Re: [Anima-bootstrap] [6tisch-security] goals for this 6tisch design team -- zero-touch vs one-touch

[Randy Turner <[e-mail]>]

We do not have zero or one-touch process, but we do have equivalent 802.1AR device certs - that’s about the only thing we have in common with your item (b) below…

R.

> On Jun 8, 2016, at 8:47 AM, Michael Richardson <[e-mail]> wrote:
> 
> 
> Randy Turner <[e-mail]> wrote:
>> The only ANIMA document I can find with “bootstrap” in the title specifically
>> precludes its’ application in constrained environments…
> 
> Well, you might have noticed that I'm one of the authors.
> And while the *protocol* we intend to use in ANIMA bootstrap is inappropriate
> for *6tisch* for a number of subtle reasons, we think:
>    a) it will work for "class 3" devices with no UI in non-constrained networks.
>    b) the certificate, MIC, TPM, 802.1AR, MASA and registar are designed to
>       be useable in both environments.
> 
>> So I’m assuming we can “borrow” ideas from ANIMA but reuse it …
> 
> Entire non-edge subsystems, just not the code at the edge.
> 
> Back to the question though.  Do you have one-touch process, and if so, would
> you want to describe it's capabilities?
> 
>> It seems that there are an innumerable number of ways that the "touch"
>> for a one-touch system could be done, and if there is real desire to accomodate
>> such a process, we need to state some assumptions about the touch
>> process.
>> As such, a document is surely needed. Some questions I have:
>> 1) is it physical? (vs radio. vs a BNC/etc cable plugged instead of
>> antenna)
>> 2) is it encrypted?
>> 3) does it run IP?
>> 4) how many bits can be transmitted/received?
>> 5) is the target CPU alive, or is this JTAG or JTAG-like?
> 
> 
> --
> Michael Richardson <[e-mail]>, Sandelman Software Works
> -= IPv6 IoT consulting =-
> 
> 
>