Using a PAKE within HIP for enrollment
Robert Moskowitz <[email protected]> Wed, 27 Jul 2016 06:19:49 -0700
| Newsgroups | gmane.ietf.hipsec,gmane.ietf.hip |
|---|---|
| Message-ID | <[email protected]> |
I am looking at a HIT enrollment function using 5403-bis. But why should the Registrar accept the Register. This is our basic need of an Out-off-Band process to trust an enrollment. So assume that some process establishes a PSK between the two parties. Perhaps a failed enrollment that sent the phone's # that returns an SMS message with the PSK. The enrollment then grabs that PSK and uses a PAKE HIP parameter for authentication. This would be stronger than what I have in DEX... I would like to get the draft done this week, or early next week. It is mostly written. But I need to put in the trust for the enrollment. I can either lift what I have in DEX, or go with one of the PAKE efforts in CFRG. But which one and how would it work in HIP BEX/DEX? Thanks