Re: [COSE] Call for adoption of CBOR Object Signing and Encryption (COSE): AES-CTR and AES-CBC

Russ Housley <housley@vigilsec.com> Tue, 27 September 2022 17:55 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F40BC15AE3C for <cose@ietfa.amsl.com>; Tue, 27 Sep 2022 10:55:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.907
X-Spam-Level:
X-Spam-Status: No, score=-1.907 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2cA6ccMIssSx for <cose@ietfa.amsl.com>; Tue, 27 Sep 2022 10:55:09 -0700 (PDT)
Received: from mail3.g24.pair.com (mail3.g24.pair.com [66.39.134.11]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 497A9C14EB1E for <cose@ietf.org>; Tue, 27 Sep 2022 10:55:09 -0700 (PDT)
Received: from mail3.g24.pair.com (localhost [127.0.0.1]) by mail3.g24.pair.com (Postfix) with ESMTP id 118751A1469; Tue, 27 Sep 2022 13:55:08 -0400 (EDT)
Received: from a860b60074bd.fios-router.home (pool-108-56-234-133.washdc.fios.verizon.net [108.56.234.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail3.g24.pair.com (Postfix) with ESMTPSA id E7D181A157B; Tue, 27 Sep 2022 13:55:07 -0400 (EDT)
From: Russ Housley <housley@vigilsec.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_A0A441DF-A17C-45D6-8B51-935CAF1433BC"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.21\))
Date: Tue, 27 Sep 2022 13:55:07 -0400
References: <CO1PR00MB13086039D60B9997AE5F5928F54E9@CO1PR00MB1308.namprd00.prod.outlook.com>
To: Mike Jones <Michael.Jones@microsoft.com>, "cose@ietf.org" <cose@ietf.org>
In-Reply-To: <CO1PR00MB13086039D60B9997AE5F5928F54E9@CO1PR00MB1308.namprd00.prod.outlook.com>
Message-Id: <A919EB69-2933-441E-B8A5-21589134A032@vigilsec.com>
X-Mailer: Apple Mail (2.3445.104.21)
X-Scanned-By: mailmunge 3.09 on 66.39.134.11
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/6IHuZegq2lDl_Oii5bZ_AvV2Nwo>
Subject: Re: [COSE] Call for adoption of CBOR Object Signing and Encryption (COSE): AES-CTR and AES-CBC
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Sep 2022 17:55:10 -0000

The SUIT WG needs this draft to support firmware encryption. As an author, you will not be surprised that I support adoption, and obviously, I will continue to work on it.
 
Without this the algorithm registrations in this draft, it will not be possible to use COSE for encryption of firmware images on IoT devices.

Russ
 
From: COSE <cose-bounces@ietf.org <mailto:cose-bounces@ietf.org>> On Behalf Of Mike Jones
Sent: Thursday, September 22, 2022 7:20 PM
To: cose@ietf.org <mailto:cose@ietf.org>
Cc: housley@vigilsec.com <mailto:housley@vigilsec.com>
Subject: [COSE] Call for adoption of CBOR Object Signing and Encryption (COSE): AES-CTR and AES-CBC
 
This note starts a two-week call for adoption of https://datatracker.ietf.org/doc/html/draft-housley-cose-aes-ctr-and-cbc-00 <https://datatracker.ietf.org/doc/html/draft-housley-cose-aes-ctr-and-cbc-00> – ending on Thursday, October 6th.
 
Please reply either expressing support for adoption or stating your objections.
 
                                                       Thank you,
                                         -- Mike (COSE co-chair)