Final SPKM draft...

["carlisle (c.m.) adams" <[e-mail]>]

The Internet Draft for SPKM (draft-ietf-cat-spkmgss-04.txt), which has 
been in limbo in its IESG last call (owing to questions regarding RSA 
licensing), has expired.  A replacement draft (-05.txt) has therefore
been issued.  In this draft, some minor changes have been made for 
editorial, clarity, and consistency reasons.  There are no technical 
changes which impinge upon decisions made in the CAT group.  Therefore, 
I believe that this draft can now be considered the final draft for 
IESG consideration for progression to Proposed Standard.

The changes are as follows.

- Proper OBJECT IDs have been assigned by IANA and inserted in all 
  relevant places.

- Some ASN.1 errors have been fixed (e.g., some tagging errors have been 
  corrected and innerContextToken is now a CHOICE of ASN.1 structures).

- Specific, clarifying text has been added to address deficiencies in 
  the processing logic for both the protocol version number (pvno) 
  negotiation and the derivation algorithm for subkeys from the 
  established context key.

- The integrity mechanism on all context establishment tokens has been 
  made the same, i.e., a choice of a MAC or a digital signature 
  (previously, only a digital signature was allowed on the SPKM_REP_TI 
  and SPKM_REP_IT tokens).  The MAC option may prove useful with future 
  key establishment algorithms which do not require signature-based 
  authentication.  The operation of currently-specified key 
  establishment mechanisms is unchanged.

- Other minor editorial changes for clarification and readability.


Carlisle Adams