Re: [6lowpan] IEEE 802.15.9 KMP over 802.15.4 and 802.15.7 approved

Bob,

I have to say I object to the following statement in the PAR:

"Lack of key management support in IEEE Std 802.15.4 and IEEE Std 802.15.7
results in weak keys which is a common avenue for attacking the security
system."

"results in weak keys" implies this is always the case, which is simply not
true. This should be rephrased as "may result in weak keys". Users of
802.15.4 such as ZigBee have put in place a KMP which does not result in
weak keys,

And I agree with Alper - if you are mentioning IETF and 802.1X, you really
have to mention PANA as it is entirely relevant.

Robert

On Mon, Nov 14, 2011 at 4:46 PM, Robert Moskowitz
<rgm@labs.htt-consult.com>wrote:

> **
> On 11/14/2011 03:17 PM, Alper Yegin wrote:
> >
> > Hi Bob,
> >
> > This PAR document still does not refer to IETF's PANA (IETF RFC that
> > is already adopted by the Zigbee IP spec.) I'm hoping the PAR changes
> > you are referring are already addressing that. Please let us know.
>
> It was a procedural question as to what is 'wanted' here.  Strictly IEEE
> standards or broader interpretation?  The 802EC clearified that a broader
> inclusion was desired so words have been added to point out that Zibgee IP
> has addressed this within their upper layer.  A 'literal' interpretation
> was that 802.1X does not work over 802.15.4 or 15.7 so there was no
> comparable standard.
>
> Also 802.1 pointed out the need to include the potential need of an
> Registry Authority (6.1b) and that too was added.  The final posted PAR
> will reflect these two changes.
>
>
> >
> > Thanks.
> >
> > Alper
> >
> >
> > On Nov 11, 2011, at 10:00 PM, Robert Moskowitz wrote:
> >
> >> The IEEE 802ec approved the PAR this afternoon. The PAR documents
> >> are at:
> >>
> >>
> https://mentor.ieee.org/802.15/dcn/11/15-11-0613-05-0kmp-key-management-protocol-par.doc
> >>
> >>
> https://mentor.ieee.org/802.15/dcn/11/15-11-0665-05-0kmp-kmp-5c-draft.doc
> >>
> >> We did agree to two procedural changes in the PAR, so there will be
> >> a rev 6 posted sometime soon.
> >>
> >>
> >> _______________________________________________ 6lowpan mailing
> >> list 6lowpan@ietf.org
> >> https://www.ietf.org/mailman/listinfo/6lowpan
> >
> >
>
>
> _______________________________________________
> 6lowpan mailing list
> 6lowpan@ietf.org
> https://www.ietf.org/mailman/listinfo/6lowpan
>
>

-- 

Robert Cragie

Gridmerge Ltd.
89 Greenfield Crescent,
Wakefield, WF4 4WA, UK
+44 1924 910888
+1 415 513 0064
http://www.gridmerge.com