Re: [kitten] draft-ietf-krb-wg-pkinit-alg-agility-07 Re: now that I've volunteered....

[Benjamin Kaduk <[e-mail]>]

On Tue, 31 Mar 2015, Tom Yu wrote:

> Here are the KDF OID related changes that I think should happen to the
> algorithm agility draft.
>
> Change the Appendix A ASN.1 module IMPORTS subclause that mentions
> PK-INIT-SPEC from
>
>       PKAuthenticator, DHNonce
>           FROM KerberosV5-PK-INIT-SPEC {
>             iso(1) identified-organization(3) dod(6) internet(1)
>             security(5) kerberosV5(2) modules(4) pkinit(5) };
>             -- as defined in RFC 4556.
>
> to
>
>       PKAuthenticator, DHNonce, id-pkinit
>           FROM KerberosV5-PK-INIT-SPEC {
>             iso(1) identified-organization(3) dod(6) internet(1)
>             security(5) kerberosV5(2) modules(4) pkinit(5) };
>             -- as defined in RFC 4556.
>
> (This adds id-pkinit to the imports).
>
> Change the OID list in Section 6 from
>
>    id-pkinit-kdf OBJECT IDENTIFIER           ::= { id-pkinit 6 }
>        -- PKINIT KDFs
>    id-pkinit-kdf-ah-sha1 OBJECT IDENTIFIER   ::= { id-pkinit-kdf 1 }
>        -- SP800 56A ASN.1 structured hash based KDF using SHA-1
>    id-pkinit-kdf-ah-sha256 OBJECT IDENTIFIER ::= { id-pkinit-kdf 2 }
>        -- SP800 56A ASN.1 structured hash based KDF using SHA-256
>    id-pkinit-kdf-ah-sha512 OBJECT IDENTIFIER ::= { id-pkinit-kdf 3 }
>        -- SP800 56A ASN.1 structured hash based KDF using SHA-512
>    id-pkinit-kdf-ah-sha384 OBJECT IDENTIFIER ::= { id-pkinit-kdf 4 }
>        -- SP800 56A ASN.1 structured hash based KDF using SHA-384
>
> to
>
>    id-pkinit-kdf OBJECT IDENTIFIER      ::= { id-pkinit kdf(6) }
>         -- PKINIT KDFs
>
>    id-pkinit-kdf-ah-sha1 OBJECT IDENTIFIER
>         ::= { id-pkinit-kdf sha1(1) }
>         -- SP800-56A ASN.1 structured hash based KDF using SHA-1
>
>    id-pkinit-kdf-ah-sha256 OBJECT IDENTIFIER
>         ::= { id-pkinit-kdf sha256(2) }
>         -- SP800-56A ASN.1 structured hash based KDF using SHA-256
>
>    id-pkinit-kdf-ah-sha512 OBJECT IDENTIFIER
>         ::= { id-pkinit-kdf sha512(3) }
>         -- SP800-56A ASN.1 structured hash based KDF using SHA-512
>
>    id-pkinit-kdf-ah-sha384 OBJECT IDENTIFIER
>         ::= { id-pkinit-kdf sha384(4) }
>         -- SP800-56A ASN.1 structured hash based KDF using SHA-384
>
> and also duplicate that in the Appendix A ASN.1 module.  Inserting it
> right after the IMPORTS clause might be a good place.
>
> We can debate whether the component identifiers for the KDF OIDs should
> be just <hashname> or ah-<hashname>.
>
> We might also want to duplicate the id-pkinit definition from RFC 4556
> in Section 6 (but not the Appendix A ASN.1 module), to make the full OID
> easier for a casual reader to derive.
>
> Any comments?

These look generally good.

I don't presently have an opinion on <hashname> vs. ah-<hashname>, and
would support the duplication of id-pkinit in section 6 (but not Appendix
A).

Thanks for putting this together.

-Ben