IETF Logo Mail Archive

Re: [Cose] Key management for MACs (was Re: Review of draft-schaad-cose-msg-01)

Brian Campbell <bcampbell@pingidentity.com> Fri, 10 July 2015 19:08 UTC

Return-Path: <bcampbell@pingidentity.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 505FA1B2A88 for <cose@ietfa.amsl.com>; Fri, 10 Jul 2015 12:08:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.378
X-Spam-Level:
X-Spam-Status: No, score=-1.378 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c5X6qc49-TJa for <cose@ietfa.amsl.com>; Fri, 10 Jul 2015 12:08:50 -0700 (PDT)
Received: from mail-ig0-x22b.google.com (mail-ig0-x22b.google.com [IPv6:2607:f8b0:4001:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BF231B2A87 for <cose@ietf.org>; Fri, 10 Jul 2015 12:08:50 -0700 (PDT)
Received: by igrv9 with SMTP id v9so19436892igr.1 for <cose@ietf.org>; Fri, 10 Jul 2015 12:08:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pingidentity.com; s=gmail; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=9CymgDb3FkaI5/3qg/JxUkOdOH6mMJLOTDs6Mhr55vw=; b=KM+W3/Dk1+owfXfOacSzaH9E2yjKHnFNBqgKg52aquzLOqmV+eH4PA4Kki9fU+foqm oUL6ef2ApCZZ1C+WlmBuzMi9Jzbj9N1fe7XYq8FLikDU8GgMqM65pCVyUmHLIJOEFyaK vX28USgGBlMaYai1eSHwV87msQZ5QswdBWuHM=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=9CymgDb3FkaI5/3qg/JxUkOdOH6mMJLOTDs6Mhr55vw=; b=g4MRVkt2EIXg4hXuCG3vh/tHUZRcyZthxFwiP5D5VA5xhrSonVCdrPO+zc/YJzPzso wFY8FcEX0g7dR19YJkUmwBabIKdbbKgFGlKjHi1GSfw1tJ+dgvUeYpFUIRdIteR+PqaU amjsEazcygpTpPSrgngTfQyeFTNUTtZdb+EjVsdnyEpagVxsUtJHB7ITUOBYHBF2JhTk b2jhloqxDMdtgVDORDfg736lgczreA6/va0jCmHhpBnC3yDI2Y1ClOVtbqSw9ZlcsQV0 Gn/6+jpcbwRC2TH06otDKzuDZM80fRmRS+VWMQYywne818OF691cMsCj+2420wRjRdW7 Blqw==
X-Gm-Message-State: ALoCoQnVWwbArowqIFDCuTh80v/QWp5n1fz0WvWbwdFCb2bLL4pLm8WrZFkmcYg5k4tT/qFa+C7k
X-Received: by 10.50.18.39 with SMTP id t7mr327254igd.3.1436555329437; Fri, 10 Jul 2015 12:08:49 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.79.96.199 with HTTP; Fri, 10 Jul 2015 12:08:20 -0700 (PDT)
In-Reply-To: <c258533cdd7daea071145d684db4d05a.squirrel@mail2.ihtfp.org>
References: <CA+k3eCQUPxZfWM9XcKaTLN-WOx2cHEi9SAGSRFTtv71iSCUqdQ@mail.gmail.com> <559576A9.9090002@gmx.net> <sjm380ya9ay.fsf@securerf.ihtfp.org> <CA+k3eCSoQhxKV16v6fmWEtG1LqYEaqm8zHjDvWpGOJdb_8=Y5A@mail.gmail.com> <c258533cdd7daea071145d684db4d05a.squirrel@mail2.ihtfp.org>
From: Brian Campbell <bcampbell@pingidentity.com>
Date: Fri, 10 Jul 2015 13:08:20 -0600
Message-ID: <CA+k3eCRtu=-YPWuLx93VPaGLpvhTuu_kBp9YDjdBg6Xkksefjg@mail.gmail.com>
To: Derek Atkins <derek@ihtfp.com>
Content-Type: multipart/alternative; boundary="089e014947ac1c9fd6051a8a1ad4"
Archived-At: <http://mailarchive.ietf.org/arch/msg/cose/upTBex5mXZ7hHXGKaE5gRqWMk_o>
Cc: Jim Schaad <ietf@augustcellars.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, Mike Jones <michael.jones@microsoft.com>, cose@ietf.org
Subject: Re: [Cose] Key management for MACs (was Re: Review of draft-schaad-cose-msg-01)
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Jul 2015 19:08:52 -0000

That's fair, Derek. I just hope the WG keeps both in mind.

On Fri, Jul 10, 2015 at 8:14 AM, Derek Atkins <derek@ihtfp.com> wrote:

>
> On Fri, July 10, 2015 9:07 am, Brian Campbell wrote:
> > On Wed, Jul 8, 2015 at 10:44 AM, Derek Atkins <derek@ihtfp.com> wrote:
> >
> >> Hannes Tschofenig <hannes.tschofenig@gmx.net> writes:
> >> > We are not doing ourselves a flavor if we place artificial constraints
> >> > on our protocols that make them pretty insecure in practice. We
> >> already
> >> > have enough insecure IoT devices in the market.
> >>
> >> Sure.. Many IoT devices don't even try :)
> >>
> >
> > I just want us to be cognizant of the possibility that a dense
> complicated
> > crypto messaging syntax will probably not change that situation. If it's
> > not easy and approachable, it has the potential to be ignored.
>
> That's only half the problem.  Many people ignore security because there
> is this belief "I can't reasonably run those algorithms on my devices."
>
> So I would augment this to say that it not only needs to be easy and
> approachable, but it also needs to be implementable on the hardware.  That
> often rules out many cryptographic algorithms (like RSA and DH, and
> sometimes even ECC) depending on space, power, and timing constraints of
> the devices.
>
> -derek
> --
>        Derek Atkins                 617-623-3745
>        derek@ihtfp.com             www.ihtfp.com
>        Computer and Internet Security Consultant
>
>

v2.23.0 | Report a Bug | By Email