HMAC-SHA-2 Authentication Protocols in User-Based Security Model (USM) for SNMPv3
draft-ietf-opsawg-hmac-sha-2-usm-snmp-new-05

[Ballot comment]
While it certainly passes compilation, the MIB module doesn't display nicely.
Ex:
usmHMAC128SHA224AuthProtocol OBJECT-IDENTITY STATUS current DESCRIPTION
"The Authentication Protocol usmHMAC128SHA224AuthProtocol uses
HMAC-SHA-224 and truncates output to 128 bits." REFERENCE "- Krawczyk,
H., Bellare, M., and R. Canetti, HMAC: Keyed-Hashing for Message
Authentication, RFC 2104. - National Institute of Standards and
Technology, Secure Hash Standard (SHS), FIPS PUB 180-4, 2012." ::= {
snmpAuthProtocols 4 }

Please fix this before submitting.

The Document is intended as a Proposed Standard. It Obsoletes 
RFC 7630, also a PS.

Technical Summary

  This document specifies several authentication protocols based on the
  SHA-2 hash functions for the User-based Security Model (USM) for
  SNMPv3 defined in RFC 3414.  It obsoletes RFC 7630, in which the MIB
  MODULE-IDENTITY value was incorrectly specified.

Working Group Summary

OPSAWG was used and the working group for both the orignal and this
replacement document. both have extensively reviewed and modula the
error that was discovered, when populating the IANA registry. The registry
has been correctly populated however the document errata is sufficiently
gross as to necessitate correction.

Document Quality

The corrections are minor and the original document was extensively reviewed.
This version also has benifeted from changes proposed by the secdir.

Personnel

Joel Jaeggli is sponsoring AD.

No appeals, IPR, or additional formal review are anticipated or required.

(Via drafts-lastcall-comment@iana.org): IESG/Authors/WG Chairs:

IANA has completed its review of draft-ietf-opsawg-hmac-sha-2-usm-snmp-new-01.txt. If any part of this review is inaccurate, please let us know.

IANA understands that, upon approval of this document, there are two actions which IANA must complete.

First, in the SMI Network Management MGMT Codes Internet-standard MIB subregistry of the Structure of Management Information (SMI) Numbers (MIB Module Registrations) registry located at:

https://www.iana.org/assignments/smi-numbers/

the existing entry for value 235 will have its reference changed to [ RFC-to-be ].

The revised entry will be:

Decimal: 235
Name: snmpUsmHmacSha2MIB
Description: snmpUsmHmacSha2MIB
Reference: [ RFC-to-be ]

Second, in the SnmpAuthProtocols subregistry of the Simple Network Management Protocol (SNMP) Number Spaces located at:

https://www.iana.org/assignments/snmp-number-spaces/

There are four, exisiting registrations that will have their references changed to [ RFC 7630 ]:

Value Description Reference
4 usmHMAC128SHA224AuthProtocol [RFC-ietf-opsawg-hmac-sha-2-usm-snmp-06]
5 usmHMAC192SHA256AuthProtocol [RFC-ietf-opsawg-hmac-sha-2-usm-snmp-06]
6 usmHMAC256SHA384AuthProtocol [RFC-ietf-opsawg-hmac-sha-2-usm-snmp-06]
7 usmHMAC384SHA512AuthProtocol [RFC-ietf-opsawg-hmac-sha-2-usm-snmp-06]

the result of this revision will be:

Value Description Reference
4 usmHMAC128SHA224AuthProtocol [ RFC 7630 ]
5 usmHMAC192SHA256AuthProtocol [ RFC 7630 ]
6 usmHMAC256SHA384AuthProtocol [ RFC 7630 ]
7 usmHMAC384SHA512AuthProtocol [ RFC 7630 ]


IANA understands that the two actions above are the only ones required to be completed upon approval of this document.

Note:  The actions requested in this document will not be completed until the document has been approved for publication as an RFC. This message is only to confirm what actions will be performed. 

Thank you,

Sabrina Tanamal
IANA Specialist
ICANN

The following Last Call announcement was sent out:

From: The IESG
To: "IETF-Announce"
CC: opsawg-chairs@ietf.org, joelja@gmail.com, draft-ietf-opsawg-hmac-sha-2-usm-snmp-new@ietf.org, opsawg@ietf.org
Reply-To: ietf@ietf.org
Sender:
Subject: Last Call:  (HMAC-SHA-2 Authentication Protocols in USM for SNMPv3) to Proposed Standard


The IESG has received a request from the Operations and Management Area
Working Group WG (opsawg) to consider the following document:
- 'HMAC-SHA-2 Authentication Protocols in USM for SNMPv3'
  as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits
final comments on this action. Please send substantive comments to the
ietf@ietf.org mailing lists by 2016-01-18. Exceptionally, comments may be
sent to iesg@ietf.org instead. In either case, please retain the
beginning of the Subject line to allow automated sorting.

Abstract


  This memo specifies new HMAC-SHA-2 authentication protocols for the
  User-based Security Model (USM) for SNMPv3 defined in RFC 3414.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-opsawg-hmac-sha-2-usm-snmp-new/

IESG discussion can be tracked via
https://datatracker.ietf.org/doc/draft-ietf-opsawg-hmac-sha-2-usm-snmp-new/ballot/


No IPR declarations have been submitted directly on this I-D.