idnits 2.17.1 draft-hoyer-keyprov-pskc-algorithm-profiles-01.txt: Checking boilerplate required by RFC 5378 and the IETF Trust (see https://trustee.ietf.org/license-info): ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt: ---------------------------------------------------------------------------- No issues found here. Checking nits according to https://www.ietf.org/id-info/checklist : ---------------------------------------------------------------------------- No issues found here. Miscellaneous warnings: ---------------------------------------------------------------------------- == The copyright year in the IETF Trust and authors Copyright Line does not match the current year == Line 358 has weird spacing: '...inition http:...' == Line 502 has weird spacing: '...inition http:...' == Line 606 has weird spacing: '...inition http:...' == Line 710 has weird spacing: '...inition http:...' == Line 813 has weird spacing: '...inition http:...' -- The document date (May 2, 2010) is 5101 days in the past. Is this intentional? Checking references for intended status: Informational ---------------------------------------------------------------------------- == Unused Reference: 'PSKC' is defined on line 909, but no explicit reference was found in the text == Outdated reference: A later version (-09) exists of draft-ietf-keyprov-pskc-05 Summary: 0 errors (**), 0 flaws (~~), 8 warnings (==), 1 comment (--). Run idnits with the --verbose option for more detailed information about the items above. -------------------------------------------------------------------------------- 2 keyprov P. Hoyer 3 Internet-Draft ActivIdentity 4 Intended status: Informational M. Pei 5 Expires: November 3, 2010 VeriSign 6 S. Machani 7 Diversinet 8 A. Doherty 9 RSA, The Security Division of EMC 10 May 2, 2010 12 Additional Portable Symmetric Key Container (PSKC) Algorithm Profiles 13 draft-hoyer-keyprov-pskc-algorithm-profiles-01.txt 15 Abstract 17 The Portable Symmetric Key Container (PSKC) contains a number of XML 18 elements and XML attributes carrying keys and related information. 19 Not all algorithms, however, are able to use all elements and for 20 other algorithm certain information is mandatory. This lead to the 21 introduction of PSKC algorithm profiles that provide further 22 description about the mandatory and optional information elements and 23 their semantic, including extensions that may be needed. The main 24 PSKC specification defines two PSKC algorithm profiles, namely "HOTP" 25 and "PIN". This document extends the initial set and specifies nine 26 further algorithm profiles for PKSC. 28 Status of this Memo 30 This Internet-Draft is submitted in full conformance with the 31 provisions of BCP 78 and BCP 79. 33 Internet-Drafts are working documents of the Internet Engineering 34 Task Force (IETF). Note that other groups may also distribute 35 working documents as Internet-Drafts. The list of current Internet- 36 Drafts is at http://datatracker.ietf.org/drafts/current/. 38 Internet-Drafts are draft documents valid for a maximum of six months 39 and may be updated, replaced, or obsoleted by other documents at any 40 time. It is inappropriate to use Internet-Drafts as reference 41 material or to cite them other than as "work in progress." 43 This Internet-Draft will expire on November 3, 2010. 45 Copyright Notice 47 Copyright (c) 2010 IETF Trust and the persons identified as the 48 document authors. All rights reserved. 50 This document is subject to BCP 78 and the IETF Trust's Legal 51 Provisions Relating to IETF Documents 52 (http://trustee.ietf.org/license-info) in effect on the date of 53 publication of this document. Please review these documents 54 carefully, as they describe your rights and restrictions with respect 55 to this document. Code Components extracted from this document must 56 include Simplified BSD License text as described in Section 4.e of 57 the Trust Legal Provisions and are provided without warranty as 58 described in the Simplified BSD License. 60 Table of Contents 62 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 63 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 4 64 3. OCRA (OATH Challenge Response Algorithm) . . . . . . . . . . . 5 65 4. TOTP (OATH Time based OTP) . . . . . . . . . . . . . . . . . . 7 66 5. SecurID-AES . . . . . . . . . . . . . . . . . . . . . . . . . 9 67 6. SecurID-AES-Counter . . . . . . . . . . . . . . . . . . . . . 11 68 7. SecurID-ALGOR . . . . . . . . . . . . . . . . . . . . . . . . 13 69 8. ActivIdentity-3DES . . . . . . . . . . . . . . . . . . . . . . 15 70 9. ActivIdentity-AES . . . . . . . . . . . . . . . . . . . . . . 18 71 10. ActivIdentity-DES . . . . . . . . . . . . . . . . . . . . . . 21 72 11. ActivIdentity-EVENT . . . . . . . . . . . . . . . . . . . . . 24 73 12. Security Considerations . . . . . . . . . . . . . . . . . . . 26 74 13. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 27 75 14. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 28 76 15. References . . . . . . . . . . . . . . . . . . . . . . . . . . 29 77 15.1. Normative References . . . . . . . . . . . . . . . . . . 29 78 15.2. Informative References . . . . . . . . . . . . . . . . . 29 79 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 30 81 1. Introduction 83 This document specifies a set of algorithm profiles for PKSC, namely 85 OCRA (OATH Challenge Response Algorithm) 87 TOTP (OATH Time based OTP) 89 SecurID-AES 91 SecurID-AES-Counter 93 SecurID-ALGOR 95 ActivIdentity-3DES 97 ActivIdentity-AES 99 ActivIdentity-DES 101 ActivIdentity-EVENT 103 [Editor's Note: The content of this document was created by moving a 104 number of PSKC algorithm profiles from 105 draft-ietf-keyprov-portable-symmetric-key-container-06.txt into this 106 document. Since 107 draft-ietf-keyprov-portable-symmetric-key-container-07.txt had 108 experienced a number of changes the description and the examples in 109 this document are likely to be out-of-sync. Re-alignment will be 110 provided in a future version.] 112 2. Terminology 114 The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 115 "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 116 document are to be interpreted as described in [RFC2119]. 118 3. OCRA (OATH Challenge Response Algorithm) 120 Common Name: OCRA 122 Class: OTP 124 URI: 125 urn:ietf:params:xml:ns:keyprov:pskc#OCRA-1:(ocra_suite_parameters) 126 - e.g. 127 urn:ietf:params:xml:ns:keyprov:pskc#OCRA-1:HOTP-SHA512-8:C-QN08 129 Algorithm Definition: http://tools.ietf.org/id/ 130 draft-mraihi-mutual-oath-hotp-variants-11.txt 132 Identifier Definition (this RFC) 134 Registrant Contact: IESG 136 Profile of XML attributes and subelements of the entity: 138 For a of this algorithm, the subelements MUST be 139 present. The "CR" attribute of the MUST be set "true" and 140 it MUST be the only attribute set. The element 141 and of the MUST be present. 143 For the elements of a of this algorithm, the 144 following subelements MUST be present in either the element 145 itself or an commonly shared element. 147 * Counter 149 * Time 151 If the element