Re: bfd - Not having a session at IETF 119

2024-02-05 Thread Jeffrey Haas
> On Feb 5, 2024, at 1:12 AM, > wrote: > Just one small update to the wiki, the title of > draft-ietf-bfd-unaffiliated-echo has been changed from "Unaffiliated BFD Echo > Function" to "Unaffiliated BFD Echo" since -03 version. > > Fixed. :-) -- Jeff

BFD authentication package

2024-02-05 Thread Jeffrey Haas
Working Group, There's been a lot of behind the scenes work in github to try to get our bundle of authentication features completed. As of today: https://datatracker.ietf.org/doc/html/draft-ietf-bfd-optimizing-authentication-13

Re: BFD authentication package

2024-02-05 Thread Jeffrey Haas
Mahesh correctly points out that opt-13 is the 2022 version. The updated version from the recent github work should be published hopefully soon. -- Jeff (need. more. caffeine...) > On Feb 5, 2024, at 10:06 AM, Jeffrey Haas wrote: > > Working Group, > > There's been a lot of behind the scenes

I-D Action: draft-ietf-bfd-optimizing-authentication-14.txt

2024-02-05 Thread internet-drafts
Internet-Draft draft-ietf-bfd-optimizing-authentication-14.txt is now available. It is a work item of the Bidirectional Forwarding Detection (BFD) WG of the IETF. Title: Optimizing BFD Authentication Authors: Mahesh Jethanandani Ashesh Mishra Ankur Saxena

Re: [mpls] Review of draft-mirsky-mpls-bfd-bootstrap-clarify

2024-02-05 Thread Carlos Pignataro
{ "emoji": "👍🏼", "version": 1 }

Re: I-D Action: draft-ietf-bfd-optimizing-authentication-14.txt

2024-02-05 Thread Reshad Rahman
Hi, I've provided some comments to the authors privately, sharing them here to restart/continue the discussion on the WG alias. My main technical concern is in the changes to BFD auth mode: when transitioning to No auth for up packets, we don't know if the other end supports procedure changes f

Re: I-D Action: draft-ietf-bfd-secure-sequence-numbers-13.txt

2024-02-05 Thread Reshad Rahman
Hi, Basic question on this: I was recently reading up on ISAAC and I saw mention of ISAAC+ but I don't recall where... Assuming this wasn't a dream, is this document using ISAAC or ISAAC+? Regards,Reshad. On Sunday, February 4, 2024, 05:49:17 PM EST, internet-dra...@ietf.org wrote: In

Re: I-D Action: draft-ietf-bfd-secure-sequence-numbers-13.txt

2024-02-05 Thread Alan DeKok
On Feb 5, 2024, at 4:40 PM, Reshad Rahman wrote: > Basic question on this: I was recently reading up on ISAAC and I saw mention > of ISAAC+ but I don't recall where... Assuming this wasn't a dream, is this > document using ISAAC or ISAAC+? I haven't heard of ISAAC+. Wikipedia only lists ISAA

Re: I-D Action: draft-ietf-bfd-secure-sequence-numbers-13.txt

2024-02-05 Thread Reshad Rahman
Yes wikipedia links to https://eprint.iacr.org/2006/438.pdf On Monday, February 5, 2024, 04:43:56 PM EST, Alan DeKok wrote: On Feb 5, 2024, at 4:40 PM, Reshad Rahman wrote: > Basic question on this: I was recently reading up on ISAAC and I saw mention > of ISAAC+ but I don't recall wh

Re: I-D Action: draft-ietf-bfd-secure-sequence-numbers-13.txt

2024-02-05 Thread Alan DeKok
On Feb 5, 2024, at 4:50 PM, Reshad Rahman wrote: > > Yes wikipedia links to https://eprint.iacr.org/2006/438.pdf Ah, OK. Unfortunately there's no source code, and no test vectors. So I'm a bit wary of "rolling my own". That being said, Page 5 has this text: It is straightforward to dis

Re: I-D Action: draft-ietf-bfd-secure-sequence-numbers-13.txt

2024-02-05 Thread Alan DeKok
Looking at the paper in more detail, I think we should be fine. The attacks are for things like "seed is all zero", which we don't care about here. The main take-away is to change the way we seed ISAAC a little bit, and we should be fine. I'll work something out tomorrow.