IETF Logo Mail Archive

Re: [quicwg/base-drafts] CID's should be compared in constant time (#2477)

MikkelFJ <notifications@github.com> Sat, 16 February 2019 06:25 UTC

Return-Path: <noreply@github.com>
X-Original-To: quic-issues@ietfa.amsl.com
Delivered-To: quic-issues@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 866C7129619 for <quic-issues@ietfa.amsl.com>; Fri, 15 Feb 2019 22:25:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.383
X-Spam-Level:
X-Spam-Status: No, score=-6.383 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FSe0A-Vjh2ps for <quic-issues@ietfa.amsl.com>; Fri, 15 Feb 2019 22:25:41 -0800 (PST)
Received: from out-12.smtp.github.com (out-12.smtp.github.com [192.30.254.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC6441295D8 for <quic-issues@ietf.org>; Fri, 15 Feb 2019 22:25:41 -0800 (PST)
Date: Fri, 15 Feb 2019 22:25:40 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1550298341; bh=2gsZshb34T1DcXH7conpDlK/aHdDWxeoOmKh/Z1Dq88=; h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=HmxLiCPoX2nKNbAwyhA/VvAdJ0AR/FppiowzYJx8CS+Hf1PU02ZK+L8lJCyuUzuzI a5uaMzBNwyesIdZtegeGQOAa7yP4WrS1MWyaAVXV6Qek002/+WSozOcccbMDRF1RF4 fb6tZ7UaTsCUlaRomYyalwe0oRhH6CHjTZDRh1Ho=
From: MikkelFJ <notifications@github.com>
Reply-To: quicwg/base-drafts <reply+0166e4ab762fa1a1da36dd1d7e228a93df307a762cb7f1a692cf00000001187f6ee492a169ce187e182d@reply.github.com>
To: quicwg/base-drafts <base-drafts@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <quicwg/base-drafts/issues/2477/464299965@github.com>
In-Reply-To: <quicwg/base-drafts/issues/2477@github.com>
References: <quicwg/base-drafts/issues/2477@github.com>
Subject: Re: [quicwg/base-drafts] CID's should be compared in constant time (#2477)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="--==_mimepart_5c67ace4e2ace_34b33fe3b98d45b41010d7"; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Precedence: list
X-GitHub-Sender: mikkelfj
X-GitHub-Recipient: quic-issues
X-GitHub-Reason: subscribed
X-Auto-Response-Suppress: All
X-GitHub-Recipient-Address: quic-issues@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic-issues/tTifB8tx-oyPlINARzFMHKzTGss>
X-BeenThere: quic-issues@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Notification list for GitHub issues related to the QUIC WG <quic-issues.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic-issues/>
List-Post: <mailto:quic-issues@ietf.org>
List-Help: <mailto:quic-issues-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic-issues>, <mailto:quic-issues-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Feb 2019 06:25:44 -0000

I’m not sure it is worth reqiiring. Then we should also say constant time hash tables should br salted.

Note that popular Splay trees are vulnerable to manipulation.

Disabling Reset could be a recommendation if under attack.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2477#issuecomment-464299965

v2.16.0 | Report a Bug | By Email