Re: [lamps] I-D Action: draft-ietf-lamps-rfc4210bis-08.txt

["Brockhaus, Hendrik" <[e-mail]>]

This update contains the following changes:
   *  Aligned with released RFC 9480 - RFC 9483
   *  Updated Section 1.3
   *  Added text on usage of transactionID with KEM-bases message
      protection to Section 5.1.1
   *  Reverted a change to Section 5.1.3.1 from -02 and reinserting the
      deleted text and adding some text explaining when a key expansion
      is required.
   *  Consolidated the definition and transferal of KemCiphertextInfo.
      Added a new Section 5.1.1.5 introducing KemCiphertextInfo in the
      generalInfo filed and moving text on how to request a KEM
      ciphertext using genm/genp from Section 5.1.3.4 to
      Section 5.3.19.18
   *  Some editorial changes to Section 5.1.3.4 and Appendix E after
      discussion with David resolving #30 and discussing at IETF 117.
      Also introducing optional field kemContext to KemBasedMac and
      KemOtherInfo as CMP-specific alternative to ukm in cms-kemri.
   *  Added ToDo for reviewing the reduced content of KemOtherInfo to
      Section 5.1.3.4
   *  Added a cross-reference to Section 5.1.1.3 regarding use of
      OrigPKIMessage to Section 5.1.3.5
   *  Added POP for KEM keys to Section 5.2.8.  Restructured the section
      and fixed some references which broke from RFC2510 to RFC4210.
      Introduced a section on the usage of raVerified.
   *  Fixed the issue in Section 5.3.19.15, resulting from a change made
      in draft-ietf-lamps-cmp-updates-14, that no plain public-key can
      be used in the request message in CMPCertificate.
   *  Updated Appendix B regarding KEM-based message protection and
      usage of CMS EnvelopedData

> Von: Spasm <[e-mail]> Im Auftrag von internet-
> [e-mail]
> 
> Internet-Draft draft-ietf-lamps-rfc4210bis-08.txt is now available. It is
a
> work item of the Limited Additional Mechanisms for PKIX and SMIME
> (LAMPS) WG
> of the IETF.
> 
>    Title:   Internet X.509 Public Key Infrastructure -- Certificate
Management
> Protocol (CMP)
>    Authors: Hendrik Brockhaus
>             David von Oheimb
>             Mike Ounsworth
>             John Gray
>    Name:    draft-ietf-lamps-rfc4210bis-08.txt
>    Pages:   137
>    Dates:   2024-03-01
> 
> Abstract:
> 
>    This document describes the Internet X.509 Public Key Infrastructure
>    (PKI) Certificate Management Protocol (CMP).  Protocol messages are
>    defined for X.509v3 certificate creation and management.  CMP
>    provides interactions between client systems and PKI components such
>    as a Registration Authority (RA) and a Certification Authority (CA).
> 
>    This document obsoletes RFC 4210 by including the updates specified
>    by CMP Updates RFC 9480 Section 2 and Appendix A.2 maintaining
>    backward compatibility with CMP version 2 wherever possible and
>    obsoletes both documents.  Updates to CMP version 2 are: improving
>    crypto agility, extending the polling mechanism, adding new general
>    message types, and adding extended key usages to identify special CMP
>    server authorizations.  Introducing CMP version 3 to be used only for
>    changes to the ASN.1 syntax, which are: support of EnvelopedData
>    instead of EncryptedValue and hashAlg for indicating a hash
>    AlgorithmIdentifier in certConf messages.
> 
>    In addition to the changes specified in CMP Updates RFC 9480 this
>    document adds support for management of KEM certificates.
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatra
> cker.ietf.org%2Fdoc%2Fdraft-ietf-lamps-
> rfc4210bis%2F&data=05%7C02%7Chendrik.brockhaus%40siemens.com%7C2
> 648d19820fa414a5df508dc39fc3253%7C38ae3bcd95794fd4addab42e1495d5
> 5a%7C1%7C0%7C638449002537036120%7CUnknown%7CTWFpbGZsb3d8eyJ
> WIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7
> C0%7C%7C%7C&sdata=qWRG%2FZPq8iDPv2JIwjU8cnjLwHNkrqWdE2oc1B1fv
> BI%3D&reserved=0
> 
> There is also an HTML version available at:
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ie
> tf.org%2Farchive%2Fid%2Fdraft-ietf-lamps-rfc4210bis-
> 08.html&data=05%7C02%7Chendrik.brockhaus%40siemens.com%7C2648d19
> 820fa414a5df508dc39fc3253%7C38ae3bcd95794fd4addab42e1495d55a%7C1
> %7C0%7C638449002537044351%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC
> 4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%
> 7C%7C&sdata=FtnR9czMXtLDfmENFlYK97lv7et4BRPa%2FjtMVWR73aM%3D&r
> eserved=0
> 
> A diff from the previous version is available at:
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fauthor
> -tools.ietf.org%2Fiddiff%3Furl2%3Ddraft-ietf-lamps-rfc4210bis-
> 08&data=05%7C02%7Chendrik.brockhaus%40siemens.com%7C2648d19820fa
> 414a5df508dc39fc3253%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0
> %7C638449002537049774%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLj
> AwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%
> 7C&sdata=0YO2bOJky8Ym9oqSJJFPeuuwDwnyZ9E81EXsbwpF3PE%3D&reserv
> ed=0
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> Spasm mailing list
> [e-mail]
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ie
> tf.org%2Fmailman%2Flistinfo%2Fspasm&data=05%7C02%7Chendrik.brockhau
> s%40siemens.com%7C2648d19820fa414a5df508dc39fc3253%7C38ae3bcd957
> 94fd4addab42e1495d55a%7C1%7C0%7C638449002537054144%7CUnknown
> %7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haW
> wiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=8GDcrTjIUYByW6IOCnVvXAKW
> 7TC0qhhbPWkGPpHCEOI%3D&reserved=0