MIME-Version: 1.0
From: Shumon Huque <shuque@gmail.com>
Date: Tue, 7 Mar 2017 10:29:51 -0500
Message-ID: <CAHPuVdXTcSaVcN6fBbPy3e=PgRvg8=GemSN_YFhzX387x8YW-A@mail.gmail.com>
To: "dnsop@ietf.org WG" <dnsop@ietf.org>
Content-Type: multipart/alternative; boundary=001a11482484df20b2054a25ae71
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/ikDNmj3s6jVL4tCfMklESjHYrOA>
Subject: [DNSOP] Updated NSEC5 protocol spec and paper
Precedence: list

--001a11482484df20b2054a25ae71
Content-Type: text/plain; charset=UTF-8

Hi folks,

We've requested an agenda slot at the DNSOP working group meeting at
IETF98 to talk about the NSEC5 protocol. Our chairs have requested that
we send out a note to the group ahead of time, so here it is.

This protocol has not to our knowledge been presented at dnsop before,
but has been discussed previously at other IETF venues, such as SAAG.

Sharon Goldberg has recently presented NSEC5 to good reception at
the following venues:

1) Real World Crypto conference, New York (Jan 2017)
2) IETF Boston Hub Meetup (Feb 2017)
3) DNS Privacy Workshop at NDSS'17 (Feb 2017)

The latest NSEC5 protocol now supports elliptic curve cryptography,
and uses verifiable random functions. The protocol has been implemented,
and we have good performance results to share.

There is a research paper, with many more details:

    https://eprint.iacr.org/2017/099.pdf

The current draft for the NSEC5 spec is here:

    https://tools.ietf.org/html/draft-vcelak-nsec5-04

Some IETF security folk have recommended that we split out the VRF
construction (currently described in the draft's appendix) into a
separate draft, as it may be useful to other IETF protocols. We think
that's a good idea and are working on it - we hope to have updated
drafts before the IETF98 draft cutoff deadline.

Hope to chat in person at IETF, and/or on the list.

Shumon, Sharon, Dimitris, Jan, and Dave.

--001a11482484df20b2054a25ae71
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi folks,</div><div><br></div><div>We&#39;ve requeste=
d an agenda slot at the DNSOP working group meeting at</div><div>IETF98 to =
talk about the NSEC5 protocol. Our chairs have requested that=C2=A0</div><d=
iv>we send out a note to the group ahead of time, so here it is.</div><div>=
<br></div><div>This protocol has not to our knowledge been presented at dns=
op before,</div><div>but has been discussed previously at other IETF venues=
, such as SAAG.</div><div><br></div><div>Sharon Goldberg has recently prese=
nted NSEC5 to good reception at</div><div>the following venues:</div><div><=
br></div><div>1) Real World Crypto conference, New York (Jan 2017)</div><di=
v>2) IETF Boston Hub Meetup (Feb 2017)</div><div>3) DNS Privacy Workshop at=
 NDSS&#39;17 (Feb 2017)</div><div><br></div><div>The latest NSEC5 protocol =
now supports elliptic curve cryptography,</div><div>and uses verifiable ran=
dom functions. The protocol has been implemented,</div><div>and we have goo=
d performance results to share.</div><div><br></div><div>There is a researc=
h paper, with many more details:</div><div><br></div><div>=C2=A0 =C2=A0 <a =
href=3D"https://eprint.iacr.org/2017/099.pdf">https://eprint.iacr.org/2017/=
099.pdf</a></div><div><br></div><div>The current draft for the NSEC5 spec i=
s here:</div><div><br></div><div>=C2=A0 =C2=A0 <a href=3D"https://tools.iet=
f.org/html/draft-vcelak-nsec5-04">https://tools.ietf.org/html/draft-vcelak-=
nsec5-04</a></div><div><br></div><div>Some IETF security folk have recommen=
ded that we split out the VRF</div><div>construction (currently described i=
n the draft&#39;s appendix) into a</div><div>separate draft, as it may be u=
seful to other IETF protocols. We think</div><div>that&#39;s a good idea an=
d are working on it - we hope to have updated</div><div>drafts before the I=
ETF98 draft cutoff deadline.</div><div><br></div><div>Hope to chat in perso=
n at IETF, and/or on the list.</div><div><br></div><div>Shumon, Sharon, Dim=
itris, Jan, and Dave.</div><div><br></div></div>

--001a11482484df20b2054a25ae71--