[tsvwg] DTLS in SCTP solution

[Magnus Westerlund <[e-mail]>]

Hi,

We authors of DTLS/SCTP https://datatracker.ietf.org/doc/draft-ietf-tsvwg-dtls-over-sctp-bis/ have worked on two drafts that together forms what we consider a much better alternative for how to use DTLS to the current proposed solution that is based on SCTP.

The first draft is a general crypto chunk that can be used to protect the rest of the SCTP packet using a negotiated protection engine. https://datatracker.ietf.org/doc/draft-westerlund-tsvwg-sctp-crypto-chunk/

Then we have written a draft that defines how to use the above crypto chunk to integrate DTLS as the protection engine. Targeting the same goals as in DTLS/SCTP. Like mutual authentication, support for very long lived sessions. But in addition we get a lot of other benefits including a much lower bar on the DTLS implementation that is integrated. https://datatracker.ietf.org/doc/draft-westerlund-tsvwg-sctp-crypto-dtls/

The benefits as we see it are listed here: https://www.ietf.org/archive/id/draft-westerlund-tsvwg-sctp-crypto-dtls-00.html#name-benefits-compared-to-dtls-s
The main benefits we see are the following:

  *   No dependency on SCTP-AUTH
  *   Much lower requirements on DTLS implementations when it comes to support of functionality
  *   Protection of the whole SCTP packet, preventing attacks on SCTP as well, not only on the user messages
  *   Much robuster when rekeying
  *   No limitation on user message size from this mechanism as it functions below SCTP’s DATA chunk message fragmentation mechanism.

We are working on getting our IPR disclosures submitted on draft-westerlund-tsvwg-sctp-crypto-dtls. We authors are currently not aware of any IPR that would apply on draft-westerlund-tsvwg-sctp-crypto-chunk.

We would like to ask the WG to consider this proposal as a replacement for DTLS/SCTP.

Cheers

Magnus, John and Claudio.