S/MIME Working Group Status Russ Housley November 2002 PLEASE SIGN THE BLUE SHEET

2 RFC Publication Status S/MIME Working Group has published 22 RFCs: 2630 Cryptographic Message Syntax. R. Housley. June Diffie-Hellman Key Agreement Method. E. Rescorla. June S/MIME Version 3 Certificate Handling. B. Ramsdell, Ed. June S/MIME Version 3 Message Specification. B. Ramsdell, Ed. June Enhanced Security Services for S/MIME. P. Hoffman, Ed. June Methods for Avoiding the "Small-Subgroup" Attacks on the Diffie-Hellman Key Agreement Method for S/MIME. R. Zuccherato. March [Informational] 2876 Use of the KEA and SKIPJACK Algorithms in CMS. J. Pawling. July [Informational]

3 RFC Publication Status (more…) 2984 Use of the CAST-128 Encryption Algorithm in CMS. C. Adams. October Use of the IDEA Encryption Algorithm in CMS. S. Teiwes, P. Hartmann, and D. Kuenzi. February [Informational] 3125 Electronic Signature Policies. J. Ross, D. Pinkas, and N. Pope. September [Experimental] 3126 Electronic Signature Formats for long term electronic signatures. D. Pinkas, J. Ross, and N. Pope. September [Informational] 3183 Domain Security Services using S/MIME. T. Dean and W. Ottaway. October [Experimental] 3185 Reuse of CMS Content Encryption Keys. S. Farrell and S. Turner. October 2001.

4 RFC Publication Status (more…) 3211 Password-based Encryption for CMS. P. Gutmann. December Triple-DES and RC2 Key Wrapping. R. Housley. December [Informational] 3218 Preventing the Million Message Attack on CMS. E. Rescorla. January [Informational] 3278 Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS). S. Blake-Wilson, D. Brown, and P. Lambert. April [Informational] 3114 Implementing Company Classification Policy with the S/MIME Security Label. W. Nicolls. May [Informational] 3274 Compressed Data Content Type for CMS. P. Gutmann. June 2002.

5 RFC Publication Status (more…) 3369 Cryptographic Message Syntax (CMS). R. Housley. August Cryptographic Message Syntax (CMS) Algorithms. R. Housley. August Advanced Encryption Standard (AES) Key Wrap Algorithm. J. Schaad and R. Housley. September [Informational]

6 Internet-Drafts with IESG x400wrapSecuring X.400 Content with S/MIME. P. Hoffman, C. Bonatti, and A. Eggen. x400transportTransporting S/MIME Objects in X.400. P. Hoffman and C. Bonatti. symkeydistCMS Symmetric Key Management and Distribution. S. Turner. hmac-key-wrapWrapping an HMAC key with a Triple-DES Key or an AES Key. J. Schaad and R. Housley. cms-rsaes-oaepUse of the RSAES-OAEP Key Transport Algorithm in CMS. R. Housley.

7 Advancement to Draft Standard Requirements documented in RFC 2026 Stable, Mature, and Useful Specification At least two independent and interoperable implementations from different code bases Draft Standards cannot reference Proposed Standard RFCs or Experimental RFCs –Blocked until RFC 3280 progresses to Draft Standard

8 Interoperability Testing Jim Schaad developed interoperability matrix for CMS, MSG, CERT, and ESS documents –Posted at IMC web site –Needs updated for RFC 3369 Paul Hoffman (IMC) offered to: –Coordinate interoperability testing –Compile CMS and ESS Examples document