[Docs] [txt|pdf|xml|html] [Tracker] [Email] [Nits]

Versions: 00 01 02 03 04 05 06 07 08 RFC 6268

Network Working Group                                          J. Schaad
Internet-Draft                                   Soaring Hawk Consulting
Intended status: Informational                                 S. Turner
Expires: September 2, 2010                                    IECA, Inc.
                                                           March 1, 2010


                      Additional New ASN.1 Modules
                   draft-turner-additional-new-asn-00

Abstract

   The Cryptographic Message Syntax (CMS) format, and many associated
   formats, are expressed using ASN.1.  The current ASN.1 modules
   conform to the 1988 version of ASN.1.  This document updates some
   auxiliary ASN.1 modules to conform to the 2002 version of ASN.1.
   There are no bits-on-the-wire changes to any of the formats; this is
   simply a change to the syntax.

Status of this Memo

   This Internet-Draft is submitted to IETF in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-
   Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt.

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html.

   This Internet-Draft will expire on September 2, 2010.

Copyright Notice

   Copyright (c) 2010 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal



Schaad & Turner         Expires September 2, 2010               [Page 1]

Internet-Draft             More ASN.1 Modules                 March 2010


   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the BSD License.











































Schaad & Turner         Expires September 2, 2010               [Page 2]

Internet-Draft             More ASN.1 Modules                 March 2010


1.  Introduction

   Some developers would like the IETF to use the latest version of
   ASN.1 in its standards.  Most of the RFCs that relate to security
   protocols still use ASN.1 from the 1988 standard, which has been
   deprecated.  This is particularly true for the standards that relate
   to PKIX, CMS, and S/MIME.

   This document updates the following RFCs to use ASN.1 modules that
   conform to the 2002 version of ASN.1 [ASN1-2002].

      RFC 4049, BinaryTime: An Alternate Format for Representing Date
      and Time in ASN.1 [RFC4049]

      RFC 4073, Protecting Multiple Contents with the Cryptographic
      Message Syntax (CMS) [RFC4073]

      RFC 5752, Multiple Signatures in Cryptographic Message Syntax
      (CMS) [RFC5752]

   Note that some of the modules in this document get some of their
   definitions from places different than the modules in the original
   RFCs.  The idea is that these modules, when combined with the modules
   in [I-D.ietf-pkix-new-asn1] and [I-D.ietf-smime-new-asn1] can stand
   on their own and do not need to import definitions from anywhere
   else.

1.1.  Requirements Terminology

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in [RFC2119].



















Schaad & Turner         Expires September 2, 2010               [Page 3]

Internet-Draft             More ASN.1 Modules                 March 2010


2.  ASN.1 Module RFC 4049

     BinarySigningTimeModule-2009
           { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)
             pkcs-9(9) smime(16) modules(0) TBD-1 }
     DEFINITIONS IMPLICIT TAGS ::=
     BEGIN
       IMPORTS

       -- From PKIX-CommonTypes-2009 [I-D.ietf-pkix-new-asn1]

       ATTRIBUTE
         FROM PKIX-CommonTypes-2009
           { iso(1) identified-organization(3) dod(6) internet(1)
             security(5) mechanisms(5) pkix(7) id-mod(0)
             id-mod-pkixCommon-02(57) }
      ;

      -- BinaryTime Definition

     BinaryTime ::= INTEGER (0..MAX)

     -- Signing Binary Time Attribute

     aa-binarySigningTime ATTRIBUTE ::= {
         TYPE BinarySigningTime
         IDENTIFIED BY id-aa-binarySigningTime }

     id-aa-binarySigningTime OBJECT IDENTIFIER ::= { iso(1)
         member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9)
         smime(16) aa(2) 46 }

     BinarySigningTime ::= BinaryTime

     END
















Schaad & Turner         Expires September 2, 2010               [Page 4]

Internet-Draft             More ASN.1 Modules                 March 2010


3.  ASN.1 Module RFC 4073

     ContentCollectionModule-2009
       { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)
         pkcs-9(9) smime(16) modules(0) TBD-2 }
     DEFINITIONS IMPLICIT TAGS ::=
     BEGIN
     IMPORTS

     -- From CryptographicMessageSyntax-2009 [I-D.ietf-smime-new-asn1]
       CONTENT-TYPE, Attribute, ContentInfo
        FROM CryptographicMessageSyntax-2009
         { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)
           pkcs-9(9) smime(16) modules(0) cms-2001(14) }
     ;

     -- Content Collection Content Type and Object Identifier

     ct-ContentCollection CONTENT TYPE ::= {
       ContentCollection IDENTIFIED BY id-ct-contentCollection }

     id-ct-contentCollection OBJECT IDENTIFIER ::= {
       iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)
       smime(16) ct(1) 19 }

     ContentCollection ::= SEQUENCE SIZE (1..MAX) OF ContentInfo

     -- Content With Attributes Content Type and Object Identifier

     ct-ContentWithAttributes CONTENT TYPE ::= {
       { ContentWithAttributes IDENTIFIED BY id-ct-contentWithAttrs }

     id-ct-contentWithAttrs OBJECT IDENTIFIER ::= {
       iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)
       smime(16) ct(1) 20 }

     ContentWithAttributes ::= SEQUENCE {
        content  ContentInfo,
        attrs    SEQUENCE SIZE (1..MAX) OF Attribute
                                                   { ContentAttributes }

     ContentAttributes ATTRIBUTE ::= { ... }
     END








Schaad & Turner         Expires September 2, 2010               [Page 5]

Internet-Draft             More ASN.1 Modules                 March 2010


4.  ASN.1 Module RFC 5752

  MultipleSignatures-2009
    { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9)
      smime(16) modules(0) TBD-3 }
  DEFINITIONS IMPLICIT TAGS ::=
  BEGIN
  -- EXPORTS All
  -- The types and values defined in this module are exported for use
  -- in the other ASN.1 modules.  Other applications may use them for
  -- their own purposes.

  IMPORTS

  -- Imports from PKIX-Common-Types-2009 [I-D.ietf-pkix-new-asn1]

  ATTRIBUTE
    FROM PKIX-CommonTypes-2009
      { iso(1) identified-organization(3) dod(6) internet(1)
        security(5) mechanisms(5) pkix(7) id-mod(0)
        id-mod-pkixCommon-02(57) }

  -- Imports from CryptographicMessageSyntax-2009 [I-D.ietf-smime-new-asn1]

  DigestAlgorithmIdentifier, SignatureAlgorithmIdentifier
    FROM CryptographicMessageSyntax-2009
    { iso(1) member-body(2) us(840) rsadsi(113549)
      pkcs(1) pkcs-9(9) smime(16) modules(0) id-mod-cms-2004-02(41) }

  -- Imports from ExtendedSecurityServices-2009 [I-D.ietf-smime-new-asn1]

  ESSCertIDv2
    FROM ExtendedSecurityServices-2009
    { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)
      smime(16) modules(0) id-mod-ess-2006-02(42) }
  ;

  -- Section 3.0

  at-multipleSignatures ATTRIBUTE ::= {
    TYPE MultipleSignature
    IDENTIFIED BY id-aa-multipleSignatures }

  id-aa-multipleSignatures OBJECT IDENTIFIER ::= {
    iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9)
    id-aa(2) 51 }

  MultipleSignatures ::= SEQUENCE {



Schaad & Turner         Expires September 2, 2010               [Page 6]

Internet-Draft             More ASN.1 Modules                 March 2010


    bodyHashAlg     DigestAlgorithmIdentifier,
    signAlg         SignatureAlgorithmIdentifier,
    signAttrsHash   SignAttrsHash,
    cert            ESSCertIDv2 OPTIONAL }

  SignAttrsHash ::= SEQUENCE {
    algID            DigestAlgorithmIdentifier,
    hash             OCTET STRING }

  END -- of MultipleSignatures-2008









































Schaad & Turner         Expires September 2, 2010               [Page 7]

Internet-Draft             More ASN.1 Modules                 March 2010


5.  Security Considerations

   This document itself does not have any security considerations.  The
   ASN.1 modules keep the same bits-on-the-wire as the modules that they
   replace.














































Schaad & Turner         Expires September 2, 2010               [Page 8]

Internet-Draft             More ASN.1 Modules                 March 2010


6.  IANA Considerations

   None.
















































Schaad & Turner         Expires September 2, 2010               [Page 9]

Internet-Draft             More ASN.1 Modules                 March 2010


7.  Normative References

   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
              Requirement Levels", BCP 14, RFC 2119, March 1997.

   [RFC4049]  Housley, R., "BinaryTime: An Alternate Format for
              Representing Date and Time in ASN.1", RFC 4049,
              April 2005.

   [RFC4073]  Housley, R., "Protecting Multiple Contents with the
              Cryptographic Message Syntax (CMS)", RFC 4073, May 2005.

   [RFC5752]  Turner, S. and J. Schaad, "Multiple Signatures in
              Cryptographic Message Syntax (CMS)", RFC 5752,
              January 2010.

   [I-D.ietf-smime-new-asn1]
              Hoffman, P. and J. Schaad, "New ASN.1 Modules for CMS and
              S/MIME", draft-ietf-smime-new-asn1-07 (work in progress),
              August 2009.

   [I-D.ietf-pkix-new-asn1]
              Hoffman, P. and J. Schaad, "New ASN.1 Modules for PKIX",
              draft-ietf-pkix-new-asn1-07 (work in progress),
              August 2009.

   [ASN1-2002]
              ITU-T, "ITU-T Recommendation X.680, X.681, X.682, and
              X.683", 2002.






















Schaad & Turner         Expires September 2, 2010              [Page 10]

Internet-Draft             More ASN.1 Modules                 March 2010


Authors' Addresses

   Jim Schaad
   Soaring Hawk Consulting
   PO Box 675
   Gold Bar, WA  98251

   Email: ietf@augustcellars.com


   Sean Turner
   IECA, Inc.
   3057 Nutley Street, Suite 106
   Fairfax, VA  22031

   Email: turners@ieca.com



































Schaad & Turner         Expires September 2, 2010              [Page 11]


Html markup produced by rfcmarkup 1.109, available from https://tools.ietf.org/tools/rfcmarkup/