[Curdle] [Errata Verified] RFC8410 (7384)

RFC Errata System <rfc-editor@rfc-editor.org> Thu, 11 April 2024 19:56 UTC

To: housley@vigilsec.com, simon@josefsson.org, ietf@augustcellars.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: debcooley1@gmail.com, iesg@ietf.org, curdle@ietf.org, iana@iana.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240411195633.4C0D0CE3BD@rfcpa.amsl.com>
Date: Thu, 11 Apr 2024 12:56:33 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/g1EUqxkVco3UzCv5AjgeuzMdlEY>
Subject: [Curdle] [Errata Verified] RFC8410 (7384)
Precedence: list

The following errata report has been verified for RFC8410,
"Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7384

--------------------------------------
Status: Verified
Type: Technical

Reported by: Russ Housley <housley@vigilsec.com>
Date Reported: 2023-03-12
Verified by: Deb Cooley (IESG)

Section: 9

Original Text
-------------
    sa-Ed25519 SIGNATURE-ALGORITHM ::= {
       IDENTIFIER id-Ed25519
        PARAMS ARE absent
        PUBLIC-KEYS {pk-Ed25519}
        SMIME-CAPS { IDENTIFIED BY id-Ed25519 }
    }

    pk-Ed25519 PUBLIC-KEY ::= {
        IDENTIFIER id-Ed25519
        -- KEY no ASN.1 wrapping --
        PARAMS ARE absent
        CERT-KEY-USAGE {digitalSignature, nonRepudiation,
                        keyCertSign, cRLSign}
        PRIVATE-KEY CurvePrivateKey
    }

Corrected Text
--------------
    sa-Ed25519 SIGNATURE-ALGORITHM ::= {
       IDENTIFIER id-Ed25519
        PARAMS ARE absent
        PUBLIC-KEYS {pk-Ed25519}
        SMIME-CAPS { IDENTIFIED BY id-Ed25519 }
    }

    pk-Ed25519 PUBLIC-KEY ::= {
        IDENTIFIER id-Ed25519
        -- KEY no ASN.1 wrapping --
        PARAMS ARE absent
        CERT-KEY-USAGE {digitalSignature, nonRepudiation,
                        keyCertSign, cRLSign}
        PRIVATE-KEY CurvePrivateKey
    }

   sa-Ed448 SIGNATURE-ALGORITHM ::= {
      IDENTIFIER id-Ed448
       PARAMS ARE absent
       PUBLIC-KEYS {pk-Ed448}
       SMIME-CAPS { IDENTIFIED BY id-Ed448 }
   }

   pk-Ed448 PUBLIC-KEY ::= {
       IDENTIFIER id-Ed448
       -- KEY no ASN.1 wrapping --
       PARAMS ARE absent
       CERT-KEY-USAGE {digitalSignature, nonRepudiation,
                       keyCertSign, cRLSign}
       PRIVATE-KEY CurvePrivateKey
   }

Notes
-----
The definitions for sa-Ed448 and pk-Ed448 are missing from RFC 8410.

--------------------------------------
RFC8410 (draft-ietf-curdle-pkix-10)
--------------------------------------
Title               : Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure
Publication Date    : August 2018
Author(s)           : S. Josefsson, J. Schaad
Category            : PROPOSED STANDARD
Source              : CURves, Deprecating and a Little more Encryption
Stream              : IETF
Verifying Party     : IESG

[Curdle] [Errata Verified] RFC8410 (7384) RFC Errata System
[Curdle] [IANA #1362871] [Errata Verified] RFC841… Sabrina Tanamal via RT
Re: [Curdle] [IANA #1362871] [Errata Verified] RF… Russ Housley