MSEC Working Group                                               S. Yoon
Internet Draft                                                  J. Jeong
Intended Status: Informational                                    H. Kim
Expires: May 23, 2010                                           H. Jeong
                                                                  Y. Won
                                        Korea Internet & Security Agency
                                                       November 23, 2009


    IANA Registry Update for Support of the SEED Cipher Algorithm in the
                    Multimedia Internet KEYing (MIKEY)
                     draft-seokung-msec-mikey-seed-05


Status of this Memo

   This Internet-Draft is submitted to IETF in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups. Note that other
   groups may also distribute working documents as Internet-Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time. It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt.

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html.

   This Internet-Draft will expire on May 23, 2010.

Copyright Notice

   Copyright (c) 2009 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents in effect on the date of
   publication of this document (http://trustee.ietf.org/license-info).
   Please review these documents carefully, as they describe your rights
   and restrictions with respect to this document.







Yoon, et al.            Expires May 23, 2010                  [Page 1]


Internet-Draft               MIKEY-SEED              November 23, 2009


Abstract

   This document updates IANA registries to support the SEED block
   cipher algorithm for the Secure Real-time Transport Protocol (SRTP)
   and the secure Real-time Transport Control Protocol (SRTCP) in
   Multimedia Internet KEYing (MIKEY).

Table of Contents


   1. Introduction..................................................3
      1.1. SEED.....................................................3
   2. Additions to MIKEY payload....................................3
      2.1. Modified Table 6.10.1.b from RFC3830.....................3
      2.2. Modified Table 6.10.1.d from RFC3830.....................4
   3. Security Considerations.......................................4
   4. IANA Considerations...........................................4
   5. Acknowledgements..............................................4
   6. References....................................................5
      6.1. Normative References.....................................5
      6.2. Informative References...................................5
   Author's Addresses...............................................6



























Yoon, et al.            Expires May 23, 2010                  [Page 2]


Internet-Draft               MIKEY-SEED              November 23, 2009


1. Introduction

   This document updates IANA registries to support the SEED [RFC4269]
   block cipher algorithm for the Secure Real-time Transport Protocol
   (SRTP) and the Secure Real-time Transport Control Protocol (SRTCP)
   [RFC3711] in Multimedia Internet KEYing (MIKEY) [RFC3830].

1.1. SEED

   SEED is a 128-bit symmetric key block cipher that has been developed
   by KISA (Korea Information Security Agency) and a group of experts
   since 1998. The input/output block size of SEED is 128-bit and the
   key length is also 128-bit. SEED has a 16-round Feistel structure.

   SEED is a Korean National Industrial Association standard and is
   widely used in South Korea for electronic commerce and various
   security products such as firewall, VPN, and so on.

2. Additions to MIKEY payload

   This section specifies new code points for the MIKEY [RFC3830]
   payload to indicate the use of the SEED cipher algorithm for SRTP and
   SRTCP. There are three applicable modes of running SEED, SEED in
   Counter Mode (SEED-CTR), SEED in Counter with CBC-MAC Mode (SEED-CCM)
   and SEED in Galois/Counter Mode (SEED-GCM) Mode. These are defined in
   [I-D.ietf-avt-seed-srtp].

2.1. Modified Table 6.10.1.b from RFC3830

   IANA is asked to amend the sub-registry derived from Table 6.10.1.b
   of [RFC3830] as follows:

   SRTP encr alg | Value
   ---------------------
   NULL          |     0
   AES-CM        |     1
   AES-F8        |     2
   SEED-CTR      |     3 (NEW)
   SEED-CCM      |     4 (NEW)
   SEED-GCM      |     5 (NEW)

   Figure 1: Table 6.10.1.b from [RFC3830] (Revised)








Yoon, et al.            Expires May 23, 2010                  [Page 3]


Internet-Draft               MIKEY-SEED              November 23, 2009


2.2. Modified Table 6.10.1.d from RFC3830

   IANA is asked to amend the sub-registry derived from Table 6.10.1.d
   of [RFC3830] as follows:

   SRTP PRF      | Value
   ---------------------
   AES-CM        |     0
   SEED-CTR      |     1 (NEW)

   Figure 2: Table 6.10.1.d from [RFC3830] (Revised)

3. Security Considerations

   No security problem has been found on SEED. SEED is secure against
   all known attacks including Differential cryptanalysis, linear
   cryptanalysis, and related key attacks. The only known attack is an
   exhaustive search for the key. For further security considerations,
   the reader is encouraged to read [SEED-EVAL].

4. IANA Considerations

   With the adoption of this document for publication IANA has amended
   the indicated sub-registries in Section 2 of the MIKEY [RFC3830]
   Payload Name registry according to Section 2.1 and 2.2 above.

5. Acknowledgements

   The authors would like to thank David McGrew, Spencer Dawkins,
   SangHwan Park, Brian Weis, and Tim Polk for their reviews and support.



















Yoon, et al.            Expires May 23, 2010                  [Page 4]


Internet-Draft               MIKEY-SEED              November 23, 2009


6. References

6.1. Normative References

   [I-D.ietf-avt-seed-srtp]
               S. Yoon, J. Kim, H. Park, H. Jeong, Y. Won, "The SEED
               Cipher Algorithm and Its Use with the Secure Real-time
               Transport Protocol (SRTP)", draft-ietf-avt-seed-srtp-14
               (work in progress), June 2009.

   [RFC3711]   M. Baugher, D. McGrew, M. Naslund, E.Carrara, K. Norrman,
               "The Secure Real-time Transport Protocol (SRTP)",
               RFC 3711, March 2004.

   [RFC3830]   Arkko, J., Carrara, E., Lindholm, F., Naslund, M., and K.
               Norrman, "MIKEY: Multimedia Internet KEYing", RFC 3830,
               August 2004.

   [RFC4269]   H. Lee, S. Lee, J. Yoon, D. Cheon, J. Lee, "The SEED
               Encryption Algorithm", RFC 4269, December 2005.

6.2. Informative References

   [SEED-EVAL] KISA, "Self Evaluation Report",
               http://www.kisa.or.kr/kisa/seed/down/SEED_Evaluation_Repo
               rt_by_CRYPTREC.pdf























Yoon, et al.            Expires May 23, 2010                  [Page 5]


Internet-Draft               MIKEY-SEED              November 23, 2009


Author's Addresses

   Seokung Yoon
   Korea Internet & Security Agency
   IT Venture Tower, Jungdaero 135, Songpa-gu, Seoul, Korea 138-950
   Email: seokung@kisa.or.kr


   Jongil Jeong
   Korea Internet & Security Agency
   IT Venture Tower, Jungdaero 135, Songpa-gu, Seoul, Korea 138-950
   Email: jijeong@kisa.or.kr


   Hwankuk Kim
   Korea Internet & Security Agency
   IT Venture Tower, Jungdaero 135, Songpa-gu, Seoul, Korea 138-950
   Email: rinyfeel@kisa.or.kr


   Hyuncheol Jeong
   Korea Internet & Security Agency
   IT Venture Tower, Jungdaero 135, Songpa-gu, Seoul, Korea 138-950
   Email: hcjung@kisa.or.kr


   Yoojae Won
   Korea Internet & Security Agency
   IT Venture Tower, Jungdaero 135, Songpa-gu, Seoul, Korea 138-950
   Email: yjwon@kisa.or.kr




















Yoon, et al.            Expires May 23, 2010                  [Page 6]