Subject: [KEYPROV] DSKPP -07 draft ready for review

From: <[email-masked]>
Date: Sun, 8 Feb 2009 01:35:02 -0500

All,
Please find dskpp -07 draft with editorial changes to make the document more readable as per Pasi's recommendations of November.

Also included is change to conformance requirements to recommend three key wrapping mechanisms (kw-aes128 w/ and w/out padding, aes-128-cbc) rather than mandate only one.

Finally, the following simplications were made to reduce the number of allowable combinations/options for client authentication:
1. Eliminated client authentication option that relied on client cert/key pair used with TLS client auth
   NOTE: For two-pass, Security Considerations still recommends running protocol over transport channel that can provide confidentiality 

2. Combined authentication code and PBKW since both use a one-time secret value  

3. Replaced trigger nonce in <KeyProvTrigger> with authentication data (which is derived from authentication code)
 
Please review.
Thanks,
Andrea
 <<draft-ietf-keyprov-dskpp-07-wip.txt>>