[lamps] Follow-up on lightweight CMP profile

"Brockhaus, Hendrik" <hendrik.brockhaus@siemens.com> Fri, 03 May 2019 08:53 UTC

Return-Path: <hendrik.brockhaus@siemens.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 991801200D7 for <spasm@ietfa.amsl.com>; Fri, 3 May 2019 01:53:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=siemens.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vmECfomf-7cC for <spasm@ietfa.amsl.com>; Fri, 3 May 2019 01:52:57 -0700 (PDT)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140088.outbound.protection.outlook.com [40.107.14.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC54712006D for <spasm@ietf.org>; Fri, 3 May 2019 01:52:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.onmicrosoft.com; s=selector1-siemens-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sv72vzSzWb58oOI9kQw7/lpFhti1cVpSlDGH/Uj3JXA=; b=kTEhu2y9HLVujorG19pvLD+AMX6kCPah+g0w+gTYsWIFpFqYhKqUhB9Z3HcYbSKcynglyza+8NuDnLDFVyFoMHIXps2GxKJizXPybfXwCJXbBY8J+KcM7M1Et9gqT8PoRf+lBynpgLBSsZGHTWLUnDkdMbmwjajuQM4+4CQVScM=
Received: from AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM (20.177.110.224) by AM0PR10MB2705.EURPRD10.PROD.OUTLOOK.COM (20.178.202.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1856.12; Fri, 3 May 2019 08:52:54 +0000
Received: from AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM ([fe80::a8f0:4556:8b4a:4342]) by AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM ([fe80::a8f0:4556:8b4a:4342%5]) with mapi id 15.20.1835.018; Fri, 3 May 2019 08:52:54 +0000
From: "Brockhaus, Hendrik" <hendrik.brockhaus@siemens.com>
To: "spasm@ietf.org" <spasm@ietf.org>
CC: Jim Schaad <ietf@augustcellars.com>, Russ Housley <housley@vigilsec.com>, "steffen.fries@siemens.com" <steffen.fries@siemens.com>
Thread-Topic: Follow-up on lightweight CMP profile
Thread-Index: AdUBjVaoPCh2rtMkSpWAUH4qEWUaoA==
Date: Fri, 3 May 2019 08:52:53 +0000
Message-ID: <AM0PR10MB24025419EFD95ED54F7D79B5FE350@AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=hendrik.brockhaus@siemens.com;
x-originating-ip: [80.146.228.70]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 0deb98b6-e2ac-4336-701e-08d6cfa4bb35
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600141)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:AM0PR10MB2705;
x-ms-traffictypediagnostic: AM0PR10MB2705:
x-ld-processed: 38ae3bcd-9579-4fd4-adda-b42e1495d55a,ExtAddr
x-microsoft-antispam-prvs: <AM0PR10MB270557F28167620888BC8C40FE350@AM0PR10MB2705.EURPRD10.PROD.OUTLOOK.COM>
x-ms-oob-tlc-oobclassifiers: OLM:8273;
x-forefront-prvs: 0026334A56
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(366004)(396003)(136003)(346002)(376002)(199004)(189003)(53754006)(54896002)(54906003)(6306002)(316002)(52536014)(9686003)(53936002)(74316002)(7736002)(6506007)(6916009)(102836004)(33656002)(5640700003)(55016002)(6436002)(107886003)(4326008)(486006)(186003)(476003)(8676002)(68736007)(26005)(25786009)(81166006)(8936002)(81156014)(1730700003)(71190400001)(71200400001)(14444005)(256004)(66066001)(76116006)(14454004)(478600001)(790700001)(6116002)(5660300002)(3846002)(86362001)(2351001)(2501003)(99286004)(2906002)(73956011)(7696005)(19627235002)(66446008)(64756008)(66556008)(66946007)(66476007); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR10MB2705; H:AM0PR10MB2402.EURPRD10.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: siemens.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: Uhr87x0m9W6325c1wZA/QaF6DH0lFj2MCv9MOd8hxosFFbvF4XRwJ1l/SrfnPXHyMzFJ8jbBWkE3vhG8Y0KikqrqXBgetWh3iQOTO22N/1wEtF0pfxfoYpI8C1sP841hCYE7oMNY0zaQh0owB4cgcs9maB5VyqvkE1Tiy6jIWG89p8aKc8ZJh7tHBSlHlbe6P1cd1Sf5KqwEQsjZIu/oMDe4ycNVZgkItRILRxP4tfwyto2aCfPT6IdV/myjbBsaEnzPzVEjojf+/n95JCZzXYuCg/DQGdn2CXSBxqtBukGgY1J8V14haQnL65chsC6PV1F25Qh/hgHjHqfgKnn9XN3HrZuWPGaeApFMdbRqzUtVMI8x0zLzk2XUD0K42i7cSDcFKpRA8QRorWjks+/8Pupx/5IvN0TKIdxmV9KTuMc=
Content-Type: multipart/alternative; boundary="_000_AM0PR10MB24025419EFD95ED54F7D79B5FE350AM0PR10MB2402EURP_"
MIME-Version: 1.0
X-OriginatorOrg: siemens.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 0deb98b6-e2ac-4336-701e-08d6cfa4bb35
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 May 2019 08:52:54.0840 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR10MB2705
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/gUe5lsUXMuz8vZ6WEd2NknsqpII>
Subject: [lamps] Follow-up on lightweight CMP profile
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 May 2019 08:53:03 -0000

Hi all

Referring to the Email thread 'Seeking guidance on proceeding with question from IETF-104 presentation on lightweight CMP profile' and to the outcome of the WG meeting, we want to summarize the current state of the discussion.
The discussion we had with Jim motivate a split of the current draft into a CMP Updates and a CMP Profile document. The update of CMP is needed because we identified at least two point where a change to CMP is needed:
- Change the type of encryptedCert from EncryptedValue to EncryptedKey for ECC and post-quantum algorithm support
- Extend the RootCAUpdate announcement message to e request/response message to enable requesting the update from the client side
The remaining points from the initial email were seen as profiling topic and would therefore be handled in the CMP Profile document.

@Russ, how do you see the status of the current re-chartering process? Would you support to add both, or at least the CMP Updates, activities under the revised charter?

- Hendrik