RE: I-D Action: draft-jiang-6man-cga-sec-option-00.txt

Hi, Hosnieh:

I think you talking about a issues in the CGA specification rather than in our document. You are indicating if the sec value is checked during the verification process, this issues will no longer exist, right? Correct me if I misunderstood anything. ^_^

Cheers

Dacheng

> -----Original Message-----
> From: ipv6 [mailto:ipv6-bounces@ietf.org] On Behalf Of Hosnieh Rafiee
> Sent: Monday, July 07, 2014 5:56 PM
> To: ipv6@ietf.org
> Subject: RE: I-D Action: draft-jiang-6man-cga-sec-option-00.txt
> 
> Hi,
> I've read this document and I have some questions It was for purpose that in
> CGA document, they used 3 bits sec values as a part of an IP address. However,
> based on the current CGA specification document, this value has been ignored
> during the verification process and that was the result that I wrote
> http://tools.ietf.org/html/draft-rafiee-6man-cga-attack-01
> But when you add new option but not a part of a CGA IP address, then the
> attack explained in my document can be applicable like with current CGA
> specification document. In other words, the attacker easily can try to match
> different CGA sec values with the CGA value of the legitimate node.
> 
> So, I guess you need to somehow protect CGA from this attack.
> 
> Best,
> Hosnieh
> 
> 
> -----Original Message-----
> From: I-D-Announce [mailto:i-d-announce-bounces@ietf.org] On Behalf Of
> internet-drafts@ietf.org
> Sent: Friday, July 04, 2014 9:55 AM
> To: i-d-announce@ietf.org
> Subject: I-D Action: draft-jiang-6man-cga-sec-option-00.txt
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> 
> 
>         Title           : CGA SEC Option for Secure Neighbor Discovery
> Protocol
>         Authors         : Sheng Jiang
>                           Dacheng Zhang
>                           Suresh Krishnan
> 	Filename        : draft-jiang-6man-cga-sec-option-00.txt
> 	Pages           : 5
> 	Date            : 2014-07-04
> 
> Abstract:
>    A Cryptographically Generated Address is an IPv6 addresses binding
>    with a public/private key pair.  It is a vital component of Secure
>    Neighbor Discovery (SeND) protocol.  The current SeND specifications
>    are lack of procedures to specify the Sec bits.  A new SEC option is
>    defined accordingly to address this issue.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-jiang-6man-cga-sec-option/
> 
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-jiang-6man-cga-sec-option-00
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________
> I-D-Announce mailing list
> I-D-Announce@ietf.org
> https://www.ietf.org/mailman/listinfo/i-d-announce
> Internet-Draft directories: http://www.ietf.org/shadow.html or
> ftp://ftp.ietf.org/ietf/1shadow-sites.txt
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------