Re: [6tisch-security] minimal security draft

Mališa Vučinić <malisa.vucinic@inria.fr> Thu, 09 February 2017 09:45 UTC

Return-Path: <malisa.vucinic@inria.fr>
X-Original-To: 6tisch-security@ietfa.amsl.com
Delivered-To: 6tisch-security@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBB03129488 for <6tisch-security@ietfa.amsl.com>; Thu, 9 Feb 2017 01:45:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.9
X-Spam-Level:
X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ta6cSwsiOdGX for <6tisch-security@ietfa.amsl.com>; Thu, 9 Feb 2017 01:45:22 -0800 (PST)
Received: from mail3-relais-sop.national.inria.fr (mail3-relais-sop.national.inria.fr [192.134.164.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4663129636 for <6tisch-security@ietf.org>; Thu, 9 Feb 2017 01:45:21 -0800 (PST)
X-IronPort-AV: E=Sophos;i="5.35,349,1484002800"; d="scan'208";a="212604446"
Received: from unknown (HELO [128.93.85.17]) ([128.93.85.17]) by mail3-relais-sop.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-SHA; 09 Feb 2017 10:45:17 +0100
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: Mališa Vučinić <malisa.vucinic@inria.fr>
In-Reply-To: <1f99708ffbacaa7235d05b535f669291@xs4all.nl>
Date: Thu, 09 Feb 2017 10:45:17 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <6D6AE790-1234-403B-9429-992B4E168AF3@inria.fr>
References: <1f99708ffbacaa7235d05b535f669291@xs4all.nl>
To: consultancy@vanderstok.org
X-Mailer: Apple Mail (2.3124)
Archived-At: <https://mailarchive.ietf.org/arch/msg/6tisch-security/h-1hyicL9rc_uDVvYVMnplrumFU>
Cc: 6tisch Security <6tisch-security@ietf.org>
Subject: Re: [6tisch-security] minimal security draft
X-BeenThere: 6tisch-security@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Extended Design Team for 6TiSCH security architecture <6tisch-security.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/6tisch-security>, <mailto:6tisch-security-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/6tisch-security/>
List-Post: <mailto:6tisch-security@ietf.org>
List-Help: <mailto:6tisch-security-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/6tisch-security>, <mailto:6tisch-security-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Feb 2017 09:45:24 -0000

Hello Peter,

We use COSE Key Set structure to transport link-layer keys. Key set is a CBOR array, while each key in the array is specified as a CBOR map object. This is quite flexible and relies on the already standardized document (COSE). We then bundle Key Set object together with a short 15.4 address to create a response that fits within a single 15.4 frame. For more details refer to Section 4.4 of minimal-security draft.

For the content-format question, doesn’t it suffice to use application/cbor as content type? I don’t have much experience with content-format registration so please correct me if I am missing something.

Regards,
Mališa

> On 09 Feb 2017, at 10:06, peter van der Stok <stokcons@xs4all.nl> wrote:
> 
> Dear authors,
> 
> For the transport of the link-layer keys have you thought about using a specific format?
> Will you specify a content-format in the CoAP registry?
> We should like to use that content format also in the est-coaps draft.
> 
> If you do, will it be possible to use CBOR and specifically binary arrays?
> 
> Greetings,
> 
> Peter
> 
> -- 
> Peter van der Stok
> vanderstok consultancy
> mailto: consultancy@vanderstok.org
> www: www.vanderstok.org
> tel NL: +31(0)492474673     F: +33(0)966015248
> 
> _______________________________________________
> 6tisch-security mailing list
> 6tisch-security@ietf.org
> https://www.ietf.org/mailman/listinfo/6tisch-security