Re: [Curdle] Review of draft-ietf-curdle-cms-ecdh-new-curves-02

[Russ Housley <[e-mail]>]

I have had one person talk to me about implementation, but I do not know if they have started coding yet or not.

Russ


> On Apr 10, 2017, at 11:06 AM, Daniel Migault <[e-mail]> wrote:
> 
> Thanks for the registries clarification. One more question, are you aware of any implementation of the drafts?
> Yours,
> Daniel
>  
> From: Russ Housley [mailto:[e-mail] <mailto:[e-mail]>] 
> Sent: Monday, April 10, 2017 11:03 AM
> To: Daniel Migault <[e-mail] <mailto:[e-mail]>>
> Cc: Jim Schaad <[e-mail] <mailto:[e-mail]>>; curdle <[e-mail] <mailto:[e-mail]>>
> Subject: Re: [Curdle] Review of draft-ietf-curdle-cms-ecdh-new-curves-02
>  
> Daniel:
>  
> Thanks for the review.
>  
> 1) nits tool
> the nits tools returns the following additional error:
> 
> == The "Author's Address" (or "Authors' Addresses") section title is
>      misspelled.
>  
> Fixed.
> 
> 
> 2) section 2.1 defining KEK
>  
> OLD:
> To generate a key-encryption key, generates one or more KM blocks,
> 
> NEW:
> To generate a key-encryption key (KEK), KDF generates one or more KM blocks,
>  
> Okay.  I made that change.
>  
> 3) section 2.2 defining HKDF
>  
> OLD:
> The HKDF key derivation function is a robust construct based on a one-way hash function described in RFC 5869 [HKDF].
> 
> NEW:
> The HMAC-based Extract-and-Expand Key Derivation Function (HKDF) is a robust construct based on a one-way hash function described in RFC 5869 [HKDF].
>  
> Okay.  I made that change.
> 
> 
> 4) IANA section: 
>  
> * Wouldn't it be appropriated to mention RFC7107 section 3.3 and section 3.6 for each allocation.
>  
> RFC 7107 created the registries.  I do not see any reason to point to that document for the assignment in the registries.
> 
> 
> * I have been recommended to ask to add the IANA link hosting the registries as an informational reference. In that case, that would be the following one: http://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#security-smime-3 <http://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#security-smime-3>
>  
> Okay.  I handed a reference for the module arc and a reference for the algorithm arc.
> 
> 
> * The presentation in the IANA section differs from  the one of RFC7107 which uses a table with Decimal , Description, Reference rather than using the OID presentation.
>  
> I used the decimal presentation because that is used in the header of the registry by IANA.
> 
> 
> * I am wondering whether the current draft does not update RFC7107, in which case it should be mentioned in the header, abstract and introduction. What do you think ?
>  
> No.  RFC 7107 established the registry.  It does not need to be updated for every assignment that takes place in those registries.
>  
> Russ