Hi Anders,
None of this is magic. You'd write a draft in the COSE working group that
registers these algorithms in the COSE algorithms registry. You could model it
on https://www.rfc-editor.org/rfc/rfc8812.html, which also registered existing
algorithms for COSE.
It would be a short draft.
-- Mike
-----Original Message-----
From: Carsten Bormann <[email protected]>
Sent: Monday, December 30, 2024 6:26 AM
To: Anders Rundgren <[email protected]>
Cc: [email protected]; cose <[email protected]>
Subject: [Cbor] Re: A128CBC-HS256 etc. for COSE?
On 2024-12-30, at 14:16, Anders Rundgren <[email protected]> wrote:
>
> Are A128CBC-HS256 and friends considered obsolete or redundant algorithms?
> If not, I would like to define COSE algorithm IDs for those algorithms in
> order to maintain a more consistent JOSE/COSE crypto library.
This would be a question best discussed in the COSE WG, but ultimately the
designated experts (Göran Selander, Derek Atkins, Sean Turner) would respond to
a code point registration request along the lines of Section 10.4 of RFC 9053
[1].
There note in particular the passage about "additional documentation on
security analysis of the algorithm" and the expectation "to meet the security
requirements of the community" (I read your question as a way to elicit more
information about the latter).
[1]: https://www.rfc-editor.org/rfc/rfc9053#name-expert-review-instructions
Grüße, Carsten
_______________________________________________
CBOR mailing list -- [email protected]
To unsubscribe send an email to [email protected]
_______________________________________________
COSE mailing list -- [email protected]
To unsubscribe send an email to [email protected]
