[secdir] secdir review for draft-ietf-pkix-sha2-dsa-ecdsa-10.txt

Stephen Hanna <shanna@juniper.net> Tue, 20 October 2009 17:14 UTC

Return-Path: <shanna@juniper.net>
X-Original-To: secdir@core3.amsl.com
Delivered-To: secdir@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 87FB428C146 for <secdir@core3.amsl.com>; Tue, 20 Oct 2009 10:14:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IWTZGVVo05v1 for <secdir@core3.amsl.com>; Tue, 20 Oct 2009 10:14:10 -0700 (PDT)
Received: from exprod7og122.obsmtp.com (exprod7og122.obsmtp.com [64.18.2.22]) by core3.amsl.com (Postfix) with ESMTP id 91B533A68AC for <secdir@ietf.org>; Tue, 20 Oct 2009 10:14:07 -0700 (PDT)
Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob122.postini.com ([64.18.6.12]) with SMTP ID DSNKSt3v52ky6vUEYyNUdpPKWtNyrn+gCerg@postini.com; Tue, 20 Oct 2009 10:14:19 PDT
Received: from p-emfe01-wf.jnpr.net (172.28.145.24) by P-EMHUB03-HQ.jnpr.net (172.24.192.37) with Microsoft SMTP Server (TLS) id 8.1.375.2; Tue, 20 Oct 2009 10:10:37 -0700
Received: from EMBX01-WF.jnpr.net ([fe80::1914:3299:33d9:e43b]) by p-emfe01-wf.jnpr.net ([fe80::d0d1:653d:5b91:a123%11]) with mapi; Tue, 20 Oct 2009 13:10:37 -0400
From: Stephen Hanna <shanna@juniper.net>
To: "secdir@ietf.org" <secdir@ietf.org>
Date: Tue, 20 Oct 2009 13:08:46 -0400
Thread-Topic: secdir review for draft-ietf-pkix-sha2-dsa-ecdsa-10.txt
Thread-Index: AcpRp+vw9ahUqlr+STSUAXn8dc4F/gAAAWPA
Message-ID: <AC6674AB7BC78549BB231821ABF7A9AE8FF43FF1ED@EMBX01-WF.jnpr.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: [secdir] secdir review for draft-ietf-pkix-sha2-dsa-ecdsa-10.txt
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Oct 2009 17:14:11 -0000

Forgot to cc secdir.

Thanks,

Steve 

-----Original Message-----
From: Stephen Hanna 
Sent: Tuesday, October 20, 2009 1:08 PM
To: 'draft-ietf-pkix-sha2-dsa-ecdsa@tools.ietf.org'; iesg@ietf.org
Subject: secdir review for draft-ietf-pkix-sha2-dsa-ecdsa-10.txt

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

This document defines ASN.1 OIDs for DSA and ECDSA digital signatures
with SHA-224, SHA-256, SHA-384 or SHA-512 as hashing algorithms. These
OIDs may be used in X.509 certificates to indicate the signature
algorithm used.

The specification is clear, well conceived, and well written. The
Security Considerations section is brief but it points to documents
that provide an appropriate level of supplementary information. In
summary, I do not have any security concerns related to this document.