FW: Registrations for all WebAuthn algorithm identifiers completed

From: Mike Jones
Sent: Friday, June 19, 2020 3:06 PM
To: 'public-webauthn@w3.org' <public-webauthn@w3.org>
Subject: Registrations for all WebAuthn algorithm identifiers completed

We wrote the specification COSE and JOSE Registrations for WebAuthn Algorithms<https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-08> to create and register COSE and JOSE algorithm and elliptic curve identifiers for algorithms used by WebAuthn and CTAP2 that didn't yet exist.  I'm happy to report that all these registrations are now complete and the specification has progressed to the RFC Editor.  Thanks to the COSE working group<https://datatracker.ietf.org/wg/cose/about/> for supporting this work.

Search for WebAuthn in the IANA COSE Registry<https://www.iana.org/assignments/cose/cose.xhtml> and the IANA JOSE Registry<https://www.iana.org/assignments/jose/jose.xhtml> to see the registrations.  These are now stable and can be used by applications, both in the WebAuthn/FIDO2 space and for other application areas, including decentralized identity (where the secp256k1 "bitcoin curve" is in widespread use).

The algorithms registered are:

  *   RS256 - RSASSA-PKCS1-v1_5 using SHA-256 - new for COSE

*       RS384 - RSASSA-PKCS1-v1_5 using SHA-384 - new for COSE

*       RS512 - RSASSA-PKCS1-v1_5 using SHA-512 - new for COSE

*       RS1 - RSASSA-PKCS1-v1_5 using SHA-1 - new for COSE

*       ES256K - ECDSA using secp256k1 curve and SHA-256 - new for COSE and JOSE

The elliptic curves registered are:

*       secp256k1 - SECG secp256k1 curve - new for COSE and JOSE

                                                       -- Mike

P.S.   This notice was also posted at https://self-issued.info/?p=2106 and as @selfissued<https://twitter.com/selfissued>.