IETF Logo Mail Archive

Re: [jose] #23: Make crypto independent of binary encoding (base64)

"jose issue tracker" <trac+jose@trac.tools.ietf.org> Tue, 11 June 2013 19:50 UTC

Return-Path: <trac+jose@trac.tools.ietf.org>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D34AE21F997D for <jose@ietfa.amsl.com>; Tue, 11 Jun 2013 12:50:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CkO3MEfflubU for <jose@ietfa.amsl.com>; Tue, 11 Jun 2013 12:50:32 -0700 (PDT)
Received: from grenache.tools.ietf.org (grenache.tools.ietf.org [IPv6:2a01:3f0:1:2::30]) by ietfa.amsl.com (Postfix) with ESMTP id DAE3021F997C for <jose@ietf.org>; Tue, 11 Jun 2013 12:50:26 -0700 (PDT)
Received: from localhost ([127.0.0.1]:46361 helo=grenache.tools.ietf.org ident=www-data) by grenache.tools.ietf.org with esmtp (Exim 4.80) (envelope-from <trac+jose@trac.tools.ietf.org>) id 1UmUaC-0006g8-QH; Tue, 11 Jun 2013 21:50:20 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: jose issue tracker <trac+jose@trac.tools.ietf.org>
X-Trac-Version: 0.12.3
Precedence: bulk
Auto-Submitted: auto-generated
X-Mailer: Trac 0.12.3, by Edgewall Software
To: draft-ietf-jose-json-web-encryption@tools.ietf.org, rlb@ipv.sx
X-Trac-Project: jose
Date: Tue, 11 Jun 2013 19:50:20 -0000
X-URL: http://tools.ietf.org/jose/
X-Trac-Ticket-URL: http://trac.tools.ietf.org/wg/jose/trac/ticket/23#comment:1
Message-ID: <064.88846e82adbed9643c92f330ebd4059d@trac.tools.ietf.org>
References: <049.69ffc5ebf959c6eac7990651822fadf9@trac.tools.ietf.org>
X-Trac-Ticket-ID: 23
In-Reply-To: <049.69ffc5ebf959c6eac7990651822fadf9@trac.tools.ietf.org>
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Rcpt-To: draft-ietf-jose-json-web-encryption@tools.ietf.org, rlb@ipv.sx, jose@ietf.org
X-SA-Exim-Mail-From: trac+jose@trac.tools.ietf.org
X-SA-Exim-Scanned: No (on grenache.tools.ietf.org); SAEximRunCond expanded to false
Resent-To: ekr@rtfm.com, jhildebr@cisco.com, mbj@microsoft.com
Resent-Message-Id: <20130611195031.DAE3021F997C@ietfa.amsl.com>
Resent-Date: Tue, 11 Jun 2013 12:50:26 -0700
Resent-From: trac+jose@trac.tools.ietf.org
Cc: jose@ietf.org
Subject: Re: [jose] #23: Make crypto independent of binary encoding (base64)
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Jun 2013 19:50:33 -0000

#23: Make crypto independent of binary encoding (base64)

Changes (by rlb@ipv.sx):

 * owner:  draft-barnes-jose-use-cases@tools.ietf.org => draft-ietf-jose-
     json-web-encryption@tools.ietf.org
 * component:  draft-barnes-jose-use-cases => json-web-encryption


Comment:

 Update: I missed the fact that (1) JWS signs over the encoded octets, and
 (2) JWS adds an unnecessary "." character to the signed value.  So
 consider this proposal extended to include the following change:

 <http://tools.ietf.org/html/draft-ietf-jose-json-web-
 signature-11#section-5.1>
 OLD: JWS Signing Input  The concatenation of the Encoded JWS Header, a
 period ('.') character, and the Encoded JWS Payload.
 NEW: JWS Signing Input  The concatenation of the JWS Header and the JWS
 Payload.

 This is the same as what CMS does, except in the reverse order.  (In CMS,
 you sign over payload || signedAttrs.)

-- 
-------------------------+-------------------------------------------------
 Reporter:  rlb@ipv.sx   |       Owner:  draft-ietf-jose-json-web-
     Type:  defect       |  encryption@tools.ietf.org
 Priority:  major        |      Status:  new
Component:  json-web-    |   Milestone:
  encryption             |     Version:
 Severity:  -            |  Resolution:
 Keywords:               |
-------------------------+-------------------------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/jose/trac/ticket/23#comment:1>
jose <http://tools.ietf.org/jose/>

v2.23.0 | Report a Bug | By Email