Re: [quicwg/base-drafts] Rework Key Update (#2237)

[Kazuho Oku <[e-mail]>]

(following my previous comment) As an example, a design like below ensures that keeping states for two generation of keys is fine and also encourages the endpoint to drop the older generation key at the correct moment.

* We use one bit for send key phase, and another bit for receive key phase.
* When the sender updates the send key, it's flips the send key phase bit.
* When the receiver _retires_ the old receive key, it flips the receive key phase bit.
* Sender's send key phase bit becoming equal to the peer's receive key phase bit allows the sender to make another key update; until that happens, a sender is not allowed to do a key update.



-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/2237#issuecomment-449542641