Skip to content

Commit 7451b28

Browse files
selfissuedselfissued
authored
draft-jones-webauthn-cose-algorithms-01 (w3c#895)
Tracks initial IANA COSE Algorithm registrations that have been made
1 parent b8e3f64 commit 7451b28

3 files changed

+81
-50
lines changed

‎draft-jones-webauthn-cose-algorithms.html

+20-12
Original file line numberDiff line numberDiff line change
@@ -395,8 +395,8 @@
395395
<link rel="schema.dct" href="http://purl.org/dc/terms/" />
396396

397397
<meta name="dct.creator" content="Jones, M." />
398-
<meta name="dct.identifier" content="urn:ietf:id:draft-jones-webauthn-cose-algorithms-00" />
399-
<meta name="dct.issued" scheme="ISO8601" content="2018-03-23" />
398+
<meta name="dct.identifier" content="urn:ietf:id:draft-jones-webauthn-cose-algorithms-01" />
399+
<meta name="dct.issued" scheme="ISO8601" content="2018-05-02" />
400400
<meta name="dct.abstract" content="The W3C Web Authentication (WebAuthn) specification uses COSE algorithm identifiers. This specification registers algorithms in the IANA &quot;COSE Algorithms&quot; registry that are used by WebAuthn that are not already registered. Also, they are registered in the IANA &quot;JSON Web Signature and Encryption Algorithms&quot; registry, when not already registered there. " />
401401
<meta name="description" content="The W3C Web Authentication (WebAuthn) specification uses COSE algorithm identifiers. This specification registers algorithms in the IANA &quot;COSE Algorithms&quot; registry that are used by WebAuthn that are not already registered. Also, they are registered in the IANA &quot;JSON Web Signature and Encryption Algorithms&quot; registry, when not already registered there. " />
402402

@@ -417,10 +417,10 @@
417417
</tr>
418418
<tr>
419419
<td class="left">Intended status: Informational</td>
420-
<td class="right">March 23, 2018</td>
420+
<td class="right">May 2, 2018</td>
421421
</tr>
422422
<tr>
423-
<td class="left">Expires: September 24, 2018</td>
423+
<td class="left">Expires: November 3, 2018</td>
424424
<td class="right"></td>
425425
</tr>
426426

@@ -429,15 +429,15 @@
429429
</table>
430430

431431
<p class="title">COSE Algorithms for Web Authentication (WebAuthn)<br />
432-
<span class="filename">draft-jones-webauthn-cose-algorithms-00</span></p>
432+
<span class="filename">draft-jones-webauthn-cose-algorithms-01</span></p>
433433

434434
<h1 id="rfc.abstract"><a href="#rfc.abstract">Abstract</a></h1>
435435
<p>The W3C Web Authentication (WebAuthn) specification uses COSE algorithm identifiers. This specification registers algorithms in the IANA "COSE Algorithms" registry that are used by WebAuthn that are not already registered. Also, they are registered in the IANA "JSON Web Signature and Encryption Algorithms" registry, when not already registered there. </p>
436436
<h1 id="rfc.status"><a href="#rfc.status">Status of This Memo</a></h1>
437437
<p>This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.</p>
438438
<p>Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.</p>
439439
<p>Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."</p>
440-
<p>This Internet-Draft will expire on September 24, 2018.</p>
440+
<p>This Internet-Draft will expire on November 3, 2018.</p>
441441
<h1 id="rfc.copyrightnotice"><a href="#rfc.copyrightnotice">Copyright Notice</a></h1>
442442
<p>Copyright (c) 2018 IETF Trust and the persons identified as the document authors. All rights reserved.</p>
443443
<p>This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.</p>
@@ -526,7 +526,7 @@ <h1 id="rfc.section.2">
526526
</tr>
527527
<tr>
528528
<td class="left">RS1</td>
529-
<td class="left">TBD (requested assignment -262)</td>
529+
<td class="left">TBD (requested assignment -65535)</td>
530530
<td class="left">SHA-1</td>
531531
<td class="left">RSASSA-PKCS1-v1_5 w/ SHA-1</td>
532532
</tr>
@@ -576,10 +576,10 @@ <h1 id="rfc.section.3.1">
576576

577577
<ul>
578578
<li>Name: RS1 </li>
579-
<li>Value: TBD (requested assignment -262) </li>
579+
<li>Value: TBD (requested assignment -65535) </li>
580580
<li>Description: RSASSA-PKCS1-v1_5 w/ SHA-1 </li>
581581
<li>Reference: <a href="#RSASSA-PKCS1-v1_5" class="xref">Section 2</a> of this document </li>
582-
<li>Recommended: No </li>
582+
<li>Recommended: Deprecated </li>
583583
</ul>
584584

585585
<p> </p>
@@ -597,7 +597,7 @@ <h1 id="rfc.section.4.2">
597597
<h1 id="rfc.section.4.3">
598598
<a href="#rfc.section.4.3">4.3.</a> <a href="#RSASSA-PKCS1-v1_5_SHA-1_considerations" id="RSASSA-PKCS1-v1_5_SHA-1_considerations">RSASSA-PKCS1-v1_5 with SHA-1 Security Considerations</a>
599599
</h1>
600-
<p id="rfc.section.4.3.p.1">The security considerations on the use of the SHA-1 hash function from <a href="#RFC6194" class="xref">[RFC6194]</a> apply in this specification. For that reason, the "RS1" algorithm is registered as "Not Recommended". It MUST NOT be used by COSE implementations. </p>
600+
<p id="rfc.section.4.3.p.1">The security considerations on the use of the SHA-1 hash function from <a href="#RFC6194" class="xref">[RFC6194]</a> apply in this specification. For that reason, the "RS1" algorithm is registered as "Deprecated". It MUST NOT be used by COSE implementations. </p>
601601
<p id="rfc.section.4.3.p.2">A COSE algorithm identifier for this algorithm is nonetheless being registered because deployed TPMs continue to use it, and therefore WebAuthn implementations need a COSE algorithm identifier for "RS1" when TPM attestations using this algorithm are being represented. </p>
602602
<h1 id="rfc.references">
603603
<a href="#rfc.references">5.</a> References</h1>
@@ -670,10 +670,18 @@ <h1 id="rfc.references.2">
670670
</tr>
671671
</tbody></table>
672672
<h1 id="rfc.acknowledgements"><a href="#rfc.acknowledgements">Acknowledgements</a></h1>
673-
<p id="rfc.section.A.p.1">TBD </p>
673+
<p id="rfc.section.A.p.1">Thanks to John Fontana, Jeff Hodges, Tony Nadalin, Jim Schaad, G&#246;ran Selander, Wendy Seltzer, Sean Turner, and Samuel Weiler for their roles in registering these algorithm identifiers. </p>
674674
<h1 id="rfc.document_history"><a href="#rfc.document_history">Document History</a></h1>
675675
<p id="rfc.section.B.p.1">[[ to be removed by the RFC Editor before publication as an RFC ]] </p>
676-
<p id="rfc.section.B.p.2">-00 </p>
676+
<p id="rfc.section.B.p.2">-01 </p>
677+
678+
<ul>
679+
<li>Updated the requested RS1 value from -262 to -65535 to match the temporary registration made on 2018-04-19. </li>
680+
<li>Populated the Acknowledgements section. </li>
681+
</ul>
682+
683+
<p> </p>
684+
<p id="rfc.section.B.p.3">-00 </p>
677685

678686
<ul><li>Initial version. </li></ul>
679687

‎draft-jones-webauthn-cose-algorithms.txt

+30-30
Original file line numberDiff line numberDiff line change
@@ -4,12 +4,12 @@
44

55
WebAuthn Working Group M. Jones
66
Internet-Draft Microsoft
7-
Intended status: Informational March 23, 2018
8-
Expires: September 24, 2018
7+
Intended status: Informational May 2, 2018
8+
Expires: November 3, 2018
99

1010

1111
COSE Algorithms for Web Authentication (WebAuthn)
12-
draft-jones-webauthn-cose-algorithms-00
12+
draft-jones-webauthn-cose-algorithms-01
1313

1414
Abstract
1515

@@ -35,7 +35,7 @@ Status of This Memo
3535
time. It is inappropriate to use Internet-Drafts as reference
3636
material or to cite them other than as "work in progress."
3737

38-
This Internet-Draft will expire on September 24, 2018.
38+
This Internet-Draft will expire on November 3, 2018.
3939

4040
Copyright Notice
4141

@@ -53,9 +53,9 @@ Copyright Notice
5353

5454

5555

56-
Jones Expires September 24, 2018 [Page 1]
56+
Jones Expires November 3, 2018 [Page 1]
5757

58-
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
58+
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn) May 2018
5959

6060

6161
the Trust Legal Provisions and are provided without warranty as
@@ -109,9 +109,9 @@ Table of Contents
109109

110110

111111

112-
Jones Expires September 24, 2018 [Page 2]
112+
Jones Expires November 3, 2018 [Page 2]
113113

114-
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
114+
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn) May 2018
115115

116116

117117
The RSASSA-PKCS1-v1_5 algorithms specified in this document are in
@@ -127,7 +127,7 @@ Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
127127
| RS512 | TBD (requested | SHA-512 | RSASSA-PKCS1-v1_5 w/ |
128128
| | assignment -259) | | SHA-512 |
129129
| RS1 | TBD (requested | SHA-1 | RSASSA-PKCS1-v1_5 w/ |
130-
| | assignment -262) | | SHA-1 |
130+
| | assignment -65535) | | SHA-1 |
131131
+-------+-------------------------+---------+-----------------------+
132132

133133
Table 1: RSASSA-PKCS1-v1_5 Algorithm Values
@@ -158,16 +158,16 @@ Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
158158
o Recommended: No
159159

160160
o Name: RS1
161-
o Value: TBD (requested assignment -262)
161+
o Value: TBD (requested assignment -65535)
162162
o Description: RSASSA-PKCS1-v1_5 w/ SHA-1
163163
o Reference: Section 2 of this document
164-
o Recommended: No
164+
o Recommended: Deprecated
165165

166166

167167

168-
Jones Expires September 24, 2018 [Page 3]
168+
Jones Expires November 3, 2018 [Page 3]
169169

170-
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
170+
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn) May 2018
171171

172172

173173
4. Security Considerations
@@ -189,8 +189,8 @@ Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
189189

190190
The security considerations on the use of the SHA-1 hash function
191191
from [RFC6194] apply in this specification. For that reason, the
192-
"RS1" algorithm is registered as "Not Recommended". It MUST NOT be
193-
used by COSE implementations.
192+
"RS1" algorithm is registered as "Deprecated". It MUST NOT be used
193+
by COSE implementations.
194194

195195
A COSE algorithm identifier for this algorithm is nonetheless being
196196
registered because deployed TPMs continue to use it, and therefore
@@ -221,9 +221,9 @@ Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
221221

222222

223223

224-
Jones Expires September 24, 2018 [Page 4]
224+
Jones Expires November 3, 2018 [Page 4]
225225

226-
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
226+
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn) May 2018
227227

228228

229229
[RFC7518] Jones, M., "JSON Web Algorithms (JWA)", RFC 7518,
@@ -270,22 +270,29 @@ Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
270270

271271
Acknowledgements
272272

273-
TBD
274-
273+
Thanks to John Fontana, Jeff Hodges, Tony Nadalin, Jim Schaad, Goeran
274+
Selander, Wendy Seltzer, Sean Turner, and Samuel Weiler for their
275+
roles in registering these algorithm identifiers.
275276

276277

277278

278279

279-
280-
Jones Expires September 24, 2018 [Page 5]
280+
Jones Expires November 3, 2018 [Page 5]
281281

282-
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn March 2018
282+
Internet-DraCOSE Algorithms for Web Authentication (WebAuthn) May 2018
283283

284284

285285
Document History
286286

287287
[[ to be removed by the RFC Editor before publication as an RFC ]]
288288

289+
-01
290+
291+
o Updated the requested RS1 value from -262 to -65535 to match the
292+
temporary registration made on 2018-04-19.
293+
294+
o Populated the Acknowledgements section.
295+
289296
-00
290297

291298
o Initial version.
@@ -326,11 +333,4 @@ Author's Address
326333

327334

328335

329-
330-
331-
332-
333-
334-
335-
336-
Jones Expires September 24, 2018 [Page 6]
336+
Jones Expires November 3, 2018 [Page 6]

‎draft-jones-webauthn-cose-algorithms.xml

+31-8
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
<?xml version='1.0' encoding='us-ascii'?>
1+
<?xml version='1.0' encoding='UTF-8'?>
22

33
<?xml-stylesheet type='text/xsl' href='http://xml2rfc.tools.ietf.org/authoring/rfc2629.xslt' ?>
44
<!DOCTYPE rfc SYSTEM "rfc2629.dtd">
@@ -14,7 +14,7 @@
1414

1515
<rfc category="info"
1616
ipr="trust200902"
17-
docName="draft-jones-webauthn-cose-algorithms-00">
17+
docName="draft-jones-webauthn-cose-algorithms-01">
1818
<front>
1919

2020
<title>COSE Algorithms for Web Authentication (WebAuthn)</title>
@@ -27,7 +27,7 @@
2727
</address>
2828
</author>
2929

30-
<date day="23" month="March" year="2018" />
30+
<date day="2" month="May" year="2018" />
3131

3232
<area>Security</area>
3333
<workgroup>WebAuthn Working Group</workgroup>
@@ -105,7 +105,7 @@
105105
<c>RSASSA-PKCS1-v1_5 w/ SHA-512</c>
106106

107107
<c>RS1</c>
108-
<c>TBD (requested assignment -262)</c>
108+
<c>TBD (requested assignment -65535)</c>
109109
<c>SHA-1</c>
110110
<c>RSASSA-PKCS1-v1_5 w/ SHA-1</c>
111111

@@ -183,7 +183,7 @@
183183
Name: RS1
184184
</t>
185185
<t>
186-
Value: TBD (requested assignment -262)
186+
Value: TBD (requested assignment -65535)
187187
</t>
188188
<t>
189189
Description: RSASSA-PKCS1-v1_5 w/ SHA-1
@@ -192,7 +192,7 @@
192192
Reference: <xref target="RSASSA-PKCS1-v1_5"/> of this document
193193
</t>
194194
<t>
195-
Recommended: No
195+
Recommended: Deprecated
196196
</t>
197197
</list>
198198
</t>
@@ -224,7 +224,7 @@
224224
<t>
225225
The security considerations on the use of the SHA-1 hash function
226226
from <xref target="RFC6194"/> apply in this specification.
227-
For that reason, the "RS1" algorithm is registered as "Not Recommended".
227+
For that reason, the "RS1" algorithm is registered as "Deprecated".
228228
It MUST NOT be used by COSE implementations.
229229
</t>
230230
<t>
@@ -355,7 +355,17 @@
355355
<section title="Acknowledgements" anchor="Acknowledgements" numbered="no">
356356

357357
<t>
358-
TBD
358+
Thanks to
359+
John Fontana,
360+
Jeff Hodges,
361+
Tony Nadalin,
362+
Jim Schaad,
363+
Göran Selander,
364+
Wendy Seltzer,
365+
Sean Turner,
366+
and
367+
Samuel Weiler
368+
for their roles in registering these algorithm identifiers.
359369
</t>
360370
</section>
361371

@@ -364,6 +374,19 @@
364374
[[ to be removed by the RFC Editor before publication as an RFC ]]
365375
</t>
366376

377+
<t>
378+
-01
379+
<list style='symbols'>
380+
<t>
381+
Updated the requested RS1 value from -262 to -65535
382+
to match the temporary registration made on 2018-04-19.
383+
</t>
384+
<t>
385+
Populated the Acknowledgements section.
386+
</t>
387+
</list>
388+
</t>
389+
367390
<t>
368391
-00
369392
<list style='symbols'>

0 commit comments

Comments
 (0)