[quicwg/base-drafts] 85db1f: Rewrite key update section

Martin Thomson <noreply@github.com> Mon, 04 November 2019 01:58 UTC

Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D769912086B for <quic-issues@ietfa.amsl.com>; Sun, 3 Nov 2019 17:58:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7
X-Spam-Level:
X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gvQN7VYDQatl for <quic-issues@ietfa.amsl.com>; Sun, 3 Nov 2019 17:58:34 -0800 (PST)
Received: from out-23.smtp.github.com (out-23.smtp.github.com [192.30.252.206]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 564BB120020 for <quic-issues@ietf.org>; Sun, 3 Nov 2019 17:58:34 -0800 (PST)
Received: from github-lowworker-5825cd4.ac4-iad.github.net (github-lowworker-5825cd4.ac4-iad.github.net [10.52.22.68]) by smtp.github.com (Postfix) with ESMTP id 84E6A6604F7 for <quic-issues@ietf.org>; Sun, 3 Nov 2019 17:58:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1572832713; bh=/HxW6jKjUnjTdMfmXjMwkI7/bnAFpUns99sUZhUZ32U=; h=Date:From:To:Subject:From; b=MQOa3PIMgKUWdxp7Vpd1noeZSpCIZJKJG46o8VSCzHAos0XswkRTpH5x20zobZmoE YxOupeLZGeeZhEkqwvbMWJCpSfeqbyNeweIHTT4AOHw7nvLzAD6XBYTuunwt5iK/HG WAMLMuD4A9PKK5sE0dkYMISh4dooHigcYwxxZHRQ=
Date: Sun, 03 Nov 2019 17:58:33 -0800
From: Martin Thomson <noreply@github.com>
To: quic-issues@ietf.org
Message-ID: <quicwg/base-drafts/push/refs/heads/master/3b22f6-cd91b1@github.com>
Subject: [quicwg/base-drafts] 85db1f: Rewrite key update section
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-GitHub-Recipient-Address: quic-issues@ietf.org
X-Auto-Response-Suppress: All
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/1YezhUcPEHReNkGea7MBzvoeeJc>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 01:58:38 -0000

  Branch: refs/heads/master
  Home:   https://github.com/quicwg/base-drafts
  Commit: 85db1f71811872bc01e4ac3692e545620258b82e
      https://github.com/quicwg/base-drafts/commit/85db1f71811872bc01e4ac3692e545620258b82e
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-09-19 (Thu, 19 Sep 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Rewrite key update section

This makes some significant editorial changes to the key update section,
hopefully making the various activities clearer and more explicit.

In the process, I am also trying to address #2792, which is the timing
sidechannel created by having the generation of updated keys inline with
packet processing.  In doing so, I'm suggesting that endpoints create
the next keys at some time after the key update happens.  Right now, I'm
thinking 1-2 PTOs is probably close enough to workable.  I've limited
this at 3PTO.  This is, however, just a (firm) suggestion at this stage.

For endpoints that only want to keep 2 sets of keys, this is probably
the right time frame, especially if we keep the current advice for 3PTO
before a subsequent update.

The effect of this is that attempts to update at certain times could
cause all packets after the update to be discarded.  That would only
happen if implementations consistently ignored advice on update
frequency, so I think that's tolerable, but I'd like input on this.

(This also attempts to take up the advice from the other, older PRs on
this subject.)

Closes #2792, #2791, #2237.


  Commit: 678c0486f91012173e827b1d708429b153bc3037
      https://github.com/quicwg/base-drafts/commit/678c0486f91012173e827b1d708429b153bc3037
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-09-19 (Thu, 19 Sep 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Kazuho is a great help here


  Commit: 1b4d136a4ac9593b8211d378789ed2d08e16ea6e
      https://github.com/quicwg/base-drafts/commit/1b4d136a4ac9593b8211d378789ed2d08e16ea6e
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-09-20 (Fri, 20 Sep 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Attempt to improve readability in a few places.

Also, record that this closes #3054.


  Commit: b35a5e4870cac65f2d7b0d37b21a837a7142a472
      https://github.com/quicwg/base-drafts/commit/b35a5e4870cac65f2d7b0d37b21a837a7142a472
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-10-11 (Fri, 11 Oct 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Ian's review comments


  Commit: c131d08809b85bc2cdf56c67eab62741414571f2
      https://github.com/quicwg/base-drafts/commit/c131d08809b85bc2cdf56c67eab62741414571f2
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-10-11 (Fri, 11 Oct 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Restore implementation advice


  Commit: c764362e3e50f0647b930648de5b645e4cc65ad4
      https://github.com/quicwg/base-drafts/commit/c764362e3e50f0647b930648de5b645e4cc65ad4
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-11-01 (Fri, 01 Nov 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Move some text around


  Commit: b1d56947b2cf5542481ec65fa7dfb7e4d434fcf9
      https://github.com/quicwg/base-drafts/commit/b1d56947b2cf5542481ec65fa7dfb7e4d434fcf9
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-11-01 (Fri, 01 Nov 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  janaiyengar's suggestions


  Commit: bf1394db3c610de54286bbf7aafdb235599ba46f
      https://github.com/quicwg/base-drafts/commit/bf1394db3c610de54286bbf7aafdb235599ba46f
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-11-04 (Mon, 04 Nov 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Some small adjustments


  Commit: 289e57d5ed1f37e2f3ef1c36dc427c782b418576
      https://github.com/quicwg/base-drafts/commit/289e57d5ed1f37e2f3ef1c36dc427c782b418576
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-11-04 (Mon, 04 Nov 2019)

  Changed paths:
    M .circleci/config.yml
    M draft-ietf-quic-http.md
    M draft-ietf-quic-qpack.md
    M draft-ietf-quic-recovery.md
    M draft-ietf-quic-tls.md
    M draft-ietf-quic-transport.md
    A ietf.json

  Log Message:
  -----------
  Merge branch 'master' into rework-key-update-2


  Commit: a7b0addaa2cb1a0fab865adb8f1d2437dca302d9
      https://github.com/quicwg/base-drafts/commit/a7b0addaa2cb1a0fab865adb8f1d2437dca302d9
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-11-04 (Mon, 04 Nov 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Split first from subsequent again


  Commit: cd91b144a45472b77039c158c2dc7f7b226e497f
      https://github.com/quicwg/base-drafts/commit/cd91b144a45472b77039c158c2dc7f7b226e497f
  Author: Martin Thomson <mt@lowentropy.net>
  Date:   2019-11-03 (Sun, 03 Nov 2019)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Merge pull request #3050 from quicwg/rework-key-update-2

Rewrite key update section


Compare: https://github.com/quicwg/base-drafts/compare/3b22f6646dde...cd91b144a454