Received-SPF: Pass (protection.outlook.com: domain of endress.com designates
 20.234.88.31 as permitted sender) receiver=protection.outlook.com;
 client-ip=20.234.88.31; helo=iqsuite.endress.com; pr=C
From: =?Windows-1252?Q?Bj=F6rn_Haase?= <bjoern.haase@endress.com>
To: Carsten Bormann <cabo@tzi.org>
Thread-Topic: [CFRG] Where should test vectors live?
Thread-Index: AQHbCy6XcSj7AEVNtESN1OVWgx3QR7JgTcqQ
Date: Fri, 20 Sep 2024 08:18:52 +0000
Message-ID: 
 <DU0PR05MB9720A88DCA9BC057068D64F3836C2@DU0PR05MB9720.eurprd05.prod.outlook.com>
References: 
 <CAG2Zi20N98cxpgjfRe6gWw1SQEoux+5P3NhLBFUfUHk_udYeFg@mail.gmail.com>
 <CACsn0cmLjjyxcKsiHio-Vu-8jo80FQ=aFtoO3GD69jC5kUig9A@mail.gmail.com>
 <DU0PR05MB9720F36FCE38A9477411FB9B836C2@DU0PR05MB9720.eurprd05.prod.outlook.com>
 <4A43A49C-443C-4B8C-8795-021ADEEF733E@tzi.org>
In-Reply-To: <4A43A49C-443C-4B8C-8795-021ADEEF733E@tzi.org>
Accept-Language: de-DE, en-US
Content-Language: de-DE
msip_labels: 
 MSIP_Label_2988f0a4-524a-45f2-829d-417725fa4957_ActionId=79a7f7de-d4ca-4fa3-9a94-ec10a8b79f5b;MSIP_Label_2988f0a4-524a-45f2-829d-417725fa4957_ContentBits=0;MSIP_Label_2988f0a4-524a-45f2-829d-417725fa4957_Enabled=true;MSIP_Label_2988f0a4-524a-45f2-829d-417725fa4957_Method=Standard;MSIP_Label_2988f0a4-524a-45f2-829d-417725fa4957_Name=2988f0a4-524a-45f2-829d-417725fa4957;MSIP_Label_2988f0a4-524a-45f2-829d-417725fa4957_SetDate=2024-09-20T07:52:44Z;MSIP_Label_2988f0a4-524a-45f2-829d-417725fa4957_SiteId=52daf2a9-3b73-4da4-ac6a-3f81adc92b7e;
Authentication-Results-Original: dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=endress.com;
x-ms-traffictypediagnostic: 
	DU0PR05MB9720:EE_|DU0PR05MB10309:EE_|AMS0EPF000001AC:EE_|DU2PR05MB10646:EE_
X-MS-Office365-Filtering-Correlation-Id: 5253cc5e-1d5b-43ba-94e5-08dcd94cdeb9
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: 
 BCL:0;ARA:13230040|366016|376014|1800799024|38070700018;
X-Microsoft-Antispam-Message-Info-Original: 
 =?Windows-1252?Q?k7x/dlFmq6x8PWKYjsvmJJqwf/zbtTqNZl74K57r6z0J0v0tY1w//yee?=
 =?Windows-1252?Q?I8Nv2zHzFQD6MkIB+RcTxDOoqWE86C/8djZ8mCrfZt+a5MUQEY98S2bM?=
 =?Windows-1252?Q?s8q+yymCAJb4EPfrcgWM5foYnsFO+sdB7sb65XJlTT9c3Xku8UCkLAgL?=
 =?Windows-1252?Q?7X6Hd2j7POYSohahbcMUkCenzXjhpSHSusf7v/5+ILZSp7/+FUvflr6/?=
 =?Windows-1252?Q?I+96QG0xa6VAPBXf/bkPuv9w/qgVEjjDiwkCG8LIfhmqe6Fi6LdchxKT?=
 =?Windows-1252?Q?i9VFRzyom9CvFGy4C+bKnJpQtmUhHye56A5pHsCaGuudDvoMNpnBBF2m?=
 =?Windows-1252?Q?Hk7yXVwoVwN96JUmuk4aomh2CzFZBu6Z2wv4vU+RXOfHXgSqZy2k9Yr0?=
 =?Windows-1252?Q?mEjEt1d/SMDuwKKt6UcL1cPaxsostMKqAQwKQpj1914u9Xeag1jmsFKV?=
 =?Windows-1252?Q?ggoHDJoEJUKmZfrrbqzJKHePGrS+qRUJml40a6mzxWXh0PjZKAN1QL1q?=
 =?Windows-1252?Q?Cyn232e5ySunPQgNX05xkzfZXmlwTuBz7rr4DQN6MQapFcy35/i7Boag?=
 =?Windows-1252?Q?zAPMR8+VbceQKIxhBekUp1l1ZgSrRhF9jdhyRRY5Km3D73gC7lenX4V7?=
 =?Windows-1252?Q?rn6Bq8N78cz2995c/9r8rnPZW01KDv4SHf4fJNbCZrzSDIYx/5SL3r6R?=
 =?Windows-1252?Q?notUZCJtlCjr+qZ8DxGffYEL0RDN40j4Na6Zt9a5LpVGVX+7qNcgj3eS?=
 =?Windows-1252?Q?am+pcT3p1UfAOiv61EreZZbxP4/w652QYMXlsHQwsISOjVLQV08CleEg?=
 =?Windows-1252?Q?NGrMq4F2eRWxqclTULGgaFpXzoP4+Ykroe3eHed054L/0jBdeNkqEDrF?=
 =?Windows-1252?Q?s0V6CMY2CB4pki6jOUJt5Nh6gfEh6FDEZTb+HxH7XGxfRHJ5SF3XSUo6?=
 =?Windows-1252?Q?syD4dqCta14HHHUVEVm/jrvYh0aWW5a3rPVCF3wKCc7JARfi8vckBZRs?=
 =?Windows-1252?Q?sVOoFBHn/8JQXwLS79IW1oGvYJICgeLELHhQeRve+ZIqhKjHYWEBspCI?=
 =?Windows-1252?Q?mrrjZi3+9GQqTb8g6mBaoSnZs1H9YjPaleF7MvAwzdradFWgbamUUOAC?=
 =?Windows-1252?Q?DIxFw0Wm+La64QtSo6n1cYYNo+pFEH3f6wiLXCYCRQRu2hzSiDtMrSXK?=
 =?Windows-1252?Q?9v3dQ9g8XJMKf1VbAhiakwFF3i0flRkF4epiVnY+K/rD+UnG+UCaTIzV?=
 =?Windows-1252?Q?zgCcAGKszm/xlRUKiDvecNDnL3YGq+sbM1ERdz8h9ReI7cqWaFWKUMCi?=
 =?Windows-1252?Q?AclEDHLLBVnE4mSgi53OgILpjYhwzVqxNeuxBXeQm9ccWlgxEQ+3s6/e?=
 =?Windows-1252?Q?2c9VRoSIVriJ+yI6HahBB/Z3dzCU9ag8G5EShlC7Iu3rs+MaQue3sh/b?=
 =?Windows-1252?Q?KfRkxXZSEfjaxAmGFu+SdA=3D=3D?=
X-Forefront-Antispam-Report-Untrusted: 
 CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR05MB9720.eurprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024)(38070700018);DIR:OUT;SFP:1101;
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR05MB10309
X-OriginalArrivalTime: 20 Sep 2024 08:18:53.0944 (UTC)
 FILETIME=[BB335F80:01DB0B35]
X-iqsuite-process: processed
X-Trailer: 1
X-iqsuite-SMTP: 1
X-GBS-PROC: uEiFNyalHHL8/kg4IBN2VanAfXpObHcnzmwPXVMABO3d2dF1i7wSLnqqFU2ar3l/
X-GBS-PROCJOB: 
 edmvOi6xVBRTCF/SI6Wo77sJE9rznkFknNZ0E1qdeC/NVmwGfqjzC25BaU1ZkrR8
X-GRP-TAN: CNEUEHS0017@472B1547B7B4483FACEA57420462357F
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: 
 AMS0EPF000001AC.eurprd05.prod.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: 
	ce38c554-0dc7-40cf-764e-08dcd94cdcc6
X-Microsoft-Antispam: 
	BCL:0;ARA:13230040|35042699022|1800799024|36860700013|82310400026|376014;
X-Microsoft-Antispam-Message-Info: 
	=?Windows-1252?Q?ol75/VA/teLhHwG/4yO4p5NVC4BD9JOkTc8wl4C2v77nTu3k+e3/wRWa?=
 =?Windows-1252?Q?Q5w3mZ4lPiBCnGVW1OONrMVVYNPYn+2fFtj+o+zHtnboeOvRxhRtpW2i?=
 =?Windows-1252?Q?ADK1DvMirqyKWeh6/cIWRJWCVmhuCZ8MNG/5Lg2cd1W6c80VrSUN6w//?=
 =?Windows-1252?Q?cuNt0Q2BJ4aw9r7VBtx6KN4FvIpyPmuSIiNN82PHpZxIjDRwVHKPyyDe?=
 =?Windows-1252?Q?aLT2TIu7y/zpCcLzPKt8VZtPuo+LKCI3QsCzU558yScxAj7hFUhTx5aN?=
 =?Windows-1252?Q?ol9P1lSZq6kFh2r09fi3YYDNvzT+mATQ+uZX+Iw+NsFc7rdL2KkwSUqM?=
 =?Windows-1252?Q?kriBHBBnSjvT7XLkoR/GvYjXRjT1Z/uqJqbN6kTib2PO2byGguBCbyjO?=
 =?Windows-1252?Q?irDNIHy1ESi6x5nq37+wjXxa4l2PgNLKtx0pZ3S6ewlFAuOVTTuA2hv8?=
 =?Windows-1252?Q?xi3pqNF96Jkb/JELqu1113qiZGTRIiu77wg8ViGxiKIolF9bs4fjf3s5?=
 =?Windows-1252?Q?bIADAra9B8A0hNAAqIPmdfv5MmF0UUqmU10T7ARKIqIfJeAvEMnjKLxK?=
 =?Windows-1252?Q?zP+0MbcBT/EUbSJ8Y8UXefyipkg+je6a+IHSr9HEohZTxS6Aofs93kiQ?=
 =?Windows-1252?Q?bY8tyQOph932IJePP4+GDJgcr6+FVI1VcMnTGp4sMyWsNdwx03zlX9dz?=
 =?Windows-1252?Q?9rh4hPbR382rgAMigYt9JQjawCBENDl2g5Yyd4QgmUL9PEL2ZgRcbQKt?=
 =?Windows-1252?Q?8NcldwVTbI5bpthGSXrcAbtFiZtXu1vr5Xu/pjdlnkekJ7rcMO9byk+j?=
 =?Windows-1252?Q?bZzOgiJVwf7CpCGXdqqZ+9NxRtmdI6FU79D9Urzaz7wdvkccpMAZuDmt?=
 =?Windows-1252?Q?qr8UgwO9um0hQ2nXVg35jK21aQ1kkA4UBSyu6SxGDB0mVchbG5wkTi2i?=
 =?Windows-1252?Q?tWWq4z98O+/fEcG/n2r5Qc14YVQKBFj53i54AB1ImDDM+mtD+sHy9Oxe?=
 =?Windows-1252?Q?Ukxzg43JXDamXyuGjRCj43D+DNsGs1U5OLj4NBksoxbvNTcUTWkHvL1V?=
 =?Windows-1252?Q?HdPED303NGyHnWbdZOGcQ3Sy1wOFHKxkSPQZEYxTnoLVyhCAZtCxT+4J?=
 =?Windows-1252?Q?syuTaSzUWcN0AR9+icxd7QlDGkyLbX94xLz2ff+5NUSjeVVTqhZTsKuK?=
 =?Windows-1252?Q?vKtwweZNKOBOAYPyzjQA4rKg1o0N6C/KgQRthNSaeU7gguNd9/VKJsUn?=
 =?Windows-1252?Q?CKdzigkb9t/fPcz8QfqghKlL8MbVi0FxCaUS7bc0EDwrue5eRawwr/x0?=
 =?Windows-1252?Q?J19dpvAKAdJwMPsMp7+8TWmXsL83kzopjDb20pz+Ste7ggPaeB7EnlxO?=
 =?Windows-1252?Q?nOh7AyJhToQm6cXs/74Bnf3ADZgSMBNZExvCJ9/a7JOHO+kujC6RCttR?=
 =?Windows-1252?Q?VjMiEEsr9DroW/AkdFiifFo5j66wMKFLn4gTCmOAjEAu1hop+oCsTA5y?=
 =?Windows-1252?Q?ON7Y/Q1xZSplvc1YONgxx69nRQccJg=3D=3D?=
X-Forefront-Antispam-Report: 
	CIP:20.234.88.31;CTRY:IE;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:iqsuite.endress.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(35042699022)(1800799024)(36860700013)(82310400026)(376014);DIR:OUT;SFP:1101;
X-OriginatorOrg: endress.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Sep 2024 08:18:55.6432
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 5253cc5e-1d5b-43ba-94e5-08dcd94cdeb9
X-MS-Exchange-CrossTenant-Id: 52daf2a9-3b73-4da4-ac6a-3f81adc92b7e
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: 
 TenantId=52daf2a9-3b73-4da4-ac6a-3f81adc92b7e;Ip=[20.234.88.31];Helo=[iqsuite.endress.com]
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: 
 TreatMessagesAsInternal-AMS0EPF000001AC.eurprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR05MB10646
Message-ID-Hash: 4LF4T2GOUOX3NFPEADIWCQHVRMTUZZGC
X-Message-ID-Hash: 4LF4T2GOUOX3NFPEADIWCQHVRMTUZZGC
X-MailFrom: bjoern.haase@endress.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
CC: CFRG <cfrg@irtf.org>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: =?utf-8?q?=5BCFRG=5D_Re=3A_Where_should_test_vectors_live=3F?=
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/cfrg/aHO9Xz5ORV-UPn7sEkJf8MJ9zpY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>

Hy Carsten,

thank you for the pointer. It seems that actually the line-wrap seemingly=
 *is* handled already with the kramdown environment we are currently usin=
g.
I.e. we actually could add longer lines that automatically get wrapped.
However, we might get problems with automatically reading the wrapped tex=
t result automatically for re-constructing the test vectors.

My present idea is that for the time being, we might be best off with not=
 directly including JSON but including BASE64-Snipplets encoding the JSON=
 files as part of the appendix subsections:

One might be first have a section for the =22humans=22 with a hex encodin=
g of the test vectors followed by a section with the
corresponding data with a base64 encoding of a JSON dictionary.

I.e. in addition to a human readable section like

Inputs
    H   =3D SHA-512 with input block size 128 bytes.
    PRS =3D b=27Password=27 ; ZPAD length: 109 ; DSI =3D b=27CPace255=27
    CI =3D b=27oc=5Cx0bB_responder=5Cx0bA_initiator=27
    CI =3D 6f630b425f726573706f6e6465720b415f696e69746961746f72
    sid =3D 7e4b4791d6a8ef019b936c79fb7f2c57
Intermediate results:
    generator_string(G.DSI,PRS,CI,sid,H.s_in_bytes):
    (length: 172 bytes)
      0843506163653235350850617373776f72646d000000000000000000
      00000000000000000000000000000000000000000000000000000000
      00000000000000000000000000000000000000000000000000000000
      00000000000000000000000000000000000000000000000000000000
      000000000000000000000000000000001a6f630b425f726573706f6e
      6465720b415f696e69746961746f72107e4b4791d6a8ef019b936c79
      fb7f2c57
    hash generator string: (length: 32 bytes)
      92806dc608984dbf4e4aae478c6ec453ae979cc01ecc1a2a7cf49f5c
      ee56551b
    decoded field element of 255 bits: (length: 32 bytes)
      92806dc608984dbf4e4aae478c6ec453ae979cc01ecc1a2a7cf49f5c
      ee56551b
  Outputs:
    generator g: (length: 32 bytes)
      64e8099e3ea682cfdc5cb665c057ebb514d06bf23ebc9f743b51b822
      42327074


One would first generate a json file with the corresponding test vectors =
(which cannot be integrated as-is in an RFC)

{
    =22PRS=22: =22UGFzc3dvcmQ=3D=22,
    =22CI=22: =22b2MLQl9yZXNwb25kZXILQV9pbml0aWF0b3I=3D=22,
    =22sid=22: =22fktHkdao7wGbk2x5+38sVw=3D=3D=22,
    =22g=22: =22ZOgJnj6mgs/cXLZlwFfrtRTQa/I+vJ90O1G4IkIycHQ=3D=22,
}

As the JSON encoding might have too long lines, one would not be adding t=
he plain JSON file but a base64 encoding of the above JSON file, such as

  ### Cgp7CiAgICAiUFJTIjogIlVHRnpjM2R2Y21RPSIsCiAgICAiQ0kiOiAiYjJNTFFsOXl=
aWE
  ### 53YjI1a1pYSUxRVjlwYm1sMGFXRjBiM0k9IiwKICAgICJzaWQiOiAiZmt0SGtkYW83d=
0di
  ### azJ4NSszOHNWdz09IiwKICAgICJnIjogIlpPZ0puajZtZ3MvY1hMWmx3RmZydFJUUWE=
vSS
  ### t2SjkwTzFHNElrSXljSFE9IiwKfQogIAo=3D

.

The advantage of doing so is that it is completely clear from the human-r=
eadable context for *which* actual
cipher suite or settings the test vectors apply. The end-user has a binar=
y encoding at hand that can be made
easily machine-readable.

JSON seems to be the most portable format. In case of CPace I already hav=
e received requests for JSON test vectors.

What do you think=3F Does anybody wee a way to avoid the additional Base6=
4 encoding layer, such that JSON
Content could be directly integrated in a RFC as-is=3F

Yours,

Bj=F6rn




Mit freundlichen Gr=FC=DFen | Best Regards=20

Dr. Bj=F6rn Haase=20


Senior Expert Electronics | TGREH Electronics Hardware

Endress+Hauser Liquid Analysis

Endress+Hauser Conducta GmbH+Co. KG | Dieselstrasse 24 | 70839 Gerlingen =
| Germany
Phone: +49 7156 209 10377
bjoern.haase@endress.com |  www.ehla.endress.com=20





Endress+Hauser Conducta GmbH+Co.KG
Amtsgericht Stuttgart HRA 201908
Sitz der Gesellschaft: Gerlingen
Pers=F6nlich haftende Gesellschafterin:
Endress+Hauser Conducta Verwaltungsgesellschaft mbH
Sitz der Gesellschaft: Gerlingen
Amtsgericht Stuttgart HRA 201929
Gesch=E4ftsf=FChrer: Dr. Manfred Jagiella

=A0
Gem=E4ss Datenschutzgrundverordnung sind wir verpflichtet, Sie zu informi=
eren, wenn wir personenbezogene Daten von Ihnen erheben.
Dieser Informationspflicht kommen wir mit folgendem Datenschutzhinweis (h=
ttps://www.endress.com/de/cookies-endress+hauser-website) nach.

=A0



Disclaimer:=20

The information transmitted is intended only for the person or entity to =
which it is addressed and may contain confidential, proprietary, and/or p=
rivileged material. Any review, retransmission, dissemination or other us=
e of, or taking of any action in reliance upon, this information by perso=
ns or entities other than the intended recipient is prohibited. If you re=
ceive this in error, please contact the sender and delete the material fr=
om any computer. This e-mail does not constitute a contract offer, a cont=
ract amendment, or an acceptance of a contract offer unless explicitly an=
d conspicuously designated or stated as such.
=20


-----Urspr=FCngliche Nachricht-----
Von: Carsten Bormann <cabo@tzi.org>
Gesendet: Freitag, 20. September 2024 09:27
An: Bj=F6rn Haase <bjoern.haase@endress.com>
Cc: Watson Ladd <watsonbladd@gmail.com>; Christopher Patton <cpatton@clou=
dflare.com>; CFRG <cfrg@irtf.org>
Betreff: Re: [CFRG] Where should test vectors live=3F

On 20. Sep 2024, at 08:49, Bj=F6rn Haase <bjoern.haase=3D40endress.com@dm=
arc.ietf.org> wrote:
>
> So far we have integrated ANSI-C test vectors in the draft. I did try t=
o do similarly for JSON, however it seems that for JSON we will not be ab=
le to follow the =93max number of characters per line=94 requirement
> for I-D and RFC.

You can use RFC 8792 to handle that requirement.
(kramdown-rfc-extract-sourcecode automatically reverses that processing, =
and kramdown-rfc has several ways to automatically apply the processing w=
here needed only.)

Gr=FC=DFe, Carsten

[1]: https://www.rfc-editor.org/rfc/rfc8792
=22RFC 8792: Handling Long Lines in Content of Internet-Drafts and RFCs=
=94