core-wg / oscore-groupcomm

Other
1 stars 1 forks source link

Appendix F, G, H #93

Closed emanjon closed 3 years ago

emanjon commented 3 years ago

I suggest to just remove these 3 appendixes. Appendix F seems completely insecure. Appendix G and H discusses things related to the key which might be in CWT, X.509, or C509 format. Providing integrity protection of the key parameters is easily done by adding the public key credential to the external_aad which should probably be done for other reasons.

marco-tiloca-sics commented 3 years ago

Manually addressed in branch "v-12", see commit https://github.com/core-wg/oscore-groupcomm/commit/1b559a0d4fbc99b1e30f1c3c31209419f986ace9