aboutsummaryrefslogtreecommitdiff
path: root/draft-schanzen-gns.xml
diff options
context:
space:
mode:
Diffstat (limited to 'draft-schanzen-gns.xml')
-rw-r--r--draft-schanzen-gns.xml60
1 files changed, 33 insertions, 27 deletions
diff --git a/draft-schanzen-gns.xml b/draft-schanzen-gns.xml
index f1a9157..9233976 100644
--- a/draft-schanzen-gns.xml
+++ b/draft-schanzen-gns.xml
@@ -154,7 +154,7 @@
154 <dt>B</dt> 154 <dt>B</dt>
155 <dd> 155 <dd>
156 is the group generator (X(P),Y(P)) of edwards25519 as defined in 156 is the group generator (X(P),Y(P)) of edwards25519 as defined in
157 <xref target="RFC7748" />. 157 <xref target="RFC7748" />.
158 </dd> 158 </dd>
159 <dt>L</dt> 159 <dt>L</dt>
160 <dd> 160 <dd>
@@ -164,9 +164,8 @@
164 <dd> 164 <dd>
165 is the ECDSA public key corresponding to d. It is defined in 165 is the ECDSA public key corresponding to d. It is defined in
166 <xref target="RFC6979" /> as the curve point d*B where B is the group 166 <xref target="RFC6979" /> as the curve point d*B where B is the group
167 generator of the elliptic curve. 167 generator of the elliptic curve. The public key is used to uniquely
168 The public key is used to uniquely identify a GNS zone and is referred to 168 identify a GNS zone and is referred to as the "zone key".
169 as the "zone key".
170 </dd> 169 </dd>
171 </dl> 170 </dl>
172 </section> 171 </section>
@@ -448,8 +447,8 @@
448 defines the BOX record format to box up SRV and TLSA records and 447 defines the BOX record format to box up SRV and TLSA records and
449 include them in the record set of the label they are associated 448 include them in the record set of the label they are associated
450 with. For example, a 449 with. For example, a
451 TLSA record for "_https._tcp.foo.gnu" will be stored in the record set of 450 TLSA record for "_https._tcp.example.org" will be stored in the record set of
452 "foo.gnu" as a BOX record with service (SVC) 443 (https) and protocol (PROTO) 6 451 "example.org" as a BOX record with service (SVC) 443 (https) and protocol (PROTO) 6
453 (tcp) and record TYPE "TLSA". 452 (tcp) and record TYPE "TLSA".
454 For reference, see also <xref target="RFC2782" />. 453 For reference, see also <xref target="RFC2782" />.
455 A BOX DATA entry has the following format: 454 A BOX DATA entry has the following format:
@@ -582,8 +581,7 @@ q := SHA512 (zk_h)
582 is the 256-bit private zone key as defined in <xref target="zones" />. 581 is the 256-bit private zone key as defined in <xref target="zones" />.
583 </dd> 582 </dd>
584 <dt>label</dt> 583 <dt>label</dt>
585 <dd> 584 <dd>is a UTF-8 string under which the resource records are published.
586 is a UTF-8 string under which the resource records are published.
587 </dd> 585 </dd>
588 <dt>d_h</dt> 586 <dt>d_h</dt>
589 <dd> 587 <dd>
@@ -1070,7 +1068,7 @@ BDATA := TWOFISH(K[32:63], IV[16:31],
1070 <section anchor="nick_processing" numbered="true" toc="default"> 1068 <section anchor="nick_processing" numbered="true" toc="default">
1071 <name>NICK</name> 1069 <name>NICK</name>
1072 <t> 1070 <t>
1073 NIICK records are only relevant to the recursive resolver 1071 NICK records are only relevant to the recursive resolver
1074 if the record set in question is the final result which is to 1072 if the record set in question is the final result which is to
1075 be returned to the client. The encountered NICK records may either 1073 be returned to the client. The encountered NICK records may either
1076 be supplemental (see <xref target="rrecords"/>) or 1074 be supplemental (see <xref target="rrecords"/>) or
@@ -1086,9 +1084,9 @@ BDATA := TWOFISH(K[32:63], IV[16:31],
1086 </t> 1084 </t>
1087 <figure> 1085 <figure>
1088 <artwork name="" type="" align="left" alt=""><![CDATA[ 1086 <artwork name="" type="" align="left" alt=""><![CDATA[
1089Query: alice.doe (type=A) 1087Query: alice.example (type=A)
1090Result: 1088Result:
1091A: 1.2.3.4 1089A: 192.0.2.1
1092NICK: eve 1090NICK: eve
1093 ]]></artwork> 1091 ]]></artwork>
1094 </figure> 1092 </figure>
@@ -1102,9 +1100,9 @@ NICK: eve
1102 </t> 1100 </t>
1103 <figure> 1101 <figure>
1104 <artwork name="" type="" align="left" alt=""><![CDATA[ 1102 <artwork name="" type="" align="left" alt=""><![CDATA[
1105Query: alice.doe (type=A) 1103Query: alice.example (type=AAAA)
1106Result: 1104Result:
1107A: 1.2.3.4 1105AAAA: 2001:DB8::1
1108NICK: john (Supplemental) 1106NICK: john (Supplemental)
1109 ]]></artwork> 1107 ]]></artwork>
1110 </figure> 1108 </figure>
@@ -1145,16 +1143,24 @@ NICK: john (Supplemental)
1145 PoW calculations the algorithm is instantiated with the 1143 PoW calculations the algorithm is instantiated with the
1146 following parameters: 1144 following parameters:
1147 </t> 1145 </t>
1148 <artwork name="" type="" align="left" alt=""><![CDATA[ 1146 <dl>
1149S := "GnsRevocationPow" /* Salt, 16 byte */ 1147 <dt>S</dt>
1150t := 3 /* Iterations */ 1148 <dd>The salt. Fixed 16-octet string: "GnsRevocationPow".</dd>
1151m := 1024 /* Memory size, 1 MiB */ 1149 <dt>t</dt>
1152T := 64 /* Tag (=output) length in bytes */ 1150 <dd>Number of iterations: 3</dd>
1153p := 1 /* Parallelization parameter */ 1151 <dt>m</dt>
1154v := 0x13 /* Version */ 1152 <dd>Memory size in KiB: 1024</dd>
1155y := 2 /* Type (Argon2id) */ 1153 <dt>T</dt>
1156X, K are unused 1154 <dd>Output length of hash in bytes: 64</dd>
1157 ]]></artwork> 1155 <dt>p</dt>
1156 <dd>Parallelization parameter: 1</dd>
1157 <dt>v</dt>
1158 <dd>Algorithm version: 0x13</dd>
1159 <dt>y</dt>
1160 <dd>Algorithm type (Argon2id): 2</dd>
1161 <dt>X</dt><dd>Unused</dd>
1162 <dt>K</dt><dd>Unused</dd>
1163 </dl>
1158 <t> 1164 <t>
1159 The following is the message string "P" on which the PoW is 1165 The following is the message string "P" on which the PoW is
1160 calculated: 1166 calculated:
@@ -1401,7 +1407,7 @@ Example name: www.example.<Base32(zk)>
1401 resolution SHOULD start from the respective local zone: 1407 resolution SHOULD start from the respective local zone:
1402 </t> 1408 </t>
1403 <artwork name="" type="" align="left" alt=""><![CDATA[ 1409 <artwork name="" type="" align="left" alt=""><![CDATA[
1404Example name: www.example.gnu 1410Example name: www.example.org
1405Local zones: 1411Local zones:
1406fr = (d0,zk0) 1412fr = (d0,zk0)
1407gnu = (d1,zk1) 1413gnu = (d1,zk1)
@@ -1422,10 +1428,10 @@ com = (d2,zk2)
1422 for the same suffix, the locally managed zone MUST have priority. 1428 for the same suffix, the locally managed zone MUST have priority.
1423 </t> 1429 </t>
1424 <artwork name="" type="" align="left" alt=""><![CDATA[ 1430 <artwork name="" type="" align="left" alt=""><![CDATA[
1425Example name: www.example.gnu 1431Example name: www.example.org
1426Local suffix mappings: 1432Local suffix mappings:
1427gnu = zk0 1433gnu = zk0
1428example.gnu = zk1 1434example.org = zk1
1429example.com = zk2 1435example.com = zk2
1430... 1436...
1431=> Entry zone: zk1 1437=> Entry zone: zk1
@@ -1728,7 +1734,7 @@ b7a066dd
1728 </t> 1734 </t>
1729 <artwork name="" type="" align="left" alt=""> 1735 <artwork name="" type="" align="left" alt="">
1730 <![CDATA[ 1736 <![CDATA[
1731 Zone private key (d, little-endian scalar): 1737Zone private key (d, little-endian scalar):
173290ea2a95cb9ef482b45817dc45b805cae00f387022a065a3674f41ad15173c63 173890ea2a95cb9ef482b45817dc45b805cae00f387022a065a3674f41ad15173c63
1733 1739
1734Zone public key (zk): 1740Zone public key (zk):