IETF Logo Mail Archive

Re: KEYS_READY

"Martin Thomson" <mt@lowentropy.net> Thu, 14 February 2019 23:46 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E7A3130DC0 for <quic@ietfa.amsl.com>; Thu, 14 Feb 2019 15:46:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level:
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=ITmcyUom; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=5juBbwZn
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JpKPkfq14IbN for <quic@ietfa.amsl.com>; Thu, 14 Feb 2019 15:45:58 -0800 (PST)
Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 579B512F295 for <quic@ietf.org>; Thu, 14 Feb 2019 15:45:58 -0800 (PST)
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id 4008122A67; Thu, 14 Feb 2019 18:45:57 -0500 (EST)
Received: from imap2 ([10.202.2.52]) by compute1.internal (MEProxy); Thu, 14 Feb 2019 18:45:57 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=message-id:in-reply-to:references:date:from:to:cc:subject :content-type; s=fm1; bh=c2YbeOXeMidOjK7elTSuVGnk9tyTM7YeOLPijBy d778=; b=ITmcyUomLmBt+rTbOsi8mPKCefmGSwcHQZoZJzlic6ngKiLt87wr3L/ YpZU2RZXEMw5hW85u3CfEwCa68smk0R0khsaC6CsMn9s6iZWJdNIRtX5NHeDXQUf L6XplnNfBMeShmxMGSYTUe31VnrCgIAoQlNfhweHH3YivLbgzXsrdroY1TxZ9IXF lv8vSRfeEpCv4cyj7V2AZQK91FKB/IE/+10buhFMCFapB7wJsy7lsedT0h0NPFBr 3J6DcuZd+gpmeAuV9ohXK0t3/nSVNBLzHx23HhzOJB9Gikja+0EgzsTuFiwH0RqQ kQ0YbrVFN0n7HEbJAhp7z5CHKjDUWww==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:references:subject:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=c2YbeOXeMidOjK7el TSuVGnk9tyTM7YeOLPijByd778=; b=5juBbwZn6JINCj8qPbEHhpVZBZwP13m1E 71UIwqT+8nB1caTOx6AGIb+XE6E5cHKqF9uVL+8NvFDBX65ZxxVsdzRLr8cQ6FZY tv6zLnRQi5fdn1eYTKlRq1QM8EjksOImxBMxQ7ZMxGaWfVTmgpXmhdmUnYawXNLQ 3X1h2weeHpXlUkDbZkYU5rM5NzCza6VipYvnHFTy0u7Sv7RUx1HjXwi98DvFxtYh YE9k9zVsoluH4IMw1S595M59ji5sExEb1WjJ312p/F2simlBsFJ6vdPoWp/pC9cM Lg++PCXuEH0WDg1PcyrOHznoM2bReqb/WfHuoDO4Zwlh02J2J8PUQ==
X-ME-Sender: <xms:tP1lXCOaIFHuvMjjQ3xTKaJ1XIKehLgG6TsePqgCwUY4BD5d77C1qw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedtledruddtiedgudduucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfquhhtnecuuegrihhlohhuthemucef tddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpefofgfkjghfff fhvffutgesthdtredtreertdenucfhrhhomhepfdforghrthhinhcuvfhhohhmshhonhdf uceomhhtsehlohifvghnthhrohhphidrnhgvtheqnecurfgrrhgrmhepmhgrihhlfhhroh hmpehmtheslhhofigvnhhtrhhophihrdhnvghtnecuvehluhhsthgvrhfuihiivgeptd
X-ME-Proxy: <xmx:tP1lXMXSaQLRkJcuREJ6Cp56IwtP-Vxoi3A0RlKPx8gz8cDTyVs_yg> <xmx:tP1lXMtttd2CxWUxR9FTFWhR9Mc7cWE48wq8Xpbj18JKa259PHfCzw> <xmx:tP1lXOfQmcl9Za0poB40chcfT7fDQ5Ru6MiQ--smnnBSgbOBZ85LbA> <xmx:tf1lXPnijEqbveM-FD7imhbABd36DobWSCPVynE2otm4DvNk-4s97Q>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 1105D7C1EB; Thu, 14 Feb 2019 18:45:55 -0500 (EST)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.1.5-832-gba113d7-fmstable-20190201v1
X-Me-Personality: 92534000
Message-Id: <045bbf5b-04e4-4f9f-886b-f7ff9254bdab@www.fastmail.com>
In-Reply-To: <CAPDSy+4idHMDpNya42K5fxRQ6tFUoOXz9bi8K2eU8u-xRiOB3g@mail.gmail.com>
References: <1550022355.557617.1656828112.4DD1CEE6@webmail.messagingengine.com> <CANatvzy_juza_meGR_-KuBV9FA=F754mv54aawxMb8hYWxb1gA@mail.gmail.com> <CAN1APdcVYKWuapZ3XHxXa_nVACwkRD-xeF3ub-5ROttE7QVrmQ@mail.gmail.com> <CAOYVs2ooxAuwu_zr2XZ-y9UqUP5kTbjoFrckAOi40bF9vODGOg@mail.gmail.com> <CAKcm_gNk=jKrnXM4Ht4yF0RX25wtVifjxz0c1gay0uie7PMw6A@mail.gmail.com> <CANatvzxBYzEaDZ1Ftt=o1zT5zVcVTd1EwtGiJOC-mkrNUWzVAQ@mail.gmail.com> <CAN1APdfzepc9DE98UsWw=hB4dM38qKLxdAjpsYuddDBatcscDA@mail.gmail.com> <739AFC55-DD02-47AA-A29E-B9C34ED7D6F9@gmail.com> <CAN1APddWLdmRo+ZZDnmvrBEFQk4TTcS3UK_9AU4KqAeSkiBvJQ@mail.gmail.com> <375A63C5-7120-4688-8873-EEA90693332E@huitema.net> <CANatvzxoOFzpkcH_4VpQscpZq8ak0QL0D6REvyJVjE+ga97SVQ@mail.gmail.com> <1550111606.3717440.1657643080.033E200B@webmail.messagingengine.com> <ae018a6d-4c9a-acc7-4213-21d1670f9dad@huitema.net> <1550117510.928793.1657684264.41D049FA@webmail.messagingengine.com> <CACpbDcfbEcg70RwpFrCQ2X6WA0Dd7ygd=Q0w7iwKc-ZgZQbZ0w@mail.gmail.com> <1550120733.954579.1657700168.72A8F92A@webmail.messagingengine.com> <CAOYVs2qQJgGNhXJNjhE8L=wxBgq+3qs144WYXs0JoWNBrK_a6A@mail.gmail.com> <DB6PR10MB1766128EAD7248F02C1EAFA5AC670@DB6PR10MB1766.EURPRD10.PROD.OUTLOOK.COM> <DB6PR10MB176684E61A66BF01C66008F6AC670@DB6PR10MB1766.EURPRD10.PROD.OUTLOOK.COM> <CAPDSy+5MSST-Nkoi+oaRzSLDJCYqhUmKw1nP_p4fOyq7cfK17w@mail.gmail.com> <CAJ_4DfRKrYOyozbp4GmPNODnZ_sKTECXbMa5Vsuxa4zmubERHQ@mail.gmail.com> <MWHPR22MB0991FCD3ADA97790B238E491DA670@MWHPR22MB0991.namprd22.prod.outlook.com> <CAPDSy+4=YYyTe5=85X09e1kAB7TrmmNXK-2wnLZubfS1ekWRJA@mail.gmail.com> <f2e59f1c-b7d5-49ce-affc-7d16684a048a@www.fastmail.com> <CAPDSy+4sKR99Fwqt+08JevAmC7E4LUSohUrQgVc+5BA56CLEkQ@mail.gmail.com> <b4364dee-a429-45c5-8b56-b82269f1ab2e@www.fastmail.com> <CAPDSy+4idHMDpNya42K5fxRQ6tFUoOXz9bi8K2eU8u-xRiOB3g@mail.gmail.com>
Date: Thu, 14 Feb 2019 18:45:56 -0500
From: Martin Thomson <mt@lowentropy.net>
To: David Schinazi <dschinazi.ietf@gmail.com>
Cc: Mike Bishop <mbishop@evequefou.be>, Ryan Hamilton <rch=40google.com@dmarc.ietf.org>, Marten Seemann <martenseemann@gmail.com>, Jana Iyengar <jri.ietf@gmail.com>, Mikkel Fahnøe Jørgensen <mikkelfj@gmail.com>, QUIC WG <quic@ietf.org>
Subject: Re: KEYS_READY
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/pu17aKyYPkHbMptDx1_n9Hmutfc>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Feb 2019 23:46:00 -0000

On Fri, Feb 15, 2019, at 09:47, David Schinazi wrote:
> This means that the server sends KEYS_ACTIVE(1-RTT) not when the 1-RTT 
> keys are active,
> but instead when the handshake finishes, which is when the server has 
> received the client finished.
> Those are two different moments in time.

Yes, because the keys aren't active when the server starts sending 1-RTT packets.  They are only active when the server starts reading 1-RTT.  The server can't activate its 1-RTT reading keys until the handshake is complete.

That's why I chose to name this KEYS_ACTIVE(this), not RETIRE_KEYS(prev), but I don't really mind what it is called.

 > My proposal is to have the client decide when it is done with the 
> handshake keys by having the client
> delay sending RETIRE_KEYS(Handshake) instead of the server delaying 
> sending KEYS_ACTIVE(1-RTT).

This requires that the client send more Handshake packets.  And it adds a lot of delay because the client has to wait until all its packets are acknowledged.  We previously agreed that any such signal from the server is more direct and effective.

v2.23.0 | Report a Bug | By Email