Re: [Drip] I-D Action: draft-ietf-drip-auth-48.txt

[[e-mail]]

Hi Adam,

Seems this text in the abstract should be deleted "remove or red".

Also, did you considered these comments from Paul?

==
Regarding 3.1.2.2. UA Signed Evidence

I don't understand why unpredictable means evidence? If I observe someone elses
unpredictable sends, can't I just retransmit those? Unless the signature
contains "live data", I can't tell it is a not a replay. I understand the two
timestamps and location/vector data are supposed to limit replays, but if those
parts are successful for that, I don't understand why an unpredictable
component is still needed. Also, what is unpredictable? I think a KDF with
initial seed of "Paul is crazy" produces a seemingly unpredictable stream, but
to those knowing the seed, it is totally predictable.

        signing data that is guaranteed to be unique, unpredictable and easily
        cross checked

How does an IoT device do this? These famously do not have strong random
sources? If they do, would they need to use a construct similar to GCM where
part is a counter and part is pseudorandom to ensure the uniqueness without
needing to store all previous "unpredictable" (aka random/unique) data?

        If an attacker (who is smart and spoofs more than just the UAS
        ID/data payloads) willingly replays a DRIP Link message, they
        have in principle actually helped by ensuring the DRIP Link is
        sent more frequently and be received by potential Observers.

But it would have spoofed its time and location of another device? I would
not all that "actually helping" ? This paragraph confuses me.

Why are there colour codes? Is that an aviation thing?
==

Thanks.

Cheers,
Med

> -----Message d'origine-----
> De : Tm-rid <[e-mail]> De la part de internet-
> [e-mail]
> Envoyé : vendredi 16 février 2024 17:36
> À : [e-mail]
> Cc : [e-mail]
> Objet : [Drip] I-D Action: draft-ietf-drip-auth-48.txt
> 
> Internet-Draft draft-ietf-drip-auth-48.txt is now available. It is a
> work item of the Drone Remote ID Protocol (DRIP) WG of the IETF.
> 
>    Title:   DRIP Entity Tag Authentication Formats & Protocols for
> Broadcast Remote ID
>    Authors: Adam Wiethuechter
>             Stuart Card
>             Robert Moskowitz
>    Name:    draft-ietf-drip-auth-48.txt
>    Pages:   45
>    Dates:   2024-02-16
> 
> Abstract:
> 
>    The Drone Remote Identification Protocol (DRIP), plus trust
> policies
>    and periodic access to registries, augments Unmanned Aircraft
> System
>    (UAS) Remote Identification (RID), enabling local real time
>    assessment of trustworthiness of received RID messages and observed
>    UAS, even by Observers lacking Internet access.  This document
>    defines DRIP message types and formats to be sent in Broadcast RID
>    Authentication Messages to verify that attached and recent detached
>    messages were signed by the registered owner of the DRIP Entity Tag
>    (DET) claimed. remove or red
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdata
> tracker.ietf.org%2Fdoc%2Fdraft-ietf-drip-
> auth%2F&data=05%7C02%7Cmohamed.boucadair%40orange.com%7Cccecdc8fda3845
> 21e6ab08dc2f0d5394%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%7C638436
> 981478824878%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luM
> zIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=ubHCMldyYeYhXwJmI
> MyvcMpfkSJtC9a7QVso9c8bKTc%3D&reserved=0
> 
> There is also an HTML version available at:
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> ietf.org%2Farchive%2Fid%2Fdraft-ietf-drip-auth-
> 48.html&data=05%7C02%7Cmohamed.boucadair%40orange.com%7Cccecdc8fda3845
> 21e6ab08dc2f0d5394%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%7C638436
> 981478831591%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luM
> zIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=2LN1uNL1YZLkFq%2F
> nRdipNFkcOKyTzdyOTvMUDNyOrAw%3D&reserved=0
> 
> A diff from the previous version is available at:
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fauth
> or-tools.ietf.org%2Fiddiff%3Furl2%3Ddraft-ietf-drip-auth-
> 48&data=05%7C02%7Cmohamed.boucadair%40orange.com%7Cccecdc8fda384521e6a
> b08dc2f0d5394%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%7C63843698147
> 8836120%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLC
> JBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=eHQGiABZ%2BXYVdR55TJY9
> EclmTtQRs5JOW7zTnIqlCJQ%3D&reserved=0
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 
> 
> --
> Tm-rid mailing list
> [e-mail]
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> ietf.org%2Fmailman%2Flistinfo%2Ftm-
> rid&data=05%7C02%7Cmohamed.boucadair%40orange.com%7Cccecdc8fda384521e6
> ab08dc2f0d5394%7C90c7a20af34b40bfbc48b9253b6f5d20%7C0%7C0%7C6384369814
> 78840458%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiL
> CJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=uf5BWML06BUAPFjMJnEyF
> OS22jOfztE3Vy%2FJn0iz3dM%3D&reserved=0
____________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.