Re: How does a server identify a new connection?

[Dmitri Tikhonov <[e-mail]>]

On Wed, Dec 05, 2018 at 12:28:25PM -0800, Christian Huitema wrote:
> > On Tue, Dec 04, 2018 at 08:54:41AM -0500, Dmitri Tikhonov wrote:
> >>     Is the server to try each of its connection candidates in
> >>     turn to see which one successfully decrypts the packet?
> 
> I understand how to create a separate connection context on the server
> for each different incoming server hello, and I am not concerned too
> much by DoS attacks. Attackers can create fake client hellos at will;
> whether they reuse the same ICID/SCID as current client does not change
> the amount of resource consumed on the server.

That's true -- I was wrong.  I thought that the server would have to
perform trial decryption for the client's second packet, making the
CPU cost quadratic.  I forgot that the server changes its SCID and
thus the second packet could only match a single context.

  - Dmitri.