[Teep] Default, mandatory-to-implement algorithm

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Mon, 24 February 2020 13:18 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: teep@ietfa.amsl.com
Delivered-To: teep@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81D793A0B28 for <teep@ietfa.amsl.com>; Mon, 24 Feb 2020 05:18:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=hXWn2ZZ3; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=hXWn2ZZ3
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5-FpBa_2YV9J for <teep@ietfa.amsl.com>; Mon, 24 Feb 2020 05:18:43 -0800 (PST)
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60041.outbound.protection.outlook.com [40.107.6.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CD8F3A0AE2 for <teep@ietf.org>; Mon, 24 Feb 2020 05:18:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pWaT2ywaNi8uPInQmo4yAYyA2U3i0U3dgCagwMXxhsQ=; b=hXWn2ZZ3FBd45LtADJS2N0LpbtiExTp9JUVM8xdnygb0RoXE9zSnZL00di6WzWi1dNQ5B5QNgmqpvxE6oYez1GrmSOI7Jlw4R7NQTAclMgOd1vTXglQ9ijSTW+l2ovJE4joLNaEqVPiSoqnDf52nJ1hUt5Et2qEcMGVwCD7Mjfk=
Received: from VI1PR08CA0189.eurprd08.prod.outlook.com (2603:10a6:800:d2::19) by AM0PR08MB3106.eurprd08.prod.outlook.com (2603:10a6:208:5a::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2750.21; Mon, 24 Feb 2020 13:18:40 +0000
Received: from VE1EUR03FT024.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e09::206) by VI1PR08CA0189.outlook.office365.com (2603:10a6:800:d2::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2750.17 via Frontend Transport; Mon, 24 Feb 2020 13:18:40 +0000
Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT024.mail.protection.outlook.com (10.152.18.87) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2750.17 via Frontend Transport; Mon, 24 Feb 2020 13:18:40 +0000
Received: ("Tessian outbound da94dc68d1bb:v42"); Mon, 24 Feb 2020 13:18:40 +0000
X-CR-MTA-TID: 64aa7808
Received: from 23f4a8f29c65.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id F389849C-FF1D-4CD9-AABD-69D8D7CDCBD2.1; Mon, 24 Feb 2020 13:18:35 +0000
Received: from EUR03-DB5-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 23f4a8f29c65.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 24 Feb 2020 13:18:35 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=n/sKb4HyAJgDAzccTyi09qzCF465cwrykmSiTbUjIxAOcu1qfTPua4q9vvnl9IdEUMcXjH+P3YJOLNP67BAV1pzPBiz8+hKsB+8gDniDnzCyVDlHGd6KuReJ6iQbxw+8OygkgUpP8PusTh3efJ1quPY4N9peYPPZIRyqeAPETnwN+NEzaSV+9rTHkU+vXUobMMN1VipLHujI+JDuzv30Swp7sVvujG8wuMgC41MqHZ7TfA7iBmOtVOyUFu+CF//HFPFwtqYhHvE07pTlkKEOCiv89/zZI4U3pm2NEkaVfNWpFM1f7Nt5hXZesi6OOZuMvNWPpKsWuUU/SlhPjzjCnw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pWaT2ywaNi8uPInQmo4yAYyA2U3i0U3dgCagwMXxhsQ=; b=eerlk+kdeZbqUpeTL1plWOhV8TAbIK91bxcvAIRHoHjlR9I4v4LhkrxfUMdmO6P2s5vG0stQrDsJY5r54XwSiZKRJUnGRq8ejs+c8pzboftwsN9fv5PH1Bmw/OQVgIY5Skgf7jhyoAU+F2c+Mq397a3c8sthfJwjL6ZBEOCv1ZWBfYGCwodOtfnTFU9meTCo+ZRnaa2QnIWa5Vh0oEufrKteJz1JT/wQO1qzNbyfFHHxrKOaNk8kjhdlAKOYvC7+gHwWo4on67dCW4Dl4IEKfdZhqeoFarPNew8waWoKjhycRNJ9CJ5zSBJBd8naJH/rVwcF5C+X9o8H0FWUBeQmPw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pWaT2ywaNi8uPInQmo4yAYyA2U3i0U3dgCagwMXxhsQ=; b=hXWn2ZZ3FBd45LtADJS2N0LpbtiExTp9JUVM8xdnygb0RoXE9zSnZL00di6WzWi1dNQ5B5QNgmqpvxE6oYez1GrmSOI7Jlw4R7NQTAclMgOd1vTXglQ9ijSTW+l2ovJE4joLNaEqVPiSoqnDf52nJ1hUt5Et2qEcMGVwCD7Mjfk=
Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (20.178.23.205) by AM0PR08MB5058.eurprd08.prod.outlook.com (10.255.30.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2750.21; Mon, 24 Feb 2020 13:18:32 +0000
Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::2159:870b:25df:e612]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::2159:870b:25df:e612%5]) with mapi id 15.20.2750.021; Mon, 24 Feb 2020 13:18:32 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: teep <teep@ietf.org>
Thread-Topic: Default, mandatory-to-implement algorithm
Thread-Index: AdXrFCSa1FLvz1rcTB60y8brCFYE/w==
Date: Mon, 24 Feb 2020 13:18:32 +0000
Message-ID: <AM0PR08MB37164BB214E250891B050CF9FAEC0@AM0PR08MB3716.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: 7a39f83d-9553-4ebf-9857-d344c7d277da.0
x-checkrecipientchecked: true
Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [80.92.118.5]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: 887ba31c-a4b6-4f3d-ad85-08d7b92c10cf
X-MS-TrafficTypeDiagnostic: AM0PR08MB5058:|AM0PR08MB3106:
X-Microsoft-Antispam-PRVS: <AM0PR08MB31069924BDA74E04D8378847FAEC0@AM0PR08MB3106.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
x-ms-oob-tlc-oobclassifiers: OLM:7691;OLM:10000;
x-forefront-prvs: 032334F434
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(366004)(346002)(376002)(136003)(396003)(199004)(189003)(8676002)(316002)(26005)(71200400001)(478600001)(4744005)(81166006)(6506007)(33656002)(52536014)(2906002)(81156014)(7696005)(8936002)(55016002)(186003)(6916009)(76116006)(66556008)(64756008)(86362001)(66446008)(9686003)(66946007)(66476007)(5660300002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR08MB5058; H:AM0PR08MB3716.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: epRfwSkziVnfy6jwtlGEE35VYWkqUykutaHqkaI7NAtMNmVnor9hhXf0d1iWXjGaLFGL9MOxfR8Tkbgv1w+VUxcJfL0kMqSpEKi+g76mpxdJiCdi1NiTJZ+9kSQggKjI/Q1ERgys/pG3KpEFEJiCW3GZGrth8nffTNZFQHerB0pExDzkJcM1iagTZwMyg4s8U5S0b9nrXqsER5dkilaX0fXp2rGQutTGv562V+y3Rv0PS5BSqOmEKAY4kemFVM2FZvrDDjBCE6cbooFpz18HbUC9qCAi6KVybZkYv2RzN8UYwQ/CBn0bB3uQe7LeaHppydQBBFtoBGbiliTgGna8khfdVy4scgt3KZsvbBcuN4Ni6DPvRJeI3Y6KHKxmVhiw9JDdoYlBrHVd7Yofqg0yonU2NB/dBlTfaAqqCQsbKFKsbmy+64GV1cbL44JRdFbu
x-ms-exchange-antispam-messagedata: hspGROo1nJEUFg7yrp+jSrbJhnlKqtIPfo7ZsPmaTTwPq8qLFiqvY5yGqhXqPRlSaZlHsTluxFrtDnxtHXoSaVN81w1KuE0ZXTkPgHrqPIqu6pwnqa7QthfKeHYTxp8dyBHOX4ie/fshVZ+wbxm6iQ==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_AM0PR08MB37164BB214E250891B050CF9FAEC0AM0PR08MB3716eurp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB5058
Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT024.eop-EUR03.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(396003)(39860400002)(346002)(136003)(376002)(199004)(189003)(6916009)(26826003)(86362001)(478600001)(2906002)(33656002)(36906005)(5660300002)(316002)(9686003)(8936002)(7696005)(336012)(70586007)(186003)(26005)(81166006)(81156014)(8676002)(55016002)(70206006)(52536014)(6506007)(356004); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR08MB3106; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Pass; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1;
X-MS-Office365-Filtering-Correlation-Id-Prvs: 4113da69-d5b9-48ed-4089-08d7b92c0bfd
X-Forefront-PRVS: 032334F434
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: zoAbXrI84dreo/o91owcIVbdwhNiwQPqI1Jxqw0U7XSD2pJLYisHvoqL6geITYGbSflq5ctSBXJEbs2CZpxsAvWh2LTX1HzJEdxYwsZtR323Np5Zu0IWE+llfE4vKrKZVhoed3sfIU6ctwzU2qhnM8BC6QuF3R0TfHQeSVUftPgKG+zyeDKsuZccqOuNs6vBzxdzismC8oQk3N63eH0Fp3NRVCGV8ma4wbyxTTd4Lc78FsJbrvy57oC9uTdVmjnHduT7Ylb4o7/TFWbsjZa7j9wZE3tonpGZoP8c2lZUnPh4Co/hQD1zHTjZFzOZG0bbl53qBYHgF5F66B3iuV5Ixaqy7I1TLbMJgR+PUpXIh90bSHYevTbAbdzPLCSjhRBKYt96AcTbx+9Uy51/PrgnfhtIGV5XO/KufHvDHj/0KJrnIPkmUwV/JE851rlNmelT
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Feb 2020 13:18:40.6648 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 887ba31c-a4b6-4f3d-ad85-08d7b92c10cf
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3106
Archived-At: <https://mailarchive.ietf.org/arch/msg/teep/Ja0OCZsbJc4Rca9W-p3LETPIVFE>
Subject: [Teep] Default, mandatory-to-implement algorithm
X-BeenThere: teep@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement <teep.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/teep>, <mailto:teep-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/teep/>
List-Post: <mailto:teep@ietf.org>
List-Help: <mailto:teep-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/teep>, <mailto:teep-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Feb 2020 13:18:46 -0000

Hi all,

The other topic I would like to bring to your attention is about the MTI algorithm.

In OTrP RSA was the mandatory to use asymmetric algorithm (with SHA256 as the hash function) and ECC was optional to implement.
Given that OTrP was developed around 2015 this may have been a good choice at that time.

Today, I believe it is more appropriate to make ECC the mandatory-to-implement algorithm.

Thoughts?

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.