[secdir] secdir review of draft-ietf-lisp-lcaf-15

David Mandelberg <david@mandelberg.org> Sat, 24 September 2016 18:53 UTC

To: iesg@ietf.org, secdir@ietf.org, draft-ietf-lisp-lcaf.all@ietf.org
From: David Mandelberg <david@mandelberg.org>
Message-ID: <17032e8e-f1d0-8fb4-7294-2e2ca5c9fb06@mandelberg.org>
Date: Sat, 24 Sep 2016 14:53:23 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="DwSatSTx3v4Md3nGMrjvq2XPwHSdAhn09"
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/9Ek2CMK66yEyLf918ryXdPmeaHg>
Subject: [secdir] secdir review of draft-ietf-lisp-lcaf-15
Precedence: list

Hi,

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the IESG.
These comments were written primarily for the benefit of the security
area directors.  Document editors and WG chairs should treat these
comments just like any other last call comments.

I found one issue in various parts of the document (described below),
but I'm not sure it's relevant to security. If it is, then I think this
document is Almost Ready. If not, then I think this document is Ready
With Nits.

There are multiple places in the document where it's possible to encode
semantically equivalent information in multiple ways, despite the word
"canonical" being in the title of the document. Is there anything that
relies on these addresses being canonical for security purposes?

Multiple places in the document (sections 4.1, 4.5, and 4.8) specify
mask lengths, but do not specify that the masked out bits MUST be set to
zero.

Section 4.4: The description of RTR RLOC Address gives two different
ways to encode an address with zero RTRs.

Section 4.10.5: If I understand the compatibility mode correctly, this
explicitly creates a second way to encode a semantically identical address.

Section 5.4: There are many different ways to encode equivalent JSON
data here.

Section 6 (Security Considerations): There is no discussion of these
addresses being canonical, and what other systems might or might not
rely on these addresses being canonical.


I also have some questions/nits:

Section 3: Shouldn't the LCAF sort-key of {afi, LCAF-Type} also include
the RLOC-address or LCAF payload?

Section 4.3: Altitude is described as a signed integer, but this
document doesn't specify the encoding. I assume it's two's complement,
but that should probably be made explicit.

Section 4.7: The Key Count description talks about "Key sections," but
doesn't say which fields are part of the key section (and can thus be
repeated). I have a guess which fields are part of the key section, but
it's not entirely clear.

Section 4.7: The Key Algorithm description doesn't point to a registry
of valid values or otherwise say how to interpret values in that field.

-- 
David Eric Mandelberg / dseomn
http://david.mandelberg.org/

Attachment: signature.asc

[secdir] secdir review of draft-ietf-lisp-lcaf-15 David Mandelberg
Re: [secdir] secdir review of draft-ietf-lisp-lca… Joel M. Halpern
Re: [secdir] secdir review of draft-ietf-lisp-lca… Dino Farinacci
Re: [secdir] secdir review of draft-ietf-lisp-lca… Dino Farinacci
Re: [secdir] secdir review of draft-ietf-lisp-lca… David Mandelberg
Re: [secdir] secdir review of draft-ietf-lisp-lca… Dino Farinacci
Re: [secdir] secdir review of draft-ietf-lisp-lca… Dino Farinacci
Re: [secdir] secdir review of draft-ietf-lisp-lca… David Mandelberg
Re: [secdir] secdir review of draft-ietf-lisp-lca… Dino Farinacci
Re: [secdir] secdir review of draft-ietf-lisp-lca… David Mandelberg
Re: [secdir] secdir review of draft-ietf-lisp-lca… Dino Farinacci
Re: [secdir] secdir review of draft-ietf-lisp-lca… David Mandelberg
Re: [secdir] secdir review of draft-ietf-lisp-lca… Dino Farinacci
Re: [secdir] secdir review of draft-ietf-lisp-lca… David Mandelberg

[secdir] secdir review of draft-ietf-lisp-lcaf-15

Attachment: signature.asc