Presentation is loading. Please wait.

Presentation is loading. Please wait.

Doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 1 Changes to SAE State Machine Date: 2008-07-13 Authors:

Published byHerbert Grennan Modified over 10 years ago

Similar presentations

Presentation on theme: "Doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 1 Changes to SAE State Machine Date: 2008-07-13 Authors:"— Presentation transcript:

1 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 1 Changes to SAE State Machine Date: 2008-07-13 Authors:

2 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 2 Abstract This document describes the changes being proposed to the SAE

3 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 3 Uniqueness of SAE State Machine The commit messages do a key exchange and the confirm messages do key confirmation. Its necessary to have the key before you can confirm the key, so there is a distinct order to the messaging. Note: this is different than the PLM state machine! Protocol Rules –A MP can commit at any time –A MP can confirm after it has committed and its peer has committed –A MP can accept after its peer has confirmed.

4 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 4 Changes to SAE State Machine Split functionality between a parent process and multiple protocol instances that progress through the defined state machine. Handle the case where different authentication algorithms are proposed by the two peers –This can result in rejection if the offered algorithm is not accepted. –This can result in an ambiguity if the offered algorithm is acceptable but different than the one already offered. Ensure that replay of a confirm message to a protocol instance in Accepted state cannot result in a failure.

5 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 5 Changes to SAE State Machine Protocol Instances –Receive events and transition through defined state machine. –Each protocol instance represents an SAE conversation with a peer MP Parent process –Creates, deletes, and manages protocol instances –Receives frames and dispatches them to protocol instances –Has one state only, all events received in this state transition back to this state

6 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 6 Changes to SAE State Machine Peer offers an algorithm that is supported but differs from the one local instance offered. –The peer with the higher MAC address sends offer once more and remains in committed state. Resending the offer is necessary to prevent livelock. –The peer with the lower MAC address accepts the new group, discards the old commit message, generates a new commit (using the new group) and a confirm message and transitions to confirmed state.

7 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 7 Changes to SAE State Machine offer group 4 offer group 22 Peer with lower MACPeer with higher MAC Commit, group 4Commit, group 26 Confirm higher MAC, repeat offerlower MAC, change offer Peers offer each other acceptable but different algorithms Commit, group 26

8 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 8 Changes to SAE State Machine Peer offers an algorithm that is not supported –Send rejection (status code=13) with algorithm that was rejected –Remain in committed state with retransmission timer set. No need to resend offer, the MP has responded to the offered group but has not yet received a response to its offer (a Rejection could be received or different Commit could be received, just wait). –Peer who receives a Rejection offers another group from its configuration or gives up If the former were back to square 1, checking whether the algorithm being offered matches the algorithm that was offered If the latter the retransmission timer will ensure the local protocol instance gives up, assuming we didnt receive the peers rejection.

9 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 9 Changes to SAE State Machine offer group 4 offer group 22 Peer with lower MACPeer with higher MAC Commit, group 4 Commit, group 26 Confirm higher MAC, repeat offer group 26 is not supported! One peers offers an unacceptable algorithm Reject, group 26 pick another group, ignore second rejection… Commit, group 4 Commit, group 26 Reject, group 26 group 26 is still not supported!

10 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 10 Changes to SAE State Machine To deal with the possibility of frame loss a protocol instance in Accepted state must be able to receive a (another) commit message and respond with a (another) commit message. If both peers are in Accepted state an attacker can replay a commit message. –This can result in a storm of commit messages as the action upon receiving a commit in Accepted state is to send a commit to a peer in Accepted state who sends a commit back…. –To quell the storm an error counter is incremented and after enough the peers give up. But this allows for a trivial attack: just replay one commit message and after the storm the peers give up.

11 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 11 Changes to SAE State Machine Solution: A replay counter! Behavior on sending: –A send-commit counter is added to the Authentication frame of each commit message. Its value is authenticated. –While not in Accepted state the counter is incremented each time a commit message is sent. –When transitioning into Accepted state the counter is set to infinity. Behavior on receipt: –The send-commit counter is checked upon receipt against a last- received counter. Old and invalid commit messages are dropped. –New, and valid, commit messages are responded to as long as the send-commit counter is not infinity.

12 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 12 Changes to SAE State Machine Peer with lower MACPeer with higher MAC Commit Confirm, infinity Confirm, 1 Confirm messages can be resent/replayed Confirm, 1 in committed state in confirmed state Confirm, 2 in accepted state confirm message is valid and has infinity as counter, transition into accepted state, do not retransmit. timer fires, retransmit confirm message is valid, counter is not infinity, send confirm again

13 doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 13 References 11-08-0799-00-000s-sae-state-machine-changes.doc

Download ppt "Doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 1 Changes to SAE State Machine Date: 2008-07-13 Authors:"

Similar presentations

Doc.: IEEE 802.11-08/0755r1 Submission March 2008 Luke Qian etc, Cisco Systems, IncSlide 1 Review of 802.11n A-MPDU DoS Issues – Progress and Status Authors:

Doc.: IEEE /0755r1 Submission March 2008 Luke Qian etc, Cisco Systems, IncSlide 1 Review of n A-MPDU DoS Issues – Progress and Status Authors:
Doc.: IEEE 802.11-09/0413r0 Submission March 2009 Dan Harkins, Aruba NetworksSlide 1 A Study Group for Enhanced 802.11 Security Date: 2009-03-13 Authors:

Doc.: IEEE /0413r0 Submission March 2009 Dan Harkins, Aruba NetworksSlide 1 A Study Group for Enhanced Security Date: Authors:
Doc.: IEEE 802.11-08/1021r1 Submission September 2008 Luke Qian etc.Slide 1 A Simplified Solution For Critical A-MPDU DoS Issues Date: 2008-09-04 Authors:

Doc.: IEEE /1021r1 Submission September 2008 Luke Qian etc.Slide 1 A Simplified Solution For Critical A-MPDU DoS Issues Date: Authors:
Doc.: IEEE 802.11-08/0562r0 Submission May 2008 Adrian Stephens, Intel CorporationSlide 1 TGn LB124 – A detect and mitigate solution to the BA DoS problems.

Doc.: IEEE /0562r0 Submission May 2008 Adrian Stephens, Intel CorporationSlide 1 TGn LB124 – A detect and mitigate solution to the BA DoS problems.
Doc.: IEEE 802.11-08/0833r2 Submission July 2008 Luke Qian etc, CiscoSlide 1 A Proposed Scaled-down Solution to A- MPDU DoS Related Comments in LB 129.

Doc.: IEEE /0833r2 Submission July 2008 Luke Qian etc, CiscoSlide 1 A Proposed Scaled-down Solution to A- MPDU DoS Related Comments in LB 129.
Doc.: IEEE 802.11-08/1021r3 Submission September 2008 Luke Qian etc.Slide 1 A Simplified Solution For Critical A-MPDU DoS Issues Date: 2008-09-09 Authors:

Doc.: IEEE /1021r3 Submission September 2008 Luke Qian etc.Slide 1 A Simplified Solution For Critical A-MPDU DoS Issues Date: Authors:
Doc.: IEEE 802.11-08/1392r0 Submission November 12, 2008 De Vegt (Qualcomm)Slide 1 Inputs for a VHT Selection Procedure Date: 2008-11-10Authors:

Doc.: IEEE /1392r0 Submission November 12, 2008 De Vegt (Qualcomm)Slide 1 Inputs for a VHT Selection Procedure Date: Authors:
Doc.: IEEE 802.11-08/1263r0 Submission November 2008 Dan Harkins, Aruba NetworksSlide 1 A Modest Proposal…. Date: 2008-11-10 Authors:

Doc.: IEEE /1263r0 Submission November 2008 Dan Harkins, Aruba NetworksSlide 1 A Modest Proposal…. Date: Authors:
Doc.: IEEE 802.11-00/087 Submission May, 2000 Steven Gray, NOKIA Jyri Rinnemaa, Jouni Mikkonen Nokia Slide 1.

Doc.: IEEE /087 Submission May, 2000 Steven Gray, NOKIA Jyri Rinnemaa, Jouni Mikkonen Nokia Slide 1.
Doc.: IEEE 802.11-10/0824r2 Submission July 2010 Carlos Cordeiro, Intel CorporationSlide 1 Response to ITU-R Liaison to IEEE on Multiple Gigabit Wireless.

Doc.: IEEE /0824r2 Submission July 2010 Carlos Cordeiro, Intel CorporationSlide 1 Response to ITU-R Liaison to IEEE on Multiple Gigabit Wireless.
Doc.: IEEE 802.19-10/0165r1 SubmissionPäivi Ruuska, NokiaSlide 1 Implementation aspects of a 802.19.1 coexistence system Notice: This document has been.

Doc.: IEEE /0165r1 SubmissionPäivi Ruuska, NokiaSlide 1 Implementation aspects of a coexistence system Notice: This document has been.
Doc.: IEEE 802.11-08/1120r2 Submission September 2008 Guido R. Hiertz et al., PhilipsSlide 1 Terminology changes in a nutshell … Date: 2008-09-09 Authors:

Doc.: IEEE /1120r2 Submission September 2008 Guido R. Hiertz et al., PhilipsSlide 1 Terminology changes in a nutshell … Date: Authors:
Doc.: IEEE 802.11-09/1012r0 Submission September 2009 Dan Harkins, Aruba NetworksSlide 1 Suite-B Compliance for a Mesh Network Date: 2009-09-15 Authors:

Doc.: IEEE /1012r0 Submission September 2009 Dan Harkins, Aruba NetworksSlide 1 Suite-B Compliance for a Mesh Network Date: Authors:
Submission doc.: IEEE 11-13/0487r0 May 2013 Dan Harkins, Aruba NetworksSlide 1 How To Fragment An IE Date: 2013-05-07 Authors:

Submission doc.: IEEE 11-13/0487r0 May 2013 Dan Harkins, Aruba NetworksSlide 1 How To Fragment An IE Date: Authors:
1 November, 2002 doc:.: 802.15-02/480r0 Daniel V. Bailey, Ari Singer, NTRU 1 Project: IEEE P802.15 Working Group for Wireless Personal Area Networks (WPANs)

1 November, 2002 doc:.: /480r0 Daniel V. Bailey, Ari Singer, NTRU 1 Project: IEEE P Working Group for Wireless Personal Area Networks (WPANs)
Doc.: IEEE 802.11-03/095r0 Submission January 2003 Dan Harkins, Trapeze Networks.Slide 1 Fast Re-authentication Dan Harkins.

Doc.: IEEE /095r0 Submission January 2003 Dan Harkins, Trapeze Networks.Slide 1 Fast Re-authentication Dan Harkins.
Doc.: IEEE 802.11-12/1355r2 11ah Submission Date: 2012-11-08 Authors: Nov 2012 James Wang, MediaTek Slide 1.

Doc.: IEEE /1355r2 11ah Submission Date: Authors: Nov 2012 James Wang, MediaTek Slide 1.
Submission doc.: IEEE 802.11-11/1167r0 August 2011 Hiroki Nakano, Trans New Technology, Inc.Slide 1 Upper Layer Data IE Date: 2011-08-16 Authors: NameAffiliationsAddressPhoneemail.

Submission doc.: IEEE /1167r0 August 2011 Hiroki Nakano, Trans New Technology, Inc.Slide 1 Upper Layer Data IE Date: Authors: NameAffiliationsAddressPhone .
Doc.: IEEE 802.11-00/684R2 Submission November 2002 Martin Lefkowitz, Trapeze NetworksSlide 1 Extended Keymap ID Martin Lefkowitz Trapeze Networks.

Doc.: IEEE /684R2 Submission November 2002 Martin Lefkowitz, Trapeze NetworksSlide 1 Extended Keymap ID Martin Lefkowitz Trapeze Networks.
Doc.: IEEE 802. 15-14-0447-00-004r July 2014 May 2012 Ben Rolfe (BCA) Project: IEEE 802.15 Working Group for Wireless Personal Area Networks (WPANs) Submission.

Doc.: IEEE r July 2014 May 2012 Ben Rolfe (BCA) Project: IEEE Working Group for Wireless Personal Area Networks (WPANs) Submission.

Similar presentations

Ads by Google