[dtn-security] Re(2): Key generation

Peter Lovell <plovell@mac.com> Wed, 15 July 2009 12:23 UTC

MIME-version: 1.0
Content-transfer-encoding: 7bit
Content-type: text/plain; charset="US-ASCII"
From: Peter Lovell <plovell@mac.com>
To: Sushil Chaudhari <schaudhari@mzeal.com>, dtn-security@maillists.intel-research.net
Date: Wed, 15 Jul 2009 08:21:37 -0400
Message-id: <20090715122137.1825897882@smtp.mac.com>
In-reply-to: <20090714210539.45611.qmail@mzeal.com>
References: <20090714210539.45611.qmail@mzeal.com>
Subject: [dtn-security] Re(2): Key generation
Precedence: list

On Tue, Jul 14, 2009, Sushil Chaudhari <schaudhari@mzeal.com> wrote:

>Hi,
>
>There's setkey <host> <siphersuite> <key> command used to set the key
>for the specified host and ciphersuite.
>
>What utility is used to produce the key?
>
>If security policy is set to use "confidentiality block" and no external
>key is provided, how's the key get generated by DTN2?
>

Hi Sushil,

this is used only by the BA1 ciphersuite. For other ciphersuites you
need to manage the keys (typically RSA public/private key pairs) using
the KeySteward class. There is no command-set to support those at present.

Regards.....Peter

[dtn-security] Re(2): Key generation Peter Lovell
Re: [dtn-security] Key generation Ivancic, William D. (GRC-RHN0)
[dtn-security] Re(2): Key generation Peter Lovell
Re: [dtn-security] Key generation Sushil Chaudhari