RE: [pkcs11] Groups - pkcs11-curr-v3.0-wd08_comments_darren_johnson

Hi Darren, all,

I agree to all of your comments. For CK_OTP_PARAMS I don’t know.

Removing deprecated items is a good thing – however when searching for “deprecate” in wd08 I found CKM_ECDSA_KEY_PAIR_GEN (which we can remove), CFK_EC_NAMEDCURVE (which is a new deprecation in 3.0 and must stay) and CKM_TLS_PRF (which seems to be still necessary for backwards compatibility?).

There are more definitions marked as deprecated in pkcs11t.h.

Some of the do not appear in the spec document and could be removed:

CKK_CAST5

CKA_SECONDARY_AUTH

CKA_AUTH_PIN_FLAGS

CKM_CAST5_CBC

CKM_CAST5_MAC

CKM_CAST5_MAC_GENERAL

CKM_CAST5_CBC_PAD

CKM_PBE_MD5_CAST5_CBC

CKM_PBE_SHA1_CAST5_CBC

CK_AES_GCM_PARAMS

CK_AES_CCM_PARAMS

However, some other appear there together with their alternative form, but it is not indicated that they are deprecated:

CKK_ECDSA

CKA_ECDSA_PARAMS

Thus, can we really remove now the latter? If we agree, let’s remove all of them.

Concerning comments in OTP chapter: I think the paragraphs following the figures should start with “Figure x”.

It seems that the whole OTP chapter appears twice: the one following section 2.53.2 should be removed (also has wrong section numbers and does not appear in the TOC).

Concerning footnote 15: If the footnote doesn’t fit in the remaining space on the same page it is continues on the next one. Otherwise, we would have to insert a manual page break before table 193, but have to take check it every time we change the document. Maybe this problem disappears if we remove/add text before.

In the text on CK_OTP_SIGNATURE_INFO, there is a reference on “the convention described in Section 11.2 on producing output” – I guess this is again a reference to base spec v2.20, where this was section 11.2. Now, it’s 5.2 and we should mention that it’s the base spec.

Best,

Daniel

From: pkcs11@lists.oasis-open.org <pkcs11@lists.oasis-open.org> On Behalf Of Darren Johnson
Sent: Mittwoch, 6. Februar 2019 03:43
To: pkcs11@lists.oasis-open.org
Subject: [pkcs11] Groups - pkcs11-curr-v3.0-wd08_comments_darren_johnson_20180205.docx uploaded

Submitter's message
Here are my latest comments to PKCS#11 3.00 Mechanism specification working draft 08.

Most of the comments should be non controversial.

I made a number of comments to the OTP sections. But I have to admit I am not familiar with the OTP standards. So hopefully they somewhat relevant.
-- Mr. Darren Johnson

Document Name: pkcs11-curr-v3.0-wd08_comments_darren_johnson_20180205.docx

Description
My comments to PKCS#11 3.00 Mechanism specification working draft 08.
Download Latest Revision
Public Download Link

Submitter: Mr. Darren Johnson
Group: OASIS PKCS 11 TC
Folder: Documents
Date submitted: 2019-02-05 18:42:31

pkcs11 message