Re: [COSE] Format of pkE/enc in HPKE

2022-11-01 Thread Laurence Lundblade
Below... > On Nov 1, 2022, at 2:21 AM, Ilari Liusvaara wrote: > > On Mon, Oct 31, 2022 at 11:45:51AM -0700, Laurence Lundblade wrote: >>> On Oct 31, 2022, at 2:50 AM, Ilari Liusvaara >>> wrote: >>> >>> On Sun, Oct 30, 2022 at 11:29:46PM -0700, Laurence Lundblade wrote: Jumping into

Re: [COSE] COSE Support for AES-CTR and AES-CBC

2022-11-01 Thread Russ Housley
> On Nov 1, 2022, at 6:40 AM, Carsten Bormann wrote: > > On 2022-11-01, at 11:29, Hannes Tschofenig wrote: >> >> when you say “separating AEAD from unauthenticated encryption” are you >> referring to separating the storage of the tag from the encrypted ciphertext? > > I actually meant

Re: [COSE] COSE HPKE

2022-11-01 Thread Hannes Tschofenig
Hi Ilari I would expect that someone write HPKE specifications for all PQC algorithms. Is someone doing this already? Ciao Hannes -Original Message- From: COSE On Behalf Of Ilari Liusvaara Sent: Tuesday, November 1, 2022 1:47 PM To: cose@ietf.org Subject: Re: [COSE] COSE HPKE On Tue,

Re: [COSE] COSE HPKE

2022-11-01 Thread Ilari Liusvaara
On Tue, Nov 01, 2022 at 11:18:33AM +, Hannes Tschofenig wrote: > > You guys talk a lot about how to use PQC algorithms in HPKE for use > with COSE but where are those actually described? HPKE presents unified API, so all that is needed is to be able to store long-term keys with arbitrary KEM

Re: [COSE] COSE HPKE

2022-11-01 Thread Ilari Liusvaara
On Tue, Nov 01, 2022 at 08:00:00PM +0900, AJITOMI Daisuke wrote: > Hi Ilari and Hannes, > > Sorry, I finally checked all of Ilari's comments and proposals today. > > - Instead of registering hpke_sender to Common Header Parameters, > > register encapsulated_key: > > > Why is it necessary to

Re: [COSE] COSE HPKE

2022-11-01 Thread AJITOMI Daisuke
> > You guys talk a lot about how to use PQC algorithms in HPKE for use with > COSE but where are those actually described? Well, I don't really know much about PQC and don't really want to talk about it... If you check my past posts, you will see that I have never used the PQC algorithms as an

Re: [COSE] COSE HPKE

2022-11-01 Thread Hannes Tschofenig
Ilari, Daisuke, You guys talk a lot about how to use PQC algorithms in HPKE for use with COSE but where are those actually described? Ciao Hannes From: AJITOMI Daisuke Sent: Tuesday, November 1, 2022 12:00 PM To: Hannes Tschofenig Cc: Ilari Liusvaara ; cose@ietf.org Subject: Re: [COSE] COSE

Re: [COSE] COSE HPKE

2022-11-01 Thread AJITOMI Daisuke
Hi Ilari and Hannes, Sorry, I finally checked all of Ilari's comments and proposals today. - Instead of registering hpke_sender to Common Header Parameters, > register encapsulated_key: Why is it necessary to define the encapsulated key (enc) independent of HPKE in this COSE-HPKE spec? In

Re: [COSE] COSE Support for AES-CTR and AES-CBC

2022-11-01 Thread Carsten Bormann
On 2022-11-01, at 11:29, Hannes Tschofenig wrote: > > when you say “separating AEAD from unauthenticated encryption” are you > referring to separating the storage of the tag from the encrypted ciphertext? I actually meant separating it in the way COSE_Mac and COSE_Sign are separated in COSE,

Re: [COSE] COSE Support for AES-CTR and AES-CBC

2022-11-01 Thread Hannes Tschofenig
Carsten, when you say “separating AEAD from unauthenticated encryption” are you referring to separating the storage of the tag from the encrypted ciphertext? Ciao Hannes From: COSE On Behalf Of Sophie Schmieg Sent: Monday, October 31, 2022 11:18 PM To: Carsten Bormann Cc: Arciszewski, Scott

Re: [COSE] COSE HPKE

2022-11-01 Thread Ilari Liusvaara
On Mon, Oct 31, 2022 at 11:30:13AM +, Hannes Tschofenig wrote: > Hi Ilari, > > I updated the PR based on your feedback. > > I still have a few question regarding the processing rules. I wonder > whether this procedure introduces fragility just for a very small > byte saving (namely saving

Re: [COSE] Format of pkE/enc in HPKE

2022-11-01 Thread Ilari Liusvaara
On Mon, Oct 31, 2022 at 11:45:51AM -0700, Laurence Lundblade wrote: > > On Oct 31, 2022, at 2:50 AM, Ilari Liusvaara > > wrote: > > > > On Sun, Oct 30, 2022 at 11:29:46PM -0700, Laurence Lundblade wrote: > >> Jumping into this… hopefully I’m up to speed enough to not say > >> something dumb…. >