Re: [smime] I-D ACTION:draft-ietf-smime-cms-rsa-kem-10.txt

"David Ireland" <smime17@di-mgt.com.au> Fri, 11 December 2009 02:15 UTC

Return-Path: <smime17@di-mgt.com.au>
X-Original-To: smime@core3.amsl.com
Delivered-To: smime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 482CE3A694A for <smime@core3.amsl.com>; Thu, 10 Dec 2009 18:15:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.607
X-Spam-Level:
X-Spam-Status: No, score=-0.607 tagged_above=-999 required=5 tests=[AWL=-1.879, BAYES_20=-0.74, FAKE_REPLY_C=2.012]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lcmARzrK0rJQ for <smime@core3.amsl.com>; Thu, 10 Dec 2009 18:15:21 -0800 (PST)
Received: from prod03.pvpn.lax.witopia.net (prod03.pvpn.lax.witopia.net [207.7.138.116]) by core3.amsl.com (Postfix) with ESMTP id 263893A6897 for <smime@ietf.org>; Thu, 10 Dec 2009 18:15:21 -0800 (PST)
Received: from difuji (unknown [10.178.5.26]) by prod03.pvpn.lax.witopia.net (Postfix) with SMTP id CD4FEADF522 for <smime@ietf.org>; Fri, 11 Dec 2009 02:15:08 +0000 (GMT)
Message-ID: <37BAEBEE16144FEEABF50EB701BF27A4@difuji>
From: David Ireland <smime17@di-mgt.com.au>
To: smime@ietf.org
Date: Fri, 11 Dec 2009 10:15:07 +0800
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5843
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Subject: Re: [smime] I-D ACTION:draft-ietf-smime-cms-rsa-kem-10.txt
X-BeenThere: smime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SMIME Working Group <smime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/smime>, <mailto:smime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/smime>
List-Post: <mailto:smime@ietf.org>
List-Help: <mailto:smime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/smime>, <mailto:smime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Dec 2009 02:15:22 -0000

[smime] I-D ACTION:draft-ietf-smime-cms-rsa-kem-10.txt

1. *All* the examples of ASN.1 DER encodings shown in B.4 are incorrect.

1a. Where they are advertised to show the ANSI X9.44 OID for id-kdf-kdf3,
they actually show the ISO 18033-2 OID for kdf2.

[ASIDE] So we now have two OIDs for KDF2, both referred to as id-kdf-kdf2:
the ISO 180330-2 one, kdf2(2) (1.0.18033.2.5.2), and the X9.44 one, kdf2(1)
(1.3.133.16.840.9.44.1.1) - another wonderful opportunity for confusion
here!

(I'm using Shoup's draft version of ISO 180330-2, so it may have changed in
the final version to match X9.44, but I doubt it.)

1b. Almost all of the sequence length values in the DER encodings are wrong
and the lengths for the INTEGERs are missing, so none of the examples shown
will parse properly if you try and use DUMPASN1 on them.

2. A small typo, perhaps? Page 22 about half-way down, should not
kdf3 ALGORITHM ::= { OID id-kdf-kdf2
be
kdf3 ALGORITHM ::= { OID id-kdf-kdf3

David