Public%20Key%20Infrastructure%20Using%20X.509%20(PKIX)%20Working%20Group

1
Public Key Infrastructure Using X.509 (PKIX)
Working Group

• March 20, 2005 1850-1950

2
PKIX WG (pkix-wg)

• Web page charter, current documents
• http//www.ietf.org/html.charters/pkix-charter.htm
  l
• Mailing List ietf-pkix_at_imc.org
• To Subscribe ietf-pkix-request_at_ imc.org, In
  Body subscribe
• Archive http//www.imc.org/ietf-pkix
• Chairs
• Stephen Kent kent_at_bbn.com
• Tim Polk tim.polk_at_nist.gov
• Security Area Directors
• Russ Housley housley_at_vigilsec.com
• Sam Hartman hartmans_at_mit.edu

3

• PKIX Agenda for 65th IETF
• Document Status Overview
• Algorithm Agility in PKIX
• WG drafts
• SCVP draft -23
• RFC3280bis
• SRV

4
Status Review

• Four new RFCs
• 2 documents in RFC Editors Queue
• 1 document in IESG Last Call
• 7 documents in WG Last Call
• 2 (soon to be 3) documents that arent in Last
  Call

5
New RFCs

• Three Proposed Standard RFCs
• RFC 4325 CRL AIA
• RFC 4387 CertStore HTTP
• RFC 4334 Cert Extensions for Authentication in
  PPP and WLAN
• Obsoletes RFC 3770
• One Experimental RFC
• RFC 4386 PKIX REP

6
In RFC Editors Queue

• Attribute Certificate Policies Extension
• GOST Cryptographic Algorithms

7
In IESG Last Call

• Subject Identification Method

8
In WG last Call

• SCVP
• CMC drafts
• CMC (2797bis)
• CMC Transport
• CMC Compliance
• Lightweight OCSP
• Service Names
• UTF8

9
SCVP

• Draft -23 submitted
• Algorithm agility issues identified and addressed
• Three 3379 compliance issues identified in
  editors review of SCVP-22
• All 3379 requirements issues resolved in -23
• Editors believe that metrics for Proposed
  Standard are more than satisfied!

10
Drafts that arent in Last Call

• 3280bis
• ECC algorithms draft from Dan brown
• Draft for ECDSA and DSA with SHA-2 family of hash
  algorithms
• Blocked on NIST publication of FIPS 186-3

11
RFC 3280bis

• Urgent need to complete this document and move to
  Draft Standard
• Draft -02 submitted with minor tweaks
• Draft -03 to be submitted after IETF 65
• Need to construct an interoperability matrix