From internet-drafts@ietf.org Fri Jul 5 10:51:03 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8994B21F9EC0; Fri, 5 Jul 2013 10:51:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.51 X-Spam-Level: X-Spam-Status: No, score=-102.51 tagged_above=-999 required=5 tests=[AWL=0.090, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pq24sc+3yAHZ; Fri, 5 Jul 2013 10:51:03 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EED521F9E05; Fri, 5 Jul 2013 10:51:03 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.51.p2 Message-ID: <20130705175102.8057.67791.idtracker@ietfa.amsl.com> Date: Fri, 05 Jul 2013 10:51:02 -0700 Cc: karp@ietf.org Subject: [karp] I-D Action: draft-ietf-karp-ops-model-07.txt X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jul 2013 17:51:03 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Keying and Authentication for Routing Pro= tocols Working Group of the IETF. Title : Operations Model for Router Keying Author(s) : Sam Hartman Dacheng Zhang Filename : draft-ietf-karp-ops-model-07.txt Pages : 24 Date : 2013-07-05 Abstract: Developing an operational and management model for routing protocol security that works with all the routing protocols will be critical to the success of routing protocol security efforts. This document discusses issues and begins to consider development of these models. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-karp-ops-model There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-karp-ops-model-07 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-karp-ops-model-07 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From uma.chunduri@ericsson.com Fri Jul 5 14:53:25 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B7F421F9F87 for ; Fri, 5 Jul 2013 14:53:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DlHeiF5D6fyD for ; Fri, 5 Jul 2013 14:53:20 -0700 (PDT) Received: from usevmg21.ericsson.net (usevmg21.ericsson.net [198.24.6.65]) by ietfa.amsl.com (Postfix) with ESMTP id C28DC21F9F92 for ; Fri, 5 Jul 2013 14:53:16 -0700 (PDT) X-AuditID: c6180641-b7f986d000007a82-d7-51d7404a2f5f Received: from EUSAAHC001.ericsson.se (Unknown_Domain [147.117.188.75]) by usevmg21.ericsson.net (Symantec Mail Security) with SMTP id 58.54.31362.B4047D15; Fri, 5 Jul 2013 23:53:15 +0200 (CEST) Received: from EUSAAMB105.ericsson.se ([147.117.188.122]) by EUSAAHC001.ericsson.se ([147.117.188.75]) with mapi id 14.02.0328.009; Fri, 5 Jul 2013 17:53:14 -0400 From: Uma Chunduri To: "karp@ietf.org" Thread-Topic: New Version Notification for draft-chunduri-karp-using-ikev2-with-tcp-ao-05.txt Thread-Index: AQHOecjEsAj7CmzMV0C6hUvRxhYbnZlWns+Q Date: Fri, 5 Jul 2013 21:53:14 +0000 Message-ID: <1B502206DFA0C544B7A60469152008631723E837@eusaamb105.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.135] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprPLMWRmVeSWpSXmKPExsUyuXSPt663w/VAg7ttYhZ7v61hdGD0WLLk J1MAYxSXTUpqTmZZapG+XQJXxqsrX9kKtvJUfFzRyNjAeJWzi5GTQ0LARKLh9WlmCFtM4sK9 9WxdjFwcQgJHGSU+rT0F5SxjlLi27TMLSBWbgJ7Ex6k/2bsYOThEBJQlDnzNAAkLC8RJ7P30 iw3EFhGIl7hxbwkrhG0ksX73RLA4i4CKRMulbnYQm1fAV2Jxwz4wmxFo8fdTa5hAbGYBcYlb T+YzQRwkILFkz3mo40QlXj7+xwphK0t8n/OIBaJeR2LB7k9sELa2xLKFr5kh5gtKnJz5hGUC o/AsJGNnIWmZhaRlFpKWBYwsqxg5SotTy3LTjQw3MQID+ZgEm+MOxgWfLA8xSnOwKInzbtA7 EygkkJ5YkpqdmlqQWhRfVJqTWnyIkYmDU6qBsemYUMlChc9c/o6OhWUdItOET2ut9X+dr+O+ 4eXrnj1T8xiWetg4c0yUfnD1F7NIJWvUysjl7t8SL8w1708PX+j3OKhPZEXKrr9lKcYzE3yE fy9mfasQrX96k92/HTvWZb5MOHJttWpHnv20KZtS/COmnzol7fzV5rbrSQ9Zr4mxi3TKOr/w KLEUZyQaajEXFScCAJajLDIyAgAA Subject: [karp] FW: New Version Notification for draft-chunduri-karp-using-ikev2-with-tcp-ao-05.txt X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jul 2013 21:53:25 -0000 =20 This document has been further updated to take care few more review comment= s offline. We thank Tero Kivinen and other security folk for the review. Further feedback is always welcome on this document.=20 =20 Authors -----Original Message----- From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]=20 Sent: Friday, July 05, 2013 2:44 PM To: Dr.Joseph D.Touch; Albert Tian; Joe Touch; Uma Chunduri Subject: New Version Notification for draft-chunduri-karp-using-ikev2-with-= tcp-ao-05.txt A new version of I-D, draft-chunduri-karp-using-ikev2-with-tcp-ao-05.txt has been successfully submitted by Uma Chunduri and posted to the IETF repo= sitory. Filename: draft-chunduri-karp-using-ikev2-with-tcp-ao Revision: 05 Title: A framework for RPs to use IKEv2 KMP Creation date: 2013-07-05 Group: Individual Submission Number of pages: 16 URL: http://www.ietf.org/internet-drafts/draft-chunduri-karp-us= ing-ikev2-with-tcp-ao-05.txt Status: http://datatracker.ietf.org/doc/draft-chunduri-karp-using-= ikev2-with-tcp-ao Htmlized: http://tools.ietf.org/html/draft-chunduri-karp-using-ikev2= -with-tcp-ao-05 Diff: http://www.ietf.org/rfcdiff?url2=3Ddraft-chunduri-karp-usi= ng-ikev2-with-tcp-ao-05 Abstract: This document describes a mechanism to enable using IKEv2 with TCP- AO, which may also be of more general use to other pairwise Routing Protocols. = =20 The IETF Secretariat From diego@tid.es Sat Jul 13 04:55:37 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88E3E21F9D71; Sat, 13 Jul 2013 04:55:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PNRuRghHp7C7; Sat, 13 Jul 2013 04:55:33 -0700 (PDT) Received: from correo-bck.tid.es (correo-bck.tid.es [195.235.93.200]) by ietfa.amsl.com (Postfix) with ESMTP id 4034421F9D0F; Sat, 13 Jul 2013 04:55:33 -0700 (PDT) Received: from sbrightmailg02.hi.inet (Sbrightmailg02.hi.inet [10.95.78.105]) by tid.hi.inet (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0MPV00IU9IGHU8@tid.hi.inet>; Sat, 13 Jul 2013 13:55:29 +0200 (MEST) Received: from vanvan (vanvan.hi.inet [10.95.78.49]) by sbrightmailg02.hi.inet (Symantec Messaging Gateway) with SMTP id 3B.FC.02911.13041E15; Sat, 13 Jul 2013 13:55:29 +0200 (CEST) Received: from correo.tid.es (mailhost.hi.inet [10.95.64.100]) by tid.hi.inet (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPS id <0MPV00IU6IGGU8@tid.hi.inet>; Sat, 13 Jul 2013 13:55:28 +0200 (MEST) Received: from EX10-MB2-MAD.hi.inet ([169.254.2.38]) by EX10-HTCAS8-MAD.hi.inet ([fe80::41c8:e965:8a6:de67%11]) with mapi id 14.02.0328.009; Sat, 13 Jul 2013 13:55:27 +0200 Date: Sat, 13 Jul 2013 11:55:27 +0000 From: "Diego R. Lopez" X-Originating-IP: [10.95.64.115] To: "pce@ietf.org" Message-id: Content-id: <4A41669B14B10049B520682FCB07D2D7@hi.inet> MIME-version: 1.0 Content-type: text/plain; charset=utf-8 Content-language: en-US Content-transfer-encoding: base64 Accept-Language: en-US, es-ES Thread-topic: Proposal on securing PCEP by means of TLS Thread-index: AQHOf7+uXh4JtZqUPkOFzvaC0qiQVA== X-AuditID: 0a5f4e69-b7f118e000000b5f-a6-51e140315e92 X-MS-Has-Attach: X-MS-TNEF-Correlator: X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrPLMWRmVeSWpSXmKPExsXCFe9nqGvo8DDQ4PkDfYu939YwWjTdv8Hu wOSxZMlPpgDGKC6blNSczLLUIn27BK6MpvXf2Qp+CFXcbT7L1MC4Q6iLkZNDQsBEomfvHFYI W0ziwr31bF2MXBxCAtsZJS58+MIIkhASeMYose5nHURiA6PEnCfrmEESLAKqEq837wbrZgOy HzX/ZgexhQWMJK5dmsUEMVVB4s+5xywgtoiAosT3G6vZQGxmAWWJVcdfANkcHLwC3hLH/upB hM0k1rfcB9vLKyAo8WPyPRaQEmYBdYkpU3IhSsQlmltvskDYihLTFjWAlTMKyEq8mz+fFWKT ucTy+d9ZQVpFBPQkjrwRhThGQGLJnvPMELaoxMvH/1gnMIrNQrJ4FpLFsxAWz0KyeBaSxQsY WVcxihUnFWWmZ5TkJmbmpBsY6WVk6mXmpZZsYoREUuYOxuU7VQ4xCnAwKvHwOog+CBRiTSwr rsw9xCjBwawkwpv9FyjEm5JYWZValB9fVJqTWnyIkYmDU6qBcff6zL31hs8vHN0jzliRu2an 3BV/wflVXypuGk59/u50tepU/RXGsy3P5Nybu55/uhr7bMHWPp7LE609r/m8av76LPHJnwq2 GKZLBuJpny7u+dg+W1pg0WeeR9v2fHv+f1ulhMzq9wd/X70V+T/dMUqD83DR+d8ZCaH2sy8w NOg6Hl295JTupyYlluKMREMt5qLiRAAV+icvggIAAA== Cc: "karp@ietf.org" Subject: [karp] Proposal on securing PCEP by means of TLS X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Jul 2013 11:55:37 -0000 SGksDQoNCk9zY2FyIGFuZCBJIGhhdmUgcHJlcGFyZWQgYSBkcmFmdCBvbiBhcHBseWluZyBUTFMg dG8gUENFUCBzZWN1cml0eToNCg0KODwtLS0NCkZpbGVuYW1lOiAgICAgICAgZHJhZnQtbG9wZXot cGNwLXBjZXBzDQpSZXZpc2lvbjogICAgICAgIDAwDQpUaXRsZTogICAgICAgICAgIFNlY3VyZSBU cmFuc3BvcnQgZm9yIFBDRVANCkNyZWF0aW9uIGRhdGU6ICAgMjAxMy0wNy0xMA0KR3JvdXA6ICAg ICAgICAgICBJbmRpdmlkdWFsIFN1Ym1pc3Npb24NCk51bWJlciBvZiBwYWdlczogOA0KVVJMOiAg ICAgICAgICAgICBodHRwOi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9kcmFmdC1sb3Bl ei1wY3AtcGNlcHMtMDAudHh0DQpTdGF0dXM6ICAgICAgICAgIGh0dHA6Ly9kYXRhdHJhY2tlci5p ZXRmLm9yZy9kb2MvZHJhZnQtbG9wZXotcGNwLXBjZXBzDQpIdG1saXplZDogICAgICAgIGh0dHA6 Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWxvcGV6LXBjcC1wY2Vwcy0wMA0KDQoNCkFic3Ry YWN0Og0KICBUaGUgUGF0aCBDb21wdXRhdGlvbiBFbGVtZW50IENvbW11bmljYXRpb24gUHJvdG9j b2wgKFBDRVApIGRlZmluZXMNCiAgdGhlIG1lY2hhbmlzbXMgZm9yIHRoZSBjb21tdW5pY2F0aW9u IGJldHdlZW4gYSBjbGllbnQgYW5kIGEgUENFLCBvcg0KICBhbW9uZyBQQ0VzLiAgVGhpcyBkb2N1 bWVudCBkZXNjcmliZSB0aGUgdXNhZ2Ugb2YgVHJhbnNwb3J0IExheWVyDQogIFNlY3VyaXR5IHRv IGVuaGFuY2UgUENFUCBzZWN1cml0eSwgaGVuY2UgdGhlIFBDRVBTIGFjcm9ueW0gcHJvcG9zZWQN CiAgZm9yIGl0LiAgVGhlIGFkZGl0aW9uYWwgc2VjdXJpdHkgbWVjaGFuaXNtcyBhcmUgcHJvdmlk ZWQgYnkgdGhlDQogIHRyYW5zcG9ydCBwcm90b2NvbCBzdXBwb3J0aW5nIFBDRVAsIGFuZCB0aGVy ZWZvcmUgdGhleSBkbyBub3QgYWZmZWN0DQogIGl0cyBmbGV4aWJpbGl0eSBhbmQgZXh0ZW5zaWJp bGl0eS4NCg0KODwtLS0NCg0KQ29tbWVudHMgYW5kIGNvbnRyaWJ1dGlvbnMgd2lsbCBiZSBleHRy ZW1lbHkgd2VsY29tZS4NCg0KQXMgeW91IGNhbiBleHBlY3QsIHdlJ2QgbGlrZSB0byBoYXZlIHRo ZSBvcHBvcnR1bml0eSB0byBwcmVzZW50IGFuZCBkaXNjdXNzIGl0IGluIEJlcmxpbi4NCg0KQmUg Z29vZGUNCg0KDQotLQ0KIkVzdGEgdmV6IG5vIGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyIN Cg0KRHIgRGllZ28gUi4gTG9wZXoNClRlbGVmb25pY2EgSStEDQpodHRwOi8vcGVvcGxlLnRpZC5l cy9kaWVnby5sb3Blei8NCg0KZS1tYWlsOiBkaWVnb0B0aWQuZXMNClRlbDogICAgKzM0IDkxMyAx MjkgMDQxDQpNb2JpbGU6ICszNCA2ODIgMDUxIDA5MQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K DQpFc3RlIG1lbnNhamUgc2UgZGlyaWdlIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlv LiBQdWVkZSBjb25zdWx0YXIgbnVlc3RyYSBwb2zDrXRpY2EgZGUgZW52w61vIHkgcmVjZXBjacOz biBkZSBjb3JyZW8gZWxlY3Ryw7NuaWNvIGVuIGVsIGVubGFjZSBzaXR1YWRvIG3DoXMgYWJham8u DQpUaGlzIG1lc3NhZ2UgaXMgaW50ZW5kZWQgZXhjbHVzaXZlbHkgZm9yIGl0cyBhZGRyZXNzZWUu IFdlIG9ubHkgc2VuZCBhbmQgcmVjZWl2ZSBlbWFpbCBvbiB0aGUgYmFzaXMgb2YgdGhlIHRlcm1z IHNldCBvdXQgYXQ6DQpodHRwOi8vd3d3LnRpZC5lcy9FUy9QQUdJTkFTL2Rpc2NsYWltZXIuYXNw eA0K From internet-drafts@ietf.org Mon Jul 15 14:31:43 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 287DC11E81DC; Mon, 15 Jul 2013 14:31:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.538 X-Spam-Level: X-Spam-Status: No, score=-102.538 tagged_above=-999 required=5 tests=[AWL=0.062, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZqexNPTe36c9; Mon, 15 Jul 2013 14:31:42 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B191811E8198; Mon, 15 Jul 2013 14:31:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.51.p2 Message-ID: <20130715213141.27628.65670.idtracker@ietfa.amsl.com> Date: Mon, 15 Jul 2013 14:31:41 -0700 Cc: karp@ietf.org Subject: [karp] I-D Action: draft-ietf-karp-crypto-key-table-08.txt X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jul 2013 21:31:43 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Keying and Authentication for Routing Pro= tocols Working Group of the IETF. Title : Database of Long-Lived Symmetric Cryptographic Keys Author(s) : Russell Housley Tim Polk Sam Hartman Dacheng Zhang Filename : draft-ietf-karp-crypto-key-table-08.txt Pages : 14 Date : 2013-07-15 Abstract: This document specifies the information contained in a conceptual database of long-lived cryptographic keys used by many different security protocols. The database is designed to support both manual and automated key management. In addition to describing the schema for the database, this document describes the operations that can be performed on the database as well as the requirements for the security protocols that wish to use the database. In many typical scenarios, the security protocols do not directly use the long-lived key, but rather a key derivation function is used to derive a short- lived key from a long-lived key. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-karp-crypto-key-table There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-karp-crypto-key-table-08 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-karp-crypto-key-table-08 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From bew@cisco.com Mon Jul 15 17:22:18 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7717C21F8A53 for ; Mon, 15 Jul 2013 17:22:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M6ZRVcIytLrI for ; Mon, 15 Jul 2013 17:22:05 -0700 (PDT) Received: from mtv-iport-2.cisco.com (mtv-iport-2.cisco.com [173.36.130.13]) by ietfa.amsl.com (Postfix) with ESMTP id CACDB21E8180 for ; Mon, 15 Jul 2013 17:21:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=640; q=dns/txt; s=iport; t=1373934102; x=1375143702; h=from:content-transfer-encoding:subject:message-id:date: to:mime-version; bh=pXt0KOuIQZmVKbbHAoq79c+EAx2rFcMvDD5e/DHGZI8=; b=Mz5/cxWCHVnpTm5hA5fJCzEjfbG18Ff99NNIZvD1a0FZrQ/78GAm0D9O S2JBxjP4QRx6AAPRtwQn7AfDyHw4trk7KL+RNCeqp4a4MBJErLAFAm01X 3+obsiE9NVt6uPFVK099ZC9oMgoZGqcb60VEyEb0s42a7UcYJ0f9Rvxqw g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjsIAAuR5FGrRDoJ/2dsb2JhbABQCoMGNIMOqxKVGxZ0gkcdgX2IIgEMlXegTI4ohE5tA4knjjWBKZAkgzI X-IronPort-AV: E=Sophos;i="4.89,672,1367971200"; d="scan'208";a="86171657" Received: from mtv-core-4.cisco.com ([171.68.58.9]) by mtv-iport-2.cisco.com with ESMTP; 16 Jul 2013 00:21:41 +0000 Received: from dhcp-128-107-147-81.cisco.com (dhcp-128-107-147-81.cisco.com [128.107.147.81]) by mtv-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id r6G0Le0b008620 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Tue, 16 Jul 2013 00:21:41 GMT From: Brian Weis Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: Date: Mon, 15 Jul 2013 17:21:40 -0700 To: "karp@ietf.org" Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\)) X-Mailer: Apple Mail (2.1503) Subject: [karp] Call for WG adoption: draft-chunduri-karp-kmp-router-fingerprints-03 X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jul 2013 00:22:18 -0000 Folks, The authors of = (KARP KMP: Simplified Peer Authentication ) have requested that it be = considered as a WG item. It describes a straightforward method aiding = routers to identify each other using fingerprints of their public keys. = The document covers a portion of the automated key management portion of = the KARP charter. It is targeted as Informational. We are requesting comments from the WG on taking this as a WG item. We = would like to hear within the next two weeks, by the end of the day=20 July 29. Thanks, Brian & Joel= From bew@cisco.com Tue Jul 16 10:19:57 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D08C921E808B for ; Tue, 16 Jul 2013 10:19:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 164Hnlwjk--b for ; Tue, 16 Jul 2013 10:19:52 -0700 (PDT) Received: from mtv-iport-3.cisco.com (mtv-iport-3.cisco.com [173.36.130.14]) by ietfa.amsl.com (Postfix) with ESMTP id DB9F521E8091 for ; Tue, 16 Jul 2013 10:19:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=187; q=dns/txt; s=iport; t=1373995186; x=1375204786; h=from:content-transfer-encoding:subject:message-id:date: to:mime-version; bh=4i4YTHGzWBKkqk2sfv7axhgvt69TED+FDlXV8wABrxs=; b=cN65/J8Wk4EM00hK6OQgHi174dMr3EgBlpjSxlCLyNG8nV0GXN4m7ORR WWjGjDm9ro5n2wEoSmPDjyiv16l9KC4CH6/45Jr1U34hWDm+gMbL6tGeF NCymp9otUExbCUgLJIdPqJ/It+1MYMHGze85UgynpkydcyOeAp+sQPjk4 I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AooFAGZ/5VGrRDoH/2dsb2JhbABagwaDQokztw0WdIJHHYF9E4gPlT6gRI4dhFVtA4knjjWRTYMyHIE1 X-IronPort-AV: E=Sophos;i="4.89,678,1367971200"; d="scan'208";a="83659243" Received: from mtv-core-2.cisco.com ([171.68.58.7]) by mtv-iport-3.cisco.com with ESMTP; 16 Jul 2013 17:19:41 +0000 Received: from stealth-10-32-244-212.cisco.com (stealth-10-32-244-212.cisco.com [10.32.244.212]) by mtv-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id r6GHJeqm011632 for ; Tue, 16 Jul 2013 17:19:40 GMT From: Brian Weis Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: <9AB421EF-D2A6-445D-A65F-968045E94461@cisco.com> Date: Tue, 16 Jul 2013 10:16:27 -0700 To: "karp@ietf.org" Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\)) X-Mailer: Apple Mail (2.1503) Subject: [karp] Call for IETF 87 agenda items (KARP) X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jul 2013 17:19:58 -0000 The KARP WG will be meeting 1300-1500 CEST Wednesday in Berlin. If you = have a topic for the meeting please email the chairs = (karp-chairs@tools.ietf.org). Thanks, Brian & Joel= From bew@cisco.com Tue Jul 16 10:20:15 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5C7D21F8616 for ; Tue, 16 Jul 2013 10:20:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wyQ5hkGYOR3e for ; Tue, 16 Jul 2013 10:20:11 -0700 (PDT) Received: from mtv-iport-1.cisco.com (mtv-iport-1.cisco.com [173.36.130.12]) by ietfa.amsl.com (Postfix) with ESMTP id 82C9D21E809A for ; Tue, 16 Jul 2013 10:20:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=187; q=dns/txt; s=iport; t=1373995202; x=1375204802; h=from:content-transfer-encoding:subject:message-id:date: to:mime-version; bh=4i4YTHGzWBKkqk2sfv7axhgvt69TED+FDlXV8wABrxs=; b=TKgqRth5vfOnaniv2K8zcZRBOo09tP2E0acUeO2QuX/N9rtBsdGd5vC5 tjY/jyWaS1jMkT+wt3DkuUPuXt9/nPx5lsU9AdHW2/+xufP4hK+s/Tj44 pQWjnBvx/ds+YZGEzvtxRF5F28NHwWDUKKa+6fpatkTYbR9bb44uQsFHM s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AooFAGZ/5VGrRDoH/2dsb2JhbABagwaDQokztw0WdIJHHYF9E4gPlT6gRI4dhFVtA4knjjWRTYMyHIE1 X-IronPort-AV: E=Sophos;i="4.89,678,1367971200"; d="scan'208";a="83150802" Received: from mtv-core-2.cisco.com ([171.68.58.7]) by mtv-iport-1.cisco.com with ESMTP; 16 Jul 2013 17:20:02 +0000 Received: from stealth-10-32-244-212.cisco.com (stealth-10-32-244-212.cisco.com [10.32.244.212]) by mtv-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id r6GHK0eq011929 for ; Tue, 16 Jul 2013 17:20:01 GMT From: Brian Weis Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: <9AB421EF-D2A6-445D-A65F-968045E94461@cisco.com> Date: Tue, 16 Jul 2013 10:16:27 -0700 To: "karp@ietf.org" Mime-Version: 1.0 (Mac OS X Mail 6.3 \(1503\)) X-Mailer: Apple Mail (2.1503) Subject: [karp] Call for IETF 87 agenda items (KARP) X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jul 2013 17:20:16 -0000 The KARP WG will be meeting 1300-1500 CEST Wednesday in Berlin. If you = have a topic for the meeting please email the chairs = (karp-chairs@tools.ietf.org). Thanks, Brian & Joel= From bill.wu@huawei.com Tue Jul 23 21:50:16 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E02C21F9F44; Tue, 23 Jul 2013 21:50:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.598 X-Spam-Level: X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[AWL=0.001, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Owzc6NnuDA+P; Tue, 23 Jul 2013 21:50:12 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id E926E21F9D02; Tue, 23 Jul 2013 21:50:10 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml204-edg.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id AVJ10383; Wed, 24 Jul 2013 04:50:08 +0000 (GMT) Received: from LHREML405-HUB.china.huawei.com (10.201.5.242) by lhreml204-edg.china.huawei.com (172.18.7.223) with Microsoft SMTP Server (TLS) id 14.1.323.7; Wed, 24 Jul 2013 05:48:29 +0100 Received: from NKGEML403-HUB.china.huawei.com (10.98.56.34) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.1.323.7; Wed, 24 Jul 2013 05:49:24 +0100 Received: from NKGEML501-MBS.china.huawei.com ([169.254.2.43]) by nkgeml403-hub.china.huawei.com ([10.98.56.34]) with mapi id 14.01.0323.007; Wed, 24 Jul 2013 12:49:19 +0800 From: Qin Wu To: "Diego R. Lopez" , "pce@ietf.org" Thread-Topic: Proposal on securing PCEP by means of TLS Thread-Index: AQHOf7+uXh4JtZqUPkOFzvaC0qiQVJlzUhSw Date: Wed, 24 Jul 2013 04:49:18 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.41.149] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Cc: "karp@ietf.org" Subject: Re: [karp] Proposal on securing PCEP by means of TLS X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Jul 2013 04:50:16 -0000 SGksRGllZ286DQpWZXJ5IGludGVyZXN0aW5nIGRyYWZ0LiBUTFMgc2VlbXMgdG8gYnJpbmcgbW9y ZSBiZW5lZml0IGZvciBrZXkgbWFuYWdlbWVudC4NCg0KV291bGQgaXQgYmUgZ29vZCB0byBkaXNj dXNzIHNlY3VyaW5nIFBDRVAgYnkgVENQLUFPIGFzIHdlbGwgc2luY2UgVENQLU1ENSBoYXMgYmVl biBvYnNvbGV0ZWQgYnkgVENQLUFPPw0KDQpBbHNvIGl0IGlzIGJldHRlciB0byBkaXNjdXNzIGhv dyBUTFMvVENQIGNhbiBiZSB1c2VkIHRvIGRlYWwgd2l0aCBWdWxuZXJhYmlsaXRpZXMgY29uY2Vy bnMgcmFpc2VkIGluIFJGQzU0NDAuDQoNCkFub3RoZXIgY29tbWVudCBpcyB3aGVuIGJvdGggUEND IGFuZCBQQ0Ugc3VwcG9ydCBib3RoIFRMUy9UQ1AgYW5kIFRDUCwgaG93IGRvZXMgUENDIHNlbGVj dCB0cmFuc3BvcnQgcHJvdG9jb2w/IFRDUCBpcyBtYW5kYXRvcnkgb3IgYm90aCBhcmUgbWFuZGF0 b3J5PyBEb2VzIGl0IHJlbHkgb24gbWFudWFsIGNvbmZpZ3VyYXRpb24gb3IgZHluYW1pYyBkaXNj b3Zlcnk/DQoNClJlZ2FyZHMhDQotUWluDQooc29ycnkgZm9yIGR1cGxpY2F0ZSBtZXNzYWdlIGlm IHlvdSByZWNlaXZlZCBiZWZvcmUgc2luY2UgSXQgbG9va3MgdGhpcyBlbWFpbCB3YXMgc2VudCBi ZWZvcmUgYW5kIHVuZm9ydHVuYXRlbHkgZmlsdGVyZWQgb3V0KQ0KLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS0NCkZyb206IHBjZS1ib3VuY2VzQGlldGYub3JnIFttYWlsdG86cGNlLWJvdW5jZXNA aWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBEaWVnbyBSLiBMb3Bleg0KU2VudDogU2F0dXJkYXksIEp1 bHkgMTMsIDIwMTMgNzo1NSBQTQ0KVG86IHBjZUBpZXRmLm9yZw0KQ2M6IGthcnBAaWV0Zi5vcmcN ClN1YmplY3Q6IFtQY2VdIFByb3Bvc2FsIG9uIHNlY3VyaW5nIFBDRVAgYnkgbWVhbnMgb2YgVExT DQoNCkhpLA0KDQpPc2NhciBhbmQgSSBoYXZlIHByZXBhcmVkIGEgZHJhZnQgb24gYXBwbHlpbmcg VExTIHRvIFBDRVAgc2VjdXJpdHk6DQoNCjg8LS0tDQpGaWxlbmFtZTogICAgICAgIGRyYWZ0LWxv cGV6LXBjcC1wY2Vwcw0KUmV2aXNpb246ICAgICAgICAwMA0KVGl0bGU6ICAgICAgICAgICBTZWN1 cmUgVHJhbnNwb3J0IGZvciBQQ0VQDQpDcmVhdGlvbiBkYXRlOiAgIDIwMTMtMDctMTANCkdyb3Vw OiAgICAgICAgICAgSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQpOdW1iZXIgb2YgcGFnZXM6IDgNClVS TDogICAgICAgICAgICAgaHR0cDovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQt bG9wZXotcGNwLXBjZXBzLTAwLnR4dA0KU3RhdHVzOiAgICAgICAgICBodHRwOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWxvcGV6LXBjcC1wY2Vwcw0KSHRtbGl6ZWQ6ICAgICAgICBo dHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1sb3Blei1wY3AtcGNlcHMtMDANCg0KDQpB YnN0cmFjdDoNCiAgVGhlIFBhdGggQ29tcHV0YXRpb24gRWxlbWVudCBDb21tdW5pY2F0aW9uIFBy b3RvY29sIChQQ0VQKSBkZWZpbmVzDQogIHRoZSBtZWNoYW5pc21zIGZvciB0aGUgY29tbXVuaWNh dGlvbiBiZXR3ZWVuIGEgY2xpZW50IGFuZCBhIFBDRSwgb3INCiAgYW1vbmcgUENFcy4gIFRoaXMg ZG9jdW1lbnQgZGVzY3JpYmUgdGhlIHVzYWdlIG9mIFRyYW5zcG9ydCBMYXllcg0KICBTZWN1cml0 eSB0byBlbmhhbmNlIFBDRVAgc2VjdXJpdHksIGhlbmNlIHRoZSBQQ0VQUyBhY3JvbnltIHByb3Bv c2VkDQogIGZvciBpdC4gIFRoZSBhZGRpdGlvbmFsIHNlY3VyaXR5IG1lY2hhbmlzbXMgYXJlIHBy b3ZpZGVkIGJ5IHRoZQ0KICB0cmFuc3BvcnQgcHJvdG9jb2wgc3VwcG9ydGluZyBQQ0VQLCBhbmQg dGhlcmVmb3JlIHRoZXkgZG8gbm90IGFmZmVjdA0KICBpdHMgZmxleGliaWxpdHkgYW5kIGV4dGVu c2liaWxpdHkuDQoNCjg8LS0tDQoNCkNvbW1lbnRzIGFuZCBjb250cmlidXRpb25zIHdpbGwgYmUg ZXh0cmVtZWx5IHdlbGNvbWUuDQoNCkFzIHlvdSBjYW4gZXhwZWN0LCB3ZSdkIGxpa2UgdG8gaGF2 ZSB0aGUgb3Bwb3J0dW5pdHkgdG8gcHJlc2VudCBhbmQgZGlzY3VzcyBpdCBpbiBCZXJsaW4uDQoN CkJlIGdvb2RlDQoNCg0KLS0NCiJFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVy bm8iDQoNCkRyIERpZWdvIFIuIExvcGV6DQpUZWxlZm9uaWNhIEkrRA0KaHR0cDovL3Blb3BsZS50 aWQuZXMvZGllZ28ubG9wZXovDQoNCmUtbWFpbDogZGllZ29AdGlkLmVzDQpUZWw6ICAgICszNCA5 MTMgMTI5IDA0MQ0KTW9iaWxlOiArMzQgNjgyIDA1MSAwOTENCi0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCg0KRXN0ZSBtZW5zYWplIHNlIGRpcmlnZSBleGNsdXNpdmFtZW50ZSBhIHN1IGRlc3RpbmF0 YXJpby4gUHVlZGUgY29uc3VsdGFyIG51ZXN0cmEgcG9sw610aWNhIGRlIGVudsOtbyB5IHJlY2Vw Y2nDs24gZGUgY29ycmVvIGVsZWN0csOzbmljbyBlbiBlbCBlbmxhY2Ugc2l0dWFkbyBtw6FzIGFi YWpvLg0KVGhpcyBtZXNzYWdlIGlzIGludGVuZGVkIGV4Y2x1c2l2ZWx5IGZvciBpdHMgYWRkcmVz c2VlLiBXZSBvbmx5IHNlbmQgYW5kIHJlY2VpdmUgZW1haWwgb24gdGhlIGJhc2lzIG9mIHRoZSB0 ZXJtcyBzZXQgb3V0IGF0Og0KaHR0cDovL3d3dy50aWQuZXMvRVMvUEFHSU5BUy9kaXNjbGFpbWVy LmFzcHgNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpQ Y2UgbWFpbGluZyBsaXN0DQpQY2VAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vcGNlDQo= From iesg-secretary@ietf.org Sun Jul 28 23:35:58 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C0E521F9EE0; Sun, 28 Jul 2013 23:35:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.497 X-Spam-Level: X-Spam-Status: No, score=-102.497 tagged_above=-999 required=5 tests=[AWL=0.103, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i81opMPSzbxN; Sun, 28 Jul 2013 23:35:57 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id AC16A21F9DFD; Sun, 28 Jul 2013 23:35:57 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce X-Test-IDTracker: no X-IETF-IDTracker: 4.60p1 Sender: Message-ID: <20130729063557.22039.63212.idtracker@ietfa.amsl.com> Date: Sun, 28 Jul 2013 23:35:57 -0700 Cc: karp@ietf.org Subject: [karp] Last Call: (Operations Model for Router Keying) to Informational RFC X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ietf@ietf.org List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 06:35:58 -0000 The IESG has received a request from the Keying and Authentication for Routing Protocols WG (karp) to consider the following document: - 'Operations Model for Router Keying' as Informational RFC The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2013-08-18. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract Developing an operational and management model for routing protocol security that works with all the routing protocols will be critical to the success of routing protocol security efforts. This document discusses issues and begins to consider development of these models. The file can be obtained via http://datatracker.ietf.org/doc/draft-ietf-karp-ops-model/ IESG discussion can be tracked via http://datatracker.ietf.org/doc/draft-ietf-karp-ops-model/ballot/ No IPR declarations have been submitted directly on this I-D. From jmh@joelhalpern.com Mon Jul 29 00:18:30 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D941221F972C for ; Mon, 29 Jul 2013 00:18:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.694 X-Spam-Level: X-Spam-Status: No, score=-102.694 tagged_above=-999 required=5 tests=[AWL=-0.095, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1SLhq6TgDBCt for ; Mon, 29 Jul 2013 00:18:26 -0700 (PDT) Received: from mailc2.tigertech.net (mailc2.tigertech.net [208.80.4.156]) by ietfa.amsl.com (Postfix) with ESMTP id 4232121F9702 for ; Mon, 29 Jul 2013 00:18:26 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailc2.tigertech.net (Postfix) with ESMTP id 1C9D81BDE227 for ; Mon, 29 Jul 2013 00:18:26 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at c2.tigertech.net Received: from dhcp-427a.meeting.ietf.org (dhcp-427a.meeting.ietf.org [130.129.66.122]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailc2.tigertech.net (Postfix) with ESMTPSA id A3C461BDE3E5 for ; Mon, 29 Jul 2013 00:18:25 -0700 (PDT) Message-ID: <51F6173E.70007@joelhalpern.com> Date: Mon, 29 Jul 2013 03:18:22 -0400 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130620 Thunderbird/17.0.7 MIME-Version: 1.0 To: "karp@ietf.org" Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [karp] Call for WG adoption: draft-mahesh-karp-rkmp-04 X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 07:18:31 -0000 This draft has been discussed in the WG, and revised based on WG feedback and discussions among the authors. At this point, the question is whether it is ready for the WG to formally take the draft on and take it forward. So this is a call for adoption of http://datatracker.ietf.org/doc/draft-mahesh-karp-rkmp/ by the KARP WG. Please respond to the list with support or substantive objections within 3 weeks (adding a week since we are in the IETF meeting. Yours, Joel M. Halpern From housley@vigilsec.com Mon Jul 29 00:47:35 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A2E221F99A9 for ; Mon, 29 Jul 2013 00:47:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.586 X-Spam-Level: X-Spam-Status: No, score=-102.586 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pGv1gA3QzHLD for ; Mon, 29 Jul 2013 00:47:30 -0700 (PDT) Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 26BAE21F9C41 for ; Mon, 29 Jul 2013 00:47:30 -0700 (PDT) Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 1C39B9A40A6; Mon, 29 Jul 2013 03:47:44 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id jOhO3OMm3jUK; Mon, 29 Jul 2013 03:47:27 -0400 (EDT) Received: from v150.vpn.iad.rg.net (v150.vpn.iad.rg.net [198.180.150.150]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id EDE239A40A3; Mon, 29 Jul 2013 03:47:41 -0400 (EDT) Mime-Version: 1.0 (Apple Message framework v1085) Content-Type: text/plain; charset=us-ascii From: Russ Housley In-Reply-To: <51F6173E.70007@joelhalpern.com> Date: Mon, 29 Jul 2013 03:47:25 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <19780515-2383-452C-B1E8-33CB033AA2D6@vigilsec.com> References: <51F6173E.70007@joelhalpern.com> To: "Joel M. Halpern" X-Mailer: Apple Mail (2.1085) Cc: "karp@ietf.org" Subject: Re: [karp] Call for WG adoption: draft-mahesh-karp-rkmp-04 X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 07:47:35 -0000 I am confused by the approach taken in this draft. I only skimmed it. = We defined a crypto key table, and that document is close to IESG = approval. I think that IKEv2 should be used to populate the key table, = and then TCP-AO can pull keying material from the table, as is already = described, at least partially, in the key table document. Russ On Jul 29, 2013, at 3:18 AM, Joel M. Halpern wrote: > This draft has been discussed in the WG, and revised based on WG = feedback and discussions among the authors. > At this point, the question is whether it is ready for the WG to = formally take the draft on and take it forward. >=20 > So this is a call for adoption of > http://datatracker.ietf.org/doc/draft-mahesh-karp-rkmp/ > by the KARP WG. > Please respond to the list with support or substantive objections = within 3 weeks (adding a week since we are in the IETF meeting. >=20 > Yours, > Joel M. Halpern From hartmans@mit.edu Mon Jul 29 01:23:37 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 904F321F9A0C for ; Mon, 29 Jul 2013 01:23:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C3P4LxaUySLv for ; Mon, 29 Jul 2013 01:23:26 -0700 (PDT) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id CCAFC21F9DB0 for ; Mon, 29 Jul 2013 01:23:15 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.painless-security.com (Postfix) with ESMTP id 4926020118; Mon, 29 Jul 2013 04:22:42 -0400 (EDT) Received: from mail.painless-security.com ([127.0.0.1]) by localhost (mail.suchdamage.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wfWgNYRvgR8F; Mon, 29 Jul 2013 04:22:38 -0400 (EDT) Received: from carter-zimmerman.suchdamage.org (dhcp-4332.meeting.ietf.org [130.129.67.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS; Mon, 29 Jul 2013 04:22:37 -0400 (EDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 1A15587FB4; Mon, 29 Jul 2013 04:23:09 -0400 (EDT) From: Sam Hartman To: Russ Housley References: <51F6173E.70007@joelhalpern.com> <19780515-2383-452C-B1E8-33CB033AA2D6@vigilsec.com> Date: Mon, 29 Jul 2013 04:23:09 -0400 In-Reply-To: <19780515-2383-452C-B1E8-33CB033AA2D6@vigilsec.com> (Russ Housley's message of "Mon, 29 Jul 2013 03:47:25 -0400") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "karp@ietf.org" Subject: Re: [karp] Call for WG adoption: draft-mahesh-karp-rkmp-04 X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 08:23:37 -0000 >>>>> "Russ" == Russ Housley writes: Russ> I am confused by the approach taken in this draft. I only Russ> skimmed it. We defined a crypto key table, and that document Russ> is close to IESG approval. I think that IKEv2 should be used Russ> to populate the key table, and then TCP-AO can pull keying Russ> material from the table, as is already described, at least Russ> partially, in the key table document. Russ RKMP is intended to work with the key table draft as you describe. With the specific case of TCP-AO there are some additional complexities because of abstractions created by the TCP-AO spec. It's certainly intended to be the case that rows are added to the key table by RKMP and it's intended to be the case that TCP-AO interacts with the key table in a manner similar to how it handles manual keying with regard to RKMP. If we got some details wrong, I think we can fix that after WG adoption. From hartmans@mit.edu Mon Jul 29 01:54:32 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A09521E808A; Mon, 29 Jul 2013 01:54:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jat8880m0KUy; Mon, 29 Jul 2013 01:54:26 -0700 (PDT) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id DFD0421F9E3F; Mon, 29 Jul 2013 01:54:24 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.painless-security.com (Postfix) with ESMTP id AB26620202; Mon, 29 Jul 2013 04:53:50 -0400 (EDT) Received: from mail.painless-security.com ([127.0.0.1]) by localhost (mail.suchdamage.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xxm_SuNIw_ti; Mon, 29 Jul 2013 04:53:49 -0400 (EDT) Received: from carter-zimmerman.suchdamage.org (dhcp-4332.meeting.ietf.org [130.129.67.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS; Mon, 29 Jul 2013 04:53:49 -0400 (EDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 31E3787FB4; Mon, 29 Jul 2013 04:54:20 -0400 (EDT) From: Sam Hartman To: ietf@ietf.org References: <20130729063557.22039.63212.idtracker@ietfa.amsl.com> Date: Mon, 29 Jul 2013 04:54:20 -0400 In-Reply-To: <20130729063557.22039.63212.idtracker@ietfa.amsl.com> (The IESG's message of "Sun, 28 Jul 2013 23:35:57 -0700") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: karp@ietf.org Subject: Re: [karp] Last Call: (Operations Model for Router Keying) to Informational RFC X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 08:54:32 -0000 Hi. Yes I'm making a last call comment on a document I edit:-) During discussion of another document )(draft-ietf-karp-crypto-key-table), a routing directorate review brought up the concern that we don't talk about time synchronization. Without time synchronization, the wrong keys can be selected in certain circumstances. In some cases, time synchronization is required for replay detection, although that is rare for routing protocols. Those involved in the discussion of time synchronization and draft-ietf-karp-crypto-key-table believed that draft-ietf-karp-ops-model is a better place for a discussion of time synchronization than draft-ietf-karp-crypto-key-table. So, I'd like to propose the following text be added to security considerations: Close synchronization of time can impact the security of routing protocols in a number of ways. Time is used to control when keys MAY bxegin being used and when they MUST NOT be used any longer as described in . Routers need to have tight enough time synchronization that receivers permit a key to be used prior to the first use of that key or availability will be impacted. If time synchronization is too loose, then a key can be used beyond its intended lifetime. The Network Time Protocol (NTP) can be used to provide time synchronization. For some protocols, time synchronization is also important for replay detection. From danny@tcb.net Mon Jul 29 02:19:45 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E0F321F9C26 for ; Mon, 29 Jul 2013 02:19:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.437 X-Spam-Level: X-Spam-Status: No, score=-100.437 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N6A3P-Z5tgsJ for ; Mon, 29 Jul 2013 02:19:39 -0700 (PDT) Received: from mail.friendswithtools.org (unknown [64.78.239.70]) by ietfa.amsl.com (Postfix) with ESMTP id F106121F9EEE for ; Mon, 29 Jul 2013 02:19:37 -0700 (PDT) Received: from dspam (unknown [127.0.0.1]) by mail.friendswithtools.org (Postfix) with SMTP id B1CFC300050 for ; Mon, 29 Jul 2013 09:19:37 +0000 (UTC) Received: from [10.13.129.205] (unknown [81.92.22.186]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.friendswithtools.org (Postfix) with ESMTPSA id AB18830004A; Mon, 29 Jul 2013 03:19:36 -0600 (MDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Danny McPherson In-Reply-To: Date: Mon, 29 Jul 2013 05:19:36 -0400 Content-Transfer-Encoding: 7bit Message-Id: References: <20130729063557.22039.63212.idtracker@ietfa.amsl.com> To: Sam Hartman X-Mailer: Apple Mail (2.1508) X-DSPAM-Result: Innocent X-DSPAM-Processed: Mon Jul 29 03:19:37 2013 X-DSPAM-Confidence: 1.0000 X-DSPAM-Improbability: 1 in 98689409 chance of being spam X-DSPAM-Probability: 0.0023 X-DSPAM-Signature: 51f633a942071779384124 X-DSPAM-Factors: 27, 2013+at, 0.40000, detection+#+#+is, 0.40000, with+#+#+surprisingly, 0.40000, can+#+#+#+certain, 0.40000, Subject*Model+#+Router, 0.40000, that+#+#+for, 0.40000, I'd+like, 0.40000, Subject*Router+Keying, 0.40000, I'm+making, 0.40000, a+better, 0.40000, Subject*Model+for, 0.40000, to+#+the, 0.40000, rare+for, 0.40000, I+#+#+discussion, 0.40000, time+#+than, 0.40000, edit+#+#+of, 0.40000, I'd+#+to, 0.40000, that+#+#+#+about, 0.40000, hartmans+#+#+edu, 0.40000, last+#+#+#+a, 0.40000, this+#+#+#+bxegin, 0.40000, to+#+considerations, 0.40000, and+draft, 0.40000, AM+#+Hartman, 0.40000, draft+#+#+ops, 0.40000, edu+#+#+Yes, 0.40000, I+agree, 0.40000 Cc: ietf@ietf.org, karp@ietf.org Subject: Re: [karp] Last Call: (Operations Model for Router Keying) to Informational RFC X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 09:19:45 -0000 On Jul 29, 2013, at 4:54 AM, Sam Hartman wrote: > > Hi. > > Yes I'm making a last call comment on a document I edit:-) > > During discussion of another document > )(draft-ietf-karp-crypto-key-table), a routing directorate review > brought up the concern that we don't talk about time synchronization. > Without time synchronization, the wrong keys can be selected in certain > circumstances. > In some cases, time synchronization is required for replay detection, > although that is rare for routing protocols. > > Those involved in the discussion of time synchronization and > draft-ietf-karp-crypto-key-table believed that draft-ietf-karp-ops-model > is a better place for a discussion of time synchronization than > draft-ietf-karp-crypto-key-table. I agree with this (not surprisingly :-) > So, I'd like to propose the following text be added to security > considerations: I'm good with this, one nit: s/bxegin/begin/ Thanks Sam, -danny From hartmans@mit.edu Mon Jul 29 02:36:15 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 473EE21F9ACA; Mon, 29 Jul 2013 02:36:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yZIgj5aDLo0k; Mon, 29 Jul 2013 02:36:09 -0700 (PDT) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id D717411E80DF; Mon, 29 Jul 2013 02:35:49 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.painless-security.com (Postfix) with ESMTP id 6A08E20118; Mon, 29 Jul 2013 05:35:00 -0400 (EDT) Received: from mail.painless-security.com ([127.0.0.1]) by localhost (mail.suchdamage.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gMwaWuWU5wNp; Mon, 29 Jul 2013 05:35:00 -0400 (EDT) Received: from carter-zimmerman.suchdamage.org (dhcp-4332.meeting.ietf.org [130.129.67.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS; Mon, 29 Jul 2013 05:35:00 -0400 (EDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 59DDC87FB4; Mon, 29 Jul 2013 05:35:31 -0400 (EDT) From: Sam Hartman To: Danny McPherson References: <20130729063557.22039.63212.idtracker@ietfa.amsl.com> <21DC453F-A434-463F-9F69-D036675507FB@tcb.net> Date: Mon, 29 Jul 2013 05:35:31 -0400 In-Reply-To: <21DC453F-A434-463F-9F69-D036675507FB@tcb.net> (Danny McPherson's message of "Mon, 29 Jul 2013 05:31:00 -0400") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Sam Hartman , ietf@ietf.org, karp@ietf.org Subject: Re: [karp] Last Call: (Operations Model for Router Keying) to Informational RFC X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 09:36:15 -0000 Danny sent me private text that he believes is better than what I proposed. I like your text below except that signing is the wrong word. How about generation of integrity-protected messages? These messages are almost never digitally signed. Proposed text: > Routers need to > have tight enough time synchronization that receivers permit a key > to be utilized for validation prior to the first use of that key for signing or > availability will be impacted. From touch@isi.edu Mon Jul 29 09:03:46 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C914D21F9655 for ; Mon, 29 Jul 2013 09:03:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.299 X-Spam-Level: X-Spam-Status: No, score=-106.299 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zs0SbVrNCNNH for ; Mon, 29 Jul 2013 09:03:38 -0700 (PDT) Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) by ietfa.amsl.com (Postfix) with ESMTP id 76BC321E808E for ; Mon, 29 Jul 2013 09:03:36 -0700 (PDT) Received: from [192.168.1.91] (pool-71-105-85-4.lsanca.dsl-w.verizon.net [71.105.85.4]) (authenticated bits=0) by boreas.isi.edu (8.13.8/8.13.8) with ESMTP id r6TG2o02024446 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Mon, 29 Jul 2013 09:03:01 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) Content-Type: text/plain; charset=us-ascii From: Joe Touch In-Reply-To: Date: Mon, 29 Jul 2013 09:02:52 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <41256376-6143-4236-A9B0-19BFE022E049@isi.edu> References: <51F6173E.70007@joelhalpern.com> <19780515-2383-452C-B1E8-33CB033AA2D6@vigilsec.com> To: Sam Hartman X-Mailer: Apple Mail (2.1508) X-ISI-4-43-8-MailScanner: Found to be clean X-MailScanner-From: touch@isi.edu Cc: "karp@ietf.org" Subject: Re: [karp] Call for WG adoption: draft-mahesh-karp-rkmp-04 X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 16:03:49 -0000 On Jul 29, 2013, at 1:23 AM, Sam Hartman wrote: >>>>>> "Russ" =3D=3D Russ Housley writes: >=20 > Russ> I am confused by the approach taken in this draft. I only > Russ> skimmed it. We defined a crypto key table, and that document > Russ> is close to IESG approval. I think that IKEv2 should be used > Russ> to populate the key table, and then TCP-AO can pull keying > Russ> material from the table, as is already described, at least > Russ> partially, in the key table document. Russ >=20 > RKMP is intended to work with the key table draft as you describe. > With the specific case of TCP-AO there are some additional = complexities > because of abstractions created by the TCP-AO spec. The complexities are at least partly related to the fact that IKE is = based on network (IP) protocols and sequences of streams using the same = ports, whereas TCP-AO never reuses connection keys on successive = connections to the same ports. The complexities are non-trivial, and require the introduction of a new = mechanism to translate between the expectations of IKE and TCP-AO. = draft-mahesh-karp-rkmp describes this mechanism in detail. > It's certainly intended to be the case that rows are added to the key > table by RKMP and it's intended to be the case that TCP-AO interacts > with the key table in a manner similar to how it handles manual keying > with regard to RKMP. draft-ietf-karp-crypto-key-table describes some very limited ways in = which RKMP might interact with TCP-AO, but those limitations are severe = - using one key across all interfaces, e.g. At best, crypt-key-table is = dismissive in its support for TCP-AO; at worst, it gives recommendations = that could be ill-advised. This document (draft-mahesh-karp-rkmp) provides a specific mechanism to = more completely interface TCP-AO to IKE, where that mechanism = compensates for the different assumptions of TCP-AO and IKE regarding = connection and key usage.=20 (note that mahesh-karp does refer to crypto-key-table, but it adds = significantly to it) Joe From danny@tcb.net Mon Jul 29 10:02:32 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E64A21F9A44 for ; Mon, 29 Jul 2013 10:02:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.437 X-Spam-Level: X-Spam-Status: No, score=-100.437 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pkCC7qGW2Qdf for ; Mon, 29 Jul 2013 10:02:15 -0700 (PDT) Received: from mail.friendswithtools.org (unknown [64.78.239.70]) by ietfa.amsl.com (Postfix) with ESMTP id DA78321E8093 for ; Mon, 29 Jul 2013 09:55:59 -0700 (PDT) Received: from dspam (unknown [127.0.0.1]) by mail.friendswithtools.org (Postfix) with SMTP id 791AA30004D for ; Mon, 29 Jul 2013 16:55:32 +0000 (UTC) Received: from dhcp-138f.meeting.ietf.org (dhcp-138f.meeting.ietf.org [130.129.19.143]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.friendswithtools.org (Postfix) with ESMTPSA id BCDEE30004A; Mon, 29 Jul 2013 10:55:30 -0600 (MDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.5 \(1508\)) From: Danny McPherson In-Reply-To: Date: Mon, 29 Jul 2013 12:55:26 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <2946F5C1-FA69-4E47-983A-0D3565C9DDFF@tcb.net> References: <20130729063557.22039.63212.idtracker@ietfa.amsl.com> <21DC453F-A434-463F-9F69-D036675507FB@tcb.net> To: Sam Hartman X-Mailer: Apple Mail (2.1508) X-DSPAM-Result: Innocent X-DSPAM-Processed: Mon Jul 29 10:55:32 2013 X-DSPAM-Confidence: 1.0000 X-DSPAM-Improbability: 1 in 98689409 chance of being spam X-DSPAM-Probability: 0.0023 X-DSPAM-Signature: 51f69e8442075158818419 X-DSPAM-Factors: 27, wrong+#+How, 0.40000, 2013+at, 0.40000, to+#+#+#+validation, 0.40000, time+#+#+#+permit, 0.40000, never+digitally, 0.40000, Subject*Model+#+Router, 0.40000, Subject*Router+Keying, 0.40000, Routers+#+to, 0.40000, enough+#+#+#+receivers, 0.40000, that+receivers, 0.40000, Subject*Model+for, 0.40000, of+integrity, 0.40000, a+#+#+be, 0.40000, meant+New, 0.40000, hartmans+#+#+edu, 0.40000, Sam+#+#+these, 0.40000, AM+#+Hartman, 0.40000, Routers+need, 0.40000, Mime-Version*OS+X, 0.40000, enough+time, 0.40000, generation+#+#+protected, 0.40000, Subject*Call+#+Operations, 0.40000, Subject*to+Informational, 0.40000, signing+is, 0.40000, To*Hartman+hartmans-ietf, 0.40000, Sam+#+addressing, 0.40000, Mime-Version*6.5+1508, 0.40000 Cc: ietf@ietf.org, karp@ietf.org Subject: Re: [karp] Last Call: (Operations Model for Router Keying) to Informational RFC X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 17:02:32 -0000 On Jul 29, 2013, at 5:35 AM, Sam Hartman wrote: >=20 > I like your text below except that signing is the wrong word. > How about generation of integrity-protected messages? Yeah, that's what I meant.. New text WFM, thanks [again] Sam for = addressing these concerns! -danny > These messages are almost never digitally signed. > Proposed text: >=20 >> Routers need to >> have tight enough time synchronization that receivers permit a = key >> to be utilized for validation prior to the first use of that key = for signing or >> availability will be impacted. >=20 From touch@isi.edu Mon Jul 29 10:37:49 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3907121F9956 for ; Mon, 29 Jul 2013 10:37:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wtwN3lLw6HSB for ; Mon, 29 Jul 2013 10:37:42 -0700 (PDT) Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) by ietfa.amsl.com (Postfix) with ESMTP id 8368121F9994 for ; Mon, 29 Jul 2013 10:36:56 -0700 (PDT) Received: from [128.9.160.166] (abc.isi.edu [128.9.160.166]) (authenticated bits=0) by boreas.isi.edu (8.13.8/8.13.8) with ESMTP id r6THVtLv013873 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 29 Jul 2013 10:31:55 -0700 (PDT) Message-ID: <51F6A70B.4030002@isi.edu> Date: Mon, 29 Jul 2013 10:31:55 -0700 From: Joe Touch User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130620 Thunderbird/17.0.7 MIME-Version: 1.0 To: "Joel M. Halpern" References: <51F6173E.70007@joelhalpern.com> In-Reply-To: <51F6173E.70007@joelhalpern.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-ISI-4-43-8-MailScanner: Found to be clean X-MailScanner-From: touch@isi.edu Cc: "karp@ietf.org" Subject: Re: [karp] Call for WG adoption: draft-mahesh-karp-rkmp-04 X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 17:37:49 -0000 FWIW, I obviously support this as a WG doc (though, as a co-author, I'm clearly biased). I gave substantive reasons in a previous post earlier today. Joe On 7/29/2013 12:18 AM, Joel M. Halpern wrote: > This draft has been discussed in the WG, and revised based on WG > feedback and discussions among the authors. > At this point, the question is whether it is ready for the WG to > formally take the draft on and take it forward. > > So this is a call for adoption of > http://datatracker.ietf.org/doc/draft-mahesh-karp-rkmp/ > by the KARP WG. > Please respond to the list with support or substantive objections within > 3 weeks (adding a week since we are in the IETF meeting. > > Yours, > Joel M. Halpern > _______________________________________________ > karp mailing list > karp@ietf.org > https://www.ietf.org/mailman/listinfo/karp From uma.chunduri@ericsson.com Mon Jul 29 10:43:03 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FC0411E80E0 for ; Mon, 29 Jul 2013 10:43:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dNjd1h6iudJF for ; Mon, 29 Jul 2013 10:42:56 -0700 (PDT) Received: from usevmg20.ericsson.net (usevmg20.ericsson.net [198.24.6.45]) by ietfa.amsl.com (Postfix) with ESMTP id 4067221F99FA for ; Mon, 29 Jul 2013 10:42:36 -0700 (PDT) X-AuditID: c618062d-b7fc36d0000032ea-33-51f6a98bab49 Received: from EUSAAHC008.ericsson.se (Unknown_Domain [147.117.188.96]) by usevmg20.ericsson.net (Symantec Mail Security) with SMTP id C5.47.13034.B89A6F15; Mon, 29 Jul 2013 19:42:35 +0200 (CEST) Received: from EUSAAMB105.ericsson.se ([147.117.188.122]) by EUSAAHC008.ericsson.se ([147.117.188.96]) with mapi id 14.02.0328.009; Mon, 29 Jul 2013 13:42:35 -0400 From: Uma Chunduri To: "Joel M. Halpern" , "karp@ietf.org" Thread-Topic: [karp] Call for WG adoption: draft-mahesh-karp-rkmp-04 Thread-Index: AQHOjCvmRWMf28xU2keMfbuBDH1aeJl77TPw Date: Mon, 29 Jul 2013 17:42:34 +0000 Message-ID: <1B502206DFA0C544B7A60469152008631743B206@eusaamb105.ericsson.se> References: <51F6173E.70007@joelhalpern.com> In-Reply-To: <51F6173E.70007@joelhalpern.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [155.53.73.138] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrLLMWRmVeSWpSXmKPExsUyuXRPgm73ym+BBgcm61t8PPWGyWLvtzWM DkweS5b8ZPI4N+U7YwBTFJdNSmpOZllqkb5dAlfG56VbGQvmslecOLqGpYHxL2sXIweHhICJ xPFbnF2MnECmmMSFe+vZuhi5OIQEjjJK3Pu4ixnCWc4o8fvpdEaQKjYBPYmPU3+ygzSLCPhI rPkbBxIWFnCWOHD8NViJiICLxL+pt6FsI4nGi1NYQGwWAVWJPY9nMYK08gr4SuzdmggSFhLQ kdi1oZkJJMwpoCux50UpSJgR6Jzvp9YwgdjMAuISt57MZ4I4U0BiyZ7zzBC2qMTLx/+gPlGU eHmWBaJcR2LB7k9sELa2xLKFr8HKeQUEJU7OfMIygVF0FpKps5C0zELSMgtJywJGllWMHKXF qWW56UYGmxiBUXBMgk13B+Oel5aHGKU5WJTEeVfpnQkUEkhPLEnNTk0tSC2KLyrNSS0+xMjE wSnVwMjldDJMKkBL4FXLlANzu2z2zdw6aYdLQUuPt2jdzadsJVMCfiVMln+jZmxbHuq8SHu3 jvQzL74nO9+dOt5YlHT8/BHuQs9tKwNeu7+r3FSrdqPzcewkue/+r1RTlYxSF4db7bmyMOZB 2Tf1/muCda7Vud8s/oh6JasabLI+sEx66tIb29aKWCixFGckGmoxFxUnAgCLTft8UAIAAA== Subject: Re: [karp] Call for WG adoption: draft-mahesh-karp-rkmp-04 X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 17:43:03 -0000 Support (also co-author).=20 --=20 Uma C.=20 -----Original Message----- From: karp-bounces@ietf.org [mailto:karp-bounces@ietf.org] On Behalf Of Joe= l M. Halpern Sent: Monday, July 29, 2013 12:18 AM To: karp@ietf.org Subject: [karp] Call for WG adoption: draft-mahesh-karp-rkmp-04 This draft has been discussed in the WG, and revised based on WG feedback a= nd discussions among the authors. At this point, the question is whether it is ready for the WG to formally t= ake the draft on and take it forward. So this is a call for adoption of http://datatracker.ietf.org/doc/draft-mahesh-karp-rkmp/ by the KARP WG. Please respond to the list with support or substantive objections within 3 weeks (adding a week since we are in the IETF meeting. Yours, Joel M. Halpern _______________________________________________ karp mailing list karp@ietf.org https://www.ietf.org/mailman/listinfo/karp From jmh@joelhalpern.com Wed Jul 31 04:31:13 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1614A21F9E33 for ; Wed, 31 Jul 2013 04:31:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.634 X-Spam-Level: X-Spam-Status: No, score=-102.634 tagged_above=-999 required=5 tests=[AWL=-0.035, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mr73NQel4zGQ for ; Wed, 31 Jul 2013 04:31:07 -0700 (PDT) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by ietfa.amsl.com (Postfix) with ESMTP id AB35D21F9B90 for ; Wed, 31 Jul 2013 04:31:03 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 68EB41C0452 for ; Wed, 31 Jul 2013 04:31:03 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from dhcp-427a.meeting.ietf.org (dhcp-427a.meeting.ietf.org [130.129.66.122]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id D7ED01C044E for ; Wed, 31 Jul 2013 04:31:02 -0700 (PDT) Message-ID: <51F8F576.8020205@joelhalpern.com> Date: Wed, 31 Jul 2013 07:31:02 -0400 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130620 Thunderbird/17.0.7 MIME-Version: 1.0 To: "karp@ietf.org" Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [karp] BFD Authentication costs X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2013 11:31:13 -0000 The presentation on the cost of BFD authentication was interesting. And the suggestion from the crypto folks that there are far more efficient mechanisms is clearly worth looking at. But a related question occurred to me. In practice, on most devices, when BFD is run at low intervals it is done directly on the line card. Doesn't this mean that in most topologies the number of sessions is roughly the same as the number of physical ports on the device? Yours, Joel From manav.bhatia@alcatel-lucent.com Wed Jul 31 04:36:59 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B28911E80DE for ; Wed, 31 Jul 2013 04:36:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vmfn17Pg67Rx for ; Wed, 31 Jul 2013 04:36:52 -0700 (PDT) Received: from ihemail2.lucent.com (ihemail2.lucent.com [135.245.0.35]) by ietfa.amsl.com (Postfix) with ESMTP id 79C7B21F9F5C for ; Wed, 31 Jul 2013 04:36:43 -0700 (PDT) Received: from us70tusmtp1.zam.alcatel-lucent.com (h135-5-2-63.lucent.com [135.5.2.63]) by ihemail2.lucent.com (8.13.8/IER-o) with ESMTP id r6VBagXj008688 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 31 Jul 2013 06:36:42 -0500 (CDT) Received: from US70UWXCHHUB01.zam.alcatel-lucent.com (us70uwxchhub01.zam.alcatel-lucent.com [135.5.2.48]) by us70tusmtp1.zam.alcatel-lucent.com (GMO) with ESMTP id r6VBafXC020861 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 31 Jul 2013 07:36:41 -0400 Received: from SG70YWXCHHUB03.zap.alcatel-lucent.com (135.253.2.37) by US70UWXCHHUB01.zam.alcatel-lucent.com (135.5.2.48) with Microsoft SMTP Server (TLS) id 14.2.247.3; Wed, 31 Jul 2013 07:36:41 -0400 Received: from SG70YWXCHMBA05.zap.alcatel-lucent.com ([169.254.5.176]) by SG70YWXCHHUB03.zap.alcatel-lucent.com ([135.253.2.37]) with mapi id 14.02.0328.009; Wed, 31 Jul 2013 19:36:39 +0800 From: "Bhatia, Manav (Manav)" To: "Joel M. Halpern" , "karp@ietf.org" Thread-Topic: [karp] BFD Authentication costs Thread-Index: AQHOjeF8bkSP2qWbZkyOgCSBtcO5kpl+p/oQ Date: Wed, 31 Jul 2013 11:36:38 +0000 Message-ID: <20211F91F544D247976D84C5D778A4C32E462595@SG70YWXCHMBA05.zap.alcatel-lucent.com> References: <51F8F576.8020205@joelhalpern.com> In-Reply-To: <51F8F576.8020205@joelhalpern.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.253.19.17] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.57 on 135.245.2.35 Subject: Re: [karp] BFD Authentication costs X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2013 11:36:59 -0000 Hi Joel, =20 > In practice, on most devices, when BFD is run at low=20 > intervals it is done directly on the line card. Doesn't this=20 > mean that in most topologies the number of sessions is=20 > roughly the same as the number of physical ports on the device? Not necessarily. Our customers use vlan tagged IP Interfaces where the # of= sessions on a physical port can be greater than 1 (and it usually is). Cheers, Manav From acee.lindem@ericsson.com Wed Jul 31 05:05:13 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE82D11E8171 for ; Wed, 31 Jul 2013 05:05:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TFNI6ofw26fP for ; Wed, 31 Jul 2013 05:05:06 -0700 (PDT) Received: from usevmg21.ericsson.net (usevmg21.ericsson.net [198.24.6.65]) by ietfa.amsl.com (Postfix) with ESMTP id BA17D21F8C4B for ; Wed, 31 Jul 2013 05:05:05 -0700 (PDT) X-AuditID: c6180641-b7f986d000007a82-e8-51f8fd70085d Received: from EUSAAHC005.ericsson.se (Unknown_Domain [147.117.188.87]) by usevmg21.ericsson.net (Symantec Mail Security) with SMTP id E0.0B.31362.07DF8F15; Wed, 31 Jul 2013 14:05:04 +0200 (CEST) Received: from EUSAAMB101.ericsson.se ([147.117.188.118]) by EUSAAHC005.ericsson.se ([147.117.188.87]) with mapi id 14.02.0328.009; Wed, 31 Jul 2013 08:05:04 -0400 From: Acee Lindem To: "karp@ietf.org" Thread-Topic: Comment on LMP Analysis Presentation Thread-Index: AQHOjeYwb56tHAOB8EKSK5T30YQ5Hw== Date: Wed, 31 Jul 2013 12:05:04 +0000 Message-ID: <94A203EA12AECE4BA92D42DBFFE0AE4702FD52D2@eusaamb101.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.2.5.121010 x-originating-ip: [147.117.188.134] Content-Type: multipart/alternative; boundary="_000_94A203EA12AECE4BA92D42DBFFE0AE4702FD52D2eusaamb101erics_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrMLMWRmVeSWpSXmKPExsUyuXRPuG7B3x+BBrf+W1vs/baG0aKj+S2L A5PHkiU/mTw+bGpmC2CK4rJJSc3JLEst0rdL4Mpo+3uHseCreMWdjXuZGxgvC3cxcnBICJhI TPxk28XICWSKSVy4t56ti5GLQ0jgKKNEw4sNrBDOckaJi99nMoFUsQnoSDx/9I8ZpFlEQFni wNcMkDCzgKLEpO/b2UHCwgK6Ehu/soOERQSMJDbv72CEsPUk3p+bChZnEVCVmHJmGlicV8BX ondvN9h0RqAbvp9awwQxUlzi1pP5TBC3CUgs2XOeGcIWlXj5+B8riC0KNLPt2Bl2iLiyxJIn +1kgevMlflzqY4KYLyhxcuYTlgmMIrOQjJ2FpGwWkjKIuI7Egt2f2CBsbYllC18zw9hnDjyG 6rWW2Ht6AxOymgWMHKsYOUqLU8ty040MNzECI+qYBJvjDsYFnywPMUpzsCiJ827QOxMoJJCe WJKanZpakFoUX1Sak1p8iJGJg1OqgXHB5ZhJsz3/n9uvs1pou/DNiFdPUxoPJ8YF8/2t+z2r fkX7vp53zmq/VkrcmLzBMy2aI3TnqiXdHW/XnXl6+6dC0fstc7P/CJ7+4Mi8R5VFatmifR5n l4gy7ZG8wsz1zzT18KTp3P68nhHL7fb6HMku/t8iXX+ohv1BvV16XrFr4u9J9yaLrlmkxFKc kWioxVxUnAgA5nafvXYCAAA= Subject: [karp] Comment on LMP Analysis Presentation X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2013 12:05:13 -0000 --_000_94A203EA12AECE4BA92D42DBFFE0AE4702FD52D2eusaamb101erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Mahesh, et al, I couldn't find the requirement for TCP packets in the LMP protocol. Perhap= s, it isn't needed. I'm not an LMP expert but there could be confusion due = to the reuse of the ASON terminology. See this excerpt from RFC 4394: 2. ASON Terminology and Abbreviations Related to Discovery ITU-T Recommendation G.8080 Amendment 1 [G.8080] and ITU-T Recommendation G.7714 [G.7714] provide definitions and mechanisms related to transport plane discovery. Note that in the context of this work, "Transport" relates to the data plane (sometimes called the transport plane or the user plane) and does not refer to the transport layer (layer 4) of the OSI seven layer model, nor to the concept of transport intended by protocols such as the Transmission Control Protocol (TCP). Special care must be taken with the acronym "TCP", which within the context of the rest of this document means "Termination Connection Point" and does not indicate the Transmission Control Protocol. Thanks, Acee --_000_94A203EA12AECE4BA92D42DBFFE0AE4702FD52D2eusaamb101erics_ Content-Type: text/html; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable
Hi Mahesh, et al, 

I couldn't find the requirement for TCP packets in the LMP protocol. P= erhaps, it isn't needed. I'm not an LMP expert but there could be confusion= due to the reuse  of the ASON terminology. See this excerpt from RFC = 4394: 

2.  ASON Terminology and Abbreviations Related to Discovery

   ITU-T Recommendation G.8080 Amendment 1 [G.8080] and ITU-T
   Recommendation G.7714 [G.7714] provide definitions and mechanisms
   related to transport plane discovery.

   Note that in the context of this work, "Transport" relates to =
the
   data plane (sometimes called the transport plane or the user plane)
   and does not refer to the transport layer (layer 4) of the OSI seven
   layer model, nor to the concept of transport intended by protocols
   such as the Transmission Control Protocol (TCP).

   Special care must be taken with the acronym "TCP", which withi=
n the
   context of the rest of this document means "Termination Connection
   Point" and does not indicate the Transmission Control Protocol.




Thanks,


Acee
--_000_94A203EA12AECE4BA92D42DBFFE0AE4702FD52D2eusaamb101erics_-- From russw@riw.us Wed Jul 31 05:39:38 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C273A21F9DF3 for ; Wed, 31 Jul 2013 05:39:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.362 X-Spam-Level: X-Spam-Status: No, score=-2.362 tagged_above=-999 required=5 tests=[AWL=0.237, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QSrWE0Ge33IG for ; Wed, 31 Jul 2013 05:39:32 -0700 (PDT) Received: from da31.namelessnet.net (da31.namelessnet.net [74.124.205.66]) by ietfa.amsl.com (Postfix) with ESMTP id 6A85211E817B for ; Wed, 31 Jul 2013 05:38:25 -0700 (PDT) Received: from cpe-098-122-147-095.nc.res.rr.com ([98.122.147.95] helo=USCSWHITER10L1C) by da31.namelessnet.net with esmtpa (Exim 4.80.1) (envelope-from ) id 1V4Vfc-0005SD-J6; Wed, 31 Jul 2013 05:38:24 -0700 From: "Russ White" To: "'Bhatia, Manav \(Manav\)'" , "'Joel M. Halpern'" , References: <51F8F576.8020205@joelhalpern.com> <20211F91F544D247976D84C5D778A4C32E462595@SG70YWXCHMBA05.zap.alcatel-lucent.com> In-Reply-To: <20211F91F544D247976D84C5D778A4C32E462595@SG70YWXCHMBA05.zap.alcatel-lucent.com> Date: Wed, 31 Jul 2013 08:38:23 -0400 Message-ID: <00a501ce8dea$d8dc4120$8a94c360$@riw.us> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQHl6WXMPZGqw8rqm5Qb/ycyBPGa2gKGuW0TmTvMyZA= Content-Language: en-us X-Antivirus-Scanner: Seems clean. You should still use an Antivirus Scanner Subject: Re: [karp] BFD Authentication costs X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2013 12:39:39 -0000 > > In practice, on most devices, when BFD is run at low intervals it is > > done directly on the line card. Doesn't this mean that in most > > topologies the number of sessions is roughly the same as the number of > > physical ports on the device? > > Not necessarily. Our customers use vlan tagged IP Interfaces where the # of > sessions on a physical port can be greater than 1 (and it usually is). I would say this is pretty normal --ie, customers running multiple logical interfaces is more common than the one-to-one situation, in my experience. Russ From jmh.direct@joelhalpern.com Wed Jul 31 05:40:32 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E04B721F9CE9 for ; Wed, 31 Jul 2013 05:40:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4n42JxQiA85H for ; Wed, 31 Jul 2013 05:40:22 -0700 (PDT) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by ietfa.amsl.com (Postfix) with ESMTP id 37DF911E8109 for ; Wed, 31 Jul 2013 05:39:39 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 1DAE31C0546; Wed, 31 Jul 2013 05:39:39 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from dhcp-427a.meeting.ietf.org (dhcp-427a.meeting.ietf.org [130.129.66.122]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 1E46E1C0452; Wed, 31 Jul 2013 05:39:37 -0700 (PDT) Message-ID: <51F9058A.8050709@joelhalpern.com> Date: Wed, 31 Jul 2013 08:39:38 -0400 From: Joel Halpern Direct User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130620 Thunderbird/17.0.7 MIME-Version: 1.0 To: Russ White References: <51F8F576.8020205@joelhalpern.com> <20211F91F544D247976D84C5D778A4C32E462595@SG70YWXCHMBA05.zap.alcatel-lucent.com> <00a501ce8dea$d8dc4120$8a94c360$@riw.us> In-Reply-To: <00a501ce8dea$d8dc4120$8a94c360$@riw.us> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: karp@ietf.org Subject: Re: [karp] BFD Authentication costs X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2013 12:40:32 -0000 After I sent my note, I thought of some cases on my own. But I do think it is important that we think about the scale at which we want to make this work. Yours, Joel On 7/31/13 8:38 AM, Russ White wrote: > >>> In practice, on most devices, when BFD is run at low intervals it is >>> done directly on the line card. Doesn't this mean that in most >>> topologies the number of sessions is roughly the same as the number of >>> physical ports on the device? >> >> Not necessarily. Our customers use vlan tagged IP Interfaces where the # > of >> sessions on a physical port can be greater than 1 (and it usually is). > > I would say this is pretty normal --ie, customers running multiple logical > interfaces is more common than the one-to-one situation, in my experience. > > Russ > From jmh@joelhalpern.com Wed Jul 31 05:40:48 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A03921F8C4B for ; Wed, 31 Jul 2013 05:40:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.631 X-Spam-Level: X-Spam-Status: No, score=-102.631 tagged_above=-999 required=5 tests=[AWL=-0.032, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BVWvVB7eG2J8 for ; Wed, 31 Jul 2013 05:40:42 -0700 (PDT) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by ietfa.amsl.com (Postfix) with ESMTP id 1BFD621F9AE3 for ; Wed, 31 Jul 2013 05:40:23 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id F07D11C0766 for ; Wed, 31 Jul 2013 05:40:22 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from dhcp-427a.meeting.ietf.org (dhcp-427a.meeting.ietf.org [130.129.66.122]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 40A461C0452 for ; Wed, 31 Jul 2013 05:40:22 -0700 (PDT) Message-ID: <51F905B6.30505@joelhalpern.com> Date: Wed, 31 Jul 2013 08:40:22 -0400 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130620 Thunderbird/17.0.7 MIME-Version: 1.0 To: karp@ietf.org References: <51F8F576.8020205@joelhalpern.com> <20211F91F544D247976D84C5D778A4C32E462595@SG70YWXCHMBA05.zap.alcatel-lucent.com> <00a501ce8dea$d8dc4120$8a94c360$@riw.us> In-Reply-To: <00a501ce8dea$d8dc4120$8a94c360$@riw.us> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [karp] BFD Authentication costs X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2013 12:40:48 -0000 After I sent my note, I thought of some cases on my own. But I do think it is important that we think about the scale at which we want to make this work. Yours, Joel On 7/31/13 8:38 AM, Russ White wrote: > >>> In practice, on most devices, when BFD is run at low intervals it is >>> done directly on the line card. Doesn't this mean that in most >>> topologies the number of sessions is roughly the same as the number of >>> physical ports on the device? >> >> Not necessarily. Our customers use vlan tagged IP Interfaces where the # > of >> sessions on a physical port can be greater than 1 (and it usually is). > > I would say this is pretty normal --ie, customers running multiple logical > interfaces is more common than the one-to-one situation, in my experience. > > Russ > > From lberger@labn.net Wed Jul 31 08:19:34 2013 Return-Path: X-Original-To: karp@ietfa.amsl.com Delivered-To: karp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81F7721F9CE9 for ; Wed, 31 Jul 2013 08:19:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.66 X-Spam-Level: X-Spam-Status: No, score=-101.66 tagged_above=-999 required=5 tests=[AWL=0.605, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gZW6qIIsjm26 for ; Wed, 31 Jul 2013 08:19:29 -0700 (PDT) Received: from oproxy9.bluehost.com (oproxy9.bluehost.com [69.89.24.6]) by ietfa.amsl.com (Postfix) with SMTP id 7A5BA21F9CF5 for ; Wed, 31 Jul 2013 08:19:23 -0700 (PDT) Received: (qmail 6313 invoked by uid 0); 31 Jul 2013 15:18:59 -0000 Received: from unknown (HELO box313.bluehost.com) (69.89.31.113) by oproxy9.bluehost.com with SMTP; 31 Jul 2013 15:18:59 -0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=labn.net; s=default; h=Content-Type:Content-Transfer-Encoding:Date:MIME-Version:Message-ID:Cc:To:Subject:From; bh=it98YhzYfc003ykG97Mi7Hfl2qss1NA7Ww0QoHsGR9k=; b=rlhXKyhUoIwAE8BmYmFZTKp8XL+71Ftqkf8ihbddkvZ435QIakLuUJBYc1jJTGvQcUb1FEg+b9jH83x3d6jV6WWioMbgmMWE/pBcPDXldDmgEdhw8AJBUa/N08zOyxx7; Received: from [69.89.31.113] (port=35667 helo=localhost) by box313.bluehost.com with esmtpa (Exim 4.80) (envelope-from ) id 1V4YB0-0005G0-Fp; Wed, 31 Jul 2013 09:18:59 -0600 From: Lou Berger To: Acee Lindem Message-ID: <8ccf1dea.1375283801201@mail.labn.net> MIME-Version: 1.0 Date: Wed, 31 Jul 2013 17:17:44 +0200 (CEST) User-Agent: ProfiMailGo/4.10.00 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=UTF-8 X-Identified-User: {1038:box313.bluehost.com:labnmobi:labn.net} {sentby:smtp auth 69.89.31.113 authed with lberger@labn.net} Cc: "karp@ietf.org" Subject: Re: [karp] Comment on LMP Analysis Presentation X-BeenThere: karp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Discussion list for key management for routing and transport protocols List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2013 15:19:34 -0000 I think acee is right, LMP doesn't use TCP. Lou On 2:05pm, July 31, 2013, Acee Lindem wrote: > Hi Mahesh, et al,=C2=A0 >=20 > I couldn't find the requirement for TCP packets in the LMP protocol. Perh= aps, it isn't needed. I'm not an LMP expert but there could be confusion du= e to the reuse =C2=A0of the ASON terminology. See this excerpt from RFC 439= 4:=C2=A0 >=20 > 2. ASON Terminology and Abbreviations Related to Discovery ITU-T Recommen= dation G.8080 Amendment 1 [G.8080] and ITU-T Recommendation G.7714 [G.7714]= provide definitions and mechanisms related to transport plane discovery. N= ote that in the context of this work, "Transport" relates to the data plane= (sometimes called the transport plane or the user plane) and does not refe= r to the transport layer (layer 4) of the OSI seven layer model, nor to the= concept of transport intended by protocols such as the Transmission Contro= l Protocol (TCP). Special care must be taken with the acronym "TCP", which = within the context of the rest of this document means "Termination Connecti= on Point" and does not indicate the Transmission Control Protocol.=20 > Thanks, Acee=20