<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi Jeff,<div class=""><br class=""></div><div class="">Thanks for your reply and those helpful paper.</div><div class=""><br class=""></div><div class="">Seems that NDN separate signature and encryption, putting encryption to application’s responsibility.</div><div class=""><br class=""></div><div class="">It makes sense, although I’m not sure if that’s a good idea. Seems more trust need to be given to applications, which is not very trustful ( since “security” is protecting us from those malicious applications).</div><div class=""><br class=""></div><div class="">Thanks.</div><div class=""><br class=""></div><div class="">Best,</div><div class="">Pengyuan</div><div class=""><br class=""></div><div><blockquote type="cite" class=""><div class="">On 14 Apr 2017, at 21:05, Thompson, Jeff <<a href="mailto:jefft0@remap.ucla.edu" class="">jefft0@remap.ucla.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-family: Calibri, sans-serif; font-size: 14px;" class="">
<div class="">Hi Pengyan,</div>
<div class=""><br class="">
</div>
<div class="">There are two categories of keys: Encryption keys (for example to encrypt data in a TLS session) and signing keys (for example to make an RSA signature which authenticates a packet). The NDN KeyLocator is used for the second category, to name a certificate
which has the public key of the private key that make the packet’s signature. Packet signatures are part of the NDN protocol at the network layer. This paper describes one approach and has use case examples:</div>
<div class=""><a href="https://named-data.net/wp-content/uploads/2015/06/ndn-0030-2-trust-schema.pdf" class="">https://named-data.net/wp-content/uploads/2015/06/ndn-0030-2-trust-schema.pdf</a> </div>
<div class=""><br class="">
</div>
<div class="">Encrypting data is handles at the application layer (and does not use the packet’s KeyLocator). This paper shows a way to distribute encryption keys for group-based access control:</div>
<div class=""><a href="https://named-data.net/wp-content/uploads/2016/02/ndn-0034-2-nac.pdf" class="">https://named-data.net/wp-content/uploads/2016/02/ndn-0034-2-nac.pdf</a> </div>
<div class=""><br class="">
</div>
<div class="">Thanks,</div>
<div class="">- Jeff T</div>
<div class=""><br class="">
</div>
<div class="">On 2017/4/14, 11:55:35, "Ndn-interest on behalf of Pengyuan Zhou" <<a href="mailto:ndn-interest-bounces@lists.cs.ucla.edu" class="">ndn-interest-bounces@lists.cs.ucla.edu</a> on behalf of
<a href="mailto:zpymyyn@gmail.com" class="">zpymyyn@gmail.com</a>> wrote:</div>
<div class=""><br class="">
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;" class="" type="cite">
<div class="">Hi all,</div>
<div class=""><br class="">
</div>
<div class="">According to my understanding, the KeyLocator has the storage location of the key.</div>
<div class=""><br class="">
</div>
<div class="">My question is where normally should the key be stored, especially for secure transmission?</div>
<div class=""><br class="">
</div>
<div class="">Since NDN is not end-to-end, there might not be thing like "TLS handshake”, or is there?</div>
<div class=""><br class="">
</div>
<div class="">If not, then how does NDN realise the agreement of "Master Secret and Session key” (or sth. similar)?</div>
<div class=""><br class="">
</div>
<div class="">Seems to me that all the key info including the KeyLocator are predefined before transmission, is that realistic?</div>
<div class=""><br class="">
</div>
<div class="">There might be understanding, please correct me if so.</div>
<div class=""><br class="">
</div>
<div class="">Thanks.</div>
<div class=""><br class="">
</div>
<div class="">Best,</div>
<div class="">Pengyuan Zhou</div>
<div class="">University of Helsinki</div>
<div class="">_______________________________________________</div>
<div class="">Ndn-interest mailing list</div>
<div class=""><a href="mailto:Ndn-interest@lists.cs.ucla.edu" class="">Ndn-interest@lists.cs.ucla.edu</a></div>
<div class=""><a href="http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest" class="">http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest</a></div>
<div class=""><br class="">
</div>
</blockquote>
</div>
_______________________________________________<br class="">Ndn-interest mailing list<br class=""><a href="mailto:Ndn-interest@lists.cs.ucla.edu" class="">Ndn-interest@lists.cs.ucla.edu</a><br class="">http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest<br class=""></div></blockquote></div><br class=""></body></html>