#174: Section 5.1 Message Enryption
A. Step 1 - remove the parenthetical as it is part of the definition of
alg
B. Step 2 - should have a comment that the CEK MUST be generated fresh for
every message that is created.
C. Steps 2, 3, and 4 would be better treated as sub-steps. At a minimum
these should be broken down so that things like the term Otherwise in step
5 are removed - this confuses the reader because it is not clear if this
is otherwise step 4 or otherwise steps 2 3 and 4.
D. CEK being empty octet sequence should be a function of the key
algorithm definition and not part of this. It could be omitted rather
than a zero sequence for the JSON serialization
F. For step 5 - you should state that these methods are not compatible
with multiple recipients
G. Step 12 - turning the plain text into the octet sequence is a
requirement for the application and not for JWE. Delete this step.
Include new section on plain text preparation from earlier email.
H. Step 13 - this is a per-recipient step and should therefore be before
step 8.
I. Step 13 - Should consider the duplication check on member names in the
header for any recipient.
J. Step 14 - remove the parenthetical as it is should be discussed in the
serialization if at all. Setting it to the empty string should be a
function of the JSON serialization and not here. There is an interesting
question if this should be "{}" instead of empty.
K. Step 15 - kill the word ASCII
L. Step 16 - kill the parenthetical - it is duplicate info from
elsewhere.
M. Step 20 - delete everything after the first sentence. Details of how
to do the serialization belong in section 7
--
-------------------------+-------------------------------------------------
Reporter: | Owner: draft-ietf-jose-json-web-
[email protected] | [email protected]
Type: defect | Status: new
Priority: Editorial | Milestone:
Component: json-web- | Version:
encryption | Keywords:
Severity: - |
-------------------------+-------------------------------------------------
Ticket URL: <http://trac.tools.ietf.org/wg/jose/trac/ticket/174>
jose <http://tools.ietf.org/jose/>
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose