Subject: [Secdispatch] CFRG Crypto Review Panel reviews of draft-selander-ace-cose-ecdhe-12

From: John Mattsson <[email-masked]>
Date: Sun, 3 Mar 2019 23:52:44 +0000

For those of you that are not following the CFRG list. The CFRG Crypto Review Panel has recently provided two reviews of draft-selander-ace-cose-ecdhe-12

Russ Housley:
https://mailarchive.ietf.org/arch/msg/cfrg/6WN2C2RYGTIAInE2jIUco6L9pO8

Stanislav V. Smyshlyaev:
https://mailarchive.ietf.org/arch/msg/cfrg/2OY2om1FjhNNBmUzwYJroHv7eWQ

Main comments were that more text on compromises was needed in security considerations and that the optimization to omit the connection identifier may not be worth the added complexity, but please read the reviews yourself.

As announced here https://mailarchive.ietf.org/arch/msg/cfrg/7O-UnZP59LO1YY0_tToZgdEirt0 the comments from Russ and Stanislav have already been addressed in the GitHub version of the draft. Other comments/suggestions have been added to GitHub issues for discussion.

https://tools.ietf.org/rfcdiff?url1=https://tools.ietf.org/id/draft-selander-ace-cose-ecdhe.txt&url2=https://EricssonResearch.github.io/EDHOC/draft-selander-ace-cose-ecdhe.txt

Cheers,
John