Re: [Masque] Design team PR for QUIC-aware forwarding

Dumb question, because I suspect I am reading it wrong. Reading the PR, 
you propose using ECB to reencrypt packets between client and server. 
How can you use ECB and no padding if the payloadlength is not a 
multiple of 16?

-- Christian Huitema

On 1/25/2024 7:09 PM, Martin Thomson wrote:
> So you don't scramble the first byte and you don't pad.
> 
> You know... there is a way to achieve both with minimal additional complexity and no additional overhead aside from any added padding:
> 
> If you encrypt the first byte, you can also use 0x80 to signal whether padding is present.  Then you can use a zero pad sequence terminated by a non-zero byte at either end of the packet (suggestion: the end).
> 
> On Fri, Jan 26, 2024, at 12:13, David Schinazi wrote:
>> Thanks Tommy!
>>
>> In case it's helpful to others, here's a rendered diff between this
>> branch and main:
>> https://author-tools.ietf.org/diff?url_1=https://ietf-wg-masque.github.io/draft-ietf-masque-quic-proxy/draft-ietf-masque-quic-proxy.txt&url_2=https://ietf-wg-masque.github.io/draft-ietf-masque-quic-proxy/design-team/draft-ietf-masque-quic-proxy.txt
>>
>> David
>>
>> On Thu, Jan 25, 2024 at 2:23 PM Tommy Pauly
>> <tpauly=40apple.com@dmarc.ietf.org> wrote:
>>> Hi MASQUErs,
>>>
>>> On behalf of the design team for draft-ietf-masque-quic-proxy that was tasked on adding a proposal to add encryption on the forwarding path, I’d like to share the pull request to the document that represents the proposal of the team. This is largely what was presented at the last IETF meeting, adding support for negotiating protocol transforms, and defining the “scramble” transform.
>>>
>>> Here is the PR against the base document: https://github.com/ietf-wg-masque/draft-ietf-masque-quic-proxy/pull/99
>>> Here is the rendered version: https://ietf-wg-masque.github.io/draft-ietf-masque-quic-proxy/design-team/draft-ietf-masque-quic-proxy.html
>>>
>>> Please take a look and feel free to add comments to the PR or the mailing list!
>>>
>>> Thanks,
>>> Tommy (& David, Ben, Eric, Mirja, Antoine, & Tiru)
>>> -- 
>>> Masque mailing list
>>> Masque@ietf.org
>>> https://www.ietf.org/mailman/listinfo/masque
>> -- 
>> Masque mailing list
>> Masque@ietf.org
>> https://www.ietf.org/mailman/listinfo/masque
> 