Re: [Curdle] New Version Notification for draft-mtis-lamps-8410-ku-clarifications-00.txt

It does, it’s just in the prose before the list:

      If the keyUsage extension is present in a certification authority
      certificate that indicates id-Ed25519 or id-Ed448 in
      SubjectPublicKeyInfo, then the keyUsage extension MUST contain
->   keyCertSign, and zero, or more of the following:

spt

> On Jan 12, 2022, at 15:55, Russ Housley <housley@vigilsec.com> wrote:
> 
> Sean:
> 
> I think that id-Ed25519 or id-Ed448 need to allow keyCertSign as well.  Otherwise, a CA could not use these signature algorithms.
> 
> Russ
> 
> 
>> On Jan 12, 2022, at 2:59 PM, Sean Turner <sean@sn3rd.com> wrote:
>> 
>> LAMPS,
>> 
>> Hi! While Ito-san and I were working on RFC 8813 (nee draft-ietf-lamps-5480-ku-clarifications, nee draft-turner-5480-ku-clarifications), Daniel McCarney asked whether we should write the same kind of clarifications for RFC 8410 [1] (algorithm identifiers for Ed25519, Ed448, X25519, and X448 in certificates). I had a look and exchanged some emails with Simon and it seems like it would be good to make sure there were the same clarifications for the x25519 and x448 identifiers that we had for the other identifiers … so we produced this I-D.
>> 
>> Note: I am forwarding this I-D to LAMPS for consideration and not curdle knowing that curdle is planning to close. I also alerted the chairs and am cc’ing curdle so nobody is surprised.  As this is basically, a do-over of RFC 8410 I am hoping that adopting/progressing this I-D will be non-controversial.
>> 
>> Cheers,
>> spt
>> 
>> [1] https://datatracker.ietf.org/doc/rfc8410/
>> 
>>> Begin forwarded message:
>>> 
>>> From: internet-drafts@ietf.org
>>> Subject: New Version Notification for draft-mtis-lamps-8410-ku-clarifications-00.txt
>>> Date: January 12, 2022 at 01:15:39 EST
>>> To: "Daniel McCarney" <daniel@binaryparadox.net>, "Sean Turner" <sean@sn3rd.com>, "Simon Josefsson" <simon@josefsson.org>, "Tadahiko Ito" <tadahiko.ito.public@gmail.com>
>>> 
>>> 
>>> A new version of I-D, draft-mtis-lamps-8410-ku-clarifications-00.txt
>>> has been successfully submitted by Sean Turner and posted to the
>>> IETF repository.
>>> 
>>> Name:		draft-mtis-lamps-8410-ku-clarifications
>>> Revision:	00
>>> Title:		Clarifications for Ed25519, Ed448, X25519, and X448 Algorithm Identifiers
>>> Document date:	2022-01-12
>>> Group:		Individual Submission
>>> Pages:		6
>>> URL:            https://www.ietf.org/archive/id/draft-mtis-lamps-8410-ku-clarifications-00.txt
>>> Status:         https://datatracker.ietf.org/doc/draft-mtis-lamps-8410-ku-clarifications/
>>> Html:           https://www.ietf.org/archive/id/draft-mtis-lamps-8410-ku-clarifications-00.html
>>> Htmlized:       https://datatracker.ietf.org/doc/html/draft-mtis-lamps-8410-ku-clarifications
>>> 
>>> 
>>> Abstract:
>>>   This document updates RFC 8410 to clarify existing and specify
>>>   missing semantics for key usage bits when used in certificates that
>>>   support the Ed25519, Ed448, X25519, and X448 Elliptic Curve
>>>   Cryptography algorithms.
>>> 
>>> 
>>> 
>>> 
>>> The IETF Secretariat
>>> 
>>> 
>> 
>> _______________________________________________
>> Curdle mailing list
>> Curdle@ietf.org
>> https://www.ietf.org/mailman/listinfo/curdle
> 