Re: [Cfrg] Requesting removal of CFRG co-chair
"Dan Harkins" <dharkins@lounge.org> Sat, 21 December 2013 08:28 UTC
Return-Path: <dharkins@lounge.org>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 459001AE2FA for <cfrg@ietfa.amsl.com>; Sat, 21 Dec 2013 00:28:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.867
X-Spam-Level:
X-Spam-Status: No, score=-3.867 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001] autolearn=unavailable
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FLwmXEpvsiDD for <cfrg@ietfa.amsl.com>; Sat, 21 Dec 2013 00:28:12 -0800 (PST)
Received: from colo.trepanning.net (colo.trepanning.net [69.55.226.174]) by ietfa.amsl.com (Postfix) with ESMTP id DE4EB1AE2ED for <cfrg@ietf.org>; Sat, 21 Dec 2013 00:28:11 -0800 (PST)
Received: from www.trepanning.net (localhost [127.0.0.1]) by colo.trepanning.net (Postfix) with ESMTP id 3DDB710224008; Sat, 21 Dec 2013 00:28:09 -0800 (PST)
Received: from 69.12.173.8 (SquirrelMail authenticated user dharkins@lounge.org) by www.trepanning.net with HTTP; Sat, 21 Dec 2013 00:28:09 -0800 (PST)
Message-ID: <ddd7a57df8d7ba569bba601a235234bb.squirrel@www.trepanning.net>
In-Reply-To: <CAGZ8ZG2f9QHX40RcB8aajWvEfG0Gh_uewu2Rq7bQGHYNx6cOmw@mail.gmail.com>
References: <CAGZ8ZG2f9QHX40RcB8aajWvEfG0Gh_uewu2Rq7bQGHYNx6cOmw@mail.gmail.com>
Date: Sat, 21 Dec 2013 00:28:09 -0800
From: Dan Harkins <dharkins@lounge.org>
To: Trevor Perrin <trevp@trevp.net>
User-Agent: SquirrelMail/1.4.14 [SVN]
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Cc: iab@iab.org, cfrg@ietf.org, irtf-chair@irtf.org
Subject: Re: [Cfrg] Requesting removal of CFRG co-chair
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Sat, 21 Dec 2013 08:28:15 -0000
This request is FUD on top of innuendo. The protocol in question, dragonfly, does not have any security flaws that would cause it to be inappropriate as a TLS cipher suite. Given that Standards Track RFCs defining TLS cipher suites are susceptible to attacks that dragonfly is provably resistant to underscores that fact. The recent discussion on the TLS list actually just rehashed old issues raised 2 years or more before the WGLC, namely: 1) there is no security proof for resistance to an off-line dictionary attack; and 2) there is text in the draft that deals with a potential side channel attack. It was #1 that prompted the request to CFRG. The TLS WG did not feel it was capable of evaluating that part of a cryptographic key exchange and asked the CFRG to take a look. No attack against dragonfly was brought up during the CFRG review, and to this day there is no known attack against it. Issue #2 is the result of a mailing list discussion prior to WGLC. Note that Trevor Perrin did not have an opinion on the matter when it was discussed; he actually only commented 2+ years later, after WGLC closed. If WG consensus wanted to re-open the issue, it might make sense to discuss other resolutions as a way to move forward but Trevor has stated that it doesn't matter, he will oppose the draft no matter what changes are done. I am extremely sorry that my draft seems to have caused the CFRG chairs to be the target of these accusations. It's always easy to be a critic and it's especially easy to launch a FUD-based criticism. But criticizing someone who volunteers to do work that one is not capable of doing himself is especially lazy. The added implication of a conspiracy theory should be all the more reason to reject it. There is no substance to this complaint and I hope it is summarily dismissed. regards, Dan. On Fri, December 20, 2013 8:01 am, Trevor Perrin wrote: > Dear IRTF Chair, IAB, and CFRG: > > I'd like to request the removal of Kevin Igoe from CFRG co-chair. > > The Crypto Forum Research Group is chartered to provide crypto advice > to IETF Working Groups. As CFRG co-chair for the last 2 years, Kevin > has shaped CFRG discussion and provided CFRG opinion to WGs. > > Kevin's handling of the "Dragonfly" protocol raises doubts that he is > performing these duties competently. Additionally, Kevin's employment > with the National Security Agency raises conflict-of-interest > concerns. > > > Dragonfly Background > ---- > Dragonfly is a "Password-Authenticated Key Exchange" protocol (or > "PAKE"). Dragonfly was proposed to CFRG 2 years ago [PROPOSAL]. > Compared to better-known PAKEs, Dragonfly has no security proof, a > lack of extensive security analysis, nonfunctional complications added > for IPR reasons, and some security issues [REVIEW]. > > Dragonfly became a hot topic recently when the TLS WG disputed CFRG's > alleged report that Dragonfly was "satisfactory", as well as disputing > that this report reflected CFRG consensus [TLS_1]. After extensive > criticism of Dragonfly, the TLS WG ceased work on a Dragonfly > extension [TLS_2]. > > > NSA Background > ---- > The National Security Agency ("NSA") is a U.S. Intelligence Agency > which is believed to devote considerable resources to: > - "Influence policies, standards and specifications for commercial > public key technologies" > - "Shape the worldwide cryptography marketplace to make it more > tractable to advanced cryptanalytic capabilities" [BULLRUN] > > While much is unknown about these activities, the NSA is known to have > placed a "back door" in a NIST standard for random number generation > [ECDRBG]. A recent report from the President's Review Group > recommends that the NSA: > - "fully support and not undermine efforts to create encryption > standards" > - "not in any way subvert, undermine, weaken, or make vulnerable > generally available commercial software" [PRESIDENTS] > > This suggests the NSA is currently behaving contrary to the > recommendations. > > > Reasons for requesting Kevin's removal > ---- > 1) Kevin has provided the *ONLY* positive feedback for Dragonfly that > can be found on the CFRG mailing list or meeting minutes. The > contrast between Kevin's enthusiasm and the group's skepticism is > striking [CFRG_SUMMARY]. It's unclear what this enthusiasm is based > on. There's no record of Kevin making any effort to understand > Dragonfly's unusual structure, compare it to alternatives, consider > possible use cases, or construct a formal security analysis. > > 2) Twice Kevin suggested a technique for deriving the Dragonfly > password-based element which would make the protocol easy to break > [IGOE_1, IGOE_2]. He also endorsed an ineffective attempt to avoid > timing attacks by adding extra iterations to one of the loops [IGOE_3, > IGOE_4]. These are surprising mistakes from an experienced > cryptographer. > > 3) Kevin's approval of Dragonfly to the TLS WG misrepresented CFRG > consensus, which was skeptical of Dragonfly [CFRG_SUMMARY]. > > 4) Kevin's NSA affiliation raises unpleasant but unavoidable > questions regarding these actions. It's entirely possible these are > just mistakes by a novice chair who lacks experience in a particular > sort of protocol and is being pressured by IETF participants to > endorse something. But it's hard to escape an impression of > carelessness and unseriousness in Kevin's work. One wonders whether > the NSA is happy to preside over this sort of sloppy crypto design. > > While that's of course speculation, it remains baffling that an > experienced cryptographer would champion such a shoddy protocol. The > CFRG chairs have been silent for months, and haven't responded to > attempts to clarify this. > > > Conclusion > ---- > The position of CFRG chair (or co-chair) is a role of crucial > importance to the IETF community. The IETF is in desperate need of > trustworthy crypto guidance from parties who are above suspicion. I > encourage the IAB and IRTF to replace Kevin Igoe with someone who can > provide this. > > Thanks for considering this request. > > > Trevor > > > [PROPOSAL] http://www.ietf.org/mail-archive/web/cfrg/current/msg03044.html > [REVIEW] http://www.ietf.org/mail-archive/web/cfrg/current/msg03537.html > [TLS_1] http://www.ietf.org/mail-archive/web/tls/current/msg10819.html > [TLS_2] http://www.ietf.org/mail-archive/web/tls/current/msg10993.html > [BULLRUN] > http://www.nytimes.com/interactive/2013/09/05/us/documents-reveal-nsa-campaign-against-encryption.html > [ECDRBG] > http://bits.blogs.nytimes.com/2013/09/10/government-announces-steps-to-restore-confidence-on-encryption-standards/ > [PRESIDENTS] > http://www.whitehouse.gov/sites/default/files/docs/2013-12-12_rg_final_report.pdf > [CFRG_SUMMARY] > http://www.ietf.org/mail-archive/web/cfrg/current/msg03545.html > [IGOE_1] http://www.ietf.org/mail-archive/web/cfrg/current/msg03047.html > [IGOE_2] http://www.ietf.org/mail-archive/web/cfrg/current/msg03258.html > [IGOE_3] http://www.ietf.org/mail-archive/web/cfrg/current/msg03262.html > [IGOE_4] http://www.ietf.org/mail-archive/web/cfrg/current/msg03264.html > _______________________________________________ > Cfrg mailing list > Cfrg@irtf.org > http://www.irtf.org/mailman/listinfo/cfrg >
- [Cfrg] Requesting removal of CFRG co-chair Trevor Perrin
- Re: [Cfrg] Requesting removal of CFRG co-chair Alyssa Rowan
- Re: [Cfrg] Requesting removal of CFRG co-chair William Whyte
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Eggert, Lars
- Re: [Cfrg] Requesting removal of CFRG co-chair Alyssa Rowan
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair Trevor Perrin
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair Trevor Perrin
- Re: [Cfrg] Requesting removal of CFRG co-chair Watson Ladd
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Daniel Kahn Gillmor
- Re: [Cfrg] Requesting removal of CFRG co-chair Hilarie Orman
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Daniel Kahn Gillmor
- Re: [Cfrg] Requesting removal of CFRG co-chair Paul Lambert
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Watson Ladd
- Re: [Cfrg] Requesting removal of CFRG co-chair Alyssa Rowan
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Adam Back
- Re: [Cfrg] Requesting removal of CFRG co-chair Eggert, Lars
- Re: [Cfrg] Requesting removal of CFRG co-chair Mike Simpson
- Re: [Cfrg] Requesting removal of CFRG co-chair Watson Ladd
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Alyssa Rowan
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Robert Ransom
- Re: [Cfrg] Requesting removal of CFRG co-chair Adam Back
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Yoav Nir
- Re: [Cfrg] Requesting removal of CFRG co-chair Natanael
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair William Whyte
- Re: [Cfrg] Requesting removal of CFRG co-chair Henrick Hellström
- Re: [Cfrg] Requesting removal of CFRG co-chair Alyssa Rowan
- Re: [Cfrg] Requesting removal of CFRG co-chair John Viega
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair Richard Barnes
- Re: [Cfrg] Requesting removal of CFRG co-chair John Bradley
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Richard Barnes
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair Trevor Perrin
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair John Viega
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair John Viega
- Re: [Cfrg] Requesting removal of CFRG co-chair Watson Ladd
- Re: [Cfrg] Requesting removal of CFRG co-chair David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair Brian Weis
- Re: [Cfrg] Requesting removal of CFRG co-chair Tom Ritter
- Re: [Cfrg] Requesting removal of CFRG co-chair Brian Weis
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] CFRG and thwarting pervasive montoring Paul Lambert
- Re: [Cfrg] Requesting removal of CFRG co-chair Henrick Hellström
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Yoav Nir
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Alyssa Rowan
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Yoav Nir
- Re: [Cfrg] Requesting removal of CFRG co-chair David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair Alyssa Rowan
- Re: [Cfrg] Requesting removal of CFRG co-chair Trevor Perrin
- Re: [Cfrg] Requesting removal of CFRG co-chair Nikos Mavrogiannopoulos
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Watson Ladd
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Yoav Nir
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Robert Ransom
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair Yoav Nir
- Re: [Cfrg] Requesting removal of CFRG co-chair Paul Hoffman
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- Re: [Cfrg] Requesting removal of CFRG co-chair idontneedcoffee
- Re: [Cfrg] Requesting removal of CFRG co-chair Alyssa Rowan
- Re: [Cfrg] Requesting removal of CFRG co-chair Yoav Nir
- Re: [Cfrg] Requesting removal of CFRG co-chair Eggert, Lars
- Re: [Cfrg] Requesting removal of CFRG co-chair idontneedcoffee
- Re: [Cfrg] Requesting removal of CFRG co-chair Stephen Farrell
- Re: [Cfrg] Requesting removal of CFRG co-chair Tao Effect
- [Cfrg] CFRG and thwarting pervasive montoring Paul Hoffman
- Re: [Cfrg] CFRG and thwarting pervasive montoring Stephen Farrell
- Re: [Cfrg] CFRG and thwarting pervasive montoring Watson Ladd
- Re: [Cfrg] CFRG and thwarting pervasive montoring Paul Hoffman
- Re: [Cfrg] Requesting removal of CFRG co-chair David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair John Bradley
- [Cfrg] misuse-resistant AEAD (was: Re: CFRG and t… David McGrew
- Re: [Cfrg] misuse-resistant AEAD (was: Re: CFRG a… Watson Ladd
- Re: [Cfrg] misuse-resistant AEAD David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair David McGrew
- Re: [Cfrg] misuse-resistant AEAD (was: Re: CFRG a… Dan Harkins
- Re: [Cfrg] misuse-resistant AEAD (was: Re: CFRG a… Watson Ladd
- Re: [Cfrg] misuse-resistant AEAD (was: Re: CFRG a… Dan Harkins
- Re: [Cfrg] misuse-resistant AEAD David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair Scott Fluhrer (sfluhrer)
- [Cfrg] changes to hunt-and-peck algorithm (Re: Re… David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair Trevor Perrin
- Re: [Cfrg] Requesting removal of CFRG co-chair Trevor Perrin
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] Requesting removal of CFRG co-chair Dan Harkins
- Re: [Cfrg] changes to hunt-and-peck algorithm (Re… Trevor Perrin
- Re: [Cfrg] Requesting removal of CFRG co-chair David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair Daniel Kahn Gillmor
- Re: [Cfrg] Requesting removal of CFRG co-chair David McGrew
- Re: [Cfrg] Requesting removal of CFRG co-chair dan
- Re: [Cfrg] Requesting removal of CFRG co-chair Daniel Kahn Gillmor