Re: [xmpp] XMPP stanza encryption + EXI compression

Richard Barnes <rlb@ipv.sx> Thu, 14 March 2013 17:19 UTC

Return-Path: <rlb@ipv.sx>
X-Original-To: xmpp@ietfa.amsl.com
Delivered-To: xmpp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8810911E81BA for <xmpp@ietfa.amsl.com>; Thu, 14 Mar 2013 10:19:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.976
X-Spam-Level:
X-Spam-Status: No, score=-2.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1ItVsN8p7J8t for <xmpp@ietfa.amsl.com>; Thu, 14 Mar 2013 10:19:21 -0700 (PDT)
Received: from mail-oa0-f53.google.com (mail-oa0-f53.google.com [209.85.219.53]) by ietfa.amsl.com (Postfix) with ESMTP id A5ABB11E819D for <xmpp@ietf.org>; Thu, 14 Mar 2013 10:19:21 -0700 (PDT)
Received: by mail-oa0-f53.google.com with SMTP id m1so2521702oag.26 for <xmpp@ietf.org>; Thu, 14 Mar 2013 10:19:19 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:x-originating-ip:in-reply-to:references :date:message-id:subject:from:to:cc:content-type:x-gm-message-state; bh=PqthEniPHlqadnJbK47tBSI7NWL4XY8H38SwLnBx5Jg=; b=Y1trA2XIvBJnhSM2UTn0R4IOvOilbxxgw7WfAo7dxys5n0YJTiN3wNmAbt4phdfsNY AShS5K4D6LY/N3l82qlJga9RQGHTw5QP7E6zxuQ1rVGa1u+sJ2jz+tPWJQaMZ9B0uLiK FOVGTCr264YJUQgRzLjILXMn3JPf7SIV8QXMYfb0po03QOgSG+9/aPrZiFUeRXAwETje 0tQwKFVDx7yUmXZPQWrQOZ8+UDCenRcYxmsSoDFpG6+h0ObonLXbMDXNGokfkW/EaT0p l1cImAdlYdP9EqrdEwokV3Bkvu2G7pqnobzBkuFFKSqsCwU2bWDkkZ4BzWIhMr6NZ5ya bsZA==
MIME-Version: 1.0
X-Received: by 10.60.170.140 with SMTP id am12mr1490861oec.125.1363281559678; Thu, 14 Mar 2013 10:19:19 -0700 (PDT)
Received: by 10.60.40.233 with HTTP; Thu, 14 Mar 2013 10:19:19 -0700 (PDT)
X-Originating-IP: [130.129.20.81]
In-Reply-To: <1693EFE1FD641C42A0D542FCBC732DE698E53473@EX3.YODA.UTOPIA.LOCAL>
References: <1693EFE1FD641C42A0D542FCBC732DE698E53473@EX3.YODA.UTOPIA.LOCAL>
Date: Thu, 14 Mar 2013 13:19:19 -0400
Message-ID: <CAL02cgSFsW1ccdqb2tq5bCE_SbwdmOLVf81+v07ZOoQWFvhk6Q@mail.gmail.com>
From: Richard Barnes <rlb@ipv.sx>
To: Peter Waher <Peter.Waher@clayster.com>
Content-Type: multipart/alternative; boundary="bcaec54b48121803e204d7e5b90b"
X-Gm-Message-State: ALoCoQlyHLShm5mA67lKQBMQcNCiSYxLKqrPHRkZrIdK/d1aQPbs/MSxZY7VHSv1GWjQNM/0kCvM
Cc: Stephen Williams <sdw@lig.net>, XMPP Standards <standards@xmpp.org>, "public-exi@w3.org" <public-exi@w3.org>, "Joachim Lindborg (joachim.lindborg@sust.se)" <joachim.lindborg@sust.se>, "xmpp@ietf.org" <xmpp@ietf.org>, FABLET Youenn <Youenn.Fablet@crf.canon.fr>, "mact-usa@att.net" <mact-usa@att.net>
Subject: Re: [xmpp] XMPP stanza encryption + EXI compression
X-BeenThere: xmpp@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: XMPP Working Group <xmpp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/xmpp>, <mailto:xmpp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/xmpp>
List-Post: <mailto:xmpp@ietf.org>
List-Help: <mailto:xmpp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/xmpp>, <mailto:xmpp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Mar 2013 17:19:27 -0000

I think you'll find that if you try to compress after encrypting, you're
going to have a bad time.  Exi1(Encrypt(Xml)) is not going to buy you
anything besides some wasted cycles.
--Richard


On Thu, Mar 14, 2013 at 11:25 AM, Peter Waher <Peter.Waher@clayster.com>wrote:

> Dear Matt
>
> I just became aware of your  IETF draft for XMPP end-to-end encryption. It
> looks very promising.
> http://tools.ietf.org/html/draft-miller-xmpp-e2e-05
>
> We work with sensor network architecture over XMPP, and some (but not all)
> applications require end-to-end encryption, so we want to look at this
> extension.
>
> At the same time, compression is a vital issue, since many sensors have
> limited memory. Therefore, we are working with an effort to include the use
> of EXI in XMPP. (See attached documents.) One important aspect to know,
> when including EXI into XMPP, is that packets cannot be binary copied when
> the server relays the information. The packets have to be decompressed, and
> re-compressed if both peers have EXI-compressed channels. This requires EXI
> to be applied after any message encryption transformation:
> Exi1(Encrypt(Xml)). Server then relays Exi2(DeExi1(Exi1(Encrypt(Xml)))) =
> Exi2(Encrypt(Xml)) to the second peer.
>
> The problem with this is that EXI does not do very well with
> base64-encoded binary data. Size(Exi(Base64(Bin))) would approximately be
> equal to Size(Bin). EXI would be able to cut the added length imposed by
> the base64 encoding, due to its limited character set.
>
> It would be nice with an end-to-end encryption method over XMPP that would
> also be able to take into account EXI compression of XML stanzas.
>
> If you have time, any comments would be appreciated,
>
> Sincerely,
> Peter Waher
>
>
> -----Original Message-----
> From: Peter Saint-Andre [mailto:stpeter@stpeter.im]
> Sent: den 14 mars 2013 11:57
> To: Peter Waher
> Cc: Joachim Lindborg (joachim.lindborg@sust.se); Matt Miller
> Subject: Re: XMPP stanza encryption
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 3/14/13 10:53 AM, Peter Waher wrote:
> > Hello Peter
> >
> > Do you participate in this work?
> > http://tools.ietf.org/html/draft-miller-xmpp-e2e-05
>
> Only indirectly, by chatting once in a while with Matt Miller (cc'd).
>
> Peter
>
> - --
> Peter Saint-Andre
> https://stpeter.im/
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBAgAGBQJRQeU7AAoJEOoGpJErxa2p6y8P/jHGYyu4DxkpgjIlxIyP/ROF
> KfHkaOQ9kzVqEP+fWzajYK9MW8NzaGkF8w8L43o6sXbbFxtmIIZgiUpG2G9uMg8w
> 6yBrR+JbDHTSpq9bEjrA55jKjVHAQjXUpEvT71zvpqpMa8GU4mM8oLad/ETkg0QI
> YJsfGal66rSA9ZXdr78U8C7pOIFNhgV6SdLHUq1TF9jpXghXAN7bvRtGgPJk1jea
> QN45YW//Zq9NMK0KK+MmgmK+JPsb3/MM7uFSp90FTUQY7/iF1ngjoA/3tqOiaQMW
> E8Q40DIRXjzXHiiKMTwle7Q1zLP1Jm86aJp8iScsRy0OxNSH9s5NQ7AaD5ZTl/BL
> 64oiA9dLpcc/RZf/7kWDp7D7zEHli2yJG+tO0gagJHqfOt8R/WCeJR10hrBQ76rj
> JbwBqWwJRMrY1SnqlntBfhMklC7ZzkuXMn75QtqkQlflJ//6v53AcCglZBLpIurT
> xaHHO6IUvsjOvoRov1m65HTtOb9qwepPOJ4mo78bRure2HgBKBCNZRyRZPy6s8lU
> OuXqciZjDmKxMlO/A4nGMu2OP7ZcrWo58t1p7sckbC4q4YDoVBTPvA3KlcQB1kPm
> YlIGtme+MEVHVm6LvJq+Gm5C8cvXM1nB2lmHvcEWJfcSVkT03EGRKLNZm4aWchMN
> 4s30FwvW1t9EukM+RGy6
> =EN9u
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> xmpp mailing list
> xmpp@ietf.org
> https://www.ietf.org/mailman/listinfo/xmpp
>
>