[AVTCORE] Defined by RTP profile ids for encrypted header extensions

Sergio Garcia Murillo <sergio.garcia.murillo@gmail.com> Thu, 30 July 2020 22:55 UTC

Return-Path: <sergio.garcia.murillo@gmail.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F11EF3A07E7 for <avt@ietfa.amsl.com>; Thu, 30 Jul 2020 15:55:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3TapPyFY-fWk for <avt@ietfa.amsl.com>; Thu, 30 Jul 2020 15:55:03 -0700 (PDT)
Received: from mail-wm1-x335.google.com (mail-wm1-x335.google.com [IPv6:2a00:1450:4864:20::335]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4160D3A07B1 for <avt@ietf.org>; Thu, 30 Jul 2020 15:55:03 -0700 (PDT)
Received: by mail-wm1-x335.google.com with SMTP id 9so7031320wmj.5 for <avt@ietf.org>; Thu, 30 Jul 2020 15:55:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-language; bh=inTuu8UZlUHXU3N4X0NRxp5xG8Az5juI3X/eyQincs8=; b=eJyjEq7Jqe4IpF2OugC2vBe05gZrgwSYTJxbgKzEHsf0jRWHH3lZ0jVNnb/9yoP8v4 J0Mk6GnVD0in0HpU6mxW3BTRH6DcLO8i3aAOHIoHGrF/aAkHE0x4IcAlUkQuRD9J1Tqu YGSW7Hx5tRVEwpHihgvNXcTM85y1wBxDpRturZnZ01qi66MHL1+9izS+vHYgfmQKtUrl DvZ779H5ob2p1DL0L4BGlrpOTGgY5zmVOspVAbR7bzeHFA4eCdY+EomxqqJHMsFGJn3J xYntiXpJtQfFmr59q/kAoSa4fNjZzRxO6UZlwdEN3k/U7V4kCyZAQA3NSlbhEzn/vkqk +NEg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-language; bh=inTuu8UZlUHXU3N4X0NRxp5xG8Az5juI3X/eyQincs8=; b=FcDQruGGGdNAHTqLqm8FTvGokksbhh4377ZX35PD8AgvhIPLZGA1PgYufdXT/bIe9S D/sZrbi9brVBRtNu49kOj3WxrHv7qWYHqtQM9JclGmGepjcmsFK/L75wJAI9YNgpwbqx l0kw2aF64auhpyxwJU1m67oozompxUJ8tYCqgoNtONSnZDbg20FMkf8TG0lzdNeAM3c8 FOKvqjM2KjN6AuOWSZeuoj/0pVT2ktmJ9tBf70fQYQdrai6/pY9Wi7LuanarhFsxn0uL bLKbiw7hp+2IoR4J8+VhJdvR1EH7Jv2MgnGSYoQgtA1FBHVFr3AiqMllBlnpAsIyqbP1 uwPg==
X-Gm-Message-State: AOAM5318Uq2rVqUc3y/Z2Kk1fCkGTZTYv2Kpsy8fexFfqlzJPmUR1FPd vQF5R7aj6HAbB9vbm33QCzrRm1/jfi8=
X-Google-Smtp-Source: ABdhPJztieO9Thnr2em3tTqZT3iBHmbFHcW/FliF9zVO5vMfTVqcXw69aAIeSEtKBsz6qyasaznCoA==
X-Received: by 2002:a7b:ce83:: with SMTP id q3mr1161103wmj.5.1596149701528; Thu, 30 Jul 2020 15:55:01 -0700 (PDT)
Received: from [192.168.1.36] (122.red-79-153-21.dynamicip.rima-tde.net. [79.153.21.122]) by smtp.googlemail.com with ESMTPSA id p8sm12234206wrq.9.2020.07.30.15.54.59 for <avt@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 30 Jul 2020 15:55:00 -0700 (PDT)
To: avt@ietf.org
From: Sergio Garcia Murillo <sergio.garcia.murillo@gmail.com>
Message-ID: <75f257b1-c131-1e83-4c90-03f980466303@gmail.com>
Date: Fri, 31 Jul 2020 00:54:56 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.11.0
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="------------93042768CDF29582BDDBA060"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/avt/qWWs3Xlcns-xMkcYQvoP68qZBDU>
Subject: [AVTCORE] Defined by RTP profile ids for encrypted header extensions
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2020 22:55:05 -0000

Hi all,

Not sure if we got to a consensus regarding the need to introduce new 
defined by profile ids for being able to tell if an incoming packet is 
using the new encryption scheme to protect the csrcs and the rtp headers 
or not.

I think we should, but in that case we need to specify two different 
profiles ids, one for the encrypted one byte header extension and 
another different one for the 2 bytes one. I have some doubts regarding 
what to do with the appbits of the 2 byte header extension profile id:

       0                   1
        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
       |         0x100         |appbits|
       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+


If I have read the rfc correctly (never understood their meaning until 
today), it is reserved for carrying the value of the header extension 
with id 256. This would mean that the appbits for extension 256 are sent 
unencrypted with the new approach if we keep this format. Probably the 
best would be to forbid the usage of extension 256 if cryptex is signaled.

Regarding, ids values, I love 0xC0DE for 1 byte extensions, but not sure 
if it would be better to be consistent and use 0x1010 for 1 byte 
encrypted extensions and 0x1020 for two byte encrypted extensions.

Best regard

Sergio