Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update 6955 related text #54

Merged
merged 2 commits into from
Sep 23, 2024
Merged

Update 6955 related text #54

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a393d0a
Update 6955 related text
seanturner Jul 19, 2024
0b74c2c
Merge branch 'main' into seanturner-6955-tweaks
mandelj7 Sep 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 6 additions & 5 deletions draft-ietf-lamps-rfc5272bis.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -522,8 +522,8 @@ to be included.

The Simple PKI Request cannot be used if the private key is not
capable of producing some type of signature (i.e., Diffie-Hellman
(DH) keys can use the signature algorithms in {{DH-POP}} for production
of the signature).
(DH) and Elliptic Curve Diffie-Hellman (ECDH) keys can use the
signature algorithms in {{DH-POP}} for production of the signature).

The Simple PKI Request cannot be used for any of the advanced
services specified in this document.
Expand Down Expand Up @@ -4431,12 +4431,13 @@ Response #2 from server to client:
Signed by CA
~~~

# Production of Diffie-Hellman Public Key Certification Requests {#enroll-dh}
# Production of DH, ECDH, RSA-KEM, and ML-KEM Public Key Certification Requests {#enroll-dh}

Part of a certification request is a signature over the request;
Diffie-Hellman is a key agreement algorithm and cannot be used to
DH and ECDH are key agreement algorithms and RSA-KEM and ML-KEM
are key encapsulation mechanisms (KEM) are and cannot be used to
directly produce the required signature object. {{DH-POP}} provides
two ways to produce the necessary signature value. This document
three ways to produce the necessary signature value. This document
also defines a signature algorithm that does not provide a POP value,
but can be used to produce the necessary signature value.

Expand Down