Re: [Curdle] FW: New Version Notification for draft-ietf-curdle-pkix-04.txt

[Ilari Liusvaara <[e-mail]>]

On Sun, May 07, 2017 at 01:46:03PM -1000, Brian Smith wrote:
> Let me try again, this time using the same encoding that is used in
> the RFC (Base64):
> 
> Here are 5 examples of v2 PKCS#8 Ed25519 private keys, with the public
> key included, that I'd like to have included in the RFC as test
> vectors. The first four examples are valid (I hope!) and 5th example
> is invalid.

<snip some test vectors>


In case you want these, I did the corresponding vectors for Ed448
(using the reference implementation). I also included example PKCS#8v1
and public key (hopefully these are correct, I do have TLS library
capable of handling Ed448 keys, but it can't load this format, and
writing key module code for it would be a bit nontrivial):


Ed448 private key (from the first test vector in RFC8032):
-----BEGIN PRIVATE KEY-----
MEcCAQAwBQYDK2VxBDsEOWyCpWLLgI0Q1jK+ichRPr9skp803fqMn2PJlg7240ijUoyKP8wvBE45
o/xblEkvjwMudUmiAJj5Ww==
-----END PRIVATE KEY-----

Dumped as asn1:
    0 30   71: SEQUENCE {
    2 02    1:   INTEGER 0
    5 30    5:   SEQUENCE {
    7 06    3:     OBJECT IDENTIFIER
             :       EdDSA 448 signature algorithm { 1 3 101 113 }
             :     }
   12 04   59:   OCTET STRING
             :     04 39 6C 82 A5 62 CB 80 8D 10 D6 32 BE 89 C8 51
             :     3E BF 6C 92 9F 34 DD FA 8C 9F 63 C9 96 0E F6 E3
             :     48 A3 52 8C 8A 3F CC 2F 04 4E 39 A3 FC 5B 94 49
             :     2F 8F 03 2E 75 49 A2 00 98 F9 5B
             :   }

Note that the value of the private key is:

6C 82 A5 62 CB 80 8D 10 D6 32 BE 89 C8 51 3E BF
6C 92 9F 34 DD FA 8C 9F 63 C9 96 0E F6 E3 48 A3
52 8C 8A 3F CC 2F 04 4E 39 A3 FC 5B 94 49 2F 8F
03 2E 75 49 A2 00 98 F9 5B


Ed448 public key (the first test vector in RFC8032):

Public Key Information:
    Public Key Algorithm: EdDSA448
    Algorithm Security Level: Ultra

Public Key Usage:

Public Key ID: 3a04967761a552db7e9e18c6dba4bd4aae119908
-----BEGIN PUBLIC KEY-----
MEMwBQYDK2VxAzoAX9dEm1m0Yf0s54fsYWrUah2hNCSFpw4fig6nXYDpZ3jt8SR2m0bHBhvWeD3x
5Q9s0foavq/oJWGA
-----END PUBLIC KEY-----


Ed448 PKCS#8 v2. The first byte of the private key is zero:
-----BEGIN PRIVATE KEY-----
MIGFAgEBMAUGAytlcQQ7BDkAlY2VelwSNc5qN87ewXgVx3poDdR0OdqYyo/uBy4bnWEwDLG3dHXO
p+usJ1j3LxKJXlLXuR1HeQahPAM6APhztQF4TM64dZqkG41k/xfFx8cD346La7OO3tdx1s7eWRnh
/D+8vavt+fTgtDVtKgNq9hGF7z3YgA==
-----END PRIVATE KEY-----


Ed448 PKCS#8 v2. The last byte of the private key is zero:
-----BEGIN PRIVATE KEY-----
MIGFAgEBMAUGAytlcQQ7BDmB0i639YAUIxrkaJKyasoRPI/sVNywUPCC2G6LFgMH6u4K5aEaOH2m
BQ4BPulPRikPE0RqH+M/yAChPAM6AO45hh9/sUCg4JD4SIOZmB4eBBemoVXmDp/U95GzOnE1oIgf
TWQErk0VdzozIHu4AsIqup3RIZ7PAA==
-----END PRIVATE KEY-----


Ed448 PKCS#8 v2. The first byte of the public key is zero:
-----BEGIN PRIVATE KEY-----
MIGFAgEBMAUGAytlcQQ7BDn7w37WCHYkgzuWFxIp9s1UZdjBRWLCHQErJnYslwhzgarOZ4p5EnP5
JnC6y0q9FnZ/vaaqdgZSOVOhPAM6AAChrpHbZRZwBDZttZ5zgsK6WSL2jG+gOdwUITv0nOZ8wwv8
NTJ+CDurgoxzllC9o5V22p5f2LDKgA==
-----END PRIVATE KEY-----


Ed448 PKCS#8 v2. The last byte of the public key is zero:
-----BEGIN PRIVATE KEY-----
MIGFAgEBMAUGAytlcQQ7BDluPRT8xhEhgC+tSgkBXH/NcJ3rQcjQwuHuz4C3yoHa8dxx3rl5AoLs
+Msa6yepMSM8szmmA3tDHhWhPAM6AAwjssedathfb9G4JZl44MHQrenIavuVLx7WGWlAyizxOICd
OlNhiNnaG9X82sCHapbYur9B2M7aAA==
-----END PRIVATE KEY-----


INVALID Ed448 PKCS#8 v2. The last byte of the public key has
had its high bit flipped. (In Ed448 the public key has an extra byte not
present in X448.)
-----BEGIN PRIVATE KEY-----
MIGFAgEBMAUGAytlcQQ7BDmO9WySfQhRwpCdsECXiaxQAkMNe9QX2SApkWvjLMw07mXmtIFRWj0+
TblePrcgZtjcDVGCXfj+JgGhPAM6AFWgw4BsOzoCCGWud8wIhJnVVsxQXGqUPO+KySrQKzgR7Vnn
r4JiAANv2azdo57L52bQB3wmjqLbAA==
-----END PRIVATE KEY-----


-Ilari