Per Paul Wouters' request to separate the addition of EdDSA support to
IPSECKEY, as needed in draft-ietf-drip-rid, here is a small draft for
your review.
I do need this expedited, as I do need to reference in my draft which,
hopefully, is in final IESG review process.
One particular point of review. Paul requested that I specifically say
this is for EdDSA Public Keys, as in drip, it ends up in the DNS HIP
RR. We don't want the initiated to think this is a place for private
keys...
Well that puts the IANA registry wording at odds with the other
algorithms that do not call out which of the key pair goes here. Does
that mean that the registry text for current algorithms needs updating?
Or only the text of the doc says Public Key, where as the registry text
leaves this out?
Also, the capitalization. Is "Public Key" a proper noun and thus both
word in caps? Only "Public", or neither?
Thanks!
Bob
-------- Forwarded Message --------
Subject: New Version Notification for
draft-moskowitz-ipsecme-ipseckey-eddsa-00.txt
Date: Tue, 02 Aug 2022 05:07:10 -0700
From: internet-dra...@ietf.org
To: Robert Moskowitz <r...@labs.htt-consult.com>, Tero Kivinen
<kivi...@iki.fi>
A new version of I-D, draft-moskowitz-ipsecme-ipseckey-eddsa-00.txt
has been successfully submitted by Robert Moskowitz and posted to the
IETF repository.
Name: draft-moskowitz-ipsecme-ipseckey-eddsa
Revision: 00
Title: EdDSA value for IPSECKEY
Document date: 2022-08-02
Group: Individual Submission
Pages: 4
URL:
https://www.ietf.org/archive/id/draft-moskowitz-ipsecme-ipseckey-eddsa-00.txt
Status:
https://datatracker.ietf.org/doc/draft-moskowitz-ipsecme-ipseckey-eddsa/
Html:
https://www.ietf.org/archive/id/draft-moskowitz-ipsecme-ipseckey-eddsa-00.html
Htmlized:
https://datatracker.ietf.org/doc/html/draft-moskowitz-ipsecme-ipseckey-eddsa
Abstract:
This document assigns a value for EdDSA Public Keys to the IPSECKEY
IANA registry.
The IETF Secretariat
_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec
