Re: [6tisch-security] slides you presented

Hi Peter,

This was the first meeting I participated in this year and I just wanted
to understand the current discussion. The slides were intended for a high
level discussion of functionality without binding to specific protocol,
but, yes, EDHOC and OSCOAP does the job and as far as I understand is in
scope of the minimal security draft.

As for CoMI, it could either take advantage of the established security
for protecting CoMI operations, or in some way be part of the security
solution, which I think Michael was referring to. In the latter case it
needs to be specified how CoMI operations are secured.

Göran

On 2017-02-23 09:41, "peter van der Stok" <stokcons@xs4all.nl> wrote:

>Hi Goran and Michael,
>
>Let me ask very high-level questions about the presented slides.
>Is the diffie-hellman part a replay of the EDHOC draft? or an optimized
>extension, or completely new?
>Is the SK part an OSCOAP scenario?
>
>Will the use of CoMI be described in the minimal security draft?
>
>thanks for answering,
>
>Peter
>
>
>Göran Selander schreef op 2017-02-22 07:53:
>> Before someone slaps my fingers I should disclaim that the message
>> exchange was just a sketch to be able to discuss the number of
>> messages,
>> which party initiates, who encrypts first etc. As we all know security
>> protocols always require a lot of considerations, in this case there is
>> e.g. missing a MAC of the identity of the signing party.
>> 
>> Göran
>> 
>> 
>> On 2017-02-21 17:50, "6tisch-security on behalf of Göran Selander"
>> <6tisch-security-bounces@ietf.org on behalf of
>> goran.selander@ericsson.com> wrote:
>> 
>>> Hi Michael,
>>> 
>>> I edited the presentation during and after the meeting to summarise
>>> some
>>> points made. The protocols are as presented, the annotation I’ve
>>> added.
>>> 
>>> Göran
>>> 
>>> On 2017-02-21 15:48, "Michael Richardson" <mcr@sandelman.ca> wrote:
>>> 
>>>> 
>>>> Can I get a copy posted to the list for the records?
>>>> Thanks.
>>>> 
>>>> --
>>>> ]               Never tell me the odds!                 | ipv6 mesh
>>>> networks [
>>>> ]   Michael Richardson, Sandelman Software Works        | network
>>>> architect  [
>>>> ]     mcr@sandelman.ca  http://www.sandelman.ca/        |   ruby on
>>>> rails
>>>>   [
>>>> 
>> 
>> _______________________________________________
>> 6tisch-security mailing list
>> 6tisch-security@ietf.org
>> https://www.ietf.org/mailman/listinfo/6tisch-security