MINUTES IEEE P1363: Standard for RSA, Diffie-Hellman, and Related Public-Key Cryptography January 13, 1994 Redwood City, California An organizational first meeting took place at 1:00 pm on Jan. 13, 1994 at Hotel Sofitel in Redwood Shores, Calif. It was led by Burt Kaliski. Some documents were distributed at the meeting: P1363 meeting notice and agenda RSA Labs Public Key Cryptography Standards (PKCS) (Nov. 1993 release) ANSI X9.31-1992 part 1 draft (March 1993) IEEE Standards Manual IEEE Project Authorization Request (PAR) for P1363 (June 1993) PKP letter claiming patent coverage of public, and promising reasonable licensing for RSA signatures (April, 1990) The ANSI Patent Policy and guidelines (1992) were also entered into the minutes. The Project Authorization Request (PAR) was distributed and reviewed. There was some discussion of broadening the language of the PAR. In particular, people didn't want any public key algorithm to be precluded. The intended scope should include generic Diffie-Hellman as well as particular implementations. Ie, the traditional mod P method and possibly elliptic curves. Someone suggested that paragraph 4 of section 7 of the PAR be changed so that the scope includes "management" of public keys. Some also wanted to change the title of the project to reflect the consideration of other algorithms. Motion 1. (Terry Arnold, Glenn Tenney) Working group approve the PAR as written. Passed 22-0-2. Motion 2. (Roger Schlafly, Scott Vanstone) Previous proposed changes have been interpreted by the working group to be within the language of the existing PAR. Passed 15-0-9. The rationale behind these motions is that while the group would prefer broader language defining the scope, all of the work currently comtemplated is arguably allowed by the PAR. It is better to keep the number of changes to a minimum, and we can always make a change later when we are more sure of exactly what we want. Terry Arnold suggested that the proposed standard document have a body which defines notation and terminology, and addenda for each algorithm (D-H, RSA, etc.), and for hardware support, such as modular arithmethic. The standard would specify requirements, properties, and non-properties. Suggestions for base documents were taken. ISO/IEC 7498 part 2 ANSI dictionary security addendum IEEE information ISO/IEC SC27 glossary RSA Labs PKCS ANSI X9F1 work: X9.30, X9.31 ISO/IEL 9796 Australian standards ANSI X12.58 (1993 v.2) ITU-T X.509 Motion 3. (Terry Arnold, Rich Ankney) Consider this list as the base list subject to amendment. Passed 11-0-6. Concerns were raised about Public Key Partners (PKP) patents. Copies were distributed of a letter from PKP stating that PKP will abide by ANSI and IEEE patent policies insofar as RSA signatures are involved. The PKP patent claims are broader, so a broader letter is needed. Motion 4. (Glenn Tenney, Peter Yee) Working group requests PKP to disclose licensing terms and conditions for the patents listed in the 4-20-90 PKP letter. Passed unanimously. We elected Chair: Burt Kaliski Vice-chair: Terry Arnold Secretary: Roger Schlafly Editor: David Aucsmith Motion 5. (Tom Jones, Rich Ankney) Chair request that RSADSI provide an ftp/email list for the group. Passed, unanimously. Some volunteered for work assignments. Tom Jones -- dictionary David Aucsmith -- draft outline, collect relevant documents Russ Housley -- IEEE stuff Motion 6. (Tom Jones, Russ Housley) The committee will try to meet three times a year. Passed 16-0-2. Motion 7. (Terry Arnold, Russ Housley) The next meeting will be at the IEEE Symposium on Research in Security and Privacy, Claremont Hotel, Oakland, Calif, on or around the morning of May 18. Passed, 12-0-1. We adjourned at 5:00pm, until the next meeting. In attendance, Rich Ankney Fischer Int'l 13506 King Charles Dr Chantilly, VA 22021 703/818-0713 no fax ankney@emc2-tao.fisc.com Alan Arndt Comtech labs 900 hansen way Palo Alto, CA 94304 415/813-4500 415/813-4505 fax aga@Comtech.com Terry S. Arnold Merdan Group 4617 Ruffner St. San Diego CA 92111 619-571-8565 tarnold@crash.cts.com David Aucsmith Intel Corporation HF3-12 5200 N.E. Elam Young Parkway Hillsboro, OR 97124 503/696-5562 503/696-1805 fax awk@ibeam.intel.com Carl Campbell Visa 809 Malin Road Newtown Square, PA 19073 610/353-8747 Jan Dolphin Spyrus 2880 Zanker Rd. Ste 207 San Jose, CA 95134 408/432-8180 408/432-8415 fax jdolphin@spyrus.com Alan Eldridge IRIS Associates, Inc. One Technology Park Westford, MA 01886 508/692-2800 x215 508/692-7365 fax eldridge@iris.com Richard Feingold Computer Incident Advisory Capability Lawrence Livermore Natonal Laboratory PO Box 808 Livermore, CA 94551-0808 510/422-1783 510/423-8002 fax feingoldra@llnl.gov Eli Herscovitz Bynet-RAD Hanechoshet 8 St, Ramat Hahayal, Tel Aviv Israel 69710 972-3-6459458 telephone 972-3-5447990 fax Dale Hopkins Atalla Corp. 2304 Zanker Road San Jose, Ca. 95131 408/435-5301 Russell Housley Xerox Special Information Systems 7900 Westpark Drive McLen, VA 22102 703/790-3767 703/790-3764 fax Housley@Xerox.com Brett Howard Timestep Corporation 600 March Road Kanata, Ontario 613/820-0024 613/591-8617 fax bretth@newbridge.com Tom Jones ViaCrypt 2110 West Peoria Ave. Phoenix, AZ 85029 TCJones@dockmaster.ncsc.mil Burt Kaliski RSA Laboratories 100 Marine Parkway Redwood City, CA 94065 415/595-7703 415/595-4126 fax burt@rsa.com John C. Kennedy Cylink Corporation 310 N Mary Avenue Sunnyvale, CA 94086 408/735-5885 408/735-6645 fax jkennedy@cylink.com Dr. Cetin K. Koc Department of Electrical & Computer Eng. Oregon State University Corvallis, OR 97331 503/737-4853 503/737-1300 fax Koc@ece.orst.edu Sherry McMahan Cylink 506 Rolling Creek Road Knoxville, TN 37922 615/675-2881 sherry@cylink.com Dr. Mark Oliver Idaho National Engineering Laboratory (INEL) PO 1625 MS 3730 Idaho Falls, ID, 83415 208/526-9952 oli@inel.gov Karen Randall AT&T Bell Laboratories 101 Crawfords Corner Road PO Box 3030 Holmdel, NJ 07733 908/949-0610 908/949-8569 fax karen.randall@att.com Richard L. Robertson Precision Software Products 432 Holyoke Street San Francisco, CA 94134 415/468.3207 richardr@netcom.com Connie J. Sadler Lockheed Missiles and Space Co., Inc. (LMSC) 1051 Del Norte Ave. Menlo Park, CA. 94025-1733 sadler@lmsc.lockheed.com 408/756-1577 or 408/756-1577 Marius Schilder DigiCash Kruislaan 419 1098 VA Amsterdam The Netherlands marius@digicash.nl Roger Schlafly ISC 1141 Lake Cook Deerfield IL 60015 708/405-0500 or 408/476-3550 rschlafly@attmail.com Don Stephenson SunSoft MS: MTV05-40 2550 Garcia Ave Mountain View, CA 94043 415/336-4366 415/336-6015 fax don.stephenson@eng.sun.com Glenn Tenney Fantasia Systems Inc. 2111 Ensenada Way San Mateo, CA 94403 415/574-3420 415/574-0546 fax tenney@netcom.com Scott Vanstone Mobius Encryption Technologies 200 Matheson Boulevard West Mississauga, Ontario, L5R 3L7 Canada 416/507-4220 savanstone@crypto3.waterloo.ca Rocky Wu, MTS SunSoft Inc. 2550 Garcia Ave MTV5-40 Mt View CA 94043 rocky@Eng.Sun.COM Peter Yee NASA Ames Research Center MS 233-18 Moffett Field, CA 94035-1000 415/604-3812 415/604-6999 fax yee@atlas.arc.nasa.gov