Update on SEND Keys Draft draftietfmipshophandoverkey00'txt

1
Update on SEND Keys Draftdraft-ietf-mipshop-hando
ver-key-00.txt

• James KempfDoCoMo Labs USAkempf_at_docomolabs-usa.c
  omRajeev Koodli
• Nokiarajeev.koodli_at_nokia.com

2
Outline

• Handover Key exchange
• Handover Key use
• Changes in WG draft
• Current Issues

3
Handover Key Exchange
Access Router
A1 KA1 ...
Handover Key Table
Access Point
E(KA1) encrypt( RSA Public Key for A1, KA1 )
4
Handover Key Use
nAR
pAR
MAC OK!
A1 KA1 ...
Handover Key Table
5
Changes in WG Draft

• In response to review comments by Erik Nordmark
• Restructured Sections 3.1 and 3.2 around actual
  protocol actions rather than node
  responsibilities
• Clarified what to do if the SEND signature
  doesnt verify
• Revised text around key lifetime to emphasize how
  to handle ping-ponging
• Added text to Section 5.0 discussing replay
  attack risk
• Various editorial changes.

6
Current Issues

• Where to define the IANA registry for the
  Algorithm Type (AT) bits (shared with AAA
  handover key distribution)?
• One of the handover key distribution documents?
• FMIP document?
• A separate document?
• RFC 3972 prohibits (MUST NOT) use of the CGA key
  for encryption
• Why is this MUST NOT?
• Currently clarifying with RFC author
• Issue tracker coming shortly...