Re: [Cfrg] I-D Action: draft-irtf-cfrg-augpake-00.txt

Trevor Perrin <trevp@trevp.net> Fri, 06 December 2013 20:26 UTC

Return-Path: <trevp@trevp.net>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 496431AE0D8 for <cfrg@ietfa.amsl.com>; Fri, 6 Dec 2013 12:26:23 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.978
X-Spam-Level:
X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mabdR_iUVJD3 for <cfrg@ietfa.amsl.com>; Fri, 6 Dec 2013 12:26:20 -0800 (PST)
Received: from mail-wi0-f172.google.com (mail-wi0-f172.google.com [209.85.212.172]) by ietfa.amsl.com (Postfix) with ESMTP id 7AFF91AE05B for <cfrg@ietf.org>; Fri, 6 Dec 2013 12:26:20 -0800 (PST)
Received: by mail-wi0-f172.google.com with SMTP id en1so1429491wid.11 for <cfrg@ietf.org>; Fri, 06 Dec 2013 12:26:16 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=PYUHsRqZPNYk1sTamy86wSd6F0lNUU1uPI1GY+IaLY8=; b=OENXt0DeVGHptZCYj/yaRdDoCFMPZg1b6abc+pEBf1TJa4jLblWvaCYcSi4dAbK84g 0J/mzykPq8dVhbqsHXX1NcdVSbhdZGKD7DEQJz6NIZ0Ka2wAIigzOMGeDIYelc3CkeOk 6PxNaqPah42lvYDngQoC3PTVGJd31Ex9oMun1cJexUyXj9ZzR3QyETuQNaIRPMr/ywX5 /7w5ZAkr3Vhv+gvy6rRGYz8u+O7sagI9gNVj9KtuBA6lIlzVXyeQ0wqZhVSZAiLvoVOg ue4wBP/k+P7/W4XQ62IJwdBfEl38OfxXEAyCOn+mFR7qPkuNyvqZ045RQnZ2Z1PEWpRK xHHg==
X-Gm-Message-State: ALoCoQl/9RKkkZ4sXftUn53qEVU3PFurHcMb4CS8KV++2fdN0bDC8SsATZnLUgGLw88rtaedgQFo
MIME-Version: 1.0
X-Received: by 10.194.142.142 with SMTP id rw14mr5162975wjb.87.1386361575765; Fri, 06 Dec 2013 12:26:15 -0800 (PST)
Received: by 10.216.214.134 with HTTP; Fri, 6 Dec 2013 12:26:15 -0800 (PST)
X-Originating-IP: [64.134.226.64]
In-Reply-To: <CAEKgtqkV=FZgTMtJXGgA2je0ECmrCWUVD7crDXV9994xOwc0Fg@mail.gmail.com>
References: <20130906074540.19067.67943.idtracker@ietfa.amsl.com> <CAEKgtqkV=FZgTMtJXGgA2je0ECmrCWUVD7crDXV9994xOwc0Fg@mail.gmail.com>
Date: Fri, 6 Dec 2013 12:26:15 -0800
Message-ID: <CAGZ8ZG1XXiC-sk==LViYAwFSSY5ampT0O3b2aAN-yRK38bDCYw@mail.gmail.com>
From: Trevor Perrin <trevp@trevp.net>
To: SeongHan Shin <seonghan.shin@aist.go.jp>
Content-Type: text/plain; charset=ISO-8859-1
Cc: =?UTF-8?B?5Y+k5Y6f5ZKM6YKm?= <k-kobara@aist.go.jp>, cfrg@ietf.org, "tls@ietf.org" <tls@ietf.org>
Subject: Re: [Cfrg] I-D Action: draft-irtf-cfrg-augpake-00.txt
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Dec 2013 20:26:23 -0000

I really like this idea & can find no problems.

Since a single cursory opinion counts for CFRG consensus [1,2],
consider this approved by CFRG and our NSA overseers.

Thanks, come again!


Trevor


P.S. The treatment of random numbers could be improved, consider
referencing NIST SP 800-90A.

(psst Kevin ^^^ THIS is how it's done.  *FINESSE*, or you'll never
work the big leagues!)


[1] http://www.ietf.org/mail-archive/web/cfrg/current/msg03047.html
[2] http://www.ietf.org/proceedings/84/minutes/minutes-84-tls


On Sun, Sep 29, 2013 at 11:18 PM, SeongHan Shin
<seonghan.shin@aist.go.jp>; wrote:
> Dear all,
>
> We submitted our I-D regarding augmented PAKE
> that provides extra protection to server compromise compared to balanced
> PAKE.
> (Of course, it can be easily converted to the balanced one)
>
> Any comments are welcome!
>
> Best regards,
> Shin
>
>
> On Fri, Sep 6, 2013 at 4:45 PM, <internet-drafts@ietf.org>; wrote:
>>
>>
>> A New Internet-Draft is available from the on-line Internet-Drafts
>> directories.
>>  This draft is a work item of the Crypto Forum Research Group Working
>> Group of the IETF.
>>
>>         Title           : Augmented Password-Authenticated Key Exchange
>> (AugPAKE)
>>         Author(s)       : SeongHan Shin
>>                           Kazukuni Kobara
>>         Filename        : draft-irtf-cfrg-augpake-00.txt
>>         Pages           : 17
>>         Date            : 2013-09-06
>>
>> Abstract:
>>    This document describes a secure and highly-efficient augmented
>>    password-authenticated key exchange (AugPAKE) protocol where a user
>>    remembers a low-entropy password and its verifier is registered in
>>    the intended server.  In general, the user password is chosen from a
>>    small set of dictionary whose space is within the off-line dictionary
>>    attacks.  The AugPAKE protocol described here is secure against
>>    passive attacks, active attacks and off-line dictionary attacks (on
>>    the obtained messages with passive/active attacks).  Also, this
>>    protocol provides resistance to server compromise in the context that
>>    an attacker, who obtained the password verifier from the server, must
>>    at least perform off-line dictionary attacks to gain any advantage in
>>    impersonating the user.  The AugPAKE protocol is not only provably
>>    secure in the random oracle model but also the most efficient over
>>    the previous augmented PAKE protocols (SRP and AMP).
>>
>>
>> The IETF datatracker status page for this draft is:
>> https://datatracker.ietf.org/doc/draft-irtf-cfrg-augpake
>>
>> There's also a htmlized version available at:
>> http://tools.ietf.org/html/draft-irtf-cfrg-augpake-00
>>
>>
>> Please note that it may take a couple of minutes from the time of
>> submission
>> until the htmlized version and diff are available at tools.ietf.org.
>>
>> Internet-Drafts are also available by anonymous FTP at:
>> ftp://ftp.ietf.org/internet-drafts/
>>
>> _______________________________________________
>> Cfrg mailing list
>> Cfrg@irtf.org
>> http://www.irtf.org/mailman/listinfo/cfrg
>
>
>
>
> --
> ------------------------------------------------------------------
> SeongHan Shin
> Research Institute for Secure Systems (RISEC),
> National Institute of Advanced Industrial Science and Technology (AIST),
> Central 2, 1-1-1, Umezono, Tsukuba City, Ibaraki 305-8568 Japan
> Tel : +81-29-861-2670/5284
> Fax : +81-29-861-5285
> E-mail : seonghan.shin@aist.go.jp
> ------------------------------------------------------------------
>
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> http://www.irtf.org/mailman/listinfo/cfrg
>