IETF Logo Mail Archive

[TLS] FW: New Version Notification for draft-friel-tls-eap-dpp-00.txt

"Owen Friel (ofriel)" <ofriel@cisco.com> Sat, 07 March 2020 00:22 UTC

Return-Path: <ofriel@cisco.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C61253A0E41; Fri, 6 Mar 2020 16:22:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.6
X-Spam-Level:
X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=alETWasK; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=by2CMLHJ
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1UPpBY7PyFHz; Fri, 6 Mar 2020 16:22:43 -0800 (PST)
Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F5133A0E3B; Fri, 6 Mar 2020 16:22:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3064; q=dns/txt; s=iport; t=1583540563; x=1584750163; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=IU0AmCHVbGt4Sl6FbV5NozDgoa2x8eQ+l3b4nQd8cJ8=; b=alETWasKzC/JoIe6aghCxauIblpUdOmDN0Xp8M6EisDVYZsvwOVVSw7D GMopwxVs43bAfgS2I4y6u3DA8dSUe0SQ9HCTCWI31R+K26YGfRJDxjuUO yqfHiK76oRHpNN3PGqIReg2SZ5MKCjwdZn1XQz9+u0s+vgaru/29eSPAT I=;
IronPort-PHdr: 9a23:RBzQyxW4QhtGA+PXpoubjxVe4TDV8LGuZFwc94YnhrRSc6+q45XlOgnF6O5wiEPSANSJ8OpK3uzRta2oGXcN55qMqjgjSNRNTFdE7KdehAk8GIiAAEz/IuTtank9Et5DWVtN9HCgOk8TE8H7NBXf
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0C8CADU6GJe/51dJa1kHAEBAQEBBwEBEQEEBAEBgXuBVCQsBWxYIAQLKgqEC4NGA4pqToIRmBWCUgNUCQEBAQwBASMKAgQBAYRDAheBdyQ4EwIDAQELAQEFAQEBAgEFBG2FVgyFYwEBAQEDEhERDAEBNQMLBAIBCBEEAQEDAiYCAgIwFQYBAQUDAgQBEggagwWCSgMuAQ6dYQKBOYhidYEygn8BAQWBMwIOQYMKGIIMCYEOKowoGoFBP4FYgk0+gmQBAQIBAYFJGoMPMoIskGiGFpknCoI8h1KPMIJJgQCHIZBLjnaIfJJVAgQCBAUCDgEBBYFpIoFYcBUagw0JRxgNjh2Dc4UUhUF0AoEnjjkBgQ8BAQ
X-IronPort-AV: E=Sophos;i="5.70,524,1574121600"; d="scan'208";a="443636858"
Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 07 Mar 2020 00:22:42 +0000
Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by rcdn-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id 0270MgFW019690 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Sat, 7 Mar 2020 00:22:42 GMT
Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 6 Mar 2020 18:22:41 -0600
Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 6 Mar 2020 18:22:41 -0600
Received: from NAM10-MW2-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 6 Mar 2020 19:22:41 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Xo/s5OBLQmgdvGd0Uj7FZR2ukr0ghimftYW3BS7ObSiYrznhmfzpkJ0DqkWyv7GnN0T1KmU33Wz1KJyJqCK8C4TwTS+XBay3S/ieqxk6EmX8UNeyf509YhzHdTsAIEE1C2tqdgn5Do74UmifDbKaudJMJ/JBaKMJynRNhrKRBWzuciYf09XY0Q29CYDMJIRHXgQYIPY2PgLJfwwojQuvKT5hqV7jnrRieQtxpq/UJLIfPD6CSwXP0g56yE8NZthdbT+rIZwX3AY5a5eMesIHXips6v++4uQNsQuRuiEYPY+dlycohn/Y2mRBT2d860Yi3lmBuYm6lwaobch47/60Og==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=IU0AmCHVbGt4Sl6FbV5NozDgoa2x8eQ+l3b4nQd8cJ8=; b=Z1NBPMhrDmzeEa7t2wlMy4Afhsx3JNO7+2bwVODcfJGuYxtefvwkQO435rJFPwsGoDzED+dTHNfUsPETAc8x7454wh79wnp9P+vCeWFHuhTi5uqoySJIuOuIz64hMjA4+5QL9DyWPLAO88sGeb3zE9WL+eA6HgdftTIujMkTbjZnbwxb3phlaXefHfBTs7tCL2vixA7PZinLHNYtZjqYFV3e+9XKRior4tcbuR/QLCUZMozDXRozOaL0hgWXLA1Q+C8nogDSrm7Mhn0cAZDtM7YD7PBXb9ZDSQqZuBPBKkkOQBfy/xT3x5zUQb+3DMf8+s2gulsR+UF75Tc2oVgqFA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=IU0AmCHVbGt4Sl6FbV5NozDgoa2x8eQ+l3b4nQd8cJ8=; b=by2CMLHJvFfEX2OOkLk7D9UJSQ+PSxFXfzN35lWTzgcP/JAxNIf65SN/hv8ArHkHDNjwEgmIQ879ltFITcLOn0xzBURN3yIRrRhZu6Kr5FhY2j5bF1iKjA/RTu9JYktmudVlzwjyHEWvRtSjyBJWjEHwZ/k0idw20IrfH6YBCOw=
Received: from MN2PR11MB3901.namprd11.prod.outlook.com (2603:10b6:208:138::12) by MN2PR11MB3695.namprd11.prod.outlook.com (2603:10b6:208:f2::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2793.16; Sat, 7 Mar 2020 00:22:40 +0000
Received: from MN2PR11MB3901.namprd11.prod.outlook.com ([fe80::2940:3c18:ff33:39d9]) by MN2PR11MB3901.namprd11.prod.outlook.com ([fe80::2940:3c18:ff33:39d9%4]) with mapi id 15.20.2793.013; Sat, 7 Mar 2020 00:22:40 +0000
From: "Owen Friel (ofriel)" <ofriel@cisco.com>
To: TLS List <tls@ietf.org>, EMU WG <emu@ietf.org>
Thread-Topic: New Version Notification for draft-friel-tls-eap-dpp-00.txt
Thread-Index: AQHV9BLEl5cGDuBtD0SYbOaow3Gucqg8QhdA
Date: Sat, 07 Mar 2020 00:22:39 +0000
Message-ID: <MN2PR11MB39015F60820E2EC7437EF126DBE00@MN2PR11MB3901.namprd11.prod.outlook.com>
References: <158353893696.2236.17131032460953325470@ietfa.amsl.com>
In-Reply-To: <158353893696.2236.17131032460953325470@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=ofriel@cisco.com;
x-originating-ip: [173.39.121.69]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 2ae12f20-3376-4e95-1057-08d7c22da575
x-ms-traffictypediagnostic: MN2PR11MB3695:
x-microsoft-antispam-prvs: <MN2PR11MB369512C901EC4110052A9082DBE00@MN2PR11MB3695.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 03355EE97E
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(136003)(346002)(396003)(39860400002)(376002)(189003)(199004)(8936002)(2906002)(450100002)(8676002)(81166006)(81156014)(71200400001)(66946007)(66476007)(66446008)(66556008)(64756008)(76116006)(5660300002)(6506007)(15650500001)(52536014)(33656002)(66574012)(966005)(53546011)(478600001)(86362001)(26005)(316002)(9686003)(7696005)(55016002)(186003)(110136005); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB3695; H:MN2PR11MB3901.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-ms-exchange-antispam-messagedata: M5mmTSjwrIskER8whl+OM7ykmp5iHUCZforLH9tKsGijgPJzojmOi8jbVcHAJUcUTK/Tprzwng8FNLMsTTNtZJmLicdPpA6QL+J0wqWsBu+rT3XZwBGg9UZspCZ4Zy0KVAQzdVtQSC7M+CgCX7+0rQ==
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 2ae12f20-3376-4e95-1057-08d7c22da575
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Mar 2020 00:22:39.9934 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Q/LMjiwxm45OG1lLRW03a0y1plciysm0jbte6GA0/0WMhmdsS94EJxmYPKgdFUbAKmUlW/DmnZjY6foF2eSsTg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB3695
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.12, xch-rcd-002.cisco.com
X-Outbound-Node: rcdn-core-6.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/CmRBVh5nm7djk3BywL1rGa-F5qI>
Subject: [TLS] FW: New Version Notification for draft-friel-tls-eap-dpp-00.txt
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Mar 2020 00:22:45 -0000

All,

Dan and I have a new draft that describes how a mechanism similar to the Wi-Fi Alliance Device Provisioning Profile can be used on wired networks via proposed new TLS extensions, with those extensions being leveraged in an EAP transaction. Importantly, the DPP bootstrap key format, and thus the DPP QR label, can be reused for bootstrapping a thing on both wired and Wi-Fi networks.

There are changes  required to the TLS key schedule, so part of this work overlaps with draft-jhoyla-tls-extended-key-schedule.

We hope to remote present at both EMU and TLS.

Owen

-----Original Message-----
From: internet-drafts@ietf.org <internet-drafts@ietf.org> 
Sent: 07 March 2020 07:56
To: Dan Harkins <daniel.harkins@hpe.com>; Owen Friel (ofriel) <ofriel@cisco.com>
Subject: New Version Notification for draft-friel-tls-eap-dpp-00.txt


A new version of I-D, draft-friel-tls-eap-dpp-00.txt has been successfully submitted by Owen Friel and posted to the IETF repository.

Name:		draft-friel-tls-eap-dpp
Revision:	00
Title:		Bootstrapped TLS Authentication
Document date:	2020-03-06
Group:		Individual Submission
Pages:		9
URL:            https://www.ietf.org/internet-drafts/draft-friel-tls-eap-dpp-00.txt
Status:         https://datatracker.ietf.org/doc/draft-friel-tls-eap-dpp/
Htmlized:       https://tools.ietf.org/html/draft-friel-tls-eap-dpp-00
Htmlized:       https://datatracker.ietf.org/doc/html/draft-friel-tls-eap-dpp


Abstract:
   This document defines a TLS extension that enables a server to prove
   to a client that it has knowledge of the public key of a key pair
   where the client has knowledge of the private key of the key pair.
   Unlike standard TLS key exchanges, the public key is never exchanged
   in TLS protocol messages.  Proof of knowledge of the public key is
   used by the client to bootstrap trust in the server.  The use case
   outlined in this document is to establish trust in an EAP server.

                                                                                  


Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

v2.46.0 | Report a Bug | By Email | System Status