From nobody Wed Apr 1 13:17:20 2015 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1DB61A9070 for ; Wed, 1 Apr 2015 13:17:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.289 X-Spam-Level: X-Spam-Status: No, score=-1.289 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_ORG=0.611] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QW2n0Elrt3Vr for ; Wed, 1 Apr 2015 13:17:16 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9A2F1A8A9D for ; Wed, 1 Apr 2015 13:17:07 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 84CA7E2038; Wed, 1 Apr 2015 16:17:06 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 24044-04; Wed, 1 Apr 2015 16:17:05 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id E4EE6E2036; Wed, 1 Apr 2015 16:17:04 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t31KH332010719; Wed, 1 Apr 2015 16:17:03 -0400 From: Derek Atkins To: Hannes Tschofenig References: <55196612.9060004@gmx.net> Date: Wed, 01 Apr 2015 16:17:03 -0400 In-Reply-To: <55196612.9060004@gmx.net> (Hannes Tschofenig's message of "Mon, 30 Mar 2015 17:04:50 +0200") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: "dtls-iot@ietf.org" Subject: Re: [Dtls-iot] Certificate Profiling X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 20:17:19 -0000 Hannes Tschofenig writes: > Hi all, > > Section 6.3 of draft-ietf-dice-profile-10 discusses the recommendations > for use with certificates. > While the current text restricts the use of certificates quite a bit I > got feedback that the current text still leaves several aspects untouched. > > Here is a proposal of further recommendations: > > * TLS/DTLS offers a lot of freedom for using ECC curves. I would suggest > to restrict the use of RFC4492-defined ECC ciphersuites to named curves > only. Do we want to consider alternate key agreement schemes that may enable lower-powered devices to have lower overhead? -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Wed Apr 1 13:21:38 2015 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E153C1A90D0 for ; Wed, 1 Apr 2015 13:21:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qkVmPJgPVzRA for ; Wed, 1 Apr 2015 13:21:35 -0700 (PDT) Received: from mail-ig0-x232.google.com (mail-ig0-x232.google.com [IPv6:2607:f8b0:4001:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 058A61A90C1 for ; Wed, 1 Apr 2015 13:21:35 -0700 (PDT) Received: by ignm3 with SMTP id m3so37948096ign.0 for ; Wed, 01 Apr 2015 13:21:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:content-type:from:in-reply-to:date:cc :message-id:references:to; bh=Z3Gmw8JCdOteftiYV7DtN53/M90saXVz8ntTVRnCDmc=; b=Iwjk0iE0GkstDDusypIox7gif3yDvxdiZgYNlL5t5W1NcGXJ80cwx2DmSmJvjdFDr5 qtqsfaj/jgN0GzPHGmvfsBJw/rjMd3UfQBr6fcBAjuvvh1WBv2PhBaTfQHPKB3kgRQIl 61nM+Hl924nP0kd5KIXLtJtv5kO+wXySfCb88esr7d8dLwvqKbYOb2dMmMV3R1OUd5Fv 5rWQY/4Vb+VDH8ouxm4Tbxlms3SLPRHzy21Gw5LYucTdnx+yX16sG7L3ScyF6mwqVh3Q A1EsCbeq7GQcKyKVUI0Vh9jvd0Wx7iOX3hzdBKdNkHdJ43lj2MsFSdxG0asCixbse+Rt N2ZA== X-Received: by 10.50.253.12 with SMTP id zw12mr14757121igc.24.1427919694485; Wed, 01 Apr 2015 13:21:34 -0700 (PDT) Received: from [192.168.205.188] ([199.15.130.142]) by mx.google.com with ESMTPSA id o196sm1820834ioe.26.2015.04.01.13.21.33 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 01 Apr 2015 13:21:33 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) Content-Type: multipart/signed; boundary="Apple-Mail=_8006C265-D5AE-42A7-8201-A4A82219D755"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.5b6 From: Simon Lemay X-Priority: 3 In-Reply-To: Date: Wed, 1 Apr 2015 15:21:26 -0500 Message-Id: References: To: Hannes Tschofenig X-Mailer: Apple Mail (2.2070.6) Archived-At: Cc: dtls-iot@ietf.org Subject: Re: [Dtls-iot] draft-ietf-dice-profile-10 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 20:21:37 -0000 --Apple-Mail=_8006C265-D5AE-42A7-8201-A4A82219D755 Content-Type: multipart/alternative; boundary="Apple-Mail=_072F7FE1-D6ED-415C-AD0F-EE24CB3374F1" --Apple-Mail=_072F7FE1-D6ED-415C-AD0F-EE24CB3374F1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Hannes, I reviewed the last submission and all my comment have been addressed as = well, Thanks you for the consideration and very nice write up! Simon Lemay > On Mar 8, 2015, at 6:42 PM, Hannes Tschofenig = wrote: >=20 > Version -10 of the profile draft addresses the working group last call = review comments. I would still like to hear from the reviewers whether = they are fine with the changes I have made in response to their = feedback. >=20 > Ciao > Hannes >=20 > _______________________________________________ > dtls-iot mailing list > dtls-iot@ietf.org > https://www.ietf.org/mailman/listinfo/dtls-iot --Apple-Mail=_072F7FE1-D6ED-415C-AD0F-EE24CB3374F1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi Hannes, 

I reviewed the last submission and all my comment have been = addressed as well, 

Thanks you for the consideration and very nice write = up!

Simon = Lemay

On Mar 8, 2015, at 6:42 PM, Hannes Tschofenig = <hannes.tschofenig@gmx.net> wrote:

Version -10 of the profile draft addresses the working group = last call review comments. I would still like to hear from the reviewers whether they = are fine with the changes I have made in response to their = feedback. 
 
Ciao
Hannes
 
_______________________________________________
dtls-iot = mailing list
dtls-iot@ietf.org
https://www.ietf.org/mailman/listinfo/dtls-iot

= --Apple-Mail=_072F7FE1-D6ED-415C-AD0F-EE24CB3374F1-- --Apple-Mail=_8006C265-D5AE-42A7-8201-A4A82219D755 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJVHFNMAAoJELlmKj7tHRvwTwcQAIXNITAjNkx17ws0BWkptPaR gRJPOi5fgkvLiyPxUR4SdyDN110hIdAgvtsHb9LzCt9kTUNhGY02WaxYuACQuoco ZqUP9l/w6HYeKWcKYVOdzbiEW8I4z8assz5gPt6KXtFykuLZ1yZIyLy0halmXfF8 gpJImo6S2CDbyTsOO/LeU6sWv21zg4Zxs7HDGoLZVFXAji3o16bSe1NNxikiU+EW x+dQS/g4R8vlDXLacNvUbGo662p+aYxSbAf0EK8u7IvEldZXleWmJOtiTqTBipC+ RtJBxoymrhijnMajyT+1xAtqrcIg3YjUFC7KN40+AXihDA368Uo2U+CbW5oh5fgY 1PrFZSRB4LQ8Bxi6Uq2MtYsTWwCGYqdTHz7URES0xg2BYILeY6RwaxQ4FsK+Hvbo Fscs9uFF7TTywBJdcSF/uZcoYgv0VbJzg9fxUb5NRyqrHy6OJOB1yuD03Sr75eop sxGkoT8wT/iB+K58xfeSHwewWvfySTYdVHLPCfCNS70a4GXKefwVvCFOXaHco5Fm DCoHD1DeAGGkr6o8+N+K21GWAP8KWaNm7BCD4mnO0EyTSuKMMYZN8svUEMRqK537 Q0nKS+Vf64kLHsZZtutHJhXKA+N53r7EuZd32Xx6hUDBPSvJUekv6/VR93tB9GCj 2oM9exwP0sQmntK/WnVi =to37 -----END PGP SIGNATURE----- --Apple-Mail=_8006C265-D5AE-42A7-8201-A4A82219D755-- From rohitver@hotmail.com Fri Apr 3 05:50:08 2015 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EE921A9236 for ; Fri, 3 Apr 2015 05:50:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.791 X-Spam-Level: X-Spam-Status: No, score=0.791 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ktkSB4jxi0LO for ; Fri, 3 Apr 2015 05:50:06 -0700 (PDT) Received: from SNT004-OMC4S46.hotmail.com (snt004-omc4s46.hotmail.com [65.54.51.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D7941A9235 for ; Fri, 3 Apr 2015 05:50:06 -0700 (PDT) Received: from SNT147-W83 ([65.55.90.199]) by SNT004-OMC4S46.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751); Fri, 3 Apr 2015 05:50:06 -0700 X-TMN: [lY15Z8IlUVvMDhy1uy6CS+hvbBZtuO39] X-Originating-Email: [rohitver@hotmail.com] Message-ID: Content-Type: multipart/alternative; boundary="_0c327e3d-8b14-40e0-b719-942fdf35f85b_" From: rohit verma To: "dtls-iot@ietf.org" Date: Fri, 3 Apr 2015 08:50:05 -0400 Importance: Normal MIME-Version: 1.0 X-OriginalArrivalTime: 03 Apr 2015 12:50:06.0052 (UTC) FILETIME=[B5AE8240:01D06E0C] Archived-At: Subject: [Dtls-iot] Does DTLS support SNI X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 12:51:42 -0000 --_0c327e3d-8b14-40e0-b719-942fdf35f85b_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Does DTLS support SNI? The DTLS RFC is silent on this DTLS RFC https://too= ls.ietf.org/html/rfc4347 is silent on the usage of TLS extensions.We may ne= ed DTLS for example=2C in a scenario for virtual hosting for iOT applicatio= ns = --_0c327e3d-8b14-40e0-b719-942fdf35f85b_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Does DTLS su= pport SNI? The DTLS RFC is silent on this  =3BDTLS RFC https://tools.ie= tf.org/html/rfc4347 is silent on the usage of TLS extensions.
We = may need DTLS for example=2C in a scenario for virtual hosting for iOT appl= ications
= --_0c327e3d-8b14-40e0-b719-942fdf35f85b_-- From nobody Fri Apr 3 08:58:48 2015 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 339AA1AC3C8 for ; Fri, 3 Apr 2015 08:58:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6M4T25qeivCI for ; Fri, 3 Apr 2015 08:58:44 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3ECF51AC3C4 for ; Fri, 3 Apr 2015 08:58:44 -0700 (PDT) Received: from [192.168.131.146] ([80.92.114.249]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0LomN9-1Z6E4Q41e7-00grCv; Fri, 03 Apr 2015 17:58:42 +0200 Message-ID: <551EB8B0.60100@gmx.net> Date: Fri, 03 Apr 2015 17:58:40 +0200 From: Hannes Tschofenig User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: rohit verma , "dtls-iot@ietf.org" References: In-Reply-To: OpenPGP: id=4D776BC9 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="TXfxR6nB7ftEup896JED9d4XPNfLG1sF3" X-Provags-ID: V03:K0:ex8l2pSBSp0yecx1K+FZJXyWVzPDQi7P+7+NepW4+r1YP2xzApp iYXwkgJFg1dilQmpL4pqe72NUVivtvpPlu4PrNTN0lHA8qOMs+Z/2+aOIqniNHkmf/I5oXN Q5nIKswiidic5p+1ruKH6H0/lAb7rgFcupb7axwcXA9U4T6IIqljsVVWJrz0NiuP5NFb50E f3eRRTw6Dz27t3ftdnr+A== X-UI-Out-Filterresults: notjunk:1; Archived-At: Subject: Re: [Dtls-iot] Does DTLS support SNI X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 15:58:46 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --TXfxR6nB7ftEup896JED9d4XPNfLG1sF3 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi Rohit, yes, you can use SNI with DTLS. In https://tools.ietf.org/html/draft-ietf-dice-profile-10 we recommend the use of SNI when the server is part of a hosting environment. Ciao Hannes On 04/03/2015 02:50 PM, rohit verma wrote: >=20 > Does DTLS support SNI? The DTLS RFC is silent on this DTLS RFC > https://tools.ietf.org/html/rfc4347 is silent on the usage of TLS > extensions. > We may need DTLS for example, in a scenario for virtual hosting for iOT= > applications >=20 >=20 > _______________________________________________ > dtls-iot mailing list > dtls-iot@ietf.org > https://www.ietf.org/mailman/listinfo/dtls-iot >=20 --TXfxR6nB7ftEup896JED9d4XPNfLG1sF3 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJVHriwAAoJEGhJURNOOiAtDVcH/jqD3fkrG/Pa1h4pmJwIT3yk pe3ZJkHRIq4W1Tb2a2Ug0YAohKzoSyunrI8WGfWIXGtUlZfsCQXMimnk7VHO7P/2 8zrkW47gA5JBlBYcc5Oubni6gphthTi2/lOv/mlNp4o/wzlQtjdgus1ruYzwXx3p VAiu1X3URMFtMEUVpGjrsVynJysWKEZw5WFntvp3IXUzeMUaxVfIHZXvkrxAXE3b OftSia773GyCLf+LjUS4f1pf4xqy0hUazrtX2GW5mt5LuM7iapiHUlR6trKdaVt7 UiM5+dkKP8mA3zgXBxUCKz/aa8SDEZoWUHEeq6fpYFLPfNwlyGz7y3ivnPNWZYo= =OaLD -----END PGP SIGNATURE----- --TXfxR6nB7ftEup896JED9d4XPNfLG1sF3-- From nobody Fri Apr 10 03:10:04 2015 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C95691B2B65; Fri, 10 Apr 2015 03:10:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.91 X-Spam-Level: X-Spam-Status: No, score=-6.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mf2jNp5PFzWk; Fri, 10 Apr 2015 03:10:01 -0700 (PDT) Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4EA071B2B62; Fri, 10 Apr 2015 03:10:01 -0700 (PDT) Received: from fr712usmtp2.zeu.alcatel-lucent.com (unknown [135.239.2.42]) by Websense Email Security Gateway with ESMTPS id 9784E7B788B38; Fri, 10 Apr 2015 10:09:57 +0000 (GMT) Received: from FR711WXCHHUB02.zeu.alcatel-lucent.com (fr711wxchhub02.zeu.alcatel-lucent.com [135.239.2.112]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id t3AA9xJf022805 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 10 Apr 2015 12:09:59 +0200 Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.234]) by FR711WXCHHUB02.zeu.alcatel-lucent.com ([135.239.2.112]) with mapi id 14.03.0195.001; Fri, 10 Apr 2015 12:09:59 +0200 From: "FOSSATI, Thomas (Thomas)" To: "dtls-iot@ietf.org" , "core@ietf.org" Thread-Topic: symantec white paper Thread-Index: AQHQc3aAq696bmJuUESx5NdghazgpQ== Date: Fri, 10 Apr 2015 10:09:58 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.8.150116 x-originating-ip: [135.239.27.38] Content-Type: text/plain; charset="us-ascii" Content-ID: <3471C93D05AF3242A8D91BCE793E58F1@exchange.lucent.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dtls-iot] symantec white paper X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 10:10:03 -0000 Follow up on Hannes' presentation at last tech plenary; FYI: https://www.symantec.com/content/en/us/enterprise/media/security_response/w hitepapers/insecurity-in-the-internet-of-things.pdf From nobody Fri Apr 17 03:08:13 2015 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2CA41AD1A3; Fri, 17 Apr 2015 03:08:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.209 X-Spam-Level: X-Spam-Status: No, score=-4.209 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6YLr2GCCarsG; Fri, 17 Apr 2015 03:08:04 -0700 (PDT) Received: from inkolg01.tcs.com (inkolg01.tcs.com [121.241.215.10]) by ietfa.amsl.com (Postfix) with ESMTP id 9954F1AD26B; Fri, 17 Apr 2015 03:08:01 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A2A+BQAE2TBV/wQXEqxdg15cxW2BeAELhgGCIAEBAQEBAX6EI3sCIgYyTRgKCAkSiByxVQEBlh4BAQEBBgEBAQEBAQEbhTJihRWEWh4EgjRNHYEWBYs2iWiHeZMzhBlnAYJCAQEB X-IPAS-Result: A2A+BQAE2TBV/wQXEqxdg15cxW2BeAELhgGCIAEBAQEBAX6EI3sCIgYyTRgKCAkSiByxVQEBlh4BAQEBBgEBAQEBAQEbhTJihRWEWh4EgjRNHYEWBYs2iWiHeZMzhBlnAYJCAQEB X-IronPort-AV: E=Sophos;i="5.11,593,1422901800"; d="scan'208";a="667097430" To: dtls-iot@ietf.org, core@ietf.org, Ace@ietf.org MIME-Version: 1.0 X-KeepSent: DD80B75F:0487AB83-65257E2A:0035ED67; type=4; name=$KeepSent X-Mailer: IBM Notes Release 9.0 March 08, 2013 Message-ID: From: Abhijan Bhattacharyya Date: Fri, 17 Apr 2015 15:37:57 +0530 X-MIMETrack: Serialize by Router on INKOLM102/TCS(Release 9.0.1FP2HF609 | December 16, 2014) at 04/17/2015 15:37:58, Serialize complete at 04/17/2015 15:37:58 Content-Type: multipart/alternative; boundary="=_alternative 0037A94865257E2A_=" Archived-At: Cc: Arijit Ukil , Soma Bandyopadhyay , Arpan Pal , Tulika Bose Subject: [Dtls-iot] New Version Notification for draft-bhattacharyya-dice-less-on-coap-00.txt X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2015 10:08:08 -0000 This is a multipart message in MIME format. --=_alternative 0037A94865257E2A_= Content-Type: text/plain; charset="US-ASCII" Dear All, We have submitted an experimental draft proposing a cross-layer approach to provide both object security and channel security for pre-shared-key based systems. We call the proposed method 'LESS (Lightweight Establishment of Secure Session) on CoAP'. This draft is prepared out of a paper on this topic that we presented in "Workshop on Pervasive Internet of Things and Smart Cities (PITSaC-2015)" in conjunction with "Advanced Information Networking and Applications (AINA-2015)", Gwangju, Korea, March, 2015. The draft contains the experimental results as well to demonstrate the benefits achieved using the proposed method. Hope you find the proposed method interesting and useful. Any feedback on the draft is more than welcome. The details about the draft are as below: Name: draft-bhattacharyya-dice-less-on-coap Revision: 00 Title: Lightweight Establishment of Secure Session (LESS) on CoAP Document date: 2015-04-17 Group: Individual Submission Pages: 15 URL: http://www.ietf.org/internet-drafts/draft-bhattacharyya-dice-less-on-coap-00.txt Status: https://datatracker.ietf.org/doc/draft-bhattacharyya-dice-less-on-coap/ Htmlized: http://tools.ietf.org/html/draft-bhattacharyya-dice-less-on-coap-00 Abstract: This draft presents an experimental work proposing a lightweight secure session establishment scheme to mutually authenticate two endpoints and share the session key. It works on symmetric cryptosystem with pre-shared secret between the endpoints during provisioning. The main algorithm is proposed as a generic concept. This draft further describes how the generic concept can be modeled as simple CoAP request/response pairs. Thus the proposed scheme enables CoAP with inherent security which might be useful for object security without requiring any secure transport. Still further, this draft demonstrates how the scheme could be integrated with the record encryption mechanism of DTLS-PSK. It reuses the DTLS session parameter structure without any modification. Thus channel security for the whole application message can be provided. So the scheme is a cross-layer mechanism such that the session establishment is performed in CoAP and channel encryption is performed in the transport layer reusing only the record encryption mechanism of DTLS-PSK. The scheme uses all standard encryption libraries. The lightweight nature and performance improvement is demonstrated with some supporting comparative results. Regards Abhijan Bhattacharyya Associate Consultant Scientist, Innovation Lab, Kolkata, India Tata Consultancy Services Mailto: abhijan.bhattacharyya@tcs.com Website: http://www.tcs.com ____________________________________________ Experience certainty. IT Services Business Solutions Consulting ____________________________________________ =====-----=====-----===== Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you --=_alternative 0037A94865257E2A_= Content-Type: text/html; charset="US-ASCII" Dear All,
We have submitted an experimental draft proposing a cross-layer approach to provide both object security and channel security for pre-shared-key based systems. We call the proposed method 'LESS (Lightweight Establishment of Secure Session) on CoAP'.
This draft is prepared out of a paper on this topic that we presented in "Workshop on Pervasive Internet of Things and Smart Cities (PITSaC-2015)" in conjunction with "Advanced Information Networking and Applications (AINA-2015)", Gwangju, Korea, March, 2015. The draft contains the experimental results as well to demonstrate the benefits achieved using the proposed method.
Hope you find the proposed method interesting and useful. Any feedback on the draft is more than welcome.

The details about the draft are as below:
 
Name:                                  draft-bhattacharyya-dice-less-on-coap
Revision:                 00
Title:                                  Lightweight Establishment of Secure Session (LESS) on CoAP
Document date:                 2015-04-17
Group:                                  Individual Submission
Pages:                                  15
URL:            http://www.ietf.org/internet-drafts/draft-bhattacharyya-dice-less-on-coap-00.txt
Status:         https://datatracker.ietf.org/doc/draft-bhattacharyya-dice-less-on-coap/
Htmlized:       http://tools.ietf.org/html/draft-bhattacharyya-dice-less-on-coap-00


Abstract:
  This draft presents an experimental work proposing a lightweight
  secure session establishment scheme to mutually authenticate two
  endpoints and share the session key. It works on symmetric
  cryptosystem with pre-shared secret between the endpoints during
  provisioning. The main algorithm is proposed as a generic concept.
  This draft further describes how the generic concept can be modeled
  as simple CoAP request/response pairs. Thus the proposed scheme
  enables CoAP with inherent security which might be useful for object
  security without requiring any secure transport. Still further, this
  draft demonstrates how the scheme could be integrated with the
  record encryption mechanism of DTLS-PSK. It reuses the DTLS session
  parameter structure without any modification. Thus channel security
  for the whole application message can be provided. So the scheme is
  a cross-layer mechanism such that the session establishment is
  performed in CoAP and channel encryption is performed in the
  transport layer reusing only the record encryption mechanism of
  DTLS-PSK. The scheme uses all standard encryption libraries. The
  lightweight nature and performance improvement is demonstrated with
  some supporting comparative results.


Regards
Abhijan Bhattacharyya
Associate Consultant
Scientist, Innovation Lab, Kolkata, India
Tata Consultancy Services
Mailto: abhijan.bhattacharyya@tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty.        IT Services
                       Business Solutions
                       Consulting
____________________________________________

=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you

--=_alternative 0037A94865257E2A_=--