IETF Logo Mail Archive

[Rats] Missing CDDL in UCCS (was Re: Working Group Last Call for UCCF draft)

"lgl island-resort.com" <lgl@island-resort.com> Tue, 29 August 2023 19:30 UTC

Return-Path: <lgl@island-resort.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48081C13AE34; Tue, 29 Aug 2023 12:30:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QPOAfmqHlsa9; Tue, 29 Aug 2023 12:30:14 -0700 (PDT)
Received: from NAM12-MW2-obe.outbound.protection.outlook.com (mail-mw2nam12on2131.outbound.protection.outlook.com [40.107.244.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8547BC14CE55; Tue, 29 Aug 2023 12:30:14 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IWPcszOTvVdYDJeanpelU5DWPz+OWrH9tyFlqoRjulDLGRp5mzlQWhVRRzmpoyjXVeaA2upl3iz4KkRJzwuz48cBNQqeKc2WHtjLbYgWH2jtSR/SwOFQNAYVJk/OsX5PBqhSzdhFon9pAF2UYm+dFB4Gu7kFFDoV0Rdaiml0oCs5lFt30bAkzBv4tr8MDQ++dHQBysI/yj34JWEOUIHVIWpj7sw2M5s0wIG82OVCFjL+A/5VpNmBVMBLu/ITu4yzBiupQh7erEQ/gy9Pqr61i9qO2uq1ZDWZaWDsmZqOMGS4S/CSjo00RoiUcX5XrKhVTX78PAyC0KH82HyensYjRg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=w7DJoi9OKZHqFpHncf9NQpD+z+n/L/cP1/+RMGZeXRI=; b=CGrDydUvLp5KIHSmvhaVE0QcAxGm0pOZfWnWWsEBIINBULMDIO6JM5A8ryuN6tv1NdXJrBurDxWHN0teLnmCgjm+aCVWii3pl8TIwO5Fks09m8fL0Kz3YREM82thT58IZcYGEH7YTsdCF3yjTWlkXsZdECYBvR44QwO2g8/wTUYBNwl8M3HcvdjaMzCNzT9TW5pYTGhUTb4rNBRIkv0O1YgO/y0UA43fWEJ2IOaMhucvfCnkDvy2IvrelcGPPnYWmSN4kWilreMzphPjNoQCx3u9AOMFo/TgpmMYFycWGO9nYsvvfB8a3FKACAdkfrdZl+HzBO3awfSH8OzX8jnSlQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=island-resort.com; dmarc=pass action=none header.from=island-resort.com; dkim=pass header.d=island-resort.com; arc=none
Received: from PH7PR22MB3092.namprd22.prod.outlook.com (2603:10b6:510:13b::8) by LV8PR22MB4941.namprd22.prod.outlook.com (2603:10b6:408:1f2::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6699.35; Tue, 29 Aug 2023 19:30:11 +0000
Received: from PH7PR22MB3092.namprd22.prod.outlook.com ([fe80::f317:e4d1:7e1e:3934]) by PH7PR22MB3092.namprd22.prod.outlook.com ([fe80::f317:e4d1:7e1e:3934%3]) with mapi id 15.20.6745.015; Tue, 29 Aug 2023 19:30:11 +0000
From: "lgl island-resort.com" <lgl@island-resort.com>
To: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
CC: rats <rats@ietf.org>, cose <cose@ietf.org>
Thread-Topic: Missing CDDL in UCCS (was Re: [Rats] Working Group Last Call for UCCF draft)
Thread-Index: AQHZ2q86uO69gpQ4L0uLWbn9bExJsw==
Date: Tue, 29 Aug 2023 19:30:11 +0000
Message-ID: <667233FC-03D4-401B-804B-31904A8256F6@island-resort.com>
References: <CAHbuEH7Kj821CZJxbbs_5WW+XhK3xzePmWXjc878k=r2Gs=nJA@mail.gmail.com>
In-Reply-To: <CAHbuEH7Kj821CZJxbbs_5WW+XhK3xzePmWXjc878k=r2Gs=nJA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=island-resort.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH7PR22MB3092:EE_|LV8PR22MB4941:EE_
x-ms-office365-filtering-correlation-id: d062d3d7-9008-4ff5-1f22-08dba8c65c84
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH7PR22MB3092.namprd22.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(396003)(376002)(39830400003)(136003)(366004)(346002)(451199024)(1800799009)(186009)(8676002)(4326008)(8936002)(91956017)(33656002)(2906002)(316002)(54906003)(6916009)(36756003)(66446008)(66946007)(66476007)(76116006)(64756008)(66556008)(5660300002)(41300700001)(6506007)(6486002)(53546011)(6512007)(26005)(38070700005)(38100700002)(478600001)(2616005)(71200400001)(966005)(83380400001)(86362001)(122000001)(45980500001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 6YfnuGgB9m1hiCBNZtfaPVnX6SN2SZverE6L+Zsc0iW8cm0ZByi2H7tXbl0c47huryJlio+b5iJbC0ggWXLy7V/G2CO411JuMdyH03uJaDUclL1itaWA7c1BcH2cP1kRSHp8OKEeEtYvlJTK/wPmqkAvJOYRyb9n73kaO/d9ttCEOZ4mG/4DDDwn4xoKI41a8ViOZdCwYKnC4hitYHZ4UGJ1bzoP+CYf9cOCHMGHOFEn/+gQYVOPbYEvzWxEgYlcwL+D3yf0VReTcbMDHFTAkYzO/8vAkxtWnALWlVc10tE9mjyY8I89U4LSHoowsiggu44ouaZPjdGhHjnxYiIjdbJOVnQ/q34dFxXHQF1lW2k0KjvWq5pNAvXt1ibjLmAUJufoMxNxXrrvr3l+OufCLKnC4CgFaTT4HUSJyA5et4DGfwxxlmXDhewfHI6TWMAgeJctITdtkntNhYCjuWusQvueC7kuOz1B0ADccFgOvyI9UyKUUeHKVgW4wzn2ZjIfgjzc9zN/1rkZ2HGXAzvvuMaq+8KURxKdkTK397EUmuzeSiKAD5OZbr7PiiaqjCLyvCHfIPe+azbF/QttGqPaxsQ7gGULobEf5vwheDK4BM0ftyHPw/npKPYIyIi3tDQjwmLM7HCEa3xGc59tCaWA1XGPLsxeud745Xz1jZ61fJ+MysHbXiQu5g8zi4jP2v3jWpBO4mQHkRbizf6krA1mi8rp5ECgv+2WCj6R9MB0YlGcm3c3Z6Ls0ijVToJkHn6FUgO5n0/dEI92oNEW1g8wgmApKEtf8eR7AojwyNG1LIBg4frF7GGd/cL92rnH4P9pXQHF/HDKIR1ZLVBcSbwfBz2k0xBYUGupfQmmOsndO2hjT5E1IqbfkvLzcHfueUYQYNAhMfqDAJbQJ8+07vgDx0jNyGSLDer2JNUSikjbSldeX7TMhKcGAWChxPn0SRa7OQyRhAIwo8cTw4mOtrjkqwqtmjyogOfxmqn7pNbGpt51PBC2kyAtluzsxAC5sIeOMcieROShS9EOxmoQa72LuVJiEoVLNgvqM3AKMrJmZiaCxlfsavO0MBlLkRFAC6BvOyJJMP1vmDfhhA1iCJeyjYCkTWzvekjDVYHSBj5U7pzAyeN7C/ogcIZ8fUyiYQ0jQqqSvMVWZ1DM2m95hfchmQ1ZIBnUAnyH2G+AT8K5GDy8zUjgxvzy+6YfjtSgbYjBhCAshxHcyy+uXgfPquSBO8pZ941HLiPxeAgCBcQdNw/FIe2Abewqp67AGuzwJA98mQ1MPjPhGuEb3F0IBfH5Q5o66nJMAGRfSwWA2WLJOtR1VJVU1oyFJ6svG/LNVqqjtqQ+L1h2llILBKiZdMTMogg1QCyUKwBB+nrRGipdNiYYR+UAz/mwaqKbJEsj5N57nFR6ePBYHJahA1XA4ivvfkwMoZJF9PhjOWvXJnjD921Vm8B4Wqg7vMar4Eoa9456osxHJAXv2ycuscuotjKUZeo9bDssly0hIcBfqXoiKQkWSdyvlrzdMx+c/53QwgnOtOLCLBG/DX2mBgrdKhaVRY09+H90YZ1Zwi7gpnclZj7uC4JmEkt9lBAWrDF/KGuVICdoK27ZUXX9+2GbTFWsxw==
Content-Type: text/plain; charset="utf-8"
Content-ID: <D146846DFF047C44A52A5300DD666300@namprd22.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: island-resort.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH7PR22MB3092.namprd22.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d062d3d7-9008-4ff5-1f22-08dba8c65c84
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Aug 2023 19:30:11.2032 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: ad4b5b91-a549-4435-8c42-a30bf94d14a8
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: fqU1cQ0/XxguwMiHPwMQMUxgEAgj6nRiG2s7b5B2DZLaQF8A7SPQAxVghNDD8G+H+pSEYY4u3Y4y5VZyx0Y7BA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV8PR22MB4941
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/q2lY-Q9uk923jIQf_VT8ATpKglg>
Subject: [Rats] Missing CDDL in UCCS (was Re: Working Group Last Call for UCCF draft)
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Aug 2023 19:30:18 -0000

From reviewing comments from Thomas, I noticed UCCS is missing some parts.

The UCCS draft doesn’t define the CDDL for the $EAT-CBOR-Tagged-Token, $JSON-Selector-Type and $JSON-Selector-Value sockets for inclusion of a UCCS in EAT.

The EAT document goes as far as it can to set up for UCCS, but can’t go all the way without normative reference. It leaves it up to the definer of other token formats (which UCCS is) to define how they plug into EAT as a nested token and into a detached EAT bundle.

This is primarily an issue for JSON-encoded EATs as CBOR-encoded EATs use the CBOR tag mechanism. JSON doesn’t haven an equivalent.

What’s needed is something like this:

    $JSON-Selector-Type /= “UCCS"
    $JSON-Selector-Value /= UCCS  
    $EAT-CBOR-Tagged-Token = UCCS

But, there’s a further problem.

The UCCS draft defines:

    UCCS = #6.601(Claims-Set)

It should be:

    UCCS = UCCS-Tagged  / UCCS-UnTagged 
    UCCS-Tagged = #6.601(Claims-Set)
    UCCS-UnTagged = Claims-Set

Then the CDDL to connect up to EAT is:

    $JSON-Selector-Type /= “UCCS"
    $JSON-Selector-Value /= UCCS-UnTagged
    $EAT-CBOR-Tagged-Token = UCCS-Tagged

This also makes the UCCS reference to EAT normative, but that is OK since EAT is ahead of UCCS.

I believe this very much needs to be fixed.

LL 



> On Aug 26, 2023, at 4:43 AM, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:
> 
> Greetings!
> 
> The working group last call for https://datatracker.ietf.org/doc/draft-ietf-rats-uccs/
> begins now and will run for 4 weeks per discussion at the IETF 117 meeting. Review requests are also requested from COSE working group members. Last call ends 9/23/2023.
> 
> There are a few remaining questions that I need assistance from authors on prior to IETF last call. Could each author and others with knowledge of IPR please disclose any at this time as well.
> 
> Thank you!
> 
> -- 
> 
> Best regards,
> Kathleen
> _______________________________________________
> RATS mailing list
> RATS@ietf.org
> https://www.ietf.org/mailman/listinfo/rats

v2.23.0 | Report a Bug | By Email