[siesta] SSE/KMP - the westbound interface

Robert Moskowitz <rgm@labs.htt-consult.com> Mon, 09 December 2013 18:28 UTC

Return-Path: <rgm@labs.htt-consult.com>
X-Original-To: siesta@ietfa.amsl.com
Delivered-To: siesta@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B9E61AE427 for <siesta@ietfa.amsl.com>; Mon, 9 Dec 2013 10:28:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.799
X-Spam-Level:
X-Spam-Status: No, score=0.799 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RP_MATCHES_RCVD=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hRyPDfAIdjvA for <siesta@ietfa.amsl.com>; Mon, 9 Dec 2013 10:28:08 -0800 (PST)
Received: from klovia.htt-consult.com (klovia.htt-consult.com [IPv6:2607:f4b8:3:0:218:71ff:fe83:66b9]) by ietfa.amsl.com (Postfix) with ESMTP id 65C741AE418 for <siesta@ietf.org>; Mon, 9 Dec 2013 10:28:08 -0800 (PST)
Received: from localhost (unknown [127.0.0.1]) by klovia.htt-consult.com (Postfix) with ESMTP id 00D2662A62 for <siesta@ietf.org>; Mon, 9 Dec 2013 18:28:03 +0000 (UTC)
X-Virus-Scanned: amavisd-new at localhost
Received: from klovia.htt-consult.com ([127.0.0.1]) by localhost (klovia.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3IjEtwPliim4 for <siesta@ietf.org>; Mon, 9 Dec 2013 13:27:53 -0500 (EST)
Received: from lx120e2.htt-consult.com (lx120e2.htt-consult.com [208.83.67.155]) (Authenticated sender: rgm@labs.htt-consult.com) by klovia.htt-consult.com (Postfix) with ESMTPA id 040FC62A5D for <siesta@ietf.org>; Mon, 9 Dec 2013 13:27:52 -0500 (EST)
Message-ID: <52A60BA8.3020701@labs.htt-consult.com>
Date: Mon, 09 Dec 2013 13:27:52 -0500
From: Robert Moskowitz <rgm@labs.htt-consult.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130625 Thunderbird/17.0.7
MIME-Version: 1.0
To: siesta@ietf.org
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: [siesta] SSE/KMP - the westbound interface
X-BeenThere: siesta@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "SessIon layEr SecuriTy Approach discussion list." <siesta.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/siesta>, <mailto:siesta-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/siesta/>
List-Post: <mailto:siesta@ietf.org>
List-Help: <mailto:siesta-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/siesta>, <mailto:siesta-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Dec 2013 18:28:10 -0000

We are making progress on a well crafted problem statement.  Such things 
are very important, but need some meat here on the bones...

A number of conversations around the westbound interface.  What are the 
selectors passed to the KMP?  What is returned?  I will take a stab at 
it, and hoepfully I will get so good feedback (observation - some of you 
have done this for other KMP consumers like ESP):

 From SSE to KMP for setup request:


What type of security context:  Unicast or multicast.  And for 
multicast, a single SPI or SPI per transmittor?
What SSE format
What ciphersuite: Crypto-algo{&mode of operation], keysize
Other?

For rekey request:
SPI

Return from KMP:

SPI
KEYMAT (size, key, type)  Where type is unicast or group?


Of course if there is some specific copyable text from an existing API 
document, that would help a lot.