IETF Logo Mail Archive

Re: Scripting attacks [was Next step for draft-ietf-6man-rfc6874bis]

Brian E Carpenter <brian.e.carpenter@gmail.com> Wed, 29 June 2022 23:24 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A188C14F746 for <ipv6@ietfa.amsl.com>; Wed, 29 Jun 2022 16:24:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.984
X-Spam-Level:
X-Spam-Status: No, score=-3.984 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-1.876, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tCGFlpmVfokv for <ipv6@ietfa.amsl.com>; Wed, 29 Jun 2022 16:24:33 -0700 (PDT)
Received: from mail-pl1-x62d.google.com (mail-pl1-x62d.google.com [IPv6:2607:f8b0:4864:20::62d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29775C14792A for <ipv6@ietf.org>; Wed, 29 Jun 2022 16:24:33 -0700 (PDT)
Received: by mail-pl1-x62d.google.com with SMTP id m2so15484951plx.3 for <ipv6@ietf.org>; Wed, 29 Jun 2022 16:24:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:date:mime-version:user-agent:subject:content-language:to :cc:references:from:in-reply-to:content-transfer-encoding; bh=yv/BdopGfYBe2qWWzOrUqXfhO2msDggRrIv58K3Eq/k=; b=JCeR8Y8fQmqcxHx/M8gfxppoeH+rGjONd2xA2cdegnDZnu93iezQKaIySAAmidXYOP VNWhy+KGCIhSVGWWUVhSdeA0Bqvtc8GrQ27a1KV/wUehCwCKnlSeAa4J10R+Vw2DPQVz 1SdMysIKL6mUlklUCd949NTX62QIyt9kCisWcFYzMrsUrp2avDBsTgCd88tVCic3nsyV FUZWlysQo59GKdyAqPabM6gJeqAAJJgA9rlpgFh4VSCbJMWWsKH8+KO5YyOyTzjjLjsi QG8mATd/J4J1p6KWQwNeL+Jc7NfjQcez0yzkAIpzGqCxCXdWGvmnKZj9u20h8FgAi3aj YoPA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent:subject :content-language:to:cc:references:from:in-reply-to :content-transfer-encoding; bh=yv/BdopGfYBe2qWWzOrUqXfhO2msDggRrIv58K3Eq/k=; b=E/SP1VZTsJowXEv+rDlDrYCqYdfn3Np6jtdPQUfp+vXL/xiB1JH6ahZzHLg8pp+BqZ EpJ1c8Dgmv+RNSShoqGD8OpSplNgs9HL8r0vEZxvK8J7XhmTa7kEeUO6h1dv15YDmHZg fSSANBPH0UnIj1JScQOrS1j36kH5by+d8yKRBN3XrWsvE7bpjaQ88TPvqRuE1F8z864w 9humJUf+tnMHtC02TZmIfrm0xxydsVM47s95RdlgMbs2Ew8+Yd4ZDQapx1OJ5iToZuKB Cv14joWywUhAaWmQA57uyU69GsDChkfjij9RAallRYbWl2WIwKmTtGMxyjKCoW5ymZUG Cn+w==
X-Gm-Message-State: AJIora86YpfRn4MP6oqYS+xz6MOMUYL6Qb1SPiLVCNXoSfN93VI+kjc7 HqFZltHIAbK0SiCQ/IJlezM=
X-Google-Smtp-Source: AGRyM1uoOuuDHwyuJ+14McpNXd8/ReH1MdN5KlMRfK8730/47BMpqM2TariTrSDRJLAdMZdI9to6CQ==
X-Received: by 2002:a17:902:988a:b0:16a:7f1b:552 with SMTP id s10-20020a170902988a00b0016a7f1b0552mr11547426plp.60.1656545072683; Wed, 29 Jun 2022 16:24:32 -0700 (PDT)
Received: from ?IPV6:2406:e003:1124:9301:80b2:5c79:2266:e431? ([2406:e003:1124:9301:80b2:5c79:2266:e431]) by smtp.gmail.com with ESMTPSA id y5-20020a62ce05000000b0052514384f02sm1300695pfg.54.2022.06.29.16.24.29 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 29 Jun 2022 16:24:32 -0700 (PDT)
Message-ID: <bf8c5c54-d548-a40a-0381-0583ef946f26@gmail.com>
Date: Thu, 30 Jun 2022 11:24:27 +1200
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.10.0
Subject: Re: Scripting attacks [was Next step for draft-ietf-6man-rfc6874bis]
Content-Language: en-US
To: Carsten Bormann <cabo@tzi.org>
Cc: "Philipp S. Tiesel" <philipp@tiesel.net>, 6man <ipv6@ietf.org>, Bob Hinden <bob.hinden@gmail.com>, Stuart Cheshire <cheshire@apple.com>
References: <164938402532.17740.11717866110301931501@ietfa.amsl.com> <b1780128-2069-b32e-7ca5-86977c119f0c@gmail.com> <11d4e419-11a9-8768-abf2-1335e5f1c3d8@gmail.com> <149924f9-da30-fa79-0509-c01c439d1796@gmail.com> <5BEFA97B-CF09-44D7-8C10-017FEAE4C3A8@tiesel.net> <e6ff75e7-b6c6-ea03-2e10-b1ad95d650f0@gmail.com> <98D15BD9-A631-4D09-AE9E-9D4C750714C9@tiesel.net> <95c82ad3-2138-ab2a-7ba5-57ad80472964@gmail.com> <E5C368C5-9DAE-4C61-ADDE-B881EA11EDA0@tiesel.net> <6968ca7b-dac3-b192-41ed-a193adab7eb4@gmail.com> <529B863C-BCC9-40C1-A5B8-B0598E7DF17C@tzi.org>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
In-Reply-To: <529B863C-BCC9-40C1-A5B8-B0598E7DF17C@tzi.org>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/MnPH9xeIrawe0KEs7aTAKaq2PpI>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jun 2022 23:24:33 -0000

On 30-Jun-22 11:09, Carsten Bormann wrote:
> On 30. Jun 2022, at 01:02, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
>>
>> Even a full search of the 24-bit low order bits of a Modified EUI
>> identifier would take 2^24 x 3500 ms, or about 1.9 years.
> 
> No way to parallelize the attack?

I am not enough of an expert on Javascript and browsers to answer that.
I suspect that the answer is yes, some degree of overlap between
attempts is possible, in which case we might get it down to weeks
or months rather than years.

   Brian

v2.23.0 | Report a Bug | By Email