[Secdispatch] draft-madden-jose-ecdh-1pu

[Neil Madden <[e-mail]>]

I am looking for a home for this draft that defines a new public key authenticated encryption algorithm for JOSE (JWE):

https://datatracker.ietf.org/doc/draft-madden-jose-ecdh-1pu/ <https://datatracker.ietf.org/doc/draft-madden-jose-ecdh-1pu/>

Existing JWE algorithms provide authenticated encryption only in the case of symmetric algorithms (i.e., AES) and all the existing public key encryption algorithms provide only confidentiality with some level of ciphertext integrity - no sender/origin authentication. When sender authentication is required in a public key context, currently users must resort to a nested combination of a digital signature JWS wrapped in a JWE. This can be inefficient, somewhat error-prone, and the stronger security properties provided by signatures (non-repudiation, 3rd-party verifiability) can be undesirable in some applications where deniability or privacy are important.

The draft was originally created to support work within the OAuth WG around JWT-format access tokens. However, the WG declined to adopt the draft, so it’s looking for a new home. I believe the draft is ideally suited to many applications within OAuth and OpenID Connect, and it has already been adopted by other standards work outside the IETF (https://identity.foundation/didcomm-messaging/spec/#key-wrapping-algorithms <https://identity.foundation/didcomm-messaging/spec/#key-wrapping-algorithms>). It may also be a worthwhile addition to the COSE WG as it has some advantages in code size compared to combined signature+encryption schemes, but I am primarily interested in the JOSE applications.

Kind regards,

Neil Madden
-- 
ForgeRock values your Privacy <https://www.forgerock.com/your-privacy>