eap Mailing List: Re: Strawman -10/EMSK deletion requirement?

[Jari Arkko (jari.arkko]

Glen Zorn (gwz) wrote:

>Joseph Salowey (jsalowey) <> supposedly scribbled:
>
>  
>
>>The EMSK is the root of all AMSKs, so a compromise of the EMSK
>>compromises all AMSKs.  Therefore I would like to see the EMSK
>>protected as much as possible.  Once the EMSK is securely deleted it
>>cannot be compromised. 
>>    
>>
>
>OK, but is that not equally true of Jari's proposed AMSK_root_0 approach?
>  
>
The problem is that since EMSK is the root, its compromise will
lead to the compromise of all derived keys. This also holds
locally for the AMSK_root_0 approach. That is, if AMSK_root_0
is compromised then any keys derived from that root are
compromised (but not keys in other apps).

--Jari