[Suit] [IANA #1414389] expert review for draft-ietf-suit-manifest (uuid)

[Amanda Baber via RT <[e-mail]>]

Hi Brendan,

Could you confirm/answer this one?

thanks,
Amanda

On Fri Mar 07 20:00:53 2025, [e-mail] wrote:
> Awesome, thanks Brendan.
> 
> 
> 
> I am fine with adding that to the IANA NS table.
> 
> 
> 
> I assume it will be something like this appended to the end?
> 
> 
> 
> Namespace | Namespace ID Value                   | Name Reference
> | Namespace ID Reference
> 
> CBOR PEN  | 47fbdabb-f2e4-55f0-bb39-3620c2f6df4e |
> [RFC9090][SUIT_MANIFEST_RFC]   | [SUIT_MANIFEST_RFC]
> 
> 
> 
> Should there be something else beyond RFC9090 in the Name Reference
> column?
> 
> 
> 
> Thanks,
> 
> 
> 
> From: Brendan Moran <[e-mail]>
> Sent: Friday, March 7, 2025 4:32 AM
> To: Brad Peabody <[e-mail]>; [e-mail];
> [e-mail]
> Cc: Kyzer Davis (kydavis) <[e-mail]>
> Subject: Re: [Suit] Re: [IANA #1414389] expert review for draft-ietf-
> suit-manifest (uuid)
> 
> 
> 
> Hi Kyzer,
> 
> 
> 
> I’ve just double-checked the computation. To do this, I wrote a python
> script. I attempted to make the script match the content of the suit-
> manifest specification as closely as possible. I have appended both
> the output of the script and the script itself below. Hopefully, that
> should help with reproducing the computation of the namespace.
> 
> Best Regards,
> 
> Brendan
> 
> 
> ~~~ cbor-pretty
> 
> D8 6F
> 
> 45
> 
> 2B 06 01 04 01
> 
> ~~~
> 
> ~~~
> 
> NAMESPACE_CBOR_PEN = UUID5(NAMESPACE_OID, h'd86f452b06010401')
> 
> NAMESPACE_CBOR_PEN = 47fbdabb-f2e4-55f0-bb39-3620c2f6df4e)
> 
> ~~~
> 
> 
> 
> #!/usr/bin/env python3
> 
> 
> 
> import cbor2 as cbor
> 
> import uuid
> 
> import asn1
> 
> 
> 
> # DER encode the PEN OID
> 
> encoder = asn1.Encoder()
> 
> encoder.start()
> 
> encoder.write('1.3.6.1.4.1', asn1.Numbers.ObjectIdentifier)
> 
> DER_PEN_OID = encoder.output()
> 
> # Strip the leading two bytes (type, length) since we are only
> 
> # using the DER encoder to get the encoded OID.
> 
> PEN_OID = DER_PEN_OID[2:]
> 
> # Wrap in a CBOR tag
> 
> Tagged_PEN_OID = cbor.CBORTag(111,PEN_OID)
> 
> # Encode as CBOR
> 
> CBOR_PEN_OID = cbor.dumps(Tagged_PEN_OID)
> 
> # Don't have a CBOR pretty printer so do something hacky
> 
> print('~~~ cbor-pretty')
> 
> print(' '.join([f'{x:02X}' for x in CBOR_PEN_OID[:2]]))
> 
> print(f'   {CBOR_PEN_OID[2]:02X}')
> 
> print('      '+' '.join([f'{x:02X}' for x in CBOR_PEN_OID[3:]]))
> 
> print('~~~')
> 
> 
> 
> # Compute the UUID5 of the CBOR PEN
> 
> CBOR_PEN_UUID = uuid.uuid5(uuid.NAMESPACE_OID,CBOR_PEN_OID)
> 
> 
> 
> print('~~~')
> 
> print(f"NAMESPACE_CBOR_PEN = UUID5(NAMESPACE_OID,
> h'{CBOR_PEN_OID.hex()}')")
> 
> print(f"NAMESPACE_CBOR_PEN = {CBOR_PEN_UUID})")
> 
> print('~~~')
> 
> 
> 
> 
> 
> 
> 
> From: Brad Peabody <[e-mail] <mailto:[e-mail]> >
> Date: Thursday, 6 March 2025 at 22:38
> To: [e-mail] <mailto:drafts-expert-
> [e-mail]>  <[e-mail] <mailto:drafts-
> [e-mail]> >, [e-mail] <mailto:[e-mail]>
> <[e-mail] <mailto:[e-mail]> >
> Cc: Kyzer Davis (kydavis) <[e-mail]
> <mailto:[e-mail]> >
> Subject: [Suit] Re: [IANA #1414389] expert review for draft-ietf-suit-
> manifest (uuid)
> 
> And I’ll defer to Kyzer’s feedback a judgement on this.
> 
> Best, Brad
> 
> > On Mar 6, 2025, at 11:05 AM, Kyzer Davis (kydavis) <[e-mail]
> > <mailto:[e-mail]> > wrote:
> >
> > Hello,
> >
> > I am okay with a registration of NAMESPACE_CBOR_PEN in the Namespace
> > table
> > that cites the RFC #.
> >
> > Note: I tried to check the computation that resulted in the proposed
> > CBOR_PEN Namespace value from the doc. I cannot produce that value no
> > matter
> > what library/tool I test with.
> >
> > Could one of the authors doublecheck that UUIDv5 computation that
> > resulted
> > in 47fbdabb-f2e4-55f0-bb39-3620c2f6df4e and show the work here?
> >
> > Thanks,
> >
> > -----Original Message-----
> >  From: Sabrina Tanamal via RT <[e-mail]
> > <mailto:[e-mail]> >
> > Sent: Thursday, March 6, 2025 12:49 PM
> > Cc: Kyzer Davis (kydavis) <[e-mail]
> > <mailto:[e-mail]> >; [e-mail]
> > <mailto:[e-mail]> ;
> >  [e-mail] <mailto:[e-mail]>
> > Subject: [IANA #1414389] expert review for draft-ietf-suit-manifest
> > (uuid)
> >
> > Dear Kyzer and  Brad (cc: suit wg),
> >
> > As the designated experts for the UUID Namespace IDs registry, can
> > you
> > review the proposed registration in recently-approved
> > draft-ietf-suit-manifest for us? Please see
> >
> > https://datatracker.ietf.org/doc/html/draft-ietf-suit-manifest-33
> >
> > Please note that the IESG has approved this document for publication,
> > so
> >  we'll make the registration as soon as we receive your approval at:
> >
> > https://www.iana.org/assignments/uuid
> >
> > Unless you ask us to wait for the other reviewer, we'll act on the
> > first
> > response we receive.
> >
> > Best regards,
> >
> > Sabrina Tanamal
> > Lead IANA Services Specialist
> 
> _______________________________________________
> Suit mailing list -- [e-mail] <mailto:[e-mail]>
> To unsubscribe send an email to [e-mail] <mailto:suit-
> [e-mail]>
> 
> IMPORTANT NOTICE: The contents of this email and any attachments are
> confidential and may also be privileged. If you are not the intended
> recipient, please notify the sender immediately and do not disclose
> the contents to any other person, use it for any purpose, or store or
> copy the information in any medium. Thank you.