[TLS] PR #1372: HKDF label
Eric Rescorla <ekr@rtfm.com> Sun, 09 February 2025 20:20 UTC
Return-Path: <ekr@rtfm.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73DBCC169422 for <tls@ietfa.amsl.com>; Sun, 9 Feb 2025 12:20:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.907
X-Spam-Level:
X-Spam-Status: No, score=-1.907 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20230601.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E-6WetnrCHeU for <tls@ietfa.amsl.com>; Sun, 9 Feb 2025 12:20:07 -0800 (PST)
Received: from mail-yw1-x1136.google.com (mail-yw1-x1136.google.com [IPv6:2607:f8b0:4864:20::1136]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9650DC15198B for <tls@ietf.org>; Sun, 9 Feb 2025 12:20:07 -0800 (PST)
Received: by mail-yw1-x1136.google.com with SMTP id 00721157ae682-6f6ca9a3425so32239977b3.2 for <tls@ietf.org>; Sun, 09 Feb 2025 12:20:07 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20230601.gappssmtp.com; s=20230601; t=1739132406; x=1739737206; darn=ietf.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=CkJ2wqbHoZSc20ascxSmJZ3EKVUJOqpIySgKY+S7n5U=; b=fp/NSCI2S5M+Top9p5HiPzQqnTWWdvZHtMtwpY0K5y9y7ItS8WTn9wovnA2iFQNefz A3+R+Y/hGfG2FCC3AO6uRmH1J6ndizE7vonpf5DF0CQnx2MB4CzQToBPFozrCgJF8gzm w9/sLrVKr4h8Ido4NAON5PzviKqI4w1XQtATfjJMwt2QtOcNoSVpX0XqAjX5smqRJ6e5 m+bE3kTQlqMBwaeS7hZ6pSv6nSwlXrY4TdM4SLbfu2Q0wYOeI9U/SOXuhOQipxm/JOZn WvEDOCm9siZJOCOQlDcKas5vIWhFA5Srt8i09Y8g3oFHYNYqtVNwnPrwe8LhcWThwQ/o ZLJQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1739132406; x=1739737206; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=CkJ2wqbHoZSc20ascxSmJZ3EKVUJOqpIySgKY+S7n5U=; b=BnXpXOUxgp6+L0/soQAFBIFbtBu+cvoQEOAz2/ohvGPrrCFDHAKpGegilGrJDObH2Q StIj5Ibv8id6dueFNEoPZRC/tQughT5i3Hgy45x4LWzvikHdNaplK2jb2BQ73xl5Np/5 1wl9VsrJxqcotw7MJ6/A6JfE6zdgAQNzHJ3XR/+pXI4791JqPnbNrNfofAasu3srn+d6 iSvsrRTZSaZgWGR4WzapIOHA+W0zmrVgCpDMa9PkbgbhqmsU6oXq4L5yMjSTyAlkFJt3 8rhwlmrNXa3ApWD3meJPY+5nuOtUwZ/ezCLL4qjYNX2AdjB/8BDKQYOE/NQUeVad6oxk YfMQ==
X-Gm-Message-State: AOJu0YyaJBWfwgo7no1fnROhSWHyrLE0PVpoiBJeIY/vs6UQRQ1kvvw5 tkRkp09gBFh0oW4jKnpkEr5rBk7H3CLsKKt/OsnN/pAfF5yJzbs7eE0trTLJ3D1tnmTpJD8c1oW 4993F3lXCgBhnm1iouoE51E37xQBnOnph+tKPaZiuBAPy07MW/xlPZw==
X-Gm-Gg: ASbGncvCTmUwHj8QAG4XbLO5WWMhT7S13cWIZohD47Cxy/vXWlNLtyxFVy/IfVYnEBe TFHse9C+kpifl1NMy2PAm8RSXai8IVoUjSgiBSRvxTYPNffO+/H7bufxfc7Y83e515edimGJfZm E=
X-Google-Smtp-Source: AGHT+IFocudTCvy1ByVqFVyXZItXd9hu6vktd6k23Qc0fGyXQf/o1YHUN10BuSO4c/221W5xd3STG86h6ZVWCPWqpwk=
X-Received: by 2002:a05:690c:62c9:b0:6f9:b12b:8953 with SMTP id 00721157ae682-6f9b287e26dmr95371787b3.20.1739132406476; Sun, 09 Feb 2025 12:20:06 -0800 (PST)
MIME-Version: 1.0
From: Eric Rescorla <ekr@rtfm.com>
Date: Sun, 09 Feb 2025 12:19:30 -0800
X-Gm-Features: AWEUYZn5DNKVTugFrR4pP_SV5tYaOhLw4xG3DkUHvPKp4USjz82NxHAxexhz65A
Message-ID: <CABcZeBPR=uEt80SW38y2q4YGh-vG-6pGqazw9CnFXbKU9B=Png@mail.gmail.com>
To: "<tls@ietf.org>" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000004e6749062dbb5184"
Message-ID-Hash: 2YC7QI4DPRDVIROQG3KCBNL6URFGECN5
X-Message-ID-Hash: 2YC7QI4DPRDVIROQG3KCBNL6URFGECN5
X-MailFrom: ekr@rtfm.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] PR #1372: HKDF label
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/-feIixn1H1NqUtqH1FMJTVf2amA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>
Hi folks, David Benjamin noticed that there was some vagueness in the TLS and DTLS specs about the exact prefix to use with HKDF-Expand-Label. The following PR attempts to clarify what I think we agree on, which is that extensions should use the label associated with the version of TLS they are being used with: https://github.com/tlswg/tls13-spec/pull/1372 I think this is just a clarification, so if nobody objects by Friday I'll plan to merge it. -Ekr
- [TLS] PR #1372: HKDF label Eric Rescorla