Subject: [ietf-privacy] fyi: tcpcrypt draft

From: Hannes Tschofenig <[email-masked]>
Date: Mon, 25 Jul 2011 10:49:40 -0400

Hi all, 

some of you might be interested in this effort since it aims to provide an opportunistic end-to-end security mechanism for TCP. 

Ciao
Hannes

Begin forwarded message:

> From: Mark Handley <[email-masked]>
> Date: July 24, 2011 1:56:15 PM EDT
> To: Sean Turner <[email-masked]>
> Cc: [email-masked]
> Subject: Re: [saag] fyi: tcpcrypt draft
> 
> Just a brief update:
> 
> - We conducted a pretty extensive study into whether extending TCP in
> this way would be deployable, or whether we've missed something, and
> we've done more testing.  The draft paper is here:
> 
> http://nrg.cs.ucl.ac.uk/mjh/tmp/mboxes.pdf
> 
>  The one thing that came out of this is that you cannot reliably MAC
> TCP sequence numbers in today's Internet.  Far too many paths rewrite
> them, even if they don't do anything else odd to TCP flows.  There'll
> be a new draft right after the IETF that reflects this - we now MAC
> the offset from the initial sequence number instead.
> 
> - We're looking at a library that provides a shim authentication layer
> over tcpcrypt at the moment.  In part, this is to let tcpcrypt play
> nicely with DANE - this seems a good match.  Early days on this at the
> moment though.
> 
> Cheers,
> Mark
> 
> 
> On 24 July 2011 18:17, Sean Turner <[email-masked]> wrote:
>> This draft is being presented at the TSVAREA meeting Thursday morning
>> (room:205ABC).  Both Stephen and I have other engagements, but if you're not
>> headed to another session at that time then it would be great if some of you
>> would head there to interact with the presenter(s).
>> 
>> spt
>> 
>> On 5/8/11 12:31 PM, Sean Turner wrote:
>>> 
>>> The authors of the following draft have asked that I forward this to
>>> saag for comment:
>>> 
>>> https://datatracker.ietf.org/doc/draft-bittau-tcp-crypt/
>>> 
>>> They also noted that there's a Usenix Security paper and video:
>>> http://tcpcrypt.org/docs.php
>>> 
>>> Please direct discussion to [email-masked].
>>> 
>>> Cheers,
>>> 
>>> spt
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> saag mailing list
>>> [email-masked]
>>> https://www.ietf.org/mailman/listinfo/saag
>>> 
>> _______________________________________________
>> saag mailing list
>> [email-masked]
>> https://www.ietf.org/mailman/listinfo/saag
>> 
> _______________________________________________
> saag mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/saag