Re: [HOKEY] EMSKname in keyName-NAI

Lakshminath Dondeti <ldondeti@qualcomm.com> Wed, 20 February 2008 20:23 UTC

Return-Path: <hokey-bounces@ietf.org>
X-Original-To: ietfarch-hokey-archive@core3.amsl.com
Delivered-To: ietfarch-hokey-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 21EB728C93D; Wed, 20 Feb 2008 12:23:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.569
X-Spam-Level:
X-Spam-Status: No, score=-2.569 tagged_above=-999 required=5 tests=[AWL=-2.132, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c1U5FhLkTHlV; Wed, 20 Feb 2008 12:23:50 -0800 (PST)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 642A328C4C9; Wed, 20 Feb 2008 12:23:47 -0800 (PST)
X-Original-To: hokey@core3.amsl.com
Delivered-To: hokey@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CBE6828C90E for <hokey@core3.amsl.com>; Wed, 20 Feb 2008 12:23:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B5QEuYQaScyE for <hokey@core3.amsl.com>; Wed, 20 Feb 2008 12:23:43 -0800 (PST)
Received: from wolverine01.qualcomm.com (wolverine01.qualcomm.com [199.106.114.254]) by core3.amsl.com (Postfix) with ESMTP id 8F2023A6930 for <hokey@ietf.org>; Wed, 20 Feb 2008 12:21:44 -0800 (PST)
X-IronPort-AV: E=McAfee;i="5200,2160,5234"; a="820906"
Received: from pdmz-ns-mip.qualcomm.com (HELO numenor.qualcomm.com) ([199.106.114.10]) by wolverine01.qualcomm.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 20 Feb 2008 12:21:41 -0800
Received: from msgtransport06.qualcomm.com (msgtransport06.qualcomm.com [129.46.61.149]) by numenor.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id m1KKLeV9021755 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 20 Feb 2008 12:21:41 -0800
Received: from [129.46.78.229] (ldondeti.na.qualcomm.com [129.46.78.229]) by msgtransport06.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id m1KKLe86007644 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 20 Feb 2008 12:21:40 -0800
Message-ID: <47BC8BD7.6070106@qualcomm.com>
Date: Wed, 20 Feb 2008 12:21:43 -0800
From: Lakshminath Dondeti <ldondeti@qualcomm.com>
User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
MIME-Version: 1.0
To: Yoshihiro Ohba <yohba@tari.toshiba.com>
References: <20080220201232.GH10906@steelhead.localdomain>
In-Reply-To: <20080220201232.GH10906@steelhead.localdomain>
Cc: hokey@ietf.org
Subject: Re: [HOKEY] EMSKname in keyName-NAI
X-BeenThere: hokey@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: HOKEY WG Mailing List <hokey.ietf.org>
List-Unsubscribe: <http://www.ietf.org/mailman/listinfo/hokey>, <mailto:hokey-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/hokey>
List-Post: <mailto:hokey@ietf.org>
List-Help: <mailto:hokey-request@ietf.org?subject=help>
List-Subscribe: <http://www.ietf.org/mailman/listinfo/hokey>, <mailto:hokey-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: hokey-bounces@ietf.org
Errors-To: hokey-bounces@ietf.org

On 2/20/2008 12:12 PM, Yoshihiro Ohba wrote:
> I have two questions on EMSKname in keyName-NAI in draft-ietf-hokey-erx-11.txt:
> 
> "
>   keyName-NAI - ERP messages are integrity protected with the rIK or
>   the DS-rIK.  The use of rIK or DS-rIK for integrity protection of
>   ERP messages is indicated by the EMSKname [3], the protocol, which
>   is ERP, and the realm, which indicates the domainname of the ER
>   server.  The EMSKname is copied into the username part of the NAI.
> "
> 
> - What is the exact format of EMSKname ?  I could not fined an EMSK
> name definition in [3].  

It's in a revision that Joe is going to submit shortly.

> 
> - Does the format of EMSKname (if specified somewhere) follow the NAI
> format defined in RFC 4282.

EMSKname is a 64-bit key identifier.
EMSKname = SHA-256-64(EAP Session ID, "EMSK")

thanks,
Lakshminath

> 
> Best Regards,
> Yoshihiro Ohba
> _______________________________________________
> HOKEY mailing list
> HOKEY@ietf.org
> http://www.ietf.org/mailman/listinfo/hokey
> 
_______________________________________________
HOKEY mailing list
HOKEY@ietf.org
http://www.ietf.org/mailman/listinfo/hokey