Re: [jose] #3: Concat used outside of key agreement

"jose issue tracker" <trac+jose@trac.tools.ietf.org> Sat, 30 March 2013 19:40 UTC

Return-Path: <trac+jose@trac.tools.ietf.org>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F16821F84CE for <jose@ietfa.amsl.com>; Sat, 30 Mar 2013 12:40:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Cu0N4Sxq7cHz for <jose@ietfa.amsl.com>; Sat, 30 Mar 2013 12:40:40 -0700 (PDT)
Received: from grenache.tools.ietf.org (grenache.tools.ietf.org [IPv6:2a01:3f0:1:2::30]) by ietfa.amsl.com (Postfix) with ESMTP id 8E58221F8498 for <jose@ietf.org>; Sat, 30 Mar 2013 12:40:37 -0700 (PDT)
Received: from localhost ([127.0.0.1]:39539 helo=grenache.tools.ietf.org ident=www-data) by grenache.tools.ietf.org with esmtp (Exim 4.80) (envelope-from <trac+jose@trac.tools.ietf.org>) id 1UM1dd-0001XJ-1m; Sat, 30 Mar 2013 20:40:29 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: jose issue tracker <trac+jose@trac.tools.ietf.org>
X-Trac-Version: 0.12.3
Precedence: bulk
Auto-Submitted: auto-generated
X-Mailer: Trac 0.12.3, by Edgewall Software
To: draft-ietf-jose-json-web-encryption@tools.ietf.org, sakimura@gmail.com, michael.jones@microsoft.com
X-Trac-Project: jose
Date: Sat, 30 Mar 2013 19:40:28 -0000
X-URL: http://tools.ietf.org/jose/
X-Trac-Ticket-URL: https://tools.ietf.org/wg/jose/trac/ticket/3#comment:2
Message-ID: <069.39abc719fa845205ea2eb8adb81c9412@trac.tools.ietf.org>
References: <054.a15803fd3572518a930ea29172e37e67@trac.tools.ietf.org>
X-Trac-Ticket-ID: 3
In-Reply-To: <054.a15803fd3572518a930ea29172e37e67@trac.tools.ietf.org>
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Rcpt-To: draft-ietf-jose-json-web-encryption@tools.ietf.org, sakimura@gmail.com, michael.jones@microsoft.com, jose@ietf.org
X-SA-Exim-Mail-From: trac+jose@trac.tools.ietf.org
X-SA-Exim-Scanned: No (on grenache.tools.ietf.org); SAEximRunCond expanded to false
Resent-To: ekr@rtfm.com, jhildebr@cisco.com, mbj@microsoft.com
Resent-Message-Id: <20130330194040.8E58221F8498@ietfa.amsl.com>
Resent-Date: Sat, 30 Mar 2013 12:40:37 -0700
Resent-From: trac+jose@trac.tools.ietf.org
Cc: jose@ietf.org
Subject: Re: [jose] #3: Concat used outside of key agreement
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 30 Mar 2013 19:40:41 -0000

#3: Concat used outside of key agreement


Comment (by michael.jones@microsoft.com):

 After a conversation initiated by Joe Hildebrand and a call scheduled by
 Matt Miller, David McGrew has agreed refactor draft-mcgrew-aead-aes-hmac-
 sha2 so that the inputs and outputs are specified separately and
 independently from the RFC 5116 encoding of those values, as documented in
 the minutes at http://www.ietf.org/mail-
 archive/web/jose/current/msg01884.html.  While RFC 5116 specifies a binary
 serialization for authenticated encryption algorithms, JWE specifies a
 textual serialization.  This refactoring would make it easy for JOSE to
 use the McGrew draft, since the computation would be specified separately
 from the serialization, should the working group choose to do so.

 JWA could then reference the appropriate sections of draft-mcgrew-aead-
 aes-hmac-sha2 and JWE could include an example computation for this
 algorithm, making it easy for developers to build.

-- 
-------------------------+-------------------------------------------------
 Reporter:               |       Owner:  draft-ietf-jose-json-web-
  rbarnes@bbn.com        |  encryption@tools.ietf.org
     Type:  defect       |      Status:  new
 Priority:  major        |   Milestone:
Component:  json-web-    |     Version:
  encryption             |  Resolution:
 Severity:  Active WG    |
  Document               |
 Keywords:               |
-------------------------+-------------------------------------------------

Ticket URL: <https://tools.ietf.org/wg/jose/trac/ticket/3#comment:2>
jose <http://tools.ietf.org/jose/>