4 Possible SILC protocol and specification document changes. All of these
5 are tentative and doesn't mean that any of them would be done at any
8 o Full rework of the documents as requested by RFC Editor. The plan
9 is to create only two documents:
11 silc-architecture-xx.txt
12 silc-specification-xx.txt
14 o Make @ reserved character in channel names. Accept channel@server
15 names in all commands and notify types.
17 o Add acknowlegments section to specification documents.
19 o Group Diffie-Hellman protocol for establishig key with two or more
22 o Define that with CTR mode PFS MUST be enabled in SKE. CTR rekey
23 cannot be done without PFS because the counter block requires fresh
24 HASH value which requires PFS in rekey.
26 o Extend the Channel ID port to be actually a counter, allowing the
27 2^32 channels per cell, instead of 2^16 like now. The port with
28 compliant implementation would always be 706, and it could be used
29 as a counter, starting from 706... For interop, with old code.
31 o In SKE with UDP/IP responder doesn't have to do retransmissions.
32 Initiator will retransmit its packet. Initiator can be considered
33 the one that actually WANTs to establish the keys. So no need for
34 responder to retransmit. Define this clearly in the specs.
36 o Define clearly that the DSS signature format is the the Dss-Sig-Value
37 ASN.1 encoding defined for PKIX.
39 o Define clearly the SSH2 signature format is the one specified for SSH2
42 o Dynamic server and router connections, ala Jabber. SILC has allowed
43 this from the beginning. It should be written out clearly in the
44 specs. Connection would be created with nick strings (which are of
47 o NAT detection protocool during SKE so that party behind NAT can
48 detect if it is behind NAT and receive the public IP address and port
49 that it may need (servers need it to create valid Server ID). (***DONE)
51 o Counter block send/receive IV 64 bits instead of 32 bits, and the
52 value itself is used as 64-bit MSB ordered counter, which must
53 be reset before the packet sequence counter wraps. It's basically
54 a counter which is initially set to a random value. (***DONE)
56 o Nickname to NEW_CLIENT packet. (***DONE)
58 o Add Source and Destination ID in message MAC computation to fully
59 associate the Message Payload with the true sender and the true
60 recipient of the message. This will fix some security issues that
61 currently exists. It is currently possible in some specific set of
62 conditions to mount a replay attack using Message Payload. This change
63 will remove the possibility of these attacks.
65 After including Source and Destination ID in message MAC, ONLY replay
66 attack possible is the following and with ONLY following conditions:
68 1. the attacker is able to record encrypted Message Payloads and has
69 the ability to replay them.
70 2. the message payload is encrypted with static private message key
71 3. the original sender of the message is not anymore in the network,
72 has changed nickname, has detached and resumed, or has reconnected
74 4. the original receiver of the message is still in the network, has
75 not changed nickname, has not detached and resumed, and has not
76 reconnected to any other server, or, some other user has the same
78 5. the attacker is able to get the same client ID as the original
80 6. the original receiver still has the static key set for the same
81 remote client ID (for original sender's client ID).
83 All this is possible to happen though likelyhood is quite small. It
84 does illustrate how inappropriate the use of static keys is. (***DONE)
86 o The SILC public key identifier separator is ', ' not ','. The
87 whitespace is mandatory. (***DONE)
89 o Definition of EAP as new authentication method for connection auth
92 o Count limit to LIST command?
94 o Strict announces if Channel ID is different than on router? To not
95 allow any modes, topic, etc changes from server if the ID was wrong
96 initially? Meaning: riding with netsplits not possible since the
97 channel created during split will not enforce is modes to the
98 router. Or more liberal solution, like now? Read emails on
99 silc-users. (This is very old issue)
101 o The time values in STATS is 32-bits. After 2038 it's over 32-bits.
103 o Consider for future authenticated encryption modes.