Re: [Teep] Use of AES-CTR in TEEP?

hannes.tschofenig@gmx.net Tue, 10 October 2023 17:59 UTC

Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: teep@ietfa.amsl.com
Delivered-To: teep@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D75C4C14CE25; Tue, 10 Oct 2023 10:59:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.104
X-Spam-Level:
X-Spam-Status: No, score=-7.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmx.net
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OAw52H3-kSaR; Tue, 10 Oct 2023 10:59:34 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 203ECC14CEE3; Tue, 10 Oct 2023 10:59:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=s31663417; t=1696960772; x=1697565572; i=hannes.tschofenig@gmx.net; bh=Fgdl6ALt5ATu1yD6y/4E/ZmU4vuBgXt/7GsaFjLsIjU=; h=X-UI-Sender-Class:From:To:References:In-Reply-To:Subject:Date; b=fLBWHl6vKbDNVigX5nSDpsmzy8yLckt05CB8KGKXkwJ2aLhOwQyeF79KlyWXJX+UPiz0OKRWcTV yXL/uxwSIt2NEzSdye1rkCKj8lzxyZtRpjQAr1gmbjjyGSOdVKrB1lPz81E+kBduFrlfvUPN8Sd08 Pb2Xh2bxlOjGwhwDq4PMn9f7Ei7UEvOpHhd0h9pJePbbdHcJQuoDKm7GhNvTp2sMHIt1+dz93xx// GDbx1zDPhfwgMlrnGrkvrFuXMDYuNyr6DMOfgKVK8g4al25Ac+QJ5WOymuTLftcVES9kCZ6pWgK40 /1oNESkFtWrrgjhMMolddr+zSU1nYHHbsjQw==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from Surface ([80.147.204.177]) by mail.gmx.net (mrgmx005 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MpDJd-1rMLC02bgF-00qf5R; Tue, 10 Oct 2023 19:59:32 +0200
From: hannes.tschofenig@gmx.net
To: 'Dave Thaler' <dthaler=40microsoft.com@dmarc.ietf.org>, teep@ietf.org, suit@ietf.org
References: <PH7PR21MB3878F05953BAF6113F429396A3C9A@PH7PR21MB3878.namprd21.prod.outlook.com> <488eb665-30fc-4be9-832d-0ccc8409db36@gmx.net> <PH7PR21MB387889BB6C524006BD889B07A3CEA@PH7PR21MB3878.namprd21.prod.outlook.com> <02e701d9fb3a$9bf15660$d3d40320$@gmx.net> <PH7PR21MB3878C1969D2493B0FAF140D9A3CDA@PH7PR21MB3878.namprd21.prod.outlook.com>
In-Reply-To: <PH7PR21MB3878C1969D2493B0FAF140D9A3CDA@PH7PR21MB3878.namprd21.prod.outlook.com>
Date: Tue, 10 Oct 2023 19:59:41 +0200
Message-ID: <034801d9fba3$8b38d960$a1aa8c20$@gmx.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQJ9CCLBr7EgUokC17mAn/qb7dmiWQMhVu8BAV7uXFkBUFbyKwL3pvgWrrb0YJA=
Content-Language: de-at
X-Provags-ID: V03:K1:/J6Kzx67GF4avZ96pZG3Blo2+zOyDY2Kpe9nCvjkVGWXIuwZVlr ocLr/lZK2wXUXoYNhMJ1aqllCgQA6YuLubxkJBGag7Ff2z0Gah+Fqb2g8MkOT8XIKa40lo4 luy7hF9y9XcAAm5JNSYIC8CQOhWztS0EQ+PGD3gd0yvpzW67l1PYx7BIB80TU/WTkG3zXx/ iguqla4s8NtUpRsYCdZgA==
UI-OutboundReport: notjunk:1;M01:P0:KRo8hLTk4X0=;x5+Ze8lxD2rOs8DoH+gKV98K66T XVJ/Oj2+NRyuUgRaYLTnRPazr70g1WAngfNNuhgw03FmCfK0Crf0qGIVz72TOT5mq8o48dNpr y32gJMkfQCEmvb6+Icb8yDeRMlffCvvwjliVSg6RE5LZRds+hfiVPQPuP4io6f2wON+HRJUDZ 4pzCxSRSsKdj2/sPcKesqBT7+g0GRd6lzfIZU/t8dXvYvyftyUsbVscOpo2H9IYnezWxRXLNQ MXoQ+DszUcTVtwvndaswYSdOClRrx/Uoiv/6y9yZQQrZlUSzjMnGgVr2xFiSFuITSro/Gce50 GwYP44Y1glmgjQOgUKmj4VYZjk2q1kgK+A0KhMKjIjnGUQ8OBluI5Edr2eWpd920ZuiRNg6/w HlXAJhs4pcU6ZT+AXFSX2bwBs90OzEj0Gj2OYQt69DsTuheNsVG4gfR2Ih50RvI/KSFl9eKWp FYULKZGwRhDvvrk2Ky+7k4JwDqk0PHERQ27MSEfAI9Aer0GvohkTF4Xx+C320GbS2kz1lPkbY Ah+CrquMHjcG3zs62Os1dSJXGF+7/P2eaTBk5ZqBlUDhs7bTKP2690/TkrnKiMGenAQMzsoPW GuNQnVvCEGfk2ypIFGkREymLkjbBGm8F1uccU6SKS1GlUrMLVubwEn4PEZw2A1uEYwWk3Kt5E Yk5QqHUes6mT/KG5s5TzpewkAWt8bz6w88jJsX01SGMjOvjaYnH8WgZU4nZq/aIPowmGj6JQV ENQWhf4PePKOlbtVnoOglaBkIqY/MRAaKb+at/z2ITIPDz/EuuqdEUxzp1JkMZLz4jpdmrH9/ CNZSgIrhGmDiJKeiL7Tq33ksI8JOVEu46/BO4BeEkCbHHZVsLu4w4fXNhDaN8DWuWW12h2ULC yCaPca3RnEDoub6NxwZbPweYY+f6Cwn0sHFn7vTotmle99VHsqGRGbiSH/jhFr+LZcFKdu0NX eXelLsXwzSYSPldV5eCKkjGunvA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/teep/syh6hzuxt8zZllGi0bGljQsWpCk>
Subject: Re: [Teep] Use of AES-CTR in TEEP?
X-BeenThere: teep@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement <teep.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/teep>, <mailto:teep-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/teep/>
List-Post: <mailto:teep@ietf.org>
List-Help: <mailto:teep-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/teep>, <mailto:teep-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Oct 2023 17:59:36 -0000

Sorry for the confusion, Dave. I have hit the "send" button a bit too fast.

It should, of course, read "This adds no new requirements to constrained IoT devices."

Ciao
Hannes

-----Original Message-----
From: TEEP <teep-bounces@ietf.org> On Behalf Of Dave Thaler
Sent: Dienstag, 10. Oktober 2023 19:41
To: hannes.tschofenig@gmx.net; teep@ietf.org; suit@ietf.org
Subject: Re: [Teep] Use of AES-CTR in TEEP?

Hannes wrote, regarding draft-suit-mti::
> I would like to have a new profile added that defines 
> suit-sha256-es256-ecdh- a128gcm for use with TEEP.
> This should be the default profile for use in TEEP.
> 
> This adds new requirements to constrained IoT devices. Constrained IoT 
> devices should use one of the other 5 profiles already defined.

Did I read that right, you want new requirements for _constrained_ devices?
Your last two sentences seem to contradict each other, so either there's a typo or I'm not understanding.

Dave

_______________________________________________
TEEP mailing list
TEEP@ietf.org
https://www.ietf.org/mailman/listinfo/teep