Re: [babel] Mirja Kühlewind's Discuss on draft-ietf-babel-hmac-08: (with DISCUSS and COMMENT)

Mirja Kuehlewind <ietf@kuehlewind.net> Wed, 07 August 2019 15:51 UTC

Return-Path: <ietf@kuehlewind.net>
X-Original-To: babel@ietfa.amsl.com
Delivered-To: babel@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DDB412026E; Wed, 7 Aug 2019 08:51:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rfZujukscU_G; Wed, 7 Aug 2019 08:50:58 -0700 (PDT)
Received: from wp513.webpack.hosteurope.de (wp513.webpack.hosteurope.de [IPv6:2a01:488:42:1000:50ed:8223::]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE6D812012D; Wed, 7 Aug 2019 08:50:58 -0700 (PDT)
Received: from 200116b82c9bae003483c528e9ba9b65.dip.versatel-1u1.de ([2001:16b8:2c9b:ae00:3483:c528:e9ba:9b65]); authenticated by wp513.webpack.hosteurope.de running ExIM with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) id 1hvODH-0004sq-Qo; Wed, 07 Aug 2019 17:50:55 +0200
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
From: Mirja Kuehlewind <ietf@kuehlewind.net>
In-Reply-To: <87a7clhtke.wl-jch@irif.fr>
Date: Wed, 07 Aug 2019 17:50:55 +0200
Cc: Donald Eastlake <d3e3e3@gmail.com>, babel-chairs@ietf.org, The IESG <iesg@ietf.org>, babel@ietf.org, draft-ietf-babel-hmac@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <E66B43F6-AE00-4C58-A08C-4CC0264EDF29@kuehlewind.net>
References: <156518028058.8361.10940272410936686016.idtracker@ietfa.amsl.com> <87imr9hyqc.wl-jch@irif.fr> <48D085EC-8B31-47FB-A4E1-05BB5CB30829@kuehlewind.net> <87ef1xhx1j.wl-jch@irif.fr> <C3E6F178-3785-4B94-962B-AE8F3A9BCAA8@kuehlewind.net> <87a7clhtke.wl-jch@irif.fr>
To: Juliusz Chroboczek <jch@irif.fr>
X-Mailer: Apple Mail (2.3445.104.11)
X-bounce-key: webpack.hosteurope.de;ietf@kuehlewind.net;1565193058;93a2ec53;
X-HE-SMSGID: 1hvODH-0004sq-Qo
Archived-At: <https://mailarchive.ietf.org/arch/msg/babel/081_e9jhkD_NasZ5O0iSXiRg1VY>
Subject: Re: [babel] Mirja Kühlewind's Discuss on draft-ietf-babel-hmac-08: (with DISCUSS and COMMENT)
X-BeenThere: babel@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "A list for discussion of the Babel Routing Protocol." <babel.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/babel>, <mailto:babel-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/babel/>
List-Post: <mailto:babel@ietf.org>
List-Help: <mailto:babel-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/babel>, <mailto:babel-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Aug 2019 15:51:01 -0000

Hi,

Inline.

> On 7. Aug 2019, at 17:41, Juliusz Chroboczek <jch@irif.fr> wrote:
> 
>>>> You can also use a different timer e.g. 300s which would also ensure
>>>> that a challenge is not send more often than 300s (expect in the case
>>>> where you got a challenge reply but in case you are not talking to an
>>>> attacker and usually not need to send another challenge request
>>>> immediately).
> 
>>> If the challenge reply is lost, then the challenge needs to be resent.  It
>>> would not be acceptable to cause a 5 min blackhole after a single packet
>>> loss.
> 
>> Why 5 mins?
> 
> You're suggesting 300s in the excerpt cited above.

Sorry I mean 300ms… (one important letter).
> 
>> If the challenge needs to be retransmitted, then the mechanism for
>> retransmitting seems to be missing in the draft or what do I miss?
> 
> A -> B: Challenge
> B -> A: Challenge reply gets lost
> 
> B -> multicast group: normal control packet

But this is usually send every 4 seconds or so…? So the important but seem that these two values fit together.

> 
> (At B, the control packet fails the index test (5th bullet point in 4.3).)
> 
> A -> B: Challenge

I wouldn’t call this a retransmission but rather a new Challenge… anyway that’s just naming…

Mirja


> 
> -- Juliusz
>