CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE)
draft-ietf-jose-cfrg-curves-06
Revision differences
Document history
Date | Rev. | By | Action |
---|---|---|---|
2016-12-20
|
06 | (System) | RFC Editor state changed to AUTH48-DONE from AUTH48 |
2016-11-22
|
06 | (System) | RFC Editor state changed to AUTH48 from RFC-EDITOR |
2016-11-16
|
06 | (System) | RFC Editor state changed to RFC-EDITOR from REF |
2016-11-01
|
06 | (System) | RFC Editor state changed to REF from RFC-EDITOR |
2016-11-01
|
06 | (System) | RFC Editor state changed to RFC-EDITOR from EDIT |
2016-10-24
|
06 | Roni Even | Request for Last Call review by GENART Completed: Ready. Reviewer: Roni Even. |
2016-10-18
|
06 | (System) | RFC Editor state changed to EDIT from MISSREF |
2016-08-23
|
06 | (System) | IANA Action state changed to RFC-Ed-Ack from Waiting on RFC Editor |
2016-08-23
|
06 | (System) | IANA Action state changed to Waiting on RFC Editor from In Progress |
2016-08-23
|
06 | (System) | IANA Action state changed to In Progress from Waiting on Authors |
2016-08-22
|
06 | (System) | IANA Action state changed to Waiting on Authors |
2016-08-22
|
06 | (System) | RFC Editor state changed to MISSREF |
2016-08-22
|
06 | (System) | IESG state changed to RFC Ed Queue from Approved-announcement sent |
2016-08-22
|
06 | (System) | Announcement was received by RFC Editor |
2016-08-22
|
06 | Cindy Morgan | IESG state changed to Approved-announcement sent from Approved-announcement to be sent |
2016-08-22
|
06 | Cindy Morgan | IESG has approved the document |
2016-08-22
|
06 | Cindy Morgan | Closed "Approve" ballot |
2016-08-22
|
06 | Cindy Morgan | Ballot writeup was changed |
2016-08-22
|
06 | Cindy Morgan | Ballot approval text was generated |
2016-08-19
|
06 | Tero Kivinen | Request for Last Call review by SECDIR Completed: Has Nits. Reviewer: Melinda Shore. |
2016-08-18
|
06 | Cindy Morgan | IESG state changed to Approved-announcement to be sent from IESG Evaluation |
2016-08-18
|
06 | Ilari Liusvaara | IANA Review state changed to Version Changed - Review Needed from IANA OK - Actions Needed |
2016-08-18
|
06 | Ilari Liusvaara | New version available: draft-ietf-jose-cfrg-curves-06.txt |
2016-08-18
|
05 | Joel Jaeggli | [Ballot Position Update] New position, No Objection, has been recorded for Joel Jaeggli |
2016-08-18
|
05 | Jari Arkko | [Ballot Position Update] New position, No Objection, has been recorded for Jari Arkko |
2016-08-17
|
05 | Amanda Baber | IANA Review state changed to IANA OK - Actions Needed from IANA - Not OK |
2016-08-17
|
05 | (System) | IANA Review state changed to IANA OK - Actions Needed from Version Changed - Review Needed |
2016-08-17
|
05 | Alvaro Retana | [Ballot Position Update] New position, No Objection, has been recorded for Alvaro Retana |
2016-08-17
|
05 | Terry Manderson | [Ballot Position Update] New position, No Objection, has been recorded for Terry Manderson |
2016-08-17
|
05 | Kathleen Moriarty | IESG state changed to IESG Evaluation from Waiting for Writeup |
2016-08-17
|
05 | Alexey Melnikov | [Ballot Position Update] New position, No Objection, has been recorded for Alexey Melnikov |
2016-08-16
|
05 | Ben Campbell | [Ballot comment] I note that the reference to RFC7748 is a normative downref that does not appear to be mentioned in the last call announcement. … [Ballot comment] I note that the reference to RFC7748 is a normative downref that does not appear to be mentioned in the last call announcement. It’s not in the downref registry, but since it's an algorithm spec, it probably should be. I don't suggest any particular course of action; I merely bring it up in case people hadn't already noticed. |
2016-08-16
|
05 | Ben Campbell | [Ballot Position Update] New position, No Objection, has been recorded for Ben Campbell |
2016-08-16
|
05 | Deborah Brungard | [Ballot Position Update] New position, No Objection, has been recorded for Deborah Brungard |
2016-08-16
|
05 | Alissa Cooper | [Ballot Position Update] New position, No Objection, has been recorded for Alissa Cooper |
2016-08-16
|
05 | Gunter Van de Velde | Request for Last Call review by OPSDIR Completed: Ready. Reviewer: Sarah Banks. |
2016-08-16
|
05 | Suresh Krishnan | [Ballot Position Update] New position, No Objection, has been recorded for Suresh Krishnan |
2016-08-16
|
05 | Alia Atlas | [Ballot Position Update] New position, No Objection, has been recorded for Alia Atlas |
2016-08-15
|
05 | Mirja Kühlewind | [Ballot Position Update] New position, No Objection, has been recorded for Mirja Kühlewind |
2016-08-15
|
05 | Spencer Dawkins | [Ballot Position Update] New position, No Objection, has been recorded for Spencer Dawkins |
2016-08-12
|
05 | Kathleen Moriarty | Ballot has been issued |
2016-08-12
|
05 | Kathleen Moriarty | [Ballot Position Update] New position, Yes, has been recorded for Kathleen Moriarty |
2016-08-12
|
05 | Kathleen Moriarty | Created "Approve" ballot |
2016-08-12
|
05 | Kathleen Moriarty | Ballot writeup was changed |
2016-08-12
|
05 | (System) | IANA Review state changed to IANA - Not OK from IANA - Review Needed |
2016-08-12
|
05 | Sabrina Tanamal | (Via drafts-lastcall-comment@iana.org): IESG/Authors/WG Chairs: IANA has completed its review of draft-ietf-jose-cfrg-curves-05.txt. If any part of this review is inaccurate, please let us know. IANA … (Via drafts-lastcall-comment@iana.org): IESG/Authors/WG Chairs: IANA has completed its review of draft-ietf-jose-cfrg-curves-05.txt. If any part of this review is inaccurate, please let us know. IANA understands that some of the actions requested in the IANA Considerations section of this document are dependent upon the approval of and completion of IANA Actions in another document: [ https://tools.ietf.org/html/draft-irtf-cfrg-eddsa-05 ] IANA understands that, upon approval of this document, there are four actions which IANA must complete. First, in the JSON Web Key Types subregistry of the JSON Object Signing and Encryption (JOSE) registry located at: https://www.iana.org/assignments/jose/ a single new web key type will be registered as follows: "kty" Parameter Value: OKP Key Type Description: Octet string key pairs JOSE Implementaiton Requirements: Optional Change Controller: IESG Reference: [ RFC-to-be, Section 2 ] As this document requests registrations in an Expert Review or Specification Required (see RFC 5226) registry, we will initiate the required Expert Review via a separate request. Expert review will need to be completed before your document can be approved for publication as an RFC. Second, in the JSON Web Key Parameters subregistry also in the JSON Object Signing and Encryption (JOSE) registry located at: https://www.iana.org/assignments/jose/ three new web key parameters will be registered as follows: Parameter Name: crv Parameter Description: The subtype of keypair Used with "kty" Value(s): OKP Parameter Information Class: Public Change Controller: IESG Reference: [ RFC-to-be, section 2 ] Parameter Name: d Parameter Description: The private key Used with "kty" Value(s): OKP Parameter Information Class: Public Change Controller: IESG Reference: [ RFC-to-be, section 2 ] Parameter Name: x Parameter Description: The public key Used with "kty" Value(s): OKP Parameter Information Class: Public Change Controller: IESG Reference: [ RFC-to-be, section 2 ] Third, in the JSON Web Signature and Encryption Algorithms subregistry also in the JSON Object Signing and Encryption (JOSE) registry located at: https://www.iana.org/assignments/jose/ a single new value is to be registered as follows: Algorithm Name: EdDSA Algorithm Description: EdDSA signature algorithms Algorithm Usage Location(s): alg JOSE Implementation Requirements: Optional Change Controller: IESG Reference: [ RFC-to-be, Section 3 ] Algorithm Analysis Documents: [ https://tools.ietf.org/html/draft-irtf-cfrg-eddsa-05 ] Fourth, in the JSON Web Key Elliptic Curve subregistry also in the JSON Object Signing and Encryption (JOSE) registry located at: https://www.iana.org/assignments/jose/ four new curves are to be registered as follows: Curve Name: Ed25519 Curve Description: Ed25519 signature algorithm keypairs JOSE Implementation Requirements: Optional Change Controller: IESG Specification Document(s): [ RFC-to-be, Section 3 ] Curve Name: Ed448 Curve Description: Ed448 signature algorithm keypairs JOSE Implementation Requirements: Optional Change Controller: IESG Specification Document(s): [ RFC-to-be, Section 3 ] Curve name: X25519 Curve Description: X25519 function keypairs JOSE Implementation Requirements: Optional Change Controller: IESG Specification Document(s): Section 3.2 of [RFC-THIS] Analysis Documents(s): [RFC7748] Curve Name: X448 Curve Description: X448 function keypairs JOSE Implementation Requirements: Optional Change Controller: IESG Specification Document(s): Section 3.2 of [RFC-THIS] Analysis Documents(s): [RFC7748] IANA understands that the four actions above are the only ones required to be completed upon approval of this document. Note: The actions requested in this document will not be completed until the document has been approved for publication as an RFC. This message is only to confirm what actions will be performed. Thank you, Sabrina Tanamal IANA Specialist ICANN |
2016-08-12
|
05 | (System) | IESG state changed to Waiting for Writeup from In Last Call |
2016-08-11
|
05 | Jean Mahoney | Request for Last Call review by GENART is assigned to Roni Even |
2016-08-11
|
05 | Jean Mahoney | Request for Last Call review by GENART is assigned to Roni Even |
2016-08-08
|
05 | Roni Even | Request for Last Call review by GENART Completed: Ready. Reviewer: Roni Even. |
2016-08-04
|
05 | Tero Kivinen | Request for Last Call review by SECDIR is assigned to Melinda Shore |
2016-08-04
|
05 | Tero Kivinen | Request for Last Call review by SECDIR is assigned to Melinda Shore |
2016-08-01
|
05 | Jean Mahoney | Request for Last Call review by GENART is assigned to Roni Even |
2016-08-01
|
05 | Jean Mahoney | Request for Last Call review by GENART is assigned to Roni Even |
2016-08-01
|
05 | Gunter Van de Velde | Request for Last Call review by OPSDIR is assigned to Sarah Banks |
2016-08-01
|
05 | Gunter Van de Velde | Request for Last Call review by OPSDIR is assigned to Sarah Banks |
2016-07-29
|
05 | Amy Vezza | IANA Review state changed to IANA - Review Needed |
2016-07-29
|
05 | Amy Vezza | The following Last Call announcement was sent out: From: The IESG To: "IETF-Announce" CC: jose-chairs@ietf.org, "Jim Schaad" , ietf@augustcellars.com, draft-ietf-jose-cfrg-curves@ietf.org, Kathleen.Moriarty.ietf@gmail.com, … The following Last Call announcement was sent out: From: The IESG To: "IETF-Announce" CC: jose-chairs@ietf.org, "Jim Schaad" , ietf@augustcellars.com, draft-ietf-jose-cfrg-curves@ietf.org, Kathleen.Moriarty.ietf@gmail.com, jose@ietf.org Reply-To: ietf@ietf.org Sender: Subject: Last Call: (CFRG ECDH and signatures in JOSE) to Proposed Standard The IESG has received a request from the Javascript Object Signing and Encryption WG (jose) to consider the following document: - 'CFRG ECDH and signatures in JOSE' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2016-08-12. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document defines how to use the Diffie-Hellman algorithms "X25519" and "X448" as well as the signature algorithms "Ed25519" and "Ed448" from the IRTF CFRG elliptic curves work in JOSE. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-jose-cfrg-curves/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-jose-cfrg-curves/ballot/ No IPR declarations have been submitted directly on this I-D. The document contains these normative downward references. See RFC 3967 for additional information: draft-irtf-cfrg-eddsa: Edwards-curve Digital Signature Algorithm (EdDSA) (None - Independent Submission Editor stream) Note that some of these references may already be listed in the acceptable Downref Registry. |
2016-07-29
|
05 | Amy Vezza | IESG state changed to In Last Call from Last Call Requested |
2016-07-29
|
05 | Amy Vezza | Last call announcement was changed |
2016-07-28
|
05 | Kathleen Moriarty | Last call was requested |
2016-07-28
|
05 | Kathleen Moriarty | Ballot approval text was generated |
2016-07-28
|
05 | Kathleen Moriarty | Ballot writeup was generated |
2016-07-28
|
05 | Kathleen Moriarty | IESG state changed to Last Call Requested from Publication Requested |
2016-07-28
|
05 | Kathleen Moriarty | Last call announcement was generated |
2016-07-28
|
05 | Kathleen Moriarty | Last call announcement was generated |
2016-07-28
|
05 | Kathleen Moriarty | Placed on agenda for telechat - 2016-08-18 |
2016-07-20
|
05 | Jim Schaad | (1) This document is set for Standards Track. Given the current push toward adopting the CFRG algorithms, this has the potential to become the preferred … (1) This document is set for Standards Track. Given the current push toward adopting the CFRG algorithms, this has the potential to become the preferred JWS/JWE algorithm set. There have been several browser vendors who have expressed a desire to place these algorithms in the W3C WebCrypto spec. (2) The IESG approval announcement includes a Document Announcement Write-Up. Please provide such a Document Announcement Write-Up. Recent examples can be found in the "Action" announcements for approved documents. The approval announcement contains the following sections: Technical Summary This document defines how to use Diffie-Hellman algorithms "X25519" and "X448" as well as signature algorithms "Ed25519" and "Ed448" from IRTF CFRG elliptic curves work in JOSE. An explicit decision was made not to include the pre-hash versions of the Edwards Signature algorithms. Working Group Summary The document was completely uncontroversial in the WG. Document Quality The WG produced sufficient review of the document. While it is not believe that there are any issues of the document given the shortness and simplicity more review would have been useful. The core cryptographic security is considered to be solid, and has had more than sufficient review from the CFRG. Personnel Jim Schaad is the Document Shepherd. Kathleen Moriarty is the Responsible Area Director. (3) I have done multiple reviews on the document, checked the document against the nits list and, hopefully, will have an implementation that can be used to check the examples before the IESG processing is finished. (4) A present there have been no reviews of the document other than mine in WGLC. I consider this to be an issue. (5) I do not see any need for a broader review. The author is also working on the CFRG documents and thus can be expected to get usage questions correct. This is a description of how to use the algorithm and not the algorithm itself. It will inherit the security analysis of the JWS and JWE documents as there are not significantly different properties for these algorithms. (6) I have no concerns about the document that need to be highlighted. (7) Ilari has confirmed that all appropriate IPR disclosures have been filed. (8) No IPR disclosures exist. (9) Consensus to adopt the group was a small set of individuals, but that is all that is left to be active in the group. (10) Nobody has expressed any problems with the document. (11) Nits and Checklist have been reviewed. The only issues are the two downrefs called out below. (12) No formal review is required for the document. (13) All references have been defined between normative and informative and the assignments look reasonable. (14) There is currently a dependency on draft irtf-cfrg-eddsa, but that document is going through final approval process and expected to complete. (15) The document has two downward normative references: RFC7748 - Is the algorithm definition for ECDH keys. It is normal to down reference algorithm documents. draft-ietf-cfrg-eddsa - Is the algorithm definition for EdDSA. It is normal to down reference algorithm documents (16) This document is new and modifies no existing documents. The JOSE algorithm registries are updated which indirectly updates the set of core JOSE documents. (17) I have gone through the document as shepherd to validate the IANA consideration registrations. They appear to be correct and I expect no problem also validating them as the DE for the registry. (18) This document does not define any new IANA registries. (19) The document contains no formal language sections. |
2016-07-20
|
05 | Jim Schaad | Responsible AD changed to Kathleen Moriarty |
2016-07-20
|
05 | Jim Schaad | IETF WG state changed to Submitted to IESG for Publication from In WG Last Call |
2016-07-20
|
05 | Jim Schaad | IESG state changed to Publication Requested |
2016-07-20
|
05 | Jim Schaad | IESG process started in state Publication Requested |
2016-07-20
|
05 | Jim Schaad | Changed document writeup |
2016-07-08
|
05 | Ilari Liusvaara | New version available: draft-ietf-jose-cfrg-curves-05.txt |
2016-07-07
|
04 | Ilari Liusvaara | New version available: draft-ietf-jose-cfrg-curves-04.txt |
2016-07-01
|
03 | Ilari Liusvaara | New version available: draft-ietf-jose-cfrg-curves-03.txt |
2016-06-10
|
02 | Jim Schaad | Changed document writeup |
2016-06-04
|
02 | Jim Schaad | Changed consensus to Yes from Unknown |
2016-06-04
|
02 | Jim Schaad | Intended Status changed to Proposed Standard from None |
2016-06-03
|
02 | Jim Schaad | Notification list changed to "Jim Schaad" <ietf@augustcellars.com> from "Jim Schaad" <jimsch@augustcellars.com>, "Jim Schaad" <ietf@augustcellars.com> |
2016-06-03
|
02 | Jim Schaad | Notification list changed to "Jim Schaad" <jimsch@augustcellars.com>, "Jim Schaad" <ietf@augustcellars.com> from "Jim Schaad" <jimsch@augustcellars.com> |
2016-06-03
|
02 | Jim Schaad | Document shepherd changed to Jim Schaad |
2016-06-03
|
02 | Jim Schaad | Notification list changed to "Jim Schaad" <jimsch@augustcellars.com> |
2016-06-03
|
02 | Jim Schaad | Document shepherd changed to Jim Schaad |
2016-06-03
|
02 | Jim Schaad | IETF WG state changed to In WG Last Call from WG Document |
2016-05-24
|
02 | Ilari Liusvaara | New version available: draft-ietf-jose-cfrg-curves-02.txt |
2016-03-21
|
01 | Ilari Liusvaara | New version available: draft-ietf-jose-cfrg-curves-01.txt |
2015-12-28
|
00 | (System) | This document now replaces draft-liusvaara-jose-cfrg-curves instead of None |
2015-12-28
|
00 | Ilari Liusvaara | New version available: draft-ietf-jose-cfrg-curves-00.txt |