjLwzLfO2rxJXu5MJuWFKFTk+f1aPdiIgZjPfUj+cj2asdk0B2PUOO5JBTF1VgB2LUFRm4ioHJQZfYKfNdpjR0EC8X69dOlPQ2sHT2miirTVizidVSnr VCIcrvI2R5MyX8UpRNnQd7IqA2K0uMh+ifBE5qlWWHaoLsWdNr1DVRjmiC307Tl60DEwj9Usw1yrNG6gIz/1HP+RtlkX9ZWT9ICgV2b7Xw8= Archived-At: Subject: Re: [COSE] [Ace] draft-raza-ace-cbor-certificates-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Apr 2020 17:38:13 -0000 --Apple-Mail=_E5B9BF06-13E0-4B91-9919-5D6573C5F4A1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi G=C3=B6ran, I understand your two types of native CBOR certs, and raise you by one. = I=E2=80=99ve assumed COSE because it seems a clear choice to me (no size = issue, code re use). 0) Compressed/re-encoded - Uses CBOR Sequence that exactly mirrors X.509 from Raza draft - Reduces size of cert, but increased code complexity; both CBOR and DER = encoding / decoding needed - Can transform to/from X.509 mechanically without the private key 1) COSE + Mirroring with CBOR Sequence from Raza draft - Uses the CBOR sequence that exactly mirrors X.509 - Reduces size of cert and lowers code complexity; no DER encoding / = decoding - Must have private key to generate; must be generated by the CA 2) COSE + Mirroring with CWT Claims - A set of CWT claims are defined that exactly mirror X.509 fields - Reduces size of cert and lowers code complexity; no DER encoding / = decoding; can re use some CWT code - Must have private key to generate; must be generated by the CA 3) COSE + Improved CWT Claims - A set of CWT claims that don=E2=80=99t necessarily mirror X.509 = exactly, but give similar semantics - Reduces size of cert and lowers code complexity; no DER encoding / = decoding; can re use some CWT code - Must have private key to generate; must be generated by the CA I was definitely talking about 3) in my last email. It is clearly not in = the charter. So maybe the debate is between 1) and 2). Both are in the charter. Some = advantages of 2) are: - Can re use some of the CWT code - Can move to 3) incrementally when the time comes - Can drop fields that are not used possibly giving the smallest cert = size on the wire of any of the options LL > On Apr 28, 2020, at 3:23 AM, G=C3=B6ran Selander = wrote: >=20 > Hi Laurence, > =20 > Thanks for sharing your thoughts. It seems we are working on slightly = different paths. > =20 > The part you called =E2=80=9CCompressed Certs=E2=80=9D is already in = the draft COSE charter where it is referred to as =E2=80=9CA CBOR = encoding of the compressed certificate profile defined in RFC 7925=E2=80=9D= so we can leave that out for now. > =20 > My comment was about the other part, what we both call =E2=80=9Cnative = CBOR certificates=E2=80=9D but mean different things. What is called = native in > draft-raza-ace-cbor-certificates is not intended as a certificate = format breaking with X.509. While there are many potential improvements = to make on X.509, there is a resistance against new certificate = architectures as was clear when this was brought up in Secdispatch at = IETF 104 a year ago. As mentioned previously, what we mean by =E2=80=9Cnat= ive CBOR=E2=80=9D is the lossless compression of the certificate profile = of X.509 into a CBOR encoded format, but signing over the CBOR instead = of on the uncompressed data. In this way it is possible to define a = bijection between native CBOR certificates and profiled X.509 = certificates =E2=80=93 the payload of the compressed version of the = latter would be identical to the former. So the native CBOR certificates = are a faithful representation of these profiled X.509 certificates, = using the same payload as in the CBOR compression scheme. > =20 > In contrast to the compression scheme, a conversion between native = CBOR and X.509 representations requires access to the private signature = key. > Therefore a mix of X.509 and native CBOR would require multiple = handlers at the backend (parsing the payload would be the same). = Dedicated deployments could of course use native CBOR certificates = exclusively. > =20 > In the same way it would be possible to instead define a COSE_Sign1 = and/or a CWT representing these profiled X.509 certificates, this is = what I thought you were asking about but apparently not. That would be = an alternative as long as we can decide on exactly one of these = representations. > =20 > There are a lot of fun things to do in this space, my concern is how = to get out a standard. Trying to replace X.509 doesn=E2=80=99t seem like = a promising way forward I=E2=80=99m afraid . . . > =20 > G=C3=B6ran > =20 > =20 > From: Ace on behalf of Laurence Lundblade = > Date: Monday, 27 April 2020 at 20:13 > To: G=C3=B6ran Selander = > Cc: Joel H=C3=B6glund , "cose@ietf.org" = , "ace@ietf.org" > Subject: Re: [Ace] [COSE] draft-raza-ace-cbor-certificates-04.txt >=20 >> On Apr 27, 2020, at 5:00 AM, G=C3=B6ran Selander = > wrote: >> =20 >> [GS] The rationale for native CBOR certificates is to reuse the same = encoding as in the compression scheme defined for RFC 7925, but signing = the CBOR instead of signing the uncompressed data. This provides a = roadmap with minimal changes when moving from compressed to native CBOR = certificates. >> =20 >> I agree with you that the overhead of COSE_Sign1 or CWT is not major = and these points are open for discussion. The more important question is = where this should be standardized. The compression scheme is now = included in the new draft charter for COSE: >> https://github.com/cose-wg/Charter/blob/master/Charter.md = = >> The charter is currently not explicitly supporting native CBOR = certificates. If you think it should, in some variant, then this is a = good time to raise your voice. >=20 > =20 > To go straight to the issue, I think a designing a native CBOR cert = should be approached differently than compressing / re-encoding an X.509 = cert: > =20 > Re-encoding > - Size is important > - Exact compatibility is required > - Near zero change to fields and semantics > =20 > Native CBOR Cert > - Clean up some of the mess in X.509; it is an old standard with a lot = of cruft and baggage > - Re design extensions so they are in CBOR format > - Make many of the fields optional, for example not before can often = be left off, maybe even serial number > - Avoid DN structure for issuer and subject for most use cases > - Use modern formats like COSE and CWT and COSE_Key > - Size is important, but far from the only goal (some size reductions, = like optional fields will be possible here that are not possible with = re-encoding) > - Compatibility matters, but not in the same way > =20 > Seems like the right thing to do here is to remove native CBOR certs = from this document and just focus on compression and re-encoding. Maybe = even call them =E2=80=9CCompressed Certs=E2=80=9D rather than =E2=80=9CCBO= R Certs=E2=80=9D.. Where that work should go is above my pay grade. > =20 > =20 > BUT, my main interest here relates to CWT and EAT. CWT seems like a = really good choice on which to base a native CBOR cert. Some of the = fields for an X.509 cert are already defined in CWT (subject, issuer, = expiration, not-before). It has an extension mechanism built in already = in the CWT IANA registry. The crypto and signing are well-handled by = CWT=E2=80=99s use of COSE. > =20 > In work to fit EAT = in as a CWT, a few = issues have come up =E2=80=94 how fields / claims are managed and = registered with IANA, label spaces and other. All these issues would = apply to CWT/COSE/CBOR-based certificate as well.=20 > =20 > To name just one issue, in CWT the expiration date/time can be a = floating-point number, which is burdensome, not useful. Should we change = CWT to disallow or should it just be disallowed when a CWT is used as an = EAT and when it is used as a Cert? > =20 > I=E2=80=99m also excited at the idea of re using CWT in a simple form = so there is re use of code between CWT, EAT and native CBOR certs. = I=E2=80=99ve started playing with an implementation like this. > =20 > LL --Apple-Mail=_E5B9BF06-13E0-4B91-9919-5D6573C5F4A1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hi G=C3=B6ran,

I understand your two types of native = CBOR certs, and raise you by one. I=E2=80=99ve assumed COSE because it = seems a clear choice to me (no size issue, code re use).

0) = Compressed/re-encoded
- Uses CBOR Sequence that = exactly mirrors X.509 from Raza draft
- Reduces = size of cert, but increased code complexity; both CBOR and DER encoding = / decoding needed
- Can transform to/from X.509 = mechanically without the private key

1) COSE + Mirroring with = CBOR Sequence from Raza draft
- Uses the = CBOR sequence that exactly mirrors X.509
- Reduces = size of cert and lowers code complexity; no DER encoding / = decoding
- Must have private key to generate; must = be generated by the CA

2) COSE + Mirroring with CWT = Claims
- A set of CWT claims are defined that = exactly mirror X.509 fields
- = Reduces size of cert and lowers code complexity; no DER encoding / = decoding; can re use some CWT code
- Must have private key to generate; must be generated by the = CA

3) COSE + Improved CWT = Claims
- A set of CWT = claims that don=E2=80=99t necessarily mirror X.509 exactly, but give = similar semantics
- Reduces size of cert and lowers code complexity; no DER = encoding / decoding; can re use some CWT code
- Must have private key to generate; must be = generated by the CA

I was = definitely talking about 3) in my last email. It is clearly not in the = charter.

So maybe the debate is = between 1) and 2). Both are in the charter. Some advantages of 2) = are:
- Can re use some of the CWT code
- Can move to = 3) incrementally when the time comes
- Can drop fields that = are not used possibly giving the smallest cert size on the wire of any = of the options

LL



On Apr 28, 2020, at 3:23 AM, = G=C3=B6ran Selander <goran.selander@ericsson.com> wrote:

Hi Laurence,
 
Thanks = for sharing your thoughts. It seems we are working on slightly different = paths.
 
The part you called = =E2=80=9CCompressed Certs=E2=80=9D is already in the draft COSE charter = where it is referred to as =E2=80=9CA CBOR encoding of the = compressed certificate profile defined in RFC 7925=E2=80=9D so we can leave that out for now.
 
My = comment was about the other part, what we both call =E2=80=9Cnative CBOR = certificates=E2=80=9D but mean different things. What is called native = in
draft-raza-ace-cbor-certificates is not intended as a certificate format breaking with X.509. = While there are many potential improvements to make on X.509, there is a = resistance against new certificate architectures as was clear when this = was brought up in Secdispatch at IETF 104 a year ago. As mentioned = previously, what we mean by =E2=80=9Cnative CBOR=E2=80=9D is the = lossless compression of the certificate profile of X.509 into a CBOR = encoded format, but signing over the CBOR instead of on the uncompressed = data. In this way it is possible to define a bijection between native = CBOR certificates and profiled X.509 certificates =E2=80=93 the payload = of the compressed version of the latter would be identical to the = former. So the native CBOR certificates are a faithful representation of = these profiled X.509 certificates, using the same payload as in the CBOR = compression scheme.
 
In contrast to the = compression scheme, a conversion between native CBOR and X.509 = representations requires access to the private signature key.
Therefore a mix of X.509 and native CBOR would = require multiple handlers at the backend (parsing the payload would be = the same). Dedicated deployments could of course use native CBOR = certificates exclusively.
 
In the same way it would be = possible to instead define a COSE_Sign1 and/or a CWT representing these = profiled X.509 certificates, this is what I thought you were asking = about but apparently not. That would be an alternative as long as we can = decide on exactly one of these representations.
 
There = are a lot of fun things to do in this space, my concern is how to get = out a standard. Trying to replace X.509 doesn=E2=80=99t seem like a = promising way forward I=E2=80=99m afraid . . .
 
G=C3=B6ran
 
 
From: Ace <ace-bounces@ietf.org> on behalf of Laurence Lundblade = <lgl@island-resort.com>
Date: Monday, 27 April 2020 = at 20:13
To: G=C3=B6ran Selander = <goran.selander=3D40ericsson.com@dmarc.ietf.org>
Cc: Joel H=C3=B6glund = <joel.hoglund@gmail.com>, "cose@ietf.org" <cose@ietf.org>, "ace@ietf.org" <ace@ietf.org>
Subject: Re: [Ace] [COSE] = draft-raza-ace-cbor-certificates-04.txt

On = Apr 27, 2020, at 5:00 AM, G=C3=B6ran Selander <goran.selander=3D40ericsson.com@dmarc.ietf.org> = wrote:
 
[GS] The rationale for native CBOR certificates is to reuse = the same encoding as in the compression scheme defined for RFC 7925, but = signing the CBOR instead of signing the uncompressed data. This provides = a roadmap with minimal changes when moving from compressed to native = CBOR certificates.
 
I agree with you that the overhead of COSE_Sign1 or CWT is = not major and these points are open for discussion. The more important = question is where this should be standardized. The compression scheme is = now included in the new draft charter for COSE:
The charter is = currently not explicitly supporting native CBOR certificates. If you = think it should, in some variant, then this is a good time to raise your = voice.
 
To go straight to the = issue, I think a designing a native CBOR cert should be approached = differently than compressing / re-encoding an X.509 cert:
 
Re-encoding
- Size is important
- Exact compatibility is = required
- Near zero change to fields and = semantics
 
Native CBOR Cert
- Clean up some of the mess in X.509; it is an old standard = with a lot of cruft and baggage
- Re design extensions so = they are in CBOR format
- Make many of the fields = optional, for example not before can often be left off, maybe even = serial number
- Avoid DN structure for issuer and = subject for most use cases
- Use modern formats like = COSE and CWT and COSE_Key
- Size is important, but = far from the only goal (some size reductions, like optional fields will = be possible here that are not possible with re-encoding)
- Compatibility matters, but not in the same way
 
Seems like the right thing to do here = is to remove native CBOR certs from this document and just focus on = compression and re-encoding. Maybe even call them =E2=80=9CCompressed = Certs=E2=80=9D rather than =E2=80=9CCBOR Certs=E2=80=9D.. Where that = work should go is above my pay grade.
 
 
BUT, my main interest here relates to CWT and = EAT. CWT seems like a really good choice on which to base a native CBOR = cert. Some of the fields for an X.509 cert are already defined in CWT = (subject, issuer, expiration, not-before). It has an extension mechanism = built in already in the CWT IANA registry. The crypto and signing are = well-handled by CWT=E2=80=99s use of COSE.
 
In work to fit EAT in as a CWT, a few issues have come up =E2=80=94 = how fields / claims are managed and registered with IANA, label spaces = and other.  All these issues would apply to CWT/COSE/CBOR-based = certificate as well. 
 
To name just one issue, in CWT the expiration = date/time can be a floating-point number, which is burdensome, not = useful. Should we change CWT to disallow or should it just be disallowed = when a CWT is used as an EAT and when it is used as a Cert?
 
I=E2=80=99m also excited at the idea of = re using CWT in a simple form so there is re use of code between CWT, = EAT and native CBOR certs. I=E2=80=99ve started playing with an = implementation like this.
 
LL

= --Apple-Mail=_E5B9BF06-13E0-4B91-9919-5D6573C5F4A1--