Re: [Babel-users] Question about the status of RFC7298

2017-04-17 Thread Juliusz Chroboczek
> I'm working on securing routing metrics from forgery rather than
> actual encryption/security for the data in transit. I doubt what I
> come up with will end up meeting anyone else's requirements nor be
> upstreamable due to just how much I'll probably end up touching on.

You might be surprised.

> So thanks for the warning but I'm off to make a fork anyways so I'm
> not concerned.

Please stay in touch nonetheless.

-- Juliusz

___
Babel-users mailing list
Babel-users@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/babel-users


Re: [Babel-users] Question about the status of RFC7298

2017-04-17 Thread justin kilpatrick
On Mon, Apr 17, 2017 at 7:47 PM, Juliusz Chroboczek  wrote:
> So while I encourage you to look at Denis' work, and while I'd love to see
> it forward-ported to head, please do not be overly disappointed if the
> final approach to securing Babel turns out to be something else.

I'm working on securing routing metrics from forgery rather than
actual encryption/security for the data in transit. I doubt what I
come up with will end up meeting anyone else's requirements nor be
upstreamable due to just how much I'll probably end up touching on.

So thanks for the warning but I'm off to make a fork anyways so I'm
not concerned.

___
Babel-users mailing list
Babel-users@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/babel-users


Re: [Babel-users] Question about the status of RFC7298

2017-04-17 Thread justin kilpatrick
Thank you very much! I did see that repo when I was trying to find
this, but the tagline threw me off.

I'll try and rebase it off of master and see what I can do about
updating it and adding asymmetric key support.

On Sun, Apr 16, 2017 at 4:26 PM, Denis Ovsienko  wrote:
>  On Fri, 14 Apr 2017 13:25:05 +0100 justin kilpatrick  wrote 
>>Hello everyone, I've been working on a implementation of Batman-adv
>>with asymmetric key signing/verification of overhead packets for a few
>>months now. I'm not much of a kernel programmer so calling it rough
>>would be generous.
>>
>>I stumbled upon Babel and it's proposed HMAC extension doing my early
>>research but I could never find a repository, I'm wondering if it was
>>ever implemented and if so where I could find it?
>
> Hello Justin.
>
> Yes, there is running code. The Internet-Draft that eventually became RFC 
> 7298 was written at the same time as the code was developed, you can find it 
> in this git repository: https://github.com/Quagga-RE/quagga-RE
>
> Specifically, the commits are listed on this wiki page (rounds 5 and 6): 
> https://github.com/Quagga-RE/quagga-RE/wiki/hashes
>
> As far as software licences go, this was a GPL contribution to a GPL software 
> if that helps. I don't remember when I ran this code last time, 
> unfortunately. When it was developed in 2012-2014, it was working fine. If 
> you want to debug it on wire, tcpdump can print the TLVs from RFC 7298.
>
> --
> Denis Ovsienko
>
>
>
> ___
> Babel-users mailing list
> Babel-users@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/babel-users

___
Babel-users mailing list
Babel-users@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/babel-users


Re: [Babel-users] Question about the status of RFC7298

2017-04-16 Thread Denis Ovsienko
 On Fri, 14 Apr 2017 13:25:05 +0100 justin kilpatrick  wrote  
>Hello everyone, I've been working on a implementation of Batman-adv 
>with asymmetric key signing/verification of overhead packets for a few 
>months now. I'm not much of a kernel programmer so calling it rough 
>would be generous. 
> 
>I stumbled upon Babel and it's proposed HMAC extension doing my early 
>research but I could never find a repository, I'm wondering if it was 
>ever implemented and if so where I could find it? 

Hello Justin.

Yes, there is running code. The Internet-Draft that eventually became RFC 7298 
was written at the same time as the code was developed, you can find it in this 
git repository: https://github.com/Quagga-RE/quagga-RE

Specifically, the commits are listed on this wiki page (rounds 5 and 6): 
https://github.com/Quagga-RE/quagga-RE/wiki/hashes

As far as software licences go, this was a GPL contribution to a GPL software 
if that helps. I don't remember when I ran this code last time, unfortunately. 
When it was developed in 2012-2014, it was working fine. If you want to debug 
it on wire, tcpdump can print the TLVs from RFC 7298.

-- 
Denis Ovsienko



___
Babel-users mailing list
Babel-users@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/babel-users