Thread Links Date Links
Thread Prev Thread Next Thread Index Date Prev Date Next Date Index

Re: [STDS-802-11-TGM] Resolution to CID 116

--- This message came from the IEEE 802.11 Task Group M Technical Reflector ---
There is also another issue with the text, not related to the comment though. When a Com event is received, the retransmission timer is canceled. So, a fake commit message could have the effect of canceling the timer and discarding the frame. Not sure that should be the right behavior from a security standpoint.

- N

On Fri, Oct 1, 2021 at 1:45 PM Nehru Bhandaru <nehru.bhandaru@xxxxxxxxxxxx> wrote:
There is some text in the same paragraph before the text under discussion - I took another stab and simplifying and clarifying the intended semantics without reordering the phrases (and hopefully not introducing any issues)

Upon receipt of a Com event, the t0 (retransmission) timer shall be canceled. If the Status is nonzero, the frame shall be silently discarded, the t0 (retransmission) timer set, and the protocol instance shall remain in the Confirmed state. If Sync is greater than dot11RSNASAESync, the protocol instance shall send the parent process a Del event and transitions back to Nothing state. If Sync is not greater than dot11RSNASAESync Otherwise, the protocol instance shall verify that the finite cyclic group is the same as the previously received SAE Commit message. If not the verification fails, the frame shall be silently discarded. If soOtherwise, the protocol instance shall increment Sync, increment Sc, and transmit its SAE Commit message and its SAE Confirm message with the new Sc value. It then shall set the t0 (retransmission) timer.



On Fri, Oct 1, 2021 at 1:33 PM M Montemurro <montemurro.michael@xxxxxxxxx> wrote:
Hi all,

For CID 116, we debated whether we could accept the comment and could not come to an agreement on a proposed resolution. (see the comment and discussed resolutions below) 

I would like to initiate a discussion on the reflector to see if we can come to a resolution.

Thanks,

Mike

Here is the comment:
REVme SEC adhoc comments
2554.00 12.4.8.6.5 V SAE: "<verify X>. If not, <do Y>. If so, <do Z>" construction can be ambiguous since it is not always clear what "if so" is referring to (something in "verify X" vs. "do Y"). Replace
"If Sync is not greater than dot11RSNASAESync, the protocol instance shall verify that the finite cyclic group is the same as the previously received SAE Commit message. If not, the frame shall be silently discarded. If so, the protocol instance shall increment Sync, increment Sc, and transmit its SAE Commit message and its SAE Confirm message with the new Sc value."
with
"If Sync is not greater than dot11RSNASAESync, the protocol instance shall verify that the finite cyclic group is the same as the previously received SAE Commit message. If not, the frame shall be silently discarded. Otherwise, the protocol instance shall increment Sync, increment Sc, and transmit its SAE Commit message and its SAE Confirm message with the new Sc value."

The proposed resolution that was discussed on the call (along with an alternative that was mentioned in the chat):

Replace
"If Sync is not greater than dot11RSNASAESync, the protocol instance shall verify that the finite cyclic group is the same as the previously received SAE Commit message. If not, the frame shall be silently discarded. If so, the protocol instance shall increment Sync, increment Sc, and transmit its SAE Commit message and its SAE Confirm message with the new Sc value."

with

"If Sync is not greater than dot11RSNASAESync, the protocol instance shall verify that the finite cyclic group is the same as in the previously received SAE Commit message. If it is not, the frame shall be silently discarded. Otherwise, the protocol instance shall increment Sync, increment Sc, and transmit its SAE Commit message and its SAE Confirm message with the new Sc value."

Alternative:
ust a suggestion: "If Sync is not greater than dot11RSNASAESync, the protocol instance shall verify that the finite cyclic group is the same as in the previously received SAE Commit message, and if it is not, the frame shall be silently discarded. If Sync is greater than dot11RSNASAESync, the protocol instance shall increment Sync, increment Sc, and transmit its SAE Commit message and its SAE Confirm message with the new Sc value."


This electronic communication and the information and any files transmitted with it, or attached to it, are confidential and are intended solely for the use of the individual or entity to whom it is addressed and may contain information that is confidential, legally privileged, protected by privacy laws, or otherwise restricted from disclosure to anyone else. If you are not the intended recipient or the person responsible for delivering the e-mail to the intended recipient, you are hereby notified that any use, copying, distributing, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you received this e-mail in error, please return the e-mail to the sender, delete it from your computer, and destroy any printed copy of it.

To unsubscribe from the STDS-802-11-TGM list, click the following link: https://listserv.ieee.org/cgi-bin/wa?SUBED1=STDS-802-11-TGM&A=1

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature