IETF Logo Mail Archive

Re: [Eligibility-discuss] On 3797 alternatives

"Salz, Rich" <rsalz@akamai.com> Wed, 31 May 2023 18:12 UTC

Return-Path: <rsalz@akamai.com>
X-Original-To: eligibility-discuss@ietfa.amsl.com
Delivered-To: eligibility-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B24BFC15155F for <eligibility-discuss@ietfa.amsl.com>; Wed, 31 May 2023 11:12:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.794
X-Spam-Level:
X-Spam-Status: No, score=-2.794 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b0nB5mr8xUZs for <eligibility-discuss@ietfa.amsl.com>; Wed, 31 May 2023 11:12:39 -0700 (PDT)
Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19DC4C14CF15 for <eligibility-discuss@ietf.org>; Wed, 31 May 2023 11:12:38 -0700 (PDT)
Received: from pps.filterd (m0122332.ppops.net [127.0.0.1]) by mx0a-00190b01.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id 34VGIhYf014030; Wed, 31 May 2023 19:12:37 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=mI2iM7qDHkcjcOYLc/NNt28uwonGhQyvphc9FGijZKY=; b=Jr2NA1wqykl+Z6pWPkMFtYXOxpLoQN9xQcijkv/ucFGBzMJ8M3yYxuJgNmSYUM0ZLPpp cFRPUv49cQ6Jx6kWskWkffQzjAfYv8VzyPSR6cdnM4V9IMK4nCxmt50mKpLAE5Bxg2o/ M8wftXgFJ2JElcbgSGU3qy5lOm1TCn+DbA5Bl96akaUrv8IeR6iCXpjG2QPNxgibvY7w ixF2i5DVccpraNxHLat/VaKuHGBO/Z+SP8AgdbcPHcrF3Z/hTtnH60HCKmxM79BcVxXK gOyX3s4SM3yxVWoUBTFZU6x8ftIyu04WQFAeWzcW0VOzvg5lRNGYi4ZVhIQockFzuyM7 QA==
Received: from prod-mail-ppoint5 (prod-mail-ppoint5.akamai.com [184.51.33.60] (may be forged)) by mx0a-00190b01.pphosted.com (PPS) with ESMTPS id 3qub2pqg25-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 31 May 2023 19:12:24 +0100
Received: from pps.filterd (prod-mail-ppoint5.akamai.com [127.0.0.1]) by prod-mail-ppoint5.akamai.com (8.17.1.19/8.17.1.19) with ESMTP id 34VHbtLk010782; Wed, 31 May 2023 11:12:22 -0700
Received: from email.msg.corp.akamai.com ([172.27.91.26]) by prod-mail-ppoint5.akamai.com (PPS) with ESMTPS id 3qufu9s34t-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 31 May 2023 11:12:22 -0700
Received: from usma1ex-dag4mb4.msg.corp.akamai.com (172.27.91.23) by usma1ex-dag4mb7.msg.corp.akamai.com (172.27.91.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1118.26; Wed, 31 May 2023 14:12:22 -0400
Received: from usma1ex-dag4mb4.msg.corp.akamai.com ([172.27.91.23]) by usma1ex-dag4mb4.msg.corp.akamai.com ([172.27.91.23]) with mapi id 15.02.1118.026; Wed, 31 May 2023 14:12:22 -0400
From: "Salz, Rich" <rsalz@akamai.com>
To: Eric Rescorla <ekr@rtfm.com>
CC: Martin Thomson <mt@lowentropy.net>, Donald Eastlake <d3e3e3@gmail.com>, "eligibility-discuss@ietf.org" <eligibility-discuss@ietf.org>
Thread-Topic: [Eligibility-discuss] On 3797 alternatives
Thread-Index: AQHZku0PDWK1/+uS7kWQ3IZVXm1FJ69zig8AgAAJlQD//833gIAAYOOAgADxTQD//9WjgIAAZYaA///CFQA=
Date: Wed, 31 May 2023 18:12:22 +0000
Message-ID: <09B9FC9D-9124-41CB-A47A-2B36FCFF688B@akamai.com>
References: <54F373CD-1E97-42BC-9AAB-0451ABD9D448@eggert.org> <1229DD7D-3640-4EFD-8058-D0EC18020038@eggert.org> <18537EEF-4E16-4C48-8456-02A8FB0C8CFC@vpnc.org> <4a8f2bb4-25c3-5514-f13f-8db1804619a6@joelhalpern.com> <0531CD69-AAA4-4657-9B90-B50F76D997B7@vpnc.org> <ffa1d82b-a22b-f68f-5000-6a1ca437d147@joelhalpern.com> <B953359D-72A9-4032-857E-490AEAF60C4A@vpnc.org> <2745cf30-098d-4a3a-9e9e-3c3c44179176@app.fastmail.com> <CAF4+nEGL0_h-iagUxhyxh2FJdz=QUi5JQr6XdPj-Q=q8Rov0XQ@mail.gmail.com> <9d9b0e70-c7ca-4602-8862-33165522497c@app.fastmail.com> <896FF479-E5B7-4A31-95AE-376CCE2591C9@akamai.com> <CABcZeBN7XyRknvkg9TfvTCx3rGEpLtWynE7-eaufhmcEmnDHtA@mail.gmail.com> <30f8a4a3-2a3c-4560-abe5-63ee0c4366d4@app.fastmail.com> <9DCA0EF0-8E99-4A33-ABAB-45997C96002F@akamai.com> <CABcZeBOS1zAmS664bQAiAZPhN5-Hr6OTbv6UZu+Ai9zwsps_CQ@mail.gmail.com>
In-Reply-To: <CABcZeBOS1zAmS664bQAiAZPhN5-Hr6OTbv6UZu+Ai9zwsps_CQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.73.23051401
x-originating-ip: [172.27.118.139]
Content-Type: multipart/alternative; boundary="_000_09B9FC9D912441CBA47A2B36FCFF688Bakamaicom_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.573,FMLib:17.11.176.26 definitions=2023-05-31_12,2023-05-31_03,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 malwarescore=0 adultscore=0 bulkscore=0 suspectscore=0 mlxscore=0 mlxlogscore=349 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2304280000 definitions=main-2305310153
X-Proofpoint-ORIG-GUID: UfzG0NCJNzwfENqetBp6z26n5fSX4i53
X-Proofpoint-GUID: UfzG0NCJNzwfENqetBp6z26n5fSX4i53
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.254,Aquarius:18.0.957,Hydra:6.0.573,FMLib:17.11.176.26 definitions=2023-05-31_12,2023-05-31_03,2023-05-22_02
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 adultscore=0 malwarescore=0 suspectscore=0 phishscore=0 lowpriorityscore=0 mlxscore=0 mlxlogscore=307 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2304280000 definitions=main-2305310153
Archived-At: <https://mailarchive.ietf.org/arch/msg/eligibility-discuss/K99v_RXlfoFKmT_lXdm1G3OmqiE>
Subject: Re: [Eligibility-discuss] On 3797 alternatives
X-BeenThere: eligibility-discuss@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: IETF eligibility procedures <eligibility-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/eligibility-discuss>, <mailto:eligibility-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/eligibility-discuss/>
List-Post: <mailto:eligibility-discuss@ietf.org>
List-Help: <mailto:eligibility-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/eligibility-discuss>, <mailto:eligibility-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 May 2023 18:12:43 -0000

The attack I have in mind is that you have a pool of (say) 10 nomcom-qualified people.
They all volunteer at the beginning and so are on the list. Then once the rest of the list
is set, you run the numbers and find the optimal set of people to withdraw to get the
most favorable distributional outcome for the selection process.

It should be obvious that this is worthwhile if the randomness is known in advance: you
get to choose between 1024 different nomcoms. I haven't run the numbers and so am
not really sure how many bits of randomness you need to make this attack ineffective
with a pool of attackers of size N [0]

I think in general, the delay between the seeds being known, and the choices being made, is a day or two. Is that enough time to mount the attack? Without being known? I’m skeptical. But perhaps someone else will be nerd-sniped into determining the number of bits needed to make it ineffective.

v2.23.0 | Report a Bug | By Email