Skip to main content

Shepherd writeup
draft-corcoran-cnsa-ipsec-profile

draft-corcoran-cnsa-ipsec-profile has been presented to the ISE for
publication as an Informational RFC on the Independent Stream.

==Purpose==

This document forms one of a series that set out the US Government's
Commercial National Security Algorithm (CNSA) Suite.  This document
specifies the conventions for using the CNSA Suite algorithms in
Internet Protocol Security.  It applies specifically to IPsec.

The series of documents are made publicly available through the RFC
Series for use by developers and operators of these and any other
system deployments.

== History==

This document has seen no discussion within the IETF.

The document was first brought to the ISE in December 2019 at version
-00. Since then it has been revised several times to address review
comments.

==Non-IETF Work==

The document title, the Abstract, and the Introduction make the scope
of this work clear. There is no risk of confusing this for IETF work.

==Security Considerations==

The whole document is relevant to Security. Nevertheless, the authors
have also provided a Security Considerations section to highlight some
additional points.

==IANA==

This document requests IANA to make assignments from the registry at
https://www.iana.org/assignments/crypto-suites
The assignment policy for that registry is "Expert Review and RFC
Required"

The Designated Expert for the registry is Tero Kivinen. Tero provided
a positive opinion in August 2020.

==Reviews==

Along its rather slow path, the document has been reviewed twice by the
ISE, by Tero as expert for the registry, and by Paul Hoffman as an IPsec
expert.

The reviews led to a number of updates to fully address the issues
raised.

Details of the reviews can be retrieved on request.

==Remaining Nits and Edits==

There are some nits around the use of BCP 14 language that the authors
will resolve in a new revision.

Back