[Ssh] draft-miller-ssh-cert
"Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com> Tue, 22 July 2025 13:32 UTC
Return-Path: <sfluhrer@cisco.com>
X-Original-To: ssh@mail2.ietf.org
Delivered-To: ssh@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id BC6E4487665C for <ssh@mail2.ietf.org>; Tue, 22 Jul 2025 06:32:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -11.886
X-Spam-Level:
X-Spam-Status: No, score=-11.886 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_NONE=0.001, T_SPF_HELO_PERMERROR=0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cisco.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3MDG42Kh8rXx for <ssh@mail2.ietf.org>; Tue, 22 Jul 2025 06:32:06 -0700 (PDT)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 156E748760E0 for <ssh@ietf.org>; Tue, 22 Jul 2025 06:31:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.com; i=@cisco.com; l=4348; q=dns/txt; s=iport01; t=1753191102; x=1754400702; h=from:to:subject:date:message-id:mime-version; bh=PvvLNpVeMSK1dCU93HgfPr0/O4kBlMA0aJiQfJn65Hs=; b=gjg65QisQ1D7j/ms9YreN64CShpFGq6ntGjdhL+bLTQX7h8ti/YWJ1WU /IM8sa4K6YNqvA0oqIP5S4d+y1uGGIn4lOO4FFPn8xFauSsVYYNRhmYGk 4IED9PVPTNv/wFEB3ridD6pcYoAqbctuH92crRdGG0z7yAu7ujZvg4udb zlrdYN2TiqzbkHsZeEZrwJPFJFkjgO7kRqGTrlpqO5a6jmK77eI/07LMt o3ZXUeGaHjCYIQ4o/FHvnyjQucF3w6KmwOVyEZQ8KLbR8pns4nn4IOcwe 17AnScV/2//GINIHezbDvRfd/46tVEJow/G4Tpda3WoaIFfOXJYpgVW0e A==;
X-CSE-ConnectionGUID: ptC9M3UyThWeA0S6/xJN/w==
X-CSE-MsgGUID: yEsfykWmR3WaBTED75hgBQ==
X-IPAS-Result: A0BlAwC/kX9o/4oQJK1agQklgS6BQTFSB3eBHohpA4UshlWZZoZWgX8PAQEBD1EEAQGFBwKMEgImNAkOAQIEAQEBAQMCAwEBAQEBAQEBAQEBCwEBBQEBAQIBBwWBDhOGCIZzeQEMcycEGxqEfRY8AwGjegGBQAKKK3iBNIEB4CWBSYhRASqBM4kGJxuBSUSBV4drhBOCLwSCIoEWiDqQOoFESzMsAVUTFwsHBYFjA4EPbjIdgSeFFYQoK0+FEIEZg1MSEm0PBoEYgxJAAwttPTcUGwUEgTUFkRoXg2EFMzYUgSWUe5FToXgKhByiDBeqAmeLco0UpAaFDgIEAgQFAhABAQaBaDyBWXAVgyNRGQ+OLBfEBoE0AgcLAQEDCZErAQE
IronPort-PHdr: A9a23:ubdyuRBKInekfh+CQfBGUyQVXRdPi9zP1kY98JErjfdJaqu8usmkN 03E7vIrh1jMDs3X6PNB3vLfqLuoGXcB7pCIrG0YfdRSWgUEh8Qbk01oAMOMBUDhav+/Ryc7B 89FElRi+hmG
IronPort-Data: A9a23:/qj+vakuTVvX0mF4z5zg2UPo5gzFJ0RdPkR7XQ2eYbSJt1+Wr1Gzt xJND2rTaauKamr1ctx/bYy0/UgBsJWAytRnHgttrytnQVtH+JHPbTi7wugcHM8zwunrFh8PA xA2M4GYRCwMZiaC4E/raP649CMUOZigHtLUEPTDNj16WThqQSIgjQMLs+Mii+aEu/Dha++2k Y20+pO31GONgWYubzpLsfjb8XuDgdyr0N8mlg1mDRx0lAe2e0k9VPo3Oay3Jn3kdYhYdsbSb /rD1ryw4lTC9B4rDN6/+p6jGqHdauePVeQmoiM+t5mK2nCulARrukoIHKZ0hXNsttm8t4sZJ OOhGnCHYVxB0qXkwIzxWvTDes10FfUuFLTveRBTvSEPpqHLWyOE/hlgMK05FZUE0bdSWlxfy fwnJRlVVU7El8CQh63uH4GAhux7RCXqFIobvnclyXTSCuwrBMiaBa7L/tRfmjw3g6iiH96HO JFfMmQpNUqGOkYfUrsUIMpWcOOAnXf7bj1CpUi9rqss6G+Vxwt0uFToGIeNK4zVFZoNwC50o ErX0n/3ExIlMebE9jOvzl+A2bLPkgnCDdd6+LqQs6QCbEeo7ncICDUXWEe15/6jhSaDt8l3I kgQ/G8q6KM17kHuFoC7VByjq3nCtRkZMzZNL9AHBMi24vO8yy6SB3MPSXhKb9lOiSP8bWZCO oOh9z8xOQFSjQ==
IronPort-HdrOrdr: A9a23:ngVIoKjpuwEh4XeHBw+s9LWLu3BQX4d23DAbv31ZSRFFG/FwyP re/8jzhCWVtN9OYhAdcIi7SdS9qBPnmaKdkrNhQYtKPTOW8ldAQ7sSlrcKrweQfxEWldQtmJ uIEZIOcuEYZGIS5a2VkWvIdurIq+P3lpxA8N2ut0uFOjsaEp2IgT0JbTqzIwldfiUDL5w/E5 aX+8pAoBSdWVl/VK6GL0hAddLu4/nQmrzbQTNuPXMaAQ+14g+A2frfKVy1zx0eWzRAzfMJ6m 7eiTH04a2lrrWS1gLc/3W71eUYpPLRjv94QOCcgMkcLTvhziyyYp56ZrGEtDcp5Mmy9VcRls XWqRtIBbU815qRRBD1nfLe4Xii7N8c0Q6h9bZeuwqnnSXNfkN7NyOGv/McTvKW0TtmgDg26t M144vQjesoMfqHplWw2zANPCsaz3ZdZhEZ4KguZ3Aza/puVJZB6YMY509bC5EGAWbz750mCv BnCIXG6O9Rak7yVQGRgoBD+q3aYp0IJGbxfmES/siOlzRGlnFwyEUVgMQZg3cb7Zo4D51J/f 7NPKhknKxHCpZ+V9M3OM4RBc+sTmDdSxPFN2yfZVzhCaEcInrI75r6+q886u2mcIEBiJEyhJ PCWlVFsnNaQTOnNeSemJlQthzdSmS0WjrgjslY+phio7X5AKHmNCWSIWpe5/dIY89vd/Ezd8 zDSq6+WcWTXVcGMbw5rDHDZw==
X-Talos-CUID: 9a23:ibmloWhyi9A+zdx4qX3+O+dLcDJuamH2nVKLHl6ECVlkYeWuFxiA2oUjjJ87
X-Talos-MUID: 9a23:TcpwgQryeXgwIBWr7swezyBPL8l54JurMhsymL86luXbaCx/EQ7I2Q==
X-IronPort-Anti-Spam-Filtered: true
Received: from alln-l-core-01.cisco.com ([173.36.16.138]) by alln-iport-4.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 22 Jul 2025 13:31:41 +0000
Received: from rcdn-opgw-5.cisco.com (rcdn-opgw-5.cisco.com [72.163.7.169]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by alln-l-core-01.cisco.com (Postfix) with ESMTPS id 52BB9180003D3 for <ssh@ietf.org>; Tue, 22 Jul 2025 13:31:41 +0000 (GMT)
X-CSE-ConnectionGUID: /wa/E7CcQN6LmcrTuiLWCw==
X-CSE-MsgGUID: MmK5koLeQhmjzNlpDIgHaA==
Authentication-Results: rcdn-opgw-5.cisco.com; dkim=pass (signature verified) header.i=@cisco.com
X-IronPort-AV: E=Sophos;i="6.16,331,1744070400"; d="scan'208,217";a="30259582"
Received: from mail-dm6nam12lp2177.outbound.protection.outlook.com (HELO NAM12-DM6-obe.outbound.protection.outlook.com) ([104.47.59.177]) by rcdn-opgw-5.cisco.com with ESMTP/TLS/TLS_AES_256_GCM_SHA384; 22 Jul 2025 13:31:41 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=QWcamdip+6bU9Yktq1+8jNsSc3m9rDpjCjIUb4I0BqHrUirNHs7V5yecw9ZpinGEbST5Wc7qNMNjSI3Ke74hpM0jMtX6d/qaULl3kpVAzoEL3B+MshFQH0+iMQOSyYKuuP5J7/gornvdytIGvU0Xt4CG7rAZZoyu1pCsEcPaCNysl6+5IO557/oqHt2ul9xhXTjZ1fdjWDyhXqxdr7Iap3Y+ac8ABBjUMFfpm/3Bmnp81kv4ZmsRQm1wB49Ma7cf4jarsGhYXdt4oaascg09Ty8Etd/2VdbZ1L7trMIJxb7Q3qLxu2UjTyyavQGqSei21fQ0VdB5Lz3T51rvqzf6SQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=PvvLNpVeMSK1dCU93HgfPr0/O4kBlMA0aJiQfJn65Hs=; b=qBMxfVluRPfRyzXGbjzbG5UZE16kcMAk64p1v+XTBxvZ6Zf2MugH5ebwPIJItI7Sd8LeM5E38pYLxVtbH4yEIVz+qa/N3UZzyJxpRVl9DSfISCHDjdcIkabXwQqv+dOsGbREBsHMCZu95m4vb/OKSroYz47sQgbVkn6r7d1E2uq/UIjYuwnn4x0298z+B33o2Hvr2A0w1Zmg4//dwMYRbbxfzng6TfgD+ufAZOQLu4qJU6F1mlNw32qWIlRE2zG9r+6oTcvobknbgllm8rg8gQqiNeyknMuNdHGAmaoZkeLUvQdaP5/pDWEEyrkbrwnU9MTTGnRxV+aGzEwaAuxBpQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
Received: from PH3PPFA3FE8A23F.namprd11.prod.outlook.com (2603:10b6:518:1::d3f) by CH3PR11MB7721.namprd11.prod.outlook.com (2603:10b6:610:12b::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8943.30; Tue, 22 Jul 2025 13:31:38 +0000
Received: from PH3PPFA3FE8A23F.namprd11.prod.outlook.com ([fe80::da6a:6a55:abc5:ae9f]) by PH3PPFA3FE8A23F.namprd11.prod.outlook.com ([fe80::da6a:6a55:abc5:ae9f%8]) with mapi id 15.20.8943.028; Tue, 22 Jul 2025 13:31:38 +0000
From: "Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com>
To: sshm <ssh@ietf.org>
Thread-Topic: draft-miller-ssh-cert
Thread-Index: AQHb+womEX3mzerd4UCiJlvlucxAiA==
Date: Tue, 22 Jul 2025 13:31:38 +0000
Message-ID: <PH3PPFA3FE8A23F92893A74FEA2171B3C9EC15CA@PH3PPFA3FE8A23F.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH3PPFA3FE8A23F:EE_|CH3PR11MB7721:EE_
x-ms-office365-filtering-correlation-id: 0bafb058-988b-48b2-b5a4-08ddc9241628
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|376014|1800799024|8096899003|38070700018;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH3PPFA3FE8A23F.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024)(8096899003)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_PH3PPFA3FE8A23F92893A74FEA2171B3C9EC15CAPH3PPFA3FE8A23F_"
MIME-Version: 1.0
X-OriginatorOrg: cisco.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH3PPFA3FE8A23F.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 0bafb058-988b-48b2-b5a4-08ddc9241628
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jul 2025 13:31:38.3931 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Q74bKskR7Iq3gWVYivFeYF+gGbO0WOnG0GwOfW7dCjwn6TBvQDwYPYpK/VMcd1+xzXyuzHNK/oCuDrCSPscBMg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR11MB7721
X-Outbound-SMTP-Client: 72.163.7.169, rcdn-opgw-5.cisco.com
X-Outbound-Node: alln-l-core-01.cisco.com
Message-ID-Hash: B7GVFNPDTTA3NU7RR2UXDFQFTS6M2TQM
X-Message-ID-Hash: B7GVFNPDTTA3NU7RR2UXDFQFTS6M2TQM
X-MailFrom: sfluhrer@cisco.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Ssh] draft-miller-ssh-cert
List-Id: "The SSH mail list will allow discussions on improving aspects of the Secure Shell (SSH) protocol." <ssh.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ssh/aBcZdzUsUFlma77Z3EdVWiZ2eXo>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ssh>
List-Help: <mailto:ssh-request@ietf.org?subject=help>
List-Owner: <mailto:ssh-owner@ietf.org>
List-Post: <mailto:ssh@ietf.org>
List-Subscribe: <mailto:ssh-join@ietf.org>
List-Unsubscribe: <mailto:ssh-leave@ietf.org>
I went through the draft, and I have the following comments: * In Bangkok, I suggested in the working group meeting that the "signature key" field be optionally a hash of the CA public key (to handle the case where the CA public key is large, say, an ML-DSA key). During the meeting, someone suggested a critical option to indicate that. Are you still considering that? * Copy/paste error - section 2.5.4 has some obvious typos. In addition, I have a request for an opinion: * I see that the draft specifies (in sections 2.1.2 to 2.1.5) the formats for DSA, ECDSA, EDDSA, RSA public certificates, and sections 2.5.1 to 2.5.4 the corresponding private certifiates. There are several postquantum signature proposals for SSH - should those proposals be updated to include their certificate formats?
- [Ssh] draft-miller-ssh-cert Scott Fluhrer (sfluhrer)