IETF Logo Mail Archive

Re: [Drip] complexity class needed to run DRIP?

Michael Richardson <mcr+ietf@sandelman.ca> Sun, 21 February 2021 19:43 UTC

Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: tm-rid@ietfa.amsl.com
Delivered-To: tm-rid@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E79453A1043 for <tm-rid@ietfa.amsl.com>; Sun, 21 Feb 2021 11:43:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id htqGnbsFsXTf for <tm-rid@ietfa.amsl.com>; Sun, 21 Feb 2021 11:43:10 -0800 (PST)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B9F43A1042 for <tm-rid@ietf.org>; Sun, 21 Feb 2021 11:43:09 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id A0F14389EB; Sun, 21 Feb 2021 14:47:08 -0500 (EST)
Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id gAh2oTK8dUst; Sun, 21 Feb 2021 14:47:07 -0500 (EST)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 4B5CE389DF; Sun, 21 Feb 2021 14:47:07 -0500 (EST)
Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id B43A2666; Sun, 21 Feb 2021 14:43:06 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: "Card, Stu" <stu.card@axenterprize.com>
cc: tm-rid@ietf.org
In-Reply-To: <CAKM0pYNbvjiQNyTBV3rJSAkD1Hn5A5O+EhGKS5T6CFdppncyRQ@mail.gmail.com>
References: <CAKM0pYNbvjiQNyTBV3rJSAkD1Hn5A5O+EhGKS5T6CFdppncyRQ@mail.gmail.com>
X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Date: Sun, 21 Feb 2021 14:43:06 -0500
Message-ID: <15642.1613936586@localhost>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tm-rid/G7dWh5aypFo-Bny8TnmZ6RC9eG4>
Subject: Re: [Drip] complexity class needed to run DRIP?
X-BeenThere: tm-rid@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Drone Remote Identification Protocol <tm-rid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tm-rid>, <mailto:tm-rid-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tm-rid/>
List-Post: <mailto:tm-rid@ietf.org>
List-Help: <mailto:tm-rid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tm-rid>, <mailto:tm-rid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 21 Feb 2021 19:43:12 -0000

Card, Stu <stu.card@axenterprize.com> wrote:
    > Worrying about packaging of re-usable software components & mobile
    > code, my first thought is that for an entity to provably identify
    > itself in a manner not subject to replay attacks, it must be somewhat
    > heavyweight -- presumably at least a Universal Turing Machine.

I'm not convinced of that.

We need freshness.  There are some ways to get this.
  1) by providing some kind of nonce which is incorporated into the
     signed object.

  2) by including an agreed-upon time base into the signed object.

(2) is really just a predictable incremental nonce in some way.

Getting a nonce seems to require a round trip, but in the RATS Architecture,
we described a few ways involving broadcasting of handles:

https://www.ietf.org/archive/id/draft-ietf-rats-architecture-10.html#name-appendix-a-time-considerati

In the handle-based idea, the handles are not monotonically-increasing times,
but something else.

--
Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide

v2.23.0 | Report a Bug | By Email