RE: I-D ACTION:draft-ietf-smime-sha2-08.txt

["Jim Schaad" <ietf@xxxxxxxxxxxxxxxxx>]

> -----Original Message-----
> From: owner-ietf-smime@xxxxxxxxxxxx [mailto:owner-ietf-
> smime@xxxxxxxxxxxx] On Behalf Of Turner, Sean P.
> Sent: Friday, October 03, 2008 2:09 PM
> To: 'Jim Schaad'
> Cc: ietf-smime@xxxxxxx
> Subject: RE: I-D ACTION:draft-ietf-smime-sha2-08.txt
> 
> 
> Jim,
> 
> 1. I was just following the conventions for SHA-1.  I take it you're
> suggesting we should break with those conventions?

Yes we break with that convention.

> 
> 2. I copied the last paragraph in 3.2 from RFC 4055 section 5.

These need to be kept as is, we pulled this forward from somebody else who
messed it up.  We can't change this.

> 
> spt
> 
> >-----Original Message-----
> >From: Jim Schaad [mailto:ietf@xxxxxxxxxxxxxxxxx]
> >Sent: Friday, October 03, 2008 4:44 PM
> >To: Sean P. Turner
> >Cc: ietf-smime@xxxxxxx
> >Subject: RE: I-D ACTION:draft-ietf-smime-sha2-08.txt
> >
> >Sean,
> >
> >1.  Implenations MUST have absent parameters for SHA-2 --
> >there is no reason to allow anything else to run.  I won't
> >dispute the MUST read with NULL parameters however much I
> >would like to.  The defect does not really apply
> >as plenty of time has passed and this is a new algorithm.   The only
> >exception to this appears to be in OAEP and PSS where the
> >parameters are explicitly defined as being required.
> >
> >2.  Why allow for optional parameters on the signature
> >algorithms for rsa - not permitted for sha-1WithRSAEncryption.
> >
> >
> >jim
> >
> >
> >
> >> -----Original Message-----
> >> From: owner-ietf-smime@xxxxxxxxxxxx [mailto:owner-ietf-
> >> smime@xxxxxxxxxxxx] On Behalf Of Internet-Drafts@xxxxxxxx
> >> Sent: Friday, September 26, 2008 3:45 PM
> >> To: i-d-announce@xxxxxxxx
> >> Cc: ietf-smime@xxxxxxx
> >> Subject: I-D ACTION:draft-ietf-smime-sha2-08.txt
> >>
> >> A New Internet-Draft is available from the on-line Internet-Drafts
> >> directories.
> >> This draft is a work item of the S/MIME Mail Security
> >Working Group of
> >> the IETF.
> >>
> >> 	Title		: Using SHA2 Algorithms with
> >Cryptographic Message
> >> Syntax
> >> 	Author(s)	: S. Turner
> >> 	Filename	: draft-ietf-smime-sha2-08.txt
> >> 	Pages		: 10
> >> 	Date		: 2008-9-26
> >>
> >> This document describes the conventions for using the Secure Hash
> >>    Algorithm (SHA) message digest algorithms (SHA-224, SHA-256, SHA-
> >> 384,
> >>    SHA-512) with the Cryptographic Message Syntax (CMS). It also
> >>    describes the conventions for using these algorithms with CMS and
> >> the
> >>    Digital Signature Algorithm (DSA), Rivest Shamir Adleman
> >(RSA), and
> >>    Elliptic Curve DSA (ECDSA) signature algorithms.
> >>
> >> A URL for this Internet-Draft is:
> >> http://www.ietf.org/internet-drafts/draft-ietf-smime-sha2-08.txt
> >>
> >> Internet-Drafts are also available by anonymous FTP at:
> >> ftp://ftp.ietf.org/internet-drafts/
> >>
> >> Below is the data which will enable a MIME compliant mail reader
> >> implementation to automatically retrieve the ASCII version of the
> >> Internet-Draft.
> >