[Servercert-wg] Ed25519 certificates

Tue Jun 18 19:18:31 UTC 2024

DigiCert has proposed adding Ed25519 curves multiple times, both publicly and privately, and we’ve always been told that the Certificate Consumers are not interested in adding support for it.

This is unfortunate because it is quite popular, especially in Europe, and I’m not aware of a good reason for not allowing it, other than just reducing the number of algorithms that need to be maintained and supported, which is a legitimate concern.

The other valid reason is that now is not a particularly good time to be transitioning between curves (e.g. P256 -> X25519), because organizations have limited resources and neither of those methods are quantum-safe.  Getting ready for post-quantum crypto is probably a better use of resources for most organizations.  But not all.

But, on the whole, we continue to support allowing such certificates, if the details can be sorted out.

-Tim

From: Servercert-wg <servercert-wg-bounces at cabforum.org> On Behalf Of Inigo Barreira via Servercert-wg
Sent: Monday, June 10, 2024 12:47 PM
To: Q Misell <q at as207960.net>
Cc: CA/B Forum Server Certificate WG Public Discussion List <servercert-wg at cabforum.org>
Subject: Re: [Servercert-wg] Ed25519 certificates

BTW, it was already opened in GitHub

 <https://url.avanan.click/v2/___https:/github.com/cabforum/servercert/issues/451___.YXAzOmRpZ2ljZXJ0OmE6bzoxNGYzNTM5NDFlYTNjOGJlY2M5NGRjNzc4ZmU1ZjYxYzo2OmMxMDc6N2YzMjYwZDQzYWRiNjkyMzgzYzQ2OGZkZmYzOWNmYjc1YmRjZmQzYTIxYTc1NmQ5ZWU5MzkzZjMzOGVlN2NiMzpoOkY> https://github.com/cabforum/servercert/issues/451

De: Q Misell <q at as207960.net <mailto:q at as207960.net> > 
Enviado el: lunes, 10 de junio de 2024 16:49
Para: Inigo Barreira <Inigo.Barreira at sectigo.com <mailto:Inigo.Barreira at sectigo.com> >
CC: Ben Wilson <bwilson at mozilla.com <mailto:bwilson at mozilla.com> >; CA/B Forum Server Certificate WG Public Discussion List <servercert-wg at cabforum.org <mailto:servercert-wg at cabforum.org> >
Asunto: Re: [Servercert-wg] Ed25519 certificates

Thanks for passing that on, I'll keep a close eye on that proposal.

  _____  

Any statements contained in this email are personal to the author and are not necessarily the statements of the company unless specifically stated. AS207960 Cyfyngedig, having a registered office at 13 Pen-y-lan Terrace, Caerdydd, Cymru, CF23 9EU, trading as Glauca Digital, is a company registered in Wales under № 12417574 <https://url.avanan.click/v2/___https:/find-and-update.company-information.service.gov.uk/company/12417574___.YXAzOmRpZ2ljZXJ0OmE6bzoxNGYzNTM5NDFlYTNjOGJlY2M5NGRjNzc4ZmU1ZjYxYzo2OjBlMGQ6MDE2ODdlZTliZGVjZTdkNTQ1NGEyOGE4YmQ3NTNhNTVjMzkxZTRjNWQwY2MzZTJiNWM3Y2ViNzM4MmRkN2RkZTpoOkY> , LEI 875500FXNCJPAPF3PD10. ICO register №: ZA782876 <https://url.avanan.click/v2/___https:/ico.org.uk/ESDWebPages/Entry/ZA782876___.YXAzOmRpZ2ljZXJ0OmE6bzoxNGYzNTM5NDFlYTNjOGJlY2M5NGRjNzc4ZmU1ZjYxYzo2OmQ0MTg6NDA1MzU4MDliMTQ3ODJkMGQ4OTNmNGMxZDZjYWU4MjY1YTAyZmJhMzgyY2Q3M2M0YmEyMDhmZmQyZWQxNDU3MzpoOkY> . UK VAT №: GB378323867. EU VAT №: EU372013983. Turkish VAT №: 0861333524. South Korean VAT №: 522-80-03080. AS207960 Ewrop OÜ, having a registered office at Lääne-Viru maakond, Tapa vald, Porkuni küla, Lossi tn 1, 46001, trading as Glauca Digital, is a company registered in Estonia under № 16755226. Estonian VAT №: EE102625532. Glauca Digital and the Glauca logo are registered trademarks in the UK, under № UK00003718474 and № UK00003718468, respectively. 

On Mon, 10 Jun 2024 at 15:21, Inigo Barreira <Inigo.Barreira at sectigo.com <mailto:Inigo.Barreira at sectigo.com> > wrote:

FYI. TBD next week at the ETSI ESI meeting.

Title: Proposed CR#7 on TS 119 312: Introduce EdDSA incl. its variants (Ed448 and Ed25519)

Source: European Commission 

Abstract: ETSI TS 119 312 provides guidance on selection of cryptographic suites with particular emphasis on interoperability. The Edwards-Curve Digital Signature Algorithm (EdDSA) is a state-of-the-art algorithm for electronic signatures. It is recommended by experts in cryptography and information security and adopted in many Internet security applications and specifications. Unfortunately, the currently published version of TS 119 312 does not reference EdDSA. This change request proposes to add EdDSA as a recommended digital signature algorithm to TS 119 312. The European Commission’s eDelivery Building Block is updating its eDelivery AS4 guidelines and would like to use EdDSA as digital signature algorithm in the updated version. Addition of EdDSA to TS 119 312 would contribute to the continued broad adoption of eDelivery AS4 as an interoperable, open standards-based eDelivery solution based on state-of-the-art security.

De: Servercert-wg <servercert-wg-bounces at cabforum.org <mailto:servercert-wg-bounces at cabforum.org> > En nombre de Ben Wilson via Servercert-wg
Enviado el: sábado, 8 de junio de 2024 19:28
Para: Q Misell <q at as207960.net <mailto:q at as207960.net> >; CA/B Forum Server Certificate WG Public Discussion List <servercert-wg at cabforum.org <mailto:servercert-wg at cabforum.org> >
Asunto: Re: [Servercert-wg] Ed25519 certificates

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

Hi Q,

I'm checking with the crypto team here at Mozilla and will let you know from our perspective.

Thanks,

Ben

On Sat, Jun 8, 2024 at 4:39 AM Q Misell via Servercert-wg < <mailto:servercert-wg at cabforum.org> servercert-wg at cabforum.org> wrote:

Hi all,

At the Tor meeting a few weeks ago I had some discussions with people asking why Ed25519 certificates are not allowed under the BR (§ 6.1.5). As far as I can tell there isn't much of a reason not to allow Ed25519 certs (if a CA wishes to support them ofc) and there were a few scenarios presented to me where Ed25519 certs would be useful in the context of Tor, which already makes heavy usage of Ed25519 keys.

Would there be motivation to change the rules to allow Ed25519 certs, or is there some reason I'm missing as to why they're not allowed?

Thanks,

Q Misell

  _____  

Any statements contained in this email are personal to the author and are not necessarily the statements of the company unless specifically stated. AS207960 Cyfyngedig, having a registered office at 13 Pen-y-lan Terrace, Caerdydd, Cymru, CF23 9EU, trading as Glauca Digital, is a company registered in Wales under №  <https://url.avanan.click/v2/___https:/e.as207960.net/w4bdyj/xa9BLe6P___.YXAzOmRpZ2ljZXJ0OmE6bzoxNGYzNTM5NDFlYTNjOGJlY2M5NGRjNzc4ZmU1ZjYxYzo2OjBjNWM6ZTJmODM1ZGFjOTI3M2YyZTQ0ZjBjMzA0NmQ1OTRlZWY3ZTNjMmViZGVmMDFkN2JkMDViZjk0NTM1NTk0YmJmNzpoOkY> 12417574, LEI 875500FXNCJPAPF3PD10. ICO register №:  <https://url.avanan.click/v2/___https:/e.as207960.net/w4bdyj/h2BMZREa___.YXAzOmRpZ2ljZXJ0OmE6bzoxNGYzNTM5NDFlYTNjOGJlY2M5NGRjNzc4ZmU1ZjYxYzo2OjM2MDY6ZDUyYjAwZTg1NjQ4MGJmNTMxYzJiNWYyYWRkNGE0NzIzNTcwOGRmNmQ0MWJkMDc4NWRiNDdhNDZhNTE2YjM4MjpoOkY> ZA782876. UK VAT №: GB378323867. EU VAT №: EU372013983. Turkish VAT №: 0861333524. South Korean VAT №: 522-80-03080. AS207960 Ewrop OÜ, having a registered office at Lääne-Viru maakond, Tapa vald, Porkuni küla, Lossi tn 1, 46001, trading as Glauca Digital, is a company registered in Estonia under № 16755226. Estonian VAT №: EE102625532. Glauca Digital and the Glauca logo are registered trademarks in the UK, under № UK00003718474 and № UK00003718468, respectively. 

  <https://e.as207960.net/img/w4bdyj/kulEk2VowWMS> 

_______________________________________________
Servercert-wg mailing list
 <mailto:Servercert-wg at cabforum.org> Servercert-wg at cabforum.org
 <https://url.avanan.click/v2/___https:/lists.cabforum.org/mailman/listinfo/servercert-wg___.YXAzOmRpZ2ljZXJ0OmE6bzoxNGYzNTM5NDFlYTNjOGJlY2M5NGRjNzc4ZmU1ZjYxYzo2OjBhMjA6NWZiOGVkMzhhN2MxZjY0MjFhNTdkNWFlMjlkM2U5ZTk1YThjZmU0NjdhZDgxZjQ3YTczNzAxZTZhYWI5ZTUzNzpoOkY> https://lists.cabforum.org/mailman/listinfo/servercert-wg

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240618/03e9844d/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5231 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/servercert-wg/attachments/20240618/03e9844d/attachment-0001.p7s>