Subject: RE: [AAA-WG]: dynamic keys

From: "Jeremy A. Greene" <[email-masked]>
Date: Tue, 10 Feb 2004 18:09:00 -0500

So, a disgruntled, recently dismissed employee still having the aaah key
could eavesdrop on a wireless connection to get the nonce and compute
the session keys pretty easily, I would think (since the vpn has to come
up after the mip session).

In general, this seems like a very insecure solution -- why bother going
to all the work to make dynamic keys if it's so easy to get them anyway?

Jeremy

-----Original Message-----
From: [email-masked] [mailto:[email-masked]] On Behalf
Of Tom Hiller
Sent: Tuesday, February 10, 2004 5:43 PM
Cc: [email-masked]; [email-masked]
Subject: Re: [AAA-WG]: dynamic keys

Jeremy,

The aaa-keys draft says that the long held secret should be periodically

refreshed, but does not say how.

	- Tom

Jeremy A. Greene wrote:

> In the mip4-aaa-key-03 draft (and aaa-diameter-mobileip-16) it
requires 
> the use of a single, widely used (by all MNs??), long term pre-shared 
> key between the MN and AAAH. Since this key is directly used to 
> calculate dynamic keys, this does not seem terrible secure.
> 
>  
> 
> Am I missing something?
> 
>  
> 
> Jeremy
> 
>  
> 
>  
>