IETF Logo Mail Archive

Re: [rtcweb] Require/Suggest AEAD GCM for SRTP

Philipp Hancke <fippo@goodadvice.pages.de> Wed, 10 July 2019 20:20 UTC

Return-Path: <fippo@goodadvice.pages.de>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A48AC12004A for <rtcweb@ietfa.amsl.com>; Wed, 10 Jul 2019 13:20:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sqON45WNyk3C for <rtcweb@ietfa.amsl.com>; Wed, 10 Jul 2019 13:20:35 -0700 (PDT)
Received: from lo.psyced.org (lost.in.psyced.org [188.40.42.221]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F12F512012A for <rtcweb@ietf.org>; Wed, 10 Jul 2019 13:20:34 -0700 (PDT)
Received: from [192.168.2.100] (pD9E2CB4B.dip0.t-ipconnect.de [217.226.203.75]) (authenticated bits=0) by lo.psyced.org (8.14.3/8.14.3/Debian-9.4) with ESMTP id x6AKKgFE005935 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for <rtcweb@ietf.org>; Wed, 10 Jul 2019 22:20:44 +0200
To: rtcweb@ietf.org
References: <CA+b7xQtG-PLo8i3ojOs2pmiVbuKU0aFGRMsdQss22rEnqRgybg@mail.gmail.com> <385683CD-3B17-4A11-8B39-F300FB861964@mozilla.com>
From: Philipp Hancke <fippo@goodadvice.pages.de>
Message-ID: <dacfb776-b7bf-c262-03a4-662175e35233@goodadvice.pages.de>
Date: Wed, 10 Jul 2019 22:20:24 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.7.2
MIME-Version: 1.0
In-Reply-To: <385683CD-3B17-4A11-8B39-F300FB861964@mozilla.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/rtcweb/7eJAv04cvOt-uW8AEa2qRruhM7U>
Subject: Re: [rtcweb] Require/Suggest AEAD GCM for SRTP
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Jul 2019 20:20:38 -0000

Am 10.07.19 um 20:25 schrieb Nils Ohlmeier:
<snip/>

> As Firefox supports GCM already I’m in favor of adding it to the spec.
> 
> AFAIK GCM support in Chrome is behind a flag because they ran into some interop issues with early GCM implementations.
> 
> But it is pretty late in the standardization process to make/request such changes. I’ll leave it to other to judge this.

I don't think we need any mandatory requirement, we have negotiation 
built in. AES-NI does not require GCM though?

I tested GCM with both Chrome and Firefox, found a small bug in the 
latter (which was quickly fixed by you) but other than that it worked 
like charm.

How chrome solves their "stuff bitrotting behind flags forever" is not 
an IETF problem thankfully.

v2.23.0 | Report a Bug | By Email