Re: [jose] JWK defining format for OpenPGP type of keys

[Jim Schaad <[e-mail]>]

The JOSE working group has closed, so that avenue is not available for you to bring in a document up in the IETF.  The procedure to do this would be to write up a draft which both justifies the work and provides the details for how to do it.  I would assume that the details would be quite easy but you might have some problems getting a decent justification created.

 

I would go ahead and use this mailing list for discussions and you would really need to recruit one or two people who are familiar with PGP and can provide review of the document.  When you think that you have a final version then you would either need to get a Security Area director to sponsor the document or take it to the Independent Submission Editor to get published as an RFC.

 

Jim

 

 

From: jose <[e-mail]> On Behalf Of Stefan Berger
Sent: Wednesday, September 12, 2018 10:12 AM
To: [e-mail]
Subject: [jose] JWK defining format for OpenPGP type of keys

 

Hello!

I was wondering whether it would be possible to define a JWK format for OpenPGP (RFC 4480,  <https://tools.ietf.org/html/rfc4880> https://tools.ietf.org/html/rfc4880) type of keys.

In particular I would be interested in a JWK representation of OpenPGP type of keys representing an asymmetric key to which a session key was encrypted to. This is following section "5.1.  Public-Key Encrypted Session Key Packets (Tag 1)" ( <https://tools.ietf.org/html/rfc4880#page-17> https://tools.ietf.org/html/rfc4880#page-17). In JWK format this could look like this:

{
"kty": "OpenPGP"
"kid": "0x1234567890abcdef",
"ver": 3,
}

Other representations of OpenPGP types of keys are those typical for public and private keys, though it's not clear whether RSA for example then should be some form of subtype of PGP.

Regards,
   Stefan Berger