IETF Logo Mail Archive

Re: [babel] Some open HMAC issues

David Schinazi <dschinazi@apple.com> Sun, 15 July 2018 13:06 UTC

Return-Path: <dschinazi@apple.com>
X-Original-To: babel@ietfa.amsl.com
Delivered-To: babel@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3AE2130DEA for <babel@ietfa.amsl.com>; Sun, 15 Jul 2018 06:06:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.011
X-Spam-Level:
X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6WWUNNaVjp0A for <babel@ietfa.amsl.com>; Sun, 15 Jul 2018 06:06:26 -0700 (PDT)
Received: from mail-in25.apple.com (mail-out25.apple.com [17.171.2.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0ED41294D0 for <babel@ietf.org>; Sun, 15 Jul 2018 06:06:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1531659985; x=2395573585; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-transfer-encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-reply-to:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=ae/EyW/52JNY9ZcqbYcEajn//QH0Xw3mXw/ugZHCbNc=; b=I2xas3o53cHM8+LtcXCjYOESNdNEsGVYIkxu3heZdsz8wWn8PxvPLQDPphr8qFc1 D3MFdGJnEpMPmMC61bQF0DkFJYxW7UAjsApfYOCTYGuMkX3gIQWUMP2o/qMk1Rrp WzsmnhrclHOAZfQt1KrFXRJzSbZRXt+d2q68frxyQn9mV/RMRGc+cNjHE3CXkvzF oYu6X/d2My6Z0Z6Y5d/1QfS2tS6QSkRPKIi/vzymDL5zKytZgIncyM2LOk+cIoul olY0/1CaakwUnVjX6deatzHQ+ymoXRcPzYHz8uV9E24uP3Qd97zZd0ektdwH5Jgq NItIXZMJuAQEostNHCY+oQ==;
X-AuditID: 11ab0219-56fff70000004c1b-07-5b4b46d12d36
Received: from ma1-mtap-s01.corp.apple.com (ma1-mtap-s01.corp.apple.com [17.40.76.5]) (using TLS with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mail-in25.apple.com (Apple Secure Mail Relay) with SMTP id 89.40.19483.1D64B4B5; Sun, 15 Jul 2018 06:06:25 -0700 (PDT)
MIME-version: 1.0
Content-transfer-encoding: 7bit
Content-type: text/plain; CHARSET="US-ASCII"
Received: from nwk-mmpp-sz12.apple.com (nwk-mmpp-sz12.apple.com [17.128.115.204]) by ma1-mtap-s01.corp.apple.com (Oracle Communications Messaging Server 8.0.2.3.20180614 64bit (built Jun 14 2018)) with ESMTPS id <0PBW00JW9SEPL810@ma1-mtap-s01.corp.apple.com>; Sun, 15 Jul 2018 06:06:25 -0700 (PDT)
Received: from process_viserion-daemon.nwk-mmpp-sz12.apple.com by nwk-mmpp-sz12.apple.com (Oracle Communications Messaging Server 8.0.2.3.20180614 64bit (built Jun 14 2018)) id <0PBW00500S7BAZ00@nwk-mmpp-sz12.apple.com>; Sun, 15 Jul 2018 06:06:25 -0700 (PDT)
X-Va-A:
X-Va-T-CD: 7d6566e1ce32e60bd701207e1252a9a5
X-Va-E-CD: 25db9c8def847da5f3c8f83d464a40b5
X-Va-R-CD: fbd4a3ecf174248f2009b74dbcdd7cb8
X-Va-CD: 0
X-Va-ID: 8a0b6198-ed41-4233-948b-7290e776ebe4
X-V-A:
X-V-T-CD: 7d6566e1ce32e60bd701207e1252a9a5
X-V-E-CD: 25db9c8def847da5f3c8f83d464a40b5
X-V-R-CD: fbd4a3ecf174248f2009b74dbcdd7cb8
X-V-CD: 0
X-V-ID: 6540cb7e-db33-424c-bf86-c93066d71efa
Received: from process_milters-daemon.nwk-mmpp-sz12.apple.com by nwk-mmpp-sz12.apple.com (Oracle Communications Messaging Server 8.0.2.3.20180614 64bit (built Jun 14 2018)) id <0PBW00400S57S600@nwk-mmpp-sz12.apple.com>; Sun, 15 Jul 2018 06:06:25 -0700 (PDT)
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2018-07-15_05:,, signatures=0
X-Proofpoint-Scanner-Instance: nwk-grpmailp-qapp17.corp.apple.com-10000_instance1
Received: from [17.235.47.164] by nwk-mmpp-sz12.apple.com (Oracle Communications Messaging Server 8.0.2.3.20180614 64bit (built Jun 14 2018)) with ESMTPSA id <0PBW00L94SEMX040@nwk-mmpp-sz12.apple.com>; Sun, 15 Jul 2018 06:06:25 -0700 (PDT)
Sender: dschinazi@apple.com
From: David Schinazi <dschinazi@apple.com>
In-reply-to: <87sh4luzrn.wl-jch@irif.fr>
Date: Sun, 15 Jul 2018 09:06:21 -0400
Cc: Toke Høiland-Jørgensen <toke@toke.dk>, Clara Dô <clarado_perso@yahoo.fr>, Weronika Kołodziejak <weronika.kolodziejak@gmail.com>, babel@ietf.org
Message-id: <F3E0FEA4-90AB-4EDF-B814-1E748868CC6C@apple.com>
References: <87sh545st3.wl-jch@irif.fr> <87bmbb9jyw.fsf@toke.dk> <87sh4luzrn.wl-jch@irif.fr>
To: Juliusz Chroboczek <jch@irif.fr>
X-Mailer: Apple Mail (2.3445.9.1)
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrIIsWRmVeSWpSXmKPExsUiqOHDqnvRzTvaYN8yK4sti7pZLDZcXsds Mb91GZvF1vcr2C0+fLrD6sDqsXPWXXaPJUt+Mnks3vKW0WPLoYtsHq+mP2QPYI3isklJzcks Sy3St0vgylj1/BtLwUfWijkvXjM1MJ5h6WLk4JAQMJFYsj6qi5GLQ0hgP5PErx1LGLsYOTl4 BQQlfky+B1bDLCAvcfC8LEiYWUBL4vujVhaI+o1MEjcaD7CDJIQEupgk+q9Fg9gSAuwSf37t YIGwtSV2NfUxwth/Xl+Bs2/sPghVwyWxYOtpVghbV2J1/ws2CJtNYv2JJUwQtpbE0+3PWWHs 3gsLWGDs9j8/oOKcEue/TGSHsHUktlzaAXVoJ5PEmReHoAZlS2w5cQnqiGCJhxPaGCGKvjJK 7J+zHKxIWEBaouvCXVaQ74WBNlxYYQVisgGZB9YYgZicAhoSM3aDFbMIqEosXdLACAmfC4wS r5doQILQRqJpx1OwIUICcRK33xiAhEUEVCSWT3vGPoFRcRZSQM9CBPQspIBewMi8ilE4NzEz Rzczz8hUL7GgICdVLzk/dxMjKI2sZpLcwfj1teEhRgEORiUe3gobr2gh1sSy4srcQ4zSHCxK 4rwfd4lFCwmkJ5akZqemFqQWxReV5qQWH2Jk4uCUamCU0xcKa4iNXb177Zr7bBpnGJTObl3j uE1m5n22k2sbPjyYPmPTs6q9rG+TIxz3Pgkp4Wuc+P1n3Jkexf9nHP7/9mGY9HHmiiyXHD+j xZKBl7JPXlbat0ciaIFCRbLR8wC3No6SZPvZlXNKDobPOuVX3Lpz8hJHs8lX0tyvd19u4Uvs k3x8VnyyEktxRqKhFnNRcSIAI1undwQDAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/babel/x57t8YGS9O8IE7uRqItvCf51Tq0>
Subject: Re: [babel] Some open HMAC issues
X-BeenThere: babel@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: "A list for discussion of the Babel Routing Protocol." <babel.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/babel>, <mailto:babel-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/babel/>
List-Post: <mailto:babel@ietf.org>
List-Help: <mailto:babel-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/babel>, <mailto:babel-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 15 Jul 2018 13:06:28 -0000


> On Jul 14, 2018, at 20:08, Juliusz Chroboczek <jch@irif.fr> wrote:
> 
>> I agree that sticking the signatures in the packet trailer is the right
>> thing to do. The zero out / hash self / rewrite hash dance is way too
>> annoying. Also, when the signature is in the packet trailer the hash
>> check can move straight to that and ignore the rest of the packet; and
>> the regular parser can ignore the packet trailer and just parse the
>> regular TLVs.
> 
> That's what I think too, but David disagreed last time I asked him.
> Since you agree with me, I think I'm going to insist on this one.

I didn't disagree. My point was that I wasn't bothered by the
zero out / hash / rewrite hash dance. But packet trailer is fine by me.

David

v2.23.0 | Report a Bug | By Email