[jose] Do we have actual normative text which curves are allowed / standard for ECDH-ES in JOSE?
Vladimir Dzhuvinov <vladimir@connect2id.com> Tue, 03 November 2020 21:40 UTC
Return-Path: <vladimir@connect2id.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC72F3A1209 for <jose@ietfa.amsl.com>; Tue, 3 Nov 2020 13:40:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bPG_1yqLvimi for <jose@ietfa.amsl.com>; Tue, 3 Nov 2020 13:40:34 -0800 (PST)
Received: from p3plsmtpa11-05.prod.phx3.secureserver.net (p3plsmtpa11-05.prod.phx3.secureserver.net [68.178.252.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DF7D3A1207 for <jose@ietf.org>; Tue, 3 Nov 2020 13:40:34 -0800 (PST)
Received: from [192.168.88.250] ([94.155.17.31]) by :SMTPAUTH: with ESMTPSA id a42akRVaQzVeba42ak2MhX; Tue, 03 Nov 2020 14:40:33 -0700
X-CMAE-Analysis: v=2.4 cv=eo4acqlX c=1 sm=1 tr=0 ts=5fa1ce51 a=+I3yL00+yDwT8KNLgfs+4A==:117 a=+I3yL00+yDwT8KNLgfs+4A==:17 a=q0rX5H01Qin5IyBaTmIA:9 a=48vgC7mUAAAA:8 a=I0CVDw5ZAAAA:8 a=jZK7Y-cxiDxDmKi-bOoA:9 a=QEXdDO2ut3YA:10 a=D8lnhvtxf0AONpHuB7QA:9 a=ZVk8-NSrHBgA:10 a=30ssDGKg3p0A:10 a=w1C3t2QeGrPiZgrLijVG:22 a=YdXdGVBxRxTCRzIkH2Jn:22 a=pHzHmUro8NiASowvMSCR:22 a=nt3jZW36AmriUCFCBwmW:22
X-SECURESERVER-ACCT: vladimir@connect2id.com
To: "jose@ietf.org" <jose@ietf.org>
Cc: "Voss, Ray" <ray.voss@jpmorgan.com>, "Hamad, Samer K" <samer.k.hamad@chase.com>
From: Vladimir Dzhuvinov <vladimir@connect2id.com>
Autocrypt: addr=vladimir@connect2id.com; prefer-encrypt=mutual; keydata= mQENBFQZaoEBCACnP2YMDex9fnf+niLglTHGKuoypUSVKPQeKDHHeFQVzhRke+HBEZBwmA9T kZ+kEhyrNqibDPkPYVPmo23tM8mbNcTVQqpmN7NwgMpqkqcAqNsIyBtt09DjWOQVm57A3K+y uXI7SdNErdt79p2xQseOhqSC9+LgWuyh+mZsl2oFD4glFFfKSCMp2jATXrAMeGzigTnW+Xe0 tRzrwFN9zqykKxhUq9oHg1cNvoDtfxgsc9ysVHbxM/PM8o9lgj3YTQwKMBcCFclTqohji7ML fQ08eQo+acKTwC1WRzeLt9PknGt3C4TmvdCl0c1BQTTTNiF96Hu4kbaiBIbsfxJOR8+VABEB AAG0LFZsYWRpbWlyIER6aHV2aW5vdiA8dmxhZGltaXJAY29ubmVjdDJpZC5jb20+iQE+BBMB AgAoBQJUGWqBAhsjBQkJZgGABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRAZ0vUyOqri Ql62B/wOO0s2JC/QvO6w9iSsRhCOa/JZi+wO+l01V7eGCQ1cYf1W26Y7iKiUlY4/Kz+cr69D pMtkv3UpDTGejKEfspLUxz5Vo3T4oAKbTtNtVIZL/XxH3/JhJ719Jj4eLoe9/djKkGYTX2O5 bMk8TpO1DDjbIw4r9XKI9ZIk96zlKnZvrg7Ho7oOl0ZIf8AzcvdqZEUogDwyr8uwOU+jIyux mOTthepBzXCNjjBjnc8I1//9YppAIaGJ5nnXelVVD1/dyOszogervzFNANEIOvNvCd9G5u4e s7qkDKWKY7/Lj1tF+tMrDTrOh6JqUKbGNeTUB8DlPvIoNyqHUYfBELdpw1Nd
Organization: Connect2id Ltd.
Message-ID: <b29e1554-42ae-3ce3-037b-ca3eaa4087d8@connect2id.com>
Date: Tue, 03 Nov 2020 23:40:31 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="------------ms090701000000040709070708"
X-CMAE-Envelope: MS4xfK80sSB5EvRPghqBIfmd4VZdJ9B3AsqSaveT+z4Czn8hBb6i2pDeEd+kl1xttD3FAkEzhW/lTl0dgvp9MQHmsJSv96+uRekkPJgx4n7l6iZDLaJqmnJ3 Xv+b7DTD1cExxJQbL8Y8zngAxrd1zDQJQfxT8rHAcVDHWfb6aqAAE600WxGGLfgE/I3X3EXmsP0tYxgR+X1PmXyFONafah9ZmDkpMtDcCCswg0GhhtV5mjsK MgjbpJ9GuXoQdNhkSmbVIA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/jose/Ac--dlTEAAfdB33OC_L7ufvzE34>
Subject: [jose] Do we have actual normative text which curves are allowed / standard for ECDH-ES in JOSE?
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/jose/>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Nov 2020 21:40:36 -0000
Today we received the question why the Nimbus JOSE+JWT lib supports the EC curves it does for ECDH (P-256, P-384, P-512) and I couldn't find any normative text or reference in the JWA spec to explain this. https://tools.ietf.org/html/rfc7518#section-4.6 We also looked at the IANA registry for hints: https://www.iana.org/assignments/jose/jose.xhtml Contrast this with the JWS ECDSA, where the curves to go with the ESxxx algs are specced: https://tools.ietf.org/html/rfc7518#section-3.4 Can someone help here? :) Thanks, Vladimir -- Vladimir Dzhuvinov
- [jose] Do we have actual normative text which cur… Vladimir Dzhuvinov
- Re: [jose] Do we have actual normative text which… Neil Madden
- Re: [jose] Do we have actual normative text which… Filip Skokan
- Re: [jose] Do we have actual normative text which… Filip Skokan
- Re: [jose] Do we have actual normative text which… Carsten Bormann
- Re: [jose] Do we have actual normative text which… Vladimir Dzhuvinov