IETF Logo Mail Archive

Re: [jose] [COSE] HPKE PartyU / PartyV

"lgl island-resort.com" <lgl@island-resort.com> Fri, 01 March 2024 19:23 UTC

Return-Path: <lgl@island-resort.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6DB2C14F615; Fri, 1 Mar 2024 11:23:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mEZKNL2aQ5MG; Fri, 1 Mar 2024 11:23:33 -0800 (PST)
Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11on2112.outbound.protection.outlook.com [40.107.223.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14460C14F616; Fri, 1 Mar 2024 11:23:32 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=P+s9Vq2MUE+IC/Aj9GdNA2XlA1rOY9nwHoYDKKT9YR1EDZgV4pqsGI1uRvEG5pLnUlXKUNDurBFB1JtoclHJGLdcREwLcaaRf2YBQ+KpI+ZcFM1m+UKmpUzLMkrltWUJSykdySyakQEzSeyo95BkEeQ93uSkSBAnKFG2gfHEMEL9LWa6Wqc3iBurBqqyG2be6t5TdT4b/xfBR2bGLqJ6PgA4MNO+YE08Efsy69SrGDowz/q/STOwWHCQ6yYPzx/hcIMBl/mmxz0/b1tQC7r0NJOZCiVqnDaJO5dpBaZyZDSLMoM4L7JyvQ7Axq75Dp/fwPoEFsKyn+85IC/3Tav5hg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=a6uTix7cor7Xs+SurXLGmHFUTyBkRPTV9+GtBHeZQo8=; b=W6b9TTlGDMVBpBYBcgWCwB8T7rh9sVDnE7Gi/0Keq+XMzxON4jATp+GPX2c94FFascxHbJlms/WnxSnjeR5yzbif7aBeJUEiQ6I8+zhi4facb1dQkJe3ATyVQxHGpt3gD9hlQoyadKjO/fbOFqvUpRFP2oXfLEAHRunkrrpsRkMBGBqeFoDJmuliJd6M8T2gSX8vJdU7HzgUItNMePNrYZldTFXoMTVyAnFXYI5Yy2fkpybAzLTxnq4vMHycS5xTWJOi8kjoFhQc/YUpm9cn0+qgOi+1gkQyJkBrqkXMQedQeMzZGqrqGtID41FpFyH/hBw8BINUM/v7jMtIKcH09w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=island-resort.com; dmarc=pass action=none header.from=island-resort.com; dkim=pass header.d=island-resort.com; arc=none
Received: from PH7PR22MB3092.namprd22.prod.outlook.com (2603:10b6:510:13b::8) by PH0PR22MB3337.namprd22.prod.outlook.com (2603:10b6:510:11c::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.39; Fri, 1 Mar 2024 19:23:30 +0000
Received: from PH7PR22MB3092.namprd22.prod.outlook.com ([fe80::1cab:7344:221c:bb8e]) by PH7PR22MB3092.namprd22.prod.outlook.com ([fe80::1cab:7344:221c:bb8e%4]) with mapi id 15.20.7316.039; Fri, 1 Mar 2024 19:23:30 +0000
From: "lgl island-resort.com" <lgl@island-resort.com>
To: Ilari Liusvaara <ilariliusvaara@welho.com>
CC: JOSE WG <jose@ietf.org>, cose <cose@ietf.org>
Thread-Topic: [COSE] [jose] HPKE PartyU / PartyV
Thread-Index: AQHaazF+RDuVPUJAf064zkgggiWwpbEhvbKAgAGHvwA=
Date: Fri, 01 Mar 2024 19:23:29 +0000
Message-ID: <729F40F3-B0EC-41EF-A0D2-FD8EDEA39D56@island-resort.com>
References: <CAN8C-_LUMe09=WbkwT-RckhR8+LYCQMw8XWnwmDLE5riYjd7pg@mail.gmail.com> <Zd749IrwWC2hI6yX@LK-Perkele-VII2.locald> <CAN8C-_J+mMABCa2HPWv5zJ=u1HSb+saq_mn5kB0Wq5upWUyM9Q@mail.gmail.com> <Zd-NRA2kH4fc_d-X@LK-Perkele-VII2.locald> <CAN8C-_+tG9845bn986Anr89ObNpUCzOAuiEJMPh4KGK3ixB+uQ@mail.gmail.com> <Zd-colj_jF47gLQP@LK-Perkele-VII2.locald> <CAN8C-_Jw2J6OY6N7gRVepVuHiC5NqgH36dXQ6krZ1U-Spqq7fQ@mail.gmail.com> <ZeCZJK76cQNZp7q9@LK-Perkele-VII2.locald> <CAN8C-_+_nzGCWV6zNny1j_9TTikW8rBtw9388YB7UGzSwEzoTw@mail.gmail.com> <ZeDih4he5eZ1y3PO@LK-Perkele-VII2.locald>
In-Reply-To: <ZeDih4he5eZ1y3PO@LK-Perkele-VII2.locald>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=island-resort.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH7PR22MB3092:EE_|PH0PR22MB3337:EE_
x-ms-office365-filtering-correlation-id: ff4e5c7f-7fc5-426a-e818-08dc3a2513bd
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: f5Ej774XBvHqKTzim7kywl32CODiQWBcrxCxYVDdO0BhRpMzU/YkXCyPUboySGZTPvAs8+kFNTs1qcNvWqYHO0cGIZVPxLBQvRiMVtXvN6Y82miB7EAs4a7zMdgNUNAGAjZF6p76WzhUDwA8wVASKNu+drtenFZ7M2Xx5CRwEpytqhL4W2oGrxI9hNu1rz+b4qxRwv2i9KjeDjO2GiVk3uyeVZMPCf+Nfiob5TW//F4+N+MLv7ISM4s+2aqUJWM6htgsJRxZ9Kk8D1KCvt7Vt1ljh332yBiK1Xep0hhxC3Ry1WMMeRWk6McBs+pLk0SBoEnMCw6WNzPsgCsgWSWqWgKEXJpoaEvQbf4xOSM+1qbsTOdX5kUxgWN0bw2VJo+MhPtnLBXstEpWs+ATKaMqYkPkCvey5HY1HsDjJpg3uOvXSL6lFSiICX/vx635QBky5han/70xCvTUld3kAeWlEdwLbte/puEZQJ/brrcQ9SrgQllrMtQuA2yGfuepmFb8b1JEHnpIv7qHjCeOCL0OGpjQze8xLFDvR11eVrwNvuB+j3Ze1nByAqVyigsIZbVgZwCLzL1KHLCg4vdyPxFPDL1SUAPouSUGTVpDk5OAfwTA4+CQ396lAEm3e9KUDb2mKkjTRvjfY+czIkS91Ei1ovluNWRhLQXtyCNpwesagNNp7HbSNiVOfOvwvK5antv/DR6qVX649SFIN+idjBUuiEfAKTPdnsu8/ItzcNKhPnU=
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH7PR22MB3092.namprd22.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(38070700009); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_729F40F3B0EC41EFA0D2FD8EDEA39D56islandresortcom_"
MIME-Version: 1.0
X-OriginatorOrg: island-resort.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH7PR22MB3092.namprd22.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ff4e5c7f-7fc5-426a-e818-08dc3a2513bd
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Mar 2024 19:23:29.8547 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: ad4b5b91-a549-4435-8c42-a30bf94d14a8
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 4LGx2vJMVN7BNT8x3MiKffQUZJNiqa6Di2KwzttqGt1rswZCGbwfdlHfFW2IO4BBpeZW55hnIu7+mknxgEuVxQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR22MB3337
Archived-At: <https://mailarchive.ietf.org/arch/msg/jose/3jWzOErcwG0b43y0781jWx9Bt0A>
Subject: Re: [jose] [COSE] HPKE PartyU / PartyV
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/jose/>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Mar 2024 19:23:37 -0000

On Feb 29, 2024, at 1:01 PM, Ilari Liusvaara <ilariliusvaara@welho.com> wrote:

On Thu, Feb 29, 2024 at 11:04:57AM -0600, Orie Steele wrote:
I think we actually agree here.

The remaining point is just what to do in HPKE.

1. New header parameters, mandatory processing rules, mix
content encryption algorithm into the KDF (via HPKE INFO).

HPKE does not allow using both INFO and AAD for one message (I do not
know why), and INFO has a short length limit (because it is used in
ways that pretty much require buffering).

So only AAD can be used.

Illari, even if you can’t say why, can you tell us where the text that prohibits use of both INFO and AAD is?

Note that COSE -25 and -29 allow the input of a salt into the KDF outside of COSE_KDF_Context. If we wanted to do similar in COSE-HPKE, use of the info parameter is the obvious place.

I can’t see any technical reason that both couldn’t be used and I wonder if there is some reason we might want to allow COSE-HPKE users to be able to supply inputs to the KDF function.

Or asked another way, what are the security trade-offs between AAD and INFO? There’s lots of security considerations in RFC 9180, but none seem to discuss this.

I don’t see an issue here, but it would be nice to understand.

Thx!

(RFC 9180 is impossible to search because the variable names used in the Python code are so short. “info” occurs almost 200 times)

LL

v2.23.0 | Report a Bug | By Email