[IPsec] Re: Dictionary-based key exchange (for mobile users)

["Pars Mutaf" <[e-mail]>]

Hello,
An implementation can be found below (using TCP transport
because future extension is possible for exchanging a large
dictionary). It supports GTK word completion with mouse and
keyboard.

http://code.google.com/p/vke/

Michael Richardson and Nicolas Williams suggested
changing the name to something like Verbal Key Exchange.

Thanks,
pars

On Nov 16, 2007 7:50 PM, Pars Mutaf <[e-mail]> wrote:
> Hello,
> I would very much appreciate some feedback on the following
> draft (very short). Thanks in advance.
>
> Regards,
> pars
>
> --------cut here ---------
>
>
>
>
> Network Working Group                                           P. Mutaf
> Internet-Draft                                     Institut National des
>                                                       Telecommunications
> Expires: May 19, 2008                                  November 16, 2007
>
>
>                      Dictionary-based Key Exchange
>                          draft-mutaf-dke-00.txt
>
> Status of this Memo
>
>    By submitting this Internet-Draft, each author represents that any
>    applicable patent or other IPR claims of which he or she is aware
>    have been or will be disclosed, and any of which he or she becomes
>    aware will be disclosed, in accordance with Section 6 of BCP 79.
>
>    Internet-Drafts are working documents of the Internet Engineering
>    Task Force (IETF), its areas, and its working groups.  Note that
>    other groups may also distribute working documents as Internet-
>    Drafts.
>
>    Internet-Drafts are draft documents valid for a maximum of six months
>    and may be updated, replaced, or obsoleted by other documents at any
>    time.  It is inappropriate to use Internet-Drafts as reference
>    material or to cite them other than as "work in progress."
>
>    The list of current Internet-Drafts can be accessed at
>    http://www.ietf.org/ietf/1id-abstracts.txt.
>
>    The list of Internet-Draft Shadow Directories can be accessed at
>    http://www.ietf.org/shadow.html.
>
>    This Internet-Draft will expire on May 19, 2008.
>
> Copyright Notice
>
>    Copyright (C) The IETF Trust (2007).
>
> Abstract
>
>    A dictionary-based key exchange protocol is proposed.  Two mobile
>    host users that physically meet each other can use this protocol to
>    authenticate each other.  PKI nor certificates are not needed.
>
>
>
>
>
>
>
>
> Mutaf                     Expires May 19, 2008                  [Page 1]
>
> Internet-Draft        Dictionary-based Key Exchange        November 2007
>
>
> Table of Contents
>
>    1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . . . 3
>    2.  Protocol description  . . . . . . . . . . . . . . . . . . . . . 3
>    3.  Security considerations . . . . . . . . . . . . . . . . . . . . 3
>    4.  IANA considerations . . . . . . . . . . . . . . . . . . . . . . 4
>    5.  Conclusion  . . . . . . . . . . . . . . . . . . . . . . . . . . 4
>    6.  Informative References  . . . . . . . . . . . . . . . . . . . . 4
>    Author's Address  . . . . . . . . . . . . . . . . . . . . . . . . . 4
>    Intellectual Property and Copyright Statements  . . . . . . . . . . 5
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> Mutaf                     Expires May 19, 2008                  [Page 2]
>
> Internet-Draft        Dictionary-based Key Exchange        November 2007
>
>
> 1.  Introduction
>
>    A dictionary-based key exchange protocol is proposed.  Two mobile
>    host users that physically meet each other can use this protocol to
>    authenticate each other.  PKI nor certificates are not needed.
>
>
> 2.  Protocol description
>
>    The proposed protocol is briefly described below:
>
>
>           Initiator              MitM                 Responder
>
>                      Request RSA public key PK
>            ----------------------------------------------->
>                                   PK
>          | <--------------------------------------------
>       T  |
>          | <========== Read 40-bit fingerprint ============
>    human verification
>    of 40-bit fingerprint
>
>            -----------------{secret key}PK --------------->
>
>    where
>            PK: a one time RSA public key
>            ===: voice channel, i.e. responder user tells the fingerprint
>                 to initiator user through oral communication.
>            MitM: Man in the Middle
>
>                                  Figure 1
>
>    The octets of the fingerprint will typically be mapped to a
>    dictionary of easy to pronounce and type well-known words.  For
>    example, with a dictionary containing 256 words, each octet can be
>    represented with one word in the dictionary, and only 40/8=5 words
>    need to be checked.
>
>    In T time units, MitM has to find a PK' giving the same fingerprint
>    as PK, and returned it to the initiator before PK. 2^40 is large
>    enough to assume that the attacker cannot reasonably succeed.
>
>
> 3.  Security considerations
>
>    TBD.
>
>
>
>
> Mutaf                     Expires May 19, 2008                  [Page 3]
>
> Internet-Draft        Dictionary-based Key Exchange        November 2007
>
>
> 4.  IANA considerations
>
>    None.
>
>
> 5.  Conclusion
>
>    This document described a dictionary-based key exchange protocol.
>    The idea of human verification of a public key fingerprint is not
>    new.  A 40-bit fingerprint is normally too short and considered
>    insecure (See for example [SB].).  In the proposed protocol, however,
>    the fingerprint is used to authenticate a one-time public key that is
>    used to exchange a secret key and possibly other material.
>
>
> 6.  Informative References
>
>    [SB]  McCune, J. and J. McCune, "Seeing is Believing", Proceedings of
>          the IEEE Symposium on Security and Privacy, Oakland, CA. May
>          2005.
>
>
> Author's Address
>
>    Pars Mutaf
>    Institut National des Telecommunications
>
>    Email: [e-mail]
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> Mutaf                     Expires May 19, 2008                  [Page 4]
>
> Internet-Draft        Dictionary-based Key Exchange        November 2007
>
>
> Full Copyright Statement
>
>    Copyright (C) The IETF Trust (2007).
>
>    This document is subject to the rights, licenses and restrictions
>    contained in BCP 78, and except as set forth therein, the authors
>    retain all their rights.
>
>    This document and the information contained herein are provided on an
>    "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS
>    OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND
>    THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS
>    OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF
>    THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
>    WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
>
>
> Intellectual Property
>
>    The IETF takes no position regarding the validity or scope of any
>    Intellectual Property Rights or other rights that might be claimed to
>    pertain to the implementation or use of the technology described in
>    this document or the extent to which any license under such rights
>    might or might not be available; nor does it represent that it has
>    made any independent effort to identify any such rights.  Information
>    on the procedures with respect to rights in RFC documents can be
>    found in BCP 78 and BCP 79.
>
>    Copies of IPR disclosures made to the IETF Secretariat and any
>    assurances of licenses to be made available, or the result of an
>    attempt made to obtain a general license or permission for the use of
>    such proprietary rights by implementers or users of this
>    specification can be obtained from the IETF on-line IPR repository at
>    http://www.ietf.org/ipr.
>
>    The IETF invites any interested party to bring to its attention any
>    copyrights, patents or patent applications, or other proprietary
>    rights that may cover technology that may be required to implement
>    this standard.  Please address the information to the IETF at
>    [e-mail].
>
>
> Acknowledgment
>
>    Funding for the RFC Editor function is provided by the IETF
>    Administrative Support Activity (IASA).
>
>
>
>
>
> Mutaf                     Expires May 19, 2008                  [Page 5]
>
>


_______________________________________________
IPsec mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/ipsec