[Secdispatch] Ciphertext format draft

Yaron Sheffer <yaronf.ietf@gmail.com> Fri, 15 January 2021 14:54 UTC

Return-Path: <yaronf.ietf@gmail.com>
X-Original-To: secdispatch@ietfa.amsl.com
Delivered-To: secdispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DA1E3A09F5 for <secdispatch@ietfa.amsl.com>; Fri, 15 Jan 2021 06:54:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.527
X-Spam-Level:
X-Spam-Status: No, score=-0.527 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=1.569, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KreSs6CDhGvf for <secdispatch@ietfa.amsl.com>; Fri, 15 Jan 2021 06:54:02 -0800 (PST)
Received: from mail-wr1-x435.google.com (mail-wr1-x435.google.com [IPv6:2a00:1450:4864:20::435]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 797813A09F6 for <secdispatch@ietf.org>; Fri, 15 Jan 2021 06:54:02 -0800 (PST)
Received: by mail-wr1-x435.google.com with SMTP id c5so9552920wrp.6 for <secdispatch@ietf.org>; Fri, 15 Jan 2021 06:54:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :mime-version; bh=MOdFUTXIvLaHPvrw/aSCMHwNahagJnknbVMeH4kolsw=; b=QJubp86h+lDXG4QSAwxSMrjtFKPbPRcIbNXqfum5D389/fXtq+BdRufdkaczz32rBq jwWPE2nspfBFYYY1eFVACla54R/Jb/GpeV8ZG9LKPDmXNKyaP4nzHIsCuYb9Qt2UJhaq 2U5Lox9uJwpDizgAX4K8WlL8UFwoJ02dOqVA8WbvuxsuzhX68FJen9ZmxWOFF42fohrY lz4oBwKpJMNknRCkrUssy3nA1PNESoMJZzpe3KZWH1ZD2qPJH/YkoaEpLRxDhzmxFq0d c4AYbupqPmVhNi2kF1qDBHKDG/CSFaxtG5jMp3BnqRnJ41BoqqbYbkO6DZMaBeSeOkK+ lDfQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:mime-version; bh=MOdFUTXIvLaHPvrw/aSCMHwNahagJnknbVMeH4kolsw=; b=W4axbXeCsfEG/+TWMsbP47CtHOrU9E6pxgoDzQSvcIOnTJZUuFwbHPwQQ/ndbgYqBJ lWapt/DLCnIoE9ms/meTUv9yXwa1LQZ7YKy28qQsDVHiR/01pTnytfEvd2Ss/4QTaEIt 3Jzs1tk3zj5SZX+aJAKPdpwi5TIZLVXo92WKP/WFiLAHOVmnFIcoWLup6MLkh0mVM0Ov sAO/ovLFbQgQypz+61X6wt2BIcBXAMzLjYuAvMAwf7qkeZuN15x4nQs+fzsGX8WTrLdc st2SCA1s2+PWBJf+m/0HZ+hOC3liVSQLPTteq87/ayLiI3vQHpP6fP9dzwnu9xIwJsS8 4wGA==
X-Gm-Message-State: AOAM533nWmX+hawxjkka4Ew4GY8AbJa7GJiLdZ/rbprFfc2cwE+CX2Mi BWntpTa9E3EghPADhSiZtBhNLqbD0dJIOg==
X-Google-Smtp-Source: ABdhPJw+03p8iV6BHrwqPlt9Jigpi/5Cxh0ABaQ86OaPLnM0E8Eesj9wemANyZ1uXoyE4SGwDxljgA==
X-Received: by 2002:adf:cc81:: with SMTP id p1mr13471883wrj.339.1610722440694; Fri, 15 Jan 2021 06:54:00 -0800 (PST)
Received: from [192.168.68.105] (bzq-79-183-113-247.red.bezeqint.net. [79.183.113.247]) by smtp.gmail.com with ESMTPSA id m18sm15371021wrw.43.2021.01.15.06.53.59 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 15 Jan 2021 06:54:00 -0800 (PST)
User-Agent: Microsoft-MacOutlook/16.45.21011103
Date: Fri, 15 Jan 2021 16:53:58 +0200
From: Yaron Sheffer <yaronf.ietf@gmail.com>
To: secdispatch@ietf.org
CC: "Keselman, Gleb" <Gleb_Keselman@intuit.com>, Yoav Nir <ynir.ietf@gmail.com>
Message-ID: <8B46C11A-790A-4E8E-A7A1-8FE97E2DD9A7@contoso.com>
Thread-Topic: Ciphertext format draft
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3693574439_684251596"
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdispatch/0P9SxOOBdKz0cPYqNi8h0H7h-3s>
Subject: [Secdispatch] Ciphertext format draft
X-BeenThere: secdispatch@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Dispatch <secdispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdispatch/>
List-Post: <mailto:secdispatch@ietf.org>
List-Help: <mailto:secdispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Jan 2021 14:54:04 -0000

Hi, we just submitted draft-sheffer-ietf-ciphertext-format-01 [1]. This is a CBOR-based set of headers for encrypted data, with the goal of enabling automation of large datasets that contain encrypted data, typically interspersed with plain data. Specifically we want to facilitate discovery of encrypted data (e.g., this database column contains ciphertext) and attributing this data back to the service that created the data and the key that was used to encrypt it.

 

We received good feedback on the SAAG list to change from generic TLV to CBOR, which we implemented in -01.

 

The authors would appreciate this list’s feedback regarding next steps.

 

Thanks,

                Yaron

 

[1] https://tools.ietf.org/id/draft-sheffer-ietf-ciphertext-format-01.xml