[dtn] BPSec and bundle fragmentation

Brian Sipos <BSipos@rkf-eng.com> Mon, 01 February 2021 22:05 UTC

Return-Path: <BSipos@rkf-eng.com>
X-Original-To: dtn@ietfa.amsl.com
Delivered-To: dtn@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BFE243A151E for <dtn@ietfa.amsl.com>; Mon, 1 Feb 2021 14:05:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.101
X-Spam-Level:
X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=rkf-eng.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m_Uw7kZ3n0D3 for <dtn@ietfa.amsl.com>; Mon, 1 Feb 2021 14:05:47 -0800 (PST)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2064.outbound.protection.outlook.com [40.107.236.64]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54F1F3A151C for <dtn@ietf.org>; Mon, 1 Feb 2021 14:05:47 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ZvMBxZvecjjCPZGf7zDMDvwKjX6QNK4P4BfV0wes5McDWfH05bSq0Ad5TB2iVbzihvP3skitksufPajjSkyK37bmV8T2oVc5x0OICS13jYOeb7Ig1vgIqfhNMx7ghIUOQ7Czosq6LvDXqobHJyX8bbK9Uzn3+AmQBZtJvIu1m47F/RwX9eO0HS5XPCsVaINuoucP9f/iCJxDhk0kvsvLybQJJw7Z5qjCq65fQmXsUCwqQbo4RmRCKSCgr9TgG8KRZmCclpTNi9YAuXUhfA7ZuekhyzP8+z2eJHoPrcNN2H7LE2EWFEOq16pJVhDiSR9AXiTV0oBjcMJwjwxwsGlqbw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=h4wnzGo0TldPdUrAp5aHszE1fGJLcRJpBwd1rHIQz0Y=; b=RLWnY2/VJ7y1TpIUGk6MYg/w/THxo+sXFKGXQTW86wNp/QcIcnnQkZEdeBFkuT13uA1CsmD8oGhHRUmQV1r9vYtUitRRn7LtLoTTp9VkJzDaCGsLKihrrITxg8DhSsA+hdGymyQCnqZahOCAgV8DhDUbGPSlUbssWC1pHq0GmF5dIc2Ty7aZLAVOdTH6nmqlvwQHKMLej2/vrII63HGJJjvvwW8vHrFVDv6guhV0vGgPa2uQbFmkEvzK5JrCRQiIRxjwf792RRtQsWBmDPA4ZSNXHjlkr1Kmg/bMOhPoOGueKrAlVB8KOqfUM4BHUEA6BVX5pMHGh4TMbP6tz90kgg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=rkf-eng.com; dmarc=pass action=none header.from=rkf-eng.com; dkim=pass header.d=rkf-eng.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rkf-eng.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=h4wnzGo0TldPdUrAp5aHszE1fGJLcRJpBwd1rHIQz0Y=; b=l030wSA0i/nNZ2IFfEWu+KQP/etzxbRR6GFzz4wuGrPtdkUE9yMC5lHevbWCl/7LqMwZ1DLGCpK+iDtApRcLnQ3lHlKARfIlODDlNNU9kYlYt2YlUWdWvNrwzVM7pbBQ9+QkZqp+MjR58bsYAtzX5W4ThuwkLTdy1spXv0E1+Zk=
Received: from (2603:10b6:208:168::10) by MN2PR13MB3989.namprd13.prod.outlook.com (2603:10b6:208:262::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3825.8; Mon, 1 Feb 2021 22:05:44 +0000
Received: from MN2PR13MB3567.namprd13.prod.outlook.com ([fe80::7d43:3b6b:a28a:254a]) by MN2PR13MB3567.namprd13.prod.outlook.com ([fe80::7d43:3b6b:a28a:254a%6]) with mapi id 15.20.3825.016; Mon, 1 Feb 2021 22:05:43 +0000
From: Brian Sipos <BSipos@rkf-eng.com>
To: "dtn@ietf.org" <dtn@ietf.org>
CC: "Edward.Birrane@jhuapl.edu" <Edward.Birrane@jhuapl.edu>
Thread-Topic: BPSec and bundle fragmentation
Thread-Index: AQHW+OZiAQnUion8Z06QD/5h+pouvw==
Date: Mon, 01 Feb 2021 22:05:43 +0000
Message-ID: <b8c948b4307bc464185975b8391f70cfa4e691b8.camel@rkf-eng.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Evolution 3.38.2 (3.38.2-1.module_f33+10736+4f8d5006)
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=rkf-eng.com;
x-originating-ip: [96.241.16.84]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: e009d72b-16f4-4741-913f-08d8c6fd855d
x-ms-traffictypediagnostic: MN2PR13MB3989:
x-microsoft-antispam-prvs: <MN2PR13MB3989696B8658628B2C4438A99FB69@MN2PR13MB3989.namprd13.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR13MB3567.namprd13.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(396003)(376002)(346002)(366004)(39830400003)(2906002)(66946007)(76116006)(26005)(186003)(66556008)(66446008)(66476007)(8936002)(36756003)(64756008)(4326008)(478600001)(316002)(966005)(6512007)(6486002)(83380400001)(71200400001)(86362001)(5660300002)(6506007)(8676002)(3480700007)(6916009)(2616005); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: dIXLgWLpPCoSm5D9dKrfJ4prFiLAmRnjAhjyx6BBFtqqwhbLQuGrej/VPTRvsygdlivyizAqSxBCGhnaZRtfAcnzA3IOZFKM+mGZLsp+G7zz1nMXGc/xUd8svGBSSAGS4OG++lNG8oMVdI2aapdM7IBeLN7Rmdh5fgb+3x52cDIWmlODXd3gmmK6jFdliK8ubP8VhlcAGtLPdSkpnm+9SWz18V9NE/7Bb9Wp2zZuPH4L6YCG1FKfyzsYOxoJEIOZDGtpUB77+9/i9oE0m20gcqpbJr0qEdUQz24DCqY0xYzhZu0BdCaTHzYBqX0stfHBB/c5SOxSXoF8JZuk/SdR4teZkT6Z0kCClbddprgHsSRWw5nJcACWIWPojiBvSNCdVzmutp8VSeuGIS78rIXABMyDKnhi+h9CgfF1VNv5sSl3VtywbSFvfNSHg4HqvEI4hdLG8tEuRDjb2ZfpIL0V6HQ7oo011pXCyu3naWxCwUUYAuUwYz3jWOfHgdP9bQa7mOwR/1LKUFyNctFfMf9nKoJEW+R7ZI6tC9XuYKQFobBNzIytK3qqSlIvF19l+3iQPDi3C9x4SG8fKBDYYctoIxZrDlRMFEFiDqJsIOh8OoFxmwdkkwItYw03lhynjgks6wVX3KFH9IJ54VoXc3wDn3lmZ1xQouWC5Hxnex4H9KZevpYSvFcJ4BfRxDbo9+d08hRmS5bqRTGdk0JfHvRBuy6oTs+i1lyYusjxQQhD3Et9n/jDe1G/eiwA98ChCxqLQ3bteoyr40dVAS3WUnv4Lnprm8OZYNYBHLNnlDlJefrR9DVpBXjrvLz9CiBf53ep5W03nzjAto9xwUc4uxg8z9B7RhVfCwS2Kr5t9m7AdCtvU9OqDIs8nCBVGRhP8YWBdV1OTb9BHuBmtoZLF6Ih5OKZkKl38o+ymK2RhMcgG7RdNIdQMtCd2VKKmp3s4UGPFs+2DRNOOckKaMahxKysuK5ajUUD/YNENhvYKE+ZsCzfBr8MkPun04Wcayxvd1YDYxIo6YMNIRf0spY1xCEYcCTFG/W3rp9lhFhDaFF8HcoR2gTxndm0F+hPy/S2Akaw
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <D51D2C28882F18459B27944322ECA86E@namprd13.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: rkf-eng.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR13MB3567.namprd13.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e009d72b-16f4-4741-913f-08d8c6fd855d
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Feb 2021 22:05:43.6064 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4ed8b15b-911f-42bc-8524-d89148858535
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: emGMcGPPCZZFOGm+5nxC8ie3EZ7vSfuS1VAwn53LJKji7POqJzOAfPyasvMLhNJe6T+cZPDPQiXusvCBp5sFGQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR13MB3989
Archived-At: <https://mailarchive.ietf.org/arch/msg/dtn/tdkcKHv7sDM2sqMjWzcO5UaUJEI>
Subject: [dtn] BPSec and bundle fragmentation
X-BeenThere: dtn@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Delay Tolerant Networking \(DTN\) discussion list at the IETF." <dtn.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dtn>, <mailto:dtn-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dtn/>
List-Post: <mailto:dtn@ietf.org>
List-Help: <mailto:dtn-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dtn>, <mailto:dtn-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 01 Feb 2021 22:05:49 -0000

All,
There seems to be a slight hole in the relationship between BPSec and BPbis related to a bundle with BCB(s) on extension
blocks which is then fragmented. If a BCB has a target of an extension block it will alter the block type-specific data
so it's no longer decodable as normal. The requirements in BPbis [1] Section 5.8 "Bundle Fragmentation" require
replicating extension blocks with flag indicating to do so. The trouble is that if a BCB-modified block is replicated in
the fragment a receiver of the non-initial fragment has no way to know the block is BCB-targeted. The requirements in
BPSec [2] section 5.2 "Bundle Fragmentation and Reassembly" indicate that the BIB must be replicated only if the target
is a payload block, but really should replicate if the target is either the payload or any extension block with "block
must be replicated in every fragment" flag set.

As an aside, I don't see what the value is in replicating the BIB when the target is the fragmented payload unless there
is an expectation that a payload fragment will be inspected by a node. I suppose that this is just playing safe sice
BPv7 doesn't explicitly prohibit any node from inspecting payload fragment data.

[1] https://tools.ietf.org/html/draft-ietf-dtn-bpbis-31
[2] https://tools.ietf.org/html/draft-ietf-dtn-bpsec-26