Subject: Re: [Curdle] [Editorial Errata Reported] RFC8410 (5709)

From: Jim Schaad <[email-masked]>
Date: Fri, 3 May 2019 21:36:32 -0700

This is not a correct errata and I would label it as rejected.

The certificate is a self-issued certificate not a self-signed certificate.   Given that the algorithm for the key is "ECDH 25519 key agreement" it could not be used for signing.

> -----Original Message-----
> From: RFC Errata System <[email-masked]>
> Sent: Monday, April 29, 2019 5:36 AM
> To: [email-masked]; [email-masked]; [email-masked];
> [email-masked]; [email-masked]; [email-masked]
> Cc: [email-masked]; [email-masked]; [email-masked]
> Subject: [Editorial Errata Reported] RFC8410 (5709)
> 
> The following errata report has been submitted for RFC8410, "Algorithm
> Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509
> Public Key Infrastructure".
> 
> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata/eid5709
> 
> --------------------------------------
> Type: Editorial
> Reported by: Lijun Liao <[email-masked]>
> 
> Section: 10.2
> 
> Original Text
> -------------
> -
> 
> Corrected Text
> --------------
> -
> 
> Notes
> -----
> The example certificate is a self-signed certificate containing X25519 public
> key. Unlike standard EC public key, the public key for key exchange is NOT
> the same as the one for digital signature in curve25519. That means, for the
> same private key, the public keys for X25519 and for Ed25519 are different.
> As a result, the public key in the self-signed certificate can NOT be used to
> verify the signature. In this context, please replace the example certificate by
> one containing the Ed25519 public key.
> 
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please use
> "Reply All" to discuss whether it should be verified or rejected. When a
> decision is reached, the verifying party can log in to change the status and
> edit the report, if necessary.
> 
> --------------------------------------
> RFC8410 (draft-ietf-curdle-pkix-10)
> --------------------------------------
> Title               : Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for
> Use in the Internet X.509 Public Key Infrastructure
> Publication Date    : August 2018
> Author(s)           : S. Josefsson, J. Schaad
> Category            : PROPOSED STANDARD
> Source              : CURves, Deprecating and a Little more Encryption
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG