Date: Tue, 19 Nov 2019 01:59:44 -0800
From: MikkelFJ <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+AFTOJK3JK2YV43SJR4ANTMN34DXZBEVBNHHB6ES7L4@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/3224/c555427392@github.com>
In-Reply-To: <quicwg/base-drafts/pull/3224@github.com>
References: <quicwg/base-drafts/pull/3224@github.com>
Subject: Re: [quicwg/base-drafts] No reading of 1-RTT before the handshake is
 complete (#3224)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5dd3bd1051468_41c53fdb6f8cd964120414";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/KGEewrY0BU4jJmDVlj4BE4D-tN8>


----==_mimepart_5dd3bd1051468_41c53fdb6f8cd964120414
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

I know this has been discussed before - but reading the text as it is I wonder:

the text mixes three different terms, seeming arbitrarily: decryption of 1-RTT, processing of 1-RTT, and reading 1-RTT packets, and not using the 1-RTT keys at all.

I can see how packets MUST not be processed ahead of time, but I don't see why the keys cannot be used to qualify the packets. In fact the text says you can store 1-RTT packets until ready, but how do you know they are indeed 1-RTT packets if you cannot use the keys in some form?

There is a related concern about timing attacks if you do not both decrypt and verify but if that is not topic here, and if it is a concern it should probably be mentioned or referenced.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3224#issuecomment-555427392
----==_mimepart_5dd3bd1051468_41c53fdb6f8cd964120414
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

<p>I know this has been discussed before - but reading the text as it is I wonder:</p>
<p>the text mixes three different terms, seeming arbitrarily: decryption of 1-RTT, processing of 1-RTT, and reading 1-RTT packets, and not using the 1-RTT keys at all.</p>
<p>I can see how packets MUST not be processed ahead of time, but I don't see why the keys cannot be used to qualify the packets. In fact the text says you can store 1-RTT packets until ready, but how do you know they are indeed 1-RTT packets if you cannot use the keys in some form?</p>
<p>There is a related concern about timing attacks if you do not both decrypt and verify but if that is not topic here, and if it is a concern it should probably be mentioned or referenced.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/quicwg/base-drafts/pull/3224?email_source=notifications&amp;email_token=AFTOJK34JG4Q7E3ZOWPJBC3QUO2JBA5CNFSM4JL5PYL2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEENSMQA#issuecomment-555427392">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AFTOJK6WUCNDY2WOSLM37WDQUO2JBANCNFSM4JL5PYLQ">unsubscribe</a>.<img src="https://github.com/notifications/beacon/AFTOJK6K2F3YCGJ7MPJOOFLQUO2JBA5CNFSM4JL5PYL2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEENSMQA.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/pull/3224?email_source=notifications\u0026email_token=AFTOJK34JG4Q7E3ZOWPJBC3QUO2JBA5CNFSM4JL5PYL2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEENSMQA#issuecomment-555427392",
"url": "https://github.com/quicwg/base-drafts/pull/3224?email_source=notifications\u0026email_token=AFTOJK34JG4Q7E3ZOWPJBC3QUO2JBA5CNFSM4JL5PYL2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEENSMQA#issuecomment-555427392",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>
----==_mimepart_5dd3bd1051468_41c53fdb6f8cd964120414--