[Sls-sea-dls] SDLS WG Fall meeting

[Sipos, Brian J.]

Bruno,

I will not be able to attend the upcoming CCSDS, but am very interested to
see this kind of online AKE available for an SDLS control plane. I’m mostly
involved in the SIS-DTN group but overlap in some topics with SDLS.

 

A few questions come to mind after browsing through the document:

1.	There is mention of Noise frame patterns but I don’t see an
explanation of which pattern this protocol makes use of. It seems like “KK”
since each participating entity must be able to authenticate its peer on
first message, but maybe not? Stating this explicitly in Section 2.4 would
help a reader to understand the rest of the document, but I don’t see any
mention of a specific “pattern” in there.
2.	There is not any discussion of how to handle multiple public keys
bound to a module identity, from either the sender’s side (which key to
choose?) or the receiver’s side (can multiple authentication key pairs be
enabled at any one time? Is there a mandatory “make before break” interval
for compatibility and the goal of always available security?)
3.	A potential future binding of public keys to identities via a PKI
leaves a lot to the reader. Is there any expectation of specific PKI
technologies or existing identity binding mechanisms? If using X.509 under
something like an IGCA, how would a SAN extension identify an entity?
4.	I’m at a loss to connect the shared secret state from successful AKE
operation to key material needed by SDLS. I suppose that Section 4.8 is
meant to contain these kind of details eventually. It seems like there will
need to be some method of “fan out” to derive many content keys for SDLS
from a single security association shared secret.

 

Thanks,

Brian S.

 

From: SLS-SEA-DLS <sls-sea-dls-bounces at mailman.ccsds.org> On Behalf Of Saba
Bruno via SLS-SEA-DLS
Sent: Monday, October 12, 2026 8:30 AM
To: sls-sea-dls at mailman.ccsds.org
Subject: [EXT] [Sls-sea-dls] SDLS WG Fall meeting

 


APL external email warning: Verify sender
sls-sea-dls-bounces at mailman.ccsds.org
<mailto:sls-sea-dls-bounces at mailman.ccsds.org>  before clicking links or
attachments

 

 

 

Dear SDLS Working Group members,

 

Next week we will have our technical meeting in Matera, Italy.

 

Please find attached the draft standard for comments. I know it’s a bit
late, please accept my apologies


 

Oana did a tremendous work, all comments are welcome before our meeting.

 

Looking forward to a fruitful meeting,

 

Best regards,

 

Bruno Saba

CNES

SDLS WG Chairman

 

 


Bruno SABA


Sous-direction DTN/TVO : Technique & Numérique / Techniques Véhicules
Orbitaux 

Service ET                     : Electronique Numérique & Traitements Bord

­

18, Avenue Edouard Belin, 31401 TOULOUSE Cedex 9

Tél : +33 (0)5 61 28 28 76

 <https://cnes.fr/fr/> cnes.fr

 



 

 

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.ccsds.org/pipermail/sls-sea-dls/attachments/20261012/f41ae33a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 65058 bytes
Desc: not available
URL: <http://mailman.ccsds.org/pipermail/sls-sea-dls/attachments/20261012/f41ae33a/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6541 bytes
Desc: not available
URL: <http://mailman.ccsds.org/pipermail/sls-sea-dls/attachments/20261012/f41ae33a/attachment-0001.bin>