Re: [TLS] Drafts for batch signing and PKCS#1 v1.5
David Benjamin <davidben@chromium.org> Fri, 13 September 2019 22:25 UTC
Return-Path: <davidben@google.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16A1F120116 for <tls@ietfa.amsl.com>; Fri, 13 Sep 2019 15:25:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.498
X-Spam-Level:
X-Spam-Status: No, score=-9.498 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=chromium.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W3U6t1F6PrsA for <tls@ietfa.amsl.com>; Fri, 13 Sep 2019 15:25:20 -0700 (PDT)
Received: from mail-pf1-x429.google.com (mail-pf1-x429.google.com [IPv6:2607:f8b0:4864:20::429]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81AE8120096 for <tls@ietf.org>; Fri, 13 Sep 2019 15:25:20 -0700 (PDT)
Received: by mail-pf1-x429.google.com with SMTP id 205so18954624pfw.2 for <tls@ietf.org>; Fri, 13 Sep 2019 15:25:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=0706LKCip1QXmRaVzT1QZsiy4soI/MtlLO7duvHsL/w=; b=ScDpAER8pE3Ctvf7qeu084dlx3IB4dStoKqcOeJnrGa3CkkOGRxLkW9DuWdIlA5P75 NgFeoT6XxTTr58lCjSvjVHWZswl07KVdzO/em5ihJio0AIvtGkMi6wGu+onzmqCIFtkY 6XN5LxamhcDEfoqXnbjgQ6pEzKO6EXM+7xYuk=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=0706LKCip1QXmRaVzT1QZsiy4soI/MtlLO7duvHsL/w=; b=GYtLJtCt9jOfZeNAFbAyxCZ382XUFttvZ3teRFPWoGJ5pAfrdTZj1q02uuQQ6sJzSN 5h85h/Wb0POjyHpdqYcNozY1a9Q3/LjIOWTxHkmXAutnfWMuQ0OhSLF4RW0yaN77xT01 qVbL88cpDb/Ai7h/+0sNWR7sWKK9g7DAt95NLNCC4LXm7VW/l3HnKkio0g6bVl1zz2vu rHsBB43kN3uTEG2HGkAX0NPNhYQBnya00gZ5AWs9PgdxZ4lRM72Vv9xw4zrRVgG2bj6R +5yy0YG3BBH3P5mUWmqveD/BZI9jUTlVjOknyQHgmhFpXlF2g+uKqb5AiCpu5sfvP0mR weqw==
X-Gm-Message-State: APjAAAW738XktL8kuviKlp2GGS0o2He/+0qaRWDY3QxT6xkuKydUyaNT A/qzmjD+UuR6N4C7ieXCO0KRDy5tf5mhAyhXymnWNMp9yOiL
X-Google-Smtp-Source: APXvYqy4aTzcppboWLgMGE/N09AEwhsH3zr62QkIVqucp3QQjKVeC0KSdx7oekVM1OiXCwN69+zYJuG3UAvESw4imHY=
X-Received: by 2002:a17:90a:e98e:: with SMTP id v14mr7560812pjy.99.1568413519483; Fri, 13 Sep 2019 15:25:19 -0700 (PDT)
MIME-Version: 1.0
References: <CAF8qwaDxRhGXc522Rf4C-8OcGM4Mm08Xca4KNNpHcT=4Va89aA@mail.gmail.com> <CAF8qwaD=5B9AXkGziwHZ-=LGH-n6fW0KQ9cQfZ2DWhpjDujhEQ@mail.gmail.com>
In-Reply-To: <CAF8qwaD=5B9AXkGziwHZ-=LGH-n6fW0KQ9cQfZ2DWhpjDujhEQ@mail.gmail.com>
From: David Benjamin <davidben@chromium.org>
Date: Fri, 13 Sep 2019 18:25:03 -0400
Message-ID: <CAF8qwaCOptH2sxZGW1ZyGB9hu48zi4KHhouLrxFGdp9yLzua1A@mail.gmail.com>
To: "<tls@ietf.org>" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000b0f32a059276ba73"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/i5uGgq4MlphwMiH2pvP7coQbmkA>
Subject: Re: [TLS] Drafts for batch signing and PKCS#1 v1.5
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Sep 2019 22:25:23 -0000
A quick update: I've uploaded -01 of tls-batch-signing which should address the various comments that have come in thus far. https://tools.ietf.org/html/draft-davidben-tls-batch-signing-01 On Tue, Jul 30, 2019 at 3:09 PM David Benjamin <davidben@chromium.org> wrote: > Oops. draft-davidben-tls-batch-signing-00 cites > draft-davidben-http2-tls13-00. That should be > draft-davidben-tls13-pkcs1-00. (The XML file took a really long time to be > created, so I manually tried to recreate it based on another file and > forgot to update one of the fields.) I'll fix this in -01. > > On Mon, Jul 29, 2019 at 8:15 PM David Benjamin <davidben@chromium.org> > wrote: > >> Hi all, >> >> I’ve just uploaded a pair of drafts relating to signatures in TLS 1.3. >> https://tools.ietf.org/html/draft-davidben-tls13-pkcs1-00 >> https://tools.ietf.org/html/draft-davidben-tls-batch-signing-00 >> >> The first introduces optional legacy codepoints for PKCS#1 v1.5 >> signatures with client certificates. This is unfortunate, but I think we >> should do it. On the Chrome side, we’ve encountered some headaches with the >> TLS 1.3 PSS requirement which are unique to client certificates. The >> document describes the motivations in detail. >> >> The second describes a batch signing mechanism for TLS using Merkle >> trees. It allows TLS clients and servers to better handle signing load. I >> think it could be beneficial for a number of DoS and remote key scenarios. >> >> Thoughts? >> >> David >> >
- [TLS] Drafts for batch signing and PKCS#1 v1.5 David Benjamin
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 David Benjamin
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 Ben Schwartz
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 Martin Thomson
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 David Benjamin
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 Andrey Jivsov
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 Ilari Liusvaara
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 Thom Wiggers
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 Ben Schwartz
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 David Benjamin
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 David Benjamin
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 David Benjamin
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 Ben Schwartz
- Re: [TLS] Drafts for batch signing and PKCS#1 v1.5 David Benjamin