Subject: Re: [midcom] STUN issue #7: recommended stateless server procedures

From: "Panayiotis A. Thermos" <[email-masked]>
Date: Thu, 21 Nov 2002 11:48:59 -0500

Yes, "strengthen" in terms of providing randomness
to protect against prediction attacks.

Peter Thermos

                    Jonathan                                                                           
                    Rosenberg              To:     "Panayiotis A. Thermos" <[email-masked]>    
                    <jdrosen@dynami        cc:     [email-masked], (bcc: Panayiotis A.                
                    csoft.com>             Thermos/Telcordia)                                          
                                           Subject:     Re: [midcom] STUN issue #7: recommended        
                    11/21/2002             stateless server procedures                                 
                    03:37 AM                                                                           

Panayiotis A. Thermos wrote:
> I assume that the prefix would be a random string of length 12 characters
> or more
> to strengthen the "username" value.

Strengthen, as in, provides some security properties? Maybe I'm just too
tired, but all that would do is add some salt to the input to an hmac. I
don't think that provides any security benefits.

-Jonathan R.

--
Jonathan D. Rosenberg, Ph.D.                72 Eagle Rock Ave.
Chief Scientist                             First Floor
dynamicsoft                                 East Hanover, NJ 07936
[email-masked]                     FAX:   (973) 952-5050
http://www.jdrosen.net                      PHONE: (973) 952-5000
http://www.dynamicsoft.com

_______________________________________________
midcom mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/midcom

---

From: "Cullen Jennings" <[email-masked]>
Date: Wed, 27 Nov 2002 08:40:01 -0800

Did our esteemed colleague, Mr. Bellovin, provide any insight on purpose of
the prefix?