Re: [TLS] Last Call: draft-ietf-tls-extractor (Keying Material Exporters for Transport Layer Security (TLS)) to Proposed Standard

Matthew Campagna <mcampagna@certicom.com> Thu, 23 July 2009 01:50 UTC

Return-Path: <mcampagna@certicom.com>
X-Original-To: tls@core3.amsl.com
Delivered-To: tls@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5681F3A6CB0; Wed, 22 Jul 2009 18:50:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jKZueqvycaAP; Wed, 22 Jul 2009 18:50:29 -0700 (PDT)
Received: from cx297.800onemail.com (CX297.800onemail.com [209.20.1.115]) by core3.amsl.com (Postfix) with ESMTP id 0FC463A6CA5; Wed, 22 Jul 2009 18:50:28 -0700 (PDT)
Received: from EX13-N05.exchserver.com ([10.7.5.66]) by cx297.800onemail.com (8.13.8/8.13.8) with ESMTP id n6N1iXGj028151; Wed, 22 Jul 2009 21:44:33 -0400
Received: from EX41.exchserver.com ([169.254.1.62]) by EX13-N05.exchserver.com ([10.7.40.160]) with mapi; Wed, 22 Jul 2009 21:49:35 -0400
From: Matthew Campagna <mcampagna@certicom.com>
To: "tls@ietf.org" <tls@ietf.org>
Date: Wed, 22 Jul 2009 21:49:42 -0400
Thread-Topic: [TLS] Last Call: draft-ietf-tls-extractor (Keying Material Exporters for Transport Layer Security (TLS)) to Proposed Standard
Thread-Index: AcoLIcTPJKSKahw5Q02tlpzKvd7yvQAET6oA
Message-ID: <623ACC30D56D0B4DB72868C664C23704E68ADBC7E7@EX41.exchserver.com>
References: <026364d64021d6cef8b930cf16df1221.squirrel@www.trepanning.net> <Pine.LNX.4.44.0907201645020.16218-100000@citation2.av8.net> <20090721195028.GQ1020@Sun.COM> <E1MTkBi-0007Gi-5e@fencepost.gnu.org> <20090722223622.GP1020@Sun.COM>
In-Reply-To: <20090722223622.GP1020@Sun.COM>
Accept-Language: en-US, en-CA
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US, en-CA
Content-Type: text/plain; charset="iso-2022-jp"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CRXEFW-Info: Please contact Ceryx for more information
X-CRXEFW-Virus: Clean
X-CRXEFW-From: mcampagna@certicom.com
Cc: "ietf-honest@lists.iadl.org" <ietf-honest@lists.iadl.org>, "ietf@ietf.org" <ietf@ietf.org>
Subject: Re: [TLS] Last Call: draft-ietf-tls-extractor (Keying Material Exporters for Transport Layer Security (TLS)) to Proposed Standard
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Jul 2009 01:50:30 -0000

In Hopes of Clarifying,

   Since I filled out the form in question I would hope that you consider these comments with a little more weight than others' wild speculations about the intention of IPR #1154.

   I do not read that IPR #1154 claims to have patents that cover the draft-ietf-tls-extractor, and perhaps more importantly, nor was it my intention to indicate any such claims.

   I do recognize that it is listed in the section

   IV. IETF Document or Other Contribution to Which this IPR Disclosure Relates:

  I believe this to be correct as the free license being offered extends a license to use the following suites, to which we are making some claims,

	A. "Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security(TLS)" RFC 4492, May 2006; or,
	B. “TLS Elliptic Curve Cipher Suites with SHA‐256/384 and AES Galois Counter Mode,” RFC 5289, or
	C. “Suite B Cipher Suites for TLS,” draft‐rescorla‐tls‐suiteb‐ 07.txt;

  if one wants to use them in the draft-ietf-tls-extractor, under the conditions in a linked document.  Hence, I believe that the license is extending intellectual property rights that 'relates' to draft-ietf-tls-extractor.  I do not equate 'relates' to claiming rights over.

  I do read that IPR #1154 claims to have patents that cover parts of documents listed in,

   V  Disclosure of Patent Information (i.e., patents or patent applications required to be disclosed by Section 6 of RFC 3979)

     C If an Internet-Draft or RFC includes multiple parts and it is not reasonably apparent which part of such Internet-Draft or RFC is alleged to be covered by the patent information disclosed in Section V(A) or V(B), it is helpful if the discloser identifies here the sections of the Internet-Draft or RFC that are alleged to be so covered:

  Where it lists:

  RFC 3278, RFC 4109, RFC 4492, RFC 4753, RFC 4754, RFC 4869, RFC 5008, RFC 5289, draft-rescorla-tls-suiteb-12, draft-green-secsh-ecc-07, draft-igoe-secsh-suiteb-00, draft-ietf-smime-3278bis-07,
draft-ietf-smime-sha2-11

  Note that draft-ietf-tls-extractor is not listed in the I-D or RFCs part of which the listed patents claim to cover.

Therefore a reasonable person should be able to conclude that the statement is not making a claim that patents listed cover parts of the draft-ietf-tls-extractor. 

  As stated prior, I think the form being used creates the confusion at hand.  There is no clear definition of what should be in section IV versus section V. C.  Should more exact language be added to the form, I would be happy to update the IPR statement to help remove some stated uncertainties.

  Further the RFC 3979 indicates the following:

6.3.  How Must a Disclosure be Made?

   IPR disclosures are made by following the instructions at
   http://www.ietf.org/ipr-instructions. 

A link I think most will find particularly amusing.

Regards,
   Matt

Matthew Campagna | Director, Certicom Research
Certicom Corp. | A Subsidiary of Research In Motion Limited

mcampagna@certicom.com                       
direct        203.894.9777                                                       
mobile        203.240.1269
www.certicom.com