Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add retry integrity tag #3120

Merged
merged 14 commits into from
Jan 17, 2020
Merged

Add retry integrity tag #3120

Changes from 1 commit
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
f220d99
Add retry integrity tag
DavidSchinazi Oct 17, 2019
3e94183
fix retry tp
DavidSchinazi Oct 18, 2019
a7fa53b
fix retry tp
DavidSchinazi Oct 18, 2019
4aae5f2
cawood's review
DavidSchinazi Oct 18, 2019
eeb4ce3
MT editorial changes
DavidSchinazi Oct 22, 2019
467e31e
Review suggestion from MT
DavidSchinazi Oct 22, 2019
8c45cc9
Editorial fix from MikeBishop
DavidSchinazi Oct 23, 2019
c056d30
MT suggestions
DavidSchinazi Oct 25, 2019
739d272
fixup line length
DavidSchinazi Oct 25, 2019
08077e1
Merge branch 'master' into prot_retry
DavidSchinazi Nov 15, 2019
a61c2b3
Comment from Christian Huitema
DavidSchinazi Nov 15, 2019
98c7e87
Use initial_salt instead of zero key
DavidSchinazi Nov 18, 2019
bdde08d
make new key
DavidSchinazi Nov 20, 2019
5ac50f3
Merge branch 'master' into prot_retry
DavidSchinazi Dec 10, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion draft-ietf-quic-tls.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1215,7 +1215,8 @@ off-path attackers' ability to send valid Retry packets.
The Retry Integrity Tag is a 128-bit field that is computed as the output of
AEAD_AES_128_GCM {{!AEAD=RFC5116}} used with the following inputs:

- The secret key, K, is 128 bits all set to zero.
- The secret key, K, is 128 bits equal to the initial_salt defined in
{{initial-secrets}}.
- The nonce, N, is 96 bits all set to zero.
- The plaintext, P, is empty.
- The associated data, A, is the contents of the Retry Pseudo-Packet, as
Expand Down