Re: [jose] #13: Enable AEAD key wrapping

[Russ Housley <[e-mail]>]

Richard:

We need to make sure that the solution is algorithm agile.  No matter what we pick, it will need to change in some number of years.

Also, when I design a cryptographic security solution, I tend to use one mode for data and another mode for keying material. This approach ensures that a decrypt operation will never return plaintext keying material outside the crypto boundary.  So, I strongly support the use of AES-KW or AES-KWP for key wrapping.

Russ

On Apr 3, 2013, at 11:30 PM, jose issue tracker wrote:

> #13: Enable AEAD key wrapping
> 
> 
> Comment (by [e-mail]):
> 
> As I understood the feedback from WebCrypto, the desire was for general
> AEAD algorithms to be usable in both (1) and (2).  And as I expressed at
> IETF86, it would be architecturally simpler if we use the same key
> wrapping for all wrapped keys, whether attached to JWE or not.
> 
> A proposed solution has been submitted as http://tools.ietf.org/html
> /draft-barnes-jose-key-wrapping
> 
> -- 
> -------------------------+-------------------------------------------------
> Reporter:  [e-mail]   |       Owner:  draft-ietf-jose-json-web-
>     Type:  defect       |  [e-mail]
> Priority:  major        |      Status:  new
> Component:  json-web-    |   Milestone:
>  encryption             |     Version:
> Severity:  -            |  Resolution:
> Keywords:               |
> -------------------------+-------------------------------------------------
> 
> Ticket URL: <http://trac.tools.ietf.org/wg/jose/trac/ticket/13#comment:3>
> jose <http://tools.ietf.org/jose/>