Subject: Re: [dtn] [EXTERNAL] WGLC on draft-ietf-dtn-bpsec-interop-sc

From: "Burleigh, Scott C (US 312B)" <[email-masked]>
Date: Mon, 5 Aug 2019 16:22:52 +0000

A couple of comments on draft-ietf-dtn-bpsec-interop-sc-00:

1.  In the Introduction, "inter-bundle" is confusing.  Is "intra-bundle" intended?  Or "inter-node"?  I don't see how bpsec provides security features that operate between bundles.

2.  In 3.3: it's critical that Primary Blocks be protected by BIBs.  I think this section should specify the way in which the security context applies to the primary block (which lacks block type code, block number, block processing control flags, and block-type-specific data fields) in addition to the way it applies to canonical blocks.

3.  Also in 3.3: it sounds like there is no integrity protection for the block header of a canonical block.  What's the rationale for that?  Does it imply that CRCs are always mandatory for all canonical blocks?

4.  In 4.1: the last sentence says that the size of the target block is modified by encryption, but 4.4.1 and 4.6 seem to say that it isn't.  Which is correct?

5.  In 4.3: is "hashing" correct here?

6.  Also in 4.3: does encryption provide no authentication of the block header of a canonical block?

7.  In 5.1:  should "block types" (in the section header and first sentence) be "security contexts" instead?

Scott

-----Original Message-----
From: dtn <[email-masked]> On Behalf Of Marc Blanchet
Sent: Friday, July 26, 2019 10:20 AM
To: DTN WG <[email-masked]>
Subject: [EXTERNAL] [dtn] WGLC on draft-ietf-dtn-bpsec-interop-sc

Hello,
  this is a WGLC on draft-ietf-dtn-bpsec-interop-sc. Given vacation time in some areas, this WGLC last until August 31st. Please send your comments to the list.

Context: this document is a needed companion document to BPsec.

Marc&Rick, co-chair.

_______________________________________________
dtn mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/dtn