Re: [Cfrg] Encrypt in place guidance / Similarities to BLE use-cases

[Björn Haase <[e-mail]>]

>There is no way the basic messages are changing and expanding as long as BT4 is used.

Actually regarding BLE, this is possible. You could dynamically modify the content of the different AD and additional data fields. There is a manufacturer specific data field that could be used for this purpose, still payloads are restricted to roughly 25 bytes when you aim at keeping compatibility with all the different iOS, Android and windows platforms. Note still, that this is significantly longer than 8 bytes (but still too short for the conventional 128 bit nonce and MAC fields).

I agree that none of the standardized protocol messages for advertising considers security, to my best knowledge.

Yours,

Björn.




Mit freundlichen Grüßen I Best Regards 

Dr. Björn Haase 


Senior Expert Electronics | TGREH Electronics Hardware

Endress+Hauser Liquid Analysis

Endress+Hauser Conducta GmbH+Co.KG | Dieselstrasse 24 | 70839 Gerlingen | Germany
Phone: [phone] | Fax: [phone]
[e-mail] |  www.conducta.endress.com 





Endress+Hauser Conducta GmbH+Co.KG
Amtsgericht Stuttgart HRA 201908
Sitz der Gesellschaft: Gerlingen
Persönlich haftende Gesellschafterin:
Endress+Hauser Conducta Verwaltungsgesellschaft mbH
Sitz der Gesellschaft: Gerlingen
Amtsgericht Stuttgart HRA 201929
Geschäftsführer: Dr. Manfred Jagiella

 
Gemäss Datenschutzgrundverordnung sind wir verpflichtet, Sie zu informieren, wenn wir personenbezogene Daten von Ihnen erheben.
Dieser Informationspflicht kommen wir mit folgendem Datenschutzhinweis (https://www.endress.com/de/cookies-endress+hauser-website) nach.

 



Disclaimer: 

The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential, proprietary, and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please contact the sender and delete the material from any computer. This e-mail does not constitute a contract offer, a contract amendment, or an acceptance of a contract offer unless explicitly and conspicuously designated or stated as such.
 



Von: Robert Moskowitz <[e-mail]>
Gesendet: Mittwoch, 1. April 2020 12:58
An: Björn Haase <[e-mail]>; Salz, Rich <rsalz=[e-mail]>; Blumenthal, Uri - 0553 - MITLL <[e-mail]>; Dan Brown <[e-mail]>; [e-mail]
Betreff: Re: [Cfrg] Encrypt in place guidance

There is no way the basic messages are changing and expanding as long as BT4 is used.

There is an auth message that can carry multiple basic messages.  We have a draft in DRIP:

draft-wiethuechter-drip-auth

That provides message protection.  This is up to 10 chained BT4 broadcasts.  Or 1 BT5 broadcast.

Yes, replay attacks are pretty much built into this architecture.  The major vendors don't get it or don't care (many are chinese companies).  The regulators just think this is ATM a little bigger.

We do what we can with what we have.  Build each message the best way and make sure they all work better inside the Auth wrapper.

And this does not obviate the need for privacy of the operator information.  That would still need to be encrypted.

All a work in progress.  Too many SDOs and regulators involved.
On 4/1/20 2:49 AM, Björn Haase wrote:
I fear that you might actually need at least some more bytes of payload in order to get any sound scheme realized.
For preventing replay attacks a 32 bit nonce and a 32 bit authentication tag might have to be considered to form the bare minimum requirement ☹.

We have had a similar problem with the severely size-limited BluetoothLE advertising (broadcast) packets.
One option that we use is segmenting the information by splitting it into several packets. This way reception of two or more separate
packets is needed in order to get the full information.

Mit freundlichen Grüßen I Best Regards

Dr. Björn Haase

________________________________
Senior Expert Electronics | TGREH Electronics Hardware

Endress+Hauser Liquid Analysis

Endress+Hauser Conducta GmbH+Co.KG | Dieselstrasse 24 | 70839 Gerlingen | Germany
Phone: [phone] | Fax: [phone]
[e-mail]<mailto:[e-mail]> | www.conducta.endress.com<http://www.conducta.endress.com/>
________________________________

Endress+Hauser Conducta GmbH+Co.KG
Amtsgericht Stuttgart HRA 201908
Sitz der Gesellschaft: Gerlingen
Persönlich haftende Gesellschafterin:
Endress+Hauser Conducta
Verwaltungsgesellschaft mbH
Sitz der Gesellschaft: Gerlingen
Amtsgericht Stuttgart HRA 201929
Geschäftsführer: Dr. Manfred Jagiella

________________________________

Gemäss Datenschutzgrundverordnung sind wir verpflichtet, Sie zu informieren, wenn wir personenbezogene Daten von Ihnen erheben.

Dieser Informationspflicht kommen wir mit folgendem Datenschutzhinweis<https://www.de.endress.com/de/cookies-endress+hauser-website> nach.

________________________________



Disclaimer:

The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential, proprietary, and/or privileged
material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities
other than the intended recipient is prohibited. If you receive this in error, please contact the sender and delete the material from any computer.
This e-mail does not constitute a contract offer, a contract amendment, or an acceptance of a contract offer unless explicitly and conspicuously designated or stated as such.





_______________________________________________

Cfrg mailing list

[e-mail]<mailto:[e-mail]>

https://www.irtf.org/mailman/listinfo/cfrg<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.irtf.org%2Fmailman%2Flistinfo%2Fcfrg&data=02%7C01%7Cbjoern.haase%40endress.com%7Cf0757cb6a83a42a15bc208d7d62b8af4%7C52daf2a93b734da4ac6a3f81adc92b7e%7C1%7C0%7C637213354844392845&sdata=yO8BLFTqo8sap0z0FfC%2Bp2bA3EejmBsqJ7SsCeSj3WQ%3D&reserved=0>