[TLS] PR#346: Individual traffic key generation

Eric Rescorla <ekr@rtfm.com> Tue, 17 November 2015 01:26 UTC

Return-Path: <ekr@rtfm.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFA521A89FA for <tls@ietfa.amsl.com>; Mon, 16 Nov 2015 17:26:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.622
X-Spam-Level:
X-Spam-Status: No, score=0.622 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b59jpDxRYYsc for <tls@ietfa.amsl.com>; Mon, 16 Nov 2015 17:26:25 -0800 (PST)
Received: from mail-yk0-x230.google.com (mail-yk0-x230.google.com [IPv6:2607:f8b0:4002:c07::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6AFB1AC411 for <tls@ietf.org>; Mon, 16 Nov 2015 17:26:25 -0800 (PST)
Received: by ykfs79 with SMTP id s79so270969551ykf.1 for <tls@ietf.org>; Mon, 16 Nov 2015 17:26:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm_com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:content-type; bh=zbwn/VF8y/DI0yz2fT2OJHiL2zbE+sD1fG/W+WUMB1U=; b=JdNVlxxQhrkViOBT8M928GaG4ugY/QmxGyZtT5zcPyChv4YGZBgmBl5s7tqQ8Z/58z 4s94YmRk2NCn2v1ycut9XQVRl+Ky5hworOY37fLJtKIBE7HCdI/v9M6EHx16oduJcptn tpVyLdM5pwMi2Bc7SCibRUiGMv/hQ5VEFKzrl2BI1z/kyhNWpf4UizRm/O9k705EkEBB cbJLKJ4Qa/jW/btlThdBSn+AVwLoFbO/HUSzBNw6UI84tFkDhYpAzx0Biw2HjKW09MlV 8mTK6/cDZyVM1w9DTDnzgoCkuhnoiB0gicHk6Fzr0LMH8PDDplazh37gqh/QAppeidUp QGYQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to :content-type; bh=zbwn/VF8y/DI0yz2fT2OJHiL2zbE+sD1fG/W+WUMB1U=; b=OtOwfVOdjhPKa+bKGWfeWjr6VF6ManzE3+e4HyCHWvsBmvKUxUKMvDigjhhCW84QcR mwKQL2K4fWGaKuucdw7aOTsuR+v5c0c5qaIT1Yomoiu2G5a2czsQLdP/jQJacopbIu/I 2CRjKY/WEhESMzSmtU3YP20F36XJX+XiLgNBldo7FmexJCSUKlzzKZ6tETzfNJ5ENXcV OE0rMczQnrDzaAKYwcJOsGSqPSB0pgAoqa7hG7RuKdZ8bZ6/gBytHRY43rSfaB2RiGvc dPrynVjBS0c5EMqYtr5Tdy2kmek/VTU26BXbXaPomxjGMjmuMsrK6UddWaUv0L+gPelt Hzog==
X-Gm-Message-State: ALoCoQk0VYbfiSKpVBxNxgBSEGrwqs70QIx4h0lUFY5qLynAX5hiTyKNaeM/nP97qJFEt4DjBGok
X-Received: by 10.13.197.194 with SMTP id h185mr30997197ywd.12.1447723585001; Mon, 16 Nov 2015 17:26:25 -0800 (PST)
MIME-Version: 1.0
Received: by 10.13.221.203 with HTTP; Mon, 16 Nov 2015 17:25:45 -0800 (PST)
From: Eric Rescorla <ekr@rtfm.com>
Date: Mon, 16 Nov 2015 17:25:45 -0800
Message-ID: <CABcZeBMqsJ1aakrH7CLuJ+YDuQx8LcVMAM_5rkKfoTKadh-uAA@mail.gmail.com>
To: "tls@ietf.org" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="001a114edd4a048dcd0524b26a21"
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/tN54vdRxJXhoUkMcQcX1DEry_oo>
Subject: [TLS] PR#346: Individual traffic key generation
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Nov 2015 01:26:27 -0000

https://github.com/tlswg/tls13-spec/pull/346

As discussed in Seattle and Yokohama, I've broken out the traffic key
generation
into individual values. This makes life somewhat easier for those dealing
the
cryptographic modules, because some of this data needs to be public and some
of it needs to be secret.

This general change already had consensus, so I plan to merge it on
Wednesday
modulo major objections. Please advise here or on Github if you find any
errors
or you violently object.

-Ekr