Re: [KEYPROV] Updated PSKC draft

I added two more schema adjustment in this version as follows.

1. Use xml:id in place of ID of type xs:ID per Pasi's suggestion. I
agree with him that it is a better practice.
2. xmlenc schema location points to a dated version instead of the
general last version. The reason for this is that the same schema should
be used if some dependent namespace such as PKCS#5 XML also imports the
xmlenc namespace and its schema file location.

<xs:import namespace="http://www.w3.org/2001/04/xmlenc#"
schemaLocation="http://www.w3.org/TR/xmlenc-core/xenc-schema.xsd"/>

to

<xs:import namespace="http://www.w3.org/2001/04/xmlenc#"
schemaLocation="
http://www.w3.org/TR/2002/REC-xmlenc-core-20021210/xenc-schema.xsd"/>

Please review.

- Ming

________________________________

	From: Pei, Mingliang 
	Sent: Tuesday, October 07, 2008 8:44 PM
	To: Philip Hoyer; andrea.doherty@rsa.com;
hannes.tschofenig@gmx.net; Hallam-Baker, Phillip;
SMachani@DIVERSINET.COM
	Cc: keyprov@ietf.org
	Subject: Updated PSKC draft

	Attached please find the latest revision updated today. The
changes in this revision include the following:

	Main changes:

	- IANA section: 

	1. Added additional constraints that incorporates Pasi's
suggestions and Hannes's text for HOTP as sample.
	2. Also changed for OCRA, TOTP, and SecurID-AES and
SecurID-AES-Counter sections.

	Minor changes:

	1. Changed "This work is a joint effort by the members of
OATH..." to "This work is based on earlier work by the members of
OATH...".

	2. "This Internet draft describes" to ""This document describes"

	3. PKCS#12 comparison section: remove argument about small size.
Focus on explicit attribute and web service.

	4. Change "Encryption Key" to "Key Encryption Key"

	5. Replace "cryptomodule" with "Cryptographic Module"

	6. Section 3.1.3/3.1.4, expand acronyms "SD" and "OTA"

	7. Section 5.1: "keyed digest" -> "Message Authentication Code
(MAC)"

	8. Section 5.1: "signature" -> "signature or Message
Authentication Code" (MAC)", 

	9. Section 5.1, typo "defintion"

	10. Section 5.1, the example about "Extensions" are fixed

	11. Section 5.4: KeyAlgorithm is made to be mandatory.

	12. Section 6.1.1: Only kw-aes128 is now set as mandatory. All
the others are set as optional. Also changed to list Camellia ones in
the optional list.

	The list above doesn't have all the changes pointed out by Pasi.
I will include the remaining changes in the next update.

	- Ming

________________________________

		From: Philip Hoyer
[mailto:philip.hoyer@actividentity.com] 
		Sent: Tuesday, October 07, 2008 8:52 AM
		To: andrea.doherty@rsa.com; hannes.tschofenig@gmx.net;
Hallam-Baker, Phillip; SMachani@DIVERSINET.COM; Pei, Mingliang
		Subject: Keyprov call minutes 7/10/08

		Attendees: Andrea, Hannes, Phillip Hallam Baker, Ming,
Salah

		Andrea to review RSA algorithm definition

		Philip Hoyer to add/review ActivIdentity algorithms

		Ming to send latest revision a revision today 

		We are planning to have one revision to be submitted to
IETF before November 3rd.

		Philip Hoyer asked about SKSML and it was defined that
the charter is different but Philip Hoyer to do an analysis in terms of
key container and to send Arshad Noor's paper and presentation to the
authors.

		Ming mentioned that there are some comments from Pasi
that require schema change. Agreement that they should be sent around in
a separate email thread for discussion

		Quick discussion about IETF. Hannes stressed that it is
important that authors will be there or at least let everyone know in
terms of attendance. But not repeat what happened in Dublin. Andrea will
come.

		________________________________

		Philip Hoyer 

		Senior Architect - Office of CTO

		ActivIdentity (UK)

		117 Waterloo Road

		London SE1 8UL

		Telephone: +44 (0) 20 7960 0220

		Fax: +44 (0) 20 7902 1985

		Private and confidential: This message and any
attachments may contain

		privileged / confidential information. If you are not an
intended recipient,

		you must not copy, distribute, discuss or take any
action in reliance on it.

		If you have received this communication in error, please
notify the sender

		and delete this message immediately.

Re: [KEYPROV] Updated PSKC draft

Attachment: draft-ietf-keyprov-portable-symmetric-key-container-06-wip-20081015.txt