1. Subject Identification Method August, 2004 Tim Polk, NIST

2. Status New draft –03 published just before the meeting

3. Detailed solution Subject contributes a password or random value in addition to SII RA contributes a second random number to prevent pre-calculation attack by client Hash calculation over two randoms and SII Server can confirm Subject-supplied SII given random values

4. Unresolved Comments Clarify Usage Scenarios Clarify/Enhance certificate request model to –Specify EPEPSI parameters and algorithms –Clarify when RA signs and when subject signs PKCS #10 –Specify attribute to convey info in PKCS #10 IANA registration of SII types?

5. Way Forward Authors need to work with reviewers to resolve open issues –Publish -04 draft by end of August WG Last Call on -04 draft in September