idnits 2.17.1 draft-hoyer-keyprov-pskc-algorithm-profiles-00.txt: Checking boilerplate required by RFC 5378 and the IETF Trust (see https://trustee.ietf.org/license-info): ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt: ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/checklist : ---------------------------------------------------------------------------- No issues found here. Miscellaneous warnings: ---------------------------------------------------------------------------- == The copyright year in the IETF Trust and authors Copyright Line does not match the current year == Line 358 has weird spacing: '...inition http:...' == Line 502 has weird spacing: '...inition http:...' == Line 606 has weird spacing: '...inition http:...' == Line 710 has weird spacing: '...inition http:...' == Line 813 has weird spacing: '...inition http:...' -- The document date (December 24, 2008) is 5599 days in the past. Is this intentional? Checking references for intended status: Informational ---------------------------------------------------------------------------- No issues found here. Summary: 0 errors (**), 0 flaws (~~), 6 warnings (==), 1 comment (--). Run idnits with the --verbose option for more detailed information about the items above. -------------------------------------------------------------------------------- 2 keyprov P. Hoyer 3 Internet-Draft ActivIdentity 4 Intended status: Informational M. Pei 5 Expires: June 27, 2009 VeriSign 6 S. Machani 7 Diversinet 8 A. Doherty 9 RSA, The Security Division of EMC 10 December 24, 2008 12 Additional Portable Symmetric Key Container (PSKC) Algorithm Profiles 13 draft-hoyer-keyprov-pskc-algorithm-profiles-00.txt 15 Status of this Memo 17 This Internet-Draft is submitted to IETF in full conformance with the 18 provisions of BCP 78 and BCP 79. 20 Internet-Drafts are working documents of the Internet Engineering 21 Task Force (IETF), its areas, and its working groups. Note that 22 other groups may also distribute working documents as Internet- 23 Drafts. 25 Internet-Drafts are draft documents valid for a maximum of six months 26 and may be updated, replaced, or obsoleted by other documents at any 27 time. It is inappropriate to use Internet-Drafts as reference 28 material or to cite them other than as "work in progress." 30 The list of current Internet-Drafts can be accessed at 31 http://www.ietf.org/ietf/1id-abstracts.txt. 33 The list of Internet-Draft Shadow Directories can be accessed at 34 http://www.ietf.org/shadow.html. 36 This Internet-Draft will expire on June 27, 2009. 38 Copyright Notice 40 Copyright (c) 2008 IETF Trust and the persons identified as the 41 document authors. All rights reserved. 43 This document is subject to BCP 78 and the IETF Trust's Legal 44 Provisions Relating to IETF Documents 45 (http://trustee.ietf.org/license-info) in effect on the date of 46 publication of this document. Please review these documents 47 carefully, as they describe your rights and restrictions with respect 48 to this document. 50 Abstract 52 The Portable Symmetric Key Container (PSKC) contains a number of XML 53 elements and XML attributes carrying keys and related information. 54 Not all algorithms, however, are able to use all elements and for 55 other algorithm certain information is mandatory. This lead to the 56 introduction of PSKC algorithm profiles that provide further 57 description about the mandatory and optional information elements and 58 their semantic, including extensions that may be needed. The main 59 PSKC specification defines two PSKC algorithm profiles, namely "HOTP" 60 and "PIN". This document extends the initial set and specifies nine 61 further algorithm profiles for PKSC. 63 Table of Contents 65 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 66 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 4 67 3. OCRA (OATH Challenge Response Algorithm) . . . . . . . . . . . 5 68 4. TOTP (OATH Time based OTP) . . . . . . . . . . . . . . . . . . 7 69 5. SecurID-AES . . . . . . . . . . . . . . . . . . . . . . . . . 9 70 6. SecurID-AES-Counter . . . . . . . . . . . . . . . . . . . . . 11 71 7. SecurID-ALGOR . . . . . . . . . . . . . . . . . . . . . . . . 13 72 8. ActivIdentity-3DES . . . . . . . . . . . . . . . . . . . . . . 15 73 9. ActivIdentity-AES . . . . . . . . . . . . . . . . . . . . . . 18 74 10. ActivIdentity-DES . . . . . . . . . . . . . . . . . . . . . . 21 75 11. ActivIdentity-EVENT . . . . . . . . . . . . . . . . . . . . . 24 76 12. Security Considerations . . . . . . . . . . . . . . . . . . . 26 77 13. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 27 78 14. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 28 79 15. Normative References . . . . . . . . . . . . . . . . . . . . . 29 80 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 30 82 1. Introduction 84 This document specifies a set of algorithm profiles for PKSC, namely 86 OCRA (OATH Challenge Response Algorithm) 88 TOTP (OATH Time based OTP) 90 SecurID-AES 92 SecurID-AES-Counter 94 SecurID-ALGOR 96 ActivIdentity-3DES 98 ActivIdentity-AES 100 ActivIdentity-DES 102 ActivIdentity-EVENT 104 [Editor's Note: The content of this document was created by moving a 105 number of PSKC algorithm profiles from 106 draft-ietf-keyprov-portable-symmetric-key-container-06.txt into this 107 document. Since 108 draft-ietf-keyprov-portable-symmetric-key-container-07.txt had 109 experienced a number of changes the description and the examples in 110 this document are likely to be out-of-sync. Re-alignment will be 111 provided in a future version.] 113 2. Terminology 115 The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 116 "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 117 document are to be interpreted as described in [RFC2119]. 119 3. OCRA (OATH Challenge Response Algorithm) 121 Common Name: OCRA 123 Class: OTP 125 URI: http://www.ietf.org/keyprov/pskc#OCRA-1:(ocra_suite_parameters) 126 - e.g. 127 http://www.ietf.org/keyprov/pskc#OCRA-1:HOTP-SHA512-8:C-QN08 129 Algorithm Definition: http://www.ietf.org/internet-drafts/ 130 draft-mraihi-mutual-oath-hotp-variants-07.txt 132 Identifier Definition (this RFC) 134 Registrant Contact: IESG 136 Profile of XML attributes and subelements of the entity: 138 For a of this algorithm, the subelements MUST be 139 present. The "CR" attribute of the MUST be set "true" and 140 it MUST be the only attribute set. The element 141 and of the MUST be present. 143 For the elements of a of this algorithm, the 144 following subelements MUST be present in either the element 145 itself or an commonly shared element. 147 * Counter 149 * Time 151 If the element