Re: [COSE] [EXTERNAL] RE: Registering Brainpool curves for COSE

Jim Schaad <ietf@augustcellars.com> Wed, 04 March 2020 17:54 UTC

Return-Path: <ietf@augustcellars.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F95A3A13A2 for <cose@ietfa.amsl.com>; Wed, 4 Mar 2020 09:54:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FILL_THIS_FORM_SHORT=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ad0H9v86eo1C for <cose@ietfa.amsl.com>; Wed, 4 Mar 2020 09:54:28 -0800 (PST)
Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 39E3A3A13A1 for <cose@ietf.org>; Wed, 4 Mar 2020 09:54:28 -0800 (PST)
Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 4 Mar 2020 09:54:21 -0800
From: Jim Schaad <ietf@augustcellars.com>
To: 'Mike Jones' <Michael.Jones@microsoft.com>, cose@ietf.org
CC: 'Anthony Nadalin' <tonynad@microsoft.com>
References: <CH2PR00MB067928BA9264A686E4526EE3F5E40@CH2PR00MB0679.namprd00.prod.outlook.com><006001d5f1e2$337e5d40$9a7b17c0$@augustcellars.com> <DM6PR00MB0682421EEDCC414D604B31E1F5E50@DM6PR00MB0682.namprd00.prod.outlook.com>
In-Reply-To: <DM6PR00MB0682421EEDCC414D604B31E1F5E50@DM6PR00MB0682.namprd00.prod.outlook.com>
Date: Wed, 04 Mar 2020 09:54:19 -0800
Message-ID: <00ae01d5f24d$f0102090$d03061b0$@augustcellars.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_00AF_01D5F20A.E1EEB550"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQIDMEWlnPJsT9EZH6kTKWJ6Kt8xzALHmiBiAtLwfSWnsWaGsA==
Content-Language: en-us
X-Originating-IP: [73.180.8.170]
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/YiyV7-xnTOO5Z74Y7q765GGT9Zk>
Subject: Re: [COSE] [EXTERNAL] RE: Registering Brainpool curves for COSE
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2020 17:54:31 -0000

Just remember - IANA assigns numbers.   If you need a testing number before
IANA has done so, use a number less than -65536

 

From: Mike Jones <Michael.Jones@microsoft.com> 
Sent: Wednesday, March 4, 2020 8:56 AM
To: Jim Schaad <ietf@augustcellars.com>; cose@ietf.org
Cc: Anthony Nadalin <tonynad@microsoft.com>
Subject: RE: [EXTERNAL] RE: [COSE] Registering Brainpool curves for COSE

 

Thanks, Jim.  We'll go with route number 3 then.

 

                                                       -- Mike

 

From: Jim Schaad <ietf@augustcellars.com <mailto:ietf@augustcellars.com> > 
Sent: Tuesday, March 3, 2020 9:03 PM
To: Mike Jones <Michael.Jones@microsoft.com
<mailto:Michael.Jones@microsoft.com> >; cose@ietf.org <mailto:cose@ietf.org>

Cc: Anthony Nadalin <tonynad@microsoft.com <mailto:tonynad@microsoft.com> >
Subject: [EXTERNAL] RE: [COSE] Registering Brainpool curves for COSE

 

For myself, I do not believe that the IETF has any interest in the Brainpool
curves.   The different ways would be:

 

1.	Submit a document in the COSE WG - no something I would be
interested in
2.	Submit a document to the ISE - a reasonable way forward in my
opinion
3.	Just put the IANA registrations in to the ISO/ICE document and send
a request to IANA for registration - my preferred way forward.

 

Jim

 

 

From: COSE <cose-bounces@ietf.org <mailto:cose-bounces@ietf.org> > On Behalf
Of Mike Jones
Sent: Tuesday, March 3, 2020 2:54 PM
To: cose@ietf.org <mailto:cose@ietf.org> 
Cc: Anthony Nadalin <tonynad@microsoft.com <mailto:tonynad@microsoft.com> >
Subject: [COSE] Registering Brainpool curves for COSE

 

The working group ISO/IEC JTC 001/SC 17 "Cards and security devices for
personal identification" Mobile Driver's License (mDL) specification uses
the Brainpool curves defined in RFC 5639, M. Lochter et. al., Elliptic Curve
Cryptography (ECC) Brainpool Standard Curves and Curve Generation, March
2010 with COSE..  Thus, it would like to have curve identifiers registered
for them.  Specifically, these curves and intended registration information
are:

 

brainpoolP256r1 RFC 5639 -65537 ECDH/ECDSA 

brainpoolP320r1 RFC 5639 -65538 ECDH/ECDSA 

brainpoolP384r1 RFC 5639 -65539 ECDH/ECDSA 

brainpoolP512r1 RFC 5639 -65540 ECDH/ECDSA

 

Is the best way to register these curves to create an Internet Draft and
submit it to the COSE working group or would you suggest another course to
accomplish this?

 

                                                                Thanks,

                                                                -- Mike