Re: [AVT] Sockets in multicast DTLS-SRTP

"Dan Wing" <dwing@cisco.com> Tue, 23 March 2010 21:34 UTC

Return-Path: <dwing@cisco.com>
X-Original-To: avt@core3.amsl.com
Delivered-To: avt@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C59D83A6933 for <avt@core3.amsl.com>; Tue, 23 Mar 2010 14:34:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.61
X-Spam-Level:
X-Spam-Status: No, score=-7.61 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, DNS_FROM_OPENWHOIS=1.13, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m6oJCipLy3cA for <avt@core3.amsl.com>; Tue, 23 Mar 2010 14:34:07 -0700 (PDT)
Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id 99C4C3A68DC for <avt@ietf.org>; Tue, 23 Mar 2010 14:34:07 -0700 (PDT)
Authentication-Results: sj-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AnIIAKbQqEurR7H+/2dsb2JhbACHXoESkjlzpgmZGIR9BIMe
X-IronPort-AV: E=Sophos;i="4.51,297,1267401600"; d="scan'208";a="311121638"
Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-1.cisco.com with ESMTP; 23 Mar 2010 21:34:27 +0000
Received: from dwingwxp01 (sjc-vpn3-785.cisco.com [10.21.67.17]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id o2NLYRfq010859; Tue, 23 Mar 2010 21:34:27 GMT
From: Dan Wing <dwing@cisco.com>
To: 'Romain Biehlmann' <romain.biehlmann@gmail.com>, avt@ietf.org
References: <9a06dcf1003230527q39fc7f9bye2ca616599e95cac@mail.gmail.com>
Date: Tue, 23 Mar 2010 14:34:27 -0700
Message-ID: <00f101cacad0$9d93fc10$1143150a@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AcrKhINAK2zN0v1JSAS8mRF8iBDYlwAS4kuQ
In-Reply-To: <9a06dcf1003230527q39fc7f9bye2ca616599e95cac@mail.gmail.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350
Subject: Re: [AVT] Sockets in multicast DTLS-SRTP
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Audio/Video Transport Working Group <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Mar 2010 21:34:09 -0000

> -----Original Message-----
> From: avt-bounces@ietf.org [mailto:avt-bounces@ietf.org] On 
> Behalf Of Romain Biehlmann
> Sent: Tuesday, March 23, 2010 5:27 AM
> To: avt@ietf.org
> Subject: [AVT] Sockets in multicast DTLS-SRTP
> 
> Hi all,
> 
> I hope my question is not too dumb, and not too
> implementation-oriented; if so, please accept my apologies and ignore
> it.
> 
> In http://tools.ietf.org/html/draft-ietf-avt-dtls-srtp-07 chapter
> 5.1.1, we can read the following:
> "When a user of DTLS wishes to send an RTP packet in SRTP mode it
> delivers it to the DTLS implementation as an ordinary application data
> write (e.g., SSL_write())."
> 
> From that, I understand that in the case of a unicast session, only
> one socket is needed for the transmission of STUN, SRTP and DTLS
> datagrams.

Right, and demultiplexed as shown in
http://tools.ietf.org/html/draft-ietf-avt-dtls-srtp-07#section-5.1.2

> I am not sure, though, to get how it should work in the case of a (one
> to many) multicast session.

Use DTLS-SRTP with EKT.  EKT allows telling each of the receivers
the same key.  The sender then sends the same multicast packet
(or if using unicast, the sender sends the same packet, unicast, 
to each NNN receivers).

EKT is http://tools.ietf.org/html/draft-ietf-avt-srtp-ekt-00

-d

> Isn't the server supposed to send SRTP datagrams to a broadcast
> address, whereas DTLS data must be sent directly to (unicast)
> designated clients? Is the sentence in the draft only applicable to
> unicast?
> 
> I thank you in advance for your valuable insight.
> 
> Romain
> _______________________________________________
> Audio/Video Transport Working Group
> avt@ietf.org
> https://www.ietf.org/mailman/listinfo/avt