[jose] Re: JOSE-HPKE @ 124? (was Re: (very) draft agenda for JOSE @ IETF 124)

Karen ODonoghue <kodonog@pobox.com> Sun, 02 November 2025 18:07 UTC

Return-Path: <kodonog@gmail.com>
X-Original-To: jose@mail2.ietf.org
Delivered-To: jose@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D571980BD4B5 for <jose@mail2.ietf.org>; Sun, 2 Nov 2025 10:07:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.98
X-Spam-Level:
X-Spam-Status: No, score=-1.98 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.017, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ggFPohxeeahx for <jose@mail2.ietf.org>; Sun, 2 Nov 2025 10:07:36 -0800 (PST)
Received: from mail-qt1-x829.google.com (mail-qt1-x829.google.com [IPv6:2607:f8b0:4864:20::829]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 56C2580BD4A6 for <jose@ietf.org>; Sun, 2 Nov 2025 10:07:36 -0800 (PST)
Received: by mail-qt1-x829.google.com with SMTP id d75a77b69052e-4ecf03363c9so35550031cf.1 for <jose@ietf.org>; Sun, 02 Nov 2025 10:07:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1762106850; x=1762711650; darn=ietf.org; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:sender:from:to:cc:subject:date:message-id:reply-to; bh=8++vPL9qXPk4aPkmtsYqD0jlB7QWAnXyonbQHJCyTss=; b=Wl1SeHsQLRZ+OvdearOi9L1Z7vMnZ0P2RVhEt0Db7f8vRj9l4Ze0fnUSzLSjeVmDeA ZHFnKQxUrw6F8+ruRC6bw6DSCdGrkW/bswgArWyd7OLUnCLVz2P8+Xe4m/xIY1glYl2S b0F1pRIbr50YOSo7rOvGQEd25rtywSDA/ekbkrII3zZQeoW7CxL+ldjolhHU6cqusBXQ Ckx0Kw9EM88cK98OeS8hEw9Kitc4wBs2jk7bmnj5i4z927VB7bjJg1LLY51R7N5A510Z V7znfggEw6v+P6wj0mJ6hhBI6rwUkhe/S4NCPlpm4SWYbTCjdQKWtLtRlp2xvi3aaOX8 IVGg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1762106850; x=1762711650; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:sender:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=8++vPL9qXPk4aPkmtsYqD0jlB7QWAnXyonbQHJCyTss=; b=KBRh8AFFdSuPgz0x/hbtLSaxv/WgXL0sc/wDj0Ieiv8vlUnqNh5toA7AZqu6QjkNKR ixDy5bAvoQW+ImpERh8bCsmzjvxu3Yvz6Ofmt8V0+IEvpFvtVj9QDT3hAoe1aUYV5cco c6IaOEDuSpkNfieARiAGsM/WI0SFDVCcj034bK/hap1F8usyQThbOT1XY/vwvO6mB3/x hLxra81rLyTRD4bQX7t2v8JcIQjOM97Hj5ScapDjJHzJt6xdF6FQh9Y81d4oZPA1Rbw6 cFnq4rjh9ZCcY1tfeFWA7/2DtnCj37PyCs4CDyXOtBfg5E28AhbL2Be082vfZjTVbRW3 v6Iw==
X-Gm-Message-State: AOJu0YxvxytgpVbWt+xqFQf8D9JklyH7QJTTum67l46N7qMHh79WIBSM dYvIoKOw8Mugf2wtylIdNZXTFxvUEqo/WncWz8ezG47v9YIopL8IT+DlTHEICw==
X-Gm-Gg: ASbGnctWCETd7Yk+xbtWTsrJfc8OuephI6RvEm0ESlpPfyNE4WT+0iNsJnrJD2IUokf VoXhtGbDUGvfHDteWnF+7DuTTOB5g2XmcO6ps0ORqctAXG8P23TjVUzALZTAXSQ6slzyBk3SCal htWQy/Ma0sWpVn3qntTtbEkfyNWimE4xej0eFlabJhaeujm/Pkf6ohDWupy7jRSkhQ8gedsK4PK rE+q6qaEFxcTxSdhKfPFjU3TMaDKx1GFkbulCHioE8a19IGyIZOWD7il+/NNuzU4aGuTFD5adZT JwOTgODdQKfJsJlD8E+7dPLXWcfjx4m5M0Yy42z8bIct3GCX3n3LVkBBfhk2C3NxvcFe+yYEITx 6Cuvs2FQSrTDwmwFZCAkQXHy/yEOWC6vMiu/ojs2767mGz/RMEuCgyA5YQI3VrSwz7eoKjifUkC 6HvLThv9xq+UL5kGlOZr4=
X-Google-Smtp-Source: AGHT+IGcimW5/mMmGnsz2Yxz5ecP1LFbJ0sWMFnZ3o7j5wW0YTIv526vc5PBZffN+dnai+97Nw41gQ==
X-Received: by 2002:a05:622a:a78e:b0:4ed:4290:aff0 with SMTP id d75a77b69052e-4ed4290b547mr58327011cf.41.1762106849550; Sun, 02 Nov 2025 10:07:29 -0800 (PST)
Received: from smtpclient.apple ([2001:67c:1232:144:7d70:ce60:bbdd:e198]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-4ed3529ab44sm42498031cf.22.2025.11.02.10.07.28 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sun, 02 Nov 2025 10:07:28 -0800 (PST)
Sender: Karen ODonoghue <kodonog@gmail.com>
From: Karen ODonoghue <kodonog@pobox.com>
Message-Id: <777AA599-8099-4231-91C2-0EB624491B16@pobox.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_BA4B4C47-AD0B-40A5-8BAB-E3C66750B9FF"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81\))
Date: Sun, 02 Nov 2025 13:07:17 -0500
In-Reply-To: <CA+k3eCTiJC-NtU8nPT62a7Bcb+kwjk69vwhc-3ZP_uDEczyLbQ@mail.gmail.com>
To: Brian Campbell <bcampbell@pingidentity.com>
References: <CA+k3eCTiJC-NtU8nPT62a7Bcb+kwjk69vwhc-3ZP_uDEczyLbQ@mail.gmail.com>
X-Mailer: Apple Mail (2.3826.700.81)
Message-ID-Hash: CK2OW2EETTVLNAFQEY2QEJDOPM4BO5DT
X-Message-ID-Hash: CK2OW2EETTVLNAFQEY2QEJDOPM4BO5DT
X-MailFrom: kodonog@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-jose.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: JOSE WG <jose@ietf.org>, jose-chairs@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [jose] Re: JOSE-HPKE @ 124? (was Re: (very) draft agenda for JOSE @ IETF 124)
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/jose/xQYm3Xv8Q__kf1zxq-e0s3Zb3g4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/jose>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Owner: <mailto:jose-owner@ietf.org>
List-Post: <mailto:jose@ietf.org>
List-Subscribe: <mailto:jose-join@ietf.org>
List-Unsubscribe: <mailto:jose-leave@ietf.org>

Hi Brian,

I’ve added you to the agenda for the JOSE-HPKE discussion. Please submit slides if you plan to use them. 

Karen

> On Oct 31, 2025, at 4:41 PM, Brian Campbell <bcampbell@pingidentity.com> wrote:
> 
> Thanks Karen (and the jose chairs),
> 
> Could I have some of the time allotted for JOSE-HPKE to continue the discussion from IETF 123? 
> 
> At the last meeting, I made an impassioned plea for some improvements to the jose-hpke-encrypt (improvements that I strongly expect will be necessary eventually, even in the absence of my pleas). I left that meeting with the impression that there was interest in pursuing those improvements, and with the understanding that the authors would reach out to me and a few others to collaborate toward that goal.
> 
> However, no author has reached out, nor has any work on the draft progressed in that direction.
> 
> 
> On Mon, Oct 27, 2025 at 4:11 PM Karen ODonoghue <kodonog@pobox.com <mailto:kodonog@pobox.com>> wrote:
>> Below is the draft agenda for the JOSE meeting next week. It obviously isn’t quite finished, but I wanted to get something uploaded. Please send me any requests, errors, or ommissions. Please also send a quick email to jose-chairs@ietf.org <mailto:jose-chairs@ietf.org> to confirm responsible person and rough time estimate. 
>> 
>> Thanks,
>> Karen (for the jose chairs)
>> 
>> DRAFT AGENDA: 
>> 
>> JOSE Working Group @ IETF 124
>> Wednesday, 3 November 2025
>> 
>> 9:30 - 11:30 UTC (UTC -4)
>> 
>> St Denis
>> 
>> Notes: https://notes.ietf.org/notes-ietf-124-jose
>> 
>> Please check https://datatracker.ietf.org/meeting/124/agenda for an updated link to the meetecho session.
>> 
>> Draft Agenda
>> 
>> 1.  Admin, Agenda Bash, document status (Chairs,)
>> 
>> 2.  JSON Web Proof Drafts (TBD, ?)
>> 
>> 
>> JSON Web Proofs https://datatracker.ietf.org/doc/draft-ietf-jose-json-web-proof/
>> JSON Proof Algorithms https://datatracker.ietf.org/doc/draft-ietf-jose-json-proof-algorithms/
>> 
>> JSON Proof Token https://datatracker.ietf.org/doc/draft-ietf-jose-json-proof-token/
>> 
>> 3.  Use of Hybrid Public Key Encryption (HPKE) with JSON Object Signing and Encryption (JOSE) (TBD, ?)
>> https://datatracker.ietf.org/doc/draft-ietf-jose-hpke-encrypt/
>> 
>> 4.  Post-Quantum Key Encapsulation Mechanisms (PQ KEMs) for JOSE and COSE (TBD, ?)
>> https://datatracker.ietf.org/doc/draft-ietf-jose-pqc-kem/
>> 
>> 5.  JOSE: Deprecate ‘none’ and ‘RSA1_5’ (?, 10 min)
>> 
>> https://datatracker.ietf.org/doc/draft-ietf-jose-deprecate-none-rsa15/
>> 	
>> 6.  PQ/T Hybrid Composite Signatures for JOSE and COSE (Prabel, ?)
>> 
>> https://datatracker.ietf.org/doc/draft-prabel-jose-pq-composite-sigs/
>> 
>> 7.  Designated Verifier Signatures for JOSE (?, 10 min)
>> 
>> https://datatracker.ietf.org/doc/draft-bastian-jose-dvs/
>> 	
>> 8.  Public Key Derived HMAC for JOSE
>> 
>> https://datatracker.ietf.org/doc/draft-bastian-jose-pkdh/
>> 
>> 9. AOB
>> 
>> 
>> _______________________________________________
>> jose mailing list -- jose@ietf.org <mailto:jose@ietf.org>
>> To unsubscribe send an email to jose-leave@ietf.org <mailto:jose-leave@ietf.org>
> 
> CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited.  If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.