International Civil Aviation Organization working paper



International Civil Aviation Organization WORKING PAPER

ACP-WGM16/WP-15 17 May 2010

Agenda Item 3a:

ATN/OSI Document 9880 Update Status – Security Updates

Amendment Proposal

for

One Key Pair for Key Agreement and Signing

Prepared by: FAA

1. 
   INTRODUCTION
   
   1. 
      One of recommendations of the Honeywell Validation Report is use one key pair for key agreement and signing in Doc 9880.
      
2. 
   discussion
   
   1. 
      This AP proposes allowing the use a single key pair for both key agreement and signing.
      
   2. 
      In developing the ARINC 823, ACARS Message Security (AMS), airline participants, including the USAF, recommended that AMS provisions specify a single key pair, to be used for both key agreement and signing.
      
   3. 
      Section 13.5.1 of the Handbook of Applied Cryptography states, “The principle of key separation is that key for different purposes should be cryptographically separated.”
      
   4. 
      Section 5.6.4.2 of NIST SP 800-56A states, “A static key pair may be used in more than one key establishment scheme. However, one static public/private key pair shall not be used for different purposes (for example, a digital signature key pair is not to be used for key establishment or vice versa).”
      
   5. 
      Section 5.2 of NIST SP 800-57 Part 1 states, “In general, a single key should be used for only one purpose (e.g., encryption, authentication, key wrapping, random number generation, or digital signatures).
      
   6. 
      Section 5.4.1.2 of Doc 9880 specifies that each ATN application or ATN router shall be bound to a static key pair associated to the ATN elliptic curve domain parameters. This requirement is in the context of the ATN Key Agreement Scheme.
      
   7. 
      Section 5.5.1.2 of Doc 9880 specifies that each signing ATN application, ATN router, or CA shall be bound to a signing key pair associated to the ATN elliptic curve domain parameters.
      
   8. 
      Note 3 in section 6.3.7 of Doc 9880 states that the Key Usage parameter refers to the type of compressed certificate path that is desired and is an ASN.1 type KeyUsage. Key Usage will have an abstract value of either digitalSignature or keyAgreement.
      

Replace section 5.4.1.2 with the following:

5.4.1.2 Each ATN application or ATN router performing key agreement shall be bound to a static key pair associated to the ATN elliptic curve domain parameters.

Replace section 5.4.1.2 with the following:

5.5.1.2 Each signing ATN application, ATN router, or CA shall be bound to a key pair associated to the ATN elliptic curve domain parameters.

Replace Note 3 in section 6.3.7 with the following:

Note 3. The Key Usage parameter refers to the type of compressed certificate path that is desired and is an ASN.1 type KeyUsage. Key Usage will have an abstract value of either digitalSignature, keyAgreement, or both digitalSignature and keyAgreement.

3. 
   ACTION BY the meeting
   
   1. 
      The ACP WG-M is invited to:
      

1. 
   Review the revisions to Doc 9880 identified by the AP in this Working Paper and provide comments and feedback regarding the proposed changes as described.
   

2. 
   Due to guidance in the Handbook of Applied Cryptography and the requirement in NIST SP 800-56A, the FAA recommends that the requirements for key agreement and signing not be combined but that use of a common key be permitted as a matter of Certificate Policy.
   
3. 
   The FAA recommends acceptance of these changes and requests endorsement by the Working Group to update Doc 9880 as described in the AP.
   

Directory: safety -> acp -> ACPWGF -> ACP-WG-M-16
ACPWGF -> Working paper
ACPWGF -> Amcp wgm/WP19 19 August 2002 Aeronautical Mobile Communication Panel (amcp) Working Group-m meeting Fifth Meeting Saint Petersburg, Russia, 19 to 23 August 2002 Agenda Item 4: satcom
ACPWGF -> Acp wgf/16 wp 27 Rev. 1 International Civil Aviation Organization
ACPWGF -> Working paper
ACPWGF -> Working paper
ACPWGF -> Airborne collision avoidance systems working group-a
ACPWGF -> Working paper
ACP-WG-M-16 -> International Civil Aviation Organization working paper
ACP-WG-M-16 -> International Civil Aviation Organization working paper

Download 36.93 Kb.

Share with your friends: