Re: [COSE] Consensus Call: RSA 1.5

There’s consensus for dropping RSA 1.5 encryption support entirely, so that will be done.

There’s also enough support for supporting RSA 1.5 signatures that putting them into an auxiliary draft sounds like the best approach. The chairs would like to ask for volunteers to edit such an auxiliary draft.

 — Justin, your COSE chair

> On Nov 7, 2015, at 3:01 AM, Justin Richer <jricher@MIT.EDU> wrote:
> 
> At the Yokohama meeting, the chairs agreed to do a consensus call regarding the definition of RSA 1.5 algorithms within the messages draft or an auxiliary draft. This functionality is analogous to the RS* series of signature methods in JWS and the RSA1_5 encryption method in JWE. The five positions we are asking the working group to consider and voice their support for are:
> 
> A) Drop all support for RSA 1.5 signatures and encryption.
> B) Define RSA 1.5 support in an auxiliary draft.
> C) Define RSA 1.5 support in the main draft (note that this option was previously discussed on the list and did not find favor at the time, so if you want it back you’ll need to make a strong case).
> D) You need more information to decide.
> E) You don’t give a flying rat about RSA 1.5.*
> 
> Note that this is distinct from RSA PSS support which is being discussed in a separate thread.
> 
> The consensus call will remain open for two weeks from today, closing on November 21, 2015; at which time, hopefully we will have a clear answer and direction for our editor.
> 
> Thank you,
> — Justin & Kepeng, your COSE chairs
> 
> * I promised those in the room at Yokohama to offer a flying rat option, for which I am deeply sorry.
> _______________________________________________
> COSE mailing list
> COSE@ietf.org
> https://www.ietf.org/mailman/listinfo/cose