[COSE] Key identifier of type bstr / int

Göran Selander <goran.selander@ericsson.com> Fri, 30 July 2021 12:29 UTC

Return-Path: <goran.selander@ericsson.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8CE63A287F for <cose@ietfa.amsl.com>; Fri, 30 Jul 2021 05:29:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.553
X-Spam-Level:
X-Spam-Status: No, score=-2.553 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.452, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bzC76QLVbmpJ for <cose@ietfa.amsl.com>; Fri, 30 Jul 2021 05:29:01 -0700 (PDT)
Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2084.outbound.protection.outlook.com [40.107.21.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34B193A287C for <cose@ietf.org>; Fri, 30 Jul 2021 05:29:01 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lCHRVEHcWj9KQyetSSSAqU29qjHOl3kEXG7Fa4XRLLz0+BMsYD5CbTwtmysYX0AE2SruzLdy6UR1njziKQPVzad9Xs+gBLSO3Kjwfm37dNMtI0VUkn6iawsmxKQEc/YCZpj+SVt24bCwJOzat7BBAWrPWIr6FkbN+fms5YS/loDYHEpbfYFBjvYdR9jRfxWvQSteKws2NTEW647W40QgtSkK70R8qFy5RZMhpAbvmiBCaquYGPJkS1NBZmtxOIsNafua1VwyURkiDV7Pg2WQu7uQ12pe+EP4z3q5TqR5pIxTN8DUJEtD5SNHHXBqf3uSNtOshpZ0+5juVt8UIoMP0A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OBY6YpSKkZmCu6760mZjW4Y+iqyFPWw8cNNqqC4z7bo=; b=ZyqCtL2DFqMYTn0+jWZwKZdiZ5U4HwlKUlX4uRYk1P1HpfFDok4qfWaw3VGcHloZwpU6L660gCRLvezHFGmcMOiD/N4tmkqqimNs+BJ0wLIVE5obixzEPS0HH41LadjVwmen7DlKb3C3j06e7aTRck/maZfAN8kXG1ztMJsleLJWVIQQ82sgUvb0lr6lI8CMZE+I1Ju8G/nnwdVeSEHRRyI8DBjdGsy7jktMmcBkRXCe337lI8JklW6J9XhNbOv/OrRw7gq99gXXk2DMNJzrukEee5oFr+LQbRiWwEg195wm+6T4Y5vU1Gvi6Azt6E9qofSYz3m1KGV4ZHPLQPMXjQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OBY6YpSKkZmCu6760mZjW4Y+iqyFPWw8cNNqqC4z7bo=; b=Bt0H/5+O8/lgB6mqJBjN/p3ackBEbikx7TgwEYdRxONeLYRNPblKX3n9pJqAqC4jHesfS+dyDtnemhXoHEFvGA+vWGcYiwLe2wNLuCHR4AiLXYxBO+fbujXOxxOUoSuD8ydchFwbOWxIhNT21BUayhX8E+GxfawXSKHYOmc8iFs=
Received: from HE1PR07MB3500.eurprd07.prod.outlook.com (2603:10a6:7:31::20) by HE1PR0702MB3545.eurprd07.prod.outlook.com (2603:10a6:7:83::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4394.12; Fri, 30 Jul 2021 12:28:58 +0000
Received: from HE1PR07MB3500.eurprd07.prod.outlook.com ([fe80::cd1:7696:8078:61f3]) by HE1PR07MB3500.eurprd07.prod.outlook.com ([fe80::cd1:7696:8078:61f3%6]) with mapi id 15.20.4373.020; Fri, 30 Jul 2021 12:28:58 +0000
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: "cose@ietf.org" <cose@ietf.org>
Thread-Topic: Key identifier of type bstr / int
Thread-Index: AQHXhT54TcPpMfWo3E61Id/NsrhJvw==
Date: Fri, 30 Jul 2021 12:28:58 +0000
Message-ID: <95B75634-B147-4756-A950-C6B139CF3ADD@ericsson.com>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.51.21071101
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a7f3cd5c-0d55-415f-f2e5-08d953559adc
x-ms-traffictypediagnostic: HE1PR0702MB3545:
x-microsoft-antispam-prvs: <HE1PR0702MB3545FE667F86192C18085234F4EC9@HE1PR0702MB3545.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR07MB3500.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(346002)(366004)(396003)(39860400002)(136003)(376002)(122000001)(38100700002)(8676002)(186003)(66556008)(66476007)(66446008)(64756008)(66946007)(2616005)(36756003)(76116006)(316002)(91956017)(8936002)(26005)(85182001)(5660300002)(33656002)(6512007)(85202003)(2906002)(71200400001)(6486002)(6506007)(86362001)(6916009)(38070700005)(478600001)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?VkVWUnJPNHFsNTlzOWxkRDRZNXhBejAyUVk4TDVvUjVNRy9Zd3FEZEhaczRn?= =?utf-8?B?YVc3S1hGMGtuZUpNZVhsZkR6QUgvSWRjR0c0SlJ5RG1xQlhJc0pKR1A2eFZ5?= =?utf-8?B?UTB0SmNSZnlZN0RnNnpvMnNRaHM3ZWtueWVOU2o3aHpLQkFRTHNjSlgvVlpr?= =?utf-8?B?TTVEWWVSQTBPVDFGWm5jcWhnUys3UXE2NkdEQzFlbnB6MFI5NEJuakswMWpy?= =?utf-8?B?My9Ock00TlFmelMrQjMwMklWMi9id0ZwRGdmZWh6VXdqYzI0VCszOTA1R3hj?= =?utf-8?B?Mmx5NXdLbERpVnhqMzMyRTJRTUZ2akFQRGZjbGxSWDd1TmpPZEdCS2FVQnRr?= =?utf-8?B?aG1ROXFIWlRQaG1aNGg5bFJnTDlkRzlaWE96clc3OEpFUmpMbStDTkRvTVI5?= =?utf-8?B?OFNLUzZBaWF5Uy95bjdQb3dveklWTWFhbDBUWDJOeHJmY0diVVVPMDA2elYr?= =?utf-8?B?ZlpkM1NENFRpcjVrWGdzMWE5UFpTSHNKblNmMnVtY29sVnpBci9KSmpkclpm?= =?utf-8?B?YXRaQ3BzTFM1emYrVTRCaXlUZVBGSUVidEtYUWJHd0xZazRDUWFMU1pYdXk4?= =?utf-8?B?SWlwRE5mZFlXZXNEdFUwbDNyNUZ0STBPb3hEUUdYUFN0TWlDUzJSRlFqODlU?= =?utf-8?B?Tk5JSnlmejdWRWIrNWhCcDFSc3VEdm5HWXJkS1RUT3VFUU04UCtDdnpRNkF6?= =?utf-8?B?OTZjY1RFeFBlZVBVdjR6ZzNXZXNCaWNrbWNVZHpTRm1nTEpFWFNEU0lUOWRC?= =?utf-8?B?bERnR0NJTE1YWElYUWFuOHFITjB3aTZKVE9zb1RKY1lXRWM1S0hZRnNrM3ZJ?= =?utf-8?B?VG9uOEtWOERZQWpPMnE3V0NXR05rbk9WVHdmU2JYNEdKa1hxa1c2ZGxZVGta?= =?utf-8?B?ZGdVc0ErSU5nUjFNZEtxbEIzekNXZ3BGSzZlQmVpMFBLdDBiSVlqSkRoRUJh?= =?utf-8?B?akZuT05RM3B3WTQxRTJWVUhkczJ6b01uQUZNaElvY2tDaThTT2FrbEFiUVlX?= =?utf-8?B?RzdaV2h5ZDg4Wm1mcm44cnhMQ2ZadGpqVFR6ZEgxOTlBaDV3azZxaXNidmI0?= =?utf-8?B?UFE3YUNRaHJPTnhhZWR3eHExR3FmQkYwZHprdEhhNWdhTzhqWkRNOFFwTVo2?= =?utf-8?B?Rkl0dFhNRmQrd0lSR0pMT0ozQTMwT3dXRzhBZ1ZpWlBRU1FmSUJTQWNNZGpl?= =?utf-8?B?V3lKVW5KbGVKV3RIandEdGJ2ZWhhSlR2TzlFWkN2YXBUd1Jna0hjakx4TGw0?= =?utf-8?B?bEZRL1BvS0RRL2lJUkNIeFY2ejArUS8zSGFvbXZFTDVXTUJUZFNrcjNiT1dq?= =?utf-8?B?R0dDTHY3aytIRGcwZnp4ZFJUaTlyZE9VUnp3Z0xRY0htTDNsM1U1Y0orT1Rh?= =?utf-8?B?QTA3aU9WU0RxdGxVVFpwcnFWaTV3aFMyQVUxS0RqS2VjdTlNU1VXQ0FYSlc0?= =?utf-8?B?blRCeUpBWTN4aWYxUFZhSW4ramw5cGVkNTJxT0w2eTdnYVVQN1UyWHVQUlBr?= =?utf-8?B?bWxyNDAwOC9NVE1QaGdiUVBsNGxlZWI5K0k2M1E4UkNzM3kwQjhtNG51TllD?= =?utf-8?B?QlRTVWQ5SkxyM0c0YjB3eWpFZWhaMkdOcDFFcVFVeWd0ZFVHOW1CRU9wUE1y?= =?utf-8?B?WkFDRWIyalFueWxnc0pyeVdkZ2NoWDlCUTUrWEg3eWt0UTNqcFljOFBXQkcx?= =?utf-8?B?RkVSV0V3RmdZQ1lPUUdrVUFvTlhleGJRNGhYTDlmeHdoTjNMc0pXc1ljZWhQ?= =?utf-8?B?RHh1OHpIdW03aEJ1dDZWTVdqSzBjMFdWOE5OcCt1dzBBNFg0a0NNRnZJODQ1?= =?utf-8?B?Z3RZaTdxd1Y4L0tiSHdsQT09?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <DF9F686FFFEBE14AA1C966B3A7FBBA3B@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: HE1PR07MB3500.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a7f3cd5c-0d55-415f-f2e5-08d953559adc
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2021 12:28:58.3413 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: HYdEqPTXpFIj4y9O5ZZpxXOx2rDXcXmJCxsIGy7WldmKBansFLaoeDRzixUQHQW9OjMXQMKwOuMKP+dX3NFYe5qIcfRsUMNxOO2bpE48V5A=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0702MB3545
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/q_6kay8Z_4Wr48TFBXZU2oGRqoE>
Subject: [COSE] Key identifier of type bstr / int
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Jul 2021 12:29:06 -0000

Hi,

In LAKE yesterday we had a discussion on compact key identifiers. The main candidate to use, 'kid', is specified as a CBOR bstr, which is typically at least 2 bytes (exception: empty bstr which is 1 byte). We therefore want to allow keys to be identified with CBOR ints which has 48 1-byte values to allow for a larger number of optimally small identifiers.

One solution would be to define a new COSE key common parameter and COSE header parameter, say 'kid2', of type bstr / int. Another solution would be to extend 'kid' to be bstr / int.

In the former case a 'kid2' can be used to reference keys identified with either 'kid2' or 'kid', but 'kid' would not be able to reference keys identified with 'kid2' having an int value. Not clear to me if that is a problem. 

While the LAKE WG did not express any preference, one opinion I learnt after the meeting was a preference of extending 'kid' to bstr / int.

What do folks in COSE think?

I'm familiar with the process of registering new COSE parameters, what is the requirement for changing the value type of an existing registration? Standards action with expert review?

Thanks
Göran