Re: Status of the examples draft

Paul,

please find below our test results for the V 11 of the smime-examples
draft.

-----------------------------------------------------------------------

Test results for S/MIME Examples-11; the libraries which were used for
these tests: - AuthentiDate's Java Security Provider (AJSP 1.5.1)
              - various Java algorithm engines

4. Trivial

4.1 ContentInfo with Data type, BER

ok

4.2 ContentInfo with Data type, DER

ok

5. SignedData

5.1 Basic, DSS/DSA

ok

5.2 Basic, RSA

ok

5.3 Basic, DSS/DSA, detached

ok

5.4 Fancier signed content

ok,

Note: - includes also AliceRSA certificate.
       - *the countersigner is not Diane, but AliceRSA*
       - if Diane is performing the countersignature, her
         cert should be also included in the certificate
         field of the signed data.
         (like AliceRSA cert)

5.5 All RSA signed message

ok

5.6 Multiple signers

ok

5.7 Signing using SKI

ok

5.8 S/MIME clear signed

ok,

Note: - SignatureAlgorithm is 1.2.840.10040.4.1, *not* 1.2.840.10040.4.3
         DSA vs. SHA1withDSA

5.9 S/MIME opaque

ok,

Note: - SignatureAlgorithm is 1.2.840.10040.4.1 *not* 1.2.840.10040.4.3
         DSA vs. SHA1withDSA

5.10 SignedData with Attributes

ok

5.11 CertsCrlsOnly signed message

ok

Note: - *includes also a CRL (CarlDSSCRLForAll.crl)*

6. Enveloped Data

Note: No KeyAgreeRecipientInfo EnvelopedData could be decrypted due
to the fact that Sun's JCE/JCA only covers PKCS#3 DH KeyParameter.

6.1 TripleDES / DH

n/a

6.2 TripleDES / RSA

ok

6.3 RC2/40 / RSA

ok

6.4

n/a

6.5

n/a

6.6

n/a

6.7 RC2/40 / RSA

ok

6.8

n/a

6.9

ok

6.10

n/a

6.11

n/a

7 Digested Data

not supported

8 Encrypted Data

not supported

9 Authenticated Data

not supported

10 Key Wrapping

10.1 RC2

n/a

10.2 3DES

ok

11 ESS

not supported

---------------

Best Regards,

Holger Ebel


Paul Hoffman / IMC wrote:
> 
> Hi again. The -11 draft has the following changes:
> 5.1.bin
> 5.3.bin
> 5.4.bin
> 5.6.bin
> 5.7.bin
> 5.10.bin
> 8.2.bin
> 11.1.bin
> 11.2.bin
> 
> It would be great if everyone who has tested can re-test with these new 
> examples.
> 
> BTW, I forgot to change the title of 6.3 to say RC2/128, and will do so 
> in the -12 draft. (Just to be sure, I have already started the -12 draft 
> so I don't space out again...)
> 
> I would like to update the chart below for the -11 draft soon so we can 
> move it to IETF last call.
> 
> ======================================
> 
> Status of the examples in -10
> 
> 4. Trivial Examples
> 
> 4.1 ContentInfo with Data type, BER
>   John Pawling: tested OK.
>   Jim Schaad: tested OK.
>   Jeff Jacoby: tested OK.
>   Holger Ebel: tested OK.
> 
> 4.2 ContentInfo with Data type, DER
>   John Pawling: tested OK.
>   Jim Schaad: tested OK.
>   Jeff Jacoby: tested OK.
>   Holger Ebel: tested OK.
> 
> 5.  Signed-data
>   Jim Schaad pointed out that many examples had the
>     signatureAlgorithm of 1.2.840.10040.4.1 (dsa) but it should instead
>     be 1.2.840.10040.4.3 (dsaWithSha1).
>   The general decision was that the examples should have dsaWithSha1.
>   John Pawling and Sue Beauchamp at DigitalNet agreed to re-generate
>     the examples.
> 
> 5.1 Basic signed content, DSS
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jim Schaad: failed.
>     signatureAlgorithm is dsa but should be dsaWithSha1
>   Holger Ebel: tested OK.
>   Sue Beauchamp sent new example file.
> 
> 5.2 Basic signed content, RSA
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jim Schaad: tested OK.
>   Jeff Jacoby: tested OK.
>   Holger Ebel: tested OK.
> 
> 5.3 Basic signed content, detached content
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jim Schaad: failed.
>     Contains Alice's RSA certificate
>     No content hint unsigned attribute
>     signatureAlgorithm is dsa but should be dsaWithSha1
>   Jeff Jacoby: tested OK.
>   Holger Ebel: tested OK.
>   Sue Beauchamp sent new example file.
> 
> 5.4 Fancier signed content
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jeff Jacoby: tested OK.
>   Holger Ebel: tested OK.
>     Countersigner is Alice, not Diane
>     No content hint
>   Sue Beauchamp sent new example file.
> 
> 5.5 All RSA signed message
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jim Schaad: tested OK.
>   Jeff Jacoby: tested OK.
>   Holger Ebel: tested OK.
> 
> 5.6 Multiple signers
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jim Schaad: failed.
>     signatureAlgorithm is dsa but should be dsaWithSha1
>   Holger Ebel: tested OK.
>   Sue Beauchamp sent new example file.
> 
> 5.7 Signing using SKI
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jim Schaad: failed.
>     signatureAlgorithm is dsa but should be dsaWithSha1
>   Holger Ebel: tested OK.
>   Sue Beauchamp sent new example file.
> 
> 5.8 S/MIME multipart/signed message
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Holger Ebel: tested OK except that it has a CRLF prepended.
> 
> 5.9 S/MIME application/pkcs7-mime signed message
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jim Schaad: failed because signatureAlgorithm of dsa not dsaWithSha1
>   Holger Ebel: tested OK except that it has a CRLF prepended.
> 
> 5.10 SignedData With Attributes
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jim Schaad: failed.
>     Change "unknown OID" to "unknown OID (1.2.5555)"
>     Content Hint should have an OID of 1.2.840.113549.1.7.1
>     Content Identifier attribute absent
>     Contains Security Label attribute
>     Contains encrypt key preference attribute
>     Contains ML Expansion History attribute
>     Contains Equivalent Label attribute
>   Jeff Jacoby: tested OK.
>   Holger Ebel: failed (not signed by Alice).
> 
> 5.11 SignedData with Certificates Only
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jeff Jacoby: tested OK.
>   Holger Ebel: tested OK.
> 
> 6.  Enveloped-data
> 
> 6.1 Basic encrypted content, TripleDES and DH
>   John Pawling: tested OK.
>   Holger Ebel: tested OK.
> 
> 6.2 Basic encrypted content, TripleDES and RSA
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jeff Jacoby: tested OK.
>   Holger Ebel: tested OK.
> 
> 6.3 Basic encrypted content, RC2/40 and RSA
>   Blake Ramsdell: this is actually a 128-bit key.
>   Jeff Jacoby: confirmed Blake's assertion.
>   Paul Hoffman: thinks we could just change the title of the example.
>   John Pawling: tested OK.
>   Blake Ramsdell: tested OK.
>   Jeff Jacoby: tested OK.
>   Holger Ebel: tested OK.
> 
> 6.4 Encrypted content, two recipients, no shared keying material
>   John Pawling: tested OK but noted unsuccessful Invalid tag for
>     privateKeyInfo for second login.
>   Holger Ebel: tested OK.
> 
> 6.5 Encrypted content, two recipients, shared keying material
>   John Pawling: could not test due to bug in his code.
>   Holger Ebel: tested OK.
> 
> 6.6 Encrypted content, TripleDES and DH, previously-distributed keys
>   John Pawling: tested OK.
>   Holger Ebel: tested OK.
> 
> 6.7 Encrypted content, RC2/40 and RSA, previously-distributed keys
>   John Pawling: tested OK.
>   Holger Ebel: tested OK.
> 
> 6.8 S/MIME application/pkcs7-mime encrypted message
>   John Pawling: tested OK.
>   Holger Ebel: tested OK.
> 
> 6.9 EnvelopedData with All Recipient Types
>   John Pawling: tested OK.
>   Holger Ebel: tested OK.
> 
> 6.10 EnvelopedData with KARI RC2 Encryption
>   John Pawling: tested OK.
>   Holger Ebel: tested OK.
> 
> 6.11 EnvelopedData with KEK 3DES Encryption
>   John Pawling: tested OK.
>   Holger Ebel: tested OK.
> 
> 7. Digested-data
>   Blake Ramsdell: tested OK.
>   Jeff Jacoby: tested OK.
> 
> 8. Encrypted-data
> 
> 8.1 Simple EncryptedData
>   Blake Ramsdell: tested OK.
>   Jim Schaad: tested OK.
>   Jeff Jacoby: tested OK.
> 
> 8.2 EncryptedData with unprotected attributes
>   Jim Schaad: failed badly.
>     The key is not in the text and it is not the same as 8.1
>     The encapsulated content type is EncryptedData not id-data
>     The content hint content type does not match the encapsulated 
> content type
> 
> 9. Authenticated-data
>   There are still no examples in this section.
> 
> 10. Key Wrapping
>   John Pawling: tested OK.
> 
> 10.1 Wrapping RC2
>   John Pawling: tested OK.
> 
> 10.2 Wrapping TripleDES
>   John Pawling: tested OK.
>   Holger Ebel: tested OK.
> 
> 11. ESS Examples
> 
> 11.1 ReceiptRequest
>   John Pawling: test failed, has sent new example file.
>   Jeff Jacoby: tested OK.
> 
> 11.2 Receipt
>   John Pawling: test failed, has sent new example file.
> 
> 11.3 eSSSecurityLabel
>   John Pawling: tested OK.
>   Jim Schaad: tested OK.
>   Jeff Jacoby: tested OK.
> 
> 11.4 EquivalentLabels
>   John Pawling: tested OK.
>   Jeff Jacoby: tested OK.
> 
> 11.5 mlExpansionHistory
>   John Pawling: tested OK.
>   Jeff Jacoby: tested OK.
> 
> 11.6 SigningCertificate
>   John Pawling: tested OK.
>   Jeff Jacoby: tested OK.
> 
> --Paul Hoffman, Director
> --Internet Mail Consortium
>