Subject: Re: [KEYPROV] [Technical Errata Reported] RFC6030 (3811)

From: Simon Josefsson <[email-masked]>
Date: Mon, 09 Dec 2013 14:45:56 +0100

Wouldn't it be more generic to require that the EncryptedValue content
holds the same data type that the PlainValue content would have
otherwise done, if encryption was not used?  Not all data types are
necessarily integers.  I would fine it confusing that we have to parse
binary data when everything else is XML.

The RFC contains examples of encrypted data, so it is possible to check
how that looks (if the encryptionkey is mentioned in the document).

/Simon

RFC Errata System <[email-masked]> writes:

> The following errata report has been submitted for RFC6030,
> "Portable Symmetric Key Container (PSKC)".
>
> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata_search.php?rfc=6030&eid=3811
>
> --------------------------------------
> Type: Technical
> Reported by: Ivan Micanovic <[email-masked]>
>
> Section: 4.1.
>
> Original Text
> -------------
> All the elements listed above (and those defined in the future)
>       obey a simple structure in that they MUST support child elements
>       to convey the data value in either plaintext or encrypted format:
>
>       Plaintext:  The <PlainValue> element carries a plaintext value
>          that is typed, for example, to xs:integer.
>
>       Encrypted:  The <EncryptedValue> element carries an encrypted
>          value.
>
> Corrected Text
> --------------
>
>
> Notes
> -----
> In case that <Counter>, <Time>, <TimeInterval> or <TimeDrift> are encrypted in the PSKC file, the standard doesn't say anything about how to interpret this encrypted data.
> After decrypting those values we have byte array. 
>
> Example: 
>    Counter plain text value: 10000 decimal
>
>    In the case that this value is encrypted and later decrypted what should we expect?
>    Byte content 0x27 0x10 or 0x01 0x00 0x00 or something else?
>
>    1. Byte content 0x27 0x10 is interpreted as 10000 decimal if this bytes are interpreted as binary data (Big endian). 
>    2. Byte content 0x01 0x00 0x00 is interpreted as 10000 decimal if this bytes are interpreted as hex data (Big endian).
>       Each hex digit will be mapped to a resulting decimal digit. From my point of view this way is a bit confusing.
>        
> My proposal to solve this issue is described in 1.
>
> Instructions:
> -------------
> This errata is currently posted as "Reported". If necessary, please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party (IESG)
> can log in to change the status and edit the report, if necessary. 
>
> --------------------------------------
> RFC6030 (draft-ietf-keyprov-pskc-09)
> --------------------------------------
> Title               : Portable Symmetric Key Container (PSKC)
> Publication Date    : October 2010
> Author(s)           : P. Hoyer, M. Pei, S. Machani
> Category            : PROPOSED STANDARD
> Source              : Provisioning of Symmetric Keys
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG
> _______________________________________________
> KEYPROV mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/keyprov