Hi,

We have submitted a new version of the CBOR certificate draft.

https://tools.ietf.org/html/draft-raza-ace-cbor-certificates-04

The changes are:

- The profiling section has been removed; the profiling now relies completely 
on RFC 7925. The aim is to be compatible with all RFC 7925 profiled 
certificates.
- The encoding has been modified to increase compression and some missing 
pieces have been filled in.
- Example DER encoded RFC 7925 certificate with corresponding CBOR encoding. 
The example certificate is compressed from 314 to 136 bytes, a compression rate 
of 57%.

General purpose compression algorithms (without dictionary) seems not able to 
compress RFC 7925 profiles certificates. zlib compressed the example cert 9%, 
but other certificates and compression algorithms did in many cases increase 
the size.

We have submitted two drafts that use draft-raza-ace-cbor-certificates to 
compress X.509 certificates in TLS 1.3 and COSE.

https://tools.ietf.org/html/draft-mattsson-tls-cbor-cert-compress-00
https://tools.ietf.org/html/draft-mattsson-cose-cbor-cert-compress-00

Cheers,
John

-----Original Message-----
From: "[email protected]" <[email protected]>
Date: Monday, 9 March 2020 at 18:41
To: Joel Hoglund <[email protected]>, Göran Selander 
<[email protected]>, Martin Furuhed <[email protected]>, 
John Mattsson <[email protected]>, Shahid Raza <[email protected]>, 
Joel Höglund <[email protected]>, John Mattsson <[email protected]>, 
Göran Selander <[email protected]>
Subject: New Version Notification for draft-raza-ace-cbor-certificates-04.txt

    
    A new version of I-D, draft-raza-ace-cbor-certificates-04.txt
    has been successfully submitted by =?utf-8?q?John_Preu=C3=9F_Mattsson?= and 
posted to the
    IETF repository.
    
    Name:               draft-raza-ace-cbor-certificates
    Revision:   04
    Title:              CBOR Profile of X.509 Certificates
    Document date:      2020-03-09
    Group:              Individual Submission
    Pages:              16
    URL:            
https://www.ietf.org/internet-drafts/draft-raza-ace-cbor-certificates-04.txt
    Status:         
https://datatracker.ietf.org/doc/draft-raza-ace-cbor-certificates/
    Htmlized:       
https://tools.ietf.org/html/draft-raza-ace-cbor-certificates-04
    Htmlized:       
https://datatracker.ietf.org/doc/html/draft-raza-ace-cbor-certificates
    Diff:           
https://www.ietf.org/rfcdiff?url2=draft-raza-ace-cbor-certificates-04
    
    Abstract:
       This document specifies a CBOR encoding and profiling of X.509 public
       key certificate suitable for Internet of Things (IoT) deployments.
       The full X.509 public key certificate format and commonly used ASN.1
       DER encoding is overly verbose for constrained IoT environments.
       Profiling together with CBOR encoding reduces the certificate size
       significantly with associated known performance benefits.
    
       The CBOR certificates are compatible with the existing X.509
       standard, enabling the use of profiled and compressed X.509
       certificates without modifications in the existing X.509 standard.
    
                                                                                
      
    
    
    Please note that it may take a couple of minutes from the time of submission
    until the htmlized version and diff are available at tools.ietf.org.
    
    The IETF Secretariat
    
    
    

_______________________________________________
Lwip mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/lwip

Reply via email to