Re: [COSE] AD review of draft-ietf-cose-hash-sig-03

Laurence Lundblade <lgl@island-resort.com> Thu, 10 October 2019 23:04 UTC

Return-Path: <lgl@island-resort.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD7B112013B for <cose@ietfa.amsl.com>; Thu, 10 Oct 2019 16:04:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5v5dmLTf88un for <cose@ietfa.amsl.com>; Thu, 10 Oct 2019 16:04:45 -0700 (PDT)
Received: from p3plsmtpa08-08.prod.phx3.secureserver.net (p3plsmtpa08-08.prod.phx3.secureserver.net [173.201.193.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FF551200D7 for <cose@ietf.org>; Thu, 10 Oct 2019 16:04:45 -0700 (PDT)
Received: from [10.15.0.46] ([45.56.150.64]) by :SMTPAUTH: with ESMTPA id IhUCiF153xbN4IhUCi1JXb; Thu, 10 Oct 2019 16:04:44 -0700
From: Laurence Lundblade <lgl@island-resort.com>
Message-Id: <F28D499D-A4F2-410C-8DAA-1E8ED3B977B7@island-resort.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_D6134542-88D2-4EB2-9734-F2878EF63B71"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Thu, 10 Oct 2019 16:04:43 -0700
In-Reply-To: <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com>
Cc: "Roman D. Danyliw" <rdd@cert.org>, cose <cose@ietf.org>, Ben Kaduk <kaduk@mit.edu>, Ivaylo Petrov <ivaylo@ackl.io>
To: Russ Housley <housley@vigilsec.com>
References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com>
X-Mailer: Apple Mail (2.3445.104.11)
X-CMAE-Envelope: MS4wfBvNiLKHRYjW+YU+bOHLDruhxj1hPGgVh9K2EMA0QsjcmXlUlhEx34bijEjGOx/NRTMbHxb7XPgZXhtzfLjtplX2ALWkKavrLDL6i8A21DjzLid4Atoq ArOc7DAnHIF4bhVr1X+2ZQJIe6RJw8QvYmezPWd4cZ3TnX3SkRVioijXXKs/AKxBH7BlX+SDmglCO69ZDMu29ZWDEpPYWtFr0sqrb8us9TjGgz2VGxSaolji AcggP2AwKSqlGA8S+RMigmSDEyk5JKG80cRHqho3sPU=
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/ydFpeWtXYrWv4BeyKuvM5Rn8mCg>
Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Oct 2019 23:04:47 -0000

> On Oct 10, 2019, at 1:24 PM, Russ Housley <housley@vigilsec.com> wrote:
> 
>   This appendix provides an example of a COSE full message signature
>   and an example of a COSE_Sign0 message.  The display format includes
>   "\" to indicate that the same field continues on the next line, and it
>   includes "|" to separate items within a field.

Doesn’t COSE only have a COSE_Sign1?  COSE_Sign0 is mentioned as wrong in errata.

The example in A.2 doesn’t look like a COSE_Sign1 at all.

LL