[smime] [lamps] Fwd: [Errata Verified] RFC5652 (6250)

Russ Housley <housley@vigilsec.com> Fri, 07 August 2020 12:15 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: smime@ietfa.amsl.com
Delivered-To: smime@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA52F3A0B71 for <smime@ietfa.amsl.com>; Fri, 7 Aug 2020 05:15:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jZhV62LCaXNi for <smime@ietfa.amsl.com>; Fri, 7 Aug 2020 05:15:22 -0700 (PDT)
Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1E9B3A0B3D for <smime@ietf.org>; Fri, 7 Aug 2020 05:15:22 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 4AF41300B50 for <smime@ietf.org>; Fri, 7 Aug 2020 08:15:20 -0400 (EDT)
X-Virus-Scanned: amavisd-new at mail.smeinc.net
Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id woUWNwpPfeyk for <smime@ietf.org>; Fri, 7 Aug 2020 08:15:18 -0400 (EDT)
Received: from a860b60074bd.fios-router.home (pool-141-156-161-153.washdc.fios.verizon.net [141.156.161.153]) by mail.smeinc.net (Postfix) with ESMTPSA id 81D26300AA6 for <smime@ietf.org>; Fri, 7 Aug 2020 08:15:18 -0400 (EDT)
From: Russ Housley <housley@vigilsec.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_93F060D0-28E3-474C-9468-153BA797B334"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.15\))
Message-Id: <67C56FED-EEC3-401D-829A-72C4A253E6BF@vigilsec.com>
References: <20200807050034.F1740F4074E@rfc-editor.org>
To: IETF SMIME <smime@ietf.org>
Date: Fri, 7 Aug 2020 08:15:20 -0400
X-Mailer: Apple Mail (2.3445.104.15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/smime/N0_LMQAyJzyTyXgkoEJac-O6Dyg>
Subject: [smime] [lamps] Fwd: [Errata Verified] RFC5652 (6250)
X-BeenThere: smime@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: SMIME Working Group <smime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/smime>, <mailto:smime-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/smime/>
List-Post: <mailto:smime@ietf.org>
List-Help: <mailto:smime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/smime>, <mailto:smime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Aug 2020 12:15:25 -0000


> From: RFC Errata System <rfc-editor@rfc-editor.org <mailto:rfc-editor@rfc-editor.org>>
> Subject: [Errata Verified] RFC5652 (6250)
> Date: August 7, 2020 at 1:00:34 AM EDT
> To: housley@vigilsec.com <mailto:housley@vigilsec.com>, housley@vigilsec.com <mailto:housley@vigilsec.com>
> Cc: kaduk@mit.edu <mailto:kaduk@mit.edu>, iesg@ietf.org <mailto:iesg@ietf.org>, smime@ietf.org <mailto:smime@ietf.org>, rfc-editor@rfc-editor.org <mailto:rfc-editor@rfc-editor.org>
> 
> The following errata report has been verified for RFC5652,
> "Cryptographic Message Syntax (CMS)". 
> 
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid6250 <https://www.rfc-editor.org/errata/eid6250>
> 
> --------------------------------------
> Status: Verified
> Type: Technical
> 
> Reported by: Russ Housley <housley@vigilsec.com>
> Date Reported: 2020-08-06
> Verified by: Benjamin Kaduk (IESG)
> 
> Section: 9.2
> 
> Original Text
> -------------
>   If the authAttrs field is present, the content-type attribute (as
>   described in Section 11.1) and the message-digest attribute (as
>   described in Section 11.2) MUST be included, and the input to the MAC
>   calculation process is the DER encoding of authAttrs.  A separate
>   encoding of the authAttrs field is performed for message digest
>   calculation.  The IMPLICIT [2] tag in the authAttrs field is not used
>   for the DER encoding, rather an EXPLICIT SET OF tag is used.  That
>   is, the DER encoding of the SET OF tag, rather than of the IMPLICIT
>   [2] tag, is to be included in the message digest calculation along
>   with the length and content octets of the authAttrs value.
> 
> Corrected Text
> --------------
>   If the authAttrs field is present, the content-type attribute (as
>   described in Section 11.1) and the message-digest attribute (as
>   described in Section 11.2) MUST be included, and the input to the MAC
>   calculation process is the DER encoding of authAttrs.  A separate
>   encoding of the authAttrs field is performed for message digest
>   calculation.  The IMPLICIT [2] tag in the authAttrs field is not used
>   for the DER encoding, rather an EXPLICIT SET OF tag is used.  That
>   is, the DER encoding of the SET OF tag, rather than of the IMPLICIT
>   [2] tag, is to be included in the MAC calculation along
>   with the length and content octets of the authAttrs value.
> 
> Notes
> -----
> The paragraph is talking about the input to a MAC calculation, not the input to message digest calculation.
> 
> --------------------------------------
> RFC5652 (draft-ietf-smime-rfc3852bis-00)
> --------------------------------------
> Title               : Cryptographic Message Syntax (CMS)
> Publication Date    : September 2009
> Author(s)           : R. Housley
> Category            : DRAFT STANDARD
> Source              : S/MIME Mail Security
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG