rfc9864v3.txt   rfc9864.txt 
skipping to change at line 280 skipping to change at line 280
parameters used in the "alg" computation from the accompanying "enc" parameters used in the "alg" computation from the accompanying "enc"
value. For example, the keydatalen KDF parameter value for "ECDH-ES" value. For example, the keydatalen KDF parameter value for "ECDH-ES"
is determined from the "enc" value, as described in Section 4.6.2 of is determined from the "enc" value, as described in Section 4.6.2 of
[RFC7518]. For the purposes of an "alg" value being fully specified, [RFC7518]. For the purposes of an "alg" value being fully specified,
deriving parameters from "enc" does not make the algorithm deriving parameters from "enc" does not make the algorithm
polymorphic, as the computation is still fully determined by the polymorphic, as the computation is still fully determined by the
algorithm identifiers used. This option is not present in COSE. algorithm identifiers used. This option is not present in COSE.
To perform fully-specified encryption in COSE, the outer "alg" value To perform fully-specified encryption in COSE, the outer "alg" value
MUST specify all parameters for key establishment, and the inner MUST specify all parameters for key establishment, and the inner
"alg" value must specify all parameters for symmetric encryption. "alg" value MUST specify all parameters for symmetric encryption.
For example, encryption via COSE using an outer "alg" value of For example, encryption via COSE using an outer "alg" value of
"A128KW" and an inner "alg" value of "A128GCM" uses fully-specified "A128KW" and an inner "alg" value of "A128GCM" uses fully-specified
algorithms. Note that when using COSE_Encrypt, as specified in algorithms. Note that when using COSE_Encrypt, as specified in
Section 5.1 of [RFC9052], the outer "alg" is communicated in the Section 5.1 of [RFC9052], the outer "alg" is communicated in the
headers of the COSE_Encrypt object and the inner "alg" is headers of the COSE_Encrypt object and the inner "alg" is
communicated in the headers of the COSE_recipient object. communicated in the headers of the COSE_recipient object.
While this specification provides a definition of what fully- While this specification provides a definition of what fully-
specified encryption algorithm identifiers are for both JOSE and specified encryption algorithm identifiers are for both JOSE and
COSE, it does not deprecate any polymorphic encryption algorithms, COSE, it does not deprecate any polymorphic encryption algorithms,
 End of changes. 1 change blocks. 
1 lines changed or deleted 1 lines changed or added

This html diff was produced by rfcdiff 1.48.