Thanks for updating the document, John. Ill be generating the shepherd
write-up shortly to get the process moving.
-Peter
From: Emu <emu-boun...@ietf.org> On Behalf Of John Mattsson
Sent: Saturday, January 21, 2023 7:19 AM
To: emu@ietf.org
Subject: Re: [Emu] I-D Action: draft-ietf-emu-aka-pfs-09.txt
Hi,
We submitted -09 addressing the comments during the second WGLC. We also
made some smaller editorial changes:
- Scalable Vector Graphics (SVG) versions for all figures have been added so
the draft looks nice in HTML. The figures have been slightly modified to
render nicely with aasvg (as suggested by Michael Richardson).
- Corrections and clarifications were made in the IANA considerations. The
table in the IANA section has been made into a proper xml table so that it
also looks nice in HTML.
- A reference has been added to the Section in SEC1 describing how to do
decompression. There was already a reference to SEC1 for how to do
compression.
- The strengthened identity protection requirement is now mentioned in the
introduction.
- Reference updates.
- Various editorial improvements.
As discussed on the list, no changes were needed due to the Wi-Fi privacy
specification mentioned by Heikki Vatiainen.
Please move forward in the publication process as decided
https://mailarchive.ietf.org/arch/msg/emu/-asKK3jV5sNrpJXQMqcjsLMGAGE/
Cheers,
John
From: Emu <emu-boun...@ietf.org <mailto:emu-boun...@ietf.org> > on behalf of
internet-dra...@ietf.org <mailto:internet-dra...@ietf.org>
<internet-dra...@ietf.org <mailto:internet-dra...@ietf.org> >
Date: Saturday, 21 January 2023 at 16:04
To: i-d-annou...@ietf.org <mailto:i-d-annou...@ietf.org>
<i-d-annou...@ietf.org <mailto:i-d-annou...@ietf.org> >
Cc: emu@ietf.org <mailto:emu@ietf.org> <emu@ietf.org <mailto:emu@ietf.org>
>
Subject: [Emu] I-D Action: draft-ietf-emu-aka-pfs-09.txt
A New Internet-Draft is available from the on-line Internet-Drafts
directories.
This draft is a work item of the EAP Method Update WG of the IETF.
Title : Forward Secrecy for the Extensible Authentication
Protocol Method for Authentication and Key Agreement (EAP-AKA' FS)
Authors : Jari Arkko
Karl Norrman
Vesa Torvinen
John Preuß Mattsson
Filename : draft-ietf-emu-aka-pfs-09.txt
Pages : 32
Date : 2023-01-21
Abstract:
Many different attacks have been reported as part of revelations
associated with pervasive surveillance. Some of the reported attacks
involved compromising the smart card supply chain, such as attacking
SIM card manufacturers and operators in an effort to compromise
shared secrets stored on these cards. Since the publication of those
reports, manufacturing and provisioning processes have gained much
scrutiny and have improved. However, the danger of resourceful
attackers for these systems is still a concern. Always assuming
breach such as key compromise and minimizing the impact of breach are
essential zero-trust principles.
This specification updates RFC 9048, the EAP-AKA' authentication
method, with an optional extension. Similarly, this specification
also updates the earlier version of the EAP-AKA' specification in RFC
5448. The extension, when negotiated, provides Forward Secrecy for
the session key generated as a part of the authentication run in EAP-
AKA'. This prevents an attacker who has gained access to the long-
term pre-shared secret in a SIM card from being able to decrypt any
past communications. In addition, if the attacker stays merely a
passive eavesdropper, the extension prevents attacks against future
sessions. This forces attackers to use active attacks instead.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-emu-aka-pfs/
There is also an htmlized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-emu-aka-pfs-09
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-emu-aka-pfs-09
Internet-Drafts are also available by rsync at
rsync.ietf.org::internet-drafts
_______________________________________________
Emu mailing list
Emu@ietf.org <mailto:Emu@ietf.org>
https://www.ietf.org/mailman/listinfo/emu
_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu
