Re: [TLS] questions regarding draft-ietf-tls-rfc2246-bis-13.txt

Eric Rescorla wrote:
> Sami Lehtinen <sjl@ssh.com> writes:
>>In section 6.2.3.2. CBC block cipher:
>>
>>    The encrypted data length (TLSCiphertext.length) is one more than the
>>    sum of TLSCompressed.length, CipherSpec.hash_size, and
>>    padding_length.
>>
>>Should this be:
>>
>>    The encrypted data length (TLSCiphertext.length) is one more than the
>>    sum of CipherSpec.block_length, TLSCompressed.length,
>>           ^^^^^^^^^^^^^^^^^^^^^^^^^
>>    CipherSpec.hash_size, and padding_length.
>>
>>to accommondate for the explicit IV?
> 
> 
> I've reviewed this and I believe this is incorrect. You can form the
> explicit IV by encrypting a non-explicit IV, but it's not properly
> part of the ciphertext.

So, in your opinion the explicit IV length is _not_ added to the 
TLSCiphertext.length?

Record layer implementation thus needs to take into account that we are 
running TLS1.1, have a block cipher (=> explicit IVs) and add 
CipherSpec.block_length (size of IV) to received record layer length 
when reading the record?

 From draft-ietf-tls-rfc2246-bis-13.txt:

        struct {
            ContentType type;
            ProtocolVersion version;
            uint16 length;
            select (CipherSpec.cipher_type) {
                case stream: GenericStreamCipher;
                case block: GenericBlockCipher;
            } fragment;
        } TLSCiphertext;

    [...]

    length
        The length (in bytes) of the following TLSCiphertext.fragment.
        The length may not exceed 2^14 + 2048.

and fragment is:

        block-ciphered struct {
            opaque IV[CipherSpec.block_length];
            opaque content[TLSCompressed.length];
            opaque MAC[CipherSpec.hash_size];
            uint8 padding[GenericBlockCipher.padding_length];
            uint8 padding_length;
        } GenericBlockCipher;

To me, `length' specification above reads as "length = 
sizeof(GenericBlockCipher)", which would include the size of the IV.

-- 
sjl@ssh.com

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls