Re: [tcpm] Test vectors for RFC5925 algorithms?

Joseph Touch <touch@strayalpha.com> Tue, 31 March 2020 18:49 UTC

Return-Path: <touch@strayalpha.com>
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C19C3A26C1 for <tcpm@ietfa.amsl.com>; Tue, 31 Mar 2020 11:49:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.454
X-Spam-Level:
X-Spam-Status: No, score=0.454 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_NEUTRAL=0.652, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rIHI5olhpgLC for <tcpm@ietfa.amsl.com>; Tue, 31 Mar 2020 11:49:05 -0700 (PDT)
Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A25243A26BD for <tcpm@ietf.org>; Tue, 31 Mar 2020 11:49:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=To:References:Message-Id: Content-Transfer-Encoding:Cc:Date:In-Reply-To:From:Subject:Mime-Version: Content-Type:Sender:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=fT1g5dGoE1sywKAPnR7bIUa9X1aVPNMPrqEPuw5z+Ac=; b=4c0cboovBZR0MfXs8CXbmNT6Z X0HT8k7SFAeD+gK3LFtPN1hHRltaFINfOLTAX6NdkfkD6F7R+StFjgH//HWpjVLP3ya2OJoGh8egq i7rUPB7TxaVLbX+LIoyqKFukWfhuaq8sbDW7aABwLafhUSFQT7+7McqoFTyEU5AINcYe1Y2vhYs24 xnI5yvsl2f/CsZrrJfthAYcCYiZmOjCPIoShy5B6WePiOKYQh5P7cGkM98IlKyz/ha5gWCuoz5TSn EDQ9IP68unKfQ+vmW08lZxDFpXmjBpY1Yctj34wsWPoNtzJHV6rNW6upzljURXGyMeTBaJ3n7lAwv bdJf+tUmw==;
Received: from cpe-172-250-225-198.socal.res.rr.com ([172.250.225.198]:55863 helo=[192.168.1.10]) by server217.web-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from <touch@strayalpha.com>) id 1jJLwa-003NaB-3Y; Tue, 31 Mar 2020 14:49:05 -0400
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.5\))
From: Joseph Touch <touch@strayalpha.com>
In-Reply-To: <CACS3ZpCawjTF4YMg+Rm7pOkjO2NQB-BZLBvobZCg2kyRQgaNzw@mail.gmail.com>
Date: Tue, 31 Mar 2020 11:48:44 -0700
Cc: tcpm@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <AFABEFAB-AA58-4599-94E3-06889E38DC01@strayalpha.com>
References: <CACS3ZpCawjTF4YMg+Rm7pOkjO2NQB-BZLBvobZCg2kyRQgaNzw@mail.gmail.com>
To: juhamatk@gmail.com
X-Mailer: Apple Mail (2.3445.9.5)
X-OutGoing-Spam-Status: No, score=-1.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server217.web-hosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - strayalpha.com
X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com
X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Archived-At: <https://mailarchive.ietf.org/arch/msg/tcpm/otNI2rmLLIHTIQ4cM85md5F_tHg>
Subject: Re: [tcpm] Test vectors for RFC5925 algorithms?
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group <tcpm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tcpm>, <mailto:tcpm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tcpm/>
List-Post: <mailto:tcpm@ietf.org>
List-Help: <mailto:tcpm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Mar 2020 18:49:07 -0000

Hi, Juhamatti,

At best, those might be an addendum to RFC 5926. RFC 5925 deliberately does not specify any algorithms.

However, TCP MD5 was widely deployed without any such test vectors in the RFC series (or elsewhere I could find, FWIW).

Joe

> On Mar 31, 2020, at 3:44 AM, juhamatk@gmail.com wrote:
> 
> Hello,
> 
> I have been searching for test vectors for RFC5925/5926 algorithms for
> TCP AO and to my surprise it seems that such do not exist. Am I
> correct here?
> 
> Even though test vectors for HMAC SHA1 (RFC2202) and AES CMAC
> (RFC4493) are available, it would be useful to have example test
> vectors for frames using TCP AO - otherwise implementations end up
> easily not to match. As RFC5925 is 47 pages, there is a room for error
> and only one mismatch is needed for MACs not to match.
> 
> I think publishing a new RFC for them would be good, but probably
> takes some time. Even unofficial, but verified, test vectors on some
> specified example frames (with and without TCP options), e.g. on this
> mailing list or otherwise, would be a very good start to get TCP AO
> more widely implemented. If such already are available somewhere,
> please do let me know.
> 
> Thanks,
> --
> Juhamatti
> 
> _______________________________________________
> tcpm mailing list
> tcpm@ietf.org
> https://www.ietf.org/mailman/listinfo/tcpm