[dtn] Re: I-D Action: draft-ietf-dtn-bpsec-cose-17.txt

Brian Sipos <brian.sipos+ietf@gmail.com> Mon, 24 August 2026 18:58 UTC

Return-Path: <brian.sipos@gmail.com>
X-Original-To: dtn@mail2.ietf.org
Delivered-To: dtn@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id CC01F12E9F2E6 for <dtn@mail2.ietf.org>; Mon, 24 Aug 2026 11:58:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787597905; bh=IYmYKl1jkUMCMSWeRLJWuiOjhUhkiHEV9R9nlK3RRL8=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=GNi7IN/mTBYbt0AYV9B4laZm1fWc1wwbuzVz3RiwPGOQZVTMWr6sUC66fd7XxksI8 V+OS5IwnBCZV6Z3yJqQroSD1IiCzmoajFtaJGN3+dC/j4Gg5zlZRRBOyZqiuOqHGML qmd0UzZvp9lz29YQC2JobDfgo3FMB8aJmXXz1OiY=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.098
X-Spam-Level:
X-Spam-Status: No, score=-1.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LY-rCZb9jDV6 for <dtn@mail2.ietf.org>; Mon, 24 Aug 2026 11:58:25 -0700 (PDT)
Received: from mail-wr1-x42e.google.com (mail-wr1-x42e.google.com [IPv6:2a00:1450:4864:20::42e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 524A612E9F2E1 for <dtn@ietf.org>; Mon, 24 Aug 2026 11:58:25 -0700 (PDT)
Received: by mail-wr1-x42e.google.com with SMTP id ffacd0b85a97d-47f84023916so2672420f8f.3 for <dtn@ietf.org>; Mon, 24 Aug 2026 11:58:25 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1787597904; cv=none; d=google.com; s=arc-20260327; b=UzTjhXZnFA4cZne/EzkIgm7sI5X0vAl0GidLffGAhmD4HXW3p5Zkn6teVclYVDtHYX 69WnVY4wnfjeneGsK06BXSrTvv0wpwr/fvd9KRzgNvek1ROefB5EQKUaetP24D4spJtx hlZtWlIUBgK+tBsFxGfWAln8GfvWrM2RS1D2rzNTBWuqH+djsTmdtL/nZiqrwD/tQ2QF Utjx8ZdC5bl3cOTiyDhaUb3zm8H4e9tYkNU/0XWuO5k4clYZn6JGUkRj3pCzFk2fbFsu Q4dApg284dJ9AbNncPUJ6BaVrpxXzjCmSuVjKbS3AUWwz/k0iPj3dzKRirdzInon59dI Btcg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=ADUr1EFgPviVwTg1878aH8+a44gsE0N1/wO1S07QwKs=; fh=J/LsZ1CknyGaeXPEja4TovewJdXwyRvwvrEIPgO1cx8=; b=YjHUZAZWoA1kLG8X6ErTSJf1D59x6TfuZkVTA6DYvzVNU0hoAB9m+GrX0lCZljDi16 2tJQJYsVHu/Ouo6dET6kZXjVLjQK0DMmu/VfU6LgCVGwIGFueo23zVlOcsPGS37LMHSs e0cEIOBS9B9ZdjXEnWDFyR00N+Hl+5yTze3Diah7mKZ4Uzgpo2Hw7QezRwlM9xZ8A4fN aSHu2dwJRNr5yqFtC6H0va49+HtMPTnG6J1GY/7j1+HFcXmIRmQWcs8C9Yi3e9SSbDeg DCOwc8gswsnNbCeAg38gHznKcZCr2DKuosyev7kPwaBDrpftcoRdust57X7QDQVDQEt/ 7TEw==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787597904; x=1788202704; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=ADUr1EFgPviVwTg1878aH8+a44gsE0N1/wO1S07QwKs=; b=iVwhb4ATj1mrw8sG3vpEfhjPO/l8dBujtPUWDB4diD0qzQ50xp9k/PItRqq3MWHvap KpAll3CWkq3hi/MrJ5hG7NrL4yCoWJfgJqLyk0P5zO5aN7Tvve5TRHIGvoJR5Myrhsag PPV3KtFwkf/pS/wwvjf3BJdTIqI5K8JnMlcIDKxlDR3AEiMeYjv86Cj7saHTmk1CSedV s1WUmDhaZAtwO6nR1lR78rC6hVZZjyQack/qKoMUbJHPgIhi/U9CgL59f94NshcW1WZ/ FukYwLn+CczdJY2eVwLxqzs2Z47Ig/HjUPN7t93/9Nk2loFai6B2jJVkxyQBWNNK+wNy JKFA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787597904; x=1788202704; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=ADUr1EFgPviVwTg1878aH8+a44gsE0N1/wO1S07QwKs=; b=JPiZIIkZSuepOcFAA72/hxomBfwIHGiTnY1IJyW6ZIKUs29aSrvnoJz/6ruLVEayv7 8hehTBXMTipvdgicldS0Vw40cLqSV4tgtVRrcTKM6E1H8OF2IXrdZ95+oL/PvoVE7pna MHcmL2nKTK8rokN8Su3PKxdN2yXBJEO27cs4Wd15WQnE1t54/l68e2UV8YVPFflg9UAK z+9gb62bybvWcy9rk2hUcZvsgpa1QtY1h8LoGRanDkeuYKpFreiADaxHwpdceh+0v2es /PciKrc2kz8ceXXn4chgpBY1h7IujrEr9QiH3G5YbU3o+hVHExXrx/WgSF17PTlj72D/ K5PA==
X-Gm-Message-State: AFuF++kvf0adz89ccVGQ8K+vFKLqBjNGr8KCPiIhuY4ikyAMK+F/vq3R yBKgrvHn7m8u/7TpAeojG2aasIjoyDm162K4mUAdmrDBWJ5JTQWZPMjtGEeKMOKL97vxi+71YGz 8/omDaJh1NKOB4ekaA4Jgna8aAqYUzVW+VFaF
X-Gm-Gg: AR+sD10S5+w9rX3Xksiedg/1k0UIYlvrWd66XjFT/z5cRKmiQVRGOgVoUWramLW3sJh 0Nuq28zPCwIjNxkN531jgtDnrHflOe4qZZljVAE207OrLwd2+f0WHM/md4ZpzNF7Aul2Evh1ebi lZZAZSwhhWhQj5CSpl/Nig3gMEjeuw65AGRm9nHustCADmHwOa1/ihbNtKJ/sGU7xnItdrvVbR/ sFh25v9EMsa9UNLtaauSrftGU/VAMtRiRueYusVCF0ekoq9tcEDpClY8MALy8UntBSIyhF1q1TA dyEn/MnBS3v3iyQWgaJAAjOaoXVvUckpAJssfele0O6wURyp1pk0kWo=
X-Received: by 2002:a05:6000:25fe:b0:47f:86af:8fe7 with SMTP id ffacd0b85a97d-482c0ba220fmr42554150f8f.22.1787597904059; Mon, 24 Aug 2026 11:58:24 -0700 (PDT)
MIME-Version: 1.0
References: <178578619063.1858678.15929826959901413348@dt-datatracker-d4d6ff9d9-ql5mb> <CAM1+-ghuyWPWPoxSe63vnyxwCU-XFUqYjexHUB8hGSo_fv1Zfg@mail.gmail.com> <CAMGpriU0pJpp=Sp_L-Yjr=STtnTFncOcoQBs23Ckon-=SMwR=g@mail.gmail.com>
In-Reply-To: <CAMGpriU0pJpp=Sp_L-Yjr=STtnTFncOcoQBs23Ckon-=SMwR=g@mail.gmail.com>
From: Brian Sipos <brian.sipos+ietf@gmail.com>
Date: Mon, 24 Aug 2026 14:58:12 -0400
X-Gm-Features: AcwNN1XUy7F0B2TUrAxJUgsxMlQtif3mie0f18uHMGDJoLKRHN7I_jHq4VFY-9o
Message-ID: <CAM1+-gjK5ZwaHOMi5uYxw-yNN9fQzhU+N=dWLkDpTo9P8S6zDA@mail.gmail.com>
To: Erik Kline <ek.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="00000000000012a1740659cf92ae"
Message-ID-Hash: 5BOWRNJJSXHUR2CVZO6647NSUWQ5EMHU
X-Message-ID-Hash: 5BOWRNJJSXHUR2CVZO6647NSUWQ5EMHU
X-MailFrom: brian.sipos@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-dtn.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: dtn@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [dtn] Re: I-D Action: draft-ietf-dtn-bpsec-cose-17.txt
List-Id: "Delay Tolerant Networking (DTN) discussion list at the IETF." <dtn.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dtn/0hWlzzGla-fd6Rv3S3eAH9E3MxM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dtn>
List-Help: <mailto:dtn-request@ietf.org?subject=help>
List-Owner: <mailto:dtn-owner@ietf.org>
List-Post: <mailto:dtn@ietf.org>
List-Subscribe: <mailto:dtn-join@ietf.org>
List-Unsubscribe: <mailto:dtn-leave@ietf.org>

Erik,
This write up is helpful. Thank you!

Under item 8, about validation of "formal language" in the document: there
is CDDL defined in this document, it is checked by CI tools on the document
source, and that CDDL is itself used to validate the example CBOR
diagnostic notation. Mentioning this in case you feel like an update is
useful or if questions come up during later reviews.

Brian S.

On Sun, Aug 23, 2026 at 12:00 AM Erik Kline <ek.ietf@gmail.com> wrote:

> Chairs,
>
> I've posted a shepherd write-up for draft -17.  I believe this can go to
> IETF LC.
>
> -ek
>
> On Mon, Aug 3, 2026 at 12:55 PM Brian Sipos <brian.sipos+ietf@gmail.com>
> wrote:
>
>> WG,
>> This latest version of the BPSec COSE draft corrects issues found during
>> document shepherd review and from the idnits tool.
>> It also adds two examples covering use cases outside of pure COSE message
>> content related to more complex BPSec use: Example A.11 uses an expanded
>> AAD Scope and Example A.12 uses one of the additional header parameters.
>>
>> The symmetric key examples have been validated with an implementation of
>> the COSE Context in the NASA AMMOS BPSec Library [1] which will be having a
>> version 2 release later this year. This implementation could be used for
>> interoperability testing, but has not yet done so as far as I know.
>>
>> Brian S.
>>
>> [1] https://github.com/NASA-AMMOS/BSL/
>>
>> On Mon, Aug 3, 2026 at 3:43 PM <internet-drafts@ietf.org> wrote:
>>
>>> Internet-Draft draft-ietf-dtn-bpsec-cose-17.txt is now available. It is
>>> a work
>>> item of the Delay/Disruption Tolerant Networking (DTN) WG of the IETF.
>>>
>>>    Title:   Bundle Protocol Security (BPSec) COSE Context
>>>    Author:  Brian Sipos
>>>    Name:    draft-ietf-dtn-bpsec-cose-17.txt
>>>    Pages:   103
>>>    Dates:   2026-08-03
>>>
>>> Abstract:
>>>
>>>    This document defines a security context suitable for using CBOR
>>>    Object Signing and Encryption (COSE) algorithms within Bundle
>>>    Protocol Security (BPSec) integrity and confidentiality blocks.  A
>>>    profile for COSE, organized by algorithm families, and for public key
>>>    certificates are included for BPSec interoperation.
>>>
>>>    This document updates BPSec RFC 9172 by providing Concise Data
>>>    Definition Language (CDDL) rules for extensible security block
>>>    content.
>>>
>>> The IETF datatracker status page for this Internet-Draft is:
>>> https://datatracker.ietf.org/doc/draft-ietf-dtn-bpsec-cose/
>>>
>>> There is also an HTML version available at:
>>> https://www.ietf.org/archive/id/draft-ietf-dtn-bpsec-cose-17.html
>>>
>>> A diff from the previous version is available at:
>>> https://author-tools.ietf.org/iddiff?url2=draft-ietf-dtn-bpsec-cose-17
>>>
>>> Internet-Drafts are also available by rsync at:
>>> rsync.ietf.org::internet-drafts
>>>
>>>
>>> _______________________________________________
>>> dtn mailing list -- dtn@ietf.org
>>> To unsubscribe send an email to dtn-leave@ietf.org
>>>
>>