FW: Refinements to COSE and JOSE Registrations for WebAuthn Algorithms

From: Mike Jones
Sent: Monday, July 8, 2019 6:01 PM
To: cose@ietf.org
Subject: Refinements to COSE and JOSE Registrations for WebAuthn Algorithms

The "COSE and JOSE Registrations for WebAuthn Algorithms" specification has been updated to address feedback received since working group adoption.  The one breaking change is changing the secp256k1 curve identifier for JOSE from "P-256K" to "secp256k1", for reasons described by John Mattsson.  The draft now also specifies that the SHA-256 hash function is to be used with "ES256K" signatures - a clarification due to Matt Palmer.

The specification is available at:

  *   https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-01

An HTML-formatted version is also available at:

  *   http://self-issued.info/docs/draft-ietf-cose-webauthn-algorithms-01.html

                                                                -- Mike

P.S.  This notice was also posted at http://self-issued.info/?p=1986 and as @selfissued<https://twitter.com/selfissued>.