Re: [tsvwg] I-D Action: draft-ietf-tsvwg-dtls-over-sctp-bis-01.txt

[Magnus Westerlund <[e-mail]>]

WG,

There are a lot of changes in this version improving the document substantially. 

However, we have a significant unsolved issue that we will come back with more details on so that it can be discussed. The issue is related to DTLS key epochs and the multi-stream user message properties of SCTP and how to know and ensure that all DTLS records using one key have been delivered so that one can remove the key at key changes in a way that don't require one to stop sending new user messages until all old ones have been delivered (draining).

Cheers

Magnus Westerlund on behalf of the co-authors

> -----Original Message-----
> From: I-D-Announce <[e-mail]> On Behalf Of
> [e-mail]
> Sent: den 12 juli 2021 19:50
> To: [e-mail]
> Cc: [e-mail]
> Subject: I-D Action: draft-ietf-tsvwg-dtls-over-sctp-bis-01.txt
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Transport Area Working Group WG of the
> IETF.
> 
>         Title           : Datagram Transport Layer Security (DTLS) over Stream Control
> Transmission Protocol (SCTP)
>         Authors         : Magnus Westerlund
>                           John Preuß Mattsson
>                           Claudio Porfiri
>                           Michael Tüxen
> 	Filename        : draft-ietf-tsvwg-dtls-over-sctp-bis-01.txt
> 	Pages           : 22
> 	Date            : 2021-07-12
> 
> Abstract:
>    This document describes a proposed update for the usage of the
>    Datagram Transport Layer Security (DTLS) protocol to protect user
>    messages sent over the Stream Control Transmission Protocol (SCTP).
> 
>    DTLS over SCTP provides mutual authentication, confidentiality,
>    integrity protection, and replay protection for applications that use
>    SCTP as their transport protocol and allows client/server
>    applications to communicate in a way that is designed to give
>    communications privacy and to prevent eavesdropping and detect
>    tampering or message forgery.
> 
>    Applications using DTLS over SCTP can use almost all transport
>    features provided by SCTP and its extensions.  This document intends
>    to obsolete RFC 6083 and removes the 16 kB limitation on user message
>    size by defining a secure user message fragmentation so that multiple
>    DTLS records can be used to protect a single user message.  It
>    further updates the DTLS versions to use, as well as the HMAC
>    algorithms for SCTP-AUTH, and simplifies secure implementation by
>    some stricter requirements on the establishment procedures.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-tsvwg-dtls-over-sctp-bis/
> 
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-tsvwg-dtls-over-sctp-bis-01.html
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-tsvwg-dtls-over-sctp-bis-01
> 
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> 
> _______________________________________________
> I-D-Announce mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/i-d-announce
> Internet-Draft directories: http://www.ietf.org/shadow.html or
> ftp://ftp.ietf.org/ietf/1shadow-sites.txt