From 0c65f998a5121826804517cf4d3775f2765c3edf Mon Sep 17 00:00:00 2001 From: Martin Thomson Date: Sat, 15 Jul 2017 11:56:16 +0200 Subject: [PATCH 1/2] Make it clear that it is cleartext packets that have an FNV hash --- draft-ietf-quic-tls.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/draft-ietf-quic-tls.md b/draft-ietf-quic-tls.md index 5f5e6b660a..11826c7d88 100644 --- a/draft-ietf-quic-tls.md +++ b/draft-ietf-quic-tls.md @@ -840,14 +840,14 @@ number gaps on connection ID transitions. That secret is computed as: # Unprotected Packets -QUIC adds an integrity check to all unprotected packets. Any packet that is not -protected by the negotiated AEAD (see {{packet-protection}}), includes an -integrity check. This check does not prevent the packet from being altered, it -exists for added resilience against data corruption and to provided added -assurance that the sender intends to use QUIC. - -Unprotected packets all use the long form of the QUIC header and so will include -a version number. For this version of QUIC, the integrity check uses the 64-bit +QUIC adds an integrity check to all cleartext packets. Cleartext packetare not +protected by the negotiated AEAD (see {{packet-protection}}), but instead +include an integrity check. This check does not prevent the packet from being +altered, it exists for added resilience against data corruption and to provided +added assurance that the sender intends to use QUIC. + +Cleartext packets all use the long form of the QUIC header and so will include a +version number. For this version of QUIC, the integrity check uses the 64-bit FNV-1a hash (see {{fnv1a}}). The output of this hash is appended to the payload of the packet. From 0e5e85ce62041f794b4f4b3542d44cdbbd367e40 Mon Sep 17 00:00:00 2001 From: Martin Thomson Date: Sat, 15 Jul 2017 13:29:27 +0200 Subject: [PATCH 2/2] Typo-land --- draft-ietf-quic-tls.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/draft-ietf-quic-tls.md b/draft-ietf-quic-tls.md index 11826c7d88..2a9c52d088 100644 --- a/draft-ietf-quic-tls.md +++ b/draft-ietf-quic-tls.md @@ -840,10 +840,10 @@ number gaps on connection ID transitions. That secret is computed as: # Unprotected Packets -QUIC adds an integrity check to all cleartext packets. Cleartext packetare not -protected by the negotiated AEAD (see {{packet-protection}}), but instead +QUIC adds an integrity check to all cleartext packets. Cleartext packets are +not protected by the negotiated AEAD (see {{packet-protection}}), but instead include an integrity check. This check does not prevent the packet from being -altered, it exists for added resilience against data corruption and to provided +altered, it exists for added resilience against data corruption and to provide added assurance that the sender intends to use QUIC. Cleartext packets all use the long form of the QUIC header and so will include a