[quicwg/base-drafts] Rewrite key update section (#3050)

[Martin Thomson <[e-mail]>]

This makes some significant editorial changes to the key update section,
hopefully making the various activities clearer and more explicit.

In the process, I am also trying to address #2792, which is the timing
sidechannel created by having the generation of updated keys inline with
packet processing.  In doing so, I'm suggesting that endpoints create
the next keys at some time after the key update happens.  Right now, I'm
thinking 1-2 PTOs is probably close enough to workable.  I've limited
this at 3PTO.  This is, however, just a (firm) suggestion at this stage.

For endpoints that only want to keep 2 sets of keys, this is probably
the right time frame, especially if we keep the current advice for 3PTO
before a subsequent update.

The effect of this is that attempts to update at certain times could
cause all packets after the update to be discarded.  That would only
happen if implementations consistently ignored advice on update
frequency, so I think that's tolerable, but I'd like input on this.

(This also attempts to take up the advice from the other, older PRs on
this subject.)

Closes #2792, #2791, #2237.
You can view, comment on, or merge this pull request online at:

  https://github.com/quicwg/base-drafts/pull/3050

-- Commit Summary --

  * Rewrite key update section

-- File Changes --

    M draft-ietf-quic-tls.md (296)

-- Patch Links --

https://github.com/quicwg/base-drafts/pull/3050.patch
https://github.com/quicwg/base-drafts/pull/3050.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3050