To: Tim Chown <tim.chown@jisc.ac.uk>
CC: <lwip@ietf.org>, <draft-ietf-lwig-crypto-sensors.all@ietf.org>
References: <150931458233.3515.10214190547457562395@ietfa.amsl.com>
From: Mohit Sethi <mohit.m.sethi@ericsson.com>
Message-ID: <e5c315d9-2326-7e64-edc0-ba016706ab6c@ericsson.com>
Date: Mon, 25 Dec 2017 18:49:44 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.5.0
MIME-Version: 1.0
In-Reply-To: <150931458233.3515.10214190547457562395@ietfa.amsl.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
 micalg=sha-256; boundary="------------ms020901030407010804000109"
Archived-At: <https://mailarchive.ietf.org/arch/msg/lwip/5NvhQiWYUbySmhUJjcltStFevm4>
Subject: Re: [Lwip] Intdir early review of draft-ietf-lwig-crypto-sensors-04
Precedence: list

--------------ms020901030407010804000109
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Language: en-US

Dear Tim,

Thanks for the detailed review and positive comments. We have now=20
submitted an updated version which can be found here:=20
https://tools.ietf.org/html/draft-ietf-lwig-crypto-sensors-05. The diff=20
from the previous version can be found here:=20
https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-lwig-crypto-sensors-05.

Please find our responses to your specific comments inline. Let us know=20
if the modifications are not sufficient.

--Mohit
On 10/30/2017 12:03 AM, Tim Chown wrote:
> Reviewer: Tim Chown
> Review result: Ready
>
> Hi,
>
> This Informational draft describes the challenges in securing
> resource-constrained smart object / IoT devices, documenting the associ=
ated
> tradeoffs, and discussing the availability of appropriate cryptographic=

> libraries for such devices.
>
> I have reviewed this document, and overall find it generally ready for
> publication, though I have some minor nits / comments for consideration=
 below;
> these are just suggested changes / improvements, and I would not object=

> strongly if all were ignored.
>
> General comments:
>
> The document is very easy and enjoyable to read, and the quality of the=
 writing
> is very good.  The authors have clear expertise in the field.
>
> It may be worth considering teasing apart the evaluation and the archit=
ectural
> aspects of the document; these are somewhat interwoven as currently wri=
tten.
>
> Related, there are some rather nice recommendations made throughout the=

> document; these could perhaps be summarised either at the start or perh=
aps
> better the close of the document, e.g. on page 4 regarding selecting th=
e
> hardware after determining the security requirements for a device, and =
not
> necessarily simply picking the most lightweight algorithm, or on page 7=

> regarding appropriate layers for tasks, or on page 9 regarding elliptic=
 curve
> vs RSA, or on page 11 on real deployments using 32-bit microcontrollers=
, or the
> recommendation to the IETF community on page 14, or on planning for fir=
mware
> updates on page 16, etc.
We have now added a summary of important security recommendations from=20
our implementation experience in section 9.
>
> Comments by page:
>
> On page 5, in the first paragraph on provisioning, there is no hint of =
any
> bootstrap process for identities; this follows later on page 6, but a h=
int
> here, or just adding "as discussed on page 6 or in section x.y" might b=
e nice.
>
> Also on page 5, I'd be interested in seeing some brief text added on th=
e
> "remaining vulnerabilities" that are mentioned near the foot of the pag=
e.
We have added new text here. "leap-of-faith or trust-on-first-use based=20
pairing methods assume that the attacker is not present during the=20
initial setup and are vulnerable to eavesdropping or man-in-the-middle=20
(MitM) attacks."
>
> On page 6, is it worth adding a little text on privacy somewhere?  We'v=
e been
> doing some work through Christian Huitema and Daniel Kaiser on anonymou=
s device
> pairing in the DNSSD WG, and a similar requirement might be desirable i=
n some
> scenarios here?
Christian had provided detailed feedback on privacy and identifiers. To=20
address this, we have added new text in section 3 (Challenges), section=20
4.1 (Provisioning) and section 8.1 (Feasibility).
>
> On page 7, having said earlier you should pick the hardware after deter=
mining
> requirements, you then decide to pick an Arduino platform and see what =
you can
> manage to run on it. I fully understand why (and I'd be equally curious=
), but
> you should probably clarify the "conflict" further.
There was missing text here. We have now completed the sentence. "Our=20
choice of a 8-bit platform may seem surprising since cheaper and more=20
energy-efficient 32-bit platforms are available. However, our intention=20
was to evaluate the performance of public-key cryptography on the=20
smallest platforms available. It is reasonable to expect better=20
performance results from 32-bit microcontrollers.
>
> On page 12, would a little more detail on RNG requirements, esp. for de=
vices of
> this type, be worthwhile?
We have also added a pointer to RFC4086 that provides a detailed=20
discussion on requirements and best practices for cryptographic-quality=20
randomness.
>
> On page 16, you're hardcoding the IP address?  Is it not possible to us=
e RD?
> We've been comparing that and looking at interoperability with classic =
DNSSD in
> the DNSSD WG.
The IP address of the resource-directory was hardcoded. The location of=20
the publish-subscriber broker was then discovered from the resource=20
directory. I should also add that this was a prototype implementation on =

a small device. A real deployment would have used an actual domain name.
>
> On page 16, section 10 seems to have no content?  Or should sections 11=
 onwards
> be subsections of section 10?
Section 10, 11, 12, 13, 14 were related but somehow incorrectly placed.=20
This was an xml formatting error on our part. We have now fixed=20
section/subsection order.
>
> On page 17, at the end of section 11, should there also be some 'spin u=
p' costs
> for the radio?
Added. "in general the power requirements necessary to turn the radio=20
on/off and sending or receiving messages are far bigger than those=20
needed to execute cryptographic operations."
>
> Best wishes,
> Tim
>
>



--------------ms020901030407010804000109
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms020901030407010804000109--