Re: [Curdle] [Editorial Errata Reported] RFC8410 (5709)

Jim Schaad <ietf@augustcellars.com> Sat, 04 May 2019 04:36 UTC

From: Jim Schaad <ietf@augustcellars.com>
To: 'RFC Errata System' <rfc-editor@rfc-editor.org>, simon@josefsson.org, rdd@cert.org, kaduk@mit.edu, daniel.migault@ericsson.com, rsalz@akamai.com
CC: lijun.liao@gmail.com, curdle@ietf.org
References: <20190429123629.DE193B81EB8@rfc-editor.org>
In-Reply-To: <20190429123629.DE193B81EB8@rfc-editor.org>
Date: Fri, 03 May 2019 21:36:32 -0700
Message-ID: <01f301d50232$f55e8390$e01b8ab0$@augustcellars.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Content-Language: en-us
Thread-Index: AQHVaTHQM8kheeGAm/lgcXotd70r2KZZkyLA
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/stu6IGyN9WZlyqOKOVavn0UniEY>
Subject: Re: [Curdle] [Editorial Errata Reported] RFC8410 (5709)
Precedence: list

This is not a correct errata and I would label it as rejected.

The certificate is a self-issued certificate not a self-signed certificate.   Given that the algorithm for the key is "ECDH 25519 key agreement" it could not be used for signing.

> -----Original Message-----
> From: RFC Errata System <rfc-editor@rfc-editor.org>
> Sent: Monday, April 29, 2019 5:36 AM
> To: simon@josefsson.org; ietf@augustcellars.com; rdd@cert.org;
> kaduk@mit.edu; daniel.migault@ericsson.com; rsalz@akamai.com
> Cc: lijun.liao@gmail.com; curdle@ietf.org; rfc-editor@rfc-editor.org
> Subject: [Editorial Errata Reported] RFC8410 (5709)
> 
> The following errata report has been submitted for RFC8410, "Algorithm
> Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509
> Public Key Infrastructure".
> 
> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata/eid5709
> 
> --------------------------------------
> Type: Editorial
> Reported by: Lijun Liao <lijun.liao@gmail.com>
> 
> Section: 10.2
> 
> Original Text
> -------------
> -
> 
> Corrected Text
> --------------
> -
> 
> Notes
> -----
> The example certificate is a self-signed certificate containing X25519 public
> key. Unlike standard EC public key, the public key for key exchange is NOT
> the same as the one for digital signature in curve25519. That means, for the
> same private key, the public keys for X25519 and for Ed25519 are different.
> As a result, the public key in the self-signed certificate can NOT be used to
> verify the signature. In this context, please replace the example certificate by
> one containing the Ed25519 public key.
> 
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please use
> "Reply All" to discuss whether it should be verified or rejected. When a
> decision is reached, the verifying party can log in to change the status and
> edit the report, if necessary.
> 
> --------------------------------------
> RFC8410 (draft-ietf-curdle-pkix-10)
> --------------------------------------
> Title               : Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for
> Use in the Internet X.509 Public Key Infrastructure
> Publication Date    : August 2018
> Author(s)           : S. Josefsson, J. Schaad
> Category            : PROPOSED STANDARD
> Source              : CURves, Deprecating and a Little more Encryption
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG

[Curdle] [Editorial Errata Reported] RFC8410 (570… RFC Errata System
Re: [Curdle] [Editorial Errata Reported] RFC8410 … Jim Schaad