IETF Logo Mail Archive

[COSE] fully specified algorithm and cross-mode attack

"lgl island-resort.com" <lgl@island-resort.com> Thu, 25 July 2024 19:14 UTC

Return-Path: <lgl@island-resort.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C411C1D61EF for <cose@ietfa.amsl.com>; Thu, 25 Jul 2024 12:14:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.907
X-Spam-Level:
X-Spam-Status: No, score=-6.907 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lHP7p1MqqDsU for <cose@ietfa.amsl.com>; Thu, 25 Jul 2024 12:14:16 -0700 (PDT)
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10on2113.outbound.protection.outlook.com [40.107.93.113]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CB0BC1D5310 for <cose@ietf.org>; Thu, 25 Jul 2024 12:14:06 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=BXIf1U7nbOG92GKt6O6Jb3EjjnMzH/h7noubT1UZYMs6otWq7zIhd9HrfprAxFVDNpdVtTUuHii07hZzX71hczNIryNgVKe6GCJtJPYsSVhRvgjaiuFVhNfT/UEK7qzdeierJKaHSKtR6gpq4xEffKx2Ll3FFZ6P/z4MmhM2Y4OdyHzOcx+KnovzgB9mUQz8qwySR7mqPCAY+R8IlUzjGjry4Zf0KT8rgzcNFQzJiX5JEmqQdf+8uoTcjak15cVlUOKpQjRH+AW7u+pNZEEIv27LN4g3aa8fruckSxpcCjtn8UYBAY9HddT1DQFYUxyYRQhn2avJmeQcz1AXfKoOfA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=GB5uXKjMMc6VXHAfl9F19wNKLVH9gZcx+xen7fTpK3w=; b=girt15B4EVyLdvgIF7R5DmiqtvCBQUEbJL5hnHxg/mhuZze+vhh0ViQD7VNQtU4vI7IrHuZfheuoWTGLhNPxyJjgk+LE5X9alm72Y0DSEA5dqFJk7XE+jbrIVhkfBaTDv0X7XqGBvmBuwoedw+of91QuKdbw8R+Z/X1kaUiyz6K6f9Kv4QhqoF1m9vxr+98ZBsXv2CCcHkjlNjNgjN+mN5PlF8U0LpWoWAjcNb6qNhxW42uSfhXIoHx5uVC9eMT6g/MsH6HOB1sJQ6L4pCl1pxFVUsoYEWrj4d62E1vdSL+WVn4yUqgetpR0d/3CyKzZzOqhNaZlmjY3eOUEpZ7UXw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=island-resort.com; dmarc=pass action=none header.from=island-resort.com; dkim=pass header.d=island-resort.com; arc=none
Received: from PH7PR22MB3092.namprd22.prod.outlook.com (2603:10b6:510:13b::8) by LV8PR22MB5390.namprd22.prod.outlook.com (2603:10b6:408:1c9::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7741.35; Thu, 25 Jul 2024 19:14:02 +0000
Received: from PH7PR22MB3092.namprd22.prod.outlook.com ([fe80::8515:3aa6:3ced:15e]) by PH7PR22MB3092.namprd22.prod.outlook.com ([fe80::8515:3aa6:3ced:15e%5]) with mapi id 15.20.7784.017; Thu, 25 Jul 2024 19:14:02 +0000
From: "lgl island-resort.com" <lgl@island-resort.com>
To: cose <cose@ietf.org>
Thread-Topic: fully specified algorithm and cross-mode attack
Thread-Index: AQHa3sbPLYNI2JtIPUSzdOYg19d78g==
Date: Thu, 25 Jul 2024 19:14:02 +0000
Message-ID: <D68D6D66-BFDD-48BB-A25F-824A38B2BBAE@island-resort.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=island-resort.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH7PR22MB3092:EE_|LV8PR22MB5390:EE_
x-ms-office365-filtering-correlation-id: 91b7b343-a0d5-4de5-2806-08dcacddf1ab
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|376014|1800799024|38070700018;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PH7PR22MB3092.namprd22.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024)(38070700018);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_D68D6D66BFDD48BBA25F824A38B2BBAEislandresortcom_"
MIME-Version: 1.0
X-OriginatorOrg: island-resort.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH7PR22MB3092.namprd22.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 91b7b343-a0d5-4de5-2806-08dcacddf1ab
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jul 2024 19:14:02.1656 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: ad4b5b91-a549-4435-8c42-a30bf94d14a8
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: o+G+P1anFDdg6gMXktWqPELab1W54pdbbGDtCiyYJiC2ei8gqMHuN1mjVeG1GtEq3Zt7NX/GlWnPAuBETk65gA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV8PR22MB5390
Message-ID-Hash: KWUUKK2YEHTUANKM6NHGUXVOPE6ECOZG
X-Message-ID-Hash: KWUUKK2YEHTUANKM6NHGUXVOPE6ECOZG
X-MailFrom: lgl@island-resort.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cose.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [COSE] fully specified algorithm and cross-mode attack
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/J7todNevI7-u_w2P4_Hy5oNCEQ4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Owner: <mailto:cose-owner@ietf.org>
List-Post: <mailto:cose@ietf.org>
List-Subscribe: <mailto:cose-join@ietf.org>
List-Unsubscribe: <mailto:cose-leave@ietf.org>

This draft was handled in the JOSE WG, but makes a change to COSE: https://www.ietf.org/archive/id/draft-ietf-jose-fully-specified-algorithms-03.html. It defines alg ID -52 that would kind of replace -29. Fully-specified seems the way of the future here in the halls of the IETF.

After looking at Ken’s nice diagram, it seems to me that most of the content key distribution methods for encryption defined in RFC 9053 section 6<https://www.rfc-editor.org/rfc/rfc9053.html#name-content-key-distribution-me> are subject to the cross mode attack (the one presented in Lamps in Prague). Both the Recipient_structure fix I proposed or the KDF fix that Hannes proposed are applicable to content key distribution methods and will require a new algorithm ID.

It seems like we should do one set of new algorithm IDs that addresses both. For example -52, would be fully specified and would have a fix for the cross-mode attack.

This is a lot of work. We probably should continue to focus on COSE-HPKE first, but keep the rest in mind as coming next.

LL

v2.46.0 | Report a Bug | By Email | System Status