Re: [smime] I-D ACTION:draft-ietf-smime-cms-rsa-kem-10.txt

Sean Turner <turners@ieca.com> Tue, 15 December 2009 03:13 UTC

Return-Path: <turners@ieca.com>
X-Original-To: smime@core3.amsl.com
Delivered-To: smime@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8A13C3A6976 for <smime@core3.amsl.com>; Mon, 14 Dec 2009 19:13:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.554
X-Spam-Level:
X-Spam-Status: No, score=-2.554 tagged_above=-999 required=5 tests=[AWL=0.044, BAYES_00=-2.599, UNPARSEABLE_RELAY=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GXonJwemsbCo for <smime@core3.amsl.com>; Mon, 14 Dec 2009 19:13:02 -0800 (PST)
Received: from smtp106.biz.mail.re2.yahoo.com (smtp106.biz.mail.re2.yahoo.com [206.190.52.175]) by core3.amsl.com (Postfix) with SMTP id 79D393A691A for <smime@ietf.org>; Mon, 14 Dec 2009 19:13:02 -0800 (PST)
Received: (qmail 12135 invoked from network); 15 Dec 2009 03:12:46 -0000
Received: from pool-71-191-3-85.washdc.east.verizon.net (turners@71.191.3.85 with plain) by smtp106.biz.mail.re2.yahoo.com with SMTP; 14 Dec 2009 19:12:46 -0800 PST
X-Yahoo-SMTP: ZrP3VLSswBDL75pF8ymZHDSu9B.vcMfDPgLJ
X-YMail-OSG: v7EubwUVM1mkoOtfNcctvVduY2ycH.YkRotGlSBs9NxNwVeHEHpDv6.stfFMA2e1CKD8n36JyQl98oeeraSCjvMLZqS2lMA93zSs0MEQ3TeCpwSP_As60I2hTOMJ.Aau7fcC5n8E2Gsaqlf34Pde_k8Pr2UW0YzGHn73lzR5sK4MC559sYogiB3CdvRFkywsM9pd_w4gfbdzrTWzS00Zdvqs3EPccICsqrv4UyyvreiwqMWpL2hsRfkukRi2SyY12pbiEEKCW2JXtbw9ng_fmQ9DVP6X.B4OfcqlRZVNedR_AaVOCE9Ii33TFff97vW5mgnKuv5jhRiwWIp6oQNJ7tnfs5WOyl5wzayBuN3h2sGEvD8I8exvmjIa5RPyqTqQI5wYLMNQyXeEKwc8pepTAFz3PqgcVyeWV5gSHENMChQXRzYg599SIog_dbn6ZctDpHGi8FdQ1d4-
X-Yahoo-Newman-Property: ymail-3
Message-ID: <4B26FEAE.4040104@ieca.com>
Date: Mon, 14 Dec 2009 22:12:46 -0500
From: Sean Turner <turners@ieca.com>
User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812)
MIME-Version: 1.0
To: David Ireland <smime17@di-mgt.com.au>
References: <37BAEBEE16144FEEABF50EB701BF27A4@difuji>
In-Reply-To: <37BAEBEE16144FEEABF50EB701BF27A4@difuji>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: smime@ietf.org
Subject: Re: [smime] I-D ACTION:draft-ietf-smime-cms-rsa-kem-10.txt
X-BeenThere: smime@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SMIME Working Group <smime.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/smime>, <mailto:smime-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/smime>
List-Post: <mailto:smime@ietf.org>
List-Help: <mailto:smime-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/smime>, <mailto:smime-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Dec 2009 03:13:03 -0000

David,

You're absolutely correct we'll fix the lengths, use the kdf2/3 OIDs 
from this module, and fix the type in your #2.

spt

David Ireland wrote:
> [smime] I-D ACTION:draft-ietf-smime-cms-rsa-kem-10.txt
> 
> 1. *All* the examples of ASN.1 DER encodings shown in B.4 are incorrect.
> 
> 1a. Where they are advertised to show the ANSI X9.44 OID for id-kdf-kdf3,
> they actually show the ISO 18033-2 OID for kdf2.
> 
> [ASIDE] So we now have two OIDs for KDF2, both referred to as id-kdf-kdf2:
> the ISO 180330-2 one, kdf2(2) (1.0.18033.2.5.2), and the X9.44 one, kdf2(1)
> (1.3.133.16.840.9.44.1.1) - another wonderful opportunity for confusion
> here!
> 
> (I'm using Shoup's draft version of ISO 180330-2, so it may have changed in
> the final version to match X9.44, but I doubt it.)
> 
> 1b. Almost all of the sequence length values in the DER encodings are wrong
> and the lengths for the INTEGERs are missing, so none of the examples shown
> will parse properly if you try and use DUMPASN1 on them.
> 
> 2. A small typo, perhaps? Page 22 about half-way down, should not
> kdf3 ALGORITHM ::= { OID id-kdf-kdf2
> be
> kdf3 ALGORITHM ::= { OID id-kdf-kdf3
> 
> David
> 
> _______________________________________________
> smime mailing list
> smime@ietf.org
> https://www.ietf.org/mailman/listinfo/smime
>