From: Michael Richardson <mcr+ietf@sandelman.ca>
To: =?us-ascii?Q?=3D=3Futf-8=3FB=3FTWFsacWhYSBWdcSNaW5pxIc=3D=3F=3D?=
 <malisa.vucinic@inria.fr>
cc: 6tisch <6tisch@ietf.org>
In-Reply-To: <187B5557-C49C-44A3-AD16-C4CFF00FB91B@inria.fr>
References: <187B5557-C49C-44A3-AD16-C4CFF00FB91B@inria.fr>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha256; protocol="application/pgp-signature"
Date: Tue, 30 Jul 2019 09:15:23 -0400
Message-ID: <31228.1564492523@localhost>
Archived-At: <https://mailarchive.ietf.org/arch/msg/6tisch/3H0DHz4FA4I-N697sNhGoPHmPjU>
Subject: Re: [6tisch] ASN replay attack -- proposed text
Precedence: list

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable


> At the time of the synchronization, the EB frame can neither be authentic=
ated
> nor its freshness verified.

I suggest:

> At the time of the synchronization, the EB frame can neither be authentic=
ated
> nor its freshness verified.  An attacker could have fabricated the EB, or
> may have simply replayed a previous EB (see RFC7416, many sections,
> including section-7.3.5). The pledge has no way to know at this point.

I think that you should move the attack description earlier.
The attack described is a kind of wormhole MITM attack, and I think it is
useful to reference 7416.

> that is normally in use in the network.

this is probably too vague.  I think it's the active K1.

=2D The frames should be passed to the upper layer for processing using the
=2D promiscuous mode of {{IEEE802.15.4}} or another appropriate mechanism.

+ The pledge should be placed into promiscuous mode of {{IEEE802.15.4}}
+ (or another appropriate mechanism implementation specific mechanism)
+ in order that they can be passed to the upper layer for processing
+ despite the frames failing the security check due to lack of a key.

{I can put these into github if you like, but I will finish reading the
thread first}

=2D-=20
]               Never tell me the odds!                 | ipv6 mesh network=
s [
]   Michael Richardson, Sandelman Software Works        |    IoT architect =
  [
]     mcr@sandelman.ca  http://www.sandelman.ca/        |   ruby on rails  =
  [




--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl1AQusACgkQgItw+93Q
3WVjVwf/ZQgGbQvD8zbrPm8H2lHt4aqgyASB7cOmm/2m3O7Kod9YtQvhdEwAzKWC
iiAv5rZyeCz3v6N2EVlouoI6ze8mMvG9IL+SG4OQ09j+aSwDu8a78TDB2ao46/Mj
qVvw7oVoyo3ILObdLJ7y02i/6TZVbAevUetuJ8rPAturyI4yYv5GkM/e3O6Ad5iV
mX3jHPkBc793be/evGb7RAn142orWqZ5tE/pgZUUcjm1PXhxsA0SB/zvmrYDs7+n
3zfdj8MYuzLB/k4orP/sIrsUH5Ds7LRhaAXxxZosxfB2MSBFTlVakQTQkXaR9NUY
w43tJOEh0RFRtOFhol3PySg8qTp69g==
=jcad
-----END PGP SIGNATURE-----
--=-=-=--