Re: [CGA-EXT] Re: [Int-area] CGA & SeND extensions discussion

>> - Proxy SeND. The idea here is to define SeND and CGA extensions so
>> that SeND can be used with Proxy ND. Reference:
>> draft-kempf-mobopts-ringsig-ndproxy-01.txt
>> - Define extensions to Multi-Key CGAs: The idea here is to allow the
>> possibility of including multiple public keys in a single CGA
>> Parameter Data Structure, so that multiple parties can claim address
>> ownership. Reference: J. Kempf, J. Wood, Z. Ramzan, C. Gentry, "IP
>> Address Authorization for Secure Address Proxying using Multi-key CGAs
>> and Ring Signatures", IWSEC'06.
>
> IMO, these 2 previous items are in fact in the same topic (i.e. the
> second one as solution for the first one), aren't they?
>

Actually, there are other uses for multikey CGAs besides proxying. For 
example, it makes it possible to configure all access routers in an area 
with the same link local address, and still be able to have them use SEND, 
without requiring them to share a private key. Also, it can be used for 
route optimization in NEMO (paper available on request, somewhat speculative 
however).

And there are other solutions for proxy SEND. For example, having the node 
simply trust the proxy based on the proxy's certificate, or having the node 
supply the proxy with an attribute certificate allowing the proxy to claim 
and defend the address.

            jak 

_______________________________________________
Int-area mailing list
Int-area@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/int-area