Commercial National Security Algorithm (CNSA) Suite Profile of Certificate Management over CMS
RFC 8756

Received changes through RFC Editor sync (created alias RFC 8756, changed abstract to 'This document specifies a profile of the Certificate Management over CMS (CMC) protocol for managing X.509 public key certificates in applications that use the Commercial National Security Algorithm (CNSA) Suite published by the United States Government.

The profile applies to the capabilities, configuration, and operation of all components of US National Security Systems that manage X.509 public key certificates over CMS. It is also appropriate for all other US Government systems that process high-value information.

The profile is made publicly available here for use by developers and operators of these and any other system deployments.', changed pages to 17, changed standardization level to Informational, changed state to RFC, added RFC published event at 2020-03-27, changed ISE state to Published RFC)

(Via drafts-eval@iana.org): IESG/Authors/WG Chairs:

The IANA Functions Operator has reviewed draft-jenkins-cnsa-cmc-profile-03 and has the following comments:

We understand that this document doesn't require any registry actions.

While it's often helpful for a document's IANA Considerations section to remain in place upon publication even if there are no actions, if the authors strongly prefer to remove it, we do not object.

If this assessment is not accurate, please respond as soon as possible.

Thank you,

Amanda Baber
Lead IANA Services Specialist

draft-jenkins-cnsa-cmc-profile has been presented for publication as an
Informational RFC in the Independent Submissions Stream.

This is one of a series of documents being brought forward that describe
profiles of various security tools. The profiles have been developed by
the US Government, but are not portrayed as mandatory beyond their use
within US Government deployments, nor are they recommended for use by
other parties. The profiles are presented to enable developers to comply
with the profiles, but also to offer them as input to other bodies that
may wish to construct their own profiles.

The full set of documents that I am aware of is:
- draft-jenkins-cnsa-cert-crl-profile (done 5742, in RFC Editor queue)
- draft-jenkins-cnsa-cmc-profile (this document)
- draft-jenkins-cnsa-smime-profile (not yet reviewed)
- draft-turner-sodp-profile (not yet reviewed)

This particular document is a profile of Certificate Management over CMS
(CMC).

It has been reviewed for me by Jonathan Hammell and  Sean Turner. This
resulted in some minor updates for clarity and accuracy.

I also conducted a review, and asked the authors to update the Abstract
to make it more simple and obvious.