IETF Logo Mail Archive

[TLS] ech/esni - theoretically some inner CH's wouldn't fit...

Stephen Farrell <stephen.farrell@cs.tcd.ie> Sat, 20 February 2021 20:19 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34E893A0BEB for <tls@ietfa.amsl.com>; Sat, 20 Feb 2021 12:19:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.299
X-Spam-Level:
X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 11_rok5ihTtP for <tls@ietfa.amsl.com>; Sat, 20 Feb 2021 12:19:31 -0800 (PST)
Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90C603A0BE3 for <tls@ietf.org>; Sat, 20 Feb 2021 12:19:30 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 736BABE4C for <tls@ietf.org>; Sat, 20 Feb 2021 20:19:28 +0000 (GMT)
X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie
Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qJt64DHZCXP6 for <tls@ietf.org>; Sat, 20 Feb 2021 20:19:26 +0000 (GMT)
Received: from [10.244.2.119] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id CE32BBE47 for <tls@ietf.org>; Sat, 20 Feb 2021 20:19:26 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1613852366; bh=Ae7uuqyZqoPn9Gs89jKkkliMGp88KUe6QehzSAGqBwo=; h=To:From:Subject:Date:From; b=UzmlzyZ1egKSQgkMMRi4hhgrdJW9vlo5Vw2jPEMVTajKBLLTEYsqhUpOxzgXxKRxP LiGJycLIF5g/t8UdDMD2VPAxHKZszw8m7VgaB7kLGlg0+qA9I/iE4P2n5dnAtXFbXz zBIeh15xbaOCYmyqoH8zhG1zOJY5Q0E65cAAN/PU=
To: "tls@ietf.org" <tls@ietf.org>
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Message-ID: <6ab8def6-a01a-cb7a-eaac-63c96966d9be@cs.tcd.ie>
Date: Sat, 20 Feb 2021 20:19:26 +0000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.7.1
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="og1nIu3MjCMOOUyqfDpXO9XLPyTWW1Hql"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/ctM3EiSjgviyp5Yss0ohI0eK1Wk>
Subject: [TLS] ech/esni - theoretically some inner CH's wouldn't fit...
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 20 Feb 2021 20:19:33 -0000

Hiya,

The CH in TLS has a 3 octet length. The payload in ECH has a
2-octet length. Hopefully that'll never matter but it's an
inconsistency I don't recall coming up before. (Apologies if
I've forgotten, or if I've missed something in 8446 that
forbids bigger CH's.)

I'm fine with just leaving it as-is, or with noting in the
text that you will suffer this problem (and many others;-) if
you want to use a CH that's that long, or with moving to a 3
octet length for the payload.

Cheers,
S.

v2.2.0 | Report a Bug | By Email