Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

JPY header needs integrity protection, not only encryption #71

Open
EskoDijk opened this issue Jan 16, 2025 · 0 comments
Open

JPY header needs integrity protection, not only encryption #71

EskoDijk opened this issue Jan 16, 2025 · 0 comments
Labels
issue-for-wg Issue needs to be taken to WG for discussion.

Comments

@EskoDijk
Copy link
Collaborator

EskoDijk commented Jan 16, 2025 •
edited
Loading

Based on Juergen's review here: https://datatracker.ietf.org/doc/review-ietf-anima-constrained-join-proxy-14-opsdir-lc-schoenwaelder-2023-09-25/

It raises the point the the JPY header needs to be integrity-protected, and that "encryption" is maybe not the right term here.

I think we require both integrity (tamper-resistance) and confidentiality for the JPY header data, as the data travels over UDP (unprocted) over potentially many hops and other site IP networks as well.

Same comment on 'integrity' provided by review Malisa:
https://datatracker.ietf.org/doc/review-ietf-anima-constrained-join-proxy-14-secdir-lc-vucinic-2023-09-20/
@EskoDijk EskoDijk added the issue-for-wg Issue needs to be taken to WG for discussion. label Jan 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
issue-for-wg Issue needs to be taken to WG for discussion.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@EskoDijk