From nobody Fri Apr 28 09:13:50 2017 Return-Path: X-Original-To: dcrup@ietf.org Delivered-To: dcrup@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 419AF12951F; Fri, 28 Apr 2017 09:13:42 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.50.0 Auto-Submitted: auto-generated Precedence: bulk Cc: The IESG , dcrup@ietf.org, dcrup-chairs@ietf.org MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <149339602226.2847.3878770255715267653.idtracker@ietfa.amsl.com> Date: Fri, 28 Apr 2017 09:13:42 -0700 Archived-At: Subject: [Dcrup] WG Action: Formed DKIM Crypto Update (dcrup) X-BeenThere: dcrup@ietf.org X-Mailman-Version: 2.1.22 List-Id: DKIM Crypto Update List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Apr 2017 16:13:42 -0000 A new IETF WG has been formed in the Applications and Real-Time Area. For additional information, please contact the Area Directors or the WG Chairs. DKIM Crypto Update (dcrup) ----------------------------------------------------------------------- Current status: Proposed WG Chairs: Rich Salz Murray Kucherawy Assigned Area Director: Alexey Melnikov Applications and Real-Time Area Directors: Adam Roach Ben Campbell Alexey Melnikov Technical advisors: Eric Rescorla Mailing list: Address: dcrup@ietf.org To subscribe: https://www.ietf.org/mailman/listinfo/dcrup Archive: https://mailarchive.ietf.org/arch/browse/dcrup/ Group page: https://datatracker.ietf.org/group/dcrup/ Charter: https://datatracker.ietf.org/doc/charter-ietf-dcrup/ The DKIM Crypto Update (DCRUP) Working Group is chartered to update DomainKeys Identified Mail (DKIM, RFC 6376) to handle more modern cryptographic algorithms and key sizes. DKIM (RFC 6376) signatures include a tag that identifies the hash algorithm and signing algorithm used in the signature. The only current algorithm is RSA, with advice that signing keys should be between 1024 and 2048 bits. While 1024 bit signatures are common, longer signatures are not because bugs in DNS provisioning software prevent publishing longer keys as DNS TXT records. DCRUP will consider three types of changes to DKIM: additional signing algorithms such as those based on elliptic curves, changes to key strength advice and requirements, and new public key forms, such as putting the public key in the signature and a hash of the key in the DNS to bypass bugs in DNS provisioning software that prevent publishing longer keys as DNS TXT records. It will limit itself to existing implemented algorithms and key forms. Other changes to DKIM, such as new message canonicalization schemes, are out of scope. The WG will as far as possible avoid changes incompatible with deployed DKIM signers and verifiers. Milestones: Oct 2017 - Agree what algorithms and key formats to add or deprecate Dec 2017 - Submit WG draft to IESG as Proposed Standard From nobody Fri Apr 28 12:19:30 2017 Return-Path: X-Original-To: dcrup@ietfa.amsl.com Delivered-To: dcrup@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B6731270A7 for ; Fri, 28 Apr 2017 12:19:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.222 X-Spam-Level: X-Spam-Status: No, score=-1.222 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_NEUTRAL=0.779] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1536-bit key) header.d=iecc.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uw2BhWdKCJ_d for ; Fri, 28 Apr 2017 12:19:27 -0700 (PDT) Received: from miucha.iecc.com (www.iecc.com [IPv6:2001:470:1f07:1126::4945:4343]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 797BC124BE8 for ; Fri, 28 Apr 2017 12:19:24 -0700 (PDT) Received: (qmail 16244 invoked from network); 28 Apr 2017 19:19:23 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:subject:mime-version:content-type:user-agent; s=3f72.590395bb.k1704; bh=lJACaQdps1Kju3VEW7Bo9ngP7/a8p553dXNIxkHyQZk=; b=IIAIWKsJ0pKFB0dmsZ6TXooMdjLP3zDamr2pWtiZBcxy4hKGWxitQXaJYv1HVgfYmbL6tNQWJeLM45ko4ExlWQa4DoET508+Mz7GEmYaJtv8+jKv8CitRJgnpVRW1Em0sDKJAi9QYeaD6l0Ff68Z9bW2goI2tQQflF9+Yaem4AbBvlqnl4pOzAf6UMjJ1JXkwR4DXaV8Hr5Pj+vetfSAF2y052S+b/6oUywJmlLHwTqtxNopJbZtMsNjCxAFM83J Received: from localhost ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTPS (TLS1.2/X.509/AEAD) via TCP6; 28 Apr 2017 19:19:22 -0000 Date: 28 Apr 2017 15:19:22 -0400 Message-ID: From: "John R. Levine" To: dcrup@ietf.org User-Agent: Alpine 2.20 (OSX 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Archived-At: Subject: [Dcrup] Adopt draft-srose-dkim-ecc-00 ? X-BeenThere: dcrup@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: DKIM Crypto Update List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Apr 2017 19:19:29 -0000 I'd like to adopt this draft in addition to mine, with the intention of combining the good parts of each. Scott's draft has more details about algorithms we might want to add. Regards, John Levine, johnl@iecc.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly From nobody Fri Apr 28 12:39:12 2017 Return-Path: X-Original-To: dcrup@ietfa.amsl.com Delivered-To: dcrup@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A7F61293EE for ; Fri, 28 Apr 2017 12:39:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7KP4Jrvuvsq0 for ; Fri, 28 Apr 2017 12:39:09 -0700 (PDT) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E79721293FF for ; Fri, 28 Apr 2017 12:38:11 -0700 (PDT) Received: from pps.filterd (m0050095.ppops.net [127.0.0.1]) by m0050095.ppops.net-00190b01. (8.16.0.21/8.16.0.21) with SMTP id v3SJUdYJ008942; Fri, 28 Apr 2017 20:37:55 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=jan2016.eng; bh=C0bJRw/fAJoqw+rJX9LSOobEnhWCCjKgfRnAD2xBzeY=; b=nUopkguf1BBFIsDh45HJBM/97wcKh1O7j/5vhoHoK9MxshoQktzYHgeqwBhp07PFwDlj YztU8ZqNJBOYNrE1Hahb7lkuNd53hiK7DesHnkYh6D+UzJkFz6vMjjUi7/c8Y75KvZrd LNd72NfFLayQLl3UwhpUm/ZR/kcejPHlZiLX2IxaqIeVx4bd0EH3hatKQtNuRvcx9Fx0 xJHa14A//5GO2ScvgJ6FILwrQi+82fxJ5yABQAo2G4Mu2a8GDWyr8n2jYC1YV3xuYPf/ uT1m2/+kLLaXlDyDj9lMmwS2p9JXlBjhSItYcXJeMxY36+yD6NQeKhMSRq1v0p0uV1/B vg== Received: from prod-mail-ppoint4 ([96.6.114.87]) by m0050095.ppops.net-00190b01. with ESMTP id 2a47mct00t-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 28 Apr 2017 20:37:55 +0100 Received: from pps.filterd (prod-mail-ppoint4.akamai.com [127.0.0.1]) by prod-mail-ppoint4.akamai.com (8.16.0.17/8.16.0.17) with SMTP id v3SJZgCP019462; Fri, 28 Apr 2017 15:37:53 -0400 Received: from email.msg.corp.akamai.com ([172.27.25.33]) by prod-mail-ppoint4.akamai.com with ESMTP id 2a02gw9gum-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 28 Apr 2017 15:37:53 -0400 Received: from USTX2EX-DAG1MB1.msg.corp.akamai.com (172.27.27.101) by ustx2ex-dag1mb1.msg.corp.akamai.com (172.27.27.101) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Fri, 28 Apr 2017 14:37:52 -0500 Received: from USTX2EX-DAG1MB1.msg.corp.akamai.com ([172.27.6.131]) by ustx2ex-dag1mb1.msg.corp.akamai.com ([172.27.6.131]) with mapi id 15.00.1263.000; Fri, 28 Apr 2017 14:37:52 -0500 From: "Salz, Rich" To: "John R. Levine" , "dcrup@ietf.org" Thread-Topic: [Dcrup] Adopt draft-srose-dkim-ecc-00 ? Thread-Index: AQHSwFRfEw9tte2ad0WrngbQbaGB3aHbLRBg Date: Fri, 28 Apr 2017 19:37:51 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.47.38] Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-04-28_12:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 suspectscore=0 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1703280000 definitions=main-1704280243 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2017-04-28_12:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1703280000 definitions=main-1704280241 Archived-At: Subject: Re: [Dcrup] Adopt draft-srose-dkim-ecc-00 ? X-BeenThere: dcrup@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: DKIM Crypto Update List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Apr 2017 19:39:10 -0000 > I'd like to adopt this draft in addition to mine, with the intention of c= ombining > the good parts of each. Scott's draft has more details about algorithms = we > might want to add. There are eight people on the mailing list, including yourself and the two = chairs. Let's wait a week :) From nobody Fri Apr 28 12:42:56 2017 Return-Path: X-Original-To: dcrup@ietf.org Delivered-To: dcrup@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 857621294C5; Fri, 28 Apr 2017 12:42:45 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: dcrup@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.50.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <149340856541.3024.10237813354174270841@ietfa.amsl.com> Date: Fri, 28 Apr 2017 12:42:45 -0700 Archived-At: Subject: [Dcrup] I-D Action: draft-ietf-dcrup-dkim-crypto-00.txt X-BeenThere: dcrup@ietf.org X-Mailman-Version: 2.1.22 List-Id: DKIM Crypto Update List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Apr 2017 19:42:45 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DKIM Crypto Update of the IETF. Title : Cryptographic Update to DKIM Author : John Levine Filename : draft-ietf-dcrup-dkim-crypto-00.txt Pages : 6 Date : 2017-04-28 Abstract: DKIM was designed to allow new cryptographic algorithms to be added. This document adds a new algorithm and a new way to represent signature validation keys. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dcrup-dkim-crypto/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-dcrup-dkim-crypto-00 https://datatracker.ietf.org/doc/html/draft-ietf-dcrup-dkim-crypto-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Apr 28 12:56:27 2017 Return-Path: X-Original-To: dcrup@ietfa.amsl.com Delivered-To: dcrup@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D9F012949A for ; Fri, 28 Apr 2017 12:56:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.279 X-Spam-Level: X-Spam-Status: No, score=0.279 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, SPF_NEUTRAL=0.779] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0B7JG1kuZg4Y for ; Fri, 28 Apr 2017 12:56:24 -0700 (PDT) Received: from miucha.iecc.com (w6.iecc.com [IPv6:2001:470:1f07:1126::4945:4343]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69ADE1294E9 for ; Fri, 28 Apr 2017 12:55:26 -0700 (PDT) Received: (qmail 19870 invoked from network); 28 Apr 2017 19:55:25 -0000 Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 28 Apr 2017 19:55:25 -0000 Date: 28 Apr 2017 19:55:03 -0000 Message-ID: <20170428195503.58711.qmail@ary.lan> From: "John Levine" To: dcrup@ietf.org Cc: rsalz@akamai.com In-Reply-To: Organization: X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit Archived-At: Subject: Re: [Dcrup] Adopt draft-srose-dkim-ecc-00 ? X-BeenThere: dcrup@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: DKIM Crypto Update List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Apr 2017 19:56:25 -0000 In article you write: >> I'd like to adopt this draft in addition to mine, with the intention of c= >ombining >> the good parts of each. Scott's draft has more details about algorithms = >we >> might want to add. > >There are eight people on the mailing list, including yourself and the two = >chairs. Let's wait a week :) Well, OK, but I would hope this particular action wouldn't be contentious. R's, John PS: through the magic of IMAP, I don't subscribe to any IETF lists any more. From nobody Sun Apr 30 21:38:58 2017 Return-Path: X-Original-To: dcrup@ietfa.amsl.com Delivered-To: dcrup@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9637126DD9 for ; Sun, 30 Apr 2017 21:38:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fbWyrgmNlY27 for ; Sun, 30 Apr 2017 21:38:55 -0700 (PDT) Received: from mail-lf0-x22c.google.com (mail-lf0-x22c.google.com [IPv6:2a00:1450:4010:c07::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ACCAE1294CF for ; Sun, 30 Apr 2017 21:36:41 -0700 (PDT) Received: by mail-lf0-x22c.google.com with SMTP id t144so56691692lff.1 for ; Sun, 30 Apr 2017 21:36:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=qyC8UwnLOdj6APVEk2hkCNmFxvOeuophgTG7Pho2+U8=; b=rNDgGdYwyZLqyq/iPbRJqZPi3IJgCYwZpxj13Et4VhGpru2z/KhX7VofBcEgdugF07 IVGyEoGxpDoEbWZtCQaa1TKQHjnSLV0s/GIWzDHZacvhqXwPkNkBLS67sZkEHdRW1xkm 8kW/r0afWN67Yqc5loecViUsFkco0n2AWfSYrndBbv2xO0jZAd32cjBUSPH7LdpVv9+m P5dlzr1m55kZxQX7Zxhwdff7sm6n5pEc7TE3voQ7dpK/CMGM02+ym4NsRCHZ6yieHcpO mmIj5JzFUmYMjTrCsN3zb0rJIaFKBKXzeb6H3SIaPMLv/xN6eP6Fv9SwzST3UEYhWVMG aLvA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=qyC8UwnLOdj6APVEk2hkCNmFxvOeuophgTG7Pho2+U8=; b=hv8m0DjoRGsBBFF2LxRy9gotEur0P55x+AEv0G2aZBogbV5lYJAl3gDObmISZds01s ap2fgU+p3VhVzn1Jqe4FmNVfn/fhcReOn0dH8rgSwXrL3QzGwWBW7kZZh7Gpq166mY4r c8zhls58rQl8KDeX8MMUiUKWuuj1BnEKZaxmiSoh6ji7RUO+MuoCTZQHNx3EDUp8wEhP n/RhIPqVGODsbONWRnPIwqgNm/KiL+1mSPaCMFCSsYvJP358ZtBKwZN/Cz9S6KCl9eCh UDdp9UIHkDvkVJxLnq2W2GIOC6DHbkmt7wXajvpvP6xf624zU7GcBJcKbcWMwsacTVSg OEBg== X-Gm-Message-State: AN3rC/4kdcjZjRk5pkUyvSbcPERjMR5ESnojaOxk4BDXsqPxEl/aJut6 whpnE96pvlkdJLbBsx17Zd4T6WeFuDobCy0= X-Received: by 10.25.76.6 with SMTP id z6mr7717454lfa.172.1493613399746; Sun, 30 Apr 2017 21:36:39 -0700 (PDT) MIME-Version: 1.0 Received: by 10.46.83.2 with HTTP; Sun, 30 Apr 2017 21:36:39 -0700 (PDT) From: Martin Thomson Date: Mon, 1 May 2017 14:36:39 +1000 Message-ID: To: dcrup@ietf.org Content-Type: text/plain; charset=UTF-8 Archived-At: Subject: [Dcrup] draft-srose-dkim-ecc-00 X-BeenThere: dcrup@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: DKIM Crypto Update List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 May 2017 04:38:57 -0000 it's P-384, not P-348 what is the position on the -ph variants of ed25519/ed448? how are the public keys encoded?