<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:43061790;
mso-list-type:hybrid;
mso-list-template-ids:1232130908 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l1
{mso-list-id:512187449;
mso-list-template-ids:-1974429842;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">OK, now that we’re well-along with BPv7 and are waiting on ESA to provide draft text for high-speed-capable LTP, let’s see if we can move the BPsec book along. In looking at the book with the latest comments, I think we’re not as far along
as I’d thought (maybe in a good way: i.e. due to lots of good comments from the SEA-SEC folks), but certainly making progress.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<ol style="margin-top:0in" start="1" type="1">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo1">Thanks to all the SEA-SEC folks who looked at the book.<o:p></o:p></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo1">I’ve accepted most comments, responded to a few, and have added some text on security associations vs. security contexts. The main changes / open questions are listed below.<o:p></o:p></li></ol>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The current draft red book is in this directory: <a href="https://drive.google.com/drive/folders/1U8AyMBEDLT8U2mjowhK7B9ZJbtt6dcsF?usp=share_link">
https://drive.google.com/drive/folders/1U8AyMBEDLT8U2mjowhK7B9ZJbtt6dcsF?usp=share_link</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Definitions<o:p></o:p></b></p>
<p class="MsoNormal">We now just reference the definitions from the various normative reference documents instead of repeating them.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Security Contexts<o:p></o:p></b></p>
<p class="MsoNormal">I moved some text and added text to a SECURITY ASSOCIATIONS AND SECURITY CONTEXTS section in Section 2. My hope is that this addresses the question on the difference between a SA and a security context, but we’ll see.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Authenticity<o:p></o:p></b></p>
<p class="MsoNormal">There were several questions around using the integrity service to provide authenticity. I added some text saying that we’re following RFC9172 in referring to an integrity service, but that with appropriate mechanisms (e.g. digital signatures
and the application of integrity to the primary block) that the integrity service may also provide data authenticity. In a very few places I replaced “integrity” with “integrity / authenticity” to be explicit.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I could see using integrity protection without authentication for e.g. housekeeping telemetry or some other non-critical data. I would think that integrity and authenticity would always be used for commanding, e.g.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Security Context Identifiers Registry<o:p></o:p></b></p>
<p class="MsoNormal">Are we OK requiring that folks create and register security context identifiers with IANA, or do we want to request that IANA delegate some of that registry space to SANA?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Annex D (CCSDS Security Context)<o:p></o:p></b></p>
<p class="MsoNormal">Does anybody want to take a cut at generating a default security context? Can we just use the ones from RFC9173 (maybe profiling the key lengths)? If nobody else will do it I’ll make something up here for folks to laugh at.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Annexes F and G<o:p></o:p></b></p>
<p class="MsoNormal">I suggest we take Mehmet’s comment and drop Annex F (Bundle Protocol Security Policy Considerations) (or rather, move it to the Green Book). I think we should move Annex G (Service Specification for Bundle Protocol Security Policy) to
the Green Book as well (we HAVE the service spec defined in CCSDS-style in section 4).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> v/r,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> --keith<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>