headers
Dan Harkins | 10 Feb 2008 08:21

I-D for password-authenticated EAP method


  Hello,

  There's a new draft in the Internet-Drafts database called
draft-harkins-emu-eap-pwd-00.txt. It describes a new EAP method
for authentication using only a password. I believe that it
provides resistance to active attack, passive attack, and
dictionary attack. It also provides forward secrecy and an
authenticated key (not just a shared key between authenticated
entities).

  I would greatly appreciate it if anyone on this list could take
a look at the exchange-- esp. sections 2.6.2 and 2.6.3, with the
notation from section 2.1-- and whether the analysis in section 6
is correct.

  regards,

  Dan.
Permalink | Reply | 2 comments |
headers
Scott Fluhrer | 17 Feb 2008 21:51
Picon
Favicon

Re: I-D for password-authenticated EAP method

I believe I have found a security problem.  See below for details (and one
way you could modify the method defined by the draft to invalidate this
observation).  Oh, and I wouldn't mind someone reviewing the attack to make
sure I hadn't make a fundamental mistake.

> -----Original Message-----
> From: cfrg-bounces <at> ietf.org [mailto:cfrg-bounces <at> ietf.org] On 
> Behalf Of Dan Harkins
> Sent: Sunday, February 10, 2008 2:22 AM
> To: cfrg <at> ietf.org
> Subject: [Cfrg] I-D for password-authenticated EAP method
> 
> 
>   Hello,
> 
>   There's a new draft in the Internet-Drafts database called 
> draft-harkins-emu-eap-pwd-00.txt. It describes a new EAP 
> method for authentication using only a password. I believe 
> that it provides resistance to active attack, passive attack, 
> and dictionary attack. It also provides forward secrecy and 
> an authenticated key (not just a shared key between 
> authenticated entities).
> 
>   I would greatly appreciate it if anyone on this list could 
> take a look at the exchange-- esp. sections 2.6.2 and 2.6.3, 
> with the notation from section 2.1-- and whether the analysis 
> in section 6 is correct.

It turns out that there is a problem, in that it doesn't meet the security
goal in section 1.3.3.  That is, an attacker who doesn't know the key is
(Continue reading)

Permalink | Reply | 1 comment |
headers
Dan Harkins | 19 Feb 2008 08:22

Re: I-D for password-authenticated EAP method


  Hi Scott,

  You have, indeed, found a security problem! I appreciate the time spend
analyzing this protocol. Let me look a bit more at the problem you found,
and your suggested fix. Thanks.

  regards,

  Dan.

On Sun, February 17, 2008 12:51 pm, Scott Fluhrer wrote:
> I believe I have found a security problem.  See below for details (and one
> way you could modify the method defined by the draft to invalidate this
> observation).  Oh, and I wouldn't mind someone reviewing the attack to
> make
> sure I hadn't make a fundamental mistake.
>
>> -----Original Message-----
>> From: cfrg-bounces <at> ietf.org [mailto:cfrg-bounces <at> ietf.org] On
>> Behalf Of Dan Harkins
>> Sent: Sunday, February 10, 2008 2:22 AM
>> To: cfrg <at> ietf.org
>> Subject: [Cfrg] I-D for password-authenticated EAP method
>>
>>
>>   Hello,
>>
>>   There's a new draft in the Internet-Drafts database called
>> draft-harkins-emu-eap-pwd-00.txt. It describes a new EAP
(Continue reading)

Permalink | Reply | 0 comments |
headers
Paul Hoffman | 20 Feb 2008 21:58

Fwd: I-D ACTION:draft-lochter-pkix-brainpool-ecc-01.txt

Having some CFRG input on this would be useful to many WGs...

>A New Internet-Draft is available from the on-line Internet-Drafts
>directories.
>
>
>	Title		: ECC Brainpool Standard Curves and Curve Generation
>	Author(s)	: M. Lochter, J. Merkle
>	Filename	: draft-lochter-pkix-brainpool-ecc-01.txt
>	Pages		: 20
>	Date		: 2008-2-20
>
>This Memo proposes several elliptic curve domain parameters over
>    finite prime fields for use in cryptographic applications.  The
>    domain parameters are consistent with the relevant international 
>standards, and can be used in X.509 certificates and certificate
>    revocation lists (CRLs), for Internet Key Exchange (IKE), Transport
>    Layer Security (TLS), XML signatures, and all applications or
>    protocols based on the cryptographic message syntax (CMS).
>
>A URL for this Internet-Draft is:
>http://www.ietf.org/internet-drafts/draft-lochter-pkix-brainpool-ecc-01.txt

--Paul Hoffman, Director
--VPN Consortium
Permalink | Reply | 1 comment |

Gmane