[Ndn-interest] Signature verification

[César A. Bernardini]

Mateo,

I have implemented a security protocol for NDN/CCN (PROTECTOR, icc2016).
The implementation is way complicated in NDN.

It is several orders of magnitude easier with the Athena CCNx. They have a
receiver and a sender that you can overwrite to implement your protocol.

However, be careful, that both implementations Are not really flexible
neither prepared for extensions.

Bests,

On Sep 26, 2016 20:04, "Matteo Bertolino" <Matteo.Bertolino at eurecom.fr>
wrote:

> Good morning,
> I am searching an example about how to realize secure communication,
> because the security library tutorial on the web site did not solved lots
> of doubts.
> Specifically, I would like to realize something like:
>
> Consumer --- NDN network with some gateways --- GW_edge --- Producer
> , where:
>
> - The Consumer requests a data;
> - Producer has a certificate given by an Authority A well know. Consumer
> has the certificate of A in its store.
> - Producer has two keys: KSK long term , DSK for short term. Now let's
> focus on the data origin authentication.
> - Producer sign the data packet with its certificate.
> - Consumer check the certificate of Producer and it notices that it was
> signed by A.
> - Consumer sends an Interest to A in order to obtain its certificate.
> - Consumer see that A's certificate it is the same that it cached, and it
> does not drop the data packet.
>
> These steps are not "mandatory", I mean  that if you know a better method
> to perform authentication or something else that I can study in order to
> understand better is good the same.
>
> I am working in C++. I had a look to the ndn-cxx api, but I do not
> understand the elementary steps about how to realize the communication
> above mentioned.
>
> Best regards,
> Matteo
>
> ------------------------------------------------------------
> -------------------
> This message was sent using EURECOM Webmail: http://webmail.eurecom.fr
>
>
> _______________________________________________
> Ndn-interest mailing list
> Ndn-interest at lists.cs.ucla.edu
> http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/ndn-interest/attachments/20160926/9710dabd/attachment.html>