Return-Path: X-Original-To: secdir@ietfa.amsl.com Delivered-To: secdir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 035C3129413; Mon, 10 Oct 2016 00:03:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.895 X-Spam-Level: X-Spam-Status: No, score=-4.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.996, WEIRD_PORT=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5SiE-sT2REXD; Mon, 10 Oct 2016 00:03:24 -0700 (PDT) Received: from smtprelay.restena.lu (smtprelay.restena.lu [IPv6:2001:a18:1::62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6769A128E18; Mon, 10 Oct 2016 00:03:24 -0700 (PDT) Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id B678243A7A; Mon, 10 Oct 2016 09:03:22 +0200 (CEST) To: Simon Josefsson , Kathleen Moriarty References: <87fuosqtkh.fsf@latte.josefsson.org> <66a779c8-d87b-7c70-c7cf-7eabc48f9880@lounge.org> <20160924111622.6d1308ce@latte.josefsson.org> <69d90890-3c84-46e2-d1ef-0e264e28d568@lounge.org> <20161010081355.2a597c69@latte.josefsson.org> From: Stefan Winter Openpgp: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66 Message-ID: Date: Mon, 10 Oct 2016 09:03:22 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 MIME-Version: 1.0 In-Reply-To: <20161010081355.2a597c69@latte.josefsson.org> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="hrKatsw4Q6t4NNH830pfUTQEgVtvQ09hv" Archived-At: Cc: draft-harkins-salted-eap-pwd.all@ietf.org, "secdir@ietf.org" Subject: Re: [secdir] secdir review of draft-harkins-salted-eap-pwd-06 X-BeenThere: secdir@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Security Area Directorate List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Oct 2016 07:03:27 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --hrKatsw4Q6t4NNH830pfUTQEgVtvQ09hv Content-Type: multipart/mixed; boundary="IojGbuDJ04kED0DIUDqLV7Q2hAONTgrkB"; protected-headers="v1" From: Stefan Winter To: Simon Josefsson , Kathleen Moriarty Cc: Dan Harkins , "secdir@ietf.org" , draft-harkins-salted-eap-pwd.all@ietf.org Message-ID: Subject: Re: [secdir] secdir review of draft-harkins-salted-eap-pwd-06 References: <87fuosqtkh.fsf@latte.josefsson.org> <66a779c8-d87b-7c70-c7cf-7eabc48f9880@lounge.org> <20160924111622.6d1308ce@latte.josefsson.org> <69d90890-3c84-46e2-d1ef-0e264e28d568@lounge.org> <20161010081355.2a597c69@latte.josefsson.org> In-Reply-To: <20161010081355.2a597c69@latte.josefsson.org> --IojGbuDJ04kED0DIUDqLV7Q2hAONTgrkB Content-Type: multipart/mixed; boundary="------------79D20493164A1EEB6144DB6A" This is a multi-part message in MIME format. --------------79D20493164A1EEB6144DB6A Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello, > I still believe it is a bad idea to describe non-iterative password > protection schemes at all. We have had 15+ years of bad incidents with= > salted password databases that suggest it is time to stop doing that. This is not the ocean this draft attempts to boil. The draft does not make any recommendations about how to store passwords.= It attempts to make password databases usable with a new EAP type. I don't think you are actually stating that salt-hash databases don't exist in massive amounts in deployed reality? Because saying so would be quite silly; they do exist. If we were to ignore that deployed reality and spec the draft merely around PBKDF2 and some, we'd have an EAP type supporting only a tiny fraction of password databases out there. All the rest of deployed reality is left without a good zero-knowledge EAP type and is remains stranded with "traditional" PKIX-style server validations with either a cleartext password or a lousy NT-Hash inside the TLS tunnel - which, as our experience in a world-scale EAP-based roaming consortium shows, means: no protection at all for many because end users ignore all certificate warnings given half a chance to. It is actually quite easy to improve security for virtually everybody using EAP: it's these few paragraphs in the draft which describe how to use salted databases. Greetings, Stefan Winter --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=C3=A9seau T=C3=A9l=C3=A9informatique de l'Education= Nationale et de la Recherche 2, avenue de l'Universit=C3=A9 L-4365 Esch-sur-Alzette Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xC0DE6A358A39DC66 --------------79D20493164A1EEB6144DB6A Content-Type: application/pgp-keys; name="0x8A39DC66.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x8A39DC66.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2 mQINBFIplEwBEADTSz+DS8nio+RSvfSLLfaOnCGi1nqpn8Pb1laVUyEvnAAzZ5je miS88GxfiDH6hUGlWzcaW0hCfUHGiohr485adbjxRksPngWgAt/1bRxpifsW3zOb Fjgog01WWQV5Sihlwc4zr8zvYbFA5BJZ6YdkR9C5J015riv5OS30WTjA65SSXgYr b7zJWPwmegTFwE093uBFvC39waz3xYpVu5j87nO6w2MVQt/8sY2/2BFPEq+xfOaj l18UEwc7w8SCgnZdlVNcmEK4UBvJuwS/1lsR2JeQa8Gu1EDxC7PRgMgNXsDSWnnB e9aVmfG54+6ILe1QH2dwk9sPBQT5w2+vjijrb3Dv9ur+1kN+TNU2XE436jVpnnY/ 3OsLdix30STQn4Q/XOm7YoVMeDwwviefilRxzK0dXA+wKj92T68Od82CFxuZqPAg BCVmWfQM91iK9piqFK+QP+R3vF6+NGDBdwbe68iVKs0v5L8XmbxBQndjpmo+lo2a smBR2TAIfZHaKdgtBw13u3GPVVKlg/Mpko8ki9JOSem2aFyi3kQEVKptWgXT3POl 97DWJzsR5VyKz6GOx9kJAEISRyLZwm0wqh8+9LCza5oeIKW381lzq1b9x30vOh8C BSQQJ+cG9ko0yPHAj7Suw2TmPXx1qMctmE6Ahq82ZW30SljdZby8WQuR2wARAQAB tDxTdGVmYW4gV2ludGVyIChSRVNURU5BIGtleSAyMDEzKykgPHN0ZWZhbi53aW50 ZXJAcmVzdGVuYS5sdT6JAjkEEwECACMFAlIplEwCGwMHCwkIBwMCAQYVCAIJCgsE FgIDAQIeAQIXgAAKCRDA3mo1ijncZj7/D/99hVS+mJr8dSPCaDaUFFxBiT2eI1Lo R8VKEerTCRw5BsdL6pN2eRJZ9NmsqWo1ynWVHEzO91bNZ+oZGgyoNohcBAI7p+r0 qUTzkyqwdZO4kMm0pqKoM9xkP3tf2mjGujKjOz4Y7S7wnz2ZFokeUsecoRVJF/++ /qHnmeWLn44J1HUKLHYCjMu+QXGOgGXgz024jQ5eUrnPwzNp0Z90AFVHlWC+bymt y/ToIUUCQqS5Ff0jzdWLd8U695OG9iGvjBQT1LdEjsfbAwuKV5UcnpxNqUpUwKa5 9hdX5/2cMZP07FI1UXwnBlxa8rJfdb13FLjSKX4vUUHedYUZMjMPgcwl1a+zGE22 lHiSQWgP8QLA/W3BLsi22ERCEPZBfexOeOtaWIItDIz18fIaQoMDoRPshzar0JI2 CzLYsyeKySAtYJEHFVoLmMvhkwzBmgqA/BEswUA67CfCr1jFHRXdpmWM7YkyAmMa 9q6LwquWKS5+MXlUXe/3oZUcgpw/T9Uuy3Jo3RdS7B3jFcWaVr6KsO/A9u1gr/aY n5M+iJTQSj4vzqtkQaJTpSspRZoKa66HZt3IwSYiDiYZqtM83ynuj9kjnZzGfnuT aNIi996q6Mptr33mOzIE1wmMqnJYwTr3EcNtf483q/qrJwh5ES8Q9xY7aat/ZcSl 8fKubW4TlfVr8YhGBBARAgAGBQJSKZUGAAoJEPo5vdH/HhVmYTgAn24eoqO/O98o vNpt08Uab/+/tmYKAJ9kjXm9Njz5h33efzeelZUa484rr7kCDQRSKZRMARAAvBPp n7FQq7LQ5glohtbL6XIEo1U4X67S0TzUYieENSWSVYuWYIhCBldmWdmH8Bpj/qHe qdon7v+SLtR4WngzMR9toupKcFfHnbP9kpazTSB2ySHxXWGX1gJOpPXdCcg9iveK BHEsDn00ThTcPsvtXpnnzET16pXIvOXO0bxTmVZ4INIF1SWgvYma/g8kBbgXLpkj 8tOywBqFiiYPEZlDeCxDHiMgUDh6olda9K/0TZFTdMPUgjKuubfAeaDNCOrVt4Rj mFOaRLikcZocmgJhm3z/j25x7/mnNu+0di1H/S67YGQJ+pqCFInzIXDx7aRW2+JC iqsY2X3xOPWZZzjyis5SNnfOcPH3gt2hYz1fy+thsBGf4NgCN01JRqIJ2/MOQCgU dwh+9l8xqaJvCkUHM4hVh4W62MAe1u7UEqQbvvNEqxM5034vcvlE+/LRkrDCspw+ 2YJ9QyroLerVRwW5DVleP8Ifi8VB3yD80nqXYs9aqRy0BkDNIQ43ERhESMt8dJqr NkxgC6pemZrhNwyDh+hy2kPNGQh/iBpdKuH1o3E24TIZoV2v3YHvzob7aAYHddE/ PofAXhJW7I9mAs+HdWDmnI8ckuPDFpFH+Y/BFGvEXgcnJAJ1wEvf+4LuiIi0MHjR 4EWFn9vvoFDAIqD10h3FSd3D59HGtdSsNn4XaCsAEQEAAYkCHwQYAQIACQUCUimU TAIbDAAKCRDA3mo1ijncZhBtEACL036ddjc5pFoYIdoUY1vT8SMXJNquewCnL1qu DADzqDZFU5GNlQEy10krSfBwlTb9ahTtE0JFrOdZwUZtoa1Pgfr8nU6KOgrXPHbN jS/9dyc5CwGVVIpOavIm2CsMVDJ9LCF/NT+u/t1k6eGfHhPVl3dUQyDa/lzc1chK UIVQYQkFmr0A/iXP+29lFCaI+IeyU0bSdZhezDwUROn5vEx+fiPZyHDShCb+BxJv /o2LQp9JHenCiSbO+ioRZdxgbWfoKBuXOfmSStqMWXas/gZ5vS3xq72LNtKPRxgp jX3P8Zml1XDqpcBau7eK75VKE0Yd06YxnUIsbcEzInUc3uzW/u0DFpXYkMJb0XIv JyUt5yYPKfV13N8kSkPi5pLxm8yuftXMzfgeFMR7nafY3glTVj/TxElzg6xeZNqf C2ZjIbBtZg9ylHU8u8wwB+dX282crs0R3N9A064C71/cXlBqcjzjlKH2NUIWGxr+ od3TXFIFjszSU3NgMPKrWNhFLLwS81MpbkOe73s6aDhS8RDyNucoxtKXriLR+4Xi u4+pyj5ukYP1JqpB3ZobY/XZgCnJMye+7xeTpIDJ1LPORxM3NNAElyb26lxAK2P+ km+EpI0Zzz6rNSCfg5jYQ474+e/GBgaSG4MlaPoZ+XAfN46u1Xjjv1/AkkA4IA6m 5zP5og=3D=3D =3D3NUt -----END PGP PUBLIC KEY BLOCK----- --------------79D20493164A1EEB6144DB6A-- --IojGbuDJ04kED0DIUDqLV7Q2hAONTgrkB-- --hrKatsw4Q6t4NNH830pfUTQEgVtvQ09hv Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJX+z06AAoJEMDeajWKOdxmevkP/1zfKQ4sdfNR/m4p7AqxUtW9 F8XEbN74DMJeD4lRJhiKAXq17EZZed6uNDGp9GGWY+j2MHA55DRTv2lQlk1tH2fI Z4uYbG2wpWhubCA4Ooxn7DcxN4+gKc0b4CeN9m1IIkSJ4TX3IDoggyQTbTt+7DND ImVsLdkqV46IECPJdZ46Zm13jHoWHIMAgsWV7ve1YKVFPhteUSNG8DRWke6a77BK hVHHgE56QHgtmo1MjB4pYh/TZT7D2lBurTUnQywxEVI0I8lg6O461oJhGUnq7r3P uSA7cSwd6GVDLojamDE8/rkA4hMQ+/GxZs4tM8sASAV3Po8MqAN4jLwNQpU/NDD5 pRmngXk+MEE2JNq4eLUox2/52749yeWrO8B2uWHRlDoBAAgUwj8kz5Do4zeUNDvX b7owHbQyRN0aXcTAMP0ykrf1DBhkIb3PFBB0ULx6hCdK0WQyULqiRXgqqrfvRO1g sBcC0ek+UK8HMQpYVSlcL+itXg7JrTu1xpCUnjVCZ5a3SeFnyFd5Z5kv8djG6q4p MDJenHHLIlG8BiJ/C9K7MsVbEnuEaP/v/gLosdGKEK2fpltT1ostaft5ayKP17st Sunm/bFZUh35dhry1WT8qL8qfjGw1+f7IP7UmwW6cHZDjxDNfl9CLYX77FTCWRC6 SIPZaqEGJPwR+NbYv0hv =j80d -----END PGP SIGNATURE----- --hrKatsw4Q6t4NNH830pfUTQEgVtvQ09hv--