RE: Packet number encryption

Mikkel Fahnøe Jørgensen <mikkelfj@gmail.com> Fri, 09 February 2018 07:43 UTC

Return-Path: <mikkelfj@gmail.com>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4443C12741D for <quic@ietfa.amsl.com>; Thu, 8 Feb 2018 23:43:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.698
X-Spam-Level:
X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Jk7e4x5Jd0I for <quic@ietfa.amsl.com>; Thu, 8 Feb 2018 23:43:48 -0800 (PST)
Received: from mail-io0-x231.google.com (mail-io0-x231.google.com [IPv6:2607:f8b0:4001:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6EAB512420B for <quic@ietf.org>; Thu, 8 Feb 2018 23:43:48 -0800 (PST)
Received: by mail-io0-x231.google.com with SMTP id f89so8747891ioj.4 for <quic@ietf.org>; Thu, 08 Feb 2018 23:43:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:in-reply-to:references:mime-version:date:message-id:subject:to; bh=oaubPKRBZduKc6iGBRZjSP+L192RwZaNZIz1zBSSc20=; b=WsmvwKZ5+NStTXYUB+fcP0Eaf8BTIWgyvxlOn3GRZ4T+cOv/IA7mTbl5EGAegMn9Uz PRao6lRFVjSJEUQPdz5qBlQh8WheTtmH72h9WQEs0qICssoEhkGI68oT7QrnIwfEqMco Ey4zLgDsynixX4bBafWaMyCrcTEfE1ks1SIZ0Vu4Sg1mKbapXAs/+7nN5/WbvZNMmkGP AEp6L9eRgIoYC/AgFFu3/FUSwVH8/1utOtt98ZQkOt8pCV0A3/QRL9mdFh3RcqHQxyPU QWzO+w1MAsmzruz6M51xB2SxUvHtG0NZA8/hchWTMmtbcsFtWrM5Y+8ftPDxfI6+7Ohn jFCw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:in-reply-to:references:mime-version:date :message-id:subject:to; bh=oaubPKRBZduKc6iGBRZjSP+L192RwZaNZIz1zBSSc20=; b=SySIXInCHfsL6gJUP83iCY8c/LdQobHHvGNwDafM+GXtxL8I5iC87mCCfxVahuhoDm flCp3KjMlA/z4CAHTSWuZhoRXbzmWkdUo6Dz/ersqIlLdYgsR3yIEKRoquyjjl8J/H+G UX0+gES7cI5fV8fd4d0olkushO8vaJMZLZsGAjJNo9PQBQKjAt93/tvG0FyfO5h+ecEt 4Q8UUnsTAzdQpagldN4F1RozZHMIr4L6L445vl/NAkNgHm3XKwtFloErMgAeRTH2Ao6L 0NWqnL974pHb3phrdGqGXDyNf6bG+/xZm7Y40LaXcaDCWHLaelWDG2eP2A1mnZsUlSZk zHOA==
X-Gm-Message-State: APf1xPA6RPlrzhzzHGbIz+K1V8k1gwHqVCfflkTtZowIoAWC/pmYosU2 xxa5RPWlDBaWcpggl82F0x+OoIc2jnbqNQeSusg=
X-Google-Smtp-Source: AH8x227np8pa+csqJ64H9kEWjadvGby6l3CWknrxc1CnN6Cat2R7ocGw4TaQw/N4tkBWF29+CR3AVBgyC5lBcQie93k=
X-Received: by 10.107.34.199 with SMTP id i190mr2300048ioi.297.1518162227883; Thu, 08 Feb 2018 23:43:47 -0800 (PST)
Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Fri, 9 Feb 2018 02:43:47 -0500
From: Mikkel Fahnøe Jørgensen <mikkelfj@gmail.com>
In-Reply-To: <CY4PR21MB0133F887774049426C51145DB6F20@CY4PR21MB0133.namprd21.prod.outlook.com>
References: <CABkgnnVyo3MmWtVULiV=FJTnR528qfY8-OmKGWAs0bCvri-a_g@mail.gmail.com> <CAGD1bZauKbucs_5n7RQbK8H2HiyfiqpGVEcKreGA6umhMBSFgg@mail.gmail.com> <CABcZeBPNrc-9vANSH02r++p53s6gN4pVB8DMd80nUxOhKTp3dA@mail.gmail.com> <CAKcm_gMvHSBhpUvsQCCkV2_o+d_wchF3R3L6H8mp6nKNaaRmSw@mail.gmail.com> <CY4PR21MB0133CCAA6807469BA983D00BB6FC0@CY4PR21MB0133.namprd21.prod.outlook.com> <CABkgnnW4xr_YzpsvCxaJJgcQdBTuX=Yv735_sdd4VoMfji8mbA@mail.gmail.com> <CY4PR21MB0133C759D4A08A4988B641B2B6FC0@CY4PR21MB0133.namprd21.prod.outlook.com> <bdf88936-8edc-d56e-ee59-c9d597058edd@huitema.net> <CY4PR21MB01337C8A700E58B49D90B712B6FC0@CY4PR21MB0133.namprd21.prod.outlook.com> <119b3276-5799-1cc3-8982-7479171bbf27@huitema.net> <CAOYVs2pi8-NVuS+crNMfjsP-n5upK3=5tPeQ8OSGpOvL6RTrjA@mail.gmail.com> <CY4PR21MB0133A1117B2733BBCF049C5FB6FC0@CY4PR21MB0133.namprd21.prod.outlook.com> <MWHPR08MB24327A7BB5AE1AE70FE5CDB1DAF30@MWHPR08MB2432.namprd08.prod.outlook.com> <533a0a2e-3a87-b55f-84ce-c52bc03cd81c@huitema.net> <MWHPR21MB0144C68102972A668611E1FCB6F20@MWHPR21MB0144.namprd21.prod.outlook.com> <CY4PR21MB01332141C3563ABBA240C566B6F20@CY4PR21MB0133.namprd21.prod.outlook.com> <MWHPR08MB2432EAF7D176BBFCA28DF3FFDAF20@MWHPR08MB2432.namprd08.prod.outlook.com> <CAN1APdeUzoxMaA-U6Ls4q_hw1b4BXZzwOCvo2dGm=s8YTokWAQ@mail.gmail.com> <CY4PR21MB0133F887774049426C51145DB6F20@CY4PR21MB0133.namprd21.prod.outlook.com>
X-Mailer: Airmail (420)
MIME-Version: 1.0
Date: Fri, 09 Feb 2018 02:43:47 -0500
Message-ID: <CAN1APdcbCN4xoDN+tJsaG0xjDwoka1pYQrSOmo6oqP_Zk=mxHA@mail.gmail.com>
Subject: RE: Packet number encryption
To: Praveen Balasubramanian <pravb@microsoft.com>, Mike Bishop <mbishop@evequefou.be>, "quic@ietf.org" <quic@ietf.org>, huitema <huitema@huitema.net>
Content-Type: multipart/alternative; boundary="001a1140d9444e0bc40564c2b077"
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/VK4Q9GLpMHFsbkTzZNp6Unm0F-w>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Feb 2018 07:43:50 -0000

Why does the peer’s PRNG matter? The peer uses a different PN space. The
jumps are completely determined by the sender as needed and its just to
prevent ossification of assuming that nonce always increments by 1.

Because linkability goes both ways.