IETF Logo Mail Archive

Re: [Ace] EST over CoAP: Randomness

Paul Duffy <paduffy@cisco.com> Wed, 15 May 2019 14:30 UTC

Return-Path: <paduffy@cisco.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 577131200DB for <ace@ietfa.amsl.com>; Wed, 15 May 2019 07:30:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.511
X-Spam-Level:
X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d-GYSo-yHsum for <ace@ietfa.amsl.com>; Wed, 15 May 2019 07:30:20 -0700 (PDT)
Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C79112001E for <ace@ietf.org>; Wed, 15 May 2019 07:30:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2127; q=dns/txt; s=iport; t=1557930620; x=1559140220; h=subject:to:references:from:message-id:date:mime-version: in-reply-to:content-transfer-encoding; bh=OJWQPJGzp4331BWJvr0JrkiNd4prWpFVrotpTUeOif8=; b=PB9EsEMw2pdC8oUGHKvniKLje0h0eLtXDq3qm78g87Q64ltvsGq33qZb wYT567SrY3wfKTDvjwCK1fjn2MiwAPnjDsqQ4u79YcMWL0YUTZl3PHdaU nVq6R1UipBsayVmNg9rGDNjUwrwM3cK5nWWVBEB6u9JxcR4VmD7fML0mv c=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AKAADBIdxc/49dJa1kGgEBAQEBAgEBAQEHAgEBAQGBUwMBAQEBCwGBYQUqgW0ohBGTBoFgCCWYUxSBZwkBAQEOLwEBhEACgisjNgcOAQMBAQQBAQIBBG0ohUoBAQEEIw8BBTgVBAsRBAEBAQICJgICTwgGAQwGAgEBF4MHggusR4EvhUeDIIFGgQsoAYowgR4XgUA/JoESDIJfPoQRARIBS4JeglgEiwWcVAmCC4pbg2KEGwYbghQuhh6DTolAjDSNK4gHgVYELWZxMxoIGxWDJ4MzAQKNNyMzjiyCQwEB
X-IronPort-AV: E=Sophos;i="5.60,472,1549929600"; d="scan'208";a="270863332"
Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 15 May 2019 14:30:19 +0000
Received: from [161.44.79.55] ([161.44.79.55]) by rcdn-core-7.cisco.com (8.15.2/8.15.2) with ESMTP id x4FEUIPh003961; Wed, 15 May 2019 14:30:19 GMT
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "ace@ietf.org" <ace@ietf.org>
References: <DBBPR08MB45393CDF71E7DB02F6C6938CFA330@DBBPR08MB4539.eurprd08.prod.outlook.com> <0a75faf6-0968-d266-b99e-cf400b311477@cisco.com> <AM0PR08MB45328797A4FFEC9ACAFBBEB5FA080@AM0PR08MB4532.eurprd08.prod.outlook.com>
From: Paul Duffy <paduffy@cisco.com>
Message-ID: <d5fdd6a6-2709-efe5-2dcd-75434599aaac@cisco.com>
Date: Wed, 15 May 2019 10:30:18 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1
MIME-Version: 1.0
In-Reply-To: <AM0PR08MB45328797A4FFEC9ACAFBBEB5FA080@AM0PR08MB4532.eurprd08.prod.outlook.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Content-Language: en-US
X-Outbound-SMTP-Client: 161.44.79.55, [161.44.79.55]
X-Outbound-Node: rcdn-core-7.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/o8JEOZo33forOnV4bgliotRdYKg>
Subject: Re: [Ace] EST over CoAP: Randomness
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 May 2019 14:30:22 -0000

The point I'm making Hannes is that,  though not so long ago the "cost" 
for RNG was prohibitive for many constrained end-devices ... this is 
more often no longer the case and improving every month (despite 
whatever other security functions are packaged within the module).

On 5/14/2019 7:29 PM, Hannes Tschofenig wrote:
> Hi Paul,
>
> My understanding from reading the draft text was that the "cost" was actually talking about "energy cost" rather than "monetary cost".
> The monetary cost may also be interesting.
>
> It is difficult to judge the extra cost of a RNG in an MCU because
> (a) you rarely find an MCU with and without MCU (keeping all other features the same),
> (b) even if you find one there are other factors that impact the cost (such as popularity of a particular MCU),
> (c) RNG features are often provided with other features (such as SHA256 and AES in hardware), and
> (d) cost and price of an MCU are different aspects.
>
> Ciao
> Hannes
>
> -----Original Message-----
> From: Paul Duffy <paduffy@cisco.com>
> Sent: Dienstag, 14. Mai 2019 15:08
> To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>; ace@ietf.org
> Subject: Re: [Ace] EST over CoAP: Randomness
>
>
> On 5/9/2019 10:42 AM, Hannes Tschofenig wrote:
>> I believe we should encourage developers to pick the correct hardware for the task rather than making them believe we have come up with solutions that allow them to get away without a hardware-based RNG.
>>
>> I also do not believe the statement that random number key generation is costly. Can you give me some number?
> Strong agreement.  The added cost for hw based RNG is ever decreasing. Last time I checked it was on the order of 50 cents @ Q 10k?  It has likely fallen since.  Confirm with Atmel etc.
>
> Cheers
>
>
> IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

v2.23.0 | Report a Bug | By Email