[hybi] call for feedback on Masking alternatives

Salvatore Loreto <salvatore.loreto@ericsson.com> Mon, 04 April 2011 13:21 UTC

Return-Path: <salvatore.loreto@ericsson.com>
X-Original-To: hybi@core3.amsl.com
Delivered-To: hybi@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 359A33A69F0 for <hybi@core3.amsl.com>; Mon, 4 Apr 2011 06:21:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.595
X-Spam-Level:
X-Spam-Status: No, score=-106.595 tagged_above=-999 required=5 tests=[AWL=0.003, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0VnAIidUJKY1 for <hybi@core3.amsl.com>; Mon, 4 Apr 2011 06:21:08 -0700 (PDT)
Received: from mailgw10.se.ericsson.net (mailgw10.se.ericsson.net [193.180.251.61]) by core3.amsl.com (Postfix) with ESMTP id 292F13A693B for <hybi@ietf.org>; Mon, 4 Apr 2011 06:21:07 -0700 (PDT)
X-AuditID: c1b4fb3d-b7bd5ae000002ba3-da-4d99c62902f2
Received: from esessmw0237.eemea.ericsson.se (Unknown_Domain [153.88.253.125]) by mailgw10.se.ericsson.net (Symantec Mail Security) with SMTP id 6F.AA.11171.926C99D4; Mon, 4 Apr 2011 15:22:49 +0200 (CEST)
Received: from mail.lmf.ericsson.se (153.88.115.8) by esessmw0237.eemea.ericsson.se (153.88.115.91) with Microsoft SMTP Server id 8.3.137.0; Mon, 4 Apr 2011 15:22:49 +0200
Received: from nomadiclab.lmf.ericsson.se (nomadiclab.lmf.ericsson.se [131.160.33.3]) by mail.lmf.ericsson.se (Postfix) with ESMTP id 5D0CA262C; Mon, 4 Apr 2011 16:22:49 +0300 (EEST)
Received: from nomadiclab.lmf.ericsson.se (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 558A0503B1; Mon, 4 Apr 2011 16:22:49 +0300 (EEST)
Received: from n211.nomadiclab.com (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id F2F8E4F983; Mon, 4 Apr 2011 16:22:48 +0300 (EEST)
Message-ID: <4D99C628.8090409@ericsson.com>
Date: Mon, 04 Apr 2011 16:22:48 +0300
From: Salvatore Loreto <salvatore.loreto@ericsson.com>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.15) Gecko/20110303 Thunderbird/3.1.9
MIME-Version: 1.0
To: "hybi@ietf.org" <hybi@ietf.org>
Content-Type: multipart/alternative; boundary="------------070206070101000207080104"
X-Virus-Scanned: ClamAV using ClamSMTP
X-Brightmail-Tracker: AAAAAA==
Cc: SM <sm+ietf@elandsys.com>
Subject: [hybi] call for feedback on Masking alternatives
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2011 13:21:17 -0000

(as HyBi wg co-chair)


Hi there,

Last Tuesday, during the HyBi wg session at the IETF meeting, we 
discussed the masking issue.

Based on that discussion, the decision is **only between two alternatives**:
whether to (1) mask the entire frame, as in the current 06 spec,
or to (2) mask only after the op codes and length.

In the wire format for (1), the 32-bit masking-key appears first, and 
then the entire frame masked (as in 06):

       0                   1                   2                   3
       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
      +---------------------------------------------------------------+
      |                       Masking-key                             |
      +-+-+-+-+-------+-+-------------+-------------------------------+
      |F|R|R|R| opcode|R| Payload len |    Extended payload length    |
      |I|S|S|S|  (4)  |S|     (7)     |             (16/63)           |
      |N|V|V|V|       |V|             |   (if payload len==126/127)   |
      | |1|2|3|       |4|             |                               |
      +-+-+-+-+-------+-+-------------+ - - - - - - - - - - - - - - - +
      |     Extended payload length continued, if payload len == 127  |
      + - - - - - - - - - - - - - - - +-------------------------------+
      |                               |         Extension data        |
      +-------------------------------+ - - - - - - - - - - - - - - - +
      :                                                               :
      +---------------------------------------------------------------+
      :                       Application data                        :
      +---------------------------------------------------------------+


In the wire format for (2), the masking-key appears after the op codes 
and length fields.
This is where 06 shows the "Extension data". The extension data and the 
rest of the frame would be shifted 32 bits and it would all be masked.

       0                   1                   2                   3
       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
      +-+-+-+-+-------+-+-------------+-------------------------------+
      |F|R|R|R| opcode|R| Payload len |    Extended payload length    |
      |I|S|S|S|  (4)  |S|     (7)     |             (16/63)           |
      |N|V|V|V|       |V|             |   (if payload len==126/127)   |
      | |1|2|3|       |4|             |                               |
      +-+-+-+-+-------+-+-------------+ - - - - - - - - - - - - - - - +
      |     Extended payload length continued, if payload len == 127  |
      + - - - - - - - - - - - - - - - +-------------------------------+
      |                               |         Masking-key           |
     +---------------------------------------------------------------+
      |    Masking-key (continued)    |         Extension data        |
      +-------------------------------+ - - - - - - - - - - - - - - - +
      :                                                               :
      +---------------------------------------------------------------+
      :                       Application data                        :
      +---------------------------------------------------------------+

In both cases, everything after the Masking-key is masked.

Several folks have already expressed themselves on this issue either 
recently on the mailing list, or in person at the IETF meeting this week.

Gabriel and I, as HyBi wg chairs, would like to solicit only those who 
have not yet expressed themselves on this issue, to do so now.

We will wait for additional feedback **until Friday April 8**, and based 
on the feedback will make a decision shortly afterward.

cheers
/Sal

-- 
Salvatore Loreto
www.sloreto.com