From nobody Sun Aug 5 06:34:36 2018 Return-Path: X-Original-To: crypto-panel@ietfa.amsl.com Delivered-To: crypto-panel@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5E1E130E5A for ; Sun, 5 Aug 2018 06:34:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isode.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xewltpTC2ggU for ; Sun, 5 Aug 2018 06:34:33 -0700 (PDT) Received: from waldorf.isode.com (waldorf.isode.com [62.232.206.188]) by ietfa.amsl.com (Postfix) with ESMTP id 046BA130E51 for ; Sun, 5 Aug 2018 06:34:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1533476072; d=isode.com; s=june2016; i=@isode.com; bh=dp7AAS6Lyzc80qrbPXc2uyHa1gj4k8E04MmIsTHbEiw=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=Q1wuiYwMOR0AmC3DcVhLxEr65b3av0nDgGy0sIjr95md4TuJMh0ufVU/2vYn8VWXusCEJm TLPQ95ISDW+FYClV9NeGiL771EzRuCc5RT3nxMahD2Cfv6H5Q2qb796Q+0jkoeBkZXcqvx v2DppQujrXYm1wpbyVJPAWTe+pvtfVQ=; Received: from [192.168.1.105] (host86-148-84-164.range86-148.btcentralplus.com [86.148.84.164]) by waldorf.isode.com (submission channel) via TCP with ESMTPSA id ; Sun, 5 Aug 2018 14:34:31 +0100 References: <5ACA0006.4020809@isode.com> To: "crypto-panel@irtf.org" From: Alexey Melnikov Openpgp: preference=signencrypt X-Forwarded-Message-Id: <5ACA0006.4020809@isode.com> Message-ID: <81b1e125-d386-a42f-f471-5aad378a6123@isode.com> Date: Sun, 5 Aug 2018 14:34:29 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 In-Reply-To: <5ACA0006.4020809@isode.com> MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [Crypto-panel] Fwd: [Cfrg] Adoption call for draft-harkins-pkex-05 X-BeenThere: crypto-panel@irtf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 13:34:35 -0000 Dear Crypto Panel members, Does anybody else wants to weigh in on whether this draft should be taken as a new work item by CFRG. (If you already replied on the CFRG mailing list, you don't need to state your opinion again.) Thank you, Alexey -------- Forwarded Message -------- Subject: [Cfrg] Adoption call for draft-harkins-pkex-05 Date: Sun, 8 Apr 2018 12:41:58 +0100 From: Alexey Melnikov To: cfrg@irtf.org Dear CFRG participants, This message is starting a 2 weeks adoption call for draft-harkins-pkex-05 (Public Key Exchange). From the document's Introduction: [RFC7250] further states that "the main security challenge [to using 'raw' public keys] is how to associate the public key with a specific entity. Without a secure binding between identifier and key, the protocol will be vulnerable to man-in-the- middle attacks." The Public Key Exchange (PKEX) is designed to fill that gap: it establishes a secure binding between exchanged public keys and identifiers, it provides proof-of-possession of the exchanged public keys to each peer, and it enables the establishment of trust in public keys that can subsequently be used to facilitate authentication in other authentication and key exchange protocols. At the end of a successful run of PKEX the two peers will have trust in each others exchanged public keys and also share an authenticated symmetric key which may be discarded or used for another purpose. The adoption call will last for 2 weeks and will end on April 22nd. Thank you, Kenny and Alexey _______________________________________________ Cfrg mailing list Cfrg@irtf.org https://www.irtf.org/mailman/listinfo/cfrg From nobody Sun Aug 5 06:58:22 2018 Return-Path: X-Original-To: crypto-panel@ietfa.amsl.com Delivered-To: crypto-panel@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B23F130E4D for ; Sun, 5 Aug 2018 06:58:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P0yBeiIEq1Uz for ; Sun, 5 Aug 2018 06:58:18 -0700 (PDT) Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4E8B9126F72 for ; Sun, 5 Aug 2018 06:58:18 -0700 (PDT) Received: by mail-wr1-x433.google.com with SMTP id g6-v6so9859986wrp.0 for ; Sun, 05 Aug 2018 06:58:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=k+rimSHngDotGKI59tdDTX1hI/dsgYX3qQRcwbc2iCk=; b=dZN5OXrsX03hStLU7zxIj9QXGWrQv/YUIzEEUSaa1QS69ReIKCcBpK9jPb0vPITj3r rS3/LyYtHg/+BfrcBNBaaeBdi1v2l3Oq7vkKa2HR7IobM0/jSjRVGWCDtP68x6O297FJ xItklyY1z3Wbrt618S2eQ8N9NQlqPl9FD8DJPxpKnTs9dEAnnHKQ/SEiwI126CsICVaV PKkrslJbEbcTgGaZ72Ci00PiK9T+zwFMfHfJCEsLycjIEtnVWZwdXC0Nds784aoUl4bR mWbrm57ixsEgbweKgpkNtqlPeJC3BQK8e/36jTxiKzFPfSbvIeyNLp9t5R/f2V+j3Z3K Rd6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=k+rimSHngDotGKI59tdDTX1hI/dsgYX3qQRcwbc2iCk=; b=gNIpcn7rJwRxXRRnAIdvt5JoAXLuN6xBmJlYOxsyDiFVHVlR1fnspFMDESpa6RJJvU N7OFpo4/VIpWcnSMolMv0EZTiIaMtG4r/TOKx3RwBK7/Y3bbW6r206ZcvLllpHJSqxhh 0nXgsDUI+k+XwZH/n8JtCC6ZG3nfrqcWLH7XNO/unn6HBZle3W8iAf6XdhjGCyuBCopr WtbDOPut55S9Lc2qoUsB30CCSITxy4uv+buVuQA62fjCXv00k35Oj+4KufhkB7m0A+8o NYQmF6340yvE7jxRXVMv+GYs0fYejcQHJRo7XsO7k01HMyHNGpMj1QvW02VqNYUXFsP+ yTBA== X-Gm-Message-State: AOUpUlEAPHUTnHhhfDj41kJBSNGRD0xNQyMscrrxqf/UoqeCAdV19cQT 8cZdNruA76Jm1Mv4TKVXwjESj+Zg X-Google-Smtp-Source: AAOMgpepOkJcrMsfySxOUZQ+Zpl/VQHrJ0QQCk9S3HHL9TzjHYCHSsyhH3usviASNwV4uZm3pq/wTQ== X-Received: by 2002:adf:deca:: with SMTP id i10-v6mr6800810wrn.163.1533477496567; Sun, 05 Aug 2018 06:58:16 -0700 (PDT) Received: from [172.18.129.55] (bzq-202-11.red.bezeqint.net. [212.179.202.11]) by smtp.gmail.com with ESMTPSA id r140-v6sm11446771wmd.7.2018.08.05.06.58.15 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 05 Aug 2018 06:58:15 -0700 (PDT) To: Alexey Melnikov , "crypto-panel@irtf.org" References: <5ACA0006.4020809@isode.com> <81b1e125-d386-a42f-f471-5aad378a6123@isode.com> From: Yaron Sheffer Message-ID: Date: Sun, 5 Aug 2018 16:58:13 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <81b1e125-d386-a42f-f471-5aad378a6123@isode.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Crypto-panel] Fwd: [Cfrg] Adoption call for draft-harkins-pkex-05 X-BeenThere: crypto-panel@irtf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 13:58:21 -0000 I support this work. I think this is a worthwhile use case, and the solution is based on credible cryptography. Thanks, Yaron On 05/08/18 16:34, Alexey Melnikov wrote: > Dear Crypto Panel members, > > Does anybody else wants to weigh in on whether this draft should be > taken as a new work item by CFRG. (If you already replied on the CFRG > mailing list, you don't need to state your opinion again.) > > Thank you, > Alexey > > -------- Forwarded Message -------- > Subject: [Cfrg] Adoption call for draft-harkins-pkex-05 > Date: Sun, 8 Apr 2018 12:41:58 +0100 > From: Alexey Melnikov > To: cfrg@irtf.org > > Dear CFRG participants, > This message is starting a 2 weeks adoption call for > draft-harkins-pkex-05 (Public Key Exchange). From the document's > Introduction: > > [RFC7250] further states that "the main security challenge [to using > 'raw' public keys] is how to associate the public key with a specific > entity. Without a secure binding between identifier and key, the > protocol will be vulnerable to man-in-the- middle attacks." > > The Public Key Exchange (PKEX) is designed to fill that gap: it > establishes a secure binding between exchanged public keys and > identifiers, it provides proof-of-possession of the exchanged public > keys to each peer, and it enables the establishment of trust in > public keys that can subsequently be used to facilitate > authentication in other authentication and key exchange protocols. > At the end of a successful run of PKEX the two peers will have trust > in each others exchanged public keys and also share an authenticated > symmetric key which may be discarded or used for another purpose. > > The adoption call will last for 2 weeks and will end on April 22nd. > > Thank you, > Kenny and Alexey > > _______________________________________________ > Cfrg mailing list > Cfrg@irtf.org > https://www.irtf.org/mailman/listinfo/cfrg > > _______________________________________________ > Crypto-panel mailing list > Crypto-panel@irtf.org > https://www.irtf.org/mailman/listinfo/crypto-panel > From nobody Sun Aug 5 13:44:20 2018 Return-Path: X-Original-To: crypto-panel@ietfa.amsl.com Delivered-To: crypto-panel@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4B47130E2E for ; Sun, 5 Aug 2018 13:44:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wx6cSEdVhQRu for ; Sun, 5 Aug 2018 13:44:14 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EAE3E130DC5 for ; Sun, 5 Aug 2018 13:44:13 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 94F24BE2E; Sun, 5 Aug 2018 21:44:11 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lildTwowk_x8; Sun, 5 Aug 2018 21:44:04 +0100 (IST) Received: from [10.244.2.138] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 8C056BE24; Sun, 5 Aug 2018 21:44:04 +0100 (IST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1533501844; bh=I6N1AWMC5PTB+Hy2Bam9XX7c1ONbRpMvS2z5nWfWTRk=; h=To:References:From:Subject:Date:In-Reply-To:From; b=Ae6ZE3Boxf3NM8lDXZpEdrXqP4c4UCO7sjKyIQlJCL9yIDUC4JY8mKkxHZtAJIbl5 ynW7Gg99LHwKM/jsyeTBRBlfZ9e2ZCrWk71ShhiK9n3+W5XWGEYw4N5ZVuNJD8i9cA 1yJR+gPOW9gItV5GWN6jm6baRmKRu/3mzpJnzwEs= To: Alexey Melnikov , "crypto-panel@irtf.org" References: <5ACA0006.4020809@isode.com> <81b1e125-d386-a42f-f471-5aad378a6123@isode.com> From: Stephen Farrell Openpgp: id=5BB5A6EA5765D2C5863CAE275AB2FAF17B172BEA; url= Autocrypt: addr=stephen.farrell@cs.tcd.ie; prefer-encrypt=mutual; keydata= xsFNBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nemCP5PMvmh 5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kTq0IqYzsEv5HI58S+ QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtEgvw4fVhVWJuyy3w//0F2tzKr EMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy+pAh4EKzS1FE7BOZp9daMu9MUQmDqtZU bUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqO Vz+7L+WiVfxLbeVqBwV+4uL9to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJg b097ZaNyuY1ETghVB5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k 4LyM2lp5FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9tlyWxn5Xi HzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQABzTJTdGVwaGVuIEZh cnJlbGwgKDIwMTcpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPsLBgAQTAQgAKgIbAwUJ CZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAUCWj6jdwIZAQAKCRBasvrxexcr6o7QD/9m x9DPJetmW794RXmNTrbTJ44zc/tJbcLdRBh0KBn9OW/EaAqjDmgNJeCMyJTKr1ywaps8HGUN hLEVkc14NUpgi4/Zkrbi3DmTp25OHj6wXBS5qVMyVynTMEIjOfeFFyxG+48od+Xn7qg6LT7G rHeNf+z/r0v9+8eZ1Ip63kshQDGhhpmRMKu4Ws9ZvTW2ACXkkTFaSGYJj3yIP4R6IgwBYGMz DXFX6nS4LA1s3pcPNxOgrvCyb60AiJZTLcOk/rRrpZtXB1XQc23ZZmrlTkl2HaThL6w3YKdi Ti1NbuMeOxZqtXcUshII45sANm4HuWNTiRh93Bn5bN6ddjgsaXEZBKUBuUaPBl7gQiQJcAlS 3MmGgVS4ZoX8+VaPGpXdQVFyBMRFlOKOC5XJESt7wY0RE2C8PFm+5eywSO/P1fkl9whkMgml 3OEuIQiP2ehRt/HVLMHkoM9CPQ7t6UwdrXrvX+vBZykav8x9U9M6KTgfsXytxUl6Vx5lPMLi 2/Jrsz6Mzh/IVZa3xjhq1OLFSI/tT2ji4FkJDQbO+yYUDhcuqfakDmtWLMxecZsY6O58A/95 8Qni6Xeq+Nh7zJ7wNcQOMoDGj+24di2TX1cKLzdDMWFaWzlNP5dB5VMwS9Wqj1Z6TzKjGjru q8soqohwb2CK9B3wzFg0Bs1iBI+2RuFnxM7BTQRaPVAyARAA+g3R0HzGr/Dl34Y07XqGqzq5 SU0nXIu9u8Ynsxj7gR5qb3HgUWYEWrHW2jHOByXnvkffucf5yzwrsvw8Q8iI8CFHiTYHPpey 4yPVn6R0w/FOMcY70eTIu/k6EEFDlDbs09DtKcrsT9bmN0XoRxITlXwWTufYqUnmS+YkAuk+ TLCtUin7OdaS2uU6Ata3PLQSeM2ZsUQMmYmHPwB9rmf+q2I005AJ9Q1SPQ2KNg/8xOGxo13S VuaSqYRQdpV93RuCOzg4vuXtR+gP0KQrus/P2ZCEPvU9cXF/2MIhXgOz207lv3iE2zGyNXld /n8spvWk+0bH5Zqd9Wcba/rGcBhmX9NKKDARZqjkv/zVEP1X97w1HsNYeUFNcg2lk9zQKb4v l1jx/Uz8ukzH2QNhU4R39dbF/4AwWuSVkGW6bTxHJqGs6YimbfdQqxTzmqFwz3JP0OtXX5q/ 6D4pHwcmJwEiDNzsBLl6skPSQ0Xyq3pua/qAP8MVm+YxCxJQITqZ8qjDLzoe7s9X6FLLC/DA L9kxl5saVSfDbuI3usH/emdtn0NA9/M7nfgih92zD92sl1yQXHT6BDa8xW1j+RU4P+E0wyd7 zgB2UeYgrp2IIcfG+xX2uFG5MJQ/nYfBoiALb0+dQHNHDtFnNGY3Oe8z1M9c5aDG3/s29QbJ +w7hEKKo9YMAEQEAAcLBZQQYAQgADwUCWj1QMgIbDAUJCZQmAAAKCRBasvrxexcr6qwvD/9b Rek3kfN8Q+jGrKl8qwY8HC5s4mhdDJZI/JP2FImf5J2+d5/e8UJ4fcsT79E0/FqX3Z9wZr6h sofPqLh1/YzDsYkZDHTYSGrlWGP/I5kXwUmFnBZHzM3WGrL3S7ZmCYMdudhykxXXjq7M6Do1 oxM8JofrXGtwBTLv5wfvvygJouVCVe87Ge7mCeY5vey1eUi4zSSF1zPpR6gg64w2g4TXM5qt SwkZVOv1g475LsGlYWRuJV8TA67yp1zJI7HkNqCo8KyHX0DPOh9c+Sd9ZX4aqKfqH9HIpnCL AYEgj7vofeix7gM3kQQmwynqq32bQGQBrKJEYp2vfeO30VsVx4dzuuiC5lyjUccVmw5D72J0 FlGrfEm0kw6D1qwyBg0SAMqamKN6XDdjhNAtXIaoA2UMZK/vZGGUKbqTgDdk0fnzOyb2zvXK CiPFKqIPAqKaDHg0JHdGI3KpQdRNLLzgx083EqEc6IAwWA6jSz+6lZDV6XDgF0lYqAYIkg3+ 6OUXUv6plMlwSHquiOc/MQXHfgUP5//Ra5JuiuyCj954FD+MBKIj8eWROfnzyEnBplVHGSDI ZLzL3pvV14dcsoajdeIH45i8DxnVm64BvEFHtLNlnliMrLOrk4shfmWyUqNlzilXN2BTFVFH 4MrnagFdcFnWYp1JPh96ZKjiqBwMv/H0kw== Message-ID: <91063cc5-b392-d807-afa3-278d2baeda71@cs.tcd.ie> Date: Sun, 5 Aug 2018 21:44:03 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <81b1e125-d386-a42f-f471-5aad378a6123@isode.com> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="UlOgxx0oo6AzdtRVJGZ4uR84DU1AZuQTi" Archived-At: Subject: Re: [Crypto-panel] Fwd: [Cfrg] Adoption call for draft-harkins-pkex-05 X-BeenThere: crypto-panel@irtf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2018 20:44:19 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --UlOgxx0oo6AzdtRVJGZ4uR84DU1AZuQTi Content-Type: multipart/mixed; boundary="CqPCAAoE8CpAR5QI20kYYtJqK2TDglWiK"; protected-headers="v1" From: Stephen Farrell To: Alexey Melnikov , "crypto-panel@irtf.org" Message-ID: <91063cc5-b392-d807-afa3-278d2baeda71@cs.tcd.ie> Subject: Re: [Crypto-panel] Fwd: [Cfrg] Adoption call for draft-harkins-pkex-05 References: <5ACA0006.4020809@isode.com> <81b1e125-d386-a42f-f471-5aad378a6123@isode.com> In-Reply-To: <81b1e125-d386-a42f-f471-5aad378a6123@isode.com> --CqPCAAoE8CpAR5QI20kYYtJqK2TDglWiK Content-Type: multipart/mixed; boundary="------------41B0FC702EE19BAD5127A8F1" Content-Language: en-GB This is a multi-part message in MIME format. --------------41B0FC702EE19BAD5127A8F1 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hiya, On 05/08/18 14:34, Alexey Melnikov wrote: > Dear Crypto Panel members, >=20 > Does anybody else wants to weigh in on whether this draft should be > taken as a new work item by CFRG. (If you already replied on the CFRG > mailing list, you don't need to state your opinion again.) I just re-scanned the mails to the list on this going back to 2016. I also flicked through the draft. 1. I'm not a fan of PAKEs in general, they generally seem to be solutions looking for problems. And there are so many of 'em and so many variations they cause, like this protocol! I do recognise though that CFRG seems to have reached consensus that PAKEs are worth spending time on. (So, I'm in the rough there.) That said, I also think CFRG's best work is done when there's a need for the output(s) concerned, and I'm not clear that that applies in this case (or with PAKEs generally;-). 2. Section 3 says: "Due to the nature of the exchange, only DSA ([DSS]) and ECDSA ([X9.62]) keys can be exchanged with PKEX." I think that's a showstopper, as deployments of this protocol would need to be replaced if use of DSA/ECDSA wasn't desired. If that restriction can't be removed, then I don't think this ought be adopted. 3. As to the lack of proofs, I don't think that ought be a problem at this stage, if the RG adopt the work on condition that it not be published as an RFC until relevant proofs are available. I do think that requiring (relevant) proofs be available for CFRG primitives seems like a reasonable ask, but I guess the RG would need to be asked about that as a general question. (All that said, the main author is well used to fighting and winning the long fight, so adoption in this case will likely mean the eventual publication of an RFC, no matter what conditions are imposed.) Mostly because of #2, (but admitting my #1 bias:-), I'm against adopting this. I'd be fine with sending this mail to the list if that's useful, but it might not be useful, given that it could start two hard-to-resolve debates. If the issues related to #1 (real need), #2 (mechanisms with limited agility) and #3 (need for proofs to go with novel mechanisms) were put to the RG, and if you got consensus one way or another as to the direction(s) folks want to take, that might be useful in resolving questions like these. (In case it helps, and in case it's not clear:-) My take on those would be 1: a real need is needed, 2: in general, say no to mechanisms that are tightly bound to specific algs, lastly, 3: yes, for novel mechanisms, require relevant proofs unless there's a good argument that that's not needed. Cheers, S. PS: As a nit, the title seems fairly misleading to me. >=20 > Thank you, > Alexey >=20 > -------- Forwarded Message -------- > Subject: [Cfrg] Adoption call for draft-harkins-pkex-05 > Date: Sun, 8 Apr 2018 12:41:58 +0100 > From: Alexey Melnikov > To: cfrg@irtf.org >=20 > Dear CFRG participants, > This message is starting a 2 weeks adoption call for > draft-harkins-pkex-05 (Public Key Exchange). From the document's > Introduction: >=20 > [RFC7250] further states that "the main security challenge [to using= > 'raw' public keys] is how to associate the public key with a specifi= c > entity. Without a secure binding between identifier and key, the > protocol will be vulnerable to man-in-the- middle attacks." >=20 > The Public Key Exchange (PKEX) is designed to fill that gap: it > establishes a secure binding between exchanged public keys and > identifiers, it provides proof-of-possession of the exchanged public= > keys to each peer, and it enables the establishment of trust in > public keys that can subsequently be used to facilitate > authentication in other authentication and key exchange protocols. > At the end of a successful run of PKEX the two peers will have trust= > in each others exchanged public keys and also share an authenticated= > symmetric key which may be discarded or used for another purpose. >=20 > The adoption call will last for 2 weeks and will end on April 22nd. >=20 > Thank you, > Kenny and Alexey >=20 > _______________________________________________ > Cfrg mailing list > Cfrg@irtf.org > https://www.irtf.org/mailman/listinfo/cfrg >=20 > _______________________________________________ > Crypto-panel mailing list > Crypto-panel@irtf.org > https://www.irtf.org/mailman/listinfo/crypto-panel >=20 --------------41B0FC702EE19BAD5127A8F1 Content-Type: application/pgp-keys; name="0x5AB2FAF17B172BEA.asc" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="0x5AB2FAF17B172BEA.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nem CP5PMvmh5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kT q0IqYzsEv5HI58S+QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtE gvw4fVhVWJuyy3w//0F2tzKrEMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy +pAh4EKzS1FE7BOZp9daMu9MUQmDqtZUbUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5 iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqOVz+7L+WiVfxLbeVqBwV+4uL9 to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJgb097ZaNyuY1ETghV B5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k4LyM2lp5 FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9t lyWxn5XiHzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQAB tCFTdGVwaGVuIEZhcnJlbGwgPHN0ZXBoZW5AamVsbC5pZT6JAj0EEwEIACcFAlo9 UYwCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQWrL68XsXK+qG CxAApYHWYgGOIL3G6/OpkejdAkQoCVQAK8LJUSf6vzwost4iVfxIKcKW/3RqKNKk rRl8beJ7j1CWXAz9+VXAOsE9+zNxXIDgGA7HlvJnhffl+qwibVgiHgUcJFhCSbBr sjC+1uULaTU8zYEyET//GOGPLF+X+degkE/sesh4zcEAjF7fGPnlncdCCH3tvPZZ sdTcjwOCRVonKsDgQzBTCMz/RPBfEFX44HZx4g1UQAcCA4xlucY8QkJEyCrSNGpG nvGK8DcGSmnstl1/a9fnlhpdFxieX3oY2phJ1WKkYTn6Advrek3UP71CKxpgtPmk d3iUUz/VZa0Cv6YxQXskspRDVEvdCMYSQBtJPQ4y2+5UxVR9GIQXenwYp9AP2niv Voh+ITsDWWeWnnvYMq07rSDjq0nGdj41MJkNX+Yb2PXVyXItcj5ybE3T2+y3pSBG FEZYJGuaL4NwtBJFMOdOtBmUOPbetS2971EL3Izxb7ibOZWDwexv+8R6SWYfP1wV N3p46RyBQuXqJV8ccE11m6vtZTGSYgnLUUFZMRQYH+0hwuYe0T3AA18xDdSYsa8v ovCCd3l5S4UNzIM2PMChqGrEzKapUpZg7+8ACcxRU3b9Ihd7WYjJ+pQPCoWYKozv tEvenbNpE/govO/ED3B14e+R2yevRPjRrsN7PJzSf15fQLuJARwEEAEIAAYFAlo9 UqAACgkQLzyHNoBfjaLrSwf+MIHbFRQ4O5cmLYR5sIByWelN3SuRN/gW8rpKo9Ok Cz6An8uV/iCXy5tNMLzzi0BFl8f22DwBcC5qy9qnlIAdogWam1qWoTAoAD8veEqm uKhYrqJsCcAyNrKYmK0hP3rpHxx1LySDmKYXmw/8qtBXKHTouMm+5tSsznhykRMT AAr2p7PSaHgo+hIVaW/rKSspHjDhhZS+G9mtOZad1IH29M6G1Q1NCO0Ywe8krKLQ IAQlFxtgvOqpPOZNzeKBa/+KbE8TGgMWrkOhC8OeEM5PVzdDhlhD9kPzB/pCKDF5 DofJ/ZRqnDpbKPQ0bsW38AOig3kOc0A27awiBEw3urqR1bQyU3RlcGhlbiBGYXJy ZWxsICgyMDE3KSA8c3RlcGhlbi5mYXJyZWxsQGNzLnRjZC5pZT6JAkAEEwEIACoC GwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AFAlo+o3cCGQEACgkQWrL6 8XsXK+qO0A//ZsfQzyXrZlu/eEV5jU620yeOM3P7SW3C3UQYdCgZ/TlvxGgKow5o DSXgjMiUyq9csGqbPBxlDYSxFZHNeDVKYIuP2ZK24tw5k6duTh4+sFwUualTMlcp 0zBCIzn3hRcsRvuPKHfl5+6oOi0+xqx3jX/s/69L/fvHmdSKet5LIUAxoYaZkTCr uFrPWb01tgAl5JExWkhmCY98iD+EeiIMAWBjMw1xV+p0uCwNbN6XDzcToK7wsm+t AIiWUy3DpP60a6WbVwdV0HNt2WZq5U5Jdh2k4S+sN2CnYk4tTW7jHjsWarV3FLIS COObADZuB7ljU4kYfdwZ+WzenXY4LGlxGQSlAblGjwZe4EIkCXAJUtzJhoFUuGaF /PlWjxqV3UFRcgTERZTijguVyREre8GNERNgvDxZvuXssEjvz9X5JfcIZDIJpdzh LiEIj9noUbfx1SzB5KDPQj0O7elMHa1671/rwWcpGr/MfVPTOik4H7F8rcVJelce ZTzC4tvya7M+jM4fyFWWt8Y4atTixUiP7U9o4uBZCQ0GzvsmFA4XLqn2pA5rVizM XnGbGOjufAP/efEJ4ul3qvjYe8ye8DXEDjKAxo/tuHYtk19XCi83QzFhWls5TT+X QeVTMEvVqo9Wek8yoxo67qvLKKqIcG9givQd8MxYNAbNYgSPtkbhZ8SJARwEEAEI AAYFAlo9UqAACgkQLzyHNoBfjaLzHAgAlWT6NXEGtw/r1miKNGcopzvzILQ9oB8r KI9U9EL6tOf/y2V5oYee/GyQDb3ZdoPxxYYcJf+RyiH1nMoqUIZiZJaf3bJXinDZ 5+AdfE++UR2NBvqaNyC6u3r24jo1B/sagKbYtWgsYtRqHLD4IWi37MZrVyjBuF7u 14Q07+uhjq6mX2O/tHpCYw/Q82tbeTRPyUf1WQOAfD1kfBpW9PvAva5Iw9FWeXpC XRzwxnCZhYfGfqtuSw6CPBYLdbikqML6FZ7EDuTBb/8um1wK7Y9bgeIQC+CYjhYB 5RXa1tDJRab2Js4luCvSR0w/CgHw26293tlve2Q6UTrmHxP5U22DlokCPQQTAQgA JwUCWj1QMgIbAwUJCZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBasvrx excr6tJpD/4rrILH+meP07vrx8wW5eYuqCiPGYnh/CXxIF8eLrfbe5d4QRgtq+w6 UeQPMyzKRIRiCoBXB2oJLBZHyxBPxZlg33dTMrEGn8QWKx2iNuz9rZMXyOSWFetu O01d/aUPd5BnbLbIyK5of8xCQlXM6KH8bc+9gQ7edR9mfLTdvBf2FR522hg8BRBM 1imKc3vO8v39+qIHHRjuiwxBBCAOhHtHRsZXripS0uFA07dM46Oi/E8osjx6fQt/ lH5z/PN+2adxYSrLSAXfr1oD3RxYNhuWgyGFL64/VCQb1YGjf0Z5MBPnWm9jgUoO Y5K9eNSS0L83WeJjlF5+Q/WOgB+rb49Prm2DFeo9+S9f2V53Llz1WIspXJg6f+n9 lmHE94MfQj1GAHCzI0FeL19lvM+LhD8jJSCbhrC3+yobyy/AUOs5Z3E+njjX1FF/ VCVAs6iOa6i+XG+Y1hh3ir2y1kckJ5auT10MSU8GEZu9ayU4M3o3N9yxOjaoP0Nu Q4MMLL/n/u4u94AeZaHPNBXn/hVfVRRmpRXtGKvJtFAEppGEYezB+bLKIm6XlpPk hnwYzleLZ7AMEco2C6QM8QPB3g3JpS3sqRhA5rEP4lL16BmijmF+CHoPE/zwgKZb KpyVDqvIW5IDgvfIC2X4pbZDRvGIUKaGSB4+ksZgUUnNyvfQr2p7jrQuU3RlcGhl biBGYXJyZWxsIDxzdGVwaGVuQHRvbGVyYW50bmV0d29ya3MuY29tPokCPQQTAQgA JwUCWj1RWgIbAwUJCZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBasvrx excr6jscEADEcB0WQEZn2AkrzDs1RhL0Lp6cZi0BigofkbcGfdhJyMSs19C0dhvn crAFClVI6/Udw3yFtDyYtOCf2W3M3A1K6/RfEizCLzTsdFIhni9gOJLlUpXViQtg rlstjk7hqVV3Ooz4BlCqS4cG7rfqf4LQQPpTAuFUEV9I28FBUB2irqC+v4gTysIg pMw0bA1yBU9sX5jE/tRkzqnuzZrkwiobDtRFJ9qp+7O2JtcY4EsVtLAsaodJKc5c F8R4OvB1n66vxxcgg9Eh4JNWZ47xsaCmAGo1Bcb2jIY35OtgAL7gCGLRSMKTtAaP y1/fEgIqhCljJ9x40Fkn/3r2BX21WC9HFSPFTBz2RluLRzxdgxOrkYK8EiHUPoE5 b1AEzZKw2AbeXfr57f5zYsN3IqfbQLUjMYtUN1wK3Pjb+idD972wyXMWt8uOzlI7 b9Ocu+nYm2whBfJv9Pmp3QYTmPz+LB9lH65VNVUSxSXVr5iWXO3qx1HtEiGEqkpo rMQCTh3T5Ud3PvMSRBFFKNs9WhJ/Lxz+SV30WLwG6dr5mQqlzAhb4Phc/zekZyXR dS/oDKrBLUucS36O//49JeyRi1QvOfxnfmIqRIAf/k3PoYJmTo5E82//r5Qj3YGl Ru78ba0HArxs+ACD6AnEHHcbswpbtVEKYzlSu0Ar0Dc7vRWM/IyQdIkBHAQQAQgA BgUCWj1SoAAKCRAvPIc2gF+NosIsB/9f/29FNla3BJfGIEIDnhrqGD0i9bSa89Sq Bd++uG06TQgW5wsqtNcrwn81yZTq6XE6i9VtD4GKfqC0d4KZJr9bnbeD81cI64VO dL8zJWJs0vj5EIXCobKyX74Kb4uePUyZqwT2Q74I116u/HwA9/FXsPo5isbh4ZqD 4t0VHpWkmfq1FPT9a/JPyX46qKqB2Fce/7Qy+SQP1NfkuUlbhUH/JG9aSSYvk3lz nNiH41x9M+FDlL106itXOubrl3oi2fT3fsSedq7uzt+IV0DQEeNaoQAUuwEhdB8I WOMqN2woDjGVKJftfsSWY9ilZrnDBNDrp0vRqcx33LUMkIw4d7iBuQINBFo9UDIB EAD6DdHQfMav8OXfhjTteoarOrlJTSdci727xiezGPuBHmpvceBRZgRasdbaMc4H Jee+R9+5x/nLPCuy/DxDyIjwIUeJNgc+l7LjI9WfpHTD8U4xxjvR5Mi7+ToQQUOU NuzT0O0pyuxP1uY3RehHEhOVfBZO59ipSeZL5iQC6T5MsK1SKfs51pLa5ToC1rc8 tBJ4zZmxRAyZiYc/AH2uZ/6rYjTTkAn1DVI9DYo2D/zE4bGjXdJW5pKphFB2lX3d G4I7ODi+5e1H6A/QpCu6z8/ZkIQ+9T1xcX/YwiFeA7PbTuW/eITbMbI1eV3+fyym 9aT7Rsflmp31Zxtr+sZwGGZf00ooMBFmqOS//NUQ/Vf3vDUew1h5QU1yDaWT3NAp vi+XWPH9TPy6TMfZA2FThHf11sX/gDBa5JWQZbptPEcmoazpiKZt91CrFPOaoXDP ck/Q61dfmr/oPikfByYnASIM3OwEuXqyQ9JDRfKrem5r+oA/wxWb5jELElAhOpny qMMvOh7uz1foUssL8MAv2TGXmxpVJ8Nu4je6wf96Z22fQ0D38zud+CKH3bMP3ayX XJBcdPoENrzFbWP5FTg/4TTDJ3vOAHZR5iCunYghx8b7Ffa4UbkwlD+dh8GiIAtv T51Ac0cO0Wc0Zjc57zPUz1zloMbf+zb1Bsn7DuEQoqj1gwARAQABiQIlBBgBCAAP BQJaPVAyAhsMBQkJlCYAAAoJEFqy+vF7FyvqrC8P/1tF6TeR83xD6MasqXyrBjwc LmziaF0Mlkj8k/YUiZ/knb53n97xQnh9yxPv0TT8Wpfdn3BmvqGyh8+ouHX9jMOx iRkMdNhIauVYY/8jmRfBSYWcFkfMzdYasvdLtmYJgx252HKTFdeOrszoOjWjEzwm h+tca3AFMu/nB++/KAmi5UJV7zsZ7uYJ5jm97LV5SLjNJIXXM+lHqCDrjDaDhNcz mq1LCRlU6/WDjvkuwaVhZG4lXxMDrvKnXMkjseQ2oKjwrIdfQM86H1z5J31lfhqo p+of0cimcIsBgSCPu+h96LHuAzeRBCbDKeqrfZtAZAGsokRina9947fRWxXHh3O6 6ILmXKNRxxWbDkPvYnQWUat8SbSTDoPWrDIGDRIAypqYo3pcN2OE0C1chqgDZQxk r+9kYZQpupOAN2TR+fM7JvbO9coKI8Uqog8CopoMeDQkd0YjcqlB1E0svODHTzcS oRzogDBYDqNLP7qVkNXpcOAXSVioBgiSDf7o5RdS/qmUyXBIeq6I5z8xBcd+BQ/n /9Frkm6K7IKP3ngUP4wEoiPx5ZE5+fPIScGmVUcZIMhkvMvem9XXh1yyhqN14gfj mLwPGdWbrgG8QUe0s2WeWIyss6uTiyF+ZbJSo2XOKVc3YFMVUUfgyudqAV1wWdZi nUk+H3pkqOKoHAy/8fST =3DTOQn -----END PGP PUBLIC KEY BLOCK----- --------------41B0FC702EE19BAD5127A8F1-- --CqPCAAoE8CpAR5QI20kYYtJqK2TDglWiK-- --UlOgxx0oo6AzdtRVJGZ4uR84DU1AZuQTi Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEW7Wm6ldl0sWGPK4nWrL68XsXK+oFAltnYZQACgkQWrL68XsX K+qHMBAAlWWskhd+2j47wZ7dQkHezKB5WMKkP6ipRbE9zq78daDJQLX08P4sp5iV 34FNDG4UG1iAYMIDrQpVAUXboeHtFMrU2fEOfSWcxHS7AOwxVcT/Hkxs/FkJGlCM AK/EraxHj02cUKfqhTxY4hnsnSuxl19kduhRVdpFi5RJ1awgMt9X7i1xchbH32wP dfpfslUWUxB06n8/LT1tb+hy1eeyA9i2kOBIjHbT2ElqmHbIieK0w/INPxsX8nLT Z/nmpzFCkWK1uvz31y9b/L3amU0i0ZZ8qtCl2AEv48WBoVQ9m133NVtIfVoJBfy0 +VSr99nqbOj9k5rbI36+XoUgG6TVMfBsUYdEtWgoDy9F1QnXQN0iUQwH6GsTe8Yn rglsLVpTkK2jiYEc8L/ZFT4xoJiswASdddKbFEJ+wWVfqbq8D5V/0zxvXvAR1Sz+ YAA6oMwmcInSMN5X1QhoOMKU5ACQN/ymkTyx1tX2tJJebbB2VUpuLJqOxpA6YFFy YaLC3s+avfAIir++DYjt1WEKXjf+Ki/evrHRtkpnFsiIYzRq9mjtKCaajYPQftxg f8iwWTOyElc9zvi/CtIDaYaZAvkHcVgyMdOPU5FLy3M365leNfLSMVNNN1fPCVBE hL0NATzr+bxsxI/1JiFNiR5Ot5Lo142OHDlddzaIB+bSINIC/RM= =C/AU -----END PGP SIGNATURE----- --UlOgxx0oo6AzdtRVJGZ4uR84DU1AZuQTi--