Re: [smime] Message takeover attacks against S/MIME

Regarding item 2, we already have RFC 5084 that specifies the use of AES-CCM 
and AES-GCM with CMS.  I have just posted an I-D that specifies the use of 
ChaCha20 with Poly1305 with CMS:

        https://www.ietf.org/id/draft-housley-cms-chacha20-poly1305-00.txt

Please read and review.

Russ


On Mar 8, 2016, at 1:58 AM, Russ Housley <housley(_at_)vigilsec(_dot_)com> 
wrote:

> I am hearing interest in these topics (a combination of things on this list 
> and side conversations).
>
> (1) Specify the way to use authenticated encryption in S/MIME.  Note that it 
> is already done for CMS.
>
> (2) Specify conventions for AES-CCM, AES-GCM, and ChaCha20 with Poly1305 
> authenticated encryption algorithms.
>
> (3) Specify conventions for using Curve25519 and Curve448 for key agreement.
>
> (4) Specify conventions for using the CFRG chosen curves for elliptic curve 
> digital signature.
>
> (5) Specify a way to use PGP public keys in addition to PKIX certificates.
>
> Anything else?
>
> Is this enough to re-charter the S/MIME WG?
>
> Russ
_______________________________________________
smime mailing list
smime(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/smime