Subject: Re: [netconf] latest update to crypto-types and keystore drafts

From: Kent Watsen <[email-masked]>
Date: Tue, 2 Jul 2019 22:53:47 +0000

Hi Qin,

> [Qin]: Not very familiar with this security part, two questions I am curious to know:
> 1.      If the manufacturer generated keys (with 'hidden-key' or 'hidden-private-key') are stored in the factory default datastore, how do we protect manufacturer generated keys from leaking, encryption, signature?

The "secret value" in the manufacturer generated keys would be presented in the configuration as an empty element (no value), as the true value is hidden.

> 2.      Public key and private key pair is usually generated together, if you put private key in factory default datastore, where do we put public key? Rely on TPM hardware to generate public key and put them into operational datastore?

The TPM would generate the key-pair, and then share the public-key with the system.  It's TBD if the public-key would be in <operational>, <factory-default>, or both.

Kent // contributor