3 ms·
I'm not sure this is practical. Caveats: I have only read the paper while sleepy, and I'm worried that I'm breaching our negativity rules with my attack, but I'
by vessenes 11y ago
I'm not sure this is practical. Caveats: I have only read the paper while sleepy, and I'm worried that I'm breaching our negativity rules with my attack, but I'll proceed: I propose the following attack on the protocol.
Bisect North and South America with a 'no go zone' for packets -- we can't live with a packet hitting Omaha, for a variety of reasons.
I propose that there exists no safe "alibi" route from SF to NY. Any crooked peer can route into the dreaded Omaha and to a crooked NY peer faster than any safe route can go west through Asia. A crooked peer can forge sequential MACs showing a 'legitimate' looking route easily.
So, I would reformulate the claims to "If a packet is never routed to an attacker that can route through a forbidden zone more quickly than obeying the restrictions, there is a valid alibi routing."
It's hard to come up with a good use case for this protocol, in my mind. Especially because we are most often concerned with packet routing at the destination and source, and for legal reasons, not inspection reasons.
It's largely understood by anyone who might possibly be using alibi routing that packets are often inspected in flight, and there is nothing you can do about it, and that furthermore the concepts of safe or unsafe nations or regions or cities are almost laughable when it comes to even the smallest nation state's avaricious desire for inspection and storage of data flying by.
- cperciva 11y agoAny crooked peer can route into the dreaded Omaha and to a crooked NY peer faster than any safe route can go west through Asia. I think the idea is that you can't go through Omaha and have a router in Asia saying that it handled your data within the time constraints.
- synctext 11y agoIndeed, totally not practical. First, it is a very impressive paper that got into the flagship conference. It presents and solves an intriguing puzzle. The implied attacker model: you are safe unless your packet traverses an unsafe country. Wrong in my opinion (RFC 7258). As a scientist I've seen this over-and-over again. No healthy scientific community exists around privacy. SIGCOMM-like venue want novel/crazy ideas. We known onion routing works to a large extend. However, it is a career/tenure killer to work on that. No grants. No citations.
- vessenes 11y agoI don't understand why this is true: my crooked peer can route both ways if you have some other way of 'checking' on my routing. Or I can be right next to you and pretend to be in Asia by offering bad GPS coordinates and auto-lagging my response times. No?