From nobody Mon Aug 27 01:55:58 2018 Return-Path: X-Original-To: smime@ietfa.amsl.com Delivered-To: smime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7745130E82 for ; Mon, 27 Aug 2018 01:55:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XRvYIoynELPB for ; Mon, 27 Aug 2018 01:55:55 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FD491271FF for ; Mon, 27 Aug 2018 01:55:55 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id C2AC4B81999; Mon, 27 Aug 2018 01:55:37 -0700 (PDT) To: ekr@rtfm.com, kaduk@mit.edu, ekr@rtfm.com, paul.hoffman@vpnc.org, blaker@gmail.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: charlie.zhuo@ericsson.com, smime@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20180827085537.C2AC4B81999@rfc-editor.org> Date: Mon, 27 Aug 2018 01:55:37 -0700 (PDT) Archived-At: Subject: [smime] [Technical Errata Reported] RFC2631 (5480) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 08:55:57 -0000 The following errata report has been submitted for RFC2631, "Diffie-Hellman Key Agreement Method". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5480 -------------------------------------- Type: Technical Reported by: Charlie Zhuo Section: 2.1.1 Original Text ------------- h is any integer with 1 < h < p-1 such that h{(p-1)/q} mod p > 1 (g has order q mod p; i.e. g^q mod p = 1 if g!=1) Corrected Text -------------- h is any integer with 1 < h < p-1 such that h^{(p-1)/q} mod p > 1 (g has order q mod p; i.e. g^q mod p = 1 if g!=1) Notes ----- the explanation of h misses exponentiation operation in formula. Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC2631 (draft-ietf-smime-x942-07) -------------------------------------- Title : Diffie-Hellman Key Agreement Method Publication Date : June 1999 Author(s) : E. Rescorla Category : PROPOSED STANDARD Source : S/MIME Mail Security Area : Security Stream : IETF Verifying Party : IESG From nobody Mon Aug 27 08:32:30 2018 Return-Path: X-Original-To: smime@ietfa.amsl.com Delivered-To: smime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CD6A130E9D for ; Mon, 27 Aug 2018 08:32:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JGnS2NvhxBk4 for ; Mon, 27 Aug 2018 08:32:24 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D631E130E00 for ; Mon, 27 Aug 2018 08:32:24 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 6F4BD300A3D for ; Mon, 27 Aug 2018 11:32:22 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id x2MTQS2bq2z4 for ; Mon, 27 Aug 2018 11:32:20 -0400 (EDT) Received: from new-host-4.home (pool-71-127-50-4.washdc.fios.verizon.net [71.127.50.4]) by mail.smeinc.net (Postfix) with ESMTPSA id 34C5C3002C6; Mon, 27 Aug 2018 11:32:20 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Russ Housley In-Reply-To: <20180827085537.C2AC4B81999@rfc-editor.org> Date: Mon, 27 Aug 2018 11:32:20 -0400 Cc: Ben Kaduk , Blake Ramsdell , charlie.zhuo@ericsson.com, IETF SMIME , Paul Hoffman Content-Transfer-Encoding: quoted-printable Message-Id: References: <20180827085537.C2AC4B81999@rfc-editor.org> To: Eric Rescorla X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [smime] [Technical Errata Reported] RFC2631 (5480) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 15:32:28 -0000 Wow, this has gone a very long time without anyone noticing. As far as = I can tell, it have not resulted in any implementation errors. Russ > On Aug 27, 2018, at 4:55 AM, RFC Errata System = wrote: >=20 > The following errata report has been submitted for RFC2631, > "Diffie-Hellman Key Agreement Method". >=20 > -------------------------------------- > You may review the report below and at: > http://www.rfc-editor.org/errata/eid5480 >=20 > -------------------------------------- > Type: Technical > Reported by: Charlie Zhuo >=20 > Section: 2.1.1 >=20 > Original Text > ------------- > h is any integer with 1 < h < p-1 such that h{(p-1)/q} mod p > 1 > (g has order q mod p; i.e. g^q mod p =3D 1 if g!=3D1) >=20 > Corrected Text > -------------- > h is any integer with 1 < h < p-1 such that h^{(p-1)/q} mod p > 1 > (g has order q mod p; i.e. g^q mod p =3D 1 if g!=3D1) >=20 > Notes > ----- > the explanation of h misses exponentiation operation in formula. >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party =20 > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC2631 (draft-ietf-smime-x942-07) > -------------------------------------- > Title : Diffie-Hellman Key Agreement Method > Publication Date : June 1999 > Author(s) : E. Rescorla > Category : PROPOSED STANDARD > Source : S/MIME Mail Security > Area : Security > Stream : IETF > Verifying Party : IESG >=20 > _______________________________________________ > smime mailing list > smime@ietf.org > https://www.ietf.org/mailman/listinfo/smime From nobody Mon Aug 27 08:43:12 2018 Return-Path: X-Original-To: smime@ietfa.amsl.com Delivered-To: smime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC67D130E05 for ; Mon, 27 Aug 2018 08:43:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=auckland.ac.nz Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0eRT3tUcRlGr for ; Mon, 27 Aug 2018 08:43:07 -0700 (PDT) Received: from mx4-int.auckland.ac.nz (mx4-int.auckland.ac.nz [130.216.125.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01B0F130E00 for ; Mon, 27 Aug 2018 08:43:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=auckland.ac.nz; i=@auckland.ac.nz; q=dns/txt; s=mail; t=1535384587; x=1566920587; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=UodyB5grnj70/oi6TydMKEmL3gu+wLA0UuyKouJ2elE=; b=E0A7+abmcyOwmgHO8CYsSj8rPE3hthkPRAb08YQE/mQAIIiU4orPd5i3 xATJ4wwvdosz++Yp0+dDCuyCpA//DOdCP3uL+Uf8M4BtnSW+OCKs8T7tB QvCri0jDGQIPvgRxXBiSJgztRTfdQRahx5OjZWYwlJVRRCt5s5EJ3HE/c f6xM2zqPTSxcnUfEyDsBKPdqNwXyfUTwT4IYzPbrip7QejeuOFsApO9Vo WIvEEo/d1J5vXTROimtqrIOm0YXQwE5+T4BpUDThf1Uk4rj37SRkqWiUq uf170KhbsW6R9y8PLHbOV33Knme39anJK6p5488D7gh5kMhFMWJhrpPLc g==; X-IronPort-AV: E=Sophos;i="5.53,295,1531742400"; d="scan'208";a="28272504" X-Ironport-HAT: MAIL-SERVERS - $RELAYED X-Ironport-Source: 10.6.2.2 - Outgoing - Outgoing Received: from uxcn13-ogg-a.uoa.auckland.ac.nz ([10.6.2.2]) by mx4-int.auckland.ac.nz with ESMTP/TLS/AES256-SHA; 28 Aug 2018 03:43:04 +1200 Received: from uxcn13-ogg-d.UoA.auckland.ac.nz (10.6.2.5) by uxcn13-ogg-a.UoA.auckland.ac.nz (10.6.2.2) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Tue, 28 Aug 2018 03:43:04 +1200 Received: from uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.25]) by uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.5]) with mapi id 15.00.1263.000; Tue, 28 Aug 2018 03:43:04 +1200 From: Peter Gutmann To: Russ Housley , Eric Rescorla CC: "charlie.zhuo@ericsson.com" , Paul Hoffman , Ben Kaduk , IETF SMIME Thread-Topic: [smime] [Technical Errata Reported] RFC2631 (5480) Thread-Index: AQHUPePMDR1azBVRLUaA/UvBz0DlxaTS8VcAgADLibM= Date: Mon, 27 Aug 2018 15:43:03 +0000 Message-ID: <1535384571339.44903@cs.auckland.ac.nz> References: <20180827085537.C2AC4B81999@rfc-editor.org>, In-Reply-To: Accept-Language: en-NZ, en-GB, en-US Content-Language: en-NZ X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [130.216.158.4] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [smime] [Technical Errata Reported] RFC2631 (5480) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 15:43:10 -0000 Russ Housley writes:=0A= =0A= >Wow, this has gone a very long time without anyone noticing. As far as I = can=0A= >tell, it have not resulted in any implementation errors.=0A= =0A= Has it resulted in any implementations?=0A= =0A= (That's a serious question. What actually uses X9.42 DH, rather than PKCS = #3=0A= DH? That is, I know that some standards reference that RFC, but what actua= lly=0A= implements it and uses it in the real world?).=0A= =0A= Peter.=0A= From nobody Mon Aug 27 09:48:22 2018 Return-Path: X-Original-To: smime@ietfa.amsl.com Delivered-To: smime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB00C130E1B for ; Mon, 27 Aug 2018 09:48:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bo4b7I73wN72 for ; Mon, 27 Aug 2018 09:48:19 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A244130E13 for ; Mon, 27 Aug 2018 09:48:19 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 0BF7E300A9D for ; Mon, 27 Aug 2018 12:48:17 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id uKVsOQUMM-5B for ; Mon, 27 Aug 2018 12:48:15 -0400 (EDT) Received: from new-host-4.home (pool-71-127-50-4.washdc.fios.verizon.net [71.127.50.4]) by mail.smeinc.net (Postfix) with ESMTPSA id 36F143004DB; Mon, 27 Aug 2018 12:48:15 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Russ Housley In-Reply-To: <1535384571339.44903@cs.auckland.ac.nz> Date: Mon, 27 Aug 2018 12:48:15 -0400 Cc: Eric Rescorla , "charlie.zhuo@ericsson.com" , Paul Hoffman , Ben Kaduk , IETF SMIME Content-Transfer-Encoding: quoted-printable Message-Id: <90F832FB-F634-4001-8686-BA3F9B270C75@vigilsec.com> References: <20180827085537.C2AC4B81999@rfc-editor.org> <1535384571339.44903@cs.auckland.ac.nz> To: Peter Gutmann X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [smime] [Technical Errata Reported] RFC2631 (5480) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Aug 2018 16:48:21 -0000 > On Aug 27, 2018, at 11:43 AM, Peter Gutmann = wrote: >=20 > Russ Housley writes: >=20 >> Wow, this has gone a very long time without anyone noticing. As far = as I can >> tell, it have not resulted in any implementation errors. >=20 > Has it resulted in any implementations? >=20 > (That's a serious question. What actually uses X9.42 DH, rather than = PKCS #3 > DH? That is, I know that some standards reference that RFC, but what = actually > implements it and uses it in the real world?). I am aware of an implementation that was done 17 or 18 years ago. I do = not know if it is still being used. Russ From nobody Mon Aug 27 19:15:41 2018 Return-Path: X-Original-To: smime@ietfa.amsl.com Delivered-To: smime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D937130EDA; Mon, 27 Aug 2018 19:15:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B0KtNPMte4zZ; Mon, 27 Aug 2018 19:15:39 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21468130E01; Mon, 27 Aug 2018 19:15:39 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 2FE83B80A56; Mon, 27 Aug 2018 19:15:21 -0700 (PDT) To: charlie.zhuo@ericsson.com, ekr@rtfm.com X-PHP-Originating-Script: 30:errata_mail_lib.php From: RFC Errata System Cc: kaduk@mit.edu, iesg@ietf.org, smime@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20180828021521.2FE83B80A56@rfc-editor.org> Date: Mon, 27 Aug 2018 19:15:21 -0700 (PDT) Archived-At: Subject: [smime] [Errata Verified] RFC2631 (5480) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2018 02:15:41 -0000 The following errata report has been verified for RFC2631, "Diffie-Hellman Key Agreement Method". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata/eid5480 -------------------------------------- Status: Verified Type: Technical Reported by: Charlie Zhuo Date Reported: 2018-08-27 Verified by: Benjamin Kaduk (IESG) Section: 2.1.1 Original Text ------------- h is any integer with 1 < h < p-1 such that h{(p-1)/q} mod p > 1 (g has order q mod p; i.e. g^q mod p = 1 if g!=1) Corrected Text -------------- h is any integer with 1 < h < p-1 such that h^{(p-1)/q} mod p > 1 (g has order q mod p; i.e. g^q mod p = 1 if g!=1) Notes ----- The explanation of h omitted the exponentiation operator in the inline formula. -------------------------------------- RFC2631 (draft-ietf-smime-x942-07) -------------------------------------- Title : Diffie-Hellman Key Agreement Method Publication Date : June 1999 Author(s) : E. Rescorla Category : PROPOSED STANDARD Source : S/MIME Mail Security Area : Security Stream : IETF Verifying Party : IESG From nobody Mon Aug 27 21:36:48 2018 Return-Path: X-Original-To: smime@ietfa.amsl.com Delivered-To: smime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B65BC1274D0 for ; Mon, 27 Aug 2018 21:36:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=auckland.ac.nz Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YPYyLFj33lMH for ; Mon, 27 Aug 2018 21:36:44 -0700 (PDT) Received: from mx4-int.auckland.ac.nz (mx4-int.auckland.ac.nz [130.216.125.246]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8823A12008A for ; Mon, 27 Aug 2018 21:36:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=auckland.ac.nz; i=@auckland.ac.nz; q=dns/txt; s=mail; t=1535431003; x=1566967003; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=fqefXo9PPnT9vU6tD45SCLGjxLJGTxwY2+1TmbyOdXU=; b=DFIzU72xtqZdgdwJGQb6VhCBMHE4tR1XKh7+ggzzJPJ2iHKDpV5xcV95 hJyvTU9Lmxvx1q0J1oXFQK2Q7+6QtdIRYZ35jmxy1m610F7yrjWV/JE4E pkzGumddpOmzyKxpp6FGOYW9FmBRTMlGcBOAWGXt6RodqTbyLqgRI7P90 fTXwEFiACysLppFXzSa/YeRFCyzgrzfVh+4ivej4yotMOKbmGL9ErEBU/ qTkjo70AEoSMoB3M8WppPvF9hLWCdwkbx6543wfV50wdRiCN/EhOLKQjN u8E/VFtLnuoo/dzB/EFYXWdReMHYPfHuh3nFlTfVim0/oFCjfa/zanw6q g==; X-IronPort-AV: E=Sophos;i="5.53,298,1531742400"; d="scan'208";a="28371024" X-Ironport-HAT: MAIL-SERVERS - $RELAYED X-Ironport-Source: 10.6.2.5 - Outgoing - Outgoing Received: from uxcn13-ogg-d.uoa.auckland.ac.nz ([10.6.2.5]) by mx4-int.auckland.ac.nz with ESMTP/TLS/AES256-SHA; 28 Aug 2018 16:36:39 +1200 Received: from uxcn13-ogg-d.UoA.auckland.ac.nz (10.6.2.5) by uxcn13-ogg-d.UoA.auckland.ac.nz (10.6.2.5) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Tue, 28 Aug 2018 16:36:38 +1200 Received: from uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.25]) by uxcn13-ogg-d.UoA.auckland.ac.nz ([10.6.2.5]) with mapi id 15.00.1263.000; Tue, 28 Aug 2018 16:36:38 +1200 From: Peter Gutmann To: Russ Housley CC: Eric Rescorla , "charlie.zhuo@ericsson.com" , Paul Hoffman , Ben Kaduk , IETF SMIME Thread-Topic: [smime] [Technical Errata Reported] RFC2631 (5480) Thread-Index: AQHUPePMDR1azBVRLUaA/UvBz0DlxaTS8VcAgADLibP//0mtgIABjn0Y Date: Tue, 28 Aug 2018 04:36:38 +0000 Message-ID: <1535430985039.15897@cs.auckland.ac.nz> References: <20180827085537.C2AC4B81999@rfc-editor.org> <1535384571339.44903@cs.auckland.ac.nz>, <90F832FB-F634-4001-8686-BA3F9B270C75@vigilsec.com> In-Reply-To: <90F832FB-F634-4001-8686-BA3F9B270C75@vigilsec.com> Accept-Language: en-NZ, en-GB, en-US Content-Language: en-NZ X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [130.216.158.4] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [smime] [Technical Errata Reported] RFC2631 (5480) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2018 04:36:47 -0000 Russ Housley writes:=0A= =0A= >I am aware of an implementation that was done 17 or 18 years ago. I do no= t=0A= >know if it is still being used.=0A= =0A= That's probably the sole implementation I'm aware of as well. Microsoft di= d a=0A= (quickly-forgotten) read-only implementation to avoid charges that they did= n't=0A= implement a standard properly (a bit of a problem for them in the late '90s= ),=0A= but that nearly 20-year-old one is the only actual implementation I know of= ,=0A= and given that there wasn't anything else to talk to with it I don't know= =0A= whether it got used much in practice.=0A= =0A= For people who enjoy pain, there's a long thread on X9.42 (RFC 2631) issues= =0A= starting here:=0A= =0A= https://www.ietf.org/mail-archive/web/pkix/current/msg23858.html=0A= =0A= with lots of background history and a side order of pies being thrown in=0A= various directions.=0A= =0A= Peter.=0A= =0A= =0A= From charlie.zhuo@ericsson.com Mon Aug 27 18:19:59 2018 Return-Path: X-Original-To: smime@ietfa.amsl.com Delivered-To: smime@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F0E4130E8E for ; Mon, 27 Aug 2018 18:19:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.31 X-Spam-Level: X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=DnAQZ/Nn; dkim=pass (1024-bit key) header.d=ericsson.com header.b=BY3Vmq7f Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4JpbDx2TlE0V for ; Mon, 27 Aug 2018 18:19:57 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD10B130DEB for ; Mon, 27 Aug 2018 18:19:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1535419195; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=HdylI3tKr+93vFoGj5ZhdUrP+EFi6cQuCRXLVuOJJ7k=; b=DnAQZ/NnipdCJtJNdMDS+h1OwWeYfCznrdVd/s0oi7a+1mPIcEar8Byacuy5kkdY ST11vGb3vryidZGP/W3/HUcq9xE/p5InSbHm40dd1vVs6olMPhy/UIRo+qRDdhJv U3oOYN/ZqhkLMPH8mQ0x8zWJRymhnJyEv2OLklNTMCE=; X-AuditID: c1b4fb3a-2ddff70000007a64-8c-5b84a33b653f Received: from ESESBMB504.ericsson.se (Unknown_Domain [153.88.183.117]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id E1.E0.31332.B33A48B5; Tue, 28 Aug 2018 03:19:55 +0200 (CEST) Received: from ESESSMR501.ericsson.se (153.88.183.108) by ESESBMB504.ericsson.se (153.88.183.187) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Tue, 28 Aug 2018 03:19:54 +0200 Received: from ESESSMB505.ericsson.se (153.88.183.166) by ESESSMR501.ericsson.se (153.88.183.108) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Tue, 28 Aug 2018 03:19:54 +0200 Received: from EUR03-AM5-obe.outbound.protection.outlook.com (153.88.183.157) by ESESSMB505.ericsson.se (153.88.183.166) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Tue, 28 Aug 2018 03:19:54 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Q+WjGB733nvceISbdNCuD0Tb2IkDuPlyxb+fny9Oq+k=; b=BY3Vmq7fVHlxmjDsoOcaYHcd8NTOJQvPyUWakm7q0tR7cwVfBj2nn0q9iLPQHiAMPbXWLIxHxKBj2iE7LNPwt8A3d2SxZHGrZnf9sG7n52M39njnY+s+Ke1N7EXSkMmHTQT5uqrhSzxey15n+63vBFWa8WJ0wCxv9oS2bWQV0A8= Received: from VI1PR07MB3853.eurprd07.prod.outlook.com (52.134.26.15) by VI1PR07MB3392.eurprd07.prod.outlook.com (10.175.244.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1101.9; Tue, 28 Aug 2018 01:19:53 +0000 Received: from VI1PR07MB3853.eurprd07.prod.outlook.com ([fe80::cd7e:28a8:eed1:5f9c]) by VI1PR07MB3853.eurprd07.prod.outlook.com ([fe80::cd7e:28a8:eed1:5f9c%2]) with mapi id 15.20.1101.007; Tue, 28 Aug 2018 01:19:53 +0000 From: Charlie Zhuo To: Russ Housley , Peter Gutmann CC: Eric Rescorla , Paul Hoffman , "Ben Kaduk" , IETF SMIME Thread-Topic: [smime] [Technical Errata Reported] RFC2631 (5480) Thread-Index: AQHUPePP0qgm9NWB2kG523fG7/GrNKTTuoEAgAAC/4CAABI3gIAAhw2w Date: Tue, 28 Aug 2018 01:19:53 +0000 Message-ID: References: <20180827085537.C2AC4B81999@rfc-editor.org> <1535384571339.44903@cs.auckland.ac.nz> <90F832FB-F634-4001-8686-BA3F9B270C75@vigilsec.com> In-Reply-To: <90F832FB-F634-4001-8686-BA3F9B270C75@vigilsec.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=charlie.zhuo@ericsson.com; x-originating-ip: [114.80.140.38] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR07MB3392; 6:wotJNtcWa0qWMHXdWoMQIijjF01SsG5+oG+lxvsuGWtZe9bwrlumuADw64wrgpA8RGcJo0ltQO/retdQQGtTfG+90BFQpG6+3/YF6ZGO4SGIVhxhHuqQwXXiJmWSAY8KfAnsEHapxQ9req4KFCfJLq23cnaabVVR1s1AOlEzpkims7w6XCaQeQB4pIzJSfNSUdFRybqqmDFIca4qpl3dxbW83DAaHu4NDffefq1U6AJc+dvX1e4laFTavbEXc+E/VB2C+5LK/+hIP0EAbskCRed51MfGjTxIMAyAMQYvIGqGaYKIVk6FqXolibcLFK8hmVvRmxkyVfPnnx2rOs+kJqGQAlVQN6FEnpLWdRjgXDxJKhHDQRp4u//Lx3jdTdgRpVlutdJ3waJVWVQrklQ+p5+ieOGbOKDTDLiTAlpxu8nRAhF2iaESsUiqmtnifT+bwdDM7DsNUM0P7FD/xM/Gsg==; 5:/+7U7hn8ENPkkfBy5ffySMKQNHLTbQ7heFlHdUgseQ5JmLPhuQfBfFkY3SPs8XCik1O1jxoj0Tbp2oSQFRQAYbADYfVPRBIUMUr0gJt44ullIkbljXSyLzRNFEGQDzvOVaUbAOfImrREvEqKsTds6zkyncDVRRhW377nr3UWxw4=; 7:VcT2eukgUXAcW3w1jCKU0g8xgMNLrBnaAOeYevzQRm3EvTzgH/FaDh6yyHezC475zjLgEwglVq2+ZXJRjiJQ/g0boe8AAhIFRbEzKzbc5HchR4hvlPPP7AiP7/OohHevpPWbuokAc3zSHjMr+lV5YFsCUxAZ2rXUfn7NKZxxi2M6jLIdYKIRhQ2PyPCVJ6une5vIyOpagXFbVVfpmLpsVEYAgl14LuQ24Vr9qPoYDCZudmnxzPcOzeJUcqaTNAeh x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 200d20f3-c30e-4d8a-e530-08d60c845bd4 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:VI1PR07MB3392; x-ms-traffictypediagnostic: VI1PR07MB3392: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(37575265505322)(240460790083961)(248295561703944); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(10201501046)(3231311)(944501410)(52105095)(149027)(150027)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123560045)(20161123562045)(201708071742011)(7699016); SRVR:VI1PR07MB3392; BCL:0; PCL:0; RULEID:; SRVR:VI1PR07MB3392; x-forefront-prvs: 077884B8B5 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(396003)(376002)(346002)(136003)(39860400002)(189003)(199004)(13464003)(4326008)(2900100001)(8676002)(102836004)(6506007)(2906002)(5660300001)(54906003)(93886005)(26005)(81156014)(33656002)(7736002)(74316002)(68736007)(305945005)(81166006)(106356001)(316002)(97736004)(53546011)(110136005)(8936002)(229853002)(486006)(5250100002)(476003)(9686003)(55016002)(6436002)(44832011)(11346002)(478600001)(446003)(86362001)(76176011)(99286004)(66066001)(3846002)(6116002)(105586002)(7696005)(186003)(6246003)(256004)(14454004)(14444005)(53936002)(25786009); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB3392; H:VI1PR07MB3853.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: SNY9eieZK1MlOIGZp0i9U+J2Qmdi1H2A1uflM9spM8tJis0Z82sPluw4ccu+n3UeCpe1uyLxW9u/41mkOUb3t6FgcR3C8SZ/iUFAGc6Ohz6ahXTpAn0mR5KqFitYAc96js1YDsVWZ/C4/q7z4T4SpTKP2JSH8oCTlRHMwF99n7afDeUmaymwD4DPUfYwOXK/ZjcIwIFy6gdcNeARGYetm/zeR77V03lYQvgNoDLv+ssAt6P6Qx5CMLrEGFTTLfuZNMpr4ArVX04LbtdkbhArmqsEHxVy/lrqYzOcxBvVNTDKV8LntUc4b7M+vcI3zXjrwd5xoE8Zi5qIFaFyOsuYRuYWoTlVir8kBTX+VUdWQdI= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 200d20f3-c30e-4d8a-e530-08d60c845bd4 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Aug 2018 01:19:53.3992 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB3392 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA02SWUhUURzGO3Pv3LmOTRzN5Y+22EAvmpOa5JCWJhVDoPTgg6hUQ14X3Oe6 ZCDqJEaK4YLVSKTV4JaVppBhmktqhjouQWjumjMmmaZoKmozc0fo7fed7/vO+Z/DoQnLN3w7 OjI2kVHEyqPFlJBUBb5LcvZ8kRXsUllGSSsX+wXSn7oRgbSiTsWT5hXOIenCkpYv7cp8gHwo 2WBmK0/WMTBJytTqTZ5M2dtJyIpmswlZ9dga/xoVJPQKZaIjkxnF6Qs3hRGdL+v58Rrz2xur OkEGajHLQTQN2B1GOng5SEhb4k4Eo5MNemGmF+sIttqOcIaemwsL+ZxQ8+BJTR0yCBLnE9Cz V0VyTgEPcp+pESdmEAxPL1GGzSgsgYLfNUa2wgHQoMygDCEC30Ww0D8qMBiHsTdUZm/yuZAP jA/WmPgKTP0oN5ZJfBI0ZY3GCUU4BJpf7Z/Wh2Cl6xFpMMz05c3GPGMZYRvY+FJjLBDYFkbn So0MGIP6g4bg2BoWZndN+RDYWtOaMidgaHfUlDkKQ6W5iOMWAax3Uxw7w3JxsSnjB5ljM8a3 ANyNQKkbNxmOoLs3YeIoqKrVmMohMN+hpfKRW8l/83F8Csqa/lAcO0H5s0WixHhpC+hRzZFl iKxG1izDsjHhbm4SRhF5i2XjYiWxTOJbpP9GbQ3b5xpRm/ZiO8I0Eh8U7Smzgi358mQ2NaYd AU2IrUTFUfolUag89Q6jiLuhSIpm2HZkT5NiW5FvmDTIEofLE5koholnFPsujzazy0BFaeOK nauzA9fl32zfr9qbN80y/jNnXrcdSJh3SmmA+s8OWisP3zRb1+8S1bY7Su0lpHs2x58KU128 Cw7Vpk/89Qx76O/QGfB8rSLRAhJUARY7Xz0ef5RcGmiVac5Obaf7pfzacykcjnGavn/5k6fD shcOnKno216Z5p33O6YMEpNshNzVkVCw8n+25YKRQgMAAA== Archived-At: X-Mailman-Approved-At: Tue, 28 Aug 2018 08:22:22 -0700 Subject: Re: [smime] [Technical Errata Reported] RFC2631 (5480) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2018 01:33:15 -0000 I assume that there should be no serious implementation issues, provided th= at the correct procedure described in section 2.2.1.2 is followed. Furthermore, some implementation request that value "g" be manually assigne= d/specified. This errata aims only to correct the description to keep text, formula and = procedure consistent, and to avoid confusions. Regards, Charlie -----Original Message----- From: Russ Housley =20 Sent: Tuesday, August 28, 2018 12:48 AM To: Peter Gutmann Cc: Eric Rescorla ; Charlie Zhuo ;= Paul Hoffman ; Ben Kaduk ; IETF SMI= ME Subject: Re: [smime] [Technical Errata Reported] RFC2631 (5480) > On Aug 27, 2018, at 11:43 AM, Peter Gutmann w= rote: >=20 > Russ Housley writes: >=20 >> Wow, this has gone a very long time without anyone noticing. As far=20 >> as I can tell, it have not resulted in any implementation errors. >=20 > Has it resulted in any implementations? >=20 > (That's a serious question. What actually uses X9.42 DH, rather than=20 > PKCS #3 DH? That is, I know that some standards reference that RFC,=20 > but what actually implements it and uses it in the real world?). I am aware of an implementation that was done 17 or 18 years ago. I do not= know if it is still being used. Russ