From: Magnus Westerlund <magnus.westerlund@ericsson.com>
To: tsvwg IETF list <tsvwg@ietf.org>
Thread-Topic: Updated Key Management solution for DTLS chunk
Thread-Index: AQHc/0QmKC9fJHCeGUOV1kamFjlJ/g==
Date: Thu, 18 Jun 2026 17:10:32 +0000
Message-ID: 
 <FRWPR07MB106245D2285A645BD9611575795E32@FRWPR07MB10624.eurprd07.prod.outlook.com>
Accept-Language: en-US, sv-SE
Content-Language: en-GB
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?Windows-1252?Q?A+8JO4HlKOr3luj9wsix5IOGDE51SrNOJ8Lu4E/jRMF4cOWaPKQbSuSs?=
 =?Windows-1252?Q?cDC+SE2V/0nJbpdtmdGyHh0Lk3DD0p/U+Al46X4euAh5QykELolrhHS5?=
 =?Windows-1252?Q?RC1h8S7TrdiN9cOdjgJ/5cNRsBaI8Me9ncQ6Y8bcCmyfVsk1/fsfKfGg?=
 =?Windows-1252?Q?gR89O5X/YH9mjvkcEa43ampekLaanpW5hSzekhPJCqjbSNksdDeyqTDf?=
 =?Windows-1252?Q?8ijE5EQyeYIvaFu8emOA24YYVLRrz+IgeS8TVBkAnaiXpI9977ZyTHjz?=
 =?Windows-1252?Q?NkioKoqoHz1diIP/UhKG2Bgz9FDZ/LzRb9XOFoW/yhVUUG5KRNsIhLjf?=
 =?Windows-1252?Q?v4gzNB8T5LF88Bmv72JlcGTbQQY2UwH2u8uOkf4ALNirxcOgTfAs39TZ?=
 =?Windows-1252?Q?ShdJ8tlT1gaIDZcHG27/AUItOKNEmJCFxb5N2MHFp7F1WJ8eJqn4wp71?=
 =?Windows-1252?Q?2yQTVq2p1VdzAMYJd+0atN9PoZUQx4ktjiMjUcpN4urrH/1AiUt7qach?=
 =?Windows-1252?Q?+3yC2X7GukoSrAim8wv8UOn14C6RRDrEx43+KW74tSOlyDmTC6gwrFVR?=
 =?Windows-1252?Q?nwIcNth7ijcj3cT1+hPqvCtqNT7JG7SW8p2ohWaqCm/SySui+MhjeM1M?=
 =?Windows-1252?Q?50um5HtDlPcB8jDkQ0obVoiSCPEUYDm5DLeAVqJmP9mgDTJ/auXxxM8Y?=
 =?Windows-1252?Q?cLwtXzcCnDKCS7DYI4VK1BjsWU94cjsgQFqPxo/BQ5ugH7lY4uZ/tKk/?=
 =?Windows-1252?Q?6Hn0ZiSalvo4MldtqhZlz1i336IkqYBlnOTv2Zx4ef9ncCKvR8bkYxbc?=
 =?Windows-1252?Q?8C0LN2bf0FOLHeH8Lj/d6zBOURWYWpvXuFntD+36rq9sTDmV7wT68IXL?=
 =?Windows-1252?Q?LgFgi9f9tlUpA01Ye7KCJgWeczoabbpzIg4CS5YrNmfZQCMEKDJpjDEA?=
 =?Windows-1252?Q?LU/VB2dhPvKkFzTE0O9QSCgF0MAExpW6qtDUkXt3Vs7i2vtTuOPGhBQJ?=
 =?Windows-1252?Q?4w/Z9n/wH/ESerSxNEdEpr88wm4aNb4qU43RENrAzlEnlwSKmlu61/10?=
 =?Windows-1252?Q?lZbrZ0sSv8DG5f9Acuyx1+l4k0yvfN2McW/BYzuNefFIu3vKfWza+aeG?=
 =?Windows-1252?Q?iyFe6XnN1LVcTc8/nHmLr2WfWJCz0ebvy7TG2B+OIqSFitBoCzez7pHs?=
 =?Windows-1252?Q?xnxs6WDeBqbr3IhR7Gf0WotGSQ0ULXtL1BKDfWY5QVm7aFUKhVYE/Q8E?=
 =?Windows-1252?Q?THOZXocspIcCfK9K01RkGP++eucypHNNjlP5xq6n4O1kpw6Of+QLowKy?=
 =?Windows-1252?Q?aWVkxwXct8fRXITUhIJan9X5Zadu0APO3VFW7Ej05xSKnGN/80i70XFU?=
 =?Windows-1252?Q?cCd3JjW3fra5c8DxLOSC3jiJEHBou1s9IxRJ9QBFYy8IAMCXhaRzEyaW?=
 =?Windows-1252?Q?uytEN021J4vgj8ww5pHfPBA78xCi3kQj7rVti53OX2ZllXyW08P9rtH9?=
 =?Windows-1252?Q?o92ufhHDly61FfqmnDA0ANcykRjPjNR6RPbRJa/EFa2a+DOmc6MZYuCX?=
 =?Windows-1252?Q?mVT5gRfuFUMtkKFo5NRae0DvSGMHYaL79TW2dLJvJwSWvn7aI5mXIH9T?=
 =?Windows-1252?Q?fCkk4VDvXl1mSIx9JaE3X98QMErk97QfMxzjZ2+IXhNGK7fza0TBGJqu?=
 =?Windows-1252?Q?Pm42h/LHetUjfnRiicyPKheXtCcrygmRGqX4I5ZW1VoLuUs0jZwbJiy6?=
 =?Windows-1252?Q?qcdkNNxWBB+5woLLGAx6nIXvrPJCmqWI5epWWEr+k0BNaDslV7i9uAwu?=
 =?Windows-1252?Q?ZJRgOUfeqHQeLTx3YgjjGyH5D+YlheImvWCirkb9I2uwEvK8Lo/OlNcJ?=
 =?Windows-1252?Q?XRuPZUGeOkaQsxnT7qztMnDCkv2YVYwgZokUkTfi/rtX+EkA8eRUoWsl?=
Content-Type: multipart/alternative;
	boundary="_000_FRWPR07MB106245D2285A645BD9611575795E32FRWPR07MB10624eu_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: FRWPR07MB10624.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 f115f4f5-a72e-4e5a-4d62-08decd5c8183
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jun 2026 17:10:32.6459
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 
 9zN0WL+e8oqy16xwnpQWC9Cy8RqaDOR5c0wnz+1buDK6Ms2MS8SWrePz1ymhaKa2IocLp1dRCXf4O3QYLS9+LDtSxXyu3mX57N3avvulBKM=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR07MB8611
Message-ID-Hash: PYNSRM3P2PZREDXPU7JSURROYOJSJOYL
X-Message-ID-Hash: PYNSRM3P2PZREDXPU7JSURROYOJSJOYL
X-MailFrom: magnus.westerlund@ericsson.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-tsvwg.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5Btsvwg=5D_Updated_Key_Management_solution_for_DTLS_chunk?=
List-Id: Transport Area Working Group <tsvwg.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/tsvwg/PcRv0YzGaXjV-Bjto-Tfm4xcl78>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsvwg>
List-Help: <mailto:tsvwg-request@ietf.org?subject=help>
List-Owner: <mailto:tsvwg-owner@ietf.org>
List-Post: <mailto:tsvwg@ietf.org>
List-Subscribe: <mailto:tsvwg-join@ietf.org>
List-Unsubscribe: <mailto:tsvwg-leave@ietf.org>

--_000_FRWPR07MB106245D2285A645BD9611575795E32FRWPR07MB10624eu_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

WG,

We have decided to replace our earlier DTLS Chunk key-management solution d=
raft (https://datatracker.ietf.org/doc/draft-westerlund-tsvwg-sctp-dtls-han=
dshake/)
with a new one:

https://datatracker.ietf.org/doc/draft-porfiri-tsvwg-sctp-dtls-handshake/


Abstract

   This document defines how Transport Layer Security (TLS) 1.3 is used
   as a key-management method for the SCTP DTLS Chunk mechanism.  It
   specifies how a TLS handshake establishes the initial security
   context for an SCTP association and how subsequent TLS handshakes
   provide key updates and re-authentication.  The goal is to enable
   authenticated and confidential communication over SCTP using the DTLS
   Chunk, leveraging standardized TLS 1.3 features for key management
   and rekeying.


This solution is a significant simplification and moving even further towar=
ds minimizing the friction to implement this solution. The main changes com=
pared to the older are:


  *
Switched to TLS instead of using DTLS
  *
No simultaneous (D)TLS connections just establish one, authenticate and exp=
ort keys. When any part needs to rekey or reauthenticate open a new TLS con=
nection.
  *
Fully supporting the DTLS Chunk (-03) draft and its API.

A reason for a new draft is that we don=92t want the prior IPR declarations=
 to taint this version. For the moment we authors are not aware of any IPR =
that apply on this draft.

Cheers

Magnus Westerlund

--_000_FRWPR07MB106245D2285A645BD9611575795E32FRWPR07MB10624eu_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
</head>
<body>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
WG,</div>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt;">
<span style=3D"color: rgb(0, 0, 0);">We have decided to replace our earlier=
 DTLS Chunk key-management solution draft (<a href=3D"https://datatracker.i=
etf.org/doc/draft-westerlund-tsvwg-sctp-dtls-handshake/" data-outlook-id=3D=
"e2d7e550-bad3-4a54-bd9c-3d151b55c568">https://datatracker.ietf.org/doc/dra=
ft-westerlund-tsvwg-sctp-dtls-handshake/</a>)&nbsp;</span></div>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
with a new one:</div>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href=3D"https://datatracker.ietf.org/doc/draft-porfiri-tsvwg-sctp-dtls-h=
andshake/" data-outlook-id=3D"59cd1597-a1b9-4d3e-8fc3-aec73c83f9fd">https:/=
/datatracker.ietf.org/doc/draft-porfiri-tsvwg-sctp-dtls-handshake/</a></div=
>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<pre style=3D"background-color: rgb(255, 255, 255); margin-top: 0px; margin=
-bottom: 0px; display: block;"><div style=3D"text-align: left; text-indent:=
 0px; white-space: pre-wrap; text-transform: none; font-family: &quot;Noto =
Sans Mono&quot;, SFMono-Regular, Menlo, Monaco, Consolas, &quot;Liberation =
Mono&quot;, &quot;Courier New&quot;, monospace; font-size: 14px; color: rgb=
(33, 37, 41);">Abstract=0A=
=0A=
 &nbsp; This document defines how Transport Layer Security (TLS) 1.3 is use=
d=0A=
 &nbsp; as a key-management method for the SCTP DTLS Chunk mechanism. &nbsp=
;It=0A=
 &nbsp; specifies how a TLS handshake establishes the initial security=0A=
 &nbsp; context for an SCTP association and how subsequent TLS handshakes=
=0A=
 &nbsp; provide key updates and re-authentication. &nbsp;The goal is to ena=
ble=0A=
 &nbsp; authenticated and confidential communication over SCTP using the DT=
LS=0A=
 &nbsp; Chunk, leveraging standardized TLS 1.3 features for key management=
=0A=
 &nbsp; and rekeying.</div></pre>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
This solution is a significant simplification and moving even further towar=
ds minimizing the friction to implement this solution. The main changes com=
pared to the older are:</div>
<div style=3D"direction: ltr; font-family: Aptos, Arial, Helvetica, sans-se=
rif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<ul data-editing-info=3D"{&quot;applyListStyleFromLevel&quot;:false,&quot;u=
norderedStyleType&quot;:2}" style=3D"direction: ltr; margin-top: 0px; margi=
n-bottom: 0px;">
<li style=3D"font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 1=
2pt; color: rgb(0, 0, 0); direction: ltr; margin-top: 0px; margin-bottom: 0=
px; list-style-type: &quot;- &quot;;">
<div role=3D"presentation" style=3D"direction: ltr;">Switched to TLS instea=
d of using DTLS</div>
</li><li style=3D"font-family: Aptos, Arial, Helvetica, sans-serif; font-si=
ze: 12pt; color: rgb(0, 0, 0); direction: ltr; margin-top: 0px; margin-bott=
om: 0px; list-style-type: &quot;- &quot;;">
<div role=3D"presentation" style=3D"direction: ltr;">No simultaneous (D)TLS=
 connections just establish one, authenticate and export keys. When any par=
t needs to rekey or reauthenticate open a new TLS connection.</div>
</li><li style=3D"font-family: Aptos, Arial, Helvetica, sans-serif; font-si=
ze: 12pt; color: rgb(0, 0, 0); direction: ltr; margin-top: 0px; margin-bott=
om: 0px; list-style-type: &quot;- &quot;;">
<div role=3D"presentation" style=3D"direction: ltr;">Fully supporting the D=
TLS Chunk (-03) draft and its API.&nbsp;</div>
</li></ul>
<div style=3D"direction: ltr; margin-top: 0px; margin-bottom: 0px; font-fam=
ily: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0,=
 0);">
<br>
</div>
<div style=3D"direction: ltr; margin-top: 0px; margin-bottom: 0px; font-fam=
ily: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0,=
 0);">
A reason for a new draft is that we don=92t want the prior IPR declarations=
 to taint this version. For the moment we authors are not aware of any IPR =
that apply on this draft.</div>
<div style=3D"direction: ltr; margin-top: 0px; margin-bottom: 0px; font-fam=
ily: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0,=
 0);">
<br>
</div>
<div style=3D"direction: ltr; margin-top: 0px; margin-bottom: 0px; font-fam=
ily: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0,=
 0);">
Cheers</div>
<div style=3D"direction: ltr; margin-top: 0px; margin-bottom: 0px; font-fam=
ily: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0,=
 0);">
<br>
</div>
<div style=3D"direction: ltr; margin-top: 0px; margin-bottom: 0px; font-fam=
ily: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0,=
 0);">
Magnus Westerlund</div>
</body>
</html>

--_000_FRWPR07MB106245D2285A645BD9611575795E32FRWPR07MB10624eu_--