[Roll] [roll] #142: Clarification of secure key distribution

["roll issue tracker" <[e-mail]>]

#142: Clarification of secure key distribution

 This document includes a section on Security Considerations for
 distribution of certificates required by RPL.  It explains that for RPL
 the credential is a shared key, and then goes on to say:

 "Therefore, there MUST be a mechanism in place which allows secure
 distribution of a shared key and configuration of network identity. Both
 MAY be done using (i) pre-installation using an out-of-band method, (ii)
 delivered securely when a device is introduced into the network or (iii)
 delivered securely by a trusted neighboring device. The shared key MUST be
 stored in a secure fashion which makes it difficult to be read by an
 unauthorized party.
 An example of a method whereby this can be achieved is detailed in
 [SmartObj]"


 The wording of this paragraph is not always clear:
 1. “this” in the last sentence can refer to the storage of a key in a
 secure fashion, and leave the reader wondering why there are no references
 to means of achieving secure key distribution.  SmartOb reference is
 actually such a reference.  This should be made more clear, e.g. "An
 example of a method whereby this secure key distribution can be achieved
 in detailed in [SmartObj]."
 2. Also, it would be good to be more specific about what is meant by
 “securely” here.  For example, writing if the key must be authenticated
 and kept secret between its intended users, must not be repeated (replay
 protection), etc.

-- 
-------------------------------------+-------------------------------------
 Reporter:                           |      Owner:  draft-ietf-roll-
  [e-mail]      |  applicability-home-
     Type:  defect                   |  [e-mail]
 Priority:  minor                    |     Status:  new
Component:  applicability-home-      |  Milestone:
  building                           |    Version:
 Severity:  Active WG Document       |   Keywords:
-------------------------------------+-------------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/roll/trac/ticket/142>
roll <http://tools.ietf.org/wg/roll/>