IETF Logo Mail Archive

Re: [TLS] Choice of Additional Data Computation

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Mon, 27 April 2020 07:07 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 313D33A0F04 for <tls@ietfa.amsl.com>; Mon, 27 Apr 2020 00:07:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.719
X-Spam-Level:
X-Spam-Status: No, score=-2.719 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.82, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=l4QM89b0; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=l4QM89b0
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FaLlmkPj_3dV for <tls@ietfa.amsl.com>; Mon, 27 Apr 2020 00:07:09 -0700 (PDT)
Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2077.outbound.protection.outlook.com [40.107.21.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DFC783A0EF2 for <tls@ietf.org>; Mon, 27 Apr 2020 00:07:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=50zLd3j5K/dgLodKpGf3my/WqmR8x7xmOw4rVIIwQlc=; b=l4QM89b0QBg3qRQJGKP1SdYABDrXyVGUpDyo9LUvedI+rxT5rkPA7tHoGNke4p5Vb/omI59BrTJcyUqXO0BFilJ/GfH+UurG/mKFLUuO052y7K2/JwCEbIUfX75tze8H5vJu6jAd/euSFe9XtgAYjMHND4qZ3o3f2G6yhQizrjo=
Received: from DB6PR0501CA0003.eurprd05.prod.outlook.com (2603:10a6:4:8f::13) by DBBPR08MB4918.eurprd08.prod.outlook.com (2603:10a6:10:dc::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2937.13; Mon, 27 Apr 2020 07:07:05 +0000
Received: from DB5EUR03FT059.eop-EUR03.prod.protection.outlook.com (2603:10a6:4:8f:cafe::ad) by DB6PR0501CA0003.outlook.office365.com (2603:10a6:4:8f::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2937.13 via Frontend Transport; Mon, 27 Apr 2020 07:07:05 +0000
Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT059.mail.protection.outlook.com (10.152.21.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2937.19 via Frontend Transport; Mon, 27 Apr 2020 07:07:05 +0000
Received: ("Tessian outbound b3a67fbfbb1f:v54"); Mon, 27 Apr 2020 07:07:05 +0000
X-CR-MTA-TID: 64aa7808
Received: from fa2da2274922.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id AA0BD59D-7CD0-4D14-AC0E-8A6EDE9A4397.1; Mon, 27 Apr 2020 07:07:00 +0000
Received: from EUR02-AM5-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id fa2da2274922.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 27 Apr 2020 07:07:00 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QCJU1vfzx0Fsk5uOzT5nCN/bArMP2VbMZrMPPIht1RJVGPuzUZr7eq7wn4+bJ73KIpp2mpmor3UgKoAMK7HNjWGC+9r/iOZBpY0UTDkWD2dlWXH9SU5jofR8Nk7R1b7fF70bSpYC9evoYB1sS5aQbjpD0hSfSH1UjIkfmG9+L+qd41PPFczJUvRhAXhTdSWB4VS/6lbHJGj3GNc9Jp0t+Fjjw2rnnUp8m+3wsGpzgQ485QZiYrPewqjaoE3v80VVJjdWbvWI+7JlApEHPjcrVmpgMk5GwSN3VysVgFs3VzQFZtPiz3KhDdJyp1iJ8AvtsjNADzD0WbEq+palzj9oFg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=50zLd3j5K/dgLodKpGf3my/WqmR8x7xmOw4rVIIwQlc=; b=Fgr7FkYJ8sIBJif3IEC4aL9LWiEtSMLzb0GUvE9848YtiilSby31o3OmaJO7hW3i4qesRWaZZ4wljAvRB5IbyLriS3Wg5CpnYWcBwuzQpli8Uq8A0fzH8FnGTUNqPYNXikMVia5RI53joysX3Kv/nhdw8YKmG5r9QlUh3Nz7uJPgB0i6oVdVnqywGi9MubOyBL0VznkuLSFHaOa8YuG3ghCqMHsSR+NwGSkYm+3pC4wEPnQcYZcAcsQXrU/VSJKXfw/PZz3B5UpqF1vqj0/Awz7PdOpwpnPym5OtjdFm1uh1zqjtupUryy6e/73j90ZrIjsuBbtjA+/TepvJRhjgbA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=50zLd3j5K/dgLodKpGf3my/WqmR8x7xmOw4rVIIwQlc=; b=l4QM89b0QBg3qRQJGKP1SdYABDrXyVGUpDyo9LUvedI+rxT5rkPA7tHoGNke4p5Vb/omI59BrTJcyUqXO0BFilJ/GfH+UurG/mKFLUuO052y7K2/JwCEbIUfX75tze8H5vJu6jAd/euSFe9XtgAYjMHND4qZ3o3f2G6yhQizrjo=
Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB5124.eurprd08.prod.outlook.com (2603:10a6:208:161::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2937.13; Mon, 27 Apr 2020 07:06:59 +0000
Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::f501:c93e:1c20:8bee]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::f501:c93e:1c20:8bee%6]) with mapi id 15.20.2937.023; Mon, 27 Apr 2020 07:06:59 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: Eric Rescorla <ekr@rtfm.com>, Hanno Becker <Hanno.Becker@arm.com>
CC: chris - <chrispatton@gmail.com>, "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [TLS] Choice of Additional Data Computation
Thread-Index: AdYaKASVCp3JPFQuSaOSMkwtz/VZZwAEUEsAAAN7oaAAAnFQAAAASY9CAAFcJQAAAoyFgAAAY+d9AADW9gAAAKxogAAAKW2AAAULeAAAKztBgAAIVeEaADCeBIAAFLmdIA==
Date: Mon, 27 Apr 2020 07:06:59 +0000
Message-ID: <AM0PR08MB37163F09F66FB8FEE2E3D010FAAF0@AM0PR08MB3716.eurprd08.prod.outlook.com>
References: <AM0PR08MB371694E826FA10D25F2BA53EFAD00@AM0PR08MB3716.eurprd08.prod.outlook.com> <93042b37-37e1-5b6a-3578-a750054d0507@gmx.net> <AM0PR08MB3716541F4825F8D43DC3D308FAD00@AM0PR08MB3716.eurprd08.prod.outlook.com> <CACLV2m4-Qcx-xKWP201VCY73HVyjCzHVCb6PrntnBWhA8fBQYg@mail.gmail.com> <AM6PR08MB3318B6ABD411C8C476C3D10B9BD00@AM6PR08MB3318.eurprd08.prod.outlook.com> <CABcZeBOwK7m465LsbY3U+bHv0XA2rcGOTEBStTtTNkwAYvWeQA@mail.gmail.com> <CACLV2m5Md2+Ffc978ZJ+BeZwRgcXTV3xE0vXzmvNgnot_c71xQ@mail.gmail.com> <AM6PR08MB331862B6F143652F4B4C10EE9BD00@AM6PR08MB3318.eurprd08.prod.outlook.com> <CABcZeBMKoVrcN-=aTvy6py5bhOwOVrhgVLmtX2tthc=Oa54b_Q@mail.gmail.com> <CACLV2m7knyt-gQoQq2v1Kz-J62DPjCpb6faJFfDgJ-8mprHwxQ@mail.gmail.com> <CABcZeBMwQHdRuvcs5pmE59SCUj=cwWCtrBhyh9w_L0U1ZDoJ8Q@mail.gmail.com> <AM6PR08MB3318AFD0C1FC4011ED2A81919BD00@AM6PR08MB3318.eurprd08.prod.outlook.com> <CACLV2m7P-=ztPLt+eZjEpcZW=TbNj4wU6hOywhAyMx5ZRrahUw@mail.gmail.com> <AM6PR08MB33185190928734FAFCEDFFCE9BD10@AM6PR08MB3318.eurprd08.prod.outlook.com> <CABcZeBNtZrGRG1_z9V+fPsigmqehG_nvrCQ4_doSfAknYHyhOQ@mail.gmail.com>
In-Reply-To: <CABcZeBNtZrGRG1_z9V+fPsigmqehG_nvrCQ4_doSfAknYHyhOQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: 67c042ce-3ae7-4613-91fd-7bd88aba58f9.1
x-checkrecipientchecked: true
Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [80.92.118.138]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: 88def612-3b00-4843-2c95-08d7ea7997e3
x-ms-traffictypediagnostic: AM0PR08MB5124:|AM0PR08MB5124:|DBBPR08MB4918:
x-ms-exchange-transport-forked: True
X-Microsoft-Antispam-PRVS: <DBBPR08MB49185D8C8CEB673B9EB84690FAAF0@DBBPR08MB4918.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
x-ms-oob-tlc-oobclassifiers: OLM:7691;OLM:10000;
x-forefront-prvs: 0386B406AA
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(396003)(136003)(366004)(376002)(346002)(52536014)(6636002)(86362001)(186003)(4326008)(478600001)(9686003)(55016002)(5660300002)(33656002)(4744005)(26005)(9326002)(6506007)(66446008)(8676002)(66476007)(66946007)(2906002)(316002)(110136005)(64756008)(7696005)(66556008)(71200400001)(54906003)(81156014)(76116006)(8936002); DIR:OUT; SFP:1101;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: KNW+Udwm39o3vv5JOtYGsMFMONFVQqKRMNMcyospxAS7slDTqZoU7u38f8epVjCS1zhwUhFoavB3WohHdoBaY/L9WHwKcM+xxAInRbUMGlSbh+DuLwCLoTQrLXlUH2+XGKF9Junp11vPrmFH7FWFeQa31EbvRfWggZcEWy8xyQ0UBq2871mW/MzcnJR4c5Uiavz0GwgchRu2na7/YDI35OEDisI4jA28QsKr0uqadE7hAE0LYpsa+1MsR0eREokGTeIeaxvfEyYU48JiThwvWub3dA7VZdcWI+NeR5xZHiGUb2yn/ixjGTJRzJOkd7MzdNc4J6X0E7NzEt6XAiedd7x4S8QsOj69VbfjBD97oY9y5N7UUQZEwiZu2WK9G0AhQQeE6fxk2kVfba57Au13qHg7DsCs2FNJg4IZupqZHXDx6WTOEH+rT183xREDdHlx
x-ms-exchange-antispam-messagedata: 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
Content-Type: multipart/alternative; boundary="_000_AM0PR08MB37163F09F66FB8FEE2E3D010FAAF0AM0PR08MB3716eurp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB5124
Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT059.eop-EUR03.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(376002)(346002)(136003)(39860400002)(396003)(46966005)(8676002)(26005)(81156014)(33964004)(8936002)(7696005)(82310400002)(4326008)(33656002)(9686003)(47076004)(9326002)(356005)(55016002)(2906002)(6636002)(336012)(70206006)(70586007)(478600001)(81166007)(86362001)(82740400003)(316002)(6506007)(52536014)(186003)(110136005)(5660300002)(54906003); DIR:OUT; SFP:1101;
X-MS-Office365-Filtering-Correlation-Id-Prvs: 07238083-9c0f-4e8b-0b50-08d7ea799429
X-Forefront-PRVS: 0386B406AA
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Apr 2020 07:07:05.6304 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 88def612-3b00-4843-2c95-08d7ea7997e3
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR08MB4918
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/y4rLmnA0pkGt0NKvW2I7aps2lMw>
Subject: Re: [TLS] Choice of Additional Data Computation
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Apr 2020 07:07:11 -0000

Hi Ekr,


  *   And I am proposing removing implicit CIDs

That would be a bit unfortunate. When we put multiple DTLS records in a single UDP datagram then the CID in all but the first datagram is redundant*.

Ciao
Hannes

(*): Even if we optimize the CID away with cTLS the question about the security implications will surface again.

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

v2.23.0 | Report a Bug | By Email