Subject: [Anima] GRASP prototype support for DULL mode

From: Brian E Carpenter <[email-masked]>
Date: Mon, 21 Sep 2020 16:37:15 +1200

With the ACP draft now close to approval, I've just done what I should have done 3 years ago, i.e. coded support for the DULL (insecure link-local) mode of GRASP that both BRSKI and ACP make use of. I had no trouble following the rules in the GRASP spec, and the code has been tested using the dummy BRSKI ASAs that I wrote three years ago.

As always, this is *demo* code for prototyping and checking purposes, not production code. But for Python lovers everwhere, the updated code is in the files acp.py and grasp.py at https://github.com/becarpenter/graspy and the updated documentation is graspy.pdf

(One point I noticed is that a BRSKI proxy is required to run *two* instances of GRASP, one a DULL instance communicating with on-link pledges, and the other one a secure instance communicating with the BRSKI registrar. That's a bit awkward to do as my Python code is structured, so I cheated on that and also used DULL to communicate with the registrar. That isn't a problem with the spec.)

Regards
   Brian