Re: [Lake] PRs on encoding clarification and invalid test vectors

Carsten Bormann <cabo@tzi.org> Fri, 08 September 2023 11:20 UTC

Return-Path: <cabo@tzi.org>
X-Original-To: lake@ietfa.amsl.com
Delivered-To: lake@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B607C14CE39 for <lake@ietfa.amsl.com>; Fri, 8 Sep 2023 04:20:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.907
X-Spam-Level:
X-Spam-Status: No, score=-6.907 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W42Zv_GFbF8s for <lake@ietfa.amsl.com>; Fri, 8 Sep 2023 04:20:35 -0700 (PDT)
Received: from smtp.zfn.uni-bremen.de (smtp.zfn.uni-bremen.de [134.102.50.21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D1B9C14F747 for <lake@ietf.org>; Fri, 8 Sep 2023 04:20:34 -0700 (PDT)
Received: from smtpclient.apple (unknown [165.220.227.182]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by smtp.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4RhtvK1XHJzDCdZ; Fri, 8 Sep 2023 13:20:29 +0200 (CEST)
Content-Type: multipart/alternative; boundary="Apple-Mail-30F9A3AA-4A3C-41B0-8CAD-AF846D807EE7"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (1.0)
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <GVXPR07MB9678CD3AA66FB02D6969993389EDA@GVXPR07MB9678.eurprd07.prod.outlook.com>
Date: Fri, 08 Sep 2023 13:20:13 +0200
Cc: lake@ietf.org
Message-Id: <56C994EE-7249-4126-9C70-28F122BA7B82@tzi.org>
References: <GVXPR07MB9678CD3AA66FB02D6969993389EDA@GVXPR07MB9678.eurprd07.prod.outlook.com>
To: John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>
X-Mailer: iPhone Mail (20G81)
Archived-At: <https://mailarchive.ietf.org/arch/msg/lake/m4KOb4F8R_UcnB8Kj5hCraHP7jc>
Subject: Re: [Lake] PRs on encoding clarification and invalid test vectors
X-BeenThere: lake@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Lightweight Authenticated Key Exchange <lake.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lake>, <mailto:lake-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lake/>
List-Post: <mailto:lake@ietf.org>
List-Help: <mailto:lake-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lake>, <mailto:lake-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Sep 2023 11:20:40 -0000

Doesn’t that essentially split edhoc into those that do and those that don’t?   If it is needed, it should be required, if it isn’t, peers should not fail when not encoded deterministically.  If the two split half’s exist for some other reason, that should be identified. 

Sent from mobile, sorry for terse

> On 8. Sep 2023, at 10:52, John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org> wrote:
> 
> - “Implementations MAY abort the EDHOC session if the received EDHOC message is not encoded using deterministic CBOR.” instead of the unnecessary hard SHOULD abort.