Re: [lamps] Double signatures

"Erik Andersen" <era@x500.eu> Fri, 14 September 2018 12:20 UTC

Return-Path: <era@x500.eu>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CEEA9130E36 for <spasm@ietfa.amsl.com>; Fri, 14 Sep 2018 05:20:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id azo6jFEPDLrE for <spasm@ietfa.amsl.com>; Fri, 14 Sep 2018 05:20:30 -0700 (PDT)
Received: from smtpscan3.dandomain.dk (smtpscan3.dandomain.dk [194.150.112.163]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3978130E35 for <spasm@ietf.org>; Fri, 14 Sep 2018 05:20:28 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by smtpscan3.dandomain.dk (Postfix) with ESMTP id 60B9FCE698 for <spasm@ietf.org>; Fri, 14 Sep 2018 14:20:25 +0200 (CEST)
Received: from smtpscan3.dandomain.dk ([127.0.0.1]) by localhost (smtpscan3.dandomain.dk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3XeWvW_Vc4ah for <spasm@ietf.org>; Fri, 14 Sep 2018 14:20:24 +0200 (CEST)
Received: from mail02.dandomain.dk (mail02.dandomain.dk [194.150.112.202]) by smtpscan3.dandomain.dk (Postfix) with ESMTP id 75B1FCF146 for <spasm@ietf.org>; Fri, 14 Sep 2018 14:20:24 +0200 (CEST)
Received: from Morten ([62.44.134.2]) by mail02.dandomain.dk (DanDomain Mailserver) with ASMTP id 2201809141420226551; Fri, 14 Sep 2018 14:20:22 +0200
From: "Erik Andersen" <era@x500.eu>
To: "'SPASM'" <spasm@ietf.org>, <x500standard@freelists.org>
Cc: "'SPASM'" <spasm@ietf.org>, <x500standard@freelists.org>
References: <005a01d44916$7c9cb560$75d62020$@x500.eu> <CAErg=HHhU9H-Ng8sUtXu2S+F0fr2tLOX6=8UR77gz0YLqtGyaA@mail.gmail.com> <004a01d44928$b1500d40$13f027c0$@augustcellars.com> <003101d4499d$388e9af0$a9abd0d0$@x500.eu> <FDF830E2-F1FD-411D-B98E-1C1CC0A8E341@sn3rd.com>
In-Reply-To: <FDF830E2-F1FD-411D-B98E-1C1CC0A8E341@sn3rd.com>
Date: Fri, 14 Sep 2018 14:20:20 +0200
Message-ID: <000601d44c25$4e31bb50$ea9531f0$@x500.eu>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 15.0
Content-Language: en-gb
Thread-Index: AQEeKhTkIyWJvDJmtkckrYoYnqsyLAKU/EXwAvtpPxkBVFrfMwIDk0E+phSybjA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/-978-vD7X3bhJSbQxzxLPzfVEpo>
Subject: Re: [lamps] Double signatures
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Sep 2018 12:20:33 -0000

Hi Sean,

What I meant was that the optional addition to the SIGNED data type shall be absent for the two cases. However, I am slowly coming to the opinion that we should define a new data type and leave the SIGNED data type as it is to avoid confusion.

Best regards,

Erik

-----Oprindelig meddelelse-----
Fra: Spasm [mailto:spasm-bounces@ietf.org] På vegne af Sean Turner
Sendt: 12 September 2018 04:04
Til: Erik Andersen <era@x500.eu>
Cc: SPASM <spasm@ietf.org>rg>; x500standard@freelists.org
Emne: Re: [lamps] Double signatures

Erik,

A couple of points I’m hoping you might clarify:

1. You said “We have no intention to use this extended data type for certificates and CRLs.”  In X.509-2016, Certificate and CertificateList use the following ASN.1:
 
	Certificate ::= SIGNED{TBSCertificate}
 
	CertificateList ::= SIGNED{CertificateListContent}

So to pull off what you’re suggesting (i.e., never using these with Certificate and CertificateList) what exactly are going to do - redefine Certificate and CertificateList, put some kind of constraint on ToBeSigned in SIGNED, … ?

2. You also said "We know that IETF is not a heavy user of this data type”, where this is SIGNED.  That’s a true statement because the IETF initially didn’t make use of the AuthenticationFramework SIGNED parameterized types because RFC 5280 uses the ’88 modules and parameterized types were’t a thing in ’88; in ’88 it was a SIGNED MACRO and it was a pain so it was redefined in a bits-on-the-wire compatible way.  For those IETF RFCs that prefer to use the ’02 and ’08 syntax, a SIGNED parameterized type is defined in RFC 5912 and is used in RFCs 5911, 5912, and 6268 (and maybe others) to define 30+ ASN.1 modules.  So while "SIGNED” is not used much in the context of the 8000+ RFCs it can be used by just about every RFC that uses ASN.1.

Despite the fact SIGNED wasn’t defined exactly the same, they still resulted in the same encoding, namely algorithm parameters (OID+parameters) and signature (a bit string); same as the earlier ’88 syntaxes.  I have this sinking feeling that making a change to this is going to cause some problems somewhere despite the fact we can do fancy things with the ASN.1.

spt

> On Sep 11, 2018, at 03:01, Erik Andersen <era@x500.eu> wrote:
> 
> HI Jim,
>  
> You have a good point here that also been bothering me for the last couple of days. I am still trying to find a way.
>  
> Erik
>  
> Fra: Jim Schaad [mailto:ietf@augustcellars.com] 
> Sendt: 10 September 2018 19:07
> Til: 'Ryan Sleevi' <ryan-ietf@sleevi.com>om>; era@x500.eu
> Cc: 'SPASM' <spasm@ietf.org>rg>; x500standard@freelists.org
> Emne: RE: [lamps] Double signatures
>  
> Ryan,
>  
> The discussion in London dealt with a completely different proposal than this one.  While I think there are problems with this that need to be dealt with they are mostly not the same set.
>  
> Erik,
>  
> Why is this considered to be a preferred solution to defining a new signature algorithm which contains as the parameter the sequence of algorithm identifiers and as the signature value a sequence of signature values.  The problem with just defining the extension to SIGNED is that one needs to make sure that the set of signature algorithms and parameters are also part of the data to be signed and I am not seeing that highlighted here.
>  
> Jim
>  
>  
> From: Spasm <spasm-bounces@ietf.org> On Behalf Of Ryan Sleevi
> Sent: Monday, September 10, 2018 8:53 AM
> To: era@x500.eu
> Cc: SPASM <spasm@ietf.org>rg>; x500standard@freelists.org
> Subject: Re: [lamps] Double signatures
>  
>  
> 
> On Mon, Sep 10, 2018 at 10:56 AM Erik Andersen <era@x500.eu> wrote:
>> Hi Folk,
>>  
>> In ITU-T we have plans to allow for double signatures using the SIGNED parametrized data type defined in X.509 to cope with situation as described in the internet draft: “Multiple Public-Key Algorithm X.509 Certificates (draft-truskovsky-lamps-pq-hybrid-x509-01)”
>>  
>> We suggest to enhance the SIGNED data type as shown below:
>>  
>> SIGNED{ToBeSigned} ::= SEQUENCE {
>>   COMPONENTS OF SIGNATURE,
>>   ...,
>>   altAlgorithmIdentifier  AlgorithmIdentifier{{SupportedAlgorithms}} OPTIONAL,
>>   altSignature            BIT STRING OPTIONAL  
>>   } (WITH COMPONENTS {..., altAlgorithmIdentifier PRESENT, altSignature PRESENT } |
>>      WITH COMPONENTS {..., altAlgorithmIdentifier ABSENT,  altSignature ABSENT } )
>>  
>> We are open to comments. We know that IETF is not a heavy user of this data type.
>>  
>> We have no intention to use this extended data type for certificates and CRLs.
>>  
>> For your information, SIGNATURE is defined as:
>>  
>> SIGNATURE ::= SEQUENCE {
>>   algorithmIdentifier  AlgorithmIdentifier{{SupportedAlgorithms}},
>>   signature            BIT STRING,
>>   ... }
>  
> From the discussions in London (101), there were a number of challenges identified during the discussion - https://datatracker.ietf.org/meeting/101/materials/minutes-101-lamps-01.txt - that fundamentally questioned that approach.
>  
> Has the ITU-T addressed or resolved those concerns? Are they not applicable for some reason specific to ITU-T? 
> _______________________________________________
> Spasm mailing list
> Spasm@ietf.org
> https://www.ietf.org/mailman/listinfo/spasm

_______________________________________________
Spasm mailing list
Spasm@ietf.org
https://www.ietf.org/mailman/listinfo/spasm