Re: [Lake] AD review draft-ietf-lake-traces-05

Mališa Vučinić <malisa.vucinic@inria.fr> Wed, 07 June 2023 09:09 UTC

Return-Path: <malisa.vucinic@inria.fr>
X-Original-To: lake@ietfa.amsl.com
Delivered-To: lake@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3518BC14CE27 for <lake@ietfa.amsl.com>; Wed, 7 Jun 2023 02:09:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.093
X-Spam-Level:
X-Spam-Status: No, score=-7.093 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=inria.fr
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IbxcVHM46HCO for <lake@ietfa.amsl.com>; Wed, 7 Jun 2023 02:08:55 -0700 (PDT)
Received: from mail3-relais-sop.national.inria.fr (mail3-relais-sop.national.inria.fr [192.134.164.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73FADC14CE2F for <lake@ietf.org>; Wed, 7 Jun 2023 02:08:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=inria.fr; s=dc; h=from:message-id:mime-version:subject:date:in-reply-to:cc: to:references; bh=GMtoxraSW2mmwdcFgirY0/BtJQ+vvc0oeqUgjd43A+s=; b=BVol+rtqBK6wZyVlWnS8EeMprAxaKayPH6Pc2NG8/4ztnVeMT8e24D3+ OgNCWnVUz26KOaab1s5p/j0N+yQJQ7K4u1spx6esR4sQkl0HsiLFxLbHt pDwPXOHzSBgEg21TDtHRfuK/5SGnAvtAtWPJtdk/reEAp2/Sgabwvfdd5 0=;
Authentication-Results: mail3-relais-sop.national.inria.fr; dkim=none (message not signed) header.i=none; spf=SoftFail smtp.mailfrom=malisa.vucinic@inria.fr; dmarc=fail (p=none dis=none) d=inria.fr
X-IronPort-AV: E=Sophos; i="6.00,223,1681164000"; d="scan'208,217"; a="58075971"
Received: from wifi-pro-82-119.paris.inria.fr (HELO smtpclient.apple) ([128.93.82.119]) by mail3-relais-sop.national.inria.fr with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 07 Jun 2023 11:08:53 +0200
From: Mališa Vučinić <malisa.vucinic@inria.fr>
Message-Id: <56EEECED-0D8A-49FA-9A44-6D9182088C42@inria.fr>
Content-Type: multipart/alternative; boundary="Apple-Mail=_50D04ED9-4B1B-476F-B48E-F2CE2CB986DE"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.600.7\))
Date: Wed, 07 Jun 2023 11:08:41 +0200
In-Reply-To: <CAGL5yWY2HtdRSWJqAVByZqo4+xfrsu=BBCbHaiSMB_xeCRjsww@mail.gmail.com>
Cc: lake@ietf.org, "Serafin, Marek" <Marek.Serafin@assaabloy.com>
To: Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>
References: <CAGL5yWY2HtdRSWJqAVByZqo4+xfrsu=BBCbHaiSMB_xeCRjsww@mail.gmail.com>
X-Mailer: Apple Mail (2.3731.600.7)
Archived-At: <https://mailarchive.ietf.org/arch/msg/lake/WNoQEJyNVgnL26lODYO8hI7WyiI>
Subject: Re: [Lake] AD review draft-ietf-lake-traces-05
X-BeenThere: lake@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Lightweight Authenticated Key Exchange <lake.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/lake>, <mailto:lake-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lake/>
List-Post: <mailto:lake@ietf.org>
List-Help: <mailto:lake-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/lake>, <mailto:lake-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Jun 2023 09:09:00 -0000

> On Jun 5, 2023, at 19:52, Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org> wrote:
> 
> My only concern with this document is that it contains traces from what I gather from the shepherds write up to be 1 implementation. Has there been any external verification or 2nd implementation that has confirmed these traces?

Hi Paul,

Thanks for bringing this up. We have asked this question explicitly during the WGLC and here is a short summary:

- Traces in the draft have been produced based on the output of Californium implementation of EDHOC [1] by Marco Tiloca.
- Trace #2 (static DH - static DH) has been verified using edhoc-rs implementation by myself [2]
- Trace #1 (signature-signature) has been verified using the proprietary implementation by Marek. Marek sent an email about this but when looking through the archives I now realize that the email did not make it to the list. Nevertheless, I include Marek to this thread so he can confirm.

Mališa

[1] https://mailarchive.ietf.org/arch/msg/lake/kOFGzFCDrpzrTVg5bB_rVOE_xMI/
[2] https://mailarchive.ietf.org/arch/msg/lake/-YhpDW_GstlRIlst8bzS-lP0A5s/