IETF Logo Mail Archive

Re: [secdir] secdir review of draft-kuegler-ipsecme-pace-ikev2

Nico Williams <nico@cryptonector.com> Thu, 14 April 2011 20:58 UTC

Return-Path: <nico@cryptonector.com>
X-Original-To: secdir@ietfc.amsl.com
Delivered-To: secdir@ietfc.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfc.amsl.com (Postfix) with ESMTP id 395E2E0876 for <secdir@ietfc.amsl.com>; Thu, 14 Apr 2011 13:58:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.877
X-Spam-Level:
X-Spam-Status: No, score=-1.877 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622]
Received: from mail.ietf.org ([208.66.40.236]) by localhost (ietfc.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V6lK-5hwOMQh for <secdir@ietfc.amsl.com>; Thu, 14 Apr 2011 13:58:57 -0700 (PDT)
Received: from homiemail-a66.g.dreamhost.com (mailbigip.dreamhost.com [208.97.132.5]) by ietfc.amsl.com (Postfix) with ESMTP id A438BE085F for <secdir@ietf.org>; Thu, 14 Apr 2011 13:58:56 -0700 (PDT)
Received: from homiemail-a66.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a66.g.dreamhost.com (Postfix) with ESMTP id F26C535007F for <secdir@ietf.org>; Thu, 14 Apr 2011 13:58:55 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=cryptonector.com; h=mime-version :in-reply-to:references:date:message-id:subject:from:to:cc: content-type; q=dns; s=cryptonector.com; b=tvl0p/lTKUabZRX1ym/b6 N5nQv565nB2xHSRCAn2ddDIo/panqjdo835sqQnxxZ6ykcyfiAvLrZwk84qpqaC3 FAPvwindkt3eT6XeKnvhuJLRBhibP3VaHD1sGFMAiJ6+rkrLnZUaHyej0f4xXZmY MvhimNhcxigCQVsXOjLAlQ=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=gRwQ5Fq8PMQ70Y0YyyYU UDdtaGI=; b=MH5ZaZxSrrohGTYwBGFLBYdkSM7Mmo0q3tChHKVGxAD3iYpB7wXX XSicueoNEaEZe3coF3wGK3b95JBR7FRhTnBii8XDwz0Ngf1HSuaODEsuaqXEPWE5 PZDb5XF6wNGMUeX28nEEXxNoLGr1+4BISyEMrpJ6V1HgQ7u3lm2dVXo=
Received: from mail-vw0-f44.google.com (mail-vw0-f44.google.com [209.85.212.44]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a66.g.dreamhost.com (Postfix) with ESMTPSA id C2DD3350058 for <secdir@ietf.org>; Thu, 14 Apr 2011 13:58:55 -0700 (PDT)
Received: by vws12 with SMTP id 12so2070761vws.31 for <secdir@ietf.org>; Thu, 14 Apr 2011 13:58:55 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.52.112.69 with SMTP id io5mr1782299vdb.94.1302814735176; Thu, 14 Apr 2011 13:58:55 -0700 (PDT)
Received: by 10.52.163.228 with HTTP; Thu, 14 Apr 2011 13:58:55 -0700 (PDT)
In-Reply-To: <ldvk4ewd0ac.fsf@cathode-dark-space.mit.edu>
References: <AC6674AB7BC78549BB231821ABF7A9AEB530189991@EMBX01-WF.jnpr.net> <4DA69C8A.7000305@gmail.com> <BANLkTi=3WCvUgtLdNknDog--UniYM1G9Bg@mail.gmail.com> <4DA72605.10506@gmail.com> <BANLkTikXF=S3NugNBErZZGLngyCECh=jTw@mail.gmail.com> <ced915e87f60e86c5db6f21f7e94d1a3.squirrel@www.trepanning.net> <BANLkTimqGh84igi5iVJop6O2reG8WF8s-Q@mail.gmail.com> <9c05d036d0e99a053cf977d3f2c441db.squirrel@www.trepanning.net> <BANLkTikF_eG3-CfoJi+6fthvt0gg6D=kwQ@mail.gmail.com> <4DA73C26.5070407@gmail.com> <BANLkTin7tZwKX5zK6Qq2HOtWH17k0omtMA@mail.gmail.com> <4DA74F2A.2060504@gmail.com> <ldvk4ewd0ac.fsf@cathode-dark-space.mit.edu>
Date: Thu, 14 Apr 2011 15:58:55 -0500
Message-ID: <BANLkTinm1fbtaxtTBRP-eDQpcm3QUqXUgA@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: Tom Yu <tlyu@mit.edu>
Content-Type: text/plain; charset="UTF-8"
Cc: "draft-kuegler-ipsecme-pace-ikev2@tools.ietf.org" <draft-kuegler-ipsecme-pace-ikev2@tools.ietf.org>, "secdir@ietf.org" <secdir@ietf.org>
Subject: Re: [secdir] secdir review of draft-kuegler-ipsecme-pace-ikev2
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Apr 2011 20:58:58 -0000

On Thu, Apr 14, 2011 at 3:51 PM, Tom Yu <tlyu@mit.edu> wrote:
> Yaron Sheffer <yaronf.ietf@gmail.com> writes:
>
>> Yes, PACE is a ZKPP, and the AUTH payloads depend on values that the
>> attacker cannot compute (PACESharedSecret). Again, this assertion is
>> based on the mathematical proof of the protocol.
>
> Given Nico's comments, perhaps the fact that PACE is a ZKPP should be
> made more obvious earlier in the document.

Yes please.  I really needed to see figure 1 from the paper.  I also
needed to read section 4.2 of the I-D.

This is a clever ZKPP.

Nico
--

v2.23.0 | Report a Bug | By Email