Re: [IPsec] #118: Reference for PKCS #7
Yaron Sheffer <yaronf@checkpoint.com> Wed, 25 November 2009 13:01 UTC
Return-Path: <yaronf@checkpoint.com>
X-Original-To: ipsec@core3.amsl.com
Delivered-To: ipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E7C5D28C224 for <ipsec@core3.amsl.com>; Wed, 25 Nov 2009 05:01:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.513
X-Spam-Level:
X-Spam-Status: No, score=-3.513 tagged_above=-999 required=5 tests=[AWL=0.086, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3uOv82aMETOh for <ipsec@core3.amsl.com>; Wed, 25 Nov 2009 05:01:08 -0800 (PST)
Received: from michael.checkpoint.com (michael.checkpoint.com [194.29.32.68]) by core3.amsl.com (Postfix) with ESMTP id A63CB28C21E for <ipsec@ietf.org>; Wed, 25 Nov 2009 05:01:07 -0800 (PST)
Received: from il-ex01.ad.checkpoint.com (localhost [127.0.0.1]) by michael.checkpoint.com (8.12.10+Sun/8.12.10) with ESMTP id nAPD10Go021594; Wed, 25 Nov 2009 15:01:01 +0200 (IST)
Received: from il-ex01.ad.checkpoint.com ([126.0.0.2]) by il-ex01.ad.checkpoint.com ([126.0.0.2]) with mapi; Wed, 25 Nov 2009 15:01:06 +0200
From: Yaron Sheffer <yaronf@checkpoint.com>
To: Tero Kivinen <kivinen@iki.fi>
Date: Wed, 25 Nov 2009 15:01:05 +0200
Thread-Topic: [IPsec] #118: Reference for PKCS #7
Thread-Index: Acptxwenywo3hGljRBuvqDZ/TtQ9KAAB6o2A
Message-ID: <7F9A6D26EB51614FBF9F81C0DA4CFEC801BDF88E012E@il-ex01.ad.checkpoint.com>
References: <7F9A6D26EB51614FBF9F81C0DA4CFEC801BDA1213EAA@il-ex01.ad.checkpoint.com> <7F9A6D26EB51614FBF9F81C0DA4CFEC801BDF88DFFE2@il-ex01.ad.checkpoint.com> <19213.7316.277814.1281@fireball.kivinen.iki.fi>
In-Reply-To: <19213.7316.277814.1281@fireball.kivinen.iki.fi>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: IPsecme WG <ipsec@ietf.org>
Subject: Re: [IPsec] #118: Reference for PKCS #7
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Nov 2009 13:01:09 -0000
No, Sec. 1.1.1 of RFC 5652 (which you are quoting) only describes the differences between the original PKCS #7 v1.5 and RFC 2630. There follow a few more sections with other bells and whistles leading to RFC 5652. Besides, even if the later RFCs are (mostly) *backward compatible* with RFC 2315, they may still be adding useful stuff. This is just speculation on my part, not actual knowledge. Thanks, Yaron > -----Original Message----- > From: Tero Kivinen [mailto:kivinen@iki.fi] > Sent: Wednesday, November 25, 2009 14:01 > To: Yaron Sheffer > Cc: IPsecme WG > Subject: Re: [IPsec] #118: Reference for PKCS #7 > > Yaron Sheffer writes: > > Russ later pointed out that there are multiple RFCs defining PKCS > > #7. Inputs on current implementations are welcome. > > > > PKCS#7 should reference RFC 2315<http://tools.ietf.org/html/rfc2315>. > > I think the two options is either RFC5652 (latest CMS) or RFC2315 > (original PKCS#7). All other of the rfcs have been obsoleted by the > RFC5652. > > I do not know enough of the later CMS versions, but RFC2630 says that > it should be backward compatible with RFC2315 expect where it was > changed to "accommodate attribute certificate transfer and key > agreement techniques for key management". > > As I do not think we need any of those in IKEv2, I think it is enough > to refer to the RFC2315. > -- > kivinen@iki.fi > > Scanned by Check Point Total Security Gateway.
- [IPsec] #118: Reference for PKCS #7 Yaron Sheffer
- Re: [IPsec] #118: Reference for PKCS #7 Russ Housley
- Re: [IPsec] #118: Reference for PKCS #7 Yaron Sheffer
- Re: [IPsec] #118: Reference for PKCS #7 Paul Hoffman
- Re: [IPsec] #118: Reference for PKCS #7 Tero Kivinen
- Re: [IPsec] #118: Reference for PKCS #7 Yaron Sheffer
- Re: [IPsec] #118: Reference for PKCS #7 Tero Kivinen