Subject: [Curdle] [Errata Rejected] RFC8410 (5709)

From: RFC Errata System <[email-masked]>
Date: Mon, 6 May 2019 14:46:25 -0700 (PDT)

The following errata report has been rejected for RFC8410,
"Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata/eid5709

--------------------------------------
Status: Rejected
Type: Editorial

Reported by: Lijun Liao <[email-masked]>
Date Reported: 2019-04-29
Rejected by: Benjamin Kaduk (IESG)

Section: 10.2

Original Text
-------------
-

Corrected Text
--------------
-

Notes
-----
The example certificate is a self-signed certificate containing X25519 public key. Unlike standard EC public key, the public key for key exchange is NOT the same as the one for digital signature in curve25519. That means, for the same private key, the public keys for X25519 and for Ed25519 are different. As a result, the public key in the self-signed certificate can NOT be used to verify the signature. In this context, please replace the example certificate by one containing the Ed25519 public key.
 --VERIFIER NOTES-- 
X25519 keys are only capable of key agreement, not signing, so by necessity a self-issued X25519 certificate cannot be self-signed.  This document specifies, among other things, how to encode  X25519 public keys into X.509 certificates, and so the example is accordingly a self-issued but not self-signed certificate.  The issuing certificate has the same subject name but a different key (and key type).

--------------------------------------
RFC8410 (draft-ietf-curdle-pkix-10)
--------------------------------------
Title               : Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure
Publication Date    : August 2018
Author(s)           : S. Josefsson, J. Schaad
Category            : PROPOSED STANDARD
Source              : CURves, Deprecating and a Little more Encryption
Area                : Security
Stream              : IETF
Verifying Party     : IESG