From: "Manger, James" <James.H.Manger@team.telstra.com>
To: Simon Josefsson <simon@josefsson.org>, "pkix@ietf.org" <pkix@ietf.org>,
 "tls@ietf.org" <tls@ietf.org>
Date: Thu, 24 Sep 2015 13:23:45 +1000
Thread-Topic: [pkix] Updated EdDSA/Ed25519 PKIX document
Thread-Index: AdD12pVU/mpM/hKjSpWqsOnwHJSkkQAm4V3A
Message-ID: <255B9BB34FB7D647A506DC292726F6E13BAE1499A2@WSMSG3153V.srv.dir.telstra.com>
References: <878u7xtu06.fsf@latte.josefsson.org>
In-Reply-To: <878u7xtu06.fsf@latte.josefsson.org>
Accept-Language: en-US, en-AU
Content-Language: en-US
acceptlanguage: en-US, en-AU
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/ga2eDj3JawMExHi42Im5xEVL-XU>
Subject: Re: [TLS] [pkix] Updated EdDSA/Ed25519 PKIX document
Precedence: list

Hi Simon, two technical typos:

The example cert in 8.2 has the wrong OID for the signature.
Cert has { 1 3 101 100 1 } [encoding 06 04 2B656401]
Text has { 1 3 101 101 }   [encoding 06 03 2B6565]   for id-EdDSASignature

OIDs use space-separated (not dot-separated) numbers in ASN.1.
Section 4:
Wrong { 1.3.101.100 }
Right { 1 3 101 100 }
Section 7
Wrong { 1.3.101.101 }
Right { 1 3 101 101 }


The cert's notBefore field is a UTCTime value (2-digit year), while the not=
After field is a GeneralizedTime value (4-digit year). I don't think I has =
seen that before, but it is valid.

--
James Manger


-----Original Message-----
From: pkix [mailto:pkix-bounces@ietf.org] On Behalf Of Simon Josefsson
Sent: Wednesday, 23 September 2015 6:33 PM
To: pkix@ietf.org; tls@ietf.org
Subject: [pkix] Updated EdDSA/Ed25519 PKIX document

Hi all,

I have pushed out a new version of the document describing EdDSA public key=
s, signatures and certificates for PKIX.  The change in -03 include the add=
ition of the prehash mode, test vectors generated by GnuTLS, and a section =
recommending certain human readable names.

https://tools.ietf.org/html/draft-josefsson-pkix-eddsa-03

I've started a thread to discuss whether it is wortwhile to be able to use =
the same Ed25519 key for both PureEdDSA mode and HashEdDSA signing, and I'd=
 appreciate feedback on whether people are interested in this and generally=
 if it is a good idea or not.  The complexity involved make me shy away a b=
it from it, but it is fun to consider.  The thread is here:
https://moderncrypto.org/mail-archive/curves/2015/000630.html

/Simon