Last Call: <draft-ietf-cose-webauthn-algorithms-05.txt> (COSE and JOSE Registrations for WebAuthn Algorithms) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Wed, 13 May 2020 12:40 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-cose-webauthn-algorithms-05.txt> (COSE and JOSE Registrations for WebAuthn Algorithms) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
CC: cose@ietf.org, superuser@gmail.com, cose-chairs@ietf.org, ivaylo@ackl.io, Ivaylo Petrov <ivaylo@ackl.io>, draft-ietf-cose-webauthn-algorithms@ietf.org
Reply-To: last-call@ietf.org
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <158937361695.30811.14534799425984840549@ietfa.amsl.com>
Date: Wed, 13 May 2020 05:40:17 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/Fz1gIpuz-bRtYZLwzRPgfyA4nPE>

The IESG has received a request from the CBOR Object Signing and Encryption
WG (cose) to consider the following document: - 'COSE and JOSE Registrations
for WebAuthn Algorithms'
<draft-ietf-cose-webauthn-algorithms-05.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
last-call@ietf.org mailing lists by 2020-05-27. Exceptionally, comments may
be sent to iesg@ietf.org instead. In either case, please retain the beginning
of the Subject line to allow automated sorting.

Abstract

The W3C Web Authentication (WebAuthn) specification and the FIDO
Alliance Client to Authenticator Protocol (CTAP) specification use
CBOR Object Signing and Encryption (COSE) algorithm identifiers.
This specification registers the following algorithms in the IANA
"COSE Algorithms" registry, which are used by WebAuthn and CTAP
implementations: RSASSA-PKCS1-v1_5 using SHA-256, SHA-384, SHA-512,
and SHA-1, and ECDSA using the secp256k1 curve and SHA-256. It
registers the secp256k1 elliptic curve in the IANA "COSE Elliptic
Curves" registry. Also, for use with JSON Object Signing and
Encryption (JOSE), it registers the algorithm ECDSA using the
secp256k1 curve and SHA-256 in the IANA "JSON Web Signature and
Encryption Algorithms" registry and the secp256k1 elliptic curve in
the IANA "JSON Web Key Elliptic Curve" registry.

The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-cose-webauthn-algorithms/

No IPR declarations have been submitted directly on this I-D.

The document contains these normative downward references.
See RFC 3967 for additional information:
rfc6194: Security Considerations for the SHA-0 and SHA-1 Message-Digest Algorithms (Informational - IETF stream)

Last Call: <draft-ietf-cose-webauthn-algorithms-0… The IESG