Re: [dtn] Francesca Palombini's Discuss on draft-ietf-dtn-bpsec-default-sc-08: (with DISCUSS and COMMENT)

"Birrane, Edward J." <Edward.Birrane@jhuapl.edu> Tue, 13 July 2021 03:17 UTC

Return-Path: <Edward.Birrane@jhuapl.edu>
X-Original-To: dtn@ietfa.amsl.com
Delivered-To: dtn@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F4FF3A0FCD; Mon, 12 Jul 2021 20:17:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=jhuapl.edu
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m8g9gQTseIkL; Mon, 12 Jul 2021 20:17:07 -0700 (PDT)
Received: from aplegw02.jhuapl.edu (aplegw02.jhuapl.edu [128.244.251.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A8D53A0FCF; Mon, 12 Jul 2021 20:17:06 -0700 (PDT)
Received: from pps.filterd (aplegw02.jhuapl.edu [127.0.0.1]) by aplegw02.jhuapl.edu (8.16.0.43/8.16.0.43) with SMTP id 16D3H3mi061687; Mon, 12 Jul 2021 23:17:03 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jhuapl.edu; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=JHUAPLDec2018; bh=5w9N2fb530Jt/u0HxKMgu2Qj0ipMW71Cf2EJBi9ZcAE=; b=WGAv8sxGKyHH0tJE11vvIx+pAKah8cnGAgjKgh6dVQjQwz91Z+HH02O26KPfebiF9lnd Xk/jnifDmf+ccOkTm2af76wMXTf3v4gV8mPpfQJ7EImVwbbGMVFNT8QPSEoqYrhUtW2W ch5LLDnrKbpqQ/cNxPeTQ3fei7wlQ4NS96eoHsf7pnpw7Mi7tq9Ks//yJiS6gNjEuzQP TYURTmMvfAnTK89k85Kky0sZsv8yUxn6bNTDkqwCI4ySR91lkfqiiXw4IqlRhjPcsWum yWaxbfB8VpfXe8v36mGoONgxP3sTpVFSB9wABgZzUBhgxyslyyhtHYe03cAP5SK/ywBy /Q==
Received: from aplex06.dom1.jhuapl.edu (aplex06.dom1.jhuapl.edu [128.244.198.140]) by aplegw02.jhuapl.edu with ESMTP id 39q7s1t3dh-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 12 Jul 2021 23:17:03 -0400
X-CrossPremisesHeadersFilteredBySendConnector: APLEX06.dom1.jhuapl.edu
Received: from aplex01.dom1.jhuapl.edu (128.244.198.5) by APLEX06.dom1.jhuapl.edu (128.244.198.140) with Microsoft SMTP Server (TLS) id 15.0.1497.18; Mon, 12 Jul 2021 23:17:02 -0400
Received: from aplex01.dom1.jhuapl.edu ([fe80::19f5:dcc5:c696:1a50]) by aplex01.dom1.jhuapl.edu ([fe80::19f5:dcc5:c696:1a50%25]) with mapi id 15.00.1497.018; Mon, 12 Jul 2021 23:17:01 -0400
From: "Birrane, Edward J." <Edward.Birrane@jhuapl.edu>
To: Francesca Palombini <francesca.palombini@ericsson.com>, The IESG <iesg@ietf.org>, "<sec-ads@ietf.org>" <sec-ads@ietf.org>
CC: "draft-ietf-dtn-bpsec-default-sc@ietf.org" <draft-ietf-dtn-bpsec-default-sc@ietf.org>, "dtn-chairs@ietf.org" <dtn-chairs@ietf.org>, "dtn@ietf.org" <dtn@ietf.org>, "Scott.C.Burleigh@jpl.nasa.gov" <Scott.C.Burleigh@jpl.nasa.gov>
Thread-Topic: Francesca Palombini's Discuss on draft-ietf-dtn-bpsec-default-sc-08: (with DISCUSS and COMMENT)
Thread-Index: AddtJ4up9ai93tCKTmCQdr167K9S3wH+KGiAAJ0ajjA=
Date: Tue, 13 Jul 2021 03:17:01 +0000
Message-ID: <7e5fe61377ff40059fd4931ac175f049@aplex01.dom1.jhuapl.edu>
References: <b6db7bf27bba42889d0762efb17a293d@aplex01.dom1.jhuapl.edu> <70E007DB-7EA1-4CB2-ADD4-C7F1A8E98F30@ericsson.com>
In-Reply-To: <70E007DB-7EA1-4CB2-ADD4-C7F1A8E98F30@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [128.244.198.169]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OrganizationHeadersPreserved: APLEX06.dom1.jhuapl.edu
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.391, 18.0.790 definitions=2021-07-12_14:2021-07-12, 2021-07-12 signatures=0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dtn/TYqFwSwEPdejdNgF3AAGHow1weA>
Subject: Re: [dtn] Francesca Palombini's Discuss on draft-ietf-dtn-bpsec-default-sc-08: (with DISCUSS and COMMENT)
X-BeenThere: dtn@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Delay Tolerant Networking \(DTN\) discussion list at the IETF." <dtn.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dtn>, <mailto:dtn-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dtn/>
List-Post: <mailto:dtn@ietf.org>
List-Help: <mailto:dtn-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dtn>, <mailto:dtn-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Jul 2021 03:17:13 -0000

Francesca,

  Thank you for spotting those two items related to your discusses D3 and D5.

  I agree with both comments and have published a -10 version of the document which I believe addresses these DISCUSSes.  

  Please see my comments below, and let me know if there are any remaining concerns.

-Ed

---
Edward J. Birrane, III, Ph.D. (he/him/his)
Embedded Applications Group Supervisor
Space Exploration Sector
Johns Hopkins Applied Physics Laboratory
(W) 443-778-7423 / (F) 443-228-3839
  

> Hi Ed,
> 
> Thank you for your answers, and for implementing the changes. I have gone
> through v-09 and I have some additional comments. I still have 2 blocking
> points open: D3 and D5. Everything else looks good, or was minor so that I
> don't mind the "no change".


> >> 3. -----
> >>
> >>       - Bits 8-15 are unassigned.
> >>
> >> FP: I am wondering why the limit on Bit 15, marked as unassigned: I
> >> think it would make sense to say Bits 8 and higher are unassigned.
> >> (This change would need to be reflected in the IANA sections)
> >
> >D3: Recommend no change.
> >
> >To assist with hardware implementations, there is value in allowing
> implementers to presume an upper-bound to the size of this field.
> >
> 
> FP: I would agree, if such an upper-bound was specified. However this
> section does not specify any such upper bound, and CBOR integers are not
> implicitly limited to a certain size either. I see two options here: either 1.
> specify the upper bound (for example stating that the maximum value of the
> field is 65535) or 2. remove the limitation to 15 bits, both in this section and in
> the IANA section, and add a statement that "this field is not expected to
> have a value higher than 65535". Both these options seem ok to me.

EJB: I better understand this comment now.  To correct, for both the IPPT and AAD scope flags, I have noted this is to be considered a 16-bit field with a maximum value of 65535 in the -10 version of the document.

> >> 5. -----
> >>
> >>      [1, b'Twelve121212'] / Initialization Vector /,
> >>
> >> FP: I think the IV value is wrong here and should be
> >> h'5477656c7665313231323132'.
> >
> >D5: Agree.
> >
> >h'5477656c7665313231323132' should be used here for clarity. We can
> represent this value in this way in an upcoming -09 version of the document.
> >
> 
> FP: Thanks for making the change. However, I noticed that you also made
> one more change (which I assume must come from another AD?): the scope
> flag is now encoded as a byte string throughout the Appendix A. However, its
> definition has not changed, and it is still defined as a CBOR integer in section
> 3.3.3. That is inconsistent, unless I am missing something, and should either
> revert back to integer or change to byte string in a number of places where
> it's still defined as unsigned integer.

EJB: This was an error in the Appendix. The examples all use the (correct) unsigned integer encoding of the scope flags to generate data, but the diagnostic notation was in error (h'00' instead of 00, and h'07' instead of 07).  I have corrected the notation in the appendix in the -10 version.  Great catch!