Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Explicitly provide integrity for the CID #143

Closed
wants to merge 1 commit into from
Closed

Explicitly provide integrity for the CID #143

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
24 changes: 19 additions & 5 deletions draft-ietf-tls-dtls13.md
View file
Open in desktop
Expand Up @@ -434,11 +434,25 @@ unpacked RecordNumber structure, as shown below:
This 64-bit value is used in the ACK message as well as in the "record_sequence_number"
input to the AEAD function.

The entire header value shown in {{hdr_examples}} (but prior to record number
encryption) is used as as the additional data value for the AEAD
function. For instance, if the minimal variant is used,
the AAD is 2 octets long. Note that this design is different from the additional data
calculation for DTLS 1.2 and for DTLS 1.2 with Connection ID.
The additional data input to the AEAD function is formed as follows:

~~~
struct {
opaque cid<255>;
opaque header[header_length];
} AdditionalData;
~~~~

The cid field is the connection ID. The header value is the entire
header value shown in {{hdr_examples}} (but
prior to record number encryption) to the connection ID value. For
instance, if the minimal variant is used and the CID is 4 bytes, the
AAD is 7 octets long. The reason to have the CID explicitly present
is to provide integrity for the CID even if the CID has been omitted
on multiple records in the same datagram.

Note that this design is different from the additional data
calculation for DTLS 1.2 and for DTLS 1.2
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this missing "with Connection ID." from the end of the last sentence?


## Determining the Header Format

Expand Down