DDS Security: How are key generated for different publisher












1














After reading the OMG specification about secure DDS: https://www.omg.org/spec/DDS-SECURITY/1.1/



I understood that DDS participants will authenticate each others though a handshake and deduce a secret using DH.
This shared secret is used for the publisher (writer) to share the key used to encrypt the messages published in order for a subscriber (reader) to decrypt the message.



However, what happens if there are multiple publishers for the same topic?




  • Do they agree on the same key?

  • Do they generate they own key and send them to each reader ?


I am expecting the first option, but could not find confirmation within the OMG specification.










share|improve this question



























    1














    After reading the OMG specification about secure DDS: https://www.omg.org/spec/DDS-SECURITY/1.1/



    I understood that DDS participants will authenticate each others though a handshake and deduce a secret using DH.
    This shared secret is used for the publisher (writer) to share the key used to encrypt the messages published in order for a subscriber (reader) to decrypt the message.



    However, what happens if there are multiple publishers for the same topic?




    • Do they agree on the same key?

    • Do they generate they own key and send them to each reader ?


    I am expecting the first option, but could not find confirmation within the OMG specification.










    share|improve this question

























      1












      1








      1







      After reading the OMG specification about secure DDS: https://www.omg.org/spec/DDS-SECURITY/1.1/



      I understood that DDS participants will authenticate each others though a handshake and deduce a secret using DH.
      This shared secret is used for the publisher (writer) to share the key used to encrypt the messages published in order for a subscriber (reader) to decrypt the message.



      However, what happens if there are multiple publishers for the same topic?




      • Do they agree on the same key?

      • Do they generate they own key and send them to each reader ?


      I am expecting the first option, but could not find confirmation within the OMG specification.










      share|improve this question













      After reading the OMG specification about secure DDS: https://www.omg.org/spec/DDS-SECURITY/1.1/



      I understood that DDS participants will authenticate each others though a handshake and deduce a secret using DH.
      This shared secret is used for the publisher (writer) to share the key used to encrypt the messages published in order for a subscriber (reader) to decrypt the message.



      However, what happens if there are multiple publishers for the same topic?




      • Do they agree on the same key?

      • Do they generate they own key and send them to each reader ?


      I am expecting the first option, but could not find confirmation within the OMG specification.







      dds data-distribution-service






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 23 '18 at 12:21









      Stoogy

      546522




      546522
























          1 Answer
          1






          active

          oldest

          votes


















          1















          However, what happens if there are multiple publishers for the same
          topic?




          Each DataWriter (not Publisher) generates its own symmetric key which gets shared with all its matched DataReaders. The fact that multiple DataWriters may be writing to the same Topic does not change this -- each of them generates their own key and uses it to protects its own updates.



          Note that this is the behavior as prescribed by the so-called built-in plugins as defined in Chapter 9 of the specification that you mentioned. These are defined to provide out-of-the-box functionality with interoperability between vendors. Customized plugins may behave differently.






          share|improve this answer























            Your Answer






            StackExchange.ifUsing("editor", function () {
            StackExchange.using("externalEditor", function () {
            StackExchange.using("snippets", function () {
            StackExchange.snippets.init();
            });
            });
            }, "code-snippets");

            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "1"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53446640%2fdds-security-how-are-key-generated-for-different-publisher%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            1















            However, what happens if there are multiple publishers for the same
            topic?




            Each DataWriter (not Publisher) generates its own symmetric key which gets shared with all its matched DataReaders. The fact that multiple DataWriters may be writing to the same Topic does not change this -- each of them generates their own key and uses it to protects its own updates.



            Note that this is the behavior as prescribed by the so-called built-in plugins as defined in Chapter 9 of the specification that you mentioned. These are defined to provide out-of-the-box functionality with interoperability between vendors. Customized plugins may behave differently.






            share|improve this answer




























              1















              However, what happens if there are multiple publishers for the same
              topic?




              Each DataWriter (not Publisher) generates its own symmetric key which gets shared with all its matched DataReaders. The fact that multiple DataWriters may be writing to the same Topic does not change this -- each of them generates their own key and uses it to protects its own updates.



              Note that this is the behavior as prescribed by the so-called built-in plugins as defined in Chapter 9 of the specification that you mentioned. These are defined to provide out-of-the-box functionality with interoperability between vendors. Customized plugins may behave differently.






              share|improve this answer


























                1












                1








                1







                However, what happens if there are multiple publishers for the same
                topic?




                Each DataWriter (not Publisher) generates its own symmetric key which gets shared with all its matched DataReaders. The fact that multiple DataWriters may be writing to the same Topic does not change this -- each of them generates their own key and uses it to protects its own updates.



                Note that this is the behavior as prescribed by the so-called built-in plugins as defined in Chapter 9 of the specification that you mentioned. These are defined to provide out-of-the-box functionality with interoperability between vendors. Customized plugins may behave differently.






                share|improve this answer















                However, what happens if there are multiple publishers for the same
                topic?




                Each DataWriter (not Publisher) generates its own symmetric key which gets shared with all its matched DataReaders. The fact that multiple DataWriters may be writing to the same Topic does not change this -- each of them generates their own key and uses it to protects its own updates.



                Note that this is the behavior as prescribed by the so-called built-in plugins as defined in Chapter 9 of the specification that you mentioned. These are defined to provide out-of-the-box functionality with interoperability between vendors. Customized plugins may behave differently.







                share|improve this answer














                share|improve this answer



                share|improve this answer








                edited Nov 23 '18 at 19:53

























                answered Nov 23 '18 at 19:47









                Reinier Torenbeek

                9,44732847




                9,44732847






























                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Stack Overflow!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.





                    Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


                    Please pay close attention to the following guidance:


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53446640%2fdds-security-how-are-key-generated-for-different-publisher%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    A CLEAN and SIMPLE way to add appendices to Table of Contents and bookmarks

                    Calculate evaluation metrics using cross_val_predict sklearn

                    Insert data from modal to MySQL (multiple modal on website)