Re: [COSE] Key identifier of type bstr / int

Anders Rundgren <anders.rundgren.net@gmail.com> Tue, 22 March 2022 03:59 UTC

Return-Path: <anders.rundgren.net@gmail.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8186F3A154B for <cose@ietfa.amsl.com>; Mon, 21 Mar 2022 20:59:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.108
X-Spam-Level:
X-Spam-Status: No, score=-2.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yMYkGKmDv_dM for <cose@ietfa.amsl.com>; Mon, 21 Mar 2022 20:59:48 -0700 (PDT)
Received: from mail-wr1-x429.google.com (mail-wr1-x429.google.com [IPv6:2a00:1450:4864:20::429]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C0973A1D1A for <cose@ietf.org>; Mon, 21 Mar 2022 20:59:48 -0700 (PDT)
Received: by mail-wr1-x429.google.com with SMTP id a1so21831623wrh.10 for <cose@ietf.org>; Mon, 21 Mar 2022 20:59:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:date:mime-version:user-agent:subject:content-language:to :cc:references:from:in-reply-to:content-transfer-encoding; bh=jNl5jyVGLomkxo+VCrxnP+F3H/zPv4Obk5cuRn+tb/M=; b=FihNizkVDhL8zLnG3VoWk9Mo9YvS7zUXdSEBpUEXQBS92J+I9xYQpqN4Kgwib+Q/H9 efWQDmUOZiN8kc0Zqh0ckpaKHssq/EzxJMXuNufl8Fe799eqaL/YhGXfkcNCXXADRaa/ EZBnfc56zsntoO9hOO4BS4l4Eosr/rLPk1PvTPC4cDbuW307orKH2OM4nLYKy4SOZ4uf ixCZE55lozoeonl5HcVvVaByIvKHhPzZpWeiQJcrZRxM+GDDDBOBI21a2k9kiRNDdSY4 qzjZMK59+9991CoUDHXCm/cIwdKikHG+dvEQLmSpILATbXxdQ3GQp6s+Mao8N7zwidE9 PqiA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent:subject :content-language:to:cc:references:from:in-reply-to :content-transfer-encoding; bh=jNl5jyVGLomkxo+VCrxnP+F3H/zPv4Obk5cuRn+tb/M=; b=zgNm34KbI7MUluOG48H0zuKGe+/rf6WzuTZrnDeoCa8xR8rOmXRdHznOXZ7S6CWLEy Xsz+sFFVw0vUGO5GMWDNzFC3pKZ2rB5WmzvqmGAEAebnIPxXEUeQoH4A6gS0RfjVBm3z I+HnQE7AGy/3e/U0WkrV/TOa21kpyJLxh9tCbUYfQ2bT/3QKC/rp6/bI2LBV8tjrkWDd Bh0lpyIjyzMqkQMU4bjIgdOAte9xkp8LAhXI/WPACgipznqpA2dVatL6D9t3Vfx7kD23 VDrkhF8f//TluOFuGxVMg/QzM/RdTcTi9wIRBoWe3uBERUExfVNMCvGO+qLTQ5HyGhn1 bebQ==
X-Gm-Message-State: AOAM532Rgo6T2V3Tk4PR7/Vg67QRN+kzdhrVdTrzAdRc0ZudOJz/k8Wy L11MSWTCThp4GwNB4j6gX/s=
X-Google-Smtp-Source: ABdhPJzUcOycbLt2xIIVjvNkSn/+Smh0gu39s+PALVlFHpxDJQv/j8KleZJjdeLg3kLTxv7kMmVV0g==
X-Received: by 2002:a5d:47a6:0:b0:203:914f:52fa with SMTP id 6-20020a5d47a6000000b00203914f52famr3092093wrb.257.1647921586426; Mon, 21 Mar 2022 20:59:46 -0700 (PDT)
Received: from [192.168.1.67] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id l126-20020a1c2584000000b00387d4f35651sm953904wml.10.2022.03.21.20.59.45 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 21 Mar 2022 20:59:45 -0700 (PDT)
Message-ID: <a96fde80-7ef3-e030-292e-b8face54f94a@gmail.com>
Date: Tue, 22 Mar 2022 04:59:43 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.7.0
Content-Language: en-US
To: Carsten Bormann <cabo@tzi.org>, Michael Richardson <mcr+ietf@sandelman.ca>
Cc: Goran Selander <goran.selander@ericsson.com>, Orie Steele <orie@transmute.industries>, Laurence Lundblade <lgl@island-resort.com>, "cose@ietf.org" <cose@ietf.org>
References: <95B75634-B147-4756-A950-C6B139CF3ADD@ericsson.com> <9DF382AC-12A8-47A5-AAE7-2B0D75EAA669@island-resort.com> <EDFDB6E4-2BDE-4E2E-9CF0-D771E2DEF3C6@ericsson.com> <823C00C2-4F6C-4DF5-99B0-87D8524D4A9C@island-resort.com> <C059B669-4C5D-4980-A665-96A39F4457C3@island-resort.com> <AM4PR0701MB21958541C07CEA44DB1B1578F4169@AM4PR0701MB2195.eurprd07.prod.outlook.com> <CAN8C-_+3sWckZKo7KS2fsPU4pBHo+NNGgQpxg7p8LytFX01eEw@mail.gmail.com> <AM4PR0701MB2195D76D8CFCC873C1D05A04F4169@AM4PR0701MB2195.eurprd07.prod.outlook.com> <CAN8C-_K4EfFSar9H_QR+cV_pz+xhXtWA=pKK+rFv241E5DQofQ@mail.gmail.com> <DC1C335A-629D-4E4F-97BD-B4CA3519EDC6@island-resort.com> <641639.1647901233@dooku> <3724F698-FB9A-44F2-B942-A6034B9D207E@tzi.org>
From: Anders Rundgren <anders.rundgren.net@gmail.com>
In-Reply-To: <3724F698-FB9A-44F2-B942-A6034B9D207E@tzi.org>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/s9l__KMzwo6tGaN97Ma0KYv7W7s>
Subject: Re: [COSE] Key identifier of type bstr / int
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Mar 2022 03:59:55 -0000

It is hard for me to understand that the saving of a single byte it worth this much attention.

Anyway, if there will a change, it requires SW updates, but only for those who actually adopt the enhanced definition.  My guess is that connected systems nowadays support automatic firmware updates making the latter a non-issue.

In the COSE Signature Format (CSF) scheme I ran into the same issue and changed back-and-forth until I finally came up with the obvious: let key Id be a CBOR Object.

In a specific application using CSF, the profile was set to use "bstr".

I'm sure some people prefer "tstr" since it is JOSE compatible.  By revising/extending the COSE kid to Object, everybody get what they want.


Otherwise, I would suggest status quo.

Anders
https://test.webpki.org/csf-lab/home