[karp] Comment on draft-mahesh-karp-rkmp

William Atwood <william.atwood@concordia.ca> Tue, 26 November 2013 20:01 UTC

Return-Path: <william.atwood@concordia.ca>
X-Original-To: karp@ietfa.amsl.com
Delivered-To: karp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FBBA1ADFA1 for <karp@ietfa.amsl.com>; Tue, 26 Nov 2013 12:01:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.663
X-Spam-Level:
X-Spam-Status: No, score=0.663 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RP_MATCHES_RCVD=-0.001, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WtJH-WqCyt5k for <karp@ietfa.amsl.com>; Tue, 26 Nov 2013 12:01:39 -0800 (PST)
Received: from oldperseverance.encs.concordia.ca (oldperseverance.encs.concordia.ca [132.205.96.92]) by ietfa.amsl.com (Postfix) with ESMTP id ADA601AE22D for <karp@ietf.org>; Tue, 26 Nov 2013 12:01:30 -0800 (PST)
Received: from [IPv6:::1] (bill@poise.encs.concordia.ca [132.205.2.209]) by oldperseverance.encs.concordia.ca (envelope-from william.atwood@concordia.ca) (8.13.7/8.13.7) with ESMTP id rAQK1TYE012658 for <karp@ietf.org>; Tue, 26 Nov 2013 15:01:29 -0500
Message-ID: <5294FE1B.2080605@concordia.ca>
Date: Tue, 26 Nov 2013 15:01:31 -0500
From: William Atwood <william.atwood@concordia.ca>
Organization: Concordia University, Montreal
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.1.1
MIME-Version: 1.0
To: KARP Working Group <karp@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.58 on oldperseverance.encs.concordia.ca at 2013/11/26 15:01:29 EST
Subject: [karp] Comment on draft-mahesh-karp-rkmp
X-BeenThere: karp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Discussion list for key management for routing and transport protocols <karp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/karp>, <mailto:karp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/karp/>
List-Post: <mailto:karp@ietf.org>
List-Help: <mailto:karp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/karp>, <mailto:karp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Nov 2013 20:01:41 -0000

I have been reading draft-mahesh-karp-rkmp, and I am puzzled by several
issues.  I discuss the first issue below.  Once I understand what is
intended by the authors, I expect to raise the other issues.  (The way
in which I will phrase these issues may depend on the answer to the
first issue.)

>From the name of the draft, I had always assumed that the document was
talking about a "new" Key Management Protocol, called RKMP.  However,
the key phrase in the first paragraph is "defines a mechanism to secure
such pairwise Routing Protocol (RP) associations using IKEv2 [RFC5996]".

After the introduction, the document discusses how the exchanges build
on the messages and exchange formats of IKEv2: where the semantics are
the same, and where the semantics differ.  To my mind, given the
different semantics, the "new" protocol is _not_ IKEv2.  However, the
following text continues to speak of "invoking IKEv2", which would seem
to me to imply "invoking unmodified IKEv2".  However, unmodified IKEv2
has the wrong semantics for what happens to a child SA when the parent
IKEv2 SA is destroyed.

I suspect that what is really happening here is that
draft-mahesh-karp-rkmp is defining _extensions_ to IKEv2, and new
semantics for child SAs when those extensions are used.  The material in
Section 6 seems to support this view.

If this is so, then I suggest that Section 1 needs to be lightly
re-written to make it clear that the document is proposing extensions to
IKEv2, and that references to "IKEv2" in the subsequent text are
references to the extended IKEv2.

Comments from the authors (and anyone else) will be appreciated.  I need
to understand what is actually intended here before I can comment
properly on the rest of the document.

  Bill

-- 
Dr. J.W. Atwood, Eng.             tel:   +1 (514) 848-2424 x3046
Distinguished Professor Emeritus  fax:   +1 (514) 848-2830
Department of Computer Science
   and Software Engineering
Concordia University EV 3.185     email:william.atwood@concordia.ca
1455 de Maisonneuve Blvd. West    http://users.encs.concordia.ca/~bill
Montreal, Quebec Canada H3G 1M8