Re: [AVTCORE] FYI: draft-rescorla-random-cname-00

Colin Perkins <csp@csperkins.org> Wed, 11 July 2012 11:59 UTC

Return-Path: <csp@csperkins.org>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4BE921F8655 for <avt@ietfa.amsl.com>; Wed, 11 Jul 2012 04:59:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.599
X-Spam-Level:
X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fkeL4G5hSfHf for <avt@ietfa.amsl.com>; Wed, 11 Jul 2012 04:59:34 -0700 (PDT)
Received: from anchor-msapost-3.mail.demon.net (anchor-msapost-3.mail.demon.net [195.173.77.166]) by ietfa.amsl.com (Postfix) with ESMTP id DA2D521F864F for <avt@ietf.org>; Wed, 11 Jul 2012 04:59:33 -0700 (PDT)
Received: from mangole.dcs.gla.ac.uk ([130.209.247.112]) by anchor-post-3.mail.demon.net with esmtpsa (AUTH csperkins-dwh) (TLSv1:AES128-SHA:128) (Exim 4.69) id 1SovaN-0007Wc-nj; Wed, 11 Jul 2012 12:00:03 +0000
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset="us-ascii"
From: Colin Perkins <csp@csperkins.org>
In-Reply-To: <CABcZeBNOvecQA5DZ9K6syRugB0mFcLe0_7mO+kEfrddNFtxn8w@mail.gmail.com>
Date: Wed, 11 Jul 2012 13:00:01 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <2BA47368-02D8-46DD-8220-B97660A20E61@csperkins.org>
References: <CABcZeBNOvecQA5DZ9K6syRugB0mFcLe0_7mO+kEfrddNFtxn8w@mail.gmail.com>
To: Eric Rescorla <ekr@rtfm.com>
X-Mailer: Apple Mail (2.1278)
Cc: IETF AVTCore WG <avt@ietf.org>
Subject: Re: [AVTCORE] FYI: draft-rescorla-random-cname-00
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Jul 2012 11:59:35 -0000

[limiting replies to avt, since this is about details]

On 9 Jul 2012, at 20:24, Eric Rescorla wrote:
> As discussed at the RTCWEB interim:
> 
> Executive summary: use a CSPRNG to generate CNAMEs.


Section 2.1 says: "The timestamp (from the RTP header) to within a few seconds.  With a typical 100 ticks/second clock, this represents about 10 bits of entropy at most (and potentially more like 2-3 bits)". The RTP timestamp has a random initial value, and typically ticks at either 8kHz or 90kHz. It's not a wall clock. There's more entropy here than supposed. 

-- 
Colin Perkins
http://csperkins.org/