IETF Logo Mail Archive

Re: [jose] JOSE in Python

Richard Barnes <rlb@ipv.sx> Fri, 16 August 2013 18:10 UTC

Return-Path: <rlb@ipv.sx>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12D6E11E8186 for <jose@ietfa.amsl.com>; Fri, 16 Aug 2013 11:10:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.727
X-Spam-Level:
X-Spam-Status: No, score=-2.727 tagged_above=-999 required=5 tests=[AWL=0.249, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hQXYyZjYr8Y4 for <jose@ietfa.amsl.com>; Fri, 16 Aug 2013 11:10:40 -0700 (PDT)
Received: from mail-ob0-f181.google.com (mail-ob0-f181.google.com [209.85.214.181]) by ietfa.amsl.com (Postfix) with ESMTP id B600721F8FAC for <jose@ietf.org>; Fri, 16 Aug 2013 11:10:40 -0700 (PDT)
Received: by mail-ob0-f181.google.com with SMTP id dn14so2412883obc.12 for <jose@ietf.org>; Fri, 16 Aug 2013 11:10:40 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=9k+KLJCZ+7f8jyWu8NGrW0YPCaQXsOlanwnfxAr/Xt8=; b=DoQlPxqxey3U6dZcYi7J4iBFun7EPDVZxsnUHq9BDhfDzYf5Cdq734GsNun34Aq8hf tr3QObhyljDIns20uIPtcREKmMXiePyCtSZfyi5KFd+k0Y2pFR6QWYyOfyDB71yXAD/7 9ic44G3ew9VpUts8VOs+WzU9H6z7eKuHSA2VUo+BmNsetezzbhAZg4xkyIsyVUngDtgo qb049n6ul0TMqvnQHjyruAT6Lu/6oFC/lyIyI+cB5eb/EvBHSUHbEBRaO/HA1thM81jl RTvD4X68LVqelh6R5LUgpoM7EI1HY+Rl1zTsfJ1lPk538qnBnTCHKTmA6rBIFfFvbA0k Tb8A==
X-Gm-Message-State: ALoCoQlGvQ3Q6fFdCUFQCB6RmcqtrM881eN5z5LbjKPNvgwJKvYa2qOf6PvzdWWRFBayKiu4lQmi
MIME-Version: 1.0
X-Received: by 10.182.148.8 with SMTP id to8mr2359632obb.17.1376676640308; Fri, 16 Aug 2013 11:10:40 -0700 (PDT)
Received: by 10.60.31.74 with HTTP; Fri, 16 Aug 2013 11:10:40 -0700 (PDT)
X-Originating-IP: [192.1.51.54]
In-Reply-To: <CAL02cgSz+052idKJ-e-8OyXX3fSRqdeMa8tiHwZeQtRxpkq_=g@mail.gmail.com>
References: <CAL02cgTPyqUkr5Awj4iW=QNkC5hBtR=RnaTcm5hUtdEzjh1nOQ@mail.gmail.com> <520D7022.5040005@cs.tcd.ie> <CAL02cgQj2M9C0KZPwrW9sHCj3rEqE=VPGsAoOpX_ShDWi2UEFw@mail.gmail.com> <520E5991.4060208@cs.tcd.ie> <CAL02cgSz+052idKJ-e-8OyXX3fSRqdeMa8tiHwZeQtRxpkq_=g@mail.gmail.com>
Date: Fri, 16 Aug 2013 14:10:40 -0400
Message-ID: <CAL02cgTb4DKpka2CRfPduLgqY=O2xWS5a87aX+pP8kacukQa1g@mail.gmail.com>
From: Richard Barnes <rlb@ipv.sx>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Content-Type: multipart/alternative; boundary="089e0139fc761dd5e904e4148270"
Cc: "jose@ietf.org" <jose@ietf.org>
Subject: Re: [jose] JOSE in Python
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Aug 2013 18:10:45 -0000

To see what I mean, latest test results are here:
<http://pastebin.com/k2pfj34T>


On Fri, Aug 16, 2013 at 1:09 PM, Richard Barnes <rlb@ipv.sx> wrote:

> On Fri, Aug 16, 2013 at 12:55 PM, Stephen Farrell <
> stephen.farrell@cs.tcd.ie> wrote:
>
>>
>>
>> On 08/16/2013 03:12 AM, Richard Barnes wrote:
>> > If you tried to do something similar with CMS or IKE, I think the
>> > combinatorics would be similar.  The TLS cipher suite registry is of
>> > comparable size,
>>
>> So I need to go read the jose drafts again I guess but
>> if anything like 300 of anything are MTI then I reckon
>> that's a fail. (I also think the TLS ciphersuite registry
>> is an example of an IETF fail btw, maybe one that we
>> can improve on with TLS1.3 though hopefully;-)
>>
>> S.
>>
>
> There aren't 300 separate things you need to implement.  There are 12 for
> JWS and 22 (16 + 6) for JWE.  And not all of those are MTI.
>
> The big scary numbers just come from trying out the combinations.
>
>

v2.23.0 | Report a Bug | By Email