S/MIME Working Group Status

1
S/MIME Working Group Status

• Russ Housley
• November 2002
• PLEASE SIGN THE BLUE SHEET

2
RFC Publication Status

• S/MIME Working Group has published 22 RFCs
• 2630 Cryptographic Message Syntax. R. Housley.
  June 1999.
• 2631 Diffie-Hellman Key Agreement Method. E.
  Rescorla. June 1999.
• 2632 S/MIME Version 3 Certificate Handling. B.
  Ramsdell, Ed. June 1999.
• 2633 S/MIME Version 3 Message Specification.
  B. Ramsdell, Ed. June 1999.
• 2634 Enhanced Security Services for S/MIME. P.
  Hoffman, Ed. June 1999.
• 2785 Methods for Avoiding the "Small-Subgroup"
  Attacks on the Diffie-Hellman Key Agreement
  Method for S/MIME. R. Zuccherato. March 2000.
  Informational
• 2876 Use of the KEA and SKIPJACK Algorithms in
  CMS. J. Pawling. July 2000. Informational

3
RFC Publication Status (more)

• 2984 Use of the CAST-128 Encryption Algorithm
  in CMS. C. Adams. October 2000.
• 3058 Use of the IDEA Encryption Algorithm in
  CMS. S. Teiwes, P. Hartmann, and D. Kuenzi.
  February 2001. Informational
• 3125 Electronic Signature Policies. J. Ross,
  D. Pinkas, and N. Pope. September 2001.
  Experimental
• 3126 Electronic Signature Formats for long term
  electronic signatures. D. Pinkas, J. Ross, and
  N. Pope. September 2001. Informational
• 3183 Domain Security Services using S/MIME. T.
  Dean and W. Ottaway. October 2001.
  Experimental
• 3185 Reuse of CMS Content Encryption Keys. S.
  Farrell and S. Turner. October 2001.

4
RFC Publication Status (more)

• 3211 Password-based Encryption for CMS. P.
  Gutmann. December 2001.
• 3217 Triple-DES and RC2 Key Wrapping. R.
  Housley. December 2001. Informational
• 3218 Preventing the Million Message Attack on
  CMS. E. Rescorla. January 2002. Informational
• 3278 Use of Elliptic Curve Cryptography (ECC)
  Algorithms in Cryptographic Message Syntax
  (CMS). S. Blake-Wilson, D. Brown , and P.
  Lambert. April 2002. Informational
• 3114 Implementing Company Classification
  Policy with the S/MIME Security Label. W.
  Nicolls. May 2002. Informational
• 3274 Compressed Data Content Type for CMS. P.
  Gutmann. June 2002.

5
RFC Publication Status (more)

• 3369 Cryptographic Message Syntax (CMS). R.
  Housley. August 2002.
• 3370 Cryptographic Message Syntax (CMS)
  Algorithms. R. Housley. August 2002.
• 3394 Advanced Encryption Standard (AES) Key
  Wrap Algorithm. J. Schaad and R. Housley.
  September 2002. Informational

6
Internet-Drafts with IESG

• x400wrap Securing X.400 Content with S/MIME. P.
  Hoffman, C. Bonatti, and A. Eggen.
• x400transport Transporting S/MIME Objects in
  X.400. P. Hoffman and C. Bonatti.
• symkeydist CMS Symmetric Key Management and
  Distribution. S. Turner.
• hmac-key-wrap Wrapping an HMAC key with a
  Triple-DES Key or an AES Key. J. Schaad and
  R. Housley.
• cms-rsaes-oaep Use of the RSAES-OAEP Key
  Transport Algorithm in CMS. R. Housley.

7
Advancement to Draft Standard

• Requirements documented in RFC 2026
• Stable, Mature, and Useful Specification
• At least two independent and interoperable
  implementations from different code bases
• Draft Standards cannot reference Proposed
  Standard RFCs or Experimental RFCs
• Blocked until RFC 3280 progresses toDraft
  Standard

8
Interoperability Testing

• Jim Schaad developed interoperability matrix for
  CMS, MSG, CERT, and ESS documents
• Posted at IMC web site
• Needs updated for RFC 3369
• Paul Hoffman (IMC) offered to
• Coordinate interoperability testing
• Compile CMS and ESS Examples document