RE: Old issues remaining in draft-ietf-smime-examples-06.txt

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_000_01C0A589.22741770
Content-Type: text/plain;
	charset="iso-8859-1"

All,

I confirmed that Magnus' comments #2 and #3 are correct.  His other comments
are probably accurate also, but I did not confirm.  

Regarding comment #1, attached is the BobPrivRSAEncrypt.pri file that we
used with the SFL to generate the samples submitted for inclusion in the
Examples-06 document.

Regarding comment #3, agree with Magnus that Section 6.2 should state "does
not have unprotected attributes."  We intentionally omitted unprotected
attributes when we created the 6.2 sample using the SFL.  This was requested
on the smime-examples mail list so that the 6.2 sample would be
backwards-compatible with S/MIME v2.  

Jim Schaad was kind enough to generate the certificates and CRLs included in
the Examples-06 document.  Recommend that Jim work with Paul Hoffman to
address Magnus' comments regarding the certificates and CRLs included in the
Examples-06 document.

===========================================
John Pawling, [email protected]
Getronics Government Solutions, LLC
===========================================

-----Original Message-----
From: Magnus Svensson [mailto:[email protected]]
Sent: Monday, March 05, 2001 9:19 AM
To: [email protected]
Subject: Old issues remaining in draft-ietf-smime-examples-06.txt


I checked the draft-ietf-smime-examples-06.txt to verify that the issues I
reported earlier had been fixed. Unfortunately some of them remains and I
therefore list them here again:

1. Bob's private RSA key is incorrect. It is actually identical to Carl's
private RSA key. This error is present in both the draft text (the ASN.1
text) and the binary file. As Alexei Shamov pointed out for some time ago,
the correct key can be retrieved by downloading SFL and using the path
<INSTALL_DIR>\smimeR1.8\test\CMS_MSExamples2.d\FirstSet.d\certs.d\private.d\
BobPrivRSAEncrypt.pri. This is surely not a preferred solution, so I suggest
that this issue really is fixed for the next draft. Finding this error is
most probably a frustrating and timeconsuming effort if you are not aware of
it's presence.

2. nextUpdate field is missing in all CRLs. I mentioned this problem in a
previous mail but the problem is still present. The nextUpdate field is
required to be present, see RFC 2459 section 5.1.2.5.

3. In the description of example 6.2 the draft text states: "Does not have a
OriginatorInfo, and has unprotected attributes.". Since the example does not
have unprotected attributes the draft text should state "Does not have an
OriginatorInfo or unprotected attributes.".

4. Example 6.1. Listed below the ASN.1 text are additional information
regarding the keys used in the example. This listing contains two CEKs. The
CEK with the hex-sequence beginning with "CD4F7C8373..." is the correct one.
The other one needs to be removed.

5. Alice's and Bob's RSA certificates distributed separately are different
from those present within the messages. The first has a signature algorithm
OID of sha-1WithRSAEncryption (1 3 14 3 2 29) and the latter
sha1withRSAEncryption (1 2 840 113549 1 1 5). The draft text incorrectly
declares the algorithm OID for the separate certificates to be
sha1withRSAEncryption (1 2 840 113549 1 1 5). I suppose only the PKCS#1 (and
PKIX) variant should be used. The PKCS#1 OID is sha1withRSAEncryption (1 2
840 113549 1 1 5).

Regards,
Magnus



------_=_NextPart_000_01C0A589.22741770
Content-Type: application/octet-stream;
	name="BobPrivRSAEncrypt.pri"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="BobPrivRSAEncrypt.pri"
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------_=_NextPart_000_01C0A589.22741770--