Re: [dtn-security] RE: Bundle Security Protocol: one more item

[Stephen Farrell <[e-mail]>]

Symington, Susan F. wrote:
> I don't understand the replay threat. What do you mean by, "It means an
> attacker could force
> the processing of blocks in PSB's bundles and could replay those"?

Maybe not too big a deal but if its not digested, then a bad guy
can keep modifying this bit on all the bundles he sees emerging
from a forwarded and in that way affect the operation of the DTN,
maybe consuming resources or forcing wrong routes or whatever.

> I agree that we need to put in a statement saying that this bit should
> be masked in the PSB and CB (what about the BAB?) so that it is omitted
> from the mutable canonical form.  I don't believe that this bit should
> be masked in the primary bundle block, since every node is required to
> be able to process this block.

Why on earth would the primary block have such a bit? Since that'd carry
no useful information at all, I've no problem with it being in or out of
digesting.

The BAB emitter can do whatever it wants to with this. Doesn't matter
since the BAB will be checked before anyone is supposed to get a chance
to muck with any flag so its ok to include this in BAB digesting.

S.