IETF Logo Mail Archive

Re: [Ietf-krb-wg] FAST draft 11 submitted

Love Hörnquist Åstrand <lha@apple.com> Wed, 20 May 2009 19:23 UTC

Return-Path: <ietf-krb-wg-bounces@lists.anl.gov>
X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com
Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC15D3A689A for <ietfarch-krb-wg-archive@core3.amsl.com>; Wed, 20 May 2009 12:23:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.299
X-Spam-Level:
X-Spam-Status: No, score=-102.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8YxZvvFjGNn7 for <ietfarch-krb-wg-archive@core3.amsl.com>; Wed, 20 May 2009 12:22:54 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 68DA33A6850 for <krb-wg-archive@lists.ietf.org>; Wed, 20 May 2009 12:22:54 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.ctd.anl.gov (Postfix) with ESMTP id 0B7C911; Wed, 20 May 2009 14:24:32 -0500 (CDT)
Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id C2DD82F; Wed, 20 May 2009 14:24:31 -0500 (CDT)
Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id A237780E01; Wed, 20 May 2009 14:24:31 -0500 (CDT)
X-Original-To: ietf-krb-wg@lists.anl.gov
Delivered-To: ietf-krb-wg@lists.anl.gov
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 1DB1480DFE for <ietf-krb-wg@lists.anl.gov>; Wed, 20 May 2009 14:24:30 -0500 (CDT)
Received: by mailhost.anl.gov (Postfix) id 0E14511; Wed, 20 May 2009 14:24:30 -0500 (CDT)
Delivered-To: ietf-krb-wg@anl.gov
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.ctd.anl.gov (Postfix) with ESMTP id 07F9D2F for <ietf-krb-wg@anl.gov>; Wed, 20 May 2009 14:24:30 -0500 (CDT)
Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 024AA11 for <ietf-krb-wg@anl.gov>; Wed, 20 May 2009 14:24:30 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id E12877CC091; Wed, 20 May 2009 14:24:29 -0500 (CDT)
Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02225-05; Wed, 20 May 2009 14:24:29 -0500 (CDT)
Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay2.anl.gov (Postfix) with ESMTP id C0D727CC08A for <ietf-krb-wg@anl.gov>; Wed, 20 May 2009 14:24:29 -0500 (CDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AkcBAHT1E0oR/g0WkWdsb2JhbACXaQEBAQEJCwoHEQW2b4QIBYgu
X-IronPort-AV: E=Sophos;i="4.41,223,1241413200"; d="scan'208";a="27215274"
Received: from mail-out3.apple.com ([17.254.13.22]) by mailgateway.anl.gov with ESMTP; 20 May 2009 14:24:29 -0500
Received: from relay11.apple.com (relay11.apple.com [17.128.113.48]) by mail-out3.apple.com (Postfix) with ESMTP id E98BB6163FCA for <ietf-krb-wg@anl.gov>; Wed, 20 May 2009 12:24:28 -0700 (PDT)
Received: from relay11.apple.com (unknown [127.0.0.1]) by relay11.apple.com (Symantec Brightmail Gateway) with ESMTP id D1B0F28095 for <ietf-krb-wg@anl.gov>; Wed, 20 May 2009 12:24:28 -0700 (PDT)
X-AuditID: 11807130-a677abb000000ebf-31-4a1458ec559c
Received: from gertie.apple.com (gertie.apple.com [17.151.62.15]) by relay11.apple.com (Apple SCV relay) with ESMTP id B43762808D for <ietf-krb-wg@anl.gov>; Wed, 20 May 2009 12:24:28 -0700 (PDT)
MIME-version: 1.0
Received: from [17.151.122.176] by gertie.apple.com (Sun Java(tm) System Messaging Server 6.3-7.04 (built Sep 26 2008; 32bit)) with ESMTPSA id <0KJY00KU5J8S4O00@gertie.apple.com> for ietf-krb-wg@anl.gov; Wed, 20 May 2009 12:24:28 -0700 (PDT)
From: Love Hörnquist Åstrand <lha@apple.com>
In-reply-to: <tsld4a3a8fv.fsf@mit.edu>
Date: Wed, 20 May 2009 12:24:28 -0700
Message-id: <B07AE9F1-ABC1-49BB-B5CB-9030C67B46D6@apple.com>
References: <tsld4a3a8fv.fsf@mit.edu>
To: Sam Hartman <hartmans-ietf@mit.edu>
X-Mailer: Apple Mail (2.1062.1)
X-Brightmail-Tracker: AAAAAA==
X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov
Cc: Kerberos-wg - <ietf-krb-wg@anl.gov>
Subject: Re: [Ietf-krb-wg] FAST draft 11 submitted
X-BeenThere: ietf-krb-wg@lists.anl.gov
X-Mailman-Version: 2.1.11
Precedence: list
List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" <ietf-krb-wg.lists.anl.gov>
List-Unsubscribe: <https://lists.anl.gov/mailman/options/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=unsubscribe>
List-Archive: <https://lists.anl.gov/pipermail/ietf-krb-wg>
List-Post: <mailto:ietf-krb-wg@lists.anl.gov>
List-Help: <mailto:ietf-krb-wg-request@lists.anl.gov?subject=help>
List-Subscribe: <https://lists.anl.gov/mailman/listinfo/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"; DelSp="yes"
Sender: ietf-krb-wg-bounces@lists.anl.gov
Errors-To: ietf-krb-wg-bounces@lists.anl.gov

I have not seen any feedback on the comment i sent.

The do you publish/verified all versions of the test vectors (output  
enctype != enctype1) ?

Love

20 maj 2009 kl. 12:19 skrev Sam Hartman:

>
>
> Here are the major changes.
> I believe most of these have received discussion on the list.
>
>      The checksum member of the KrbFastFinished sequence has been
>      removed.  A nonce field has been added to KrbFastResponse.
>      The cookie no longer needs to be outside of FAST.  In fact, some
>      security guarantees depend on the cookie being inside FAST now
>      that the finish checksum has been removed.  Affected that change.
>      Replace the rep-key field in KrbFastResponse with the strengthen-
>      key field.  Per mailing list discussion, there are security
>      advantages to strengthening the reply key.
>      Clarify handling of authentication sets.
>      Include the AD-fx-fast-used authorization data type.
>
>
> In addition, I included appendix A, which contains test vectors for  
> krb-fx-cf2.
>
>
> Larry has not seen the note about random nonces or the test vector
> appendix.  I suspect he'll agree with the content although probably
> want to improve the formatting.
>
> I believe that draft 11 is technically complete.  I expect to ask Jeff
> for a working group last call as soon as Larry has reviewed.  I'd
> definitely appreciate review of the changes in 11 to confirm that they
> reflect consensus we've already achieved.
> _______________________________________________
> ietf-krb-wg mailing list
> ietf-krb-wg@lists.anl.gov
> https://lists.anl.gov/mailman/listinfo/ietf-krb-wg

_______________________________________________
ietf-krb-wg mailing list
ietf-krb-wg@lists.anl.gov
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg

v2.23.0 | Report a Bug | By Email