Subject: [KEYPROV] [issue32] Define Implementation Requirements for conformance

From: Andrea Doherty <[email-masked]>
Date: Mon, 18 Feb 2008 20:00:51 +0000

Andrea Doherty <[email-masked]> added the comment:

Per Interim meeting 6-7 Feb 2008, decision was to specify the following 
conformance requirements:
DSKPP Servers:
• MUST implement the four-pass variant of the protocol
• MUST implement the two-pass variant of the protocol 
• MUST support user authentication
• Key Derivation Function
  - MUST support the DSKPP-PRF-AES DSKPP-PRF realization
  - MUST support the DSKPP-PRF-SHA256 DSKPP-PRF realization
• Encryption (for symmetric key operations of the client nonce in
4-pass)
  - MUST support encryption using the mechanism described in Section 3.5.
• Encryption (for symmetric key operations; key transport)
  - MUST support AES-CBC-128
• Encryption (for asymmetric key operations)
  - MUST support RSA Encryption Scheme 
• Integrity / KDF MAC
  - MUST support HMAC-SHA256
  - MUST support AES-CMAC-128
• Key Packages
  - MUST implement the PSKC key package [REF]. All three PSKC Key Transport, 
Key Wrap, and Passphrase-Based Key Wrap protection profiles MUST be implemented 
(Section 3.2)
  - MAY implement the ASN.1 key package [REF].

DSKPP clients need to support either the two-pass or the four-pass variant of 
the protocol. DSKPP clients must fulfill all requirements listed for DSKPP 
Servers (beginning with the third bullet).

----------
status: chatting -> done-cbb

_________________________________________________________
KEYPROV Roundup Issue Tracker <[email-masked]>
<http://www.tschofenig.com:8080/keyprov/issue32>
_________________________________________________________
_______________________________________________
KEYPROV mailing list
[email-masked]
http://www.ietf.org/mailman/listinfo/keyprov