วีดีโอ

That is in case of an emergency. If the room needs to be evacuated in case of an emergency, you can open the door from inside without using a badge and pin. In that case, the sound alarm will be activated.

It's also basic code for buildings. One has to be able to exit any building in an emergency situation.

I understand the reasoning but was wondering if this has been part of the threat model to see if there is enough mitigating controls for protecting the sensitive material already accessible as part of this process when people leaves upon hearing the alarm. For example, in case of a fake alarm, you may have both safe boxes open and only protection may be the room door which is protected only by badge, which would completely invalidate the reason why you have safe boxes in there. Even, I would ask if the badge protected door is also fail-safe from outside in case of such a building alarm.

​@@RamiSIK-zq4cx Firstly, there's only ever one safe open at a time. If an alarm sounded while either of these safes were open, it would be a simple matter to close and lock the safe before exiting the safe room. One would have to get past two other doors with progressively tighter requirements to gain entry to this third door to the safe room. Secondly, the access control system authorizing the badges of these doors operates independently of the safe, unless the safe door is open, in which all badge swipes are disabled until the safe door is closed again. If you check the ceremony scripts, it asks the CA to verify the "wait" light is off once the door is closed. That is the reason. They would not be able to badge out of the room unless sensor of the safe door is closed. Finally, independent of all that, there are two separate surveillance systems monitoring the room 24/7/365. Many overlapping controls would need to be defeated in order to access the room without authorization, and to access the room without triggering any alerts is extremely unlikely.

The KSK rollover is tentatively scheduled for October 11, 2026.

This has been an issue that's becoming more and more relevant as over time the geopolitical climate is taking a new shape. I suggest the United Nations building in Geneva, Switzerland to be the new designated headquarters.

Routine maintenance occurs in the key management facilities between ceremonies. The audit cameras themselves were replaced with new units a week prior, which would explain the slightly different camera angle. These cameras also use dual recording to local SD cards which are sealed and retained for audit purposes, and physically removing and installing SD cards can also inadvertently adjust the camera. We do not post footage every time we enter these facilities, however any activity that require opening either safe is scripted, recorded, and at minimum posted on the IANA ceremonies webpage and may be live streamed as well.

@@iana-org Makes sense, thanks for the reply!

Hello. We have our cameras and streaming equipment permanently installed in the key management facility. Maintenance and operations are documented and performed by the RKOS staff. We are happy to share information if you are interested in our setup.

After the ceremony, thorough testing took place where we were able to reproduce the issue with a different HSM of the same exact variety, and our initial assumption that it had to do with the HSM firmware ended up being completely wrong, but it's also not a cable issue. Further testing with our testing laptop and HSM allowed us to isolate the issue to the updated version of STTY’s translation of the RS232 controller. We consistently receive a random 1-2% error rate in the captured HSM output. Testing suggests the previous version of STTY included with the former version of COEN (our ceremony operating system) was performing error correction more optimally with our former hardware combination. Multiple USB to serial port adapters utilizing the STDI chipset were tested to circumvent the laptop’s onboard RS232 controller and serial port. We ran several diff comparisons of the captured output with consistent results, showing only anticipated character changes such as the HSM reset count and timestamps. We plan to return to using USB to serial port adapters in future KSK ceremonies. USB to serial port adapters were used with the previous generations of ceremony laptops in KSK ceremonies from 2010-2018 without issue. Hope this clears things up.

@@iana-org Hi IANA. Thanks for the response. That makes sense, serial could be finicky. It is weird that the built in serial was not cooperating. Maybe some flow control lines were not handled correctly, or driver has issues, all possible. Thanks for testing, and finding a hopefully secure workaround.

@@movax20h It really appears to just be the way the RS232 controller built into the laptop for that built-in serial port was doing the translation with the new version of STTY. It was a pretty deep dive down the rabbit hole to make that determination. At KSK Ceremony 50 we successfully used the USB to serial adapter combined with the same version of STTY without any issues, so we don't anticipate any issues of this variety to arise again.

Hey, what language is that?!

@@TheFunnyDictator unicode

The cryptographic signatures generated during the ceremony are exported on a USB flash drive (the "HSMFD" in the script) and taken out of the facility at the end of the ceremony. Then during the daily production of the root zone they are inserted as part of the zone signing process.

@@kijeda thank you so much!

You are Sri Lankan right?

@@ravifleming Yes! Was also happy to see a Sri Lankan in the session by random :)

Interactive music by Vayne Sil starts playing

@@Leanzazzy 20 Syl ( It's a french artist)

You got the link to the video ? I want to see it :)

On the Dec 1st 2023 episode, Their Spotify wrapped said this was their most viewed episode. Went to play ICANN and the 7 keys of the internet, and they talked about this. So I came down to TH-cam lol

Fuck whoever those people are because I found this with a search