Re: [quicwg/base-drafts] Encrypting token in Retry packet (#3477)
Quoc-Viet Nguyen <notifications@github.com> Sun, 23 February 2020 08:00 UTC
Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29F163A101E for <quic-issues@ietfa.amsl.com>; Sun, 23 Feb 2020 00:00:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.554
X-Spam-Level:
X-Spam-Status: No, score=-1.554 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Iy09wTMsOdaS for <quic-issues@ietfa.amsl.com>; Sun, 23 Feb 2020 00:00:26 -0800 (PST)
Received: from out-24.smtp.github.com (out-24.smtp.github.com [192.30.252.207]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D8C03A0042 for <quic-issues@ietf.org>; Sun, 23 Feb 2020 00:00:25 -0800 (PST)
Date: Sun, 23 Feb 2020 00:00:25 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1582444825; bh=vz/ppKWF1JGOjqjKeYKDh0C8IT9bJL3L3BN+tDt1Jeg=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=YLrJbX8wJ/2+CRDYhfu1Ragm9ZLXMWvCEjrhV1iP3xGWXC0DlcAMsJ6W05nZhTsdT Mf1RJcFQJZIP1z4lOUcRiWo/SuEKK6xksGN6vYYvCERX2VXw8XjrXwDhfrSxUQuvNf Xw9ZN+7EKjR5SpwdzV+sWN1i6RqNW8YSIGuNjpxA=
From: Quoc-Viet Nguyen <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+AFTOJK3ZGQLLUITVEWMHCBF4L5RZTEVBNHHCD4DU3Q@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/3477/590037541@github.com>
In-Reply-To: <quicwg/base-drafts/issues/3477@github.com>
References: <quicwg/base-drafts/issues/3477@github.com>
Subject: Re: [quicwg/base-drafts] Encrypting token in Retry packet (#3477)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5e52311928209_1c1f3f8c5b8cd968234023"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: nqv
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/Xh6j-PkNH0xRzkeJvXeAkaY5qgk>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Feb 2020 08:00:27 -0000
If HKDF-Expand-Label is expensive, can we use ODCID such as first 128 bit as the secret key and the remain as the nonce? Or can we generalize it and say SHA256 of user data (ODCID in this case) will be AEAD key and nonce? WRT pseudo packet. I think on client side, I still need to allocate memory for a copy of received retry packet plus odcid to verify the integrity tag. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/quicwg/base-drafts/issues/3477#issuecomment-590037541
- [quicwg/base-drafts] Encrypting token in Retry pa… Quoc-Viet Nguyen
- Re: [quicwg/base-drafts] Encrypting token in Retr… Martin Thomson
- Re: [quicwg/base-drafts] Encrypting token in Retr… Quoc-Viet Nguyen
- Re: [quicwg/base-drafts] Encrypting token in Retr… Martin Thomson
- Re: [quicwg/base-drafts] Encrypting token in Retr… ianswett
- Re: [quicwg/base-drafts] Encrypting token in Retr… Lars Eggert