I-D Action: draft-turner-sodp-profile-00.txt

internet-drafts@ietf.org Mon, 25 March 2019 21:30 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-turner-sodp-profile-00.txt
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <155354944251.24385.3484282786612303166@ietfa.amsl.com>
Date: Mon, 25 Mar 2019 14:30:42 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/i-d-announce/W7-cdkzpqpwjDq2Gbz5lkiTHMkU>

A New Internet-Draft is available from the on-line Internet-Drafts directories.

Title : The SODP (Secure Object Delivery Protocol) Server Interfaces: NSA's Profile for Delivery of Certificates, CRLs, and Symmetric Keys to Clients
Authors : Michael Jenkins
Sean Turner
Filename : draft-turner-sodp-profile-00.txt
Pages : 20
Date : 2019-03-25

Abstract:
This document specifies protocol interfaces profiled by the US NSA
(United States National Security Agency) for NSS (National Security
System) servers that provide public key certificates, CRLs
(Certificate Revocation Lists), and symmetric keys to NSS clients.
Servers that support these interfaces are referred to as SODP (Secure
Object Delivery Protocol) servers. The intended audience for this
profile comprises developers of client devices that will obtain key
management services from NSA-operated SODP servers. The profile
indicates which options from the profiled base specifications are
necessary to achieve interoperability with those servers. It also
imposes requirements on client devices beyond those in the base
specifications. Interfaces supported by SODP servers include: EST
(Enrollment over Secure Transport) and its extensions as well as CMC
(Certificate Management over CMS (Cryptographic Message Syntax)).

This profile applies to the capabilities, configuration, and
operation of all components of US National Security Systems (SP 800-
59). It is also appropriate for other US Government systems that
process high-value information. It is made publicly available for use
by developers and operators of these and any other system
deployments.

This profile conforms to the existing requirements of NSA's
Commercial National Security Algorithms. As operational needs evolve
over time, this profile will be updated to incorporate new commercial
algorithms and protocols as they are developed and approved for use.

The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-turner-sodp-profile/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-turner-sodp-profile-00
https://datatracker.ietf.org/doc/html/draft-turner-sodp-profile-00

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

I-D Action: draft-turner-sodp-profile-00.txt internet-drafts