[TLS] RFC 8446: Correlating connections with ticket ages
Ben Smyth <research@bensmyth.com> Thu, 30 April 2020 09:40 UTC
Return-Path: <research@bensmyth.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1490B3A00AD for <tls@ietfa.amsl.com>; Thu, 30 Apr 2020 02:40:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=bensmyth.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kOj6k_GeASMr for <tls@ietfa.amsl.com>; Thu, 30 Apr 2020 02:40:04 -0700 (PDT)
Received: from 5.smtp.34sp.com (5.smtp.34sp.com [IPv6:2a00:1ee0:2:5::2eb7:8e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD6B03A00C4 for <tls@ietf.org>; Thu, 30 Apr 2020 02:39:55 -0700 (PDT)
Received: from smtpauth5.mailarray.34sp.com (lvs5.34sp.com [46.183.13.73]) by 5.smtp.34sp.com (Postfix) with ESMTPS id 348882C180C for <tls@ietf.org>; Thu, 30 Apr 2020 10:39:29 +0100 (BST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bensmyth.com; s=dkim; t=1588239569; bh=A7AMCi3R/HSK5NX10oepryBo5tTdVB/2r2notFaf5RA=; h=Reply-To:From:Date:Subject:To; b=BBiCNIDHmCuyt7XWQ39WbcNPuDBMo91rsOcjIRAIEZTyBOkFoOcYKh9t2pc35HIBH 9RjIgd2UONl4wthYhy1B7oO4QrLpGbBpUV9JhnzsZGzeyMNo2/xUi+mqZ2ykAkMxdY siRcCZEY/r1VlF+ndDS6RByQu2Te3b3LrxJjv3+0=
Received: from mail-ej1-f49.google.com ([209.85.218.49]:43200) by smtpauth5.mailarray.34sp.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.92) (envelope-from <research@bensmyth.com>) id 1jU5fF-0004WQ-2A for tls@ietf.org; Thu, 30 Apr 2020 10:39:29 +0100
Received: by mail-ej1-f49.google.com with SMTP id s9so4151432eju.1 for <tls@ietf.org>; Thu, 30 Apr 2020 02:39:29 -0700 (PDT)
X-Gm-Message-State: AGi0PuaCCITVT9nfO9bCR0ojqTa6Gn0izRAMXtnjOAbICRGqeSByVYHs TOEvBv2sCxrfyNhEomTPJ5dvfpNQrG0u5YQSVPw=
X-Google-Smtp-Source: APiQypLM+HN0+raft3Kw03OsvsVzkiergDLyr+NSbVLM2NO/GdL04T9B9Ol5OW7nSKn+IJZqWRIWNaVemBd9NdyYOdM=
X-Received: by 2002:a17:906:1387:: with SMTP id f7mr1772564ejc.333.1588239568712; Thu, 30 Apr 2020 02:39:28 -0700 (PDT)
MIME-Version: 1.0
Reply-To: research@bensmyth.com
From: Ben Smyth <research@bensmyth.com>
Date: Thu, 30 Apr 2020 11:39:02 +0200
X-Gmail-Original-Message-ID: <CA+_8xu3k7H5widc2sBMayjCjm0OftU=2sC8z9K6PNKC6NqNO1w@mail.gmail.com>
Message-ID: <CA+_8xu3k7H5widc2sBMayjCjm0OftU=2sC8z9K6PNKC6NqNO1w@mail.gmail.com>
To: tls@ietf.org
Content-Type: multipart/alternative; boundary="0000000000004fb91c05a47ed736"
X-Authenticated-As: research@bensmyth.com
X-OriginalSMTPIP: 209.85.218.49
X-34spcom-MailScanner-Information: Please contact the ISP for more information
X-34spcom-MailScanner-ID: 348882C180C.A7496
X-34spcom-MailScanner: Found to be clean
X-34spcom-MailScanner-SpamCheck: not spam, SpamAssassin (score=-20.1, required 6.5, autolearn=disabled, DKIM_SIGNED 0.10, DKIM_VALID -0.10, DKIM_VALID_AU -0.10, HTML_MESSAGE 0.00, SPF_PASS -0.00, X34SP_ALLOW_GMAIL_EVEN_IF_BLACKLISTED -10.00, X34SP_OVERRIDE -10.00)
X-34spcom-MailScanner-From: research@bensmyth.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/qoKIuexHVI1PhMRYC90dxW4UWro>
Subject: [TLS] RFC 8446: Correlating connections with ticket ages
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Apr 2020 09:40:07 -0000
Section 4.2.11.1 explains that: ...PskIdentity contains an obfuscated version of the ticket age formed by taking the age in milliseconds and adding the "ticket_age_add"... This addition prevents passive observers from correlating connections unless tickets are reused. So: Correlations are possible when tickets are reused. But, what connection correlations are prevented when tickets aren't reused? Best regards, Ben -- TLS 1.3 tutorial: https://bensmyth.com/publications/2019-TLS-tutorial/
- [TLS] RFC 8446: Correlating connections with tick… Ben Smyth
- Re: [TLS] RFC 8446: Correlating connections with … Eric Rescorla