Re: [T2TRG] Quick Doodle T2TRG security topics (Re: New topic for T2TRG?)

On Thu, Dec 23, 2021 at 11:39 AM Carsten Bormann <cabo@tzi.org> wrote:

> Hi Rene,
>
> > During the call, you mentioned that EAP-NOOB seems un-implementable (or,
> one of your students thought so). If you could articulate what is good and
> what is bad (in terms of feature set, user experience, etc.), that would be
> good to know, as would be whether you think this can be remedied or whether
> one can improve the protocol with a minor tweak.
>
> I haven’t really looked at the protocol, only briefly at the
> implementability of the signing inputs after a student alerted me to issues
> he had.
>
> Re the protocol, I’ve heard rumors that a simpler protocol could be
> invented that solves the same set of problems, but I know nothing about
> that.
>
>

> Re the implementability: I sent some notes to Mohit; I’m sure the student
> will also write up something but it is a quiet time here in Germany right
> now.
>
>
Which part is the problem? EAP part with 802.15.4 interface or NOOB
out-of-band channel with blinking LED, its encoding on an Android
smartphone?
I  think in the implementation as reported they have used specific software
like Contiki-NG, hardware like Zolertia Firefly motes and the board and if
you don't use them or have a different version, etc. the assumptions may
not hold true.

I think that the RG would benefit from an analysis of NOOB, both with
> respect to technical details such as signing inputs, and with respect to
> players, trust relationships, outcomes, etc., and how the protocol
> addresses these.
>
>
+1

Behcet

> Grüße, Carsten
>
> _______________________________________________
> T2TRG mailing list
> T2TRG@irtf.org
> https://www.irtf.org/mailman/listinfo/t2trg
>