Sean Shen

1
SeND CGA ECC Supportdraft-shen-csi-ecc-01

• Sean Shen
• Michaela Vanderveen

2
Motivation to extend SeND/CGA support beyond RSA

• Increased Key Length Requirements
• The cryptographic community's (e.g. NIST)
  recommendation is to deprecate the 1024-bit RSA
  algorithms by the year 2010, in favor of longer
  keys or else alternate algorithms.
• Power Memory-limited devices
• An increasing number of power or memory-limited
  devices have joined the Internet, and to them the
  computational burden of RSA-based protocols is
  undesirable.
• Agility for flexibility/evolution
• With the development of cryptography research,
  choice of cryptosystem is necessary.

3
New ECC Signature Option

• Digital Signature
• A variable-length field containing a ECDSA as
  defined in FIPS 186-2, constructed with
  sender's private key over
• CGA Message Type tag for SEND
• Source Address field
• Dest. Address field
• Type, Code, and Checksum fields
• NDP message header
• All NDP options preceding the ECC Signature
  option.

4
New ECC CGA Data Structure

• Public Key
• ITU-X690-2002 ASN.1 structure of the type
  SubjectPublicKeyInfo, defined in SEC1.
• The key size of ECDSA used in SeND and CGA is
  recommended to be 192, 256 or 521 bits. The
  default key size is 192 bits.

5
Updates

• Corrected the name of the draft
• ECC Support for SEND/CGA
• Key length
• "MUST be 256, 384 or 521 the default key size
  SHOULD be 256-bit" to"is recommended to be 192,
  256 or 521. The default key size is 192 bits."
• IANA
• type value for ECC signature option 31 (the
  next available)
• Editorials

6
Adopt as a WG item?
7
References

• SEC1 Standards for Efficient Cryptography
  Group, "SEC 1 Elliptic Curve Cryptography",
  September 2000, lthttp//www.secg.orggt.
• FIPS 186-2 National Institute of Standards and
  Technology, Federal Information Processing
  Standards Publication 186-2, "Digital Signature
  Standard", January 2000.
• SEC2 Standards for Efficient Cryptography
  Group, "SEC2 Recommended Elliptic Curve
  Domain Parameters", September 2000,
  lthttp//www.secg.orggt.
• NIST-800-57 National Institute of Standards
  and Technology, "Recommendation for Key
  Management - Part 1 general, NIST Special
  Publication 800-57", March 2007.

8
Questions?