Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by maillists.intel-research.net (8.13.8/8.13.7) with ESMTP id l9UI27Hl010304; Tue, 30 Oct 2007 11:02:08 -0700 Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id l9UI267M009755; Tue, 30 Oct 2007 13:02:06 -0500 Received: from nemo.columbia.ads.sparta.com (nemo.columbia.sparta.com [157.185.80.75]) by Beta5.sparta.com (8.12.11/8.13.1) with ESMTP id l9UI26r1005377; Tue, 30 Oct 2007 13:02:06 -0500 Received: from [192.168.4.99] ([157.185.80.253]) by nemo.columbia.ads.sparta.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 30 Oct 2007 14:02:05 -0400 From: "Peter Lovell" To: "dtn interest" , "Peter Lovell" , "dtn security" Date: Tue, 30 Oct 2007 14:01:54 -0400 Message-Id: <20071030180154.1178956121@127.0.0.1> X-Mailer: CTM PowerMail version 5.5.3 build 4480 English (PPC) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 30 Oct 2007 18:02:05.0721 (UTC) FILETIME=[FB2F5090:01C81B1E] X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (M4.sparta.com [157.185.61.2]); Tue, 30 Oct 2007 13:02:06 -0500 (CDT) Subject: [dtn-security] issues in Bundle Security Protocol X-BeenThere: dtn-security@mailman.dtnrg.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: DTN Security Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Oct 2007 18:02:12 -0000 Hi all, BSP is available in the latest dtn tarball (thanks Mike!) including all three mandatory ciphersuites. Now that this is generally available, the dtnrg cvs tree is where updates and changes will appear first. There are several places where the code needs to improve checking to guard against bad blocks and this will be happening in the near future. With this first cycle done, it's time to look at several items we'd sidelined in order to get this first release completed. In order to keep the discussions focussed, I'm creating a different starter for each. Cheers.....Peter Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by maillists.intel-research.net (8.13.8/8.13.7) with ESMTP id l9UI27bg010305; Tue, 30 Oct 2007 11:02:08 -0700 Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id l9UI27Lr009760; Tue, 30 Oct 2007 13:02:07 -0500 Received: from nemo.columbia.ads.sparta.com (nemo.columbia.sparta.com [157.185.80.75]) by Beta5.sparta.com (8.12.11/8.13.1) with ESMTP id l9UI27Fa005380; Tue, 30 Oct 2007 13:02:07 -0500 Received: from [192.168.4.99] ([157.185.80.253]) by nemo.columbia.ads.sparta.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 30 Oct 2007 14:02:06 -0400 From: "Peter Lovell" To: "dtn interest" , "dtn security" Date: Tue, 30 Oct 2007 14:02:02 -0400 Message-Id: <20071030180202.1187477270@127.0.0.1> X-Mailer: CTM PowerMail version 5.5.3 build 4480 English (PPC) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII X-OriginalArrivalTime: 30 Oct 2007 18:02:06.0908 (UTC) FILETIME=[FBE46FC0:01C81B1E] X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (M4.sparta.com [157.185.61.2]); Tue, 30 Oct 2007 13:02:07 -0500 (CDT) Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by maillists.intel-research.net id l9UI27bg010305 Subject: [dtn-security] BSP and key management X-BeenThere: dtn-security@mailman.dtnrg.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: DTN Security Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Oct 2007 18:02:12 -0000 The first open issue relates to how we handle key management. Various of us have different ideas of exactly what it means -- what's in and what's not. And each of these has a number of component parts. One obvious component is some kind of information-store or database where keys or key-material are saved. There are also the processes for interacting with local users of the key storage, forming what might be called a "key service". Another is the interaction mechanism for a key- service at one location and a remote key-service at another. My goal is for this thread to decide which things should go into BSP specification and which should more properly be in the new KM spec initiated by Stephen and then reach closure on at least the BSP portions. >From the BSP standpoint, I see two main items:- 1. what minimum capability is required in support of the mandatory ciphersuites 2. what does key material look like in a bundle The term "key material" used for a bundle is expansive and encompasses all the keys and related "stuff" such as certificates, IVs, signatures, key references or identifiers, etc etc. The other requirements and characteristics seem to be better placed in the KM spec, things like:- 1. key-wrap using symmetric and assymetric keys (algorithms, procedures etc) 2. rules for storage (protection) and usage of key material 3. key exchange and/or negotiation protocol between nodes (BSP itself never negotiates keys) Thanks.....Peter p.s. we only look at KEKs here, not traffic keys Received: from gateway0.EECS.Berkeley.EDU (gateway0.EECS.Berkeley.EDU [169.229.60.93]) by maillists.intel-research.net (8.13.8/8.13.7) with ESMTP id l9FMstHk028715; Mon, 15 Oct 2007 15:54:55 -0700 Received: from [10.212.2.63] (bldmz-nat-161-182.berkeley.intel-research.net [12.155.161.182]) (authenticated bits=0) by gateway0.EECS.Berkeley.EDU (8.14.1/8.13.5) with ESMTP id l9FMsrig012152 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Mon, 15 Oct 2007 15:54:54 -0700 (PDT) Mime-Version: 1.0 (Apple Message framework v752.3) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <1E1423C0-B828-4C7F-956F-1F0C64E891FF@cs.berkeley.edu> Content-Transfer-Encoding: 7bit From: Michael Demmer X-Applemailsentby: demmer Date: Mon, 15 Oct 2007 15:54:46 -0700 To: dtn-interest , dtn-dev , dtn-users , dtn-security X-Mailer: Apple Mail (2.752.3) Subject: [dtn-security] dtnrg.org transition complete X-BeenThere: dtn-security@mailman.dtnrg.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: DTN Security Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Oct 2007 22:54:57 -0000 We've moved the wiki site and mailing lists over to a new server, and things appear to be working fine now. We've preserved all list subscriptions, though as you may have noticed from the mailman messages, everyone has a newly allocated mailman password. Also, options relating to message formats and digests need to be re-applied on the new mailing list server. Please contact me if you run into any problems with the new configuration. -mike