Re: [COSE] Key identifier of type bstr / int

Göran Selander <goran.selander@ericsson.com> Fri, 13 August 2021 05:18 UTC

Return-Path: <goran.selander@ericsson.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7267E3A05AA for <cose@ietfa.amsl.com>; Thu, 12 Aug 2021 22:18:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.552
X-Spam-Level:
X-Spam-Status: No, score=-2.552 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.452, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W4fFwNuNmLz5 for <cose@ietfa.amsl.com>; Thu, 12 Aug 2021 22:18:03 -0700 (PDT)
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60077.outbound.protection.outlook.com [40.107.6.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 177EF3A052C for <cose@ietf.org>; Thu, 12 Aug 2021 22:18:02 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=R8Dj+eXbtF8yX4dpme2mTkU9Kt5Tf9OSfBqqBvxCajXfb0eXFsXDmBkD0VOF2TZ5WfbXchHsu8fI+HmVUesnrseL2cB1imfFb+JL0a1Fb8v0vNNFl7Ye6OltyNKbTsf2j3YTDJXa8UmjyTAtOOn/5e9uP7lDmm18gUYSLZK3F6/yZKoZVhHa1SpPWpCkBCSxxjb6/Zf4aY1JwPeMrwmdCCxflmBq19l2e7D5FJGzuV5ZOrNDMDgtFTK55n8EG+SwUyu3nK1obwmWbQRYUPe0GQj9xmeqV4TST9RnzqvEp2iDdUrZ4JC2DEpOBGlOpKdRaxsrQVusrGchmVTA4EMVEg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aP0URuXZxK7Vr30J3Qc2JG6NaaPv16a+x3ds+AAXsUY=; b=gWVajd91+vkW9WhBrIFE504ACt4mYhZ13hSfPls4yrQPNySFnDTV2lu71gjRqzJg3MBcX+hg4Bk4VI3sCZVSpO+GQIQWqOi2nX9y7RBuQzRC/DALI+U4hvjO1nwIoE2SCwLP7kdaHq6qLNL5dPUDkCbWioxbkgd24ZM9TqgW6xtPA8LYxa6xp/X5upwfKFZr4dlMlTcMIHFgpdhruBIJ4h+nwJc3uRdW6ETvROgPjHxbBLlQYSJUvN2lYMoi/RtevHQsXen1yIvxLL/SThmPUIkuVg7OcJQp6pZlix+8AAc+PwKqkugYhxtQLRC6IVKmbKkVyGWBtqtfrSsMzpiz/A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aP0URuXZxK7Vr30J3Qc2JG6NaaPv16a+x3ds+AAXsUY=; b=IV/Pxv37vnOp8x8P3dDdjaQ2n4na4X7QQz+Lu05i0WDLoj473Pk/kDIaCa7hiRfZF5SBsES3X7ISMMVDr4ZwTx/PgTd3pFgxt2FzJUDTf2JjEp//PlwcKRyw2kqx1114tFnVnBpltovNUJwQe8SztxA0cMg3215FEJOupCOqB2c=
Received: from HE1PR07MB3500.eurprd07.prod.outlook.com (2603:10a6:7:31::20) by HE1PR07MB3145.eurprd07.prod.outlook.com (2603:10a6:7:31::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4415.5; Fri, 13 Aug 2021 05:18:00 +0000
Received: from HE1PR07MB3500.eurprd07.prod.outlook.com ([fe80::7191:79ea:fa53:9014]) by HE1PR07MB3500.eurprd07.prod.outlook.com ([fe80::7191:79ea:fa53:9014%4]) with mapi id 15.20.4436.009; Fri, 13 Aug 2021 05:18:00 +0000
From: Göran Selander <goran.selander@ericsson.com>
To: Laurence Lundblade <lgl@island-resort.com>, Benjamin Kaduk <kaduk@mit.edu>
CC: "cose@ietf.org" <cose@ietf.org>
Thread-Topic: [COSE] Key identifier of type bstr / int
Thread-Index: AQHXhT54TcPpMfWo3E61Id/NsrhJv6triUiAgAEuhQCAA/tDgIAAaSOA
Date: Fri, 13 Aug 2021 05:17:59 +0000
Message-ID: <ADC229FF-7E62-4B9C-ACD1-0289F9DE866E@ericsson.com>
References: <95B75634-B147-4756-A950-C6B139CF3ADD@ericsson.com> <9DF382AC-12A8-47A5-AAE7-2B0D75EAA669@island-resort.com> <EDFDB6E4-2BDE-4E2E-9CF0-D771E2DEF3C6@ericsson.com> <d8400de7-986c-42a3-9d10-73f4b0d842a5@AM5EUR02FT037.eop-EUR02.prod.protection.outlook.com>
In-Reply-To: <d8400de7-986c-42a3-9d10-73f4b0d842a5@AM5EUR02FT037.eop-EUR02.prod.protection.outlook.com>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.52.21080801
authentication-results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 8652731d-e1ab-4866-1057-08d95e19b7de
x-ms-traffictypediagnostic: HE1PR07MB3145:
x-microsoft-antispam-prvs: <HE1PR07MB314507D60ADD22C426A26F35F4FA9@HE1PR07MB3145.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR07MB3500.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(346002)(396003)(39860400002)(136003)(376002)(366004)(110136005)(66556008)(66946007)(38070700005)(64756008)(66476007)(76116006)(66446008)(4326008)(2616005)(36756003)(316002)(6512007)(478600001)(86362001)(6506007)(85182001)(85202003)(6486002)(66574015)(53546011)(26005)(8936002)(8676002)(5660300002)(71200400001)(186003)(38100700002)(122000001)(2906002)(33656002)(83380400001)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_ADC229FF7E624B9CACD10289F9DE866Eericssoncom_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: HE1PR07MB3500.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 8652731d-e1ab-4866-1057-08d95e19b7de
X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Aug 2021 05:17:59.9634 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 7ZMjR01cgfcxohdIFStFEt3BbdyW+ZyBS+gVOTtWd4iHbEg82pTFnWMSwAFz8BFV33XY/MX9JO8cKN9wrMH0boIzq11gzYkxtLFSNxB5gAs=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3145
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/qGngdte4s3SEZEKM-xBEoXYUgKc>
Subject: Re: [COSE] Key identifier of type bstr / int
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Aug 2021 05:18:10 -0000

Thanks Laurence, thanks Ben!

Summarising the feedback so far, there seems to be a mild preference for extending 'kid' as int/bstr documented in a standards track RFC and with expert review. (More comments are welcome.)

Next question: Is there a preference for making this a stand-alone draft or can we include the extension in draft-ietf-lake-edhoc? Do we consider this an update of RFC-to-be 9052 (draft-ietf-cose-rfc8152bis-struct)?

Thanks
Göran



From: COSE <cose-bounces@ietf.org> on behalf of Laurence Lundblade <lgl@island-resort.com>
Date: Friday, 13 August 2021 at 03:02
To: Göran Selander <goran.selander=40ericsson.com@dmarc.ietf.org>
Cc: "cose@ietf.org" <cose@ietf.org>
Subject: Re: [COSE] Key identifier of type bstr / int

Understood about the use case. Thx for the background.


On Aug 10, 2021, at 3:13 AM, Göran Selander <goran.selander=40ericsson.com@dmarc.ietf.org<mailto:goran.selander=40ericsson.com@dmarc.ietf.org>> wrote:

Assume that we do want to allow key identifiers to be CBOR ints in certain settings,  what is the best (least intrusive) way to allow this while still maintain compatibility with 'kid's supporting the type bstr? Another alternative to what has been listed below is to define 'kid2' to only be of type int - is that a better option?

I didn’t write actual code to check, but they about the same to me.

‘kid' as int/bstr seems less confusing to me than ‘kid2’. It tells you it does exactly the same thing whether it is an int or a bstr.

So my pick is ‘kid’, but ‘kid2’ is OK too.

LL