RE: Notes about identifier - locator separator

["Christian Huitema" <huitema@windows.microsoft.com>]

> > There are a couple of issues with any proposal of that nature, and
the
> > main one is privacy. Having a unique identifier exposed to the
network
> > means that anybody on the path can track the presence and location
of
> > users, with consequence ranging from annoying (e.g. variations of
> > telemarketing) to downright dramatic (e.g. missile auto-aining to a
cell
> > phone). To meet the privacy requirement, you would want addresses
(as
> > incorporated in the header) to disclose as little as possible about
> > their owner. In a mobility or multi-homing situation, you may well
want
> > to hide from the network any correlation between addresses that
happen
> > to be used by the same entity.
> 
> Indeed.  I've been engaged in a heated discussion about this
> off-line for some time now.  Some people seem to be so worried
> about terrorism that they don't acknowledge the privacy concerns,
> and don't believe in the possibilities of cryptography at the
> same time.
> 
> The current HIP design sends the identifiers in clear text
> only in the first four packets (the HIP handshake).  It
> also includes the possibility of using pseudonyms (i.e. multiple
> identifiers).  Furthermore, we are considering schemes where
> it would be possible to hide (cryptographically "blind") the
> identifiers even in the first four packets iff the parties know
> each other beforehand, i.e., have communicated before and have
> the peer's ID stored.

The obvious blinding is to perform an end to end Diffie-Hellman exchange
before disclosing any identity, as is performed in IKE.

> What's the other issue(s) (the other half of the "couple of issues")?

The other obvious issue is that 64 bit is, for any cryptographic
purpose, a relatively small number size. It may be OK now, when the
average processor clock is a few GHz, but 64 bit hashes will be
trivially broken in 5 to 10 years. This implies that a strict 64+64
split is probably not a very good idea.

My main point is that if we want to use end point identifiers
independent of the locations, these identifiers should be strictly "end
to end", and should not be exposed to network elements.

-- Christian Huitema