IETF Logo Mail Archive

Re: [Curdle] FW: New Version Notification for draft-ietf-curdle-pkix-04.txt

Brian Smith <brian@briansmith.org> Mon, 08 May 2017 05:40 UTC

Return-Path: <brian@briansmith.org>
X-Original-To: curdle@ietfa.amsl.com
Delivered-To: curdle@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10557126DD9 for <curdle@ietfa.amsl.com>; Sun, 7 May 2017 22:40:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=briansmith-org.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r21WI6tujkBT for <curdle@ietfa.amsl.com>; Sun, 7 May 2017 22:39:58 -0700 (PDT)
Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DA6E126CBF for <curdle@ietf.org>; Sun, 7 May 2017 22:39:58 -0700 (PDT)
Received: by mail-io0-x22a.google.com with SMTP id k91so43764047ioi.1 for <curdle@ietf.org>; Sun, 07 May 2017 22:39:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=briansmith-org.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=2vfxdI42epmKmfRN6uuCUBT55pjdRXdy3n07xnRV/JA=; b=ToR8tqLIDagxBvZYbi87o0qXLAveVYRZkBnNu3QNOf8uY2OfLnuTbytBIlHr6GNNW/ PK0OFqQ5BWgNDgVguga6MIIRlSvYFz0CcNzLFb3qgN/P0a4Yz9MvlR3D4jKmNfJJaP5T d+fgWt8HhOMe8sFezGbroWm2Q/1UlTsMgaJnwWjxSZiPvYMostZCKGl+zo8EcrxxCi4q hKeGvRGOZVSBI9OXoxJT11QSwGV5x7BpRccSlc1i9RYFwUFHKvDNzVo40yySEZDC7L+v +ront8mpQOgqMh23UkyK9YEmJ5xN4osadSxGyiZzqYBI4yMyMXrU5zCpKAyfS2VausnP iJ6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=2vfxdI42epmKmfRN6uuCUBT55pjdRXdy3n07xnRV/JA=; b=FWMaJQ7Y4WY/1Gl/gdDOMWmCTemMZmgpeLLEe8FKejxRWSx5sHr4QLx98T4UPYruGa 0Y+GJKksLndgsOpf8t5+4Hp3EFE6sIERxPXggU7nU2tDK5EfJEmcBSqTzl3QwPVbmYef KH5wbIV/Zm1ryLpk1QxRndywo+DsUSFtu9MxxgvYkoDhwdrfFeBb05erm/s79A1Dq+8d uPubuekL+FDv7HR4HUsBcMypMLS1MvJi5aIq4z59G+UHL0OBZ++uJYG6fpgEdvPrWfpc W248adkcb+pNr9SsR5mKRo52pSyuQngGE21ShpNaC1aAXt/4hl1or3iMEs3iiI3qnoof 2JFw==
X-Gm-Message-State: AN3rC/6cIfhqV0cg6byL1PIjdI/QPEXthGSSCU0IWhR79nDCT+kgu2nv 4nf6lYVHMEewkEQ0SvecwRi64Lnh6MEE
X-Received: by 10.107.52.202 with SMTP id b193mr56221077ioa.150.1494221997724; Sun, 07 May 2017 22:39:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.36.77.84 with HTTP; Sun, 7 May 2017 22:39:57 -0700 (PDT)
In-Reply-To: <CAFewVt5v_bqQMo7ZpnnUWa2c41Xy-SkUWw63sh8Yn-UWskKdmw@mail.gmail.com>
References: <149073663013.1172.4888065212435317707.idtracker@ietfa.amsl.com> <051401d2a80b$e9bdea90$bd39bfb0$@augustcellars.com> <CAFewVt6-0WSqmwD7xVvKWDg3P9vNpFZDqB-n61hiU9qQp1c2cw@mail.gmail.com> <006d01d2c194$0e99b280$2bcd1780$@augustcellars.com> <CAFewVt7iuyzY-VkQn7V7PjEOWyk0k7-KLsmpEGjhSdTh7JW2Og@mail.gmail.com> <CAFewVt5v_bqQMo7ZpnnUWa2c41Xy-SkUWw63sh8Yn-UWskKdmw@mail.gmail.com>
From: Brian Smith <brian@briansmith.org>
Date: Sun, 07 May 2017 19:39:57 -1000
Message-ID: <CAFewVt4dv0Q2C_N+Cn2or6D+_CdZCDwfoe-g1sOTJqNSJON_nw@mail.gmail.com>
To: Jim Schaad <ietf@augustcellars.com>
Cc: curdle <curdle@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/atuTHxC3LSrXy25I5hxn1rLwPRo>
Subject: Re: [Curdle] FW: New Version Notification for draft-ietf-curdle-pkix-04.txt
X-BeenThere: curdle@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "List for discussion of potential new security area wg." <curdle.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/curdle>, <mailto:curdle-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/curdle/>
List-Post: <mailto:curdle@ietf.org>
List-Help: <mailto:curdle-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/curdle>, <mailto:curdle-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 May 2017 05:40:00 -0000

On Sun, May 7, 2017 at 1:46 PM, Brian Smith <brian@briansmith.org> wrote:
> Here are 5 examples of v2 PKCS#8 Ed25519 private keys, with the public
> key included, that I'd like to have included in the RFC as test
> vectors. The first four examples are valid (I hope!) and 5th example
> is invalid.

Here are 4 pairs of example X25519 PKCS#8 v2 keys. The first key in
each pair has its public key's high bit clear. The second key in each
pair is the same except it has its public key's high bit set.

The private key ends with a zero byte. The public key's high bit
is zero.
-----BEGIN PRIVATE KEY-----
MFMCAQEwBQYDK2VuBCIEIKIu/bcT8OFgDSpc6UjjIco6GBN8R/FQkaEscSbBdJoAoS
MDIQDliXC2h2mPYSA5LxgZtiSnFyycrsQrC/N4W0DGBswoYA==
-----END PRIVATE KEY-----

The private key is the same as the previous one. The public key is
also the same except its high bit is one.
-----BEGIN PRIVATE KEY-----
MFMCAQEwBQYDK2VuBCIEIKIu/bcT8OFgDSpc6UjjIco6GBN8R/FQkaEscSbBdJoAoS
MDIQDliXC2h2mPYSA5LxgZtiSnFyycrsQrC/N4W0DGBswo4A==
-----END PRIVATE KEY-----

The private key starts with a zero byte. The public key's high bit
is zero.
-----BEGIN PRIVATE KEY-----
MFMCAQEwBQYDK2VuBCIEIACxp8ILK07Zx482htuC+FRzTNyVvlHe8wTZjgzTC/SQoS
MDIQDU7K6GMlleypYW/dhAD/Lp4LZakMUufAZu5j0+0YweBw==
-----END PRIVATE KEY-----

The private key is the same as the previous one. The public key is
also the same except its high bit is one.
-----BEGIN PRIVATE KEY-----
MFMCAQEwBQYDK2VuBCIEIACxp8ILK07Zx482htuC+FRzTNyVvlHe8wTZjgzTC/SQoS
MDIQDU7K6GMlleypYW/dhAD/Lp4LZakMUufAZu5j0+0Ywehw==
-----END PRIVATE KEY-----

The public key starts with a zero byte. The public key's high bit
is zero.
-----BEGIN PRIVATE KEY-----
MFMCAQEwBQYDK2VuBCIEILk6+PsBTElrUDbktWya6voRhmEjk7/6kA3NocUxR5yAoS
MDIQAAO3q2kQKshYA5ywap42py7uq0Sx751hwGgeQUcC3/Dw==
-----END PRIVATE KEY-----

The private key is the same as the previous one. The public key is
also the same except its high bit is one.
-----BEGIN PRIVATE KEY-----
MFMCAQEwBQYDK2VuBCIEILk6+PsBTElrUDbktWya6voRhmEjk7/6kA3NocUxR5yAoS
MDIQAAO3q2kQKshYA5ywap42py7uq0Sx751hwGgeQUcC3/jw==
-----END PRIVATE KEY-----

The public key ends with a zero byte, and thus its high bit is
zero.
-----BEGIN PRIVATE KEY-----
MFMCAQEwBQYDK2VuBCIEIHLXzckbjCm4crsB85VeSSH7kxonnTnUMO+QfBbe2JVIoS
MDIQCZxD/fCNjPVwXxYAKr8DhD7Vw0q8PrhpvXW5j2krCYAA==
-----END PRIVATE KEY-----

The private key is the same as the previous one. The public key is
also the same except its high bit is one.
-----BEGIN PRIVATE KEY-----
MFMCAQEwBQYDK2VuBCIEIHLXzckbjCm4crsB85VeSSH7kxonnTnUMO+QfBbe2JVIoS
MDIQCZxD/fCNjPVwXxYAKr8DhD7Vw0q8PrhpvXW5j2krCYgA==
-----END PRIVATE KEY-----

Cheers,
Brian
--
https://briansmith.org/

v2.23.0 | Report a Bug | By Email