1. CCSDS Security/DTN Status 11/6/2015 DENNIS IANNICCA CCSDS GRC CHARLES SHEEHE CCSDS GRC POC 1

2. DTN Security Activity Objective to determine if Cryptographic Message Syntax (CMS) was a suitable replacement for Streamlined Bundle Security Protocol (SBSP) Process: Determine DTN Security Requirements Determine DTN Security desires Perform a pair wise comparison of requirement Perform a pair wise comparison of desires Produce rankings from comparison Rate CMS vs SBSP for each of the requirements and desires Tally scores Ranking * Rating per category sum to total. Present scoring

3. Activity At start of this activity CCSDS DTN had no specific set of security requirements specified. After many E-mail exchanges, overall community security desires were still unclear. Discussion continued within the CCSDS Security and DTN community until DTN and Security came to a consensus to modify SBSP to allow use of CMS as one of the optional security services. IETF DTN Working Group has developed several Internet Drafts at this time. IETF DTN WG has developed a draft security requirements, CCSDS DTN Security requirements are finalized. IETF-SBSP Internet Draft will be modified to allow CMS to be used as a security service to encapsulate, encrypt, and sign data within bundles. The modified draft will form the base of the CCSDS SBSP Blue Book to begin shortly.

4. SBSP and CMS SBSP IETF Draft based on a stripped-down version of the original BSP experimental standard developed in the IRTF DTNRG working group Protocol developed with bandwidth-constrained space links in mind Doesn’t address key management Doesn’t address specific requirements for supported cipher suites CMS Series of IETF RFCs RFC 5652 - Cryptographic Message Syntax (CMS) RFC 5280 RFC 4853 - Cryptographic Message Syntax (CMS) Multiple Signer Clarification RFC 4853 - Cryptographic Message Syntax (CMS) Multiple Signer Clarification RFC 4086 - Randomness Requirements for Security RFC 3852 - Cryptographic Message Syntax (CMS) RFC 3851 - Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Message Specification RFC 3851 - Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Message Specification RFC 3370 - Cryptographic Message Syntax (CMS) Algorithms RFC 3369 - Cryptographic Message Syntax (CMS) RFC 3281 - An Internet Attribute Certificate Profile for Authorization RFC 3211 - Password-based Encryption for CMS RFC 2634 - Enhanced Security Services for S/MIME RFC 2633 - S/MIME Version 3 Message Specification RFC 2631 - Diffie-Hellman Key Agreement Method RFC 2630 - Cryptographic Message Syntax RFC 2560 RFC 2437 - PKCS #1: RSA Cryptography Specifications Version 2.0 Enhances interoperability from IP end user prospective Increased overhead compared to SBSP, more suitable for less-constrained terrestrial links