[Lake] Additional key exchange draft

[Phillip Hallam-Baker <[e-mail]>]

Only just found out about the BOF.

I have a lightweight key exchange that I have been using for a while that
may be applicable to this problem area. People tell me that it is similar
to one that Sun proposed for IPSEC

It is submitted as an ID but my tools are targeting the new format which
allows superscripts and subscripts and that isn't accepted by the IETF
toolset for another couple of months.

The readable version is here:

http://mathmesh.com/Documents/draft-hallambaker-mesh-cryptography.html

There is a plaintext version if that is your bag:

https://tools.ietf.org/html/draft-hallambaker-mesh-cryptography-02

The observation here is that standard DH provides a key exchange with
mutual authentication. The only reason the authentication of the client is
lost is that we want forward secrecy.

But DH keys can be manipulated in interesting ways. For DH or ECDH
variants, I can tell you the public key that corresponds to the sum of two
private keys just by adding the private keys.

What this means is that if Alice and Bob have validated public keys, we can
do a key exchange that provides mutual authentication and forward secrecy
by generating an ephemeral key pair and adding it to the authenticated one.

Like I said, only just found out about the group. Would have made this
draft a higher priority if I had. I have code but I didn't get round to
putting the data from the examples into this particular draft. I got up to
part IV before the cutoff and the crypto is part IIV.


One point I feel is very important here is that using a key exchange
algorithm to achieve a key exchange is much better than the schemes we
currently use in TLS where data ends up being encrypted or worse, signed.
These provide side channel attacks or proof of a party having been in the
communication. That is not something I feel is acceptable for a transport
layer communication.

I can produce a version of the draft with examples if it will help. This is
a BOF though and I am sure I am not going to be the only person thinking on
these lines.