Re: [saag] post-X509 cryptographic identities

[Tony Rutkowski <[e-mail]>]

Hi Peter,

Ruth was the leader of one of the higher level SDNS teams.  If you go to 
the paper on SP4 (IPSEC), you can see how PKI is used and managed in the 
paper by Branstad, Dorman, Housley, and Randall.

> SP4 was designed to be independent of encryption algorithm and method 
> of key distribution. Either symmetric or asymmetric algorithms can be 
> used.
> SDNS uses SP4 with a symmetric key algorithm. SP4 depends on the key 
> manager to establish and update traffic keys. The SDNS key manager 
> uses public key cryptography to generate these traffic keys
--tony r

On 2020-02-12 10:51 AM, Peter Gutmann wrote:
> Tony Rutkowski <[e-mail]> writes:
>
>> The earliest public description of PKI development and objectives can be
>> found in the seminal paper presented by Ruth Nelson in 1987.  See Ruth
>> Nelson, SDNS Services and Architecture, 10th National Computer Security
>> Conference Proceedings, Sept 1987.
> Uhh, that doesn't talk about PKI at all, it talks about SP3/SP4, key
> agreement/transport, and the use of key management centres.  In particular
> certs are issued by the KMC, which makes it more a type of server-assisted
> crypto mechanism where you contact a server in order to communicate securely
> with someone else, which was done by the Public File about a decade earlier.
>
> Peter.