Re: [MEXT] [dmm] Draft related to DMM

Hi, Carlos,

2011/3/7 Carlos Jesús Bernardos Cano <[email protected]>:
>
> We have just submitted a draft related to DMM. The draft describes a
> possible way of achieving a distributed mobility behavior with Client
> Mobile IP, based on Mobile IPv6 and the use of Cryptographic Generated
> Addresses.
>
> The draft is already on the I-D repository:
>
> http://www.ietf.org/id/draft-bernardos-mext-dmm-cmip-00.txt

I read through your draft, and I have a couple of questions.

First, it seems that you require a BU sent to the DAR right after
SLAAC.  Is this the case?  Why do we need such a BU?

Second, how is the PHKT protected when it transits from the
DAR to the MN?  Did you consider doing a simple Diffie-Hellman
exchange to derive a PHKT for later use by the MN?  That would
neatly avoid having to send the PHKT in the clear or to protect
it with some sort of encryption wrapper.

Third, how do you expect the CGA configuration to interact with
the access network authentication that will be performed before
the MN is allowed to attach to the first DAR?  Do you see any
opportunities for synergy here, if say, EAP was used to authenticate
and derive an MSK?

-Pete