[tsvwg] Updated Key Management solution for DTLS chunk

[Magnus Westerlund <[e-mail]>]

WG,

We have decided to replace our earlier DTLS Chunk key-management solution draft (https://datatracker.ietf.org/doc/draft-westerlund-tsvwg-sctp-dtls-handshake/)
with a new one:

https://datatracker.ietf.org/doc/draft-porfiri-tsvwg-sctp-dtls-handshake/


Abstract

   This document defines how Transport Layer Security (TLS) 1.3 is used
   as a key-management method for the SCTP DTLS Chunk mechanism.  It
   specifies how a TLS handshake establishes the initial security
   context for an SCTP association and how subsequent TLS handshakes
   provide key updates and re-authentication.  The goal is to enable
   authenticated and confidential communication over SCTP using the DTLS
   Chunk, leveraging standardized TLS 1.3 features for key management
   and rekeying.


This solution is a significant simplification and moving even further towards minimizing the friction to implement this solution. The main changes compared to the older are:


  *
Switched to TLS instead of using DTLS
  *
No simultaneous (D)TLS connections just establish one, authenticate and export keys. When any part needs to rekey or reauthenticate open a new TLS connection.
  *
Fully supporting the DTLS Chunk (-03) draft and its API.

A reason for a new draft is that we don’t want the prior IPR declarations to taint this version. For the moment we authors are not aware of any IPR that apply on this draft.

Cheers

Magnus Westerlund