D04-HP: Pending
Rationale
RFC 6317 lets an application enumerate local HITs and select one with bind or source-HIT policy. It does not establish that an ordinary user can create and install a new independently controlled HI into the host HIP/IPsec subsystem without per-identity administration. Pinned OpenHIP hitgen implements local ECDSA key generation, accepts -file for identity XML output, and sets the output permissions to owner read/write. Before parsing arguments it checks SYSCONFDIR and tries to create it if absent. This identifies a candidate key-generation path and its filesystem precondition; it does not prove autonomous registration in a running HIP/IPsec endpoint.
Assessment method
Pinned candidate source trace and developer report; no execution
Source context
HIP API RFC and pinned CICN implementation source
Outstanding qualification
Check the selected-profile daemon identity import, registration ACLs, per-user key custody and SA ownership. A writable output file and local key generation are insufficient to establish that ordinary users can independently activate identities. No executable or multi-user test performed.
Public sources
- https://www.ida.liu.se/~TDDE21/info/hip_report_2024.pdf
- https://bitbucket.org/openhip/openhip/src/52157e5e68a82a80fd252c6c9b63a6a77da24e27/src/util/hitgen.c
- https://bitbucket.org/openhip/openhip/src/52157e5e68a82a80fd252c6c9b63a6a77da24e27/src/linux/hip_linux_umh.c
- https://bitbucket.org/openhip/openhip/src/52157e5e68a82a80fd252c6c9b63a6a77da24e27/src/include/hip/hip_proto.h
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round428.html
- round272-sources.json
- round428-sources.json