Skip to main content

CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE)
draft-ietf-jose-cfrg-curves-06

Revision differences

Document history

Date Rev. By Action
2016-12-20
06 (System) RFC Editor state changed to AUTH48-DONE from AUTH48
2016-11-22
06 (System) RFC Editor state changed to AUTH48 from RFC-EDITOR
2016-11-16
06 (System) RFC Editor state changed to RFC-EDITOR from REF
2016-11-01
06 (System) RFC Editor state changed to REF from RFC-EDITOR
2016-11-01
06 (System) RFC Editor state changed to RFC-EDITOR from EDIT
2016-10-24
06 Roni Even Request for Last Call review by GENART Completed: Ready. Reviewer: Roni Even.
2016-10-18
06 (System) RFC Editor state changed to EDIT from MISSREF
2016-08-23
06 (System) IANA Action state changed to RFC-Ed-Ack from Waiting on RFC Editor
2016-08-23
06 (System) IANA Action state changed to Waiting on RFC Editor from In Progress
2016-08-23
06 (System) IANA Action state changed to In Progress from Waiting on Authors
2016-08-22
06 (System) IANA Action state changed to Waiting on Authors
2016-08-22
06 (System) RFC Editor state changed to MISSREF
2016-08-22
06 (System) IESG state changed to RFC Ed Queue from Approved-announcement sent
2016-08-22
06 (System) Announcement was received by RFC Editor
2016-08-22
06 Cindy Morgan IESG state changed to Approved-announcement sent from Approved-announcement to be sent
2016-08-22
06 Cindy Morgan IESG has approved the document
2016-08-22
06 Cindy Morgan Closed "Approve" ballot
2016-08-22
06 Cindy Morgan Ballot writeup was changed
2016-08-22
06 Cindy Morgan Ballot approval text was generated
2016-08-19
06 Tero Kivinen Request for Last Call review by SECDIR Completed: Has Nits. Reviewer: Melinda Shore.
2016-08-18
06 Cindy Morgan IESG state changed to Approved-announcement to be sent from IESG Evaluation
2016-08-18
06 Ilari Liusvaara IANA Review state changed to Version Changed - Review Needed from IANA OK - Actions Needed
2016-08-18
06 Ilari Liusvaara New version available: draft-ietf-jose-cfrg-curves-06.txt
2016-08-18
05 Joel Jaeggli [Ballot Position Update] New position, No Objection, has been recorded for Joel Jaeggli
2016-08-18
05 Jari Arkko [Ballot Position Update] New position, No Objection, has been recorded for Jari Arkko
2016-08-17
05 Amanda Baber IANA Review state changed to IANA OK - Actions Needed from IANA - Not OK
2016-08-17
05 (System) IANA Review state changed to IANA OK - Actions Needed from Version Changed - Review Needed
2016-08-17
05 Alvaro Retana [Ballot Position Update] New position, No Objection, has been recorded for Alvaro Retana
2016-08-17
05 Terry Manderson [Ballot Position Update] New position, No Objection, has been recorded for Terry Manderson
2016-08-17
05 Kathleen Moriarty IESG state changed to IESG Evaluation from Waiting for Writeup
2016-08-17
05 Alexey Melnikov [Ballot Position Update] New position, No Objection, has been recorded for Alexey Melnikov
2016-08-16
05 Ben Campbell
[Ballot comment]
I note that the reference to RFC7748 is a normative downref that does not appear to be mentioned in the last call announcement. …
[Ballot comment]
I note that the reference to RFC7748 is a normative downref that does not appear to be mentioned in the last call announcement. It’s not in the downref registry, but since it's an algorithm spec, it probably should be. I don't suggest any particular course of action; I merely bring it up in case people hadn't already noticed.
2016-08-16
05 Ben Campbell [Ballot Position Update] New position, No Objection, has been recorded for Ben Campbell
2016-08-16
05 Deborah Brungard [Ballot Position Update] New position, No Objection, has been recorded for Deborah Brungard
2016-08-16
05 Alissa Cooper [Ballot Position Update] New position, No Objection, has been recorded for Alissa Cooper
2016-08-16
05 Gunter Van de Velde Request for Last Call review by OPSDIR Completed: Ready. Reviewer: Sarah Banks.
2016-08-16
05 Suresh Krishnan [Ballot Position Update] New position, No Objection, has been recorded for Suresh Krishnan
2016-08-16
05 Alia Atlas [Ballot Position Update] New position, No Objection, has been recorded for Alia Atlas
2016-08-15
05 Mirja Kühlewind [Ballot Position Update] New position, No Objection, has been recorded for Mirja Kühlewind
2016-08-15
05 Spencer Dawkins [Ballot Position Update] New position, No Objection, has been recorded for Spencer Dawkins
2016-08-12
05 Kathleen Moriarty Ballot has been issued
2016-08-12
05 Kathleen Moriarty [Ballot Position Update] New position, Yes, has been recorded for Kathleen Moriarty
2016-08-12
05 Kathleen Moriarty Created "Approve" ballot
2016-08-12
05 Kathleen Moriarty Ballot writeup was changed
2016-08-12
05 (System) IANA Review state changed to IANA - Not OK from IANA - Review Needed
2016-08-12
05 Sabrina Tanamal
(Via drafts-lastcall-comment@iana.org): IESG/Authors/WG Chairs:

IANA has completed its review of draft-ietf-jose-cfrg-curves-05.txt. If any part of this review is inaccurate, please let us know.

IANA …
(Via drafts-lastcall-comment@iana.org): IESG/Authors/WG Chairs:

IANA has completed its review of draft-ietf-jose-cfrg-curves-05.txt. If any part of this review is inaccurate, please let us know.

IANA understands that some of the actions requested in the IANA Considerations section of this document are dependent upon the approval of and completion of IANA Actions in another document: [ https://tools.ietf.org/html/draft-irtf-cfrg-eddsa-05 ]

IANA understands that, upon approval of this document, there are four actions which IANA must complete.

First, in the JSON Web Key Types subregistry of the JSON Object Signing and Encryption (JOSE) registry located at:

https://www.iana.org/assignments/jose/

a single new web key type will be registered as follows:

"kty" Parameter Value: OKP
Key Type Description: Octet string key pairs
JOSE Implementaiton Requirements: Optional
Change Controller: IESG
Reference: [ RFC-to-be, Section 2 ]

As this document requests registrations in an Expert Review or Specification Required (see RFC 5226) registry, we will initiate the required Expert Review via a separate request. Expert review will need to be completed before your document can be approved for publication as an RFC.

Second, in the JSON Web Key Parameters subregistry also in the JSON Object Signing and Encryption (JOSE) registry located at:

https://www.iana.org/assignments/jose/

three new web key parameters will be registered as follows:

Parameter Name: crv
Parameter Description: The subtype of keypair
Used with "kty" Value(s): OKP
Parameter Information Class: Public
Change Controller: IESG
Reference: [ RFC-to-be, section 2 ]

Parameter Name: d
Parameter Description: The private key
Used with "kty" Value(s): OKP
Parameter Information Class: Public
Change Controller: IESG
Reference: [ RFC-to-be, section 2 ]

Parameter Name: x
Parameter Description: The public key
Used with "kty" Value(s): OKP
Parameter Information Class: Public
Change Controller: IESG
Reference: [ RFC-to-be, section 2 ]

Third, in the JSON Web Signature and Encryption Algorithms subregistry also in the JSON Object Signing and Encryption (JOSE) registry located at:

https://www.iana.org/assignments/jose/

a single new value is to be registered as follows:

Algorithm Name: EdDSA
Algorithm Description: EdDSA signature algorithms
Algorithm Usage Location(s): alg
JOSE Implementation Requirements: Optional
Change Controller: IESG
Reference: [ RFC-to-be, Section 3 ]
Algorithm Analysis Documents: [ https://tools.ietf.org/html/draft-irtf-cfrg-eddsa-05 ]

Fourth, in the JSON Web Key Elliptic Curve subregistry also in the JSON Object Signing and Encryption (JOSE) registry located at:

https://www.iana.org/assignments/jose/

four new curves are to be registered as follows:

Curve Name: Ed25519
Curve Description: Ed25519 signature algorithm keypairs
JOSE Implementation Requirements: Optional
Change Controller: IESG
Specification Document(s): [ RFC-to-be, Section 3 ]

Curve Name: Ed448
Curve Description: Ed448 signature algorithm keypairs
JOSE Implementation Requirements: Optional
Change Controller: IESG
Specification Document(s): [ RFC-to-be, Section 3 ]

Curve name: X25519
Curve Description: X25519 function keypairs
JOSE Implementation Requirements: Optional
Change Controller: IESG
Specification Document(s): Section 3.2 of [RFC-THIS]
Analysis Documents(s): [RFC7748]

Curve Name: X448
Curve Description: X448 function keypairs
JOSE Implementation Requirements: Optional
Change Controller: IESG
Specification Document(s): Section 3.2 of [RFC-THIS]
Analysis Documents(s): [RFC7748]

IANA understands that the four actions above are the only ones required to be completed upon approval of this document.

Note:  The actions requested in this document will not be completed until the document has been approved for publication as an RFC. This message is only to confirm what actions will be performed. 

Thank you,

Sabrina Tanamal
IANA Specialist
ICANN
2016-08-12
05 (System) IESG state changed to Waiting for Writeup from In Last Call
2016-08-11
05 Jean Mahoney Request for Last Call review by GENART is assigned to Roni Even
2016-08-11
05 Jean Mahoney Request for Last Call review by GENART is assigned to Roni Even
2016-08-08
05 Roni Even Request for Last Call review by GENART Completed: Ready. Reviewer: Roni Even.
2016-08-04
05 Tero Kivinen Request for Last Call review by SECDIR is assigned to Melinda Shore
2016-08-04
05 Tero Kivinen Request for Last Call review by SECDIR is assigned to Melinda Shore
2016-08-01
05 Jean Mahoney Request for Last Call review by GENART is assigned to Roni Even
2016-08-01
05 Jean Mahoney Request for Last Call review by GENART is assigned to Roni Even
2016-08-01
05 Gunter Van de Velde Request for Last Call review by OPSDIR is assigned to Sarah Banks
2016-08-01
05 Gunter Van de Velde Request for Last Call review by OPSDIR is assigned to Sarah Banks
2016-07-29
05 Amy Vezza IANA Review state changed to IANA - Review Needed
2016-07-29
05 Amy Vezza
The following Last Call announcement was sent out:

From: The IESG
To: "IETF-Announce"
CC: jose-chairs@ietf.org, "Jim Schaad" , ietf@augustcellars.com, draft-ietf-jose-cfrg-curves@ietf.org, Kathleen.Moriarty.ietf@gmail.com, …
The following Last Call announcement was sent out:

From: The IESG
To: "IETF-Announce"
CC: jose-chairs@ietf.org, "Jim Schaad" , ietf@augustcellars.com, draft-ietf-jose-cfrg-curves@ietf.org, Kathleen.Moriarty.ietf@gmail.com, jose@ietf.org
Reply-To: ietf@ietf.org
Sender:
Subject: Last Call:  (CFRG ECDH and signatures in JOSE) to Proposed Standard


The IESG has received a request from the Javascript Object Signing and
Encryption WG (jose) to consider the following document:
- 'CFRG ECDH and signatures in JOSE'
  as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits
final comments on this action. Please send substantive comments to the
ietf@ietf.org mailing lists by 2016-08-12. Exceptionally, comments may be
sent to iesg@ietf.org instead. In either case, please retain the
beginning of the Subject line to allow automated sorting.

Abstract


  This document defines how to use the Diffie-Hellman algorithms
  "X25519" and "X448" as well as the signature algorithms "Ed25519" and
  "Ed448" from the IRTF CFRG elliptic curves work in JOSE.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-jose-cfrg-curves/

IESG discussion can be tracked via
https://datatracker.ietf.org/doc/draft-ietf-jose-cfrg-curves/ballot/


No IPR declarations have been submitted directly on this I-D.


The document contains these normative downward references.
See RFC 3967 for additional information:
    draft-irtf-cfrg-eddsa: Edwards-curve Digital Signature Algorithm (EdDSA)  (None - Independent Submission Editor stream)
Note that some of these references may already be listed in the acceptable Downref Registry.


2016-07-29
05 Amy Vezza IESG state changed to In Last Call from Last Call Requested
2016-07-29
05 Amy Vezza Last call announcement was changed
2016-07-28
05 Kathleen Moriarty Last call was requested
2016-07-28
05 Kathleen Moriarty Ballot approval text was generated
2016-07-28
05 Kathleen Moriarty Ballot writeup was generated
2016-07-28
05 Kathleen Moriarty IESG state changed to Last Call Requested from Publication Requested
2016-07-28
05 Kathleen Moriarty Last call announcement was generated
2016-07-28
05 Kathleen Moriarty Last call announcement was generated
2016-07-28
05 Kathleen Moriarty Placed on agenda for telechat - 2016-08-18
2016-07-20
05 Jim Schaad
(1) This document is set for Standards Track.  Given the current push toward adopting the CFRG algorithms, this has the potential to become the preferred …
(1) This document is set for Standards Track.  Given the current push toward adopting the CFRG algorithms, this has the potential to become the preferred JWS/JWE algorithm set.  There have been several browser vendors who have expressed a desire to place these algorithms in the W3C WebCrypto spec.

(2) The IESG approval announcement includes a Document Announcement
Write-Up. Please provide such a Document Announcement Write-Up. Recent
examples can be found in the "Action" announcements for approved
documents. The approval announcement contains the following sections:

Technical Summary

  This document defines how to use Diffie-Hellman algorithms "X25519" and "X448" as well as signature algorithms "Ed25519" and "Ed448" from IRTF CFRG elliptic curves work in JOSE.  An explicit decision was made not to include the pre-hash versions of the Edwards Signature algorithms.

Working Group Summary

  The document was completely uncontroversial in the WG.

Document Quality

  The WG produced sufficient review of the document.  While it is not believe that there are any issues of the document given the shortness and simplicity more review would have been useful.  The core cryptographic security is considered to be solid, and has had more than sufficient review from the CFRG.

Personnel

  Jim Schaad is the Document Shepherd. Kathleen Moriarty is the Responsible Area Director.

(3) I have done multiple reviews on the document, checked the document against the nits list and, hopefully, will have an implementation that can be used to check the examples before the IESG processing is finished.

(4)  A present there have been no reviews of the document other than mine in WGLC.  I consider this to be an issue.

(5) I do not see any need for a broader review.  The author is also working on the CFRG documents and thus can be expected to get usage questions correct.  This is a description of how to use the algorithm and not the algorithm itself.  It will inherit the security analysis of the JWS and JWE documents as there are not significantly different properties for these algorithms.

(6) I have no concerns about the document that need to be highlighted.

(7)  Ilari has confirmed that all appropriate IPR disclosures have been filed.

(8) No IPR disclosures exist.

(9) Consensus to adopt the group was a small set of individuals, but that is all that is left to be active in the group.

(10) Nobody has expressed any problems with the document.

(11) Nits and Checklist have been reviewed.  The only issues are the two downrefs called out below.

(12) No formal review is required for the document.

(13) All references have been defined between normative and informative and the assignments look reasonable.

(14) There is currently a dependency on draft irtf-cfrg-eddsa, but that document is going through final approval process and expected to complete.

(15) The document has two downward normative references:

RFC7748 - Is the algorithm definition for ECDH keys.  It is normal to down reference algorithm documents.
draft-ietf-cfrg-eddsa - Is the algorithm definition for EdDSA.  It is normal to down reference algorithm documents

(16) This document is new and modifies no existing documents.  The JOSE algorithm registries are updated which indirectly updates the set of core JOSE documents.

(17) I have gone through the document as shepherd to validate the IANA consideration registrations.  They appear to be correct and I expect no problem also validating them as the DE for the registry.

(18) This document does not define any new IANA registries.

(19) The document contains no formal language sections.

2016-07-20
05 Jim Schaad Responsible AD changed to Kathleen Moriarty
2016-07-20
05 Jim Schaad IETF WG state changed to Submitted to IESG for Publication from In WG Last Call
2016-07-20
05 Jim Schaad IESG state changed to Publication Requested
2016-07-20
05 Jim Schaad IESG process started in state Publication Requested
2016-07-20
05 Jim Schaad Changed document writeup
2016-07-08
05 Ilari Liusvaara New version available: draft-ietf-jose-cfrg-curves-05.txt
2016-07-07
04 Ilari Liusvaara New version available: draft-ietf-jose-cfrg-curves-04.txt
2016-07-01
03 Ilari Liusvaara New version available: draft-ietf-jose-cfrg-curves-03.txt
2016-06-10
02 Jim Schaad Changed document writeup
2016-06-04
02 Jim Schaad Changed consensus to Yes from Unknown
2016-06-04
02 Jim Schaad Intended Status changed to Proposed Standard from None
2016-06-03
02 Jim Schaad Notification list changed to "Jim Schaad" <ietf@augustcellars.com> from "Jim Schaad" <jimsch@augustcellars.com>, "Jim Schaad" <ietf@augustcellars.com>
2016-06-03
02 Jim Schaad Notification list changed to "Jim Schaad" <jimsch@augustcellars.com>, "Jim Schaad" <ietf@augustcellars.com> from "Jim Schaad" <jimsch@augustcellars.com>
2016-06-03
02 Jim Schaad Document shepherd changed to Jim Schaad
2016-06-03
02 Jim Schaad Notification list changed to "Jim Schaad" <jimsch@augustcellars.com>
2016-06-03
02 Jim Schaad Document shepherd changed to Jim Schaad
2016-06-03
02 Jim Schaad IETF WG state changed to In WG Last Call from WG Document
2016-05-24
02 Ilari Liusvaara New version available: draft-ietf-jose-cfrg-curves-02.txt
2016-03-21
01 Ilari Liusvaara New version available: draft-ietf-jose-cfrg-curves-01.txt
2015-12-28
00 (System) This document now replaces draft-liusvaara-jose-cfrg-curves instead of None
2015-12-28
00 Ilari Liusvaara New version available: draft-ietf-jose-cfrg-curves-00.txt