[jose] One word review of JWE -09

Richard Barnes <rlb@ipv.sx> Wed, 24 April 2013 22:15 UTC

Return-Path: <rlb@ipv.sx>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39AA221F8793 for <jose@ietfa.amsl.com>; Wed, 24 Apr 2013 15:15:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.445
X-Spam-Level:
X-Spam-Status: No, score=-1.445 tagged_above=-999 required=5 tests=[AWL=-1.020, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RDNS_NONE=0.1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4lkNtdNLqWWq for <jose@ietfa.amsl.com>; Wed, 24 Apr 2013 15:15:40 -0700 (PDT)
Received: from mail-ob0-x22d.google.com (mail-ob0-x22d.google.com [IPv6:2607:f8b0:4003:c01::22d]) by ietfa.amsl.com (Postfix) with ESMTP id AB60921F877B for <jose@ietf.org>; Wed, 24 Apr 2013 15:15:40 -0700 (PDT)
Received: by mail-ob0-f173.google.com with SMTP id xn12so2022366obc.18 for <jose@ietf.org>; Wed, 24 Apr 2013 15:15:40 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:x-originating-ip:date:message-id:subject :from:to:content-type:x-gm-message-state; bh=RrgvRTDZG1A+Y5GiJDD4IMcU8BLP7mjf32Ms5pcZmv4=; b=aUiOJR4XpoAsvxY0X5cWwwl/FizhWJOkpHv0UnnDJZ7rj0qu7YF63HG7BC3y9VaSIq WIxkAyINoiFO9wmhNWrtlIZEUvXJj7aeQO9QHiiMmBxwaYuEwU5JcPfWCKlMxwPDZXvv kh48xzCNDAdNTs1sKXZ5VNTemvsfhI2zZGp7ruNPE9LdLAezGUEdPMZBpJCB8qxiiFF+ pNheBPb3YvMSY6QvFpJjMV3a+r8N1RoGyg6brAmR2S78K4PT7W92kBkhlbptO9j9w3Ht X5fbijy+0adss0/SsIra6oVul1fU00vnK9xZrzYWG37/3p5RhSdpx2/o/TE4icG8ooys NksA==
MIME-Version: 1.0
X-Received: by 10.182.129.101 with SMTP id nv5mr18373709obb.56.1366841740314; Wed, 24 Apr 2013 15:15:40 -0700 (PDT)
Received: by 10.60.41.225 with HTTP; Wed, 24 Apr 2013 15:15:40 -0700 (PDT)
X-Originating-IP: [128.89.253.75]
Date: Wed, 24 Apr 2013 18:15:40 -0400
Message-ID: <CAL02cgRj1QN1ri_TTHejM4hxgQv89GfD7JCJ1M8AxD_5CGcjNg@mail.gmail.com>
From: Richard Barnes <rlb@ipv.sx>
To: "jose@ietf.org" <jose@ietf.org>
Content-Type: multipart/alternative; boundary="e89a8fb1ebe4654fb104db22a4fa"
X-Gm-Message-State: ALoCoQkkUrycIUDMazsh5d7IKi9mabGkKDThs9xiU7WTwnkEEHK2a1qeFxuZEJ5jlyb0I/VI1cos
Subject: [jose] One word review of JWE -09
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Apr 2013 22:15:41 -0000

"AES GCM MUST NOT be used when using the JWE JSON Serialization for multiple
recipients"

Unacceptable.