[Anima] [Errata Held for Document Update] RFC8994 (7558)

RFC Errata System <rfc-editor@rfc-editor.org> Mon, 15 January 2024 10:57 UTC

To: william.atwood@concordia.ca, tte+ietf@cs.fau.de, Michael.H.Behringer@gmail.com, sbjarnason@arbor.net
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: rwilton@cisco.com, iesg@ietf.org, anima@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240115105732.CB5831A49952@rfcpa.amsl.com>
Date: Mon, 15 Jan 2024 02:57:32 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/uHgGUaZIeVtk7LfttJm8CTEa3JM>
Subject: [Anima] [Errata Held for Document Update] RFC8994 (7558)
Precedence: list

The following errata report has been held for document update 
for RFC8994, "An Autonomic Control Plane (ACP)". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7558

--------------------------------------
Status: Held for Document Update
Type: Editorial

Reported by: J. William Atwood <william.atwood@concordia.ca>
Date Reported: 2023-07-02
Held by: Rob Wilton (IESG)

Section: 6.2.1

Original Text
-------------
   ACP nodes MUST NOT support certificates with RSA public keys of less
   than a 2048-bit modulus or curves with group order of less than 256
   bits.  They MUST support certificates with RSA public keys with
   2048-bit modulus and MAY support longer RSA keys.  They MUST support
   certificates with ECC public keys using NIST P-256 curves and SHOULD
   support P-384 and P-521 curves.

   ACP nodes MUST NOT support certificates with RSA public keys whose
   modulus is less than 2048 bits, or certificates whose ECC public keys
   are in groups whose order is less than 256 bits.  RSA signing
   certificates with 2048-bit public keys MUST be supported, and such
   certificates with longer public keys MAY be supported.  ECDSA
   certificates using the NIST P-256 curve MUST be supported, and such
   certificates using the P-384 and P-521 curves SHOULD be supported.

Corrected Text
--------------
   ACP nodes MUST NOT support certificates with RSA public keys whose
   modulus is less than 2048 bits, or certificates whose ECC public keys
   are in groups whose order is less than 256 bits.  RSA signing
   certificates with 2048-bit public keys MUST be supported, and such
   certificates with longer public keys MAY be supported.  ECDSA
   certificates using the NIST P-256 curve MUST be supported, and such
   certificates using the P-384 and P-521 curves SHOULD be supported.

Notes
-----
The second paragraph in the original text appears to be a more carefully-written version of the first paragraph.  Therefore the first paragraph should be deleted and the second paragraph retained.

--------------------------------------
RFC8994 (draft-ietf-anima-autonomic-control-plane-30)
--------------------------------------
Title               : An Autonomic Control Plane (ACP)
Publication Date    : May 2021
Author(s)           : T. Eckert, Ed., M. Behringer, Ed., S. Bjarnason
Category            : PROPOSED STANDARD
Source              : Autonomic Networking Integrated Model and Approach
Area                : Operations and Management
Stream              : IETF
Verifying Party     : IESG

[Anima] [Errata Held for Document Update] RFC8994… RFC Errata System