[LACNIC/Seguridad] IRTF I-D: "On the Generation of Transient Numeric Identifiers"
Fernando Gont
fgont en si6networks.com
Vie Jun 10 02:58:46 -03 2022
Estimad en s,
Ivan Arce y quien suscribe hemos publicado una revision de nuestro IRTF
I-D "On the Generation of Transient Numeric Identifiers".
El mismo se encuentra disponible en:
https://www.ietf.org/archive/id/draft-irtf-pearg-numeric-ids-generation-09.html
Abstract:
---- cut here ----
This document performs an analysis of the security and privacy
implications of different types of "transient numeric identifiers" used
in IETF protocols, and tries to categorize them based on their
interoperability requirements and their associated failure severity when
such requirements are not met. Subsequently, it provides advice on
possible algorithms that could be employed to satisfy the
interoperability requirements of each identifier category, while
minimizing the negative security and privacy implications, thus
providing guidance to protocol designers and protocol implementers.
Finally, it describes a number of algorithms that have been employed in
real implementations to generate transient numeric identifiers, and
analyzes their security and privacy properties. This document is a
product of the Privacy Enhancement and Assessment Research Group (PEARG)
in the IRTF.
---- cut here ----
Si algun@ anda con ganas de leerlo, este seria un momento mas que
apropiado como para enviar feedback. ;-)
Saludos cordiales, y gracias!
--
Fernando Gont
SI6 Networks
e-mail: fgont en si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
Más información sobre la lista de distribución Seguridad