RFC7107

Internet Engineering Task Force (IETF) R. Housley Request for Comments: 7107 Vigil Security Category: Informational January 2014 ISSN: 2070-1721

Object Identifier Registry for the S/MIME Mail Security Working Group

Abstract

When the S/MIME Mail Security Working Group was chartered, an object identifier arc was donated by RSA Data Security for use by that working group. This document describes the object identifiers that were assigned in that donated arc, transfers control of that arc to IANA, and establishes IANA allocation policies for any future assignments within that arc.

Status of This Memo

This document is not an Internet Standards Track specification; it is published for informational purposes.

This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Not all documents approved by the IESG are a candidate for any level of Internet Standard; see Section 2 of RFC 5741.

Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc7107.

Copyright Notice

This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.

  3.7. "SMI Security for S/MIME Certificate Distribution

  3.8. "SMI Security for S/MIME Signature Policy

  3.9. "SMI Security for S/MIME Commitment Type

  3.10. "SMI Security for S/MIME Test Security Policies"

  3.11. "SMI Security for S/MIME Control Attributes for

  3.12. "SMI Security for S/MIME Signature Type

  3.13. "SMI Security for S/MIME X.400 Encoded Information

  3.14. "SMI Security for S/MIME Capabilities (other than

  3.15. "SMI Security for S/MIME Portable Symmetric Key

Introduction

When the S/MIME Mail Security Working Group was chartered, an object identifier arc was donated by RSA Data Security for use by that working group. These object identifiers are primarily used with Abstract Syntax Notation One (ASN.1) [ASN1-88] [ASN1-08]. The ASN.1 specifications continue to evolve, but object identifiers can be used with any and all versions of ASN.1.

The S/MIME object identifier arc is:

  id-smime OBJECT IDENTIFIER ::= { iso(1) member-body(2)
              us(840) rsadsi(113549) pkcs(1) pkcs9(9) 16 }

This document describes the object identifiers that were assigned in that donated arc, transfers control of that arc to IANA, and establishes IANA allocation policies for any future assignments within that arc.

Subordinate Object Identifier Arcs

Thirteen subordinate object identifier arcs were used, numbered from zero to twelve. They were assigned as follows:

  -- ASN.1 modules
  id-mod  OBJECT IDENTIFIER ::= { id-smime  0 }

  -- Cryptographic Message Syntax (CMS) content types
  id-ct   OBJECT IDENTIFIER ::= { id-smime  1 }

  -- attributes
  id-aa   OBJECT IDENTIFIER ::= { id-smime  2 }

  -- algorithm identifiers
  id-alg  OBJECT IDENTIFIER ::= { id-smime  3 }

  -- certificate distribution
  id-cd   OBJECT IDENTIFIER ::= { id-smime  4 }

  -- signature policy qualifier
  id-spq  OBJECT IDENTIFIER ::= { id-smime  5 }

  -- commitment type identifier
  id-cti  OBJECT IDENTIFIER ::= { id-smime  6 }

  -- test security policies
  id-tsp  OBJECT IDENTIFIER ::= { id-smime  7 }

  -- symmetric key distribution control attributes
  id-skd  OBJECT IDENTIFIER ::= { id-smime  8 }

  -- signature type identifier
  id-sti  OBJECT IDENTIFIER ::= { id-smime  9 }

  -- encoded information types
  id-eit  OBJECT IDENTIFIER ::= { id-smime 10 }

   -- S/MIME capabilities
  id-cap  OBJECT IDENTIFIER ::= { id-smime 11 }

  -- PSKC attributes
  id-pskc OBJECT IDENTIFIER ::= { id-smime 12 }

The values assigned in each of these subordinate object identifier arcs are discussed in the next section.

IANA Considerations

IANA is asked to update one registry table and create fourteen additional tables.

Updates to the new tables require both Specification Required and Expert Review as defined in RFC5226. The expert is expected to ensure that any new values are strongly related to the work that was done by the S/MIME Mail Security Working Group; examples include content types, attributes, and identifiers for algorithms used with S/MIME and CMS. Object identifiers for other purposes should not be assigned in this arc.

Update to "SMI Security for Mechanism Codes" Registry

The "SMI Security for Mechanism Codes" table generally contains entries with a positive integer value, but the value donated by RSA Data Security cannot be described in this manner. An accompanying table is needed with this entry:

  OID Value              Name    Description           References
  ---------------------  -----  ---------------------  ----------
  1.2.840.113549.1.9.16  smime   S/MIME Mail Security  This RFC

"SMI Security for S/MIME Mail Security" Registry

Within the SMI-numbers registry, add an "SMI Security for S/MIME Mail Security (1.2.840.113549.1.9.16)" table with three columns:

  Decimal  Description                             References
  -------  --------------------------------------  ----------
  0        Module identifiers                      This RFC
  1        CMS content types                       This RFC
  2        Attributes                              This RFC
  3        Algorithm identifiers                   This RFC
  4        Certificate distribution                This RFC
  5        Signature policy qualifiers             This RFC
  6        Commitment type identifiers             This RFC
  7        Test security policies                  This RFC
  8        Symmetric key dist ctrl attrs           This RFC
  9        Signature type identifiers              This RFC
  10       Encoded information types               This RFC
  11       S/MIME capabilities                     This RFC
  12       PSKC attributes                         This RFC