[Hipsec] HIT construction for ECC HIs

Robert Moskowitz <rgm@htt-consult.com> Wed, 14 April 2010 14:03 UTC

Return-Path: <rgm@htt-consult.com>
X-Original-To: hipsec@core3.amsl.com
Delivered-To: hipsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 092EA3A69EA for <hipsec@core3.amsl.com>; Wed, 14 Apr 2010 07:03:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.523
X-Spam-Level:
X-Spam-Status: No, score=-0.523 tagged_above=-999 required=5 tests=[AWL=-1.124, BAYES_50=0.001, J_CHICKENPOX_51=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VAvD4SGvhxHN for <hipsec@core3.amsl.com>; Wed, 14 Apr 2010 07:03:43 -0700 (PDT)
Received: from klovia.htt-consult.com (klovia.htt-consult.com [208.83.67.149]) by core3.amsl.com (Postfix) with ESMTP id 3A53A3A69E2 for <hipsec@ietf.org>; Wed, 14 Apr 2010 07:03:35 -0700 (PDT)
Received: from localhost (unknown [127.0.0.1]) by klovia.htt-consult.com (Postfix) with ESMTP id 28B5F68B50 for <hipsec@ietf.org>; Wed, 14 Apr 2010 13:58:05 +0000 (UTC)
X-Virus-Scanned: amavisd-new at localhost
Received: from klovia.htt-consult.com ([127.0.0.1]) by localhost (klovia.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tOTcyVXelhp2 for <hipsec@ietf.org>; Wed, 14 Apr 2010 09:57:56 -0400 (EDT)
Received: from nc2400.htt-consult.com (h155.home.htt [208.83.67.155]) (Authenticated sender: rgm@htt-consult.com) by klovia.htt-consult.com (Postfix) with ESMTPSA id CFF2268B49 for <hipsec@ietf.org>; Wed, 14 Apr 2010 09:57:55 -0400 (EDT)
Message-ID: <4BC5CB24.9050101@htt-consult.com>
Date: Wed, 14 Apr 2010 10:03:16 -0400
From: Robert Moskowitz <rgm@htt-consult.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.9) Gecko/20100330 Fedora/3.0.4-1.fc12 Thunderbird/3.0.4
MIME-Version: 1.0
To: "hipsec@ietf.org" <hipsec@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: [Hipsec] HIT construction for ECC HIs
X-BeenThere: hipsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "This is the official IETF Mailing List for the HIP Working Group." <hipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hipsec>
List-Post: <mailto:hipsec@ietf.org>
List-Help: <mailto:hipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Apr 2010 14:03:44 -0000

This may only be applied to Diet HIP, but ECC public keys have some 
interesting properties:

The Private key is a uniformly distributed random number.  From:

draft-mcgrew-fundamental-ecc-02.txt, sec 5.3.1:

    The private key z is an integer between 1 and q - 1, inclusive,
    generated uniformly at random.  (See Appendix B regarding random
    integers.)  The public key is the group element
    Y = alpha^z.  Each public key is associated with a particular
    particular parameter set as per Section 3.3.


Thus the private key is uniformly distributed from the set:

{ 1, 2, .... , q-1 }

Further a subset of the bits of the PK are uniformly distributed.

Thus it is conceivable that the HIT for an ECC HI is just 96 bits 
selected from the HI.  To put it within the ORCHID context, it could be 
a simple XOR with the HIP ECC context.

Comments?

Oh, this ASSuMEs that the EC private key was indeed uniformly randomly 
selected from the possible private keys...