[Json-canon] I-D: draft-rundgren-json-canonicalization-scheme-05

Anders Rundgren <anders.rundgren.net@gmail.com> Sat, 16 February 2019 19:36 UTC

Return-Path: <anders.rundgren.net@gmail.com>
X-Original-To: json-canon@ietfa.amsl.com
Delivered-To: json-canon@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76108130F5F for <json-canon@ietfa.amsl.com>; Sat, 16 Feb 2019 11:36:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qbZ4YBXBEGWW for <json-canon@ietfa.amsl.com>; Sat, 16 Feb 2019 11:36:13 -0800 (PST)
Received: from mail-wm1-x344.google.com (mail-wm1-x344.google.com [IPv6:2a00:1450:4864:20::344]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06B26130F5B for <json-canon@ietf.org>; Sat, 16 Feb 2019 11:36:13 -0800 (PST)
Received: by mail-wm1-x344.google.com with SMTP id n19so1157968wmi.1 for <json-canon@ietf.org>; Sat, 16 Feb 2019 11:36:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:references:from:to:cc:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=doEBcznv7rqGF11eC6x/4kUmoBmneEAhx4pvOn+ZB9o=; b=l9jO0pRchLPYECF38w0bP2avWGsnG3fJiAYDTt9NC+mICZo3CM36PQ8WfjKseKFPw5 P7r0iCvUE3uTprdZ3Z0esP5MVq0Mp93Ge5KMcuxMwcUulBEczz/MMlsy8WQVdRsVwjrz zzqPOrRWlbw7cXZ0M6HvOFSxPCfYLnlgULgBT+xsa3imejbO6sFfNtvVDT/EI0O1NB6E KjUuyv4yKMSYcmFuo4nZIRsyoGeBoVxV6OPkas+1lt3s4Br5zdv/J3Sh08WjsvOG97M/ 2GqRA6ML54YAyxJV8wcYX/+Wn6suEt/EO/97WOBCggyJklDqdE9ysLDxXfufHHbXSga+ LecA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:references:from:to:cc:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=doEBcznv7rqGF11eC6x/4kUmoBmneEAhx4pvOn+ZB9o=; b=HhksgFdxREmn33yvJnOPlWQoDvUVtEDpJ24B14+WjsCLuUkwaiJz7XZn7v+Vma8oTF m6e39GOJZzQ/x2psV4XPp/8QxLgjbr3Z0LbrvQlk89EF2xGk6rwwjlsOpIek1BEU4zvt +gJTMocZ4cTb2Oyr5mnlGMZE/f6Jw0HAv8ea+OdWJc2idge6153nhA7nuSnSxY2zUQ/X 7z20LX8diVpOS2Ru4b82RK0kpp0Jmaf72m4sSNowV1jqRpyB6HFIatBoylu2nO/O7t2O wdKYEjn8EO1ydCBWeQrfeMQXEkikSiddLI8+Uxe0cCHogJjMHRjFDXrGalLiVBoyaMc5 MVVQ==
X-Gm-Message-State: AHQUAua7mWl2eCC/qK5T4IfD5eHAjxN/nnDifOvAMwJA5boIK3LDxgOY +qEAvUm7G/rTJ/s3XzWg1Nc=
X-Google-Smtp-Source: AHgI3IbpxtQb/ZfLsmcsY0jor+4FGxO9pEofyZjau1xVRH8+WCMg79sKfsLoDCwZl0X2egEK93o3Bw==
X-Received: by 2002:a1c:ce06:: with SMTP id e6mr5190961wmg.41.1550345771119; Sat, 16 Feb 2019 11:36:11 -0800 (PST)
Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id j15sm5173937wrt.1.2019.02.16.11.36.09 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 16 Feb 2019 11:36:09 -0800 (PST)
References: <155034272200.28542.17533645078274353201.idtracker@ietfa.amsl.com>
From: Anders Rundgren <anders.rundgren.net@gmail.com>
To: "json-canon@ietf.org" <json-canon@ietf.org>
Cc: Bret Jordan <jordan.ietf@gmail.com>, Samuel Erdtman <samuel@erdtman.se>
X-Forwarded-Message-Id: <155034272200.28542.17533645078274353201.idtracker@ietfa.amsl.com>
Message-ID: <38131ee7-32d6-077f-cc62-7278ae6c9e17@gmail.com>
Date: Sat, 16 Feb 2019 20:36:08 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.5.0
MIME-Version: 1.0
In-Reply-To: <155034272200.28542.17533645078274353201.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/json-canon/UlzujXT-HMm46-PPNPdVr_nHSes>
Subject: [Json-canon] I-D: draft-rundgren-json-canonicalization-scheme-05
X-BeenThere: json-canon@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: JSON Canonicalization <json-canon.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/json-canon>, <mailto:json-canon-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/json-canon/>
List-Post: <mailto:json-canon@ietf.org>
List-Help: <mailto:json-canon-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/json-canon>, <mailto:json-canon-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Feb 2019 19:36:16 -0000

https://tools.ietf.org/html/draft-rundgren-json-canonicalization-scheme-05

Abstract:
    Cryptographic operations like hashing and signing requires that the
    original data does not change during serialization or parsing.  By
    applying the rules defined by the JSON Canonicalization Scheme (JCS),
    data provided in JSON [RFC8259] format can be exchanged "as is",
    while still being usable by secure cryptographic operations.  JCS
    achieves this by building on the strict serialization formats for
    JSON primitives defined by ECMAScript [ES6], constraining JSON data
    to the I-JSON [RFC7493] subset, and through a platform independent
    property sorting scheme.

    The intended audiences of this document are JSON tool vendors, as
    well as designers of JSON based cryptographic solutions.


This update primarily addresses the scope which was somewhat unclear in 04:
JSON level canonicalization (aka "Hashable" JSON) with cryptographic methods as consumers.

However, there are also updates on:
- Sorting rationale/options
- NaN/Infinity handling
- JCS Sample code
- IEEE-754 Sample Table
- Visualization of the EURO symbol in the I-D
- Other Canonical JSON efforts

Added reference to external application note I-D

Various language and style refinements.

Anders for the JCS team