Subject: [karp] long-lived crypto keys

From: [email-masked]
Date: Tue, 27 Apr 2010 21:30:39 +0800

Hi, folks
 In draft-polk-saag-rtg-auth-keytable-02.txt, Figure 1 shows Long-lived 
Crypto Keys can be fed with keys from Automated Key Management 
Protocol(KMP). It is well known that KMP also need long-lived crypto keys 
to protect KMP messages, such as integrity, peer authentication, 
confidentiality, etc. Is there some relationship between thest two kinds 
of long-lived crypto keys? 

      +--------------+   +----------------+
      |              |   |                |
      |  Manual Key  |   | Automated Key  |
      | Installation |   | Mgmt. Protocol |
      |              |   |                |
      +------+-------+   +--+----------+--+
             |              |          |
             |              |          |
             V              V          |<== Not expected for security
      +------------------------+       |    of routing protocols, but
      |                        |       |    often used in other
      | Long-lived Crypto Keys |       |    protocol environments
      |                        |       |    like IPsec and TLS.
      +------------+-----------+       |
                   |                   |
                   |                   |
                   V                   V
        +---------------------------------+
        |                                 |
        | Short-lived Crypto Session Keys |
        |                                 |
        +---------------------------------+

          Figure 1.  Cryptographic key establishment and use.

Best Regards!
Yinxing Wei

--------------------------------------------------------
ZTE Information Security Notice: The information contained in this mail is solely property of the sender's organization. This mail communication is confidential. Recipients named above are obligated to maintain secrecy and are not permitted to disclose the contents of this communication to others.
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the originator of the message. Any views expressed in this message are those of the individual sender.
This message has been scanned for viruses and Spam by ZTE Anti-Spam system.