[Sis-dtn] SIS-DTN -- SEA-SEC meeting 20150327

[Scott, Keith L.]

*        Overview of BSP and SBSP - Dennis
*        Charles Sheehe
*        Any protection for timing?
*        How do you maintain credentials with timing variations?
*        [NOTE: assumption of loosely synchronized time]
*        How many public keys would you have to hold, especially if bundles live for a long time?
*        Discussion
*        Is there some other security protocol SIS-DTN should be looking at?
*        No - except that CMS (wrapper protocol used by S-MIME) might be an alternative
*        Dennis, Ed, Charles to do analysis of CMS vs. SBSP and run by SEC WG
*        Makes sense to reference SEA WG Ciphersuites document?
*        Yes.  Should make sure that there are 'the right' ciphersuites to cover our needs
*        Policies and procedures may simply reference SEA WG
*        May need some sort of threat assessment.  Stuff to justify the capabilities that we include in SBSP.  Reference IETF and/or CCSDS threat assessments from section 2?
*        Target a delivery date of end of CY2018 when project is updated in CWE

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.ccsds.org/pipermail/sis-dtn/attachments/20150327/49b25f46/attachment.html>