RFC 7107: Object Identifier Registry for the S/MIME Mail Security Working Group

Text version

Internet Engineering Task Force (IETF)
Request for Comments: 7107
Category: Informational
ISSN: 2070-1721

R. Housley
Vigil Security
January 2014

Object Identifier Registry for the S/MIME Mail Security Working Group

Abstract

When the S/MIME Mail Security Working Group was chartered, an object identifier arc was donated by RSA Data Security for use by that working group. This document describes the object identifiers that were assigned in that donated arc, transfers control of that arc to IANA, and establishes IANA allocation policies for any future assignments within that arc.

Status of This Memo

This document is not an Internet Standards Track specification; it is published for informational purposes.

This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Not all documents approved by the IESG are a candidate for any level of Internet Standard; see Section 2 of RFC 5741.

Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc7107.

Copyright Notice

This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.

   1. Introduction ....................................................2
   2. Subordinate Object Identifier Arcs ..............................3
   3. IANA Considerations .............................................4
      3.1. Update to "SMI Security for Mechanism Codes" Registry ......4
      3.2. "SMI Security for S/MIME Mail Security" Registry ...........4
      3.3. "SMI Security for S/MIME Module Identifier" Registry .......5
      3.4. "SMI Security for S/MIME CMS Content Type" Registry ........6
      3.5. "SMI Security for S/MIME Attributes" Registry ..............7
      3.6. "SMI Security for S/MIME Algorithms" Registry ..............9
      3.7. "SMI Security for S/MIME Certificate Distribution
           Mechanisms" Registry .......................................9
      3.8. "SMI Security for S/MIME Signature Policy
           Qualifier" Registry .......................................10
      3.9. "SMI Security for S/MIME Commitment Type
           Identifier" Registry ......................................10
      3.10. "SMI Security for S/MIME Test Security Policies"
            Registry .................................................10
      3.11. "SMI Security for S/MIME Control Attributes for
            Symmetric Key Distribution" Registry .....................11
      3.12. "SMI Security for S/MIME Signature Type
            Identifiers" Registry ....................................11
      3.13. "SMI Security for S/MIME X.400 Encoded Information
            Types (EIT) for S/MIME objects" Registry .................12
      3.14. "SMI Security for S/MIME Capabilities (other than
            cryptographic algorithms)" Registry ......................12
      3.15. "SMI Security for S/MIME Portable Symmetric Key
            Container (PSKC) Attributes" Registry ....................12
   4. Security Considerations ........................................13
   5. References .....................................................13
      5.1. Normative References ......................................13
      5.2. Informative References ....................................14
   6. Acknowledgements ...............................................18

1. Introduction

When the S/MIME Mail Security Working Group was chartered, an object identifier arc was donated by RSA Data Security for use by that working group. These object identifiers are primarily used with Abstract Syntax Notation One (ASN.1) [ASN1-88] [ASN1-08]. The ASN.1 specifications continue to evolve, but object identifiers can be used with any and all versions of ASN.1.

The S/MIME object identifier arc is:

      id-smime OBJECT IDENTIFIER ::= { iso(1) member-body(2)
                  us(840) rsadsi(113549) pkcs(1) pkcs9(9) 16 }

This document describes the object identifiers that were assigned in that donated arc, transfers control of that arc to IANA, and establishes IANA allocation policies for any future assignments within that arc.

2. Subordinate Object Identifier Arcs

Thirteen subordinate object identifier arcs were used, numbered from zero to twelve. They were assigned as follows:

      -- ASN.1 modules
      id-mod  OBJECT IDENTIFIER ::= { id-smime  0 }
      
      -- Cryptographic Message Syntax (CMS) content types
      id-ct   OBJECT IDENTIFIER ::= { id-smime  1 }
      
      -- attributes
      id-aa   OBJECT IDENTIFIER ::= { id-smime  2 }
      
      -- algorithm identifiers
      id-alg  OBJECT IDENTIFIER ::= { id-smime  3 }
      
      -- certificate distribution
      id-cd   OBJECT IDENTIFIER ::= { id-smime  4 }
      
      -- signature policy qualifier
      id-spq  OBJECT IDENTIFIER ::= { id-smime  5 }
      
      -- commitment type identifier
      id-cti  OBJECT IDENTIFIER ::= { id-smime  6 }
      
      -- test security policies
      id-tsp  OBJECT IDENTIFIER ::= { id-smime  7 }
      
      -- symmetric key distribution control attributes
      id-skd  OBJECT IDENTIFIER ::= { id-smime  8 }
      
      -- signature type identifier
      id-sti  OBJECT IDENTIFIER ::= { id-smime  9 }
      
      -- encoded information types
      id-eit  OBJECT IDENTIFIER ::= { id-smime 10 }
      
       -- S/MIME capabilities
      id-cap  OBJECT IDENTIFIER ::= { id-smime 11 }
      
      -- PSKC attributes
      id-pskc OBJECT IDENTIFIER ::= { id-smime 12 }

The values assigned in each of these subordinate object identifier arcs are discussed in the next section.

3. IANA Considerations

IANA is asked to update one registry table and create fourteen additional tables.

Updates to the new tables require both Specification Required and Expert Review as defined in [RFC5226]. The expert is expected to ensure that any new values are strongly related to the work that was done by the S/MIME Mail Security Working Group; examples include content types, attributes, and identifiers for algorithms used with S/MIME and CMS. Object identifiers for other purposes should not be assigned in this arc.

3.1. Update to "SMI Security for Mechanism Codes" Registry

The "SMI Security for Mechanism Codes" table generally contains entries with a positive integer value, but the value donated by RSA Data Security cannot be described in this manner. An accompanying table is needed with this entry:

      OID Value              Name    Description           References
      ---------------------  -----  ---------------------  ----------
      1.2.840.113549.1.9.16  smime   S/MIME Mail Security  This RFC

3.2. "SMI Security for S/MIME Mail Security" Registry

Within the SMI-numbers registry, add an "SMI Security for S/MIME Mail Security (1.2.840.113549.1.9.16)" table with three columns:

      Decimal  Description                             References
      -------  --------------------------------------  ----------
      0        Module identifiers                      This RFC
      1        CMS content types                       This RFC
      2        Attributes                              This RFC
      3        Algorithm identifiers                   This RFC
      4        Certificate distribution                This RFC
      5        Signature policy qualifiers             This RFC
      6        Commitment type identifiers             This RFC
      7        Test security policies                  This RFC
      8        Symmetric key dist ctrl attrs           This RFC
      9        Signature type identifiers              This RFC
      10       Encoded information types               This RFC
      11       S/MIME capabilities                     This RFC
      12       PSKC attributes                         This RFC