diff --git a/README.md b/README.md index 7e4a732..bd734a5 100644 --- a/README.md +++ b/README.md @@ -2,9 +2,9 @@ This is the working area for the individual Internet-Draft, "CBOR Object Signing and Encryption (COSE): Headers for carrying and referencing X.509 certificates". -* [Editor's Copy](https://cose-wg.github.io/x509/#go.draft-schaad-cose-x509.html) +* [Editor's Copy](https://cose-wg.github.io/X509/#go.draft-schaad-cose-x509.html) * [Individual Draft](https://tools.ietf.org/html/draft-schaad-cose-x509) -* [Compare Editor's Copy to Individual Draft](https://cose-wg.github.io/x509/#go.draft-schaad-cose-x509.diff) +* [Compare Editor's Copy to Individual Draft](https://cose-wg.github.io/X509/#go.draft-schaad-cose-x509.diff) ## Building the Draft diff --git a/draft-schaad-cose-x509.xml b/draft-schaad-cose-x509.xml index 0ce04c0..a4e165b 100644 --- a/draft-schaad-cose-x509.xml +++ b/draft-schaad-cose-x509.xml @@ -120,6 +120,24 @@ +
+ + + + Should we define an extended key usage? + + + Are there any special certificate valiation text to be added? + + + List of other hash algorithms to be added. + + + Specific security considerations issues. + + + +
@@ -203,7 +221,7 @@ application/pkix-cert application/pkcs7-mime; smime-type="certs-only" - Should we support a PEM type? I cannot find a registered media type for one + application/x-pem-file Should we support a PEM type? I cannot find a registered media type for one As this header element implies a trust relationship, the header parameter MUST be in the protected header bag. @@ -230,7 +248,7 @@ - namelabelvalue typedescription + NameValuevalue typedescription x5bagTBD4COSE_X509An unordered bag of X.509 certificates x5chainTBD3COSE_X509An ordered chain of X.509 certificates @@ -238,8 +256,12 @@ x5uTBD2uriURL pointing to an X.509 certificate + + Below is an equivalent CDDL description of the text above. + +
-COSE_X509 = bstr / [ *certs: bstr ] +COSE_X509 = bstr / [ 2*certs: bstr ] COSE_CertHash = [ hashAlg: (int / tstr), hashValue: bstr ]
@@ -252,7 +274,7 @@ COSE_CertHash = [ hashAlg: (int / tstr), hashValue: bstr ] - NameLabelTypeAlgorithmDescription> + NameValueTypeAlgorithmDescription> static key X.509 thumbprintTBDCOSE_CertHash ECDH-SS+HKDF-256, ECDH-SS+HKDF-512, ECDH-SS+A128KW, ECDH-SS+AES192KW, ECDH-SS+AES256KW Thumbprint for the senders X.509 certificate @@ -307,29 +329,53 @@ COSE_CertHash = [ hashAlg: (int / tstr), hashValue: bstr ]
- Put in the registrations. + IANA is requested to register the new COSE Header items in in the "COSE Header Parameters" registry. +
+
+ + + IANA is requested to register the new COSE Header items in in the "COSE Header Algorithm Parameters" registry. + + + +
- Put in the registrations. + IANA is requested to register the following algorithms in the "COSE Algorithms" registry. + + + Name + Value + Description + Reference + Recommended + SHA-256TBDSHA-2 256-bit Hash[This Document]Yes + SHA-256/64TBDSHA-2 256-bit Hash trucated to 64-bits[This Document]No +
- There are security considerations: - + + + + Self-signed certificates and Trust Anchors + + +
@@ -348,8 +394,10 @@ COSE_CertHash = [ hashAlg: (int / tstr), hashValue: bstr ] &RFC2585; &EDHOC; + +