Date: Tue, 02 Jun 2020 03:13:47 -0700
From: Martin Thomson <notifications@github.com>
Reply-To: quicwg/base-drafts
 <reply+AFTOJK5R5DAYLTM6DCEMBJ544IDVXEVBNHHCK7K3HI@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/pull/3712/review/422535584@github.com>
In-Reply-To: <quicwg/base-drafts/pull/3712@github.com>
References: <quicwg/base-drafts/pull/3712@github.com>
Subject: Re: [quicwg/base-drafts] Example of ChaCha20-Poly1305 (#3712)
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--==_mimepart_5ed6265b69e23_49303f975f8cd9682373e2";
 charset=UTF-8
Content-Transfer-Encoding: 7bit
Precedence: list
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/SCx4npHQVqciS9ORNk9i9OkZ-UU>


----==_mimepart_5ed6265b69e23_49303f975f8cd9682373e2
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

@martinthomson commented on this pull request.



> +      73573685608597d0efcb076b0ab7a7a4
+
+ku  = HKDF-Expand-Label(server_initial_secret, "quic ku", _, 32)
+    = 1223504755036d556342ee9361d25342
+      1a826c9ecdf3c7148684b36b714881f9
+~~~
+
+The following shows the steps involved in protecting a minimal packet with an
+empty Destination Connection ID. This packet contains a single HANDSHAKE_DONE
+frame (that is, a payload of just 0x1e) and has a packet number of 0. In this
+example, a packet number of length 3 is used to avoid having to pad the payload
+of the packet; PADDING frames would be needed if the packet number is encoded
+on fewer octets.
+
+~~~
+pn                 = 0

This packet was from me reading the logs of our implementation, which sends HANDSHAKE_DONE in packet 0.  But I decided that it might be better to make this reproducible, and it wasn't THAT hard to write some JS.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/pull/3712#discussion_r433768945
----==_mimepart_5ed6265b69e23_49303f975f8cd9682373e2
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

<p></p>
<p><b>@martinthomson</b> commented on this pull request.</p>

<hr>

<p>In <a href="https://github.com/quicwg/base-drafts/pull/3712#discussion_r433768945">draft-ietf-quic-tls.md</a>:</p>
<pre style='color:#555'>&gt; +      73573685608597d0efcb076b0ab7a7a4
+
+ku  = HKDF-Expand-Label(server_initial_secret, &quot;quic ku&quot;, _, 32)
+    = 1223504755036d556342ee9361d25342
+      1a826c9ecdf3c7148684b36b714881f9
+~~~
+
+The following shows the steps involved in protecting a minimal packet with an
+empty Destination Connection ID. This packet contains a single HANDSHAKE_DONE
+frame (that is, a payload of just 0x1e) and has a packet number of 0. In this
+example, a packet number of length 3 is used to avoid having to pad the payload
+of the packet; PADDING frames would be needed if the packet number is encoded
+on fewer octets.
+
+~~~
+pn                 = 0
</pre>
<p>This packet was from me reading the logs of our implementation, which sends HANDSHAKE_DONE in packet 0.  But I decided that it might be better to make this reproducible, and it wasn't THAT hard to write some JS.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/quicwg/base-drafts/pull/3712#discussion_r433768945">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AFTOJK3TAV75CTYMWCBW5PDRUTGFXANCNFSM4NQO433Q">unsubscribe</a>.<img src="https://github.com/notifications/beacon/AFTOJK2D7XEOL3SIXNQBQ6TRUTGFXA5CNFSM4NQO4332YY3PNVWWK3TUL52HS4DFWFIHK3DMKJSXC5LFON2FEZLWNFSXPKTDN5WW2ZLOORPWSZGODEXWDIA.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/quicwg/base-drafts/pull/3712#discussion_r433768945",
"url": "https://github.com/quicwg/base-drafts/pull/3712#discussion_r433768945",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>
----==_mimepart_5ed6265b69e23_49303f975f8cd9682373e2--