Informal Minutes of the P1363 Editorial Teleconference, October 31, 1997, 10 am Pacific Time. Present: Lily Chen Don Johnson Burt Kaliski David Kravitz Mike Markowitz Leo Reyzin Roger Schlafly Yiqun Lisa Yin Rob Zuccherato 1. Burt reported that the PAR for the addendum project and the revised PAR for the current project had been approved by the Microprocessor Standards Committee. They are now awaiting the Standards Board's approval, which is expected in December. 2. Lisa reported that the main body of the document was fairly complete, and that she expected it to be in an almost final state for the Albuquerque meeting. The bulk of the work is now in the Appendices--mainly conformance, security notes, key management and test vectors. Burt asked the participants to be prepared to discuss conformance and security notes in detail at the meeting. 3. Leo went over the e-mail he and Burt had sent to the discuss list about 10 days before the teleconference. The e-mail outlined the issues with conformance with primitives, and the two approaches under consideration, neither of which seemed ideal. Don explained the X-9 approach to key validation, which could be embedded into the operation or external (the standards gave recommendations as which method to use when). He suggested that a higher-level approach to conformance (looking not at the primitives but at a system as a whole) might work better. Roger suggested a case-by-case approach to the problem--dealing with one primitive at a time may be easier than coming with a general framework for conformance. Rob stressed that we should not compromise security no matter what approach we take. 4. Mike reported that he was working on the ASN.1 draft which would be ready for review before the November meeting. 5. Don urged everyone to give more thought to the issues of conformance given their importance. He said that ISO had formed a key validation study group, of which he was a member. He pointed out that it was important for us to decide what steps are part of the standard, as far as key and parameter validation and generation are concerned. We adjourned at about 10:50 Pacific Time.