IETF Logo Mail Archive

Re: [COSE] Looking for COSE libraries and open source implementations

Brian Sipos <BSipos@rkf-eng.com> Wed, 28 July 2021 01:27 UTC

Return-Path: <BSipos@rkf-eng.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B476C3A153F for <cose@ietfa.amsl.com>; Tue, 27 Jul 2021 18:27:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=rkf-eng.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ku7jefvrhxOG for <cose@ietfa.amsl.com>; Tue, 27 Jul 2021 18:27:17 -0700 (PDT)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2049.outbound.protection.outlook.com [40.107.236.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE24D3A1540 for <cose@ietf.org>; Tue, 27 Jul 2021 18:27:17 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Ifeoi6X9PRtIRt8tNjvsbSLmYY8e59Dg7gKEXZZr1V0N4IIePorM0WAJ7desJ5JR3EMKv8Dc6XC/OZ+VRyGh7oNPDlJACab8ns2D689uZCPViOsSmRhc8YBwZ8wEpDsMr4/jG2iVAGoC0f6osx/hFbq99VtS5sep3r8AjuTtnJxE99TGresocAuvo6eUVkvkBwIzlf4WG2P12lZcUHzQB27S3L7w9P+vweBSUrIOsZhsaDX+OvonyQ2tazjQrq8xWvfizTJDyu753BcJV8awOm1gDlMUHdVEBvN/0UHT70VkKX6vVrzd1NLn5X/24fMpCCwoTqlJyjyhKD3xc1fUdQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aPPP0WgpSn2s23RUL27Fv5i+ylAoD+UrQlJN9FfwEcM=; b=EkR92QEsooC5+is+jXF2fCW8vnxctceWbstkoF5xL19VMf7tHoSbLBLtnOr0D2mKsmH2cEsyDor7qIgS6lpl3R5wjylffzPLjT96hEvLZdpayoSsZHRFbORL0KKw3Oq2JG4geofB+oEhSgDcIHrTn4so8U0bxBLLjvBF2rUAXGixLn2Vxpnd0QPDyY2vi40TiXnpkt90yToHkXvuumlVyRGY6joKbvsaI8efD0xQ5MEPQLsxZfiQwgw9X4UeFGNOpC0leeQH+qhXtRRPpRoLH2cJTAJoNuwQroYjW2U/gKlfPUCHk30/83+RgzKoHOLiH8unog8Ohg5vm6McEloyaQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=rkf-eng.com; dmarc=pass action=none header.from=rkf-eng.com; dkim=pass header.d=rkf-eng.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rkf-eng.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aPPP0WgpSn2s23RUL27Fv5i+ylAoD+UrQlJN9FfwEcM=; b=EZLOcBKilU6Beyskvr3f/Kyy3LdTXDMpAyPDNajAOIyk+RP2IUpI7mim21pcrVfmSE942oqqr1JlaIpQ+HQ/s/oXke1SVQPhGXZqN2GUfTVvzy9AN6uRhD3Y5P+01QofhHUATD9GAt1wd8ZUUMgNqIqnthi6NSSHUgSa2lZEoWw=
Received: from MN2PR13MB3567.namprd13.prod.outlook.com (2603:10b6:208:168::10) by MN2PR13MB3294.namprd13.prod.outlook.com (2603:10b6:208:135::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4373.14; Wed, 28 Jul 2021 01:27:14 +0000
Received: from MN2PR13MB3567.namprd13.prod.outlook.com ([fe80::f845:66e:abee:d10c]) by MN2PR13MB3567.namprd13.prod.outlook.com ([fe80::f845:66e:abee:d10c%6]) with mapi id 15.20.4373.018; Wed, 28 Jul 2021 01:27:13 +0000
From: Brian Sipos <BSipos@rkf-eng.com>
To: "cose@ietf.org" <cose@ietf.org>
CC: "g_e_montenegro@yahoo.com" <g_e_montenegro@yahoo.com>
Thread-Topic: [COSE] Looking for COSE libraries and open source implementations
Thread-Index: AQHXg0TZLuVXkJn1TkuC65tQ3IByyA==
Date: Wed, 28 Jul 2021 01:27:13 +0000
Message-ID: <MN2PR13MB3567C324401F4E510BBDCC8B9FEA9@MN2PR13MB3567.namprd13.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=rkf-eng.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 8bb2b746-38f8-4042-5165-08d95166d43a
x-ms-traffictypediagnostic: MN2PR13MB3294:
x-microsoft-antispam-prvs: <MN2PR13MB3294E164B1B9463DD1ED3F379FEA9@MN2PR13MB3294.namprd13.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR13MB3567.namprd13.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(396003)(39830400003)(136003)(376002)(346002)(66476007)(122000001)(66556008)(66946007)(52536014)(76116006)(55016002)(6506007)(8676002)(26005)(38070700005)(9686003)(966005)(5660300002)(71200400001)(4744005)(33656002)(186003)(4326008)(2906002)(83380400001)(66446008)(166002)(508600001)(6916009)(38100700002)(8936002)(19627405001)(316002)(64756008)(86362001)(7696005); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_MN2PR13MB3567C324401F4E510BBDCC8B9FEA9MN2PR13MB3567namp_"
MIME-Version: 1.0
X-OriginatorOrg: rkf-eng.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR13MB3567.namprd13.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 8bb2b746-38f8-4042-5165-08d95166d43a
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jul 2021 01:27:13.6842 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4ed8b15b-911f-42bc-8524-d89148858535
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: msPFNwx/L3zst5onG426jXHqpjqXdQjf2Npqfqqo3ukNN2iLAU11OSvFAATwOQZHpFlK0aDCytACGQqZ9r7tYA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR13MB3294
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/rZ0OjEPdfP8tzFgH8SCOUkPs_kI>
Subject: Re: [COSE] Looking for COSE libraries and open source implementations
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Jul 2021 01:27:23 -0000

Gabriel,
For prototyping and higher-level use there is a Python library "cose" [1] with a same-named PyPi package [2] which has good test coverage and a quite robust and extensible API, though the API has gone through recent changes.
As Michael mentioned, the use of COSE, and the API needed to write or read COSE messages, is very application dependent (e.g., how many layers of key indirection is acceptable or required).

[1] https://github.com/TimothyClaeys/pycose
[2] https://pypi.org/project/cose/


Hi Folks,

I'm looking at COSE versus more traditional alternatives, pros and cons, and
a huge cons would be access to open source implementations and libraries.

Anybody know of a good source of information about COSE libraries and open
source implementations?

I'm aware of https://github.com/cose-wg, which has some good pointers, but
they appear somewhat outdated.

Thanks for any hints.

Gabriel

v2.23.0 | Report a Bug | By Email