Subject Identification Method

1
Subject Identification Method

• August, 2004
• Tim Polk, NIST

2
Status

• New draft 03 published just before the meeting

3
Detailed solution

• Subject contributes a password or random value in
  addition to SII
• RA contributes a second random number to prevent
  pre-calculation attack by client
• Hash calculation over two randoms and SII
• Server can confirm Subject-supplied SII given
  random values

4
Unresolved Comments

• Clarify Usage Scenarios
• Clarify/Enhance certificate request model to
• Specify EPEPSI parameters and algorithms
• Clarify when RA signs and when subject signs PKCS
  10
• Specify attribute to convey info in PKCS 10
• IANA registration of SII types?

5
Way Forward

• Authors need to work with reviewers to resolve
  open issues
• Publish -04 draft by end of August
• WG Last Call on -04 draft in September