Subject: [dtn] Fw: New Version Notification for draft-bsipos-dtn-bpsec-cose-01.txt

From: Brian Sipos <[email-masked]>
Date: Mon, 29 Jun 2020 01:27:25 +0000

All,
This forwarded draft extends BPSec to allow using COSE algorithms, but it also addresses in Section 6.1 a behavior which is allowed by base BPSec:
Neither the BIB or BCB includes primary block or canonical block data in additional authenticated data (AAD) so there is a trivial replay attack to capture and re-send a block along with it's BIB or BCB. There is no cryptographic binding of a BIB or BCB to the bundle for which it was originally generated, so a replayed block and a replayed BIB or BCB from the same bundle will result in a valid signed/encrypted block in the second bundle. There is no way to detect the replay.

From: [email-masked] <[email-masked]>
Sent: Saturday, June 27, 2020 13:24
To: Brian Sipos <[email-masked]>; Brian Sipos <[email-masked]>
Subject: New Version Notification for draft-bsipos-dtn-bpsec-cose-01.txt 

A new version of I-D, draft-bsipos-dtn-bpsec-cose-01.txt
has been successfully submitted by Brian Sipos and posted to the
IETF repository.

Name:           draft-bsipos-dtn-bpsec-cose
Revision:       01
Title:          DTN Bundle Protocol Security COSE Security Contexts
Document date:  2020-06-26
Group:          Individual Submission
Pages:          16
URL:            https://www.ietf.org/internet-drafts/draft-bsipos-dtn-bpsec-cose-01.txt
Status:         https://datatracker.ietf.org/doc/draft-bsipos-dtn-bpsec-cose/
Htmlized:       https://tools.ietf.org/html/draft-bsipos-dtn-bpsec-cose-01
Htmlized:       https://datatracker.ietf.org/doc/html/draft-bsipos-dtn-bpsec-cose
Diff:           https://www.ietf.org/rfcdiff?url2=draft-bsipos-dtn-bpsec-cose-01

Abstract:
   This document defines an integrity security context and a
   confidentiality security context suitable for using CBOR Object
   Signing and Encryption (COSE) algorithms within Bundle Protocol
   Security (BPSec) blocks.  A profile of COSE is also defined for BPSec
   interoperation.

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat