IETF Logo Mail Archive

Re: [Ace] Security of the Communication Between C and RS (was: Re: Fwd: New Version Notification for draft-ietf-ace-oauth-authz-17.txt and draft-ietf-ace-oauth-params-01.txt)

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Sat, 15 December 2018 15:04 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85FCA124C04 for <ace@ietfa.amsl.com>; Sat, 15 Dec 2018 07:04:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.36
X-Spam-Level:
X-Spam-Status: No, score=-3.36 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-1.459, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cvQwvoPIx23k for <ace@ietfa.amsl.com>; Sat, 15 Dec 2018 07:04:18 -0800 (PST)
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60075.outbound.protection.outlook.com [40.107.6.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6DF3123FFD for <ace@ietf.org>; Sat, 15 Dec 2018 07:04:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LOzCuuIjz00WieiBJlSVMGVOsYME6hHlWsrKo0fAMI0=; b=N6o88DV9BnLVy2i4EyuxkYFi2tcsLSkgOaLXfHjj3jXwMr7AQaq+6qBQ2ER1soo76jnWT4OXZPq6xBrPspRo+EitAL/3wAEpuvaMt7mXdyOynYrOLD3bAQFtxV/fTlypFQfo+sXlstO73pW/PollNHRo7kA23dPk+7JiQlhdr/w=
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB2718.eurprd08.prod.outlook.com (10.166.198.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1425.20; Sat, 15 Dec 2018 15:04:14 +0000
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::e8de:6a41:cbf4:89d8]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::e8de:6a41:cbf4:89d8%3]) with mapi id 15.20.1425.021; Sat, 15 Dec 2018 15:04:14 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: Stefanie Gerdes <gerdes@tzi.de>, Ludwig Seitz <ludwig.seitz@ri.se>, Jim Schaad <ietf@augustcellars.com>, "ace@ietf.org" <ace@ietf.org>
Thread-Topic: [Ace] Security of the Communication Between C and RS (was: Re: Fwd: New Version Notification for draft-ietf-ace-oauth-authz-17.txt and draft-ietf-ace-oauth-params-01.txt)
Thread-Index: AQHUk7/954+w7Vk94E6zFYcm2/BvZKV/5iVA
Date: Sat, 15 Dec 2018 15:04:14 +0000
Message-ID: <VI1PR0801MB2112E04F9FD7412350995417FAA20@VI1PR0801MB2112.eurprd08.prod.outlook.com>
References: <154322421294.8323.8505315870685563404.idtracker@ietfa.amsl.com> <cbd083d1-cb95-0732-aa8b-7c7de3f480d1@ri.se> <a0cdd836-7fe3-339e-0c48-961503857447@tzi.de> <03b601d49191$7d1bb400$77531c00$@augustcellars.com> <945fbebe-659f-ac72-3ab6-8e05447e7c92@ri.se> <1c5b81f3-50ce-be68-bec3-68ce2ff15b43@tzi.de> <4ae4eccd-68bf-18ef-f909-142f8172eca1@ri.se> <81ba3ab4-a9ce-a6fd-fbe6-c36a6fbbd9a5@tzi.de>
In-Reply-To: <81ba3ab4-a9ce-a6fd-fbe6-c36a6fbbd9a5@tzi.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [80.92.114.221]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; VI1PR0801MB2718; 6:IuWaPojaY11PBWVnMqwD9y/Y3+nRwUl5HtrdBLS5RoPSOt9/dWKIcBC5HpY8w0sxnFuJytbsI79RySZyGAPVq6C9oswyz+LChpSLK72d2MVf6p7P7V60VSQ+SBErKy+REggY0WCmn2he5piUqErqH3uVY93GvycF0gGWbtfJZSubsLjJXZGFofOVbjsaR3BWvUFClkQyTTN+Db/iIhCUt+BYhk5xpVSRi2RsVQBTmlODKmr0tvAe2pmcAGzZvV76B5+NFRXSqHyeXVwPNybFqohj0EPe2uJkdq31GfFDWQ9P/V6P/dZctQBm1Wp7LFGTdUvoBKEuQDWY3L97Twt49hDbgLayi194+6NnX7l3htMawSlQJPgfBewVMh+pZOD9bkrOjT+0hOxgRObqp4I/2sU+o8M9xrLS83Fzw+2/+QKymeIcaNCt1TQTjxdlyRrrVUSG3shnLs274oh/KKwbaQ==; 5:T4qma4r/EnkJupNCgQF1Yh5/7XZ0pJm2sbpQto5jdMW1phyiJni/EMi9sHIEoC22MzonnC3n+F6rwTJWKwxRQ+qzokd20E2ScjLS2mS+FZKlWJnAj7pEBItdJLdIZiwpnauA3JF2F1RhGeC2qtuIEuKhUrPfPLcuhok+STGJLpc=; 7:fxmqYhHtrKPD2dQHANvqoe0taDiPcbWb7kpcNlEgHrUaXGAoDqFXjmGhS3ZySqH3nIpw52AIa0mvRgd/JFGj5/0sEtKQ9GS244kaML6QrB4CNqxZoz5cqXw6ue3uhXmPGFQh8TmlEkkg3SZnrGeNsA==
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 5381a1aa-a889-4c85-9d19-08d6629e93e1
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB2718;
x-ms-traffictypediagnostic: VI1PR0801MB2718:
x-microsoft-antispam-prvs: <VI1PR0801MB2718ACF86F05C007454E4E50FAA20@VI1PR0801MB2718.eurprd08.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(3230021)(999002)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3002001)(3231475)(944501520)(52105112)(93006095)(93001095)(6055026)(148016)(149066)(150057)(6041310)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:VI1PR0801MB2718; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB2718;
x-forefront-prvs: 088751B4D4
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(366004)(39860400002)(376002)(346002)(396003)(40434004)(189003)(199004)(51444003)(316002)(86362001)(71200400001)(81156014)(71190400001)(6506007)(966005)(97736004)(110136005)(186003)(66066001)(8936002)(6246003)(9686003)(33656002)(256004)(99286004)(446003)(53936002)(476003)(14444005)(2501003)(5024004)(11346002)(93886005)(486006)(6306002)(55016002)(3846002)(6116002)(7696005)(7736002)(305945005)(2906002)(14454004)(74316002)(229853002)(25786009)(76176011)(478600001)(8676002)(81166006)(106356001)(5660300001)(6436002)(26005)(105586002)(15650500001)(68736007)(102836004)(72206003); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB2718; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: yqsAUXngZgW9Id4iRqnnIUlCpGD7N6MtiYdQpCEkbmuenUB8wdtl5c/sDL/QWH5grobAVaitwp+fdEcm15cZyfdkpHI/YBeincm28zjZva+eCUx5i1Z1oTRV6G2pM0dKz5BcuzfrXIpzxsqCDKu1EhoskcqbQqjA0MXk9uJG533XTuHu+WneSYP6W7TaaRl4M1Bjk3d8LlfvjgZ7GMozXieUEbrfU0+59L0js+V2Kvdk7SDX2QfecO3q/ZOMPC2lZ5Kf42INVzrXiUR6r0tnDOyYMe5jNC1HxqL2Jtd6yX0o1Fq/dAtsWlwEq71Xl/sU
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5381a1aa-a889-4c85-9d19-08d6629e93e1
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Dec 2018 15:04:14.3332 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB2718
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/DRgUE3H4iyOlTn0iO9tsDD5CrDw>
Subject: Re: [Ace] Security of the Communication Between C and RS (was: Re: Fwd: New Version Notification for draft-ietf-ace-oauth-authz-17.txt and draft-ietf-ace-oauth-params-01.txt)
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 15 Dec 2018 15:04:21 -0000

Hi Steffi,

~snip~

> I really think you should point out that symmetric keying material that the AS provides to the client is valid as long as the token.

I think that's a useful recommendation. I do, however, believe that we are not making the same assumption for an asymmetric key bound to the token.


> I also think that the client must be able to assume that RS' RPK that C receives from AS is also valid as long as the token, unless C has additional information.

I would think that it is rather unlikely that the RS will change its public/private key pair so quickly. Right?

> The access information optionally can contain an expires_in field. It would help to prevent security breaches under the following conditions:
1. the keying material is valid as long as the ticket, 2. the expires_in field is present in the access information that AS sends to C, 3. the client checks the expires_in field when it gets the access information from the AS, and 4. the client checks if the keying material is still valid each time before it sends a request to RS.

These checks make sense to me.


> Without these steps, the confidentiality of the request data that C sends to RS may be breached, and C may communicate with the wrong RS using outdated keying material.

Not sure how you came to this conclusion. Why is the request sent by the C to the RS revealed to an attacker when the token expires?

Ciao
Hannes


Viele Grüße
Steffi

_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

v2.23.0 | Report a Bug | By Email