IETF Logo Mail Archive

Re: [COSE] tstr values for kty, alg, crv, etc.

Michael Richardson <mcr+ietf@sandelman.ca> Sat, 07 August 2021 23:22 UTC

Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BFA573A0BD3 for <cose@ietfa.amsl.com>; Sat, 7 Aug 2021 16:22:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uTqK9qGGEGAS for <cose@ietfa.amsl.com>; Sat, 7 Aug 2021 16:22:26 -0700 (PDT)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4AB93A0BD2 for <cose@ietf.org>; Sat, 7 Aug 2021 16:22:25 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 22410389CF; Sat, 7 Aug 2021 19:26:51 -0400 (EDT)
Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id Rqct8_ArtraY; Sat, 7 Aug 2021 19:26:46 -0400 (EDT)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 91282389BC; Sat, 7 Aug 2021 19:26:46 -0400 (EDT)
Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 8DE6925; Sat, 7 Aug 2021 19:22:18 -0400 (EDT)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Laurence Lundblade <lgl@island-resort.com>, AJITOMI Daisuke <ajitomi@gmail.com>, Carsten Bormann <cabo@tzi.org>, jodonogh@qti.qualcomm.com, cose@ietf.org
In-Reply-To: <313B433A-ACCA-4D2E-AA20-53A6CAA4E92A@island-resort.com>
References: <CAFWvErVLfud5ffyzKdBJmzm7Wj+=osfZ0u7tKVpniicZDYqjxg@mail.gmail.com> <815DB7E9-555A-4A7D-B3DE-CC807DE3A222@tzi.org> <41E79CBD-04D1-4C0F-BEE3-4F63780D514E@island-resort.com> <CAFWvErWfSkzHGwLaP0t7RsufgkMiryrHkp4zWoVsRGR718Dqow@mail.gmail.com> <313B433A-ACCA-4D2E-AA20-53A6CAA4E92A@island-resort.com>
X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Date: Sat, 07 Aug 2021 19:22:18 -0400
Message-ID: <9734.1628378538@localhost>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/OMUvWedsvI6wRaXP9ActKApbZIM>
Subject: Re: [COSE] tstr values for kty, alg, crv, etc.
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Aug 2021 23:22:31 -0000

Laurence Lundblade <lgl@island-resort.com> wrote:
    > I don’t think tstr can be removed from the standard. That would break
    > backwards compatibility. Maybe a strong recommendation could be added
    > with the comment that many implementations don’t support tstr.

Any system built upon COSE that does not support tstr as a key is already
broken if many implementations don't support it.

We can deprecate tstr as key.
We can say that no signer MUST NEVER emit this again.
We can say that a verifier MAY accept tstr as a key.

    > There is a revision of 8152 in process right now called 8152bis. That
    > seems like the place to do it.

It is pretty late to do this.  8152bis is in AUTH48, we need the proxy-author
and WG chairs to agree to this immediately.

I agree that having two ways things is not a good thing.

--
Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide

v2.23.0 | Report a Bug | By Email