[babel] What's up with HNCP security?

[Juliusz Chroboczek <[e-mail]>]

Dear Ted, dear list,

(Babel list in copy of this mail.)

There are two facets to Homenet security: HNCP and Babel.  We, at Babel
towers, are planning to implement Stenberg-style security for Babel during
the month of July (earlier is not possible due to my prospective interns
having to sit their exams).  When we're done, we can compare this aproach
to the existing HMAC security, and see which of the two approaches is more
suitable for Homenet.

For the Babel work to be useful for Homenet security, HNCP needs to be
extended with two features:

  - the ability to signal other HNCP nodes that a given link requires
    authentication and/or encryption, and to securely signal any private
    keys;
  - the ability to protect HNCP traffic over an untrusted link.

Pierre has mentioned that HNCP already supports all or most of that, but
somebody needs to write down the relevant protocol bits and check whether
everything is implemented.

I'd much prefer that this work be done before we start extending Babel,
since having the HNCP bits ready would help us ensure that we're meeting
all of the Homenet requirements.

I'm leaving for a short holiday tomorrow, so please don't worry if I'm not
very responsive during the next week.  I've got exams the week after, so
please don't worry if I'm not very responsive the week after that.  Pleae
expect me to be my usual annoyingly chatty and opinionated self in two
weeks' time.

Regards,

-- Juliusz