Re: [Mipshop] Re: AD review of draft-ietf-mipshop-handover-key

"James Kempf" <kempf@docomolabs-usa.com> Mon, 29 October 2007 22:03 UTC

Return-path: <mipshop-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1Imci0-00049y-4U; Mon, 29 Oct 2007 18:03:44 -0400
Received: from mipshop by megatron.ietf.org with local (Exim 4.43) id 1Imchw-00048d-Ll for mipshop-confirm+ok@megatron.ietf.org; Mon, 29 Oct 2007 18:03:40 -0400
Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Imchw-00040E-86 for mipshop@ietf.org; Mon, 29 Oct 2007 18:03:40 -0400
Received: from key1.docomolabs-usa.com ([216.98.102.225] helo=fridge.docomolabs-usa.com) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1Imchq-0002qy-J3 for mipshop@ietf.org; Mon, 29 Oct 2007 18:03:35 -0400
Message-ID: <02c701c81a73$dd63de10$576115ac@dcml.docomolabsusa.com>
From: James Kempf <kempf@docomolabs-usa.com>
To: Vijay Devarapalli <vijay.devarapalli@azairenet.com>
References: <47260A0A.8030005@piuha.net> <01e801c81a4a$29352530$576115ac@dcml.docomolabsusa.com> <47260EF1.8000605@piuha.net> <026201c81a69$19887280$576115ac@dcml.docomolabsusa.com> <47264733.5030708@piuha.net> <02a901c81a6e$01425bf0$576115ac@dcml.docomolabsusa.com> <472651DC.8010903@azairenet.com>
Subject: Re: [Mipshop] Re: AD review of draft-ietf-mipshop-handover-key
Date: Mon, 29 Oct 2007 14:37:11 -0700
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"; charset="iso-8859-1"; reply-type="original"
Content-Transfer-Encoding: 7bit
X-Spam-Score: -97.2 (---------------------------------------------------)
X-Scan-Signature: a87a9cdae4ac5d3fbeee75cd0026d632
Cc: Mipshop <mipshop@ietf.org>, Jari Arkko <jari.arkko@piuha.net>, draft-ietf-mipshop-handover-key@tools.ietf.org
X-BeenThere: mipshop@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: mipshop.ietf.org
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/mipshop>, <mailto:mipshop-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:mipshop@ietf.org>
List-Help: <mailto:mipshop-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/mipshop>, <mailto:mipshop-request@ietf.org?subject=subscribe>
Errors-To: mipshop-bounces@ietf.org

Right, sorry, I did mean the Drafts Editor.

            jak

----- Original Message ----- 
From: "Vijay Devarapalli" <vijay.devarapalli@azairenet.com>
To: "James Kempf" <kempf@docomolabs-usa.com>
Cc: "Jari Arkko" <jari.arkko@piuha.net>; "Mipshop" <mipshop@ietf.org>; 
<draft-ietf-mipshop-handover-key@tools.ietf.org>
Sent: Monday, October 29, 2007 2:34 PM
Subject: Re: [Mipshop] Re: AD review of draft-ietf-mipshop-handover-key


James Kempf wrote:
> Yes, that's fine.
>
> I'll have the revisions completed by Fri. Do you want me to resubmit
> through the RFC Editor in the usual way,

You mean the IETF secretariat. :)

> and bump the version number up?

Yes.

Vijay

>
>            jak
>
> ----- Original Message ----- From: "Jari Arkko" <jari.arkko@piuha.net>
> To: "James Kempf" <kempf@docomolabs-usa.com>
> Cc: <draft-ietf-mipshop-handover-key@tools.ietf.org>; "Mipshop"
> <mipshop@ietf.org>
> Sent: Monday, October 29, 2007 1:48 PM
> Subject: Re: AD review of draft-ietf-mipshop-handover-key
>
>
> James,
>
>> jak>> If this is not clear from the current text, then perhaps you can
>> suggest a place where some additional text could be added to clarify?
>
> Ok, I was merely confused about this. Let me go read the text again,
> moment...
>
> OLD:
>     The mechanism utilizes SEND [SEND] and a public/private
>     key pair, generated on the MN using the same public key algorithm
>     as SEND, to encrypt/decrypt a shared handover key sent from the AR
>     to the MN.
> NEW:
>     The mechanism utilizes SEND [SEND] and an additional public/private
>     key pair, generated on the MN using the same public key algorithm
>     as SEND, to encrypt/decrypt a shared handover key sent from the AR
>     to the MN.
>
> OLD:
>    The message exchange between the MN and AR
>     to provision the handover key is required to be protected by SEND;
>     that is, the source address for the key provisioning messages must
>     be a CGA and the messages must be signed with the CGA private key.
>     This allows the AR to establish the MN's authorization to operate
>     on the CGA. The AR uses the CGA to name the handover key.
> NEW:
>    The message exchange between the MN and AR
>     to provision the handover key is required to be protected by SEND;
>     that is, the source address for the key provisioning messages must
>     be a CGA and the messages must be signed with the CGA private key.
>     This allows the AR to establish the MN's authorization to operate
>     on the CGA. The AR uses the CGA to name the handover key.
>     The SEND key pair is, however, independent from the handover
>     encryption/decryption key pair and the actual handover key.
>
> OLD:
>  The MN
>  generates a public/private key pair for encrypting/decrypting the
>  shared handover key, using the same public key algorithm as SEND.
> NEW:
>  First, the MN generates the necessary key pair and associated CGA
>  addresses so that the MN can employ SEND. Then the MN
>  generates a public/private key pair for encrypting/decrypting the
>  shared handover key, using the same public key algorithm as was
>  used for SEND.
>
> Finally, I noticed that the acronym CGA needs expansion in the
> the abstract.
>
> Is this enough for you to work for a new draft revision? How soon
> can you get it submitted?
>
> Jari
>
>
>
>
>
> _______________________________________________
> Mipshop mailing list
> Mipshop@ietf.org
> https://www1.ietf.org/mailman/listinfo/mipshop





_______________________________________________
Mipshop mailing list
Mipshop@ietf.org
https://www1.ietf.org/mailman/listinfo/mipshop