Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Be clearer about protections #3900

Merged
merged 12 commits into from Aug 4, 2020
Merged

Be clearer about protections #3900

Changes from 1 commit
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
a38e49b
Be clearer about protections
martinthomson Jul 14, 2020
25264d0
First initial
martinthomson Jul 14, 2020
83e840e
first Initial
martinthomson Jul 14, 2020
5782bf9
Merge branch 'master' into less-protection
martinthomson Jul 16, 2020
c78921e
Use text from master for this paragraph
martinthomson Jul 16, 2020
1db24ca
Trailing whitespace, gah
martinthomson Jul 16, 2020
05cb8f2
Lots of review comments
martinthomson Jul 19, 2020
bca2743
wrap
martinthomson Jul 19, 2020
92d1701
Moor sugestions
martinthomson Jul 21, 2020
00d90fc
Some more rearrangement
martinthomson Jul 20, 2020
645d6f8
Cleaner
martinthomson Jul 20, 2020
7f190d7
Split sentence; reword
martinthomson Jul 21, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
12 changes: 6 additions & 6 deletions draft-ietf-quic-tls.md
View file
Open in desktop
Expand Up @@ -1017,12 +1017,12 @@ used for QUIC packet protection is the AEAD that is negotiated for use with the
TLS connection. For example, if TLS is using the TLS_AES_128_GCM_SHA256 cipher
suite, the AEAD_AES_128_GCM function is used.

QUIC can use any of the ciphersuites defined in {{!TLS13}} with the exception of
TLS_AES_128_CCM_8_SHA256. A ciphersuite MUST NOT be negotiated unless a header
protection scheme is defined for the ciphersuite. This document defines a
header protection scheme for all ciphersuites defined in {{!TLS13}} aside from
TLS_AES_128_CCM_8_SHA256. These ciphersuites have a 16-byte authentication tag
and produce an output 16 bytes larger than their input.
QUIC can use any of the cipher suites defined in {{!TLS13}} with the exception
of TLS_AES_128_CCM_8_SHA256. A cipher suite MUST NOT be negotiated unless a
header protection scheme is defined for the cipher suite. This document defines
a header protection scheme for all cipher suites defined in {{!TLS13}} aside
from TLS_AES_128_CCM_8_SHA256. These cipher suites have a 16-byte
authentication tag and produce an output 16 bytes larger than their input.

Note:

Expand Down