Re: [TLS] DTLS 1.3 AEAD additional data

Thomas Fossati <Thomas.Fossati@arm.com> Mon, 27 April 2020 11:32 UTC

Return-Path: <Thomas.Fossati@arm.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFCAA3A093A for <tls@ietfa.amsl.com>; Mon, 27 Apr 2020 04:32:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=nbqLNxV/; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=nbqLNxV/
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F7blKslqSLQL for <tls@ietfa.amsl.com>; Mon, 27 Apr 2020 04:32:45 -0700 (PDT)
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40056.outbound.protection.outlook.com [40.107.4.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 608003A09D8 for <tls@ietf.org>; Mon, 27 Apr 2020 04:32:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HSex+m6xbulu5lQiu3OZ/XOolL1Wkx5WcoZVmDuUID0=; b=nbqLNxV/ZhFOW2vCykr8ohN5xqfPMr6fqD0aMUxFxXELE6ObM4IEjamLf7AsjN0yurfspEjfmVEaN7o7lrOI5706iy3nrA4nDMvwHMBGrdYykHu6GfxnzUEZbHalHP23XEV7+CEtX5bXNISVh7nrGAo8nN6LwilWhNFqxE85tKE=
Received: from AM6P194CA0088.EURP194.PROD.OUTLOOK.COM (2603:10a6:209:8f::29) by HE1PR0801MB1737.eurprd08.prod.outlook.com (2603:10a6:3:81::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2937.22; Mon, 27 Apr 2020 11:32:33 +0000
Received: from AM5EUR03FT062.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:8f:cafe::29) by AM6P194CA0088.outlook.office365.com (2603:10a6:209:8f::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2937.13 via Frontend Transport; Mon, 27 Apr 2020 11:32:33 +0000
Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT062.mail.protection.outlook.com (10.152.17.120) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2937.19 via Frontend Transport; Mon, 27 Apr 2020 11:32:33 +0000
Received: ("Tessian outbound fb9de21a7e90:v54"); Mon, 27 Apr 2020 11:32:32 +0000
X-CheckRecipientChecked: true
X-CR-MTA-CID: 2093ca19852ad4eb
X-CR-MTA-TID: 64aa7808
Received: from b2d25b1d334a.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 09F94A25-148F-44ED-87AD-84513AB4666C.1; Mon, 27 Apr 2020 11:32:27 +0000
Received: from EUR05-DB8-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id b2d25b1d334a.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 27 Apr 2020 11:32:27 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=V7UCHUmVIAqmXBjaq4ApwxDWlX2+qjXEd3dEpDw/DLiN/SJC+C4W7VXr/+cnrXETj6HOzpazeisPAEgi6B/4/qxE5ehUATVFiwij25z2Ae5GaizeGowve4dBOZQP+Tr3xIi7LrsCZybI8+8I4Ndw/wBB54NHPH94gQUKzFomXRzOjnasqwrwVJzqjvdPj+I01ajtT3ooMUJ8OY7ZesionVymWXfzWDA48Z1reb3ernwG/fVNX1MgbxZKCfabzJNhCD0HapVcsXaB71JEu0icLLUM9/Rq+vzOsUZr2ISFPGKyuumcJA824o07tqfp4ZLovgRvhKkPMEk13nkmaukIBw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HSex+m6xbulu5lQiu3OZ/XOolL1Wkx5WcoZVmDuUID0=; b=lAyadFrhkLm2n4zRNH4awJtuy2OBRvui8GDt703zmnNJqeWu9m9q22RkyNjFh4fFnQd970Hi4Sfd6ttAL4teTVRI5aQv0S//3SvEnkAq9qkkkHQYL7nB6sKfr/5yJ8JxWeoNtZMuZBoSs4Hem/Ntw2al0vcoNQXeSUT2tAKKR+nScI7G+R4Dt9KMsY+3zdjevuZCCEgQtAvguxAkuSx9+3bgoQLf1TiZD4gkPZq4ntJw9V9s0EGtOB6Xi+YPJb6/WLURG6Eyixb8aACdEmoFYYtZrN9CvExuSIbUSS3w1+tgiMfgj+NYrZ2LErRyDqUyPLCgg+Z4p+xiEzaDpaEGAg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HSex+m6xbulu5lQiu3OZ/XOolL1Wkx5WcoZVmDuUID0=; b=nbqLNxV/ZhFOW2vCykr8ohN5xqfPMr6fqD0aMUxFxXELE6ObM4IEjamLf7AsjN0yurfspEjfmVEaN7o7lrOI5706iy3nrA4nDMvwHMBGrdYykHu6GfxnzUEZbHalHP23XEV7+CEtX5bXNISVh7nrGAo8nN6LwilWhNFqxE85tKE=
Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB4818.eurprd08.prod.outlook.com (2603:10a6:20b:cb::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2937.13; Mon, 27 Apr 2020 11:32:26 +0000
Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::5e0:a53a:d4d6:2e8d]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::5e0:a53a:d4d6:2e8d%6]) with mapi id 15.20.2937.023; Mon, 27 Apr 2020 11:32:26 +0000
From: Thomas Fossati <Thomas.Fossati@arm.com>
To: Christopher Wood <caw@heapingbits.net>, "TLS@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] DTLS 1.3 AEAD additional data
Thread-Index: AQHWF+iN1gKILcDltkmRr5OfopCaAaiD3VMAgAB8FQCAAE7VmIAAawyAgAAHdS6AAB8+AIAACQCRgACPx4CAABkpAIAABDCAgAAC0ICAAEL8/IAAHxqAgADkdgCAAcgWAIAAsyqAgAAI7ICAAX/zAIAARkGAgAFsJoA=
Date: Mon, 27 Apr 2020 11:32:26 +0000
Message-ID: <58E5E6E8-2ED2-4C0C-B600-19CC1F347CDE@arm.com>
References: <AM6PR08MB3318911C71C0DDB90480694A9BD50@AM6PR08MB3318.eurprd08.prod.outlook.com> <CABcZeBMs+o4BU5VhqJKmQvnkEe9RkQXRv7Ej6pVD1-e1vdMoyA@mail.gmail.com> <CABcZeBM9Ri=Rz5kbWn08Vk-Y14MVSALwB1Bd9QV=HfWoq3XqSA@mail.gmail.com> <AM6PR08MB33184161239B6383EA7D776C9BD20@AM6PR08MB3318.eurprd08.prod.outlook.com> <CABcZeBM4wVkH_pdTZMakyV9Y=tk8PNDknHTFhjwX-sw3GOOaZw@mail.gmail.com> <AM6PR08MB3318D6A11587449627F6EA679BD20@AM6PR08MB3318.eurprd08.prod.outlook.com> <CABcZeBNcODKehe217nr2jSedy6N6Gun+QYcksFp2Oqv6gLrzzw@mail.gmail.com> <AM6PR08MB3318717D21E69A2373AC1ACE9BD20@AM6PR08MB3318.eurprd08.prod.outlook.com> <8371994b-799c-4196-a3cd-4b0f71e24b5e@www.fastmail.com> <CABcZeBNbehkW8FO29DS00m19+b=dH8V8esscu8OU-mmaJf6etQ@mail.gmail.com> <5b74a840-a1cd-4b5b-a0c5-65320b851325@www.fastmail.com> <CABcZeBOvm-nx6hKR79ChN=A4RFzWgt=-BzjORc=N7_A79tO6Ng@mail.gmail.com> <AM6PR08MB3318D5881B8D2BEFF938F2B79BD30@AM6PR08MB3318.eurprd08.prod.outlook.com> <1e6201d6-a078-4137-898d-d1554c22aa10@www.fastmail.com> <CABcZeBPs7gOenD8Fs2uFXxY=hHyvwiKAvqkDPNzSZDTuReuBJg@mail.gmail.com> <fd9e2ddd-a79d-4f52-be17-92ba688d618f@www.fastmail.com> <E1F21884-A4FE-4057-B670-387A8B4C3100@arm.com> <1CBF6B88-8830-44A4-8F9B-143F884FF6ED@arm.com> <009D63D5-6353-4429-A62C-EB7617E4B9EC@arm.com> <18d9978c-1dd1-4365-827c-94c121099949@www.fastmail.com>
In-Reply-To: <18d9978c-1dd1-4365-827c-94c121099949@www.fastmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.36.20041300
Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com;
x-originating-ip: [82.11.185.80]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: a88e21ad-5663-4731-4dd9-08d7ea9ead77
x-ms-traffictypediagnostic: AM6PR08MB4818:|AM6PR08MB4818:|HE1PR0801MB1737:
x-ms-exchange-transport-forked: True
X-Microsoft-Antispam-PRVS: <HE1PR0801MB1737FEFBCA0B5C4C828F14279CAF0@HE1PR0801MB1737.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
x-ms-oob-tlc-oobclassifiers: OLM:6790;OLM:10000;
x-forefront-prvs: 0386B406AA
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(39860400002)(366004)(376002)(136003)(346002)(4326008)(81156014)(6486002)(8936002)(8676002)(6512007)(86362001)(33656002)(36756003)(316002)(478600001)(71200400001)(6506007)(26005)(2616005)(66556008)(76116006)(91956017)(66476007)(66446008)(5660300002)(64756008)(4744005)(53546011)(2906002)(110136005)(186003)(66946007); DIR:OUT; SFP:1101;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: L4icuP4ejnFeDUJKHSVgfoNCAf+hKr2VJCqDDo4flFp29U7BOA81Ndi7X63URtCVIpRmuYBqF6mZQsZ6u3uO2vt5m2fllc+ubW1o40Xc5jCm9oN5VXUwaQBsBwh1PHXEOfJqFghw4sikS+qCeT1UStVgwHLK4TSPCf/qDH4y/qSm7LBvjlafiKBiBCx5+5+AFyV/lI95ZBs9LTqxfOqO4BujKMvGrReF5VV+Uxc6d8L7ezmTnfXp54Cf5fmreO4HIrkMAmeHiStV2TCE/bNJLQJ2Mzz3edaHHJJNCPAOsuW7rzSlOyVT4+8cPZpx4cl1uBnCdVeQjmIzV83O1yJXRyzNwDlvxWfxAJRXBeStVUbLQd+ySC2s9Rfmxqn1B+YqRLxXkTYOZPP2Lpg/UOTlDEy9zfcT4K+XvB+bykXPRDvmXWz1jHeKhl5I0cxUMxBL
x-ms-exchange-antispam-messagedata: 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
Content-Type: text/plain; charset="utf-8"
Content-ID: <0B456F6C78B97D4A8B187C25F6D0A2B7@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4818
Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT062.eop-EUR03.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(39860400002)(376002)(136003)(346002)(46966005)(5660300002)(26005)(36756003)(6506007)(53546011)(81166007)(36906005)(2906002)(2616005)(356005)(4744005)(316002)(110136005)(336012)(33656002)(82310400002)(4326008)(6486002)(186003)(81156014)(8676002)(8936002)(47076004)(82740400003)(86362001)(478600001)(70206006)(70586007)(6512007); DIR:OUT; SFP:1101;
X-MS-Office365-Filtering-Correlation-Id-Prvs: 64d1bbd2-2b5e-47b8-c82c-08d7ea9ea95d
X-Forefront-PRVS: 0386B406AA
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Apr 2020 11:32:33.1624 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a88e21ad-5663-4731-4dd9-08d7ea9ead77
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0801MB1737
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/-kNG4sCV4crGpGKYCdMHeeKb6Xk>
Subject: Re: [TLS] DTLS 1.3 AEAD additional data
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Apr 2020 11:32:47 -0000

On 26/04/2020, 15:49, "Christopher Wood" <caw@heapingbits.net> wrote:
> To clarify (as the request was about prohibiting implicit CIDs and not
> more generally about what's included in the AAD), you'd prefer we
> allow implicit CIDs, correct?

Hi Chris, correct.


IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.