Subject: Re: [dtn-security] Bundle Authentication Block interoperability
From: "Ivancic, William D. (GRC-RHN0)" <[email-masked]>
To: "[email-masked]" <[email-masked]>
Date: Tue, 8 Dec 2009 11:33:06 -0600
List-Id: DTN Security Discussion <dtn-security.maillists.intel-research.net>

(Forwarded on Scotts behalf)

Not quite, Will.  The ION key file does need to contain a 20-byte key, which is also what is specified in the DTN2 configuration command as 40 ASCII characters.  The ION key file does *not* need to contain an ASCII key.  In fact, there's a convenience utility provided in ION for making up highly random hexadecimal 160-bit SHA1 keys and writing them to files, in case you don't want to do it yourself.

Scott

> -----Original Message-----
> From: [email-masked] [mailto:dtn- 
> [email-masked]] On Behalf Of Ivancic, 
> William D. (GRC-RHN0)
> Sent: Tuesday, December 08, 2009 8:43 AM
> To: Ivancic, William D. (GRC-RHN0); [email-masked] 
> research.net
> Subject: Re: [dtn-security] Bundle Authentication Block 
> interoperability
> 
> We discovered our problem.
> 
> DTN2 uses a 40 character hex string. ION key file should contain a 20 
> byte ASCII key, not the hex equivalent of that as DTN2 expects. Thus, 
> one can hexdump the 20 byte ION key file and use the hex value of that 
> key in the
> DTN2 config.
> 
> Still interested to know if anyone has run BAB interoperability with 
> various DTN builds.
> 
> 
> --Will

******************************
William D. Ivancic
Phone 216-433-3494
Fax 216-433-8705
Networking Lab 216-433-2620
DTN Lab 216-433-2981
Mobile 440-503-4892
http://roland.grc.nasa.gov/~ivancic 

Date: Tue, 8 Dec 2009 16:49:36 +0000
From: Stephen Farrell <[email-masked]>
To: "Ivancic, William D. (GRC-RHN0)" <[email-masked]>
Cc: "[email-masked]" <[email-masked]>
Subject: Re: [dtn-security] Bundle Authentication Block interoperability

Ivancic, William D. (GRC-RHN0) wrote:
> We discovered our problem.
> 
> DTN2 uses a 40 character hex string. ION key file should contain a 20 byte ASCII key, not the hex equivalent of that as DTN2 expects. Thus, one can hexdump the 20 byte ION key file and use the hex value of that key in the DTN2 config.
> 
> Still interested to know if anyone has run BAB interoperability with various DTN builds.

Not that I know of. I've an MSc student planning to do something
on this next spring/summer, so would be interested in knowing
of interop holes that are worth filling in then.

Good to get the basic ION/DTN2 BAB stuff done though. Well done.

S.

> 
> 
> --Will
> 
> 
>> -----Original Message-----
>> From: [email-masked] [mailto:dtn-
>> [email-masked]] On Behalf Of Ivancic,
>> William D. (GRC-RHN0)
>> Sent: Monday, December 07, 2009 2:24 PM
>> To: [email-masked]
>> Subject: [dtn-security] Bundle Authentication Block interoperability
>>
>> We have been running DTN-2 and ION interoperability tests for BAB up to
>> 64 Kbyte blocks using "dtn" naming.
>>
>> We have run into a problem in that it appears to be in the Hash
>> algorithm or implementation.
>>
>> DTN2 code is using the OpenSSL HMAC functions.
>>
>> According to Scott Burleigh, "The ION code's SHA1 implementation is
>> taken from git, which seems to be using the SHA 180-1 Reference
>> Implementation (Compact Version) developed by Paul Kocher.  The HMAC
>> implementation was written by Bill Van Biesen from RFC 2104 and
>> validated with NIST test vectors."
>>
>> I was wondering if any other DTN bundling implementations have
>> implemented BAB and tested it with other DTN bundling implementations?
>> (i.e. Spindle III, Symbian, JAVA implementations, etc...).
>>
>>
>> Will
> 
> _______________________________________________
> dtn-security mailing list
> [email-masked]
> http://maillists.intel-research.net/mailman/listinfo/dtn-security
> 

From: "Ivancic, William D. (GRC-RHN0)" <[email-masked]>
To: "Ivancic, William D. (GRC-RHN0)" <[email-masked]>, "[email-masked]" <[email-masked]>
Date: Tue, 8 Dec 2009 10:42:33 -0600
Accept-Language: en-US
acceptlanguage: en-US
Subject: Re: [dtn-security] Bundle Authentication Block interoperability

We discovered our problem.

DTN2 uses a 40 character hex string. ION key file should contain a 20 byte ASCII key, not the hex equivalent of that as DTN2 expects. Thus, one can hexdump the 20 byte ION key file and use the hex value of that key in the DTN2 config.

Still interested to know if anyone has run BAB interoperability with various DTN builds.

--Will

>-----Original Message-----
>From: [email-masked] [mailto:dtn-
>[email-masked]] On Behalf Of Ivancic,
>William D. (GRC-RHN0)
>Sent: Monday, December 07, 2009 2:24 PM
>To: [email-masked]
>Subject: [dtn-security] Bundle Authentication Block interoperability
>
>We have been running DTN-2 and ION interoperability tests for BAB up to
>64 Kbyte blocks using "dtn" naming.
>
>We have run into a problem in that it appears to be in the Hash
>algorithm or implementation.
>
>DTN2 code is using the OpenSSL HMAC functions.
>
>According to Scott Burleigh, "The ION code's SHA1 implementation is
>taken from git, which seems to be using the SHA 180-1 Reference
>Implementation (Compact Version) developed by Paul Kocher.  The HMAC
>implementation was written by Bill Van Biesen from RFC 2104 and
>validated with NIST test vectors."
>
>I was wondering if any other DTN bundling implementations have
>implemented BAB and tested it with other DTN bundling implementations?
>(i.e. Spindle III, Symbian, JAVA implementations, etc...).
>
>
>Will

From: "Ivancic, William D. (GRC-RHN0)" <[email-masked]>
To: "[email-masked]" <[email-masked]>
Date: Mon, 7 Dec 2009 13:24:04 -0600
Accept-Language: en-US
acceptlanguage: en-US
Subject: [dtn-security] Bundle Authentication Block interoperability

We have been running DTN-2 and ION interoperability tests for BAB up to 64 Kbyte blocks using "dtn" naming.

We have run into a problem in that it appears to be in the Hash algorithm or implementation.

DTN2 code is using the OpenSSL HMAC functions.

According to Scott Burleigh, "The ION code's SHA1 implementation is taken from git, which seems to be using the SHA 180-1 Reference Implementation (Compact Version) developed by Paul Kocher.  The HMAC implementation was written by Bill Van Biesen from RFC 2104 and validated with NIST test vectors."

I was wondering if any other DTN bundling implementations have implemented BAB and tested it with other DTN bundling implementations? (i.e. Spindle III, Symbian, JAVA implementations, etc...).

Will

******************************
William D. Ivancic
Phone 216-433-3494
Fax 216-433-8705
Networking Lab 216-433-2620
DTN Lab 216-433-2981
Mobile 440-503-4892
http://roland.grc.nasa.gov/~ivancic