[quicwg/base-drafts] e7f470: Update key schedule

Sean Turner <sean@sn3rd.com> Wed, 13 December 2017 00:00 UTC

Return-Path: <bounce+565321.40f-quic-issues=ietf.org@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74E02126DCA for <quic-issues@ietfa.amsl.com>; Tue, 12 Dec 2017 16:00:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RYlhrGVHu2tQ for <quic-issues@ietfa.amsl.com>; Tue, 12 Dec 2017 16:00:13 -0800 (PST)
Received: from m69-169.mailgun.net (m69-169.mailgun.net [166.78.69.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89E15126CBF for <quic-issues@ietf.org>; Tue, 12 Dec 2017 16:00:13 -0800 (PST)
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=github.com; q=dns/txt; s=mailo; t=1513123212; h=Content-Transfer-Encoding: Content-Type: Mime-Version: Subject: Message-ID: To: Reply-To: From: Date: Sender; bh=lYjuj2RpVCQTfj3iBVzcDat/tfgAHYb/JBF1I6iuQkM=; b=oPnLsavWBvy9vzgoafT+kd7mZJkWYh5cb1jlmqGuaUyYFYNGhCJCck7dXURYYLka8K1b+pRW 1mPXmVuSD0h7EKRfrvAbWR8s00SAm68doIA2KQOgeL/CkjVDfblwlX8PqeOqi1y1S/jEPb35 aj+xxoDoFh8KyR6Rhq4oD91fayE=
X-Mailgun-Sending-Ip: 166.78.69.169
X-Mailgun-Sid: WyJhNzYyYiIsICJxdWljLWlzc3Vlc0BpZXRmLm9yZyIsICI0MGYiXQ==
Sender: sean=sn3rd.com@github.com
Received: from github.com (Unknown [192.30.252.34]) by mxa.mailgun.org with ESMTP id 5a306d8c.7f37b84cb060-smtp-out-n03; Wed, 13 Dec 2017 00:00:12 -0000 (UTC)
Date: Tue, 12 Dec 2017 16:00:12 -0800
From: Sean Turner <sean@sn3rd.com>
Reply-To: Sean Turner <sean@sn3rd.com>
To: quic-issues@ietf.org
Message-ID: <5a306d8c94a58_699b2ac1851efc00137939@hookshot-fe-7191cb1.cp1-iad.github.net.mail>
Subject: [quicwg/base-drafts] e7f470: Update key schedule
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="--==_mimepart_5a306d8c9464f_699b2ac1851efc00137868"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/UAWKVwNPpqZQ10Wcmgz3TNqQBw4>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Dec 2017 00:00:15 -0000

  Branch: refs/heads/master
  Home:   https://github.com/quicwg/base-drafts
  Commit: e7f4707d3864a2e63e7d68dd81be85d99dca4134
      https://github.com/quicwg/base-drafts/commit/e7f4707d3864a2e63e7d68dd81be85d99dca4134
  Author: Martin Thomson <martin.thomson@gmail.com>
  Date:   2017-12-08 (Fri, 08 Dec 2017)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Update key schedule

This changes the labels that we use in key derivations to be shorter.  That is
in line with similar changes TLS made, so that the number of iterations of the
underlying hash function are reduced slightly.  QUIC will still run SHA-256
like a bitcoin rig, but this should help some.

I've chosen to define the function we use rather than reuse the TLS 1.3
function.  It's still the same function, but it now uses a different root
label.  That should help avoid collisions if QUIC and TLS diverge (though that
would be unlikely).  The main benefit is in reducing the label length.

This also corrects the error in the example.


  Commit: 7ebcc7a710b574616112f961406e75fb846c131e
      https://github.com/quicwg/base-drafts/commit/7ebcc7a710b574616112f961406e75fb846c131e
  Author: Martin Thomson <martin.thomson@gmail.com>
  Date:   2017-12-08 (Fri, 08 Dec 2017)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  A few consistency fixes


  Commit: a5d5f94f7ae51e6c522a6ea3d91897caf9366d9d
      https://github.com/quicwg/base-drafts/commit/a5d5f94f7ae51e6c522a6ea3d91897caf9366d9d
  Author: Sean Turner <sean@sn3rd.com>
  Date:   2017-12-12 (Tue, 12 Dec 2017)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Update draft-ietf-quic-tls.md


  Commit: 4d2fca6256f3e9d42cb0b49b37ace85f5f97f8c1
      https://github.com/quicwg/base-drafts/commit/4d2fca6256f3e9d42cb0b49b37ace85f5f97f8c1
  Author: Sean Turner <sean@sn3rd.com>
  Date:   2017-12-12 (Tue, 12 Dec 2017)

  Changed paths:
    M draft-ietf-quic-tls.md

  Log Message:
  -----------
  Merge pull request #1004 from quicwg/gratuitous-key-schedule-change

Gratuitous key schedule change


Compare: https://github.com/quicwg/base-drafts/compare/32b8de3b9cf5...4d2fca6256f3