[saag] LAMPS

[Russ Housley <[e-mail]>]

S/MIME header protection (draft-ietf-lamps-header-protection):  The way that messages that include header protection are displayed by existing implementations a concern, and DKG asked for assistance gather this information, especially for mail clients that are not freely available.  One of the example messages is showing as an invalid signature, and DKG asked for assistance in finding our why that is the case.  The examples are available at https://header-protection.cmrg.net/.

Three CMP-related documents: CMP Algorithms (draft-ietf-lamps-cmp-algorithms), CMP Updates (draft-ietf-lamps-cmp-updates), and Lightweight CMP Profile (draft-ietf-lamps-lightweight-cmp-profile): The role of the Registration Authority (RA) was discussed briefly, with a focus on when the certificate needed to include the id-kp-cmcRA from RFC 6402.

Guidance on End-to-End E-mail Security (draft-dkg-lamps-e2e-mail-guidance):  The LAMPS WG needs to re-charter to progress this work.

Verification-Friendly ECDSA (draft-struik-lamps-verification-friendly-ecdsa):  A speed-up for ECDSA was described.  If the verifier knows that the speed-up was used, they get a benefit.  If the verifier is unaware of the speed-up, the usual technique will still validate the signature. A new algorithm identifier would mean that verifiers would treat it as an unknown algorithm, even though the signature validation would work using the slower, existing technique.  A non-critical certificate extension could provide an indication that the speed-up is available, this would be ignored by implementation that do not support the speed-up, and they would still be able to validate the signature.  There was some concern around patents, and it seems that all of them will expire in the next four years.  It is expected that it will take more than four years to complete the specification ad get real deployment.  Other people question whether it is worth a speed-up for ECDSA when post-quantum algorithms are going to be standardized in the next few years.  No decision was reached, and the discussion will continue on the mail list.