View Issue Details

IDProjectCategoryView StatusLast Update
000453710000-014: PubSubSpecpublic2021-03-18 07:22
ReporterZbynek Zahradnik Assigned ToMatthias Damm  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Summary0004537: UADP Message Security parameters unclear and incorrect
Description

In 7.2.2.2.3.1 General, we have:
"The algorithm and nonce length used of the UADP NetworkMessage security depend on the selected SecurityPolicy. They are defined by SymmetricPubSubEncryptionAlgorithm and SymmetricPubSubNonceLength."

There are several issues here.

As far as I can tell, the name SymmetricPubSubEncryptionAlgorithm is not anywhere else in the spec, including Part 7.

In addition, it probably should correspond to what is used in Table 74, but that table, "SymmetricEncryptionAlgorithm" is used (4 occurrences).

I think that we also kind of miss the definition of the contents of the SecurityPolicy. There is Table 35 in Part 6, but that covers Client-Server only.

And, in Part 7, I tried to locate the security policy parameters for this, but was not fully successful either. Hopefully I am looking at the right place. I navigated to Security Category -> Facets -> Security Policy -> SecurityPolicy - PubSub-Aes256-CTR, or SecurityPolicy [A] - PubSub-Aes128-CTR. In them,

1) the encryption algorithm, if that us to derive from the "Name" column in the table appears to be prefixed by "SymmetricEncryptionAlgorithm", and not "SymmetricPubSubEncryptionAlgorithm"

2) the SymmetricPubSubNonceLength is not listed at all. There is a sentence "The input nonce length is 4 bytes." but that's either not correct (because according to Table 75, the nonce length comes to 8 bytes) or it is not the same thing.

TagsNo tags attached.
Commit Version
Fix Due Date

Relationships

related to 0006668 closedMatthias Damm Defintion of key derivation missing for PubSub security 

Activities

Zbynek Zahradnik

2018-12-14 13:51

developer   ~0009705

Correction: Only 2 occurrences of SymmetricEncryptionAlgorithm are in Table 74.

Matthias Damm

2019-03-05 17:05

developer   ~0010011

Added clarifications in
OPC UA Part 14 - PubSub Draft 1.05.07 Specification.docx

Jim Luth

2019-06-04 09:24

administrator   ~0010320

Agreed to changes and Errata edited in meeting.

Issue History

Date Modified Username Field Change
2018-12-14 13:48 Zbynek Zahradnik New Issue
2018-12-14 13:51 Zbynek Zahradnik Note Added: 0009705
2019-02-26 22:41 Matthias Damm Assigned To => Matthias Damm
2019-02-26 22:41 Matthias Damm Status new => assigned
2019-03-05 17:05 Matthias Damm Status assigned => resolved
2019-03-05 17:05 Matthias Damm Resolution open => fixed
2019-03-05 17:05 Matthias Damm Note Added: 0010011
2019-06-04 09:24 Jim Luth Status resolved => closed
2019-06-04 09:24 Jim Luth Fixed in Version => 1.05
2019-06-04 09:24 Jim Luth Note Added: 0010320
2021-03-18 07:22 Matthias Damm Relationship added related to 0006668