Using the Edwards-Curve Digital Signature Algorithm (EdDSA) in the Internet Key Exchange Protocol Version 2 (IKEv2)
draft-ietf-ipsecme-eddsa-04

(Via drafts-lastcall@iana.org): IESG/Authors/WG Chairs:

The IANA Services Operator has completed its review of draft-ietf-ipsecme-eddsa-04. If any part of this review is inaccurate, please let us know.

The IANA Services Operator understands that, upon approval of this document, there is a single action which we must complete.

In the IKEv2 Hash Algorithms registry located on the Internet Key Exchange Version 2 (IKEv2) Parameters registry page located at:

https://www.iana.org/assignments/ikev2-parameters/

we will update the following existing registration to refer to the current version of this document:

Value: 5
Hash Algorithm: Identity
Reference: [ RFC-to-be ]

We understand that this is the only action required of the IANA Services Operator upon approval of this document.

Thank you,

Amanda Baber
Lead IANA Services Specialist

The following Last Call announcement was sent out (ends 2017-12-04):

From: The IESG
To: IETF-Announce
CC: ekr@rtfm.com, ipsecme-chairs@ietf.org, kivinen@iki.fi, Tero Kivinen , ipsec@ietf.org, draft-ietf-ipsecme-eddsa@ietf.org
Reply-To: ietf@ietf.org
Sender:
Subject: Last Call:  (Using Edwards-curve Digital Signature Algorithm (EdDSA) in the Internet Key Exchange (IKEv2)) to Proposed Standard


The IESG has received a request from the IP Security Maintenance and
Extensions WG (ipsecme) to consider the following document: - 'Using
Edwards-curve Digital Signature Algorithm (EdDSA) in the
  Internet Key Exchange (IKEv2)'
  as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
ietf@ietf.org mailing lists by 2017-12-04. Exceptionally, comments may be
sent to iesg@ietf.org instead. In either case, please retain the beginning of
the Subject line to allow automated sorting.

Abstract


  This document describes the use of the Edwards-curve digital
  signature algorithm in the IKEv2 protocol.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-ipsecme-eddsa/

IESG discussion can be tracked via
https://datatracker.ietf.org/doc/draft-ietf-ipsecme-eddsa/ballot/


No IPR declarations have been submitted directly on this I-D.

The following Last Call announcement was sent out (ends 2017-11-26):

From: The IESG
To: IETF-Announce
CC: ekr@rtfm.com, ipsecme-chairs@ietf.org, kivinen@iki.fi, Tero Kivinen , ipsec@ietf.org, draft-ietf-ipsecme-eddsa@ietf.org
Reply-To: ietf@ietf.org
Sender:
Subject: Last Call:  (Using Edwards-curve Digital Signature Algorithm (EdDSA) in the Internet Key Exchange (IKEv2)) to Proposed Standard


The IESG has received a request from the IP Security Maintenance and
Extensions WG (ipsecme) to consider the following document: - 'Using
Edwards-curve Digital Signature Algorithm (EdDSA) in the
  Internet Key Exchange (IKEv2)'
  as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
ietf@ietf.org mailing lists by 2017-11-26. Exceptionally, comments may be
sent to iesg@ietf.org instead. In either case, please retain the beginning of
the Subject line to allow automated sorting.

Abstract


  This document describes the use of the Edwards-curve digital
  signature algorithm in the IKEv2 protocol.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-ipsecme-eddsa/

IESG discussion can be tracked via
https://datatracker.ietf.org/doc/draft-ietf-ipsecme-eddsa/ballot/


No IPR declarations have been submitted directly on this I-D.

Author is Yoav Nir. Eric Rescorla is the responsible Area Director.
Tero Kivinen is the document shepherd.

Summary
  This document describes the use of the Edwards-curve digital
  signature algorithm in the IKEv2 protocol as proposed standard.
     
Review and Consensus
  Version -01 went through WGLC. Changes suggested by the WG
  participants were mostly editorial. There were three substantive
  decisions:
    (1) That the new value in the hash function registry requested from
      IANA for "Identity" shall not be zero.
    (2) That we will not use the pre-hashed version of the EdDSA
      function (same decision made by TLS and Curdle working groups)
    (3) That we will use a null context (or context-free Ed25519) for
      IKE (same decision reached in TLS and Curdle working groups)
  The resulting document represents WG consensus.
  The document was reviewed by several regular WG participants.
  Apple claims to have a working implementation.
 
Intellectual Property
  The author has confirmed that he is not aware of any undisclosed IPR
  associated with this document. There have been no IPR disclosures.
 
Other Issues
  None