Re: [COSE] Key identifier of type bstr / int

Christian Amsüss <christian@amsuess.com> Wed, 23 March 2022 09:25 UTC

Return-Path: <christian@amsuess.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2C833A0CA9 for <cose@ietfa.amsl.com>; Wed, 23 Mar 2022 02:25:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.91
X-Spam-Level:
X-Spam-Status: No, score=-6.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0h4XzVokq4VJ for <cose@ietfa.amsl.com>; Wed, 23 Mar 2022 02:25:02 -0700 (PDT)
Received: from smtp.akis.at (smtp.akis.at [IPv6:2a02:b18:500:a515::f455]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB3CC3A0C68 for <cose@ietf.org>; Wed, 23 Mar 2022 02:25:00 -0700 (PDT)
Received: from poseidon-mailhub.amsuess.com ([IPv6:2a02:b18:c13b:8010:a800:ff:fede:b1bd]) by smtp.akis.at (8.17.1/8.17.1) with ESMTPS id 22N9Or3x068139 (version=TLSv1.2 cipher=ECDHE-ECDSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 23 Mar 2022 10:24:53 +0100 (CET) (envelope-from christian@amsuess.com)
X-Authentication-Warning: smtp.akis.at: Host [IPv6:2a02:b18:c13b:8010:a800:ff:fede:b1bd] claimed to be poseidon-mailhub.amsuess.com
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [IPv6:2a02:b18:c13b:8010:a800:ff:fede:b1bf]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id 2033CD0; Wed, 23 Mar 2022 10:24:49 +0100 (CET)
Received: from hephaistos.amsuess.com (unknown [IPv6:2a02:b18:c13b:8010:a4d5:b3ce:1ea4:f0db]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id C7EF171; Wed, 23 Mar 2022 10:24:48 +0100 (CET)
Received: (nullmailer pid 3316004 invoked by uid 1000); Wed, 23 Mar 2022 08:47:50 -0000
Date: Wed, 23 Mar 2022 09:47:50 +0100
From: Christian Amsüss <christian@amsuess.com>
To: Carsten Bormann <cabo@tzi.org>
Cc: Michael Richardson <mcr+ietf@sandelman.ca>, goran.selander@ericsson.com, Orie Steele <orie@transmute.industries>, Laurence Lundblade <lgl@island-resort.com>, "cose@ietf.org" <cose@ietf.org>
Message-ID: <YjretsAL2oVssg5K@hephaistos.amsuess.com>
References: <EDFDB6E4-2BDE-4E2E-9CF0-D771E2DEF3C6@ericsson.com> <823C00C2-4F6C-4DF5-99B0-87D8524D4A9C@island-resort.com> <C059B669-4C5D-4980-A665-96A39F4457C3@island-resort.com> <AM4PR0701MB21958541C07CEA44DB1B1578F4169@AM4PR0701MB2195.eurprd07.prod.outlook.com> <CAN8C-_+3sWckZKo7KS2fsPU4pBHo+NNGgQpxg7p8LytFX01eEw@mail.gmail.com> <AM4PR0701MB2195D76D8CFCC873C1D05A04F4169@AM4PR0701MB2195.eurprd07.prod.outlook.com> <CAN8C-_K4EfFSar9H_QR+cV_pz+xhXtWA=pKK+rFv241E5DQofQ@mail.gmail.com> <DC1C335A-629D-4E4F-97BD-B4CA3519EDC6@island-resort.com> <641639.1647901233@dooku> <3724F698-FB9A-44F2-B942-A6034B9D207E@tzi.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="Lwu1S4U02E+W/2iA"
Content-Disposition: inline
In-Reply-To: <3724F698-FB9A-44F2-B942-A6034B9D207E@tzi.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/Yahys_JywxHnmDEOsO1JRZUASJE>
Subject: Re: [COSE] Key identifier of type bstr / int
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Mar 2022 09:25:07 -0000

Hello Carsten, COSE,

On Tue, Mar 22, 2022 at 12:00:24AM +0100, Carsten Bormann wrote:
> Now, there is also API compatibility — can you upgrade the COSE
> library without upgrading the using application.

I think this is a false gain. It will look like the API surface did not
changed (because the API can still represent every value as bytes as it
did before), but the application would also need to communicate to the
API whether or not the peer would accept an int-valued kid,
reintroducing the distinction.

(I also favor keeping the value spaces distinct because it makes best
use of the existing code points, and because additive typing is
something I consider good CBOR practice).

BR
c

-- 
To use raw power is to make yourself infinitely vulnerable to greater powers.
  -- Bene Gesserit axiom