[KEYPROV] [Technical Errata Reported] RFC6030 (3811)

RFC Errata System <rfc-editor@rfc-editor.org> Mon, 25 November 2013 10:45 UTC

To: phoyer@actividentity.com, mpei@verisign.com, smachani@diversinet.com, stephen.farrell@cs.tcd.ie, turners@ieca.com, phill@hallambaker.com, Hannes.Tschofenig@gmx.net
From: RFC Errata System <rfc-editor@rfc-editor.org>
Message-Id: <20131125104504.CA60575E015@rfc-editor.org>
Date: Mon, 25 Nov 2013 02:45:04 -0800
Cc: keyprov@ietf.org, ivan.micanovic@verisec.com, rfc-editor@rfc-editor.org
Subject: [KEYPROV] [Technical Errata Reported] RFC6030 (3811)
Precedence: list

The following errata report has been submitted for RFC6030,
"Portable Symmetric Key Container (PSKC)".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=6030&eid=3811

--------------------------------------
Type: Technical
Reported by: Ivan Micanovic <ivan.micanovic@verisec.com>

Section: 4.1.

Original Text
-------------
All the elements listed above (and those defined in the future)
obey a simple structure in that they MUST support child elements
to convey the data value in either plaintext or encrypted format:

Plaintext: The <PlainValue> element carries a plaintext value
that is typed, for example, to xs:integer.

Encrypted: The <EncryptedValue> element carries an encrypted
value.

Corrected Text
--------------

Notes
-----
In case that <Counter>, <Time>, <TimeInterval> or <TimeDrift> are encrypted in the PSKC file, the standard doesn't say anything about how to interpret this encrypted data.
After decrypting those values we have byte array.

Example:
Counter plain text value: 10000 decimal

In the case that this value is encrypted and later decrypted what should we expect?
Byte content 0x27 0x10 or 0x01 0x00 0x00 or something else?

1. Byte content 0x27 0x10 is interpreted as 10000 decimal if this bytes are interpreted as binary data (Big endian).
2. Byte content 0x01 0x00 0x00 is interpreted as 10000 decimal if this bytes are interpreted as hex data (Big endian).
Each hex digit will be mapped to a resulting decimal digit. From my point of view this way is a bit confusing.

My proposal to solve this issue is described in 1.

Instructions:
-------------
This errata is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary.

--------------------------------------
RFC6030 (draft-ietf-keyprov-pskc-09)
--------------------------------------
Title : Portable Symmetric Key Container (PSKC)
Publication Date : October 2010
Author(s) : P. Hoyer, M. Pei, S. Machani
Category : PROPOSED STANDARD
Source : Provisioning of Symmetric Keys
Area : Security
Stream : IETF
Verifying Party : IESG

[KEYPROV] [Technical Errata Reported] RFC6030 (38… RFC Errata System
Re: [KEYPROV] [Technical Errata Reported] RFC6030… Simon Josefsson