Re: [saag] Would love some feedback on Opportunistic Wireless Encryption

  Hi Warren,

On Wed, August 26, 2015 7:53 am, Warren Kumari wrote:
> Hi there all,
>
> I'd appreciate it if folk could have a look at this draft and provide
> any feedback.
> I'm not sure that SAAG is the right place for it, but I couldn't think
> of anywhere better.
>
> https://tools.ietf.org/html/draft-wkumari-owe-01
>
>
> Note that this is NOT intended to be the be all and end all of secure
> wireless, it is simply intended to make open wifi suck somewhat less.
> We are not claiming great security (the WPA2 4-way handshake
> significantly limits what can be achieved), and so much of the draft /
> idea is making sure that users do not get a false (or any) sense of
> security - this should be transparent to them.

  It might suck less but it still kind of sucks. You could make it
suck even less by using SAE (an 802.11 authentication protocol that
uses a PAKE to establish pairwise keys). This would address the
limitations you mention in your draft that have to do with WPA2-PSK.

> We also want it to be *really* simple, so that commodity CPE vendors
> will include "support" (basically a flag in the beacon) - this removes
> other solutions like .1X, etc.

  Another option might be to define another vendor-specific Element
to carry DH exponentials. Just tag one on the end of the first two
messages of the 4-way handshake and have each side derive a "pairwise
master key" (PMK, the thing used with the nonces in the 4-way handshake
to derive the data encryption keys) from the DH shared secret. Instead
of having everyone use the SSID as the password, just get rid of the
password!

  regards,

  Dan.

> Appreciate your time,
> W
>
> --
> I don't think the execution is relevant when it was obviously a bad
> idea in the first place.
> This is like putting rabid weasels in your pants, and later expressing
> regret at having chosen those particular rabid weasels and that pair
> of pants.
>    ---maf
>
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag
>