SMIME: Symmetric Key Distribution

draft-ietf-smime-symkeydist-00.txt

Sean Turner<turners@ieca.com>

2

Design Goals

• Want a transport independent mechanism for distribution of symmetric keys to a group of users.

• The mechanism must use CMS.• Reuse group/list management

techniques (listserv, majordomo, etc.)– Didn’t want to reinvent the wheel, but …

3

Architecture +----------------------+ | Key Management Agent | +----------------------+ | +------------------+ | Group Management | | Agent | | +-------+ | | | Group | | | |List(s)| | | +-------+ | | / | \ | +------------------+ / | \ / | \ +----------+ +---------+ +----------+ | Member 1 | | ... | | Member n | +----------+ +---------+ +----------+

4

Protocol Interactions

+----------+ +----------+

| GL Owner | <---+ +----> | Member 1 |

+----------+ | | +----------+

| |

+-----+ +-----+ <-+ | +----------+

| KMA | <-------> | GMA | <-----------+----> | ... |

+-----+ +-----+ | +----------+

|

| +----------+

+----> | Member n |

+----------+