Re: [COSE] Looking for COSE libraries and open source implementations

"g_e_montenegro@yahoo.com" <g_e_montenegro@yahoo.com> Wed, 28 July 2021 01:32 UTC

Return-Path: <g_e_montenegro@yahoo.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 177BB3A1568 for <cose@ietfa.amsl.com>; Tue, 27 Jul 2021 18:32:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OchQFk4AItIZ for <cose@ietfa.amsl.com>; Tue, 27 Jul 2021 18:32:25 -0700 (PDT)
Received: from sonic309-15.consmr.mail.bf2.yahoo.com (sonic309-15.consmr.mail.bf2.yahoo.com [74.6.129.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E1CE3A1566 for <cose@ietf.org>; Tue, 27 Jul 2021 18:32:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1627435943; bh=IEZJYFQw0mdofZlGInTXP3qaw7B/jlbhmC1B3ImFiyo=; h=Date:From:To:In-Reply-To:References:Subject:From:Subject:Reply-To; b=LJqBPKgEbY/LLK3CqQvgofe6Rj9T0c89MiMeFzs24x8QmrRTcu+cM6uLFHncBU8Jg6fCyMcIUs6T4D2qbag4xAUOf/sN2JLlT8gmKRiAV6M+Lp6lpcvt0G+Bj6Eugq3QW4p+X6jpq5e4Gqm718B7gQLAyJy3t0WYSLRb09iNkkLR7qyYSKBBYa2Q2BPYiX/0pXj57mOQdyyNdZYxIXenmMEdNd0UXNSHufDQ6oRxsEm7nlBFdwR6PvPJL4aAS9mTC92NLkvhd5W/RXTrbnKGCDc17/JxH/EzzeAXNsBl7a0QEfWLqiZW4pzh8ABIbi9fvZ+NekcemyeO/o2uDz1VtA==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1627435943; bh=0NOCC3yZDnI7CmCJ+JpWJqaErxJ4wnS+8mG/0DoYM7N=; h=X-Sonic-MF:Date:From:To:Subject:From:Subject; b=kwXlgmFu+AAm+dAbV0w7Q6soemv1DuGiYUJHjmVG/M1wR3qxLV3AjB99hJrcabeV8ubrzPdh7vg5ZGgOKHsfaAKw2ET1Isz99haOizj8Ar66W+RekFVb5l7drjznzQmvMx76aiapK3ygkfyz0RbksHr1sS0usWwNAAOhZqdqJwOcJDxhjW4DmD+7QsnTLnD1fWFYPUpha0e5kW8nyko9m0mdOne/Z4adPH2TM116aTMYCwOnhMT+hyf/OANvj51GoT4PPlUkpyADQuOz4p1QszUWP7vF1N7IlfOgCzv0iIznLlR5LG5/d8n2bF8e9sX5S8KsjonBboG76iVqoT6Xlw==
X-YMail-OSG: sNDgeTYVM1nhelPjUSJinLwie6jYtDhceggMA8cG8AeKqe3PAR8vhD.YWiEu6zm F0WMqIp_6DQ89jyuPMDnJTfnLhXI0hsCObCHWex_1R1eUQ5Iij7jFOoNPC.idDkgv8jYoNe2cklR nw.HbETvfOxRYCbt1O3a8FNtVAeHuSRnWtaAKh8To3iRjEs5sC.WMXU9F_xKM1gbPUWhNY53AFQd Xh7jtoRs2Llt12vRXzHy92IOH7QLvVVHmlfHDkqa1yh3HV94dE_XRRVLV8ahMknSC9Uf0LNKACYw V6QC5754zi75qbvr_Khd0NNmX8gwdWvWLOn.DA8CeHgvLlj9vNUI70owvRo4n4Heoz6e7DLAFrpD 7M7f8T.hIT2I6pzKQu9nGz.8lJfagCF8Mc_kkfQTpO8ciE9rwZRoAOx.vTeYVCL5WEtAJFILv.iN 40.WJ4.p0.jZbSqaEax0dJn5tltZ8hvNuXKez0nWdsb9LA7gNMaTyS4qcaE_wbas_KDQGgAzJez1 bJ6EV77kFng8fKiqNU_j_rtUIPqkby7hIsC16cDu1eOOb3599zTmlM617mArJK9OP8Tio644NNtm xE_nVoEi4wO4s9X34gBmCgU1a99aV51z6hIUaPxDkBQe7W1bmnF458J9gx4mECkT9HpXLUhgJ9aS 7Al0wjohELnzE_2ZC9JdHc87Zam0PWOm77bheRbdFeqixtfhz9uejz9v82lVc.xfpIDJ_YqJGXBf kj3tA_rqKMuUtsAW._WKgwfyxMVloxgkz7yl9ikUpJywMhD5VPNQwRjtaYXemcloN6.kNP_AFWWW H0hhTpV9_XMXC8kPrVS3RzbZ3d2dbGTzQ_lOFfZ7_vjuV13XRy.kBcb6bK0eI1YeQ9jv1Gql81CS TMFZK5n_CxTHbQTMANC0DIGm5nlBo3E_Yn6N1pcaRAPx2eutffdI61QM_V8jaPsCKEdyybPmLEQR RLSxgkoAmbMbMXXtfr0S9rqG8JnFPyZ3Y7dsUKmL0VeIlstc462P5tpXgyc_b6RD0KMZojZXh_6t Pm7onyuWuczLaMy0pNVmMq2lqXnmwVS3qtHximj8fsMP0T6EekrFEnSDrbXijVEcWSKzo4UrYt3C FD.Zwz6Js5U5fN0fzM36RO5upoNk9IruC_rvW0WH3tErGx7AJGYODq29tj6u2F63DrYXY8obf1IJ WS.EO.f_5C6Fk.T.MkUe7tna3FWzKjF1vNOoEVliZ2gBodej1XDb3k5BYX4GvfIUQQdsgxKDfx3c xReqlowWmaS7fvsrhRlkbdbhQHPY1oqASWTI8jfdX8XEI2ENb6HXXnTtdJsidDW8LbKzEO4o.aKb Wg3mVv85ySGcN58aAASmw4igVCf2ahfwsAjb4nCIpHLbzrVx3UhckX0HiCAkeckTSg9hj5ajBHgI b4pf7yUMqzIjCpCA2nuCnSKDUWFOHhuTx9rfuBuwUQt5RFDWSZFjbGyVGPGTLn6qfDFkzGQvUUWE jKxb1AKW0aUPGge_XVFZ3SLvqVtsAMYRd9ZOtFMccqS7QdkMCJ4guu5Q7We9_shGBy0Oe_2dPF7C Bd6KsCYudML.cAn1zZr.BtHJ76STNvU0z2cPIoaT54JoOCekJTgjKKD7X6WaxRsTxFG4w0lqtmat c0c7q3lOz49jqmIkeVQMbFzMxOY4fQsGI__rZ7bBdcwsKtXp7hmk9Ygo4RyEBoCylHIMUTjZZJy3 tSe6v6OEV9JyCfp7u.EBNMpU1.RegKpNiC37Fsng6NRCKaWAoWGS8hoxbKWeNZcDH0FTlzFCKpdI Ov1pjcaYbSexAy.2spJIfHWE6_VvNTnynQIvrohG8y5DzhgUJPqmUTqOp.dpeQTDOInUX_6piM6l 2tDlWBM7FEhG_ya0S1_yh6Q6y_RvCwdZzm6qyZKL3_iwk4dE483ScaP75kktvN_7_YExCGrGIaZ0 daVsAtQ2RgO64fZKkcLRLZndbiyoVhz6g26UajDM6kN53DZOJHgKnQJqMqLYYXoxRQqynzWn_cab h7Czl_SeliPtq5t45iDPQnmld_7T151M7lHF2KMnyLUuojNrMJeKQfEIPthadz817PdBq2iuCX5e MSUPZmdk6Bf.69FUW0Kc6YFDyWt1WSeiwZc9b8gzm8AJHIBymlYDuKYCtYOJ9tCNP8tna9pLjHjQ HmSLi.N46QV8jHpNfQMEsxfs5go_Hw2Z1oUDT9YcImxqkL.ARcPM6BWWMvPE25pwEj646DoFv1.R eeglfGqP1JTQTyrplzNUFmSCyNCQec2W_al_sKTrVDAmw7y6p7oXdyWfJonct0gdPzMPuK926ot5 nPEKQUxawyBlYHe6Ts5wYBCziGjvQoY5aLka_xjPqWXoOG50LFzG8kp9.LW2avan7HVRPl8fWUZS 63hbQOpaakZIYzh10IIPxXqnteubUciVqsIXb6OhA_3q4NIjkpzlblyEJV6CYq4g1licoM1CUYhG KhnvRIE2_qxtGNfAQ6NHN2ru.mARQ_T4d1FXa7932ELJ6RPLQeC3sarkKqptXZWgWBKXoEIJ1eSV 5nkXyiXssaRcmQe8JZ9UEYf4J7ohV5Lcuq838DaqMmA--
X-Sonic-MF: <g_e_montenegro@yahoo.com>
Received: from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.bf2.yahoo.com with HTTP; Wed, 28 Jul 2021 01:32:23 +0000
Date: Wed, 28 Jul 2021 01:32:19 +0000
From: "g_e_montenegro@yahoo.com" <g_e_montenegro@yahoo.com>
To: "cose@ietf.org" <cose@ietf.org>, Brian Sipos <BSipos@rkf-eng.com>
Message-ID: <869209811.295203.1627435939660@mail.yahoo.com>
In-Reply-To: <MN2PR13MB3567C324401F4E510BBDCC8B9FEA9@MN2PR13MB3567.namprd13.prod.outlook.com>
References: <MN2PR13MB3567C324401F4E510BBDCC8B9FEA9@MN2PR13MB3567.namprd13.prod.outlook.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_295202_1045665578.1627435939658"
X-Mailer: WebService/1.1.18749 YMailNorrin
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/nNxOC2wgZdbbdCPM2Y68CQljabI>
Subject: Re: [COSE] Looking for COSE libraries and open source implementations
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jul 2021 01:32:30 -0000

 Thanks, Brian and Michael!
    On Tuesday, July 27, 2021, 09:27:31 PM EDT, Brian Sipos <bsipos@rkf-eng.com> wrote:  
 
  #yiv2503599085 P {margin-top:0;margin-bottom:0;}Gabriel,For prototyping and higher-level use there is a Python library "cose" [1] with a same-named PyPi package [2] which has good test coverage and a quite robust and extensible API, though the API has gone through recent changes.As Michael mentioned, the use of COSE, and the API needed to write or read COSE messages, is very application dependent (e.g., how many layers of key indirection is acceptable or required).
[1] https://github.com/TimothyClaeys/pycose[2] https://pypi.org/project/cose/

Hi Folks,

I'm looking at COSE versus more traditional alternatives, pros and cons, and
a huge cons would be access to open source implementations and libraries.

Anybody know of a good source of information about COSE libraries and open
source implementations?

I'm aware of https://github.com/cose-wg, which has some good pointers, but
they appear somewhat outdated. 

Thanks for any hints.

Gabriel
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose