Subject: Re: [Tls-reg-review] Request to register values in TLS SignatureScheme registry

From: Benjamin Kaduk <[email-masked]>
Date: Sat, 7 Mar 2020 19:36:24 -0800

It looks like this is waiting for Nick and/or Yoav?

-Ben

On Sat, Feb 29, 2020 at 04:37:28PM +0000, Salz, Rich wrote:
> This request seems complete enough to me.  I approve.  I’ll let the next approver assign the codeponts :)
> 
> From: David Benjamin <davidben=[email-masked]>
> Date: Friday, February 28, 2020 at 5:52 PM
> To: "[email-masked]" <[email-masked]>, "[email-masked]" <[email-masked]>
> Cc: Adam Langley <[email-masked]>
> Subject: [Tls-reg-review] Request to register values in TLS SignatureScheme registry
> 
> I’d like to request SignatureScheme [1] code points for PKCS#1 v1.5 SignatureScheme types as specified in [2]. Not to be marked recommended or anything. Please let me know if you need additional information.
> 
> Thanks!
> 
> David
> 
> [1] https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-signaturescheme<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.iana.org_assignments_tls-2Dparameters_tls-2Dparameters.xhtml-23tls-2Dsignaturescheme&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=9GOiQNw10fizmVfHMnzf77Y1RjlWOas1glH1qzN_zRM&e=>
> [2] https://tools.ietf.org/html/draft-davidben-tls13-pkcs1-00#section-5<https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_draft-2Ddavidben-2Dtls13-2Dpkcs1-2D00-23section-2D5&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=fVUKpTNwu5_mRT24j5LtdLS9UFo_ZnPkBnlCIHBBY3k&e=>

> _______________________________________________
> tls-reg-review mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/tls-reg-review

---

From: Yoav Nir <[email-masked]>
Date: Sun, 8 Mar 2020 19:44:36 +0200

Sorry about that.

Yes, I approve as well. 

I suggest the values 0x0420, 0x0520, and 0x0620  for the algorithms rsa_pkcs1_sha256_legacy, rsa_pkcs1_sha384_legacy, and rsa_pkcs1_sha512_legacy respectively.

The reason being that other algorithms also use 0x04xx, 0x05xx, and 0x06xx for things with sha256, sha384, and sha512, and setting 0x--20 for pkcs1_legacy is far enough from the recommended values to leave room for newer algorithms.

Yoav 

> On 8 Mar 2020, at 5:36, Benjamin Kaduk <[email-masked]> wrote:
>

---

From: Yoav Nir <[email-masked]>
Date: Mon, 9 Mar 2020 23:00:01 +0200

And now adding IANA so that my and Rich’s approval actually does something…

Yoav

> On 8 Mar 2020, at 19:44, Yoav Nir <[email-masked]> wrote:
> 
> Sorry about that.
> 
> Yes, I approve as well. 
> 
>> On 8 Mar 2020, at 5:36, Benjamin Kaduk <[email-masked] <mailto:[email-masked]>> wrote:
>> 
>>> From: David Benjamin <davidben=[email-masked] <mailto:davidben=[email-masked]>>
>>> To: "[email-masked] <mailto:[email-masked]>" <[email-masked] <mailto:[email-masked]>>, "[email-masked] <mailto:[email-masked]>" <[email-masked] <mailto:[email-masked]>>
>>> Cc: Adam Langley <[email-masked] <mailto:[email-masked]>>
>>> [1] https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-signaturescheme<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.iana.org_assignments_tls-2Dparameters_tls-2Dparameters.xhtml-23tls-2Dsignaturescheme&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=9GOiQNw10fizmVfHMnzf77Y1RjlWOas1glH1qzN_zRM&e=> <https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-signaturescheme<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.iana.org_assignments_tls-2Dparameters_tls-2Dparameters.xhtml-23tls-2Dsignaturescheme&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=9GOiQNw10fizmVfHMnzf77Y1RjlWOas1glH1qzN_zRM&e=>>
>>> [2] https://tools.ietf.org/html/draft-davidben-tls13-pkcs1-00#section-5<https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_draft-2Ddavidben-2Dtls13-2Dpkcs1-2D00-23section-2D5&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=fVUKpTNwu5_mRT24j5LtdLS9UFo_ZnPkBnlCIHBBY3k&e=> <https://tools.ietf.org/html/draft-davidben-tls13-pkcs1-00#section-5<https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_draft-2Ddavidben-2Dtls13-2Dpkcs1-2D00-23section-2D5&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=fVUKpTNwu5_mRT24j5LtdLS9UFo_ZnPkBnlCIHBBY3k&e=>>
>> 
>>> [email-masked] <mailto:[email-masked]>
>> [email-masked] <mailto:[email-masked]>

---

From: "Amanda Baber via RT" <[email-masked]>
Date: Tue, 10 Mar 2020 01:56:03 +0000

Hi all,

We've added the following entries to the TLS SignatureScheme registry:

Value: 0x0420
Description: rsa_pkcs1_sha256_legacy
Recommended: N
Reference: [draft-davidben-tls13-pkcs1-00]

Value: 0x0520
Description: rsa_pkcs1_sha384_legacy
Recommended: N
Reference: [draft-davidben-tls13-pkcs1-00]

Value: 0x0620
Description: rsa_pkcs1_sha512_legacy
Recommended: N
Reference: [draft-davidben-tls13-pkcs1-00]

Please see
https://www.iana.org/assignments/tls-parameters

We'll update the references after the IESG approves the document for publication. 

Best regards,

Amanda Baber
Lead IANA Services Specialist

On Mon Mar 09 21:00:23 2020, [email-masked] wrote:
> > I suggest the values 0x0420, 0x0520, and 0x0620  for the algorithms
> > rsa_pkcs1_sha256_legacy, rsa_pkcs1_sha384_legacy, and
> > rsa_pkcs1_sha512_legacy respectively.
> >
> > The reason being that other algorithms also use 0x04xx, 0x05xx, and
> > 0x06xx for things with sha256, sha384, and sha512, and setting 0x--20
> > for pkcs1_legacy is far enough from the recommended values to leave
> > room for newer algorithms.
> >
> > Yoav
> >
> >>> From: David Benjamin <davidben=[email-masked]
> >>> <mailto:davidben=[email-masked]>>
> >>> To: "[email-masked] <mailto:[email-masked]>"
> >>> <[email-masked] <mailto:[email-masked]>>, "tls-
> >>> [email-masked] <mailto:[email-masked]>" <[email-masked]
> >>> <mailto:[email-masked]>>
> >>> I’d like to request SignatureScheme [1] code points for PKCS#1 v1.5
> >>> SignatureScheme types as specified in [2]. Not to be marked
> >>> recommended or anything. Please let me know if you need additional
> >>> information.
> >>>
> >>> Thanks!
> >>>
> >>> David
> >>>
> >>> [1] https://www.iana.org/assignments/tls-parameters/tls-
> >>> parameters.xhtml#tls-
> >>> signaturescheme<https://urldefense.proofpoint.com/v2/url?u=https-
> >>> 3A__www.iana.org_assignments_tls-2Dparameters_tls-
> >>> 2Dparameters.xhtml-23tls-
> >>> 2Dsignaturescheme&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-
> >>> w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=9GOiQNw10fizmVfHMnzf77Y1RjlWOas1glH1qzN_zRM&e=>
> >>> <https://www.iana.org/assignments/tls-parameters/tls-
> >>> parameters.xhtml#tls-
> >>> signaturescheme<https://urldefense.proofpoint.com/v2/url?u=https-
> >>> 3A__www.iana.org_assignments_tls-2Dparameters_tls-
> >>> 2Dparameters.xhtml-23tls-
> >>> 2Dsignaturescheme&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-
> >>> w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=9GOiQNw10fizmVfHMnzf77Y1RjlWOas1glH1qzN_zRM&e=>>
> >>> [2] https://tools.ietf.org/html/draft-davidben-tls13-pkcs1-
> >>> 00#section-5<https://urldefense.proofpoint.com/v2/url?u=https-
> >>> 3A__tools.ietf.org_html_draft-2Ddavidben-2Dtls13-2Dpkcs1-2D00-
> >>> 23section-
> >>> 2D5&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-
> >>> w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=fVUKpTNwu5_mRT24j5LtdLS9UFo_ZnPkBnlCIHBBY3k&e=>
> >>> <https://tools.ietf.org/html/draft-davidben-tls13-pkcs1-00#section-
> >>> 5<https://urldefense.proofpoint.com/v2/url?u=https-
> >>> 3A__tools.ietf.org_html_draft-2Ddavidben-2Dtls13-2Dpkcs1-2D00-
> >>> 23section-
> >>> 2D5&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-
> >>> w&m=Ra8QBVclQgwq1Qpbl9KO3WMk1u5XZDNLp44lWigraWM&s=fVUKpTNwu5_mRT24j5LtdLS9UFo_ZnPkBnlCIHBBY3k&e=>>
> >>