IETF Logo Mail Archive

Re: Pseudorandom Flow Labels

Fernando Gont <fernando@gont.com.ar> Thu, 07 April 2011 08:18 UTC

Return-Path: <fernando.gont.netbook.win@gmail.com>
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 70C2328C123 for <ipv6@core3.amsl.com>; Thu, 7 Apr 2011 01:18:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.849
X-Spam-Level:
X-Spam-Status: No, score=-3.849 tagged_above=-999 required=5 tests=[AWL=-0.250, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QOvTKfagUyiC for <ipv6@core3.amsl.com>; Thu, 7 Apr 2011 01:18:45 -0700 (PDT)
Received: from mail-yi0-f44.google.com (mail-yi0-f44.google.com [209.85.218.44]) by core3.amsl.com (Postfix) with ESMTP id B2B2328C122 for <ipv6@ietf.org>; Thu, 7 Apr 2011 01:18:45 -0700 (PDT)
Received: by yic13 with SMTP id 13so1072036yic.31 for <ipv6@ietf.org>; Thu, 07 Apr 2011 01:20:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:sender:message-id:date:from:user-agent :mime-version:to:cc:subject:references:in-reply-to :x-enigmail-version:openpgp:content-type:content-transfer-encoding; bh=BDdVmai8IlKmOK0m5kNvqo8TZqgwMeMYKP0WFjURbC8=; b=tLFUqz8IVMkpg5h4Cy7S3Bsnnck+yprvX98TMBbed1J56gHwEE9GAPuU+YycLoA9RL JkBSbso1SxBKDaA8bV/+wlARUe/t78JUZNfnmOoxz3owhau63riDqqVPGuHH66ySP7Zq Ljf7Ck7n0KaTPKbNS+KTAMxALCUUVDV3hJdPk=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=sender:message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:x-enigmail-version:openpgp:content-type :content-transfer-encoding; b=vz6TAB5omqyX1sU7UAcW62jKt0BnZ1VNURaAgps7+DKvfitHEXhsoca4LDg1DrrJNx FraUlfBnOc5fqPsE51OP4TzXMLSs+IxGCB0bUb8Knl3+hshGcEURP5a/yrmMA/+uwzjC kRV6lsPPvCNSlUuwTAnB/bXiaXRghAHya1RPQ=
Received: by 10.236.105.172 with SMTP id k32mr760863yhg.83.1302164429743; Thu, 07 Apr 2011 01:20:29 -0700 (PDT)
Received: from [192.168.123.101] ([190.48.201.131]) by mx.google.com with ESMTPS id u40sm620850yhn.74.2011.04.07.01.20.25 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 07 Apr 2011 01:20:28 -0700 (PDT)
Sender: Fernando Gont <fernando.gont.netbook.win@gmail.com>
Message-ID: <4D9D73C3.7060500@gont.com.ar>
Date: Thu, 07 Apr 2011 05:20:19 -0300
From: Fernando Gont <fernando@gont.com.ar>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.8) Gecko/20100802 Thunderbird/3.1.2
MIME-Version: 1.0
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
Subject: Re: Pseudorandom Flow Labels
References: <BD901061-96AC-4915-B7CE-2BC1F70861A5@castlepoint.net> <201104052036.p35KaoHV019253@cichlid.raleigh.ibm.com> <4D9CAF52.9050805@gont.com.ar> <87F2B923-3FC6-4879-8C81-B9C283AC5EA0@castlepoint.net> <4D9CE62C.4070804@gont.com.ar> <4D9D6898.4090502@gmail.com>
In-Reply-To: <4D9D6898.4090502@gmail.com>
X-Enigmail-Version: 1.1.1
OpenPGP: id=D076FFF1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Cc: Thomas Narten <narten@us.ibm.com>, 6man List <ipv6@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2011 08:18:46 -0000

On 07/04/2011 04:32 a.m., Brian E Carpenter wrote:
> Setting the flow label by calling random() cannot be a stateless
> method - it would mean storing the value for use on future packets
> of the same flow. We need a stateless method.

Oops, you're right. (Although for FLs set by end nodes this shouldn't
matter much)

Anyway, you have two stateless methods in
draft-gont-6man-flowlabel-security.... :-)

Which raises the question ;-) about whether we should work on this I-D.
FWIW, IIRC the wg had been polled about adoption of this document as a
wg item, but I think only one folk (you?) responded.

Thanks!

Best regards,
-- 
Fernando Gont
e-mail: fernando@gont.com.ar || fgont@acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

v2.23.0 | Report a Bug | By Email