1. IETF Provisioning of Symmetric Keys (keyprov) WG Update
WG Chairs:
Phillip Hallam-Baker
Hannes Tschofenig
Presentation by Andrea Doherty
November

2. Active Work Dynamic Symmetric Key Provisioning Protocol (DSKPP)
Key Container Specification
Portable Symmetric Key Container (PSKC)
Symmetric Key Package Content Type
Algorithm Identifiers
draft-hallambaker-algorithm-identifiers-00.txt
I-D just submitted; not yet accepted as a Working Group item
WG Charter Page:

3. Current Status
2nd draft of DSKPP protocol specification (draft-ietf-keyprov-dskpp-01) was submitted since WG adoption
Addresses feedback from IETF-69, individual reviews, and mailing list
Working Group Last Call is scheduled for Nov 2007, however, there are still a small number of open issues that have to be resolved
Open issues will be taken up at next IETF meeting Dec 3 in Vancouver

4. DSKPP Primer
DSKPP is a client-server protocol for initialization (and configuration) of symmetric keys to cryptographic modules.
Intended for use within computer and communications systems employing symmetric cryptographic modules that are locally (over-the-wire) or remotely (over-the-air) accessible.
Can be run with or without private-key capabilities in the cryptographic modules, and with or without an established public key infrastructure

5. Protocol variants DSKPP variants support multiple usage scenarios:
Four-pass variant enables mutual key generation by the provisioning server and cryptographic module in near real-time; provisioned keys are not transferred over-the-wire or over-the-air
Two- and one-pass variants enable generation and transport of symmetric keys to a cryptographic module in environments where near real-time communication is not possible
Two- and one-pass variants also enable transport of pre-generated (i.e., legacy) keys to a cryptographic module

6. PSKC
The Portable Symmetric Key Container (PSKC) is an XML-based format specification
2nd draft submitted since IETF KEYPROV WG adoption:
Specifies a standard format for serializing symmetric keys for system import, export or network/protocol transport
Facilitates dynamic provisioning and transfer of a symmetric key such as an OTP shared secret or an encryption key of different types
Specifies key attributes required for interoperability

7. Symmetric Key Package Content Type
The Symmetric Key Package Content Type is an ASN.1-based format specification
First draft submitted after IETF-69 as IETF KEYPROV WG item; no updates since then:
Co-authored by Sean Turner and Russ Housley
Used to transfer one or more plaintext symmetric keys from one party to another
A symmetric key package can be encapsulated in one or more CMS (RFC3852) protecting content types

8. Next Steps
Update draft-ietf-keyprov-dskpp-01.txt to incorporate final feedback from IETF-70 and mailing list before WGLC
Update draft-ietf-keyprov-portable-symmetric-key-container-01.txt to incorporate final feedback from IETF-70 and mailing list before WGLC
Comments are welcomed on the mailing list and via the issue tracker
WG Last Call for DSKPP was scheduled for November 2007, but will be extended.