[secdir] SECDIR review of draft-ietf-pkix-new-asn1-07

Richard Barnes <rbarnes@bbn.com> Wed, 18 November 2009 18:21 UTC

Return-Path: <rbarnes@bbn.com>
X-Original-To: secdir@core3.amsl.com
Delivered-To: secdir@core3.amsl.com
Received: from localhost (localhost []) by core3.amsl.com (Postfix) with ESMTP id 93F143A6993; Wed, 18 Nov 2009 10:21:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([]) by localhost (core3.amsl.com []) (amavisd-new, port 10024) with ESMTP id 8xX-EJXr0oAl; Wed, 18 Nov 2009 10:21:12 -0800 (PST)
Received: from smtp.bbn.com (smtp.bbn.com []) by core3.amsl.com (Postfix) with ESMTP id 8F2583A68E4; Wed, 18 Nov 2009 10:21:12 -0800 (PST)
Received: from [] (helo=col-dhcp-192-1-255-180.bbn.com) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.63) (envelope-from <rbarnes@bbn.com>) id 1NAp9R-0005Si-Bx; Wed, 18 Nov 2009 13:21:09 -0500
Message-Id: <C34CC04D-F45E-4F50-B83C-AF39212A9EA6@bbn.com>
From: Richard Barnes <rbarnes@bbn.com>
To: secdir@ietf.org, iesg@ietf.org, IETF discussion list <ietf@ietf.org>
Content-Type: multipart/alternative; boundary=Apple-Mail-6--1059088642
Mime-Version: 1.0 (Apple Message framework v936)
Date: Wed, 18 Nov 2009 13:21:09 -0500
X-Mailer: Apple Mail (2.936)
Cc: draft-ietf-pkix-new-asn1@tools.ietf.org
Subject: [secdir] SECDIR review of draft-ietf-pkix-new-asn1-07
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Nov 2009 18:21:13 -0000

I have reviewed this document as part of the security directorate's  
ongoing effort to review all IETF documents being processed by the  
IESG.  These comments were written primarily for the benefit of the  
security area directors.  Document editors and WG chairs should treat  
these comments just like any other last call comments.

This document updates the ASN.1 descriptions of several security- 
relevant data objects (e.g., CMS messages and S/MIME objects) from the  
1988 version of ASN.1 to the 2002 version, without changing the  
structure expressed by these definitions -- there are no changes to  
bits on the wire.  The document correctly states that this document  
itself creates no security issues, because it makes no changes to any  
protocols (it simply expresses the structure of those protocols in a  
different, updated syntax).  The only minor concern I have is to be  
sure that the above claims about the lack of changes are true, i.e.,  
that the ASN.1 syntax is correct.  To ensure this correctness, I would  
recommend an expert review focused on the ASN.1, if one has not  
already been done.