
From nobody Tue Apr  1 06:54:35 2014
Return-Path: <internet-drafts@ietf.org>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97B851A09F8; Tue,  1 Apr 2014 06:54:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l7BQV43lOmuS; Tue,  1 Apr 2014 06:54:32 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C3AF1A070F; Tue,  1 Apr 2014 06:54:32 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 5.2.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20140401135432.22732.42412.idtracker@ietfa.amsl.com>
Date: Tue, 01 Apr 2014 06:54:32 -0700
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/JWA0H_X_3XizoxxnAfZdlsUQERM
Cc: avt@ietf.org
Subject: [AVTCORE] I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Apr 2014 13:54:33 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
 This draft is a work item of the Audio/Video Transport Core Maintenance Working Group of the IETF.

        Title           : AES-GCM and AES-CCM Authenticated Encryption in Secure RTP (SRTP)
        Authors         : David A. McGrew
                          Kevin M. Igoe
	Filename        : draft-ietf-avtcore-srtp-aes-gcm-11.txt
	Pages           : 36
	Date            : 2014-04-01

Abstract:
   This document defines how AES-GCM and AES-CCM Authenticated
   Encryption with Associated Data algorithms can be used to provide
   confidentiality and data authentication in the SRTP protocol.



The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-avtcore-srtp-aes-gcm/

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-avtcore-srtp-aes-gcm-11

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=draft-ietf-avtcore-srtp-aes-gcm-11


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Tue Apr  1 07:24:25 2014
Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 430871A06DB for <avt@ietfa.amsl.com>; Tue,  1 Apr 2014 07:24:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.851
X-Spam-Level: 
X-Spam-Status: No, score=-3.851 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aaPz1aPvM1RT for <avt@ietfa.amsl.com>; Tue,  1 Apr 2014 07:24:20 -0700 (PDT)
Received: from mailgw2.ericsson.se (mailgw2.ericsson.se [193.180.251.37]) by ietfa.amsl.com (Postfix) with ESMTP id E368B1A0847 for <avt@ietf.org>; Tue,  1 Apr 2014 07:24:19 -0700 (PDT)
X-AuditID: c1b4fb25-b7f3b8e0000006f1-63-533acc0fc3b5
Received: from ESESSHC015.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw2.ericsson.se (Symantec Mail Security) with SMTP id 82.90.01777.F0CCA335; Tue,  1 Apr 2014 16:24:15 +0200 (CEST)
Received: from [127.0.0.1] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.65) with Microsoft SMTP Server id 14.3.174.1; Tue, 1 Apr 2014 16:24:15 +0200
Message-ID: <533ACC0F.9060103@ericsson.com>
Date: Tue, 1 Apr 2014 16:24:15 +0200
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: <avt@ietf.org>
References: <20140401135432.22732.42412.idtracker@ietfa.amsl.com>
In-Reply-To: <20140401135432.22732.42412.idtracker@ietfa.amsl.com>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprALMWRmVeSWpSXmKPExsUyM+JvjS7/Gatgg3fXdC2mn/nLaPGyZyW7 A5PHlycvmTyWLPnJFMAUxWWTkpqTWZZapG+XwJXxdcMGpoLdwhXz2qazNjAu4e9i5OSQEDCR 6Ln+gwXCFpO4cG89WxcjF4eQwGFGidZXX9khnGWMEhsnb2ADqeIV0JZY0XCQCcRmEVCRmND6 F6ybTcBC4uaPRrAaUYFgiaVzFrNA1AtKnJz5BMwWERCSmN4/AayXWUBV4v7zZrB6YQFPiZ2n prCC2EICjhKH564Dq+cUcJK4vPELUJwD6DpxiZ7GIIhWPYkpV1sYIWx5ieats5khWrUlGpo6 WCcwCs1CsnkWkpZZSFoWMDKvYmTPTczMSS832sQIDNWDW36r7mC8c07kEKM0B4uSOO+Ht85B QgLpiSWp2ampBalF8UWlOanFhxiZODilGhiZ5M8+U3mtU1o5YZqgQ/0lphPNB2a95lqRPinx 9A3+1yzBx1rcFoWr7TngbMwiaVfxLqbo1euaXbvLGg9JB3nb7uH/sHbyhZpYYdHkjQwVdUa9 2Yya13tnz35rq9oS6vjnfpZjst2FkvvRifJq7s+n1Enov8hdcUqXuaT+1gZWo+Qbzz6WrFVi Kc5INNRiLipOBAAlmBV7IwIAAA==
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/YRo5KSR38egHLiswU7boh-6kK0c
Subject: Re: [AVTCORE] I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Apr 2014 14:24:22 -0000

WG,

As result of the AD review and some comments within the WG, a number of
changes has been done to this document. I will let the authors comment
on what changes has been done.

Anyway, before progressing to IETF last call, I like to have the WG have
one week until the 8th of April to review the changes to this document.
So please any comments on these changes as soon as possible.

Cheers

Magnus

On 2014-04-01 15:54, internet-drafts@ietf.org wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
>  This draft is a work item of the Audio/Video Transport Core Maintenance Working Group of the IETF.
> 
>         Title           : AES-GCM and AES-CCM Authenticated Encryption in Secure RTP (SRTP)
>         Authors         : David A. McGrew
>                           Kevin M. Igoe
> 	Filename        : draft-ietf-avtcore-srtp-aes-gcm-11.txt
> 	Pages           : 36
> 	Date            : 2014-04-01
> 
> Abstract:
>    This document defines how AES-GCM and AES-CCM Authenticated
>    Encryption with Associated Data algorithms can be used to provide
>    confidentiality and data authentication in the SRTP protocol.
> 
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-avtcore-srtp-aes-gcm/
> 
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-ietf-avtcore-srtp-aes-gcm-11
> 
> A diff from the previous version is available at:
> http://www.ietf.org/rfcdiff?url2=draft-ietf-avtcore-srtp-aes-gcm-11
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> _______________________________________________
> Audio/Video Transport Core Maintenance
> avt@ietf.org
> https://www.ietf.org/mailman/listinfo/avt
> 
> 


-- 

Magnus Westerlund

----------------------------------------------------------------------
Services, Media and Network features, Ericsson Research EAB/TXM
----------------------------------------------------------------------
Ericsson AB                 | Phone  +46 10 7148287
Färögatan 6                 | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------


From nobody Tue Apr  1 10:24:52 2014
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 913421A09C3; Tue,  1 Apr 2014 10:24:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1uKH3dKdCJd4; Tue,  1 Apr 2014 10:24:47 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E0B581A09C5; Tue,  1 Apr 2014 10:24:44 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 5.2.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20140401172444.30472.74816.idtracker@ietfa.amsl.com>
Date: Tue, 01 Apr 2014 10:24:44 -0700
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/Oap58oK3CnecrJc_WpyR3jbmA8U
Cc: avtcore chair <avtcore-chairs@tools.ietf.org>, avtcore mailing list <avt@ietf.org>, RFC Editor <rfc-editor@rfc-editor.org>
Subject: [AVTCORE] Protocol Action: 'RTP Clock Source Signalling' to Proposed Standard (draft-ietf-avtcore-clksrc-11.txt)
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Apr 2014 17:24:48 -0000

The IESG has approved the following document:
- 'RTP Clock Source Signalling'
  (draft-ietf-avtcore-clksrc-11.txt) as Proposed Standard

This document is the product of the Audio/Video Transport Core
Maintenance Working Group.

The IESG contact persons are Alissa Cooper and Richard Barnes.

A URL of this Internet Draft is:
http://datatracker.ietf.org/doc/draft-ietf-avtcore-clksrc/




Technical Summary

NTP format timestamps are used by several RTP protocols for 
synchronisation and statistical measurements.  This memo specifies SDP 
signalling identifying timestamp reference clock sources and SDP 
signalling identifying the media clock sources in a multimedia session.


Working Group Summary

This document was written as a result of discussion on another draft 
which made it clear that there is a need to be able to specify the clock 
used for RTP in order to achieve better synchronization between sources. 
It was seen as a general problem and this document represent the WG 
consensus.


Document Quality

The authors are aware of two implementation that use at least some of 
the signaling capabilities described in this draft: http://
soundandpicture.com/2013/11/axia-announces-first-broadcast-product-with-
aes67-compliance/ and http://ravenna.alcnetworx.com/technology/open-
technology-standards/aes67-x192.html

The draft is a normative reference for the recently published AES67 
standard and is referenced by 
https://ietf.org/doc/draft-ietf-avtcore-idms/ which is now in the RFC 
editor queue waiting for this document.

There was an SDP directorate review and comments were addressed. 


Personnel

Document Shepherd is Roni Even and the responsible AD is Alissa Cooper.


From nobody Tue Apr  1 16:17:17 2014
Return-Path: <harald@alvestrand.no>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56F441A0011 for <avt@ietfa.amsl.com>; Tue,  1 Apr 2014 16:17:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level: 
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pbjSshmNpHde for <avt@ietfa.amsl.com>; Tue,  1 Apr 2014 16:17:07 -0700 (PDT)
Received: from mork.alvestrand.no (mork.alvestrand.no [158.38.152.117]) by ietfa.amsl.com (Postfix) with ESMTP id 34DF71A0002 for <avt@ietf.org>; Tue,  1 Apr 2014 16:17:07 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mork.alvestrand.no (Postfix) with ESMTP id 353FB7C50FB for <avt@ietf.org>; Wed,  2 Apr 2014 01:17:03 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at alvestrand.no
Received: from mork.alvestrand.no ([127.0.0.1]) by localhost (mork.alvestrand.no [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R2xxCkzkvS+L for <avt@ietf.org>; Wed,  2 Apr 2014 01:16:59 +0200 (CEST)
Received: from [10.20.1.105] (114.red-80-28-236.adsl.static.ccgg.telefonica.net [80.28.236.114]) by mork.alvestrand.no (Postfix) with ESMTPSA id 7A0ED7C5083 for <avt@ietf.org>; Wed,  2 Apr 2014 01:16:58 +0200 (CEST)
Message-ID: <533B48E9.5050501@alvestrand.no>
Date: Wed, 02 Apr 2014 01:16:57 +0200
From: Harald Alvestrand <harald@alvestrand.no>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: avt@ietf.org
References: <20140401224948.4662.48077.idtracker@ietfa.amsl.com>
In-Reply-To: <20140401224948.4662.48077.idtracker@ietfa.amsl.com>
X-Enigmail-Version: 1.6
Content-Type: multipart/alternative; boundary="------------000402060009020507060602"
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/bLZh2RmdU3T3FrPoRIuFcKLmai4
Subject: [AVTCORE] Fwd: New Version Notification for draft-alvestrand-sdp-header-00.txt
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Apr 2014 23:17:11 -0000

This is a multi-part message in MIME format.
--------------000402060009020507060602
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Some of the issues we have been having with the relationship between SDP
and RTP may be illuminated by studying the missive below.

Harald


-------- Original Message --------
Subject: 	New Version Notification for draft-alvestrand-sdp-header-00.txt
Date: 	Tue, 01 Apr 2014 15:49:48 -0700
From: 	internet-drafts@ietf.org
To: 	Harald T. Alvestrand <harald@alvestrand.no>, Harald Alvestrand
<harald@alvestrand.no>



A new version of I-D, draft-alvestrand-sdp-header-00.txt
has been successfully submitted by Harald Alvestrand and posted to the
IETF repository.

Name:		draft-alvestrand-sdp-header
Revision:	00
Title:		The SDP RTCP Extension
Document date:	2014-04-01
Group:		Individual Submission
Pages:		5
URL:            http://www.ietf.org/internet-drafts/draft-alvestrand-sdp-header-00.txt
Status:         https://datatracker.ietf.org/doc/draft-alvestrand-sdp-header/
Htmlized:       http://tools.ietf.org/html/draft-alvestrand-sdp-header-00


Abstract:
   This document specifies an RTCP extension that allows SDP information
   to be carried over an RTP session.  This extension obivates the need
   for a separate negotiation channel, thereby avoiding the risk of
   desynchronization between the SDP session description and the RTP
   session state.


                                                                                  


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat




--------------000402060009020507060602
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Some of the issues we have been having with the relationship between
    SDP and RTP may be illuminated by studying the missive below.<br>
    <br>
    Harald<br>
    <div class="moz-forward-container"><br>
      <br>
      -------- Original Message --------
      <table class="moz-email-headers-table" border="0" cellpadding="0"
        cellspacing="0">
        <tbody>
          <tr>
            <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Subject:
            </th>
            <td>New Version Notification for
              draft-alvestrand-sdp-header-00.txt</td>
          </tr>
          <tr>
            <th align="RIGHT" nowrap="nowrap" valign="BASELINE">Date: </th>
            <td>Tue, 01 Apr 2014 15:49:48 -0700</td>
          </tr>
          <tr>
            <th align="RIGHT" nowrap="nowrap" valign="BASELINE">From: </th>
            <td><a class="moz-txt-link-abbreviated"
                href="mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a></td>
          </tr>
          <tr>
            <th align="RIGHT" nowrap="nowrap" valign="BASELINE">To: </th>
            <td>Harald T. Alvestrand <a class="moz-txt-link-rfc2396E"
                href="mailto:harald@alvestrand.no">&lt;harald@alvestrand.no&gt;</a>,
              Harald Alvestrand <a class="moz-txt-link-rfc2396E"
                href="mailto:harald@alvestrand.no">&lt;harald@alvestrand.no&gt;</a></td>
          </tr>
        </tbody>
      </table>
      <br>
      <br>
      <pre>A new version of I-D, draft-alvestrand-sdp-header-00.txt
has been successfully submitted by Harald Alvestrand and posted to the
IETF repository.

Name:		draft-alvestrand-sdp-header
Revision:	00
Title:		The SDP RTCP Extension
Document date:	2014-04-01
Group:		Individual Submission
Pages:		5
URL:            <a class="moz-txt-link-freetext" href="http://www.ietf.org/internet-drafts/draft-alvestrand-sdp-header-00.txt">http://www.ietf.org/internet-drafts/draft-alvestrand-sdp-header-00.txt</a>
Status:         <a class="moz-txt-link-freetext" href="https://datatracker.ietf.org/doc/draft-alvestrand-sdp-header/">https://datatracker.ietf.org/doc/draft-alvestrand-sdp-header/</a>
Htmlized:       <a class="moz-txt-link-freetext" href="http://tools.ietf.org/html/draft-alvestrand-sdp-header-00">http://tools.ietf.org/html/draft-alvestrand-sdp-header-00</a>


Abstract:
   This document specifies an RTCP extension that allows SDP information
   to be carried over an RTP session.  This extension obivates the need
   for a separate negotiation channel, thereby avoiding the risk of
   desynchronization between the SDP session description and the RTP
   session state.


                                                                                  


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

</pre>
      <br>
    </div>
    <br>
  </body>
</html>

--------------000402060009020507060602--


From nobody Tue Apr  1 16:41:36 2014
Return-Path: <harald@alvestrand.no>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 977511A002A for <avt@ietfa.amsl.com>; Tue,  1 Apr 2014 16:41:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.31
X-Spam-Level: 
X-Spam-Status: No, score=-1.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_12=0.6, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1YNJRmltnHW9 for <avt@ietfa.amsl.com>; Tue,  1 Apr 2014 16:41:34 -0700 (PDT)
Received: from mork.alvestrand.no (mork.alvestrand.no [158.38.152.117]) by ietfa.amsl.com (Postfix) with ESMTP id 3D1101A0028 for <avt@ietf.org>; Tue,  1 Apr 2014 16:41:33 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mork.alvestrand.no (Postfix) with ESMTP id BF3197C50FD for <avt@ietf.org>; Wed,  2 Apr 2014 01:41:28 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at alvestrand.no
Received: from mork.alvestrand.no ([127.0.0.1]) by localhost (mork.alvestrand.no [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QVbc9lz7wTeF for <avt@ietf.org>; Wed,  2 Apr 2014 01:41:24 +0200 (CEST)
Received: from [10.20.1.105] (114.red-80-28-236.adsl.static.ccgg.telefonica.net [80.28.236.114]) by mork.alvestrand.no (Postfix) with ESMTPSA id 3D57E7C50FB for <avt@ietf.org>; Wed,  2 Apr 2014 01:41:24 +0200 (CEST)
Message-ID: <533B4EA3.9050304@alvestrand.no>
Date: Wed, 02 Apr 2014 01:41:23 +0200
From: Harald Alvestrand <harald@alvestrand.no>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: avt@ietf.org
References: <533530AA.2020806@ericsson.com>
In-Reply-To: <533530AA.2020806@ericsson.com>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/SQM6cuE50RbNbe7oS0o3p07Mvuk
Subject: Re: [AVTCORE] Security/Performance issue in circuit breakers
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Apr 2014 23:41:35 -0000

I don't think I understand this problem.

But refusing to consider SDP valid that results in RTCP intervals longer
than 5 seconds sounds like a Good Thing to me.

On 03/28/2014 09:19 AM, Magnus Westerlund wrote:
> Hi,
>
> In a discussion in the RTCWEB around consent and circuit breakers I made
> a realization that there exist a significant issue in circuit breakers
> that isn't document nor dealt with.
>
> This has to do with the configuration of the RTCP bandwidth. If a
> malicious user of circuit breakers wants to make it really inefficient
> one can achieve that by configuring the RTCP bandwidth really low. So
> assuming b=RR and b=RS exists in an implementation that has circuit
> breakers. The method for making it inefficient and not affect the
> traffic pattern is to set the RTCP bandwidth really low. Using an RR=1
> bps would mean that the Td deterministic reporting interval would be ~45
> min. Thus, putting all of these limits on traffic to be no reactive
> until roughly 2-3 reporting interval, i.e. 1.5-2.25 hours have passed.
> Which is longer duration than many real-time interactive media sessions
> are to start with.
>
> I think we need to ensure that RTCP reporting is not happening less
> often than what the fixed minimal interval (5s) will mean. Thus, I see
> that including circuit breaker would require a hard requirement that one
> configure the RTCP bandwidth to allow for at least each SSRC reporting
> each 5 seconds.
>
> This also needs to go into the security consideration section to make
> clear that this is an issue.
>
> Cheers
>
> Magnus Westerlund
>
> ----------------------------------------------------------------------
> Services, Media and Network features, Ericsson Research EAB/TXM
> ----------------------------------------------------------------------
> Ericsson AB                 | Phone  +46 10 7148287
> Färögatan 6                 | Mobile +46 73 0949079
> SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
> ----------------------------------------------------------------------
>
> _______________________________________________
> Audio/Video Transport Core Maintenance
> avt@ietf.org
> https://www.ietf.org/mailman/listinfo/avt


-- 
Surveillance is pervasive. Go Dark.


From nobody Tue Apr  1 21:28:24 2014
Return-Path: <worley@ariadne.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F7F51A0119 for <avt@ietfa.amsl.com>; Tue,  1 Apr 2014 21:28:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bmrhAqYpnC10 for <avt@ietfa.amsl.com>; Tue,  1 Apr 2014 21:28:15 -0700 (PDT)
Received: from qmta08.westchester.pa.mail.comcast.net (qmta08.westchester.pa.mail.comcast.net [IPv6:2001:558:fe14:43:76:96:62:80]) by ietfa.amsl.com (Postfix) with ESMTP id 921481A0118 for <avt@ietf.org>; Tue,  1 Apr 2014 21:28:15 -0700 (PDT)
Received: from omta14.westchester.pa.mail.comcast.net ([76.96.62.60]) by qmta08.westchester.pa.mail.comcast.net with comcast id ksNw1n0021HzFnQ58sUB3P; Wed, 02 Apr 2014 04:28:11 +0000
Received: from hobgoblin.ariadne.com ([24.34.72.61]) by omta14.westchester.pa.mail.comcast.net with comcast id ksTq1n0031KKtkw3asTv8P; Wed, 02 Apr 2014 04:28:11 +0000
Received: from hobgoblin.ariadne.com (hobgoblin.ariadne.com [127.0.0.1]) by hobgoblin.ariadne.com (8.14.7/8.14.7) with ESMTP id s324Qn2d022742; Wed, 2 Apr 2014 00:27:18 -0400
Received: (from worley@localhost) by hobgoblin.ariadne.com (8.14.7/8.14.7/Submit) id s324QkF6022738; Wed, 2 Apr 2014 00:26:46 -0400
Date: Wed, 2 Apr 2014 00:26:46 -0400
Message-Id: <201404020426.s324QkF6022738@hobgoblin.ariadne.com>
From: worley@ariadne.com (Dale R. Worley)
Sender: worley@ariadne.com (Dale R. Worley)
To: Harald Alvestrand <harald@alvestrand.no>
In-reply-to: <533B48E9.5050501@alvestrand.no> (harald@alvestrand.no)
References: <20140401224948.4662.48077.idtracker@ietfa.amsl.com> <533B48E9.5050501@alvestrand.no>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20140121; t=1396412891; bh=DMjcfu5IQSXpemEi+gsK848IRLOoZXKuvpvkvM+4Awc=; h=Received:Received:Received:Received:Date:Message-Id:From:To: Subject; b=AlTHGsEmIs4ivKvR3nCmZRAzZh4vrTVKx7uEfKCNeWGHfwHbbV37SlZebcHS6ycn+ 4gi8LIhQRsrGmb0MSvEd9+NW3T/F7zg+5h+wrc2nJZN2QXJYcOAI1tcWdA06eBUaeS WKMxTYUqycgnSE+WdemW0yj3zTamyHBcWKHOp4riEsqN+FPBU+yNUzftndqkIvf3KS S39/rsDhFp7YtjATtxpDwfzRxzqneuEIPJ4z1cij1Vo6jgZyck1PgEciCMfj+ASEll VDAhEqRfTt7dG2DelpIziIzzXb3OPN7LFs6wUnOtpflh214GkCqzUxIrzRWGs4/ApA Dl59y+ADjZ+Tg==
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/uCyuTZNiIBPXsntC9-oKWGD9I-o
Cc: avt@ietf.org
Subject: Re: [AVTCORE] Fwd: New Version Notification for draft-alvestrand-sdp-header-00.txt
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Apr 2014 04:28:22 -0000

> From: Harald Alvestrand <harald@alvestrand.no>
> 
> Some of the issues we have been having with the relationship between SDP
> and RTP may be illuminated by studying the missive below.
> 
> Name:		draft-alvestrand-sdp-header
> Revision:	00
> Title:		The SDP RTCP Extension
> Document date:	2014-04-01
> Group:		Individual Submission
> Pages:		5
> URL:            http://www.ietf.org/internet-drafts/draft-alvestrand-sdp-header-00.txt
> Status:         https://datatracker.ietf.org/doc/draft-alvestrand-sdp-header/
> Htmlized:       http://tools.ietf.org/html/draft-alvestrand-sdp-header-00

Clearly, this needs to be integrated with WebRTC!

Dale


From nobody Fri Apr  4 02:37:54 2014
Return-Path: <john.mattsson@ericsson.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E1351A043C for <avt@ietfa.amsl.com>; Fri,  4 Apr 2014 02:37:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.24
X-Spam-Level: 
X-Spam-Status: No, score=-1.24 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, HOST_MISMATCH_NET=0.311, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3ut2HOtCXX4n for <avt@ietfa.amsl.com>; Fri,  4 Apr 2014 02:37:48 -0700 (PDT)
Received: from sessmg20.mgmt.ericsson.se (sessmg20.ericsson.net [193.180.251.50]) by ietfa.amsl.com (Postfix) with ESMTP id 3CE181A044A for <avt@ietf.org>; Fri,  4 Apr 2014 02:37:48 -0700 (PDT)
X-AuditID: c1b4fb32-b7fe98e0000034f3-29-533e7d663834
Received: from ESESSHC006.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg20.mgmt.ericsson.se (Symantec Mail Security) with SMTP id 29.4C.13555.66D7E335; Fri,  4 Apr 2014 11:37:43 +0200 (CEST)
Received: from ESESSMB307.ericsson.se ([169.254.7.185]) by ESESSHC006.ericsson.se ([153.88.183.36]) with mapi id 14.03.0174.001; Fri, 4 Apr 2014 11:37:42 +0200
From: John Mattsson <john.mattsson@ericsson.com>
To: "avt@ietf.org" <avt@ietf.org>
Thread-Topic: [AVTCORE] I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
Thread-Index: AQHPTbHqYA0+4J/QFkaFglVygy3scZr8rzOAgASIoQA=
Date: Fri, 4 Apr 2014 09:37:41 +0000
Message-ID: <CF6432F5.13D01%john.mattsson@ericsson.com>
References: <20140401135432.22732.42412.idtracker@ietfa.amsl.com> <533ACC0F.9060103@ericsson.com>
In-Reply-To: <533ACC0F.9060103@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.3.9.131030
x-originating-ip: [153.88.183.19]
Content-Type: text/plain; charset="utf-8"
Content-ID: <99F0D2579FEE7046A4AEE844C6245B18@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrBLMWRmVeSWpSXmKPExsUyM+JvjW56rV2wwfJ3QhYve1ayOzB6LFny kymAMYrLJiU1J7MstUjfLoEr4++beewFFwwrNjR8Y29gXGPQxcjJISFgIrF/w1I2CFtM4sK9 9UA2F4eQwElGiW3HepkhnMWMEv/OrmYHqWITMJCYu6cBrENEQFGi9dpnRhBbWMBTYuepKaxd jBxAcS+JXVPkIUwridNNViAVLAIqEl92dIFV8wqYS9y8uYcJxBYSSJZo2NbNDFLOKaAjcX62 AEiYEeic76fWgJUwC4hL3HoynwniTAGJJXvOM0PYohIvH/9jBbFFBfQk7j2aywIRV5Rof9rA CDKSWUBTYv0ufYgx1hLXZmxlhbAVJaZ0P2SHuEZQ4uTMJywTGMVnIdk2C6F7FpLuWUi6ZyHp XsDIuopRsji1uDg33chALzc9t0QvtSgzubg4P0+vOHUTIzC2Dm75bbSD8eQe+0OM0hwsSuK8 11lrgoQE0hNLUrNTUwtSi+KLSnNSiw8xMnFwSjUwJi1tO3LfUNtvKsO7jZEr3DRuM3z5Wjun 3Lo3n29mk+GVEAVn4fK9W/748lzYzOsqf2FVYHHhsTPaU++65SxSPGptZKb26JLeTtMj9x/q ceuuEy/pWPo699jn3QHdU6KFvk3+qdk4v+/t39yl1tZMYi0pU1W48vTEM6/ns/fy31pwsnpD 89lwJZbijERDLeai4kQADyyJSnsCAAA=
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/T3t7szJ1zfntRKaVX6ZdzUiFAKg
Subject: Re: [AVTCORE] I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Apr 2014 09:37:52 -0000
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From nobody Fri Apr  4 07:41:59 2014
Return-Path: <john.mattsson@ericsson.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A1B31A018C for <avt@ietfa.amsl.com>; Fri,  4 Apr 2014 07:41:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.851
X-Spam-Level: 
X-Spam-Status: No, score=-3.851 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pl3FLcRgNsGF for <avt@ietfa.amsl.com>; Fri,  4 Apr 2014 07:41:53 -0700 (PDT)
Received: from mailgw1.ericsson.se (mailgw1.ericsson.se [193.180.251.45]) by ietfa.amsl.com (Postfix) with ESMTP id C383E1A014E for <avt@ietf.org>; Fri,  4 Apr 2014 07:41:52 -0700 (PDT)
X-AuditID: c1b4fb2d-b7f328e0000012ab-b3-533ec4ab74d3
Received: from ESESSHC020.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw1.ericsson.se (Symantec Mail Security) with SMTP id A5.41.04779.BA4CE335; Fri,  4 Apr 2014 16:41:47 +0200 (CEST)
Received: from ESESSMB307.ericsson.se ([169.254.7.185]) by ESESSHC020.ericsson.se ([153.88.183.78]) with mapi id 14.03.0174.001; Fri, 4 Apr 2014 16:41:46 +0200
From: John Mattsson <john.mattsson@ericsson.com>
To: "avt@ietf.org" <avt@ietf.org>
Thread-Topic: [AVTCORE] I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
Thread-Index: AQHPTbHqYA0+4J/QFkaFglVygy3scZr8rzOAgASIoQCAAFT1gA==
Date: Fri, 4 Apr 2014 14:41:46 +0000
Message-ID: <CF648E69.13E07%john.mattsson@ericsson.com>
References: <20140401135432.22732.42412.idtracker@ietfa.amsl.com> <533ACC0F.9060103@ericsson.com> <CF6432F5.13D01%john.mattsson@ericsson.com>
In-Reply-To: <CF6432F5.13D01%john.mattsson@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.3.9.131030
x-originating-ip: [153.88.183.18]
Content-Type: text/plain; charset="utf-8"
Content-ID: <C97917DF1BAB6948A607ED5BACB373B6@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrBLMWRmVeSWpSXmKPExsUyM+Jvje7qI3bBBicXKlq87FnJ7sDosWTJ T6YAxigum5TUnMyy1CJ9uwSujCtfeAvOBFc8n3adrYFxR2AXIyeHhICJxOL26WwQtpjEhXvr gWwuDiGBw4wSv38ehHIWM0rc3/COBaSKTcBAYu6eBrAOEQFFidZrnxlBbGEBT4mdp6awdjFy AMW9JHZNkYcocZK4+n8dE4jNIqAicfTKVLByXgFziZ3vp0LN72eUOHD2AitIglPAQuLskx3M IDYj0EXfT60Ba2YWEJe49WQ+E8SlAhJL9pxnhrBFJV4+/gfWKyqgJ3Hv0VwWiLiixMdX+xhB 7mEW0JRYv0sfYoy1xOXmi+wQtqLElO6H7BD3CEqcnPmEZQKj+Cwk22YhdM9C0j0LSfcsJN0L GFlXMbLnJmbmpJcbbmIExs7BLb91dzCeOidyiFGag0VJnPfDW+cgIYH0xJLU7NTUgtSi+KLS nNTiQ4xMHJxSDYx+FutWhy28c8CZse9UxTL1sKznp6XO3LC7Ej9lofLztSt3fzJ83cob7/i2 dKLuZY51f1eu1vI3OMt2fkaqxqpW0efcnNd/C3Hlf75Xtn1xZtW6Nbs82bd2/tZtVWvU33PS gJXpguiR/8cjRbZm3PhfsP3yQeMct13238tEG0Q+L93K+iTrhCW7EktxRqKhFnNRcSIAwiFj L2sCAAA=
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/k6x4wKA8SlgOTXF05Jx-9gf3JSc
Subject: Re: [AVTCORE] I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Apr 2014 14:41:58 -0000
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From nobody Fri Apr  4 09:51:54 2014
Return-Path: <john.mattsson@ericsson.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62F7E1A022A for <avt@ietfa.amsl.com>; Fri,  4 Apr 2014 09:51:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.851
X-Spam-Level: 
X-Spam-Status: No, score=-3.851 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NtC7f_6fizD0 for <avt@ietfa.amsl.com>; Fri,  4 Apr 2014 09:51:48 -0700 (PDT)
Received: from mailgw1.ericsson.se (mailgw1.ericsson.se [193.180.251.45]) by ietfa.amsl.com (Postfix) with ESMTP id 610231A024F for <avt@ietf.org>; Fri,  4 Apr 2014 09:51:34 -0700 (PDT)
X-AuditID: c1b4fb2d-b7f328e0000012ab-04-533ee311b6b6
Received: from ESESSHC008.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw1.ericsson.se (Symantec Mail Security) with SMTP id 87.49.04779.113EE335; Fri,  4 Apr 2014 18:51:29 +0200 (CEST)
Received: from ESESSMB307.ericsson.se ([169.254.7.185]) by ESESSHC008.ericsson.se ([153.88.183.42]) with mapi id 14.03.0174.001; Fri, 4 Apr 2014 18:51:29 +0200
From: John Mattsson <john.mattsson@ericsson.com>
To: Dan Wing <dwing@cisco.com>, "avt@ietf.org WG" <avt@ietf.org>
Thread-Topic: [AVTCORE] EKT update, draft-ietf-avtcore-srtp-ekt-02
Thread-Index: AQHPKeUjc70A7S6qFESkKLDF/6753psB+KCA
Date: Fri, 4 Apr 2014 16:51:27 +0000
Message-ID: <CF64AC30.13E41%john.mattsson@ericsson.com>
References: <CB90C3F5-2F0D-4FD2-847E-E403CC45C790@cisco.com>
In-Reply-To: <CB90C3F5-2F0D-4FD2-847E-E403CC45C790@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.3.9.131030
x-originating-ip: [153.88.183.146]
Content-Type: text/plain; charset="utf-8"
Content-ID: <22B070B74EAE5B4C8836BEFF93B4AF62@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrMLMWRmVeSWpSXmKPExsUyM+Jvja7gY7tgg0tHhS1e9qxktzjZ+YbJ 4uK1h0wOzB5Tfm9k9Viy5CeTx5fLn9kCmKO4bFJSczLLUov07RK4Mn52bGYteNTIWPFhdmID 4466LkZODgkBE4kr518xQ9hiEhfurWfrYuTiEBI4zCjxbXoPlLOYUeLIr1mMIFVsAgYSc/c0 sIHYIgIOEhcW3wDrZhZIlNh69QB7FyMHh7CAo8S1mzUgpoiAk8SsFbYQppHE19UWIMUsAioS F59PZwWxeQXMJaZ2HmYHsYUEbCSOnb3LBFLOKWAr8fCcPEiYEeiy76fWMEHsEZe49WQ+E8TF AhJL9pyHul5U4uXjf2AjRQX0JO49mssCEVeS+LHhEgvISGYBTYn1u/QhTGuJh7MsICYqSkzp fsgOcYygxMmZT1gmMErMQrJsFkLzLITmWUiaZyFpXsDIuoqRPTcxMye93HATIzDiDm75rbuD 8dQ5kUOM0hwsSuK8H946BwkJpCeWpGanphakFsUXleakFh9iZOLglGpgZKntfPi2PmvVk/Sb AbHRG65qyD1sOqr98Oqc5Spp1fbr869wfzdOC404E70lqqJqwk/9Dxe+LlgcHWO3WyAhfR/z tiNVjbuaJqjP71l73CFViDGsdPGevQZPF/5auXxqypykuLZJYRLpyryfrvZ0VGg5sN3icuSu LOOaseQ9Z7DQKvaJCi5rlViKMxINtZiLihMB2mdF/oYCAAA=
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/Q2e9ILjag90MuG4wjLzzaYuYN-E
Cc: "<draft-ietf-avtcore-srtp-ekt@tools.ietf.org>" <draft-ietf-avtcore-srtp-ekt@tools.ietf.org>
Subject: Re: [AVTCORE] EKT update, draft-ietf-avtcore-srtp-ekt-02
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Apr 2014 16:51:53 -0000
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=


From nobody Fri Apr  4 10:50:19 2014
Return-Path: <martin.thomson@gmail.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE5CB1A02D8 for <avt@ietfa.amsl.com>; Fri,  4 Apr 2014 10:50:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qGslllR5Y_q9 for <avt@ietfa.amsl.com>; Fri,  4 Apr 2014 10:50:13 -0700 (PDT)
Received: from mail-wg0-x231.google.com (mail-wg0-x231.google.com [IPv6:2a00:1450:400c:c00::231]) by ietfa.amsl.com (Postfix) with ESMTP id 21AB21A0283 for <avt@ietf.org>; Fri,  4 Apr 2014 10:50:12 -0700 (PDT)
Received: by mail-wg0-f49.google.com with SMTP id a1so3905992wgh.32 for <avt@ietf.org>; Fri, 04 Apr 2014 10:50:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=chi3LzCJXq91yFkRh6jQXBmL8VYKrocVIis0UbbxpbU=; b=aK+VQ1T8VH1aNzjyyvndnovaoFt8zJqeP5KDlX/17yivItEE0b0BwHwpF3RmbPgkyz WNlOiqIpx1SCw0cBbl8/QpPzKUXQEEMX9jnqluXPJr9KFf8lu++tX2GnlpONs2aGd+UJ Wx1B+l+vfbGQ+Fbk6xOdOMdfKIlILlQzUPFx/gNf/pTBjlOzkGn45YoVHyTcAvHQuvky 3Ov4UXFSPj9MJP4IHMM40tylOPbzeHu7XwpBTUGEUSQOIqpE78cBKxkP6nVN2QP49tgj ZHVSioxdvYfd86cl515AkVgr0Dl3eBXsw7zks9ta04x2/RAF/uMCk28pRhgJDHmOXau7 LaaQ==
MIME-Version: 1.0
X-Received: by 10.194.192.132 with SMTP id hg4mr22069675wjc.28.1396633808099;  Fri, 04 Apr 2014 10:50:08 -0700 (PDT)
Received: by 10.227.147.10 with HTTP; Fri, 4 Apr 2014 10:50:08 -0700 (PDT)
In-Reply-To: <CF64AC30.13E41%john.mattsson@ericsson.com>
References: <CB90C3F5-2F0D-4FD2-847E-E403CC45C790@cisco.com> <CF64AC30.13E41%john.mattsson@ericsson.com>
Date: Fri, 4 Apr 2014 10:50:08 -0700
Message-ID: <CABkgnnVSP3oZzZGS418eh2SxRqXxEbwC5Cxdm0UfhxcjZQqKsQ@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: John Mattsson <john.mattsson@ericsson.com>
Content-Type: text/plain; charset=UTF-8
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/I5QqFoXE-JiMhQp2qpOMQKAAj-8
Cc: "<draft-ietf-avtcore-srtp-ekt@tools.ietf.org>" <draft-ietf-avtcore-srtp-ekt@tools.ietf.org>, "avt@ietf.org WG" <avt@ietf.org>, Dan Wing <dwing@cisco.com>
Subject: Re: [AVTCORE] EKT update, draft-ietf-avtcore-srtp-ekt-02
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Apr 2014 17:50:18 -0000

On 4 April 2014 09:51, John Mattsson <john.mattsson@ericsson.com> wrote:
> - Should SDESC always negotiate different EKT keys in the send and receive
> direction?

Strictly speaking, no, the SSRC should be sufficient to distinguish
cases.  But it's probably a good practice, in case you have an SSRC
collision, causing the same key stream to be reused (which is bad).
Unless you are in a multi-party session with a single key, noting that
then you probably have an even higher chance of SSRC collision.


From nobody Tue Apr  8 08:14:30 2014
Return-Path: <yi.cheng@ericsson.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0194A1A0404 for <avt@ietfa.amsl.com>; Tue,  8 Apr 2014 08:14:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.15
X-Spam-Level: 
X-Spam-Status: No, score=-1.15 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HELO_EQ_SE=0.35, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IZEH4jqEa3jx for <avt@ietfa.amsl.com>; Tue,  8 Apr 2014 08:14:12 -0700 (PDT)
Received: from mailgw1.ericsson.se (mailgw1.ericsson.se [193.180.251.45]) by ietfa.amsl.com (Postfix) with ESMTP id 72C4A1A044B for <avt@ietf.org>; Tue,  8 Apr 2014 08:14:01 -0700 (PDT)
X-AuditID: c1b4fb2d-b7f328e0000012ab-06-53441238ea8c
Received: from ESESSHC017.ericsson.se (Unknown_Domain [153.88.253.124]) by mailgw1.ericsson.se (Symantec Mail Security) with SMTP id 1C.75.04779.83214435; Tue,  8 Apr 2014 17:14:00 +0200 (CEST)
Received: from ESESSMB305.ericsson.se ([169.254.5.212]) by ESESSHC017.ericsson.se ([153.88.183.69]) with mapi id 14.03.0174.001; Tue, 8 Apr 2014 17:13:59 +0200
From: Yi Cheng <yi.cheng@ericsson.com>
To: "avt@ietf.org" <avt@ietf.org>
Thread-Topic: [AVTCORE] comments on draft-ietf-avtcore-srtp-ekt-02
Thread-Index: Ac9TPQPs5Smjah/3TKev1fYjz+LnUA==
Date: Tue, 8 Apr 2014 15:13:59 +0000
Message-ID: <9D746FA33933A44198056E8E591AAB5B1051FBF4@ESESSMB305.ericsson.se>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [153.88.183.16]
Content-Type: multipart/alternative; boundary="_000_9D746FA33933A44198056E8E591AAB5B1051FBF4ESESSMB305erics_"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrKLMWRmVeSWpSXmKPExsUyM+Jvja6FkEuwwfGJOhYve1ayOzB6LFny kymAMYrLJiU1J7MstUjfLoEr4+NT6YJj/hWzDi5haWDscu9i5OCQEDCR2PZRpIuRE8gUk7hw bz1bFyMXh5DAYUaJ0+sXskI4ixklDuxdwARSxSagJvH33mtWEFtEQFGi9dpnRhBbWMBWYkXb ekaIuJNE78a57BC2nsSpTz+YQWwWARWJM68+gtXwCvhKfJlyHWwmI9Dm76fWgNnMAuISt57M Z4K4SEBiyZ7zzBC2qMTLx/9YIWxFiZ1n25kh6vMl5lxrYIeYKShxcuYTlgmMQrOQjJqFpGwW kjKIuI7Egt2f2CBsbYllC18zw9hnDjxmQhZfwMi+ipE9NzEzJ73ccBMjMOgPbvmtu4Px1DmR Q4zSHCxK4rwf3joHCQmkJ5akZqemFqQWxReV5qQWH2Jk4uCUamC045VcEC8dbm57QrQqTbZ4 4TevrwGSHyf5MpyOWNy0OLPmwE23R1/uqfG4xcdeMfBdsY3nqUG65y9JTsmi+ym333o9E0tt uxWauvO1ib7vGXalJLv5MssFVujmr3Mp27JXwyngsfBF7pUrm8VUrK83FrtmHK+ZfSpKkV+z qOAw60bnBN1flUosxRmJhlrMRcWJAAElbFtIAgAA
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/3dsxoLrl25MpdcEsh_LvBCaICIk
Subject: [AVTCORE]  comments on draft-ietf-avtcore-srtp-ekt-02
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Apr 2014 15:14:22 -0000

--_000_9D746FA33933A44198056E8E591AAB5B1051FBF4ESESSMB305erics_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi,

Here are some comments on draft-ietf-avtcore-srtp-ekt-02:

2.2.1. last paragraph
"Implementation note: Because of the format of the Full EKT Field, a
packet containing the Full EKT Field MUST be sent when the ROC changes (i.e=
., every 2^32 packets)."
The ROC changes every 2^16 packets, not every 2^32 packets

2.5. the 3rd paragraph
"The Full EKT Field is appended to the SRTP or SRTCP payload and is
42, 50, or 58 octets long for AES-128, AES-192, or AES-192,
respectively..."
Should be "...42, 50, or 58 octets long for AES-128, AES-192, or AES-256 re=
spectively..."

2.6. the 1st paragraph
"A system using EKT has the SRTP keys distributed with EKT, rather
   than with call signaling.  This means a receiver can immediately
   decrypt an SRTP (or SRTCP packet) using that new key, provided the
   SRTP packet (or SRTCP packet) also contains the EKT key."

The SRTP or SRTCP packet does not contain the EKT key which is a key encryp=
ting key (as stated in section 2), rather the encrypted SRTP master key. Th=
e same goes for the 4th paragraph "...Inclusion of that Full EKT Field can =
be
   stopped early if the sender determines all receivers have received
   the new EKT key...".

Best regards,
Yi Cheng
Ericsson Research


--_000_9D746FA33933A44198056E8E591AAB5B1051FBF4ESESSMB305erics_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:SimSun;
	panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
	{font-family:SimSun;
	panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"\@SimSun";
	panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Courier New";}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:"Courier New";}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">Hi,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Here are some comments on draft-ietf-avtcore-srtp-ek=
t-02:<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">2.2.1. last paragraph<o:p></o:p></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-family:&quot;Times New Roman&quot;,&quot;serif&quot;">&#8220=
;</span><i><span lang=3D"EN" style=3D"font-size:10.0pt;font-family:&quot;Ar=
ial&quot;,&quot;sans-serif&quot;">Implementation note: Because of the forma=
t of the Full EKT
 Field, a<o:p></o:p></span></i></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><i><span lang=3D"=
EN" style=3D"font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-seri=
f&quot;">packet containing the Full EKT Field MUST be sent when the ROC cha=
nges (i.e., every 2^32 packets).</span></i><span lang=3D"EN" style=3D"font-=
family:&quot;Times New Roman&quot;,&quot;serif&quot;">&#8221;<o:p></o:p></s=
pan></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-family:&quot;Times New Roman&quot;,&quot;serif&quot;">The RO=
C changes every 2^16 packets, not every 2^32 packets<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-family:&quot;Times New Roman&quot;,&quot;serif&quot;"><o:p>&=
nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-family:&quot;Times New Roman&quot;,&quot;serif&quot;">2.5. t=
he 3<sup>rd</sup> paragraph
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><i><span lang=3D"=
EN" style=3D"font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-seri=
f&quot;">&#8220;The Full EKT Field is appended to the SRTP or SRTCP payload=
 and is<o:p></o:p></span></i></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><i><span lang=3D"=
EN" style=3D"font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-seri=
f&quot;">42, 50, or 58 octets long for AES-128, AES-192, or AES-192,<o:p></=
o:p></span></i></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><i><span lang=3D"=
EN" style=3D"font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-seri=
f&quot;">respectively&#8230;&#8221;<o:p></o:p></span></i></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-family:&quot;Times New Roman&quot;,&quot;serif&quot;">Should=
 be &#8220;&#8230;42, 50, or 58 octets long for AES-128, AES-192, or AES-25=
6 respectively&#8230;&#8221;<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><i><span lang=3D"=
EN" style=3D"font-family:&quot;Arial&quot;,&quot;sans-serif&quot;"><o:p>&nb=
sp;</o:p></span></i></p>
<p class=3D"MsoNormal"><span lang=3D"EN">2.6. the 1<sup>st</sup> paragraph<=
o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-size:10.0pt;font-family:&quot;Courier New&quot;">&#8220;</sp=
an><i><span lang=3D"EN" style=3D"font-size:10.0pt;font-family:&quot;Arial&q=
uot;,&quot;sans-serif&quot;">A system using EKT has the SRTP keys distribut=
ed with
 EKT, rather<o:p></o:p></span></i></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><i><span lang=3D"=
EN" style=3D"font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-seri=
f&quot;">&nbsp;&nbsp; than with call signaling.&nbsp; This means a receiver=
 can immediately<o:p></o:p></span></i></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><i><span lang=3D"=
EN" style=3D"font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-seri=
f&quot;">&nbsp;&nbsp; decrypt an SRTP (or SRTCP packet) using that new key,=
 provided the<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN" style=3D"font-size:10.0pt;font-=
family:&quot;Arial&quot;,&quot;sans-serif&quot;">&nbsp;&nbsp; SRTP packet (=
or SRTCP packet) also contains the EKT key</span></i><span lang=3D"EN" styl=
e=3D"font-size:10.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&q=
uot;">.&#8221;<o:p></o:p></span></p>
<pre style=3D"page-break-before:always"><span lang=3D"EN" style=3D"font-siz=
e:11.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&quot;">The SRT=
P or SRTCP packet does not contain the EKT key which is a key encrypting ke=
y (as stated in section 2)</span><span lang=3D"EN" style=3D"font-family:&qu=
ot;Times New Roman&quot;,&quot;serif&quot;">, rather the encrypted SRTP mas=
ter key. The same goes for the 4<sup>th</sup> paragraph </span><i><span lan=
g=3D"EN" style=3D"font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans=
-serif&quot;">&#8220;&#8230;Inclusion of that Full EKT Field can be<o:p></o=
:p></span></i></pre>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><i><span lang=3D"=
EN" style=3D"font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-seri=
f&quot;">&nbsp;&nbsp; stopped early if the sender determines all receivers =
have received<o:p></o:p></span></i></p>
<p class=3D"MsoNormal"><i><span lang=3D"EN" style=3D"font-size:10.0pt;font-=
family:&quot;Arial&quot;,&quot;sans-serif&quot;">&nbsp;&nbsp; the new EKT k=
ey&#8230;</span></i><span lang=3D"EN" style=3D"font-size:10.0pt;font-family=
:&quot;Times New Roman&quot;,&quot;serif&quot;">&#8221;.</span><span lang=
=3D"EN" style=3D"font-family:&quot;Times New Roman&quot;,&quot;serif&quot;"=
>
 &nbsp;</span><span lang=3D"EN"><o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-size:10.0pt;font-family:&quot;Courier New&quot;"><o:p>&nbsp;=
</o:p></span></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-size:10.0pt;font-family:&quot;Courier New&quot;">Best regard=
s,<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-size:10.0pt;font-family:&quot;Courier New&quot;">Yi Cheng<o:=
p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"page-break-before:always"><span lang=3D"EN"=
 style=3D"font-size:10.0pt;font-family:&quot;Courier New&quot;">Ericsson Re=
search<o:p></o:p></span></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_9D746FA33933A44198056E8E591AAB5B1051FBF4ESESSMB305erics_--


From nobody Mon Apr 14 21:59:25 2014
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8151A1A0765; Mon, 14 Apr 2014 21:59:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.174
X-Spam-Level: 
X-Spam-Status: No, score=-2.174 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.272, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uO0xdpa7L3CX; Mon, 14 Apr 2014 21:59:01 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) by ietfa.amsl.com (Postfix) with ESMTP id 0FC3D1A072D; Mon, 14 Apr 2014 21:59:01 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 6BE661801C6; Mon, 14 Apr 2014 21:58:37 -0700 (PDT)
To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org
X-PHP-Originating-Script: 6000:ams_util_lib.php
From: rfc-editor@rfc-editor.org
Message-Id: <20140415045837.6BE661801C6@rfc-editor.org>
Date: Mon, 14 Apr 2014 21:58:37 -0700 (PDT)
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/oOWd5HxQpDR-6IbY-qQC48Gu4jY
Cc: drafts-update-ref@iana.org, avt@ietf.org, rfc-editor@rfc-editor.org
Subject: [AVTCORE] RFC 7201 on Options for Securing RTP Sessions
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Apr 2014 04:59:14 -0000

A new Request for Comments is now available in online RFC libraries.

        
        RFC 7201

        Title:      Options for Securing RTP Sessions 
        Author:     M. Westerlund, C. Perkins
        Status:     Informational
        Stream:     IETF
        Date:       April 2014
        Mailbox:    magnus.westerlund@ericsson.com, 
                    csp@csperkins.org
        Pages:      37
        Characters: 92462
        Updates/Obsoletes/SeeAlso:   None

        I-D Tag:    draft-ietf-avtcore-rtp-security-options-10.txt

        URL:        http://www.rfc-editor.org/rfc/rfc7201.txt

The Real-time Transport Protocol (RTP) is used in a large number of
different application domains and environments.  This heterogeneity
implies that different security mechanisms are needed to provide
services such as confidentiality, integrity, and source
authentication of RTP and RTP Control Protocol (RTCP) packets
suitable for the various environments.  The range of solutions makes
it difficult for RTP-based application developers to pick the most
suitable mechanism.  This document provides an overview of a number
of security solutions for RTP and gives guidance for developers on
how to choose the appropriate security mechanism.

This document is a product of the Audio/Video Transport Core Maintenance Working Group of the IETF.


INFORMATIONAL: This memo provides information for the Internet community.
It does not specify an Internet standard of any kind. Distribution of
this memo is unlimited.

This announcement is sent to the IETF-Announce and rfc-dist lists.
To subscribe or unsubscribe, see
  http://www.ietf.org/mailman/listinfo/ietf-announce
  http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist

For searching the RFC series, see http://www.rfc-editor.org/search
For downloading RFCs, see http://www.rfc-editor.org/rfc.html

Requests for special distribution should be addressed to either the
author of the RFC in question, or to rfc-editor@rfc-editor.org.  Unless
specifically noted otherwise on the RFC itself, all RFCs are for
unlimited distribution.


The RFC Editor Team
Association Management Solutions, LLC



From nobody Mon Apr 14 21:59:30 2014
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 253291A06A3; Mon, 14 Apr 2014 21:59:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.174
X-Spam-Level: 
X-Spam-Status: No, score=-2.174 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.272, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PqqH_9vwHKT3; Mon, 14 Apr 2014 21:59:18 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1900:3001:11::31]) by ietfa.amsl.com (Postfix) with ESMTP id 052DF1A074E; Mon, 14 Apr 2014 21:59:18 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 4A8881801CF; Mon, 14 Apr 2014 21:58:54 -0700 (PDT)
To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org
X-PHP-Originating-Script: 6000:ams_util_lib.php
From: rfc-editor@rfc-editor.org
Message-Id: <20140415045854.4A8881801CF@rfc-editor.org>
Date: Mon, 14 Apr 2014 21:58:54 -0700 (PDT)
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/GTW4gVxhBpiteeXlBqMnkxCLnzc
Cc: drafts-update-ref@iana.org, avt@ietf.org, rfc-editor@rfc-editor.org
Subject: [AVTCORE] RFC 7202 on Securing the RTP Framework: Why RTP Does Not Mandate a Single Media Security Solution
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Apr 2014 04:59:27 -0000

A new Request for Comments is now available in online RFC libraries.

        
        RFC 7202

        Title:      Securing the RTP Framework: Why 
                    RTP Does Not Mandate a Single 
                    Media Security Solution 
        Author:     C. Perkins, M. Westerlund
        Status:     Informational
        Stream:     IETF
        Date:       April 2014
        Mailbox:    csp@csperkins.org, 
                    magnus.westerlund@ericsson.com
        Pages:      10
        Characters: 23428
        Updates/Obsoletes/SeeAlso:   None

        I-D Tag:    draft-ietf-avt-srtp-not-mandatory-16.txt

        URL:        http://www.rfc-editor.org/rfc/rfc7202.txt

This memo discusses the problem of securing real-time multimedia
sessions.  It also explains why the Real-time Transport Protocol
(RTP) and the associated RTP Control Protocol (RTCP) do not mandate a
single media security mechanism.  This is relevant for designers and
reviewers of future RTP extensions to ensure that appropriate
security mechanisms are mandated and that any such mechanisms are
specified in a manner that conforms with the RTP architecture.

This document is a product of the Audio/Video Transport Core Maintenance Working Group of the IETF.


INFORMATIONAL: This memo provides information for the Internet community.
It does not specify an Internet standard of any kind. Distribution of
this memo is unlimited.

This announcement is sent to the IETF-Announce and rfc-dist lists.
To subscribe or unsubscribe, see
  http://www.ietf.org/mailman/listinfo/ietf-announce
  http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist

For searching the RFC series, see http://www.rfc-editor.org/search
For downloading RFCs, see http://www.rfc-editor.org/rfc.html

Requests for special distribution should be addressed to either the
author of the RFC in question, or to rfc-editor@rfc-editor.org.  Unless
specifically noted otherwise on the RFC itself, all RFCs are for
unlimited distribution.


The RFC Editor Team
Association Management Solutions, LLC



From nobody Tue Apr 22 04:44:25 2014
Return-Path: <kmigoe@nsa.gov>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67EF61A03B6 for <avt@ietfa.amsl.com>; Tue, 22 Apr 2014 04:44:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.472
X-Spam-Level: 
X-Spam-Status: No, score=-4.472 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.272] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RFWsYK-x31NP for <avt@ietfa.amsl.com>; Tue, 22 Apr 2014 04:44:18 -0700 (PDT)
Received: from emvm-gh1-uea09.nsa.gov (emvm-gh1-uea09.nsa.gov [63.239.67.10]) by ietfa.amsl.com (Postfix) with ESMTP id A8CE11A03A6 for <avt@ietf.org>; Tue, 22 Apr 2014 04:44:17 -0700 (PDT)
X-TM-IMSS-Message-ID: <e1d48d9300041693@nsa.gov>
Received: from MSHT-GH1-UEA01.corp.nsa.gov ([10.215.227.18]) by nsa.gov ([63.239.67.10]) with ESMTP (TREND IMSS SMTP Service 7.1; TLSv1/SSLv3 AES128-SHA (128/128)) id e1d48d9300041693 ; Tue, 22 Apr 2014 07:46:27 -0400
Received: from MSMR-GH1-UEA07.corp.nsa.gov (10.215.224.5) by MSHT-GH1-UEA01.corp.nsa.gov (10.215.227.18) with Microsoft SMTP Server (TLS) id 14.2.342.3; Tue, 22 Apr 2014 07:44:11 -0400
Received: from MSMR-GH1-UEA03.corp.nsa.gov ([10.215.224.3]) by MSMR-GH1-UEA07.corp.nsa.gov ([10.215.224.5]) with mapi id 14.01.0289.001; Tue, 22 Apr 2014 07:44:10 -0400
From: "Igoe, Kevin M." <kmigoe@nsa.gov>
To: "avt@ietf.org" <avt@ietf.org>
Thread-Topic: [AVTCORE] I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
Thread-Index: AQHPTbHspUAtozygJEipKqGk6BItqZr9E8iAgARm7oCAAFT1AIASt6KQgAkcgNA=
Date: Tue, 22 Apr 2014 11:44:09 +0000
Message-ID: <3C4AAD4B5304AB44A6BA85173B4675CABAA34EF5@MSMR-GH1-UEA03.corp.nsa.gov>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.215.224.46]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/MyIq1d5WEJ1gdT_WSVJy_Rkd0nA
Subject: [AVTCORE] FW:  I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Apr 2014 11:44:23 -0000

QXBvbG9naWVzIHRvIHRoZSBtYWlsaW5nIGxpc3QuICBBcHBhcmVudGx5IHdoZW4gSSBoaXQgInJl
cGx5IHRvIGFsbCINCmF2dEBpZXRmLm9yZyB3YXNuJ3QgaW5jbHVkZWQgb24gdGhlICJUbyIgbGlz
dC4gIExpdmUgYW5kIGxlYXJuIQ0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZy
b206IElnb2UsIEtldmluIE0uDQo+IFNlbnQ6IFdlZG5lc2RheSwgQXByaWwgMTYsIDIwMTQgMTI6
NTMgUE0NCj4gVG86ICdKb2huIE1hdHRzc29uJw0KPiBTdWJqZWN0OiBSRTogW0FWVENPUkVdIEkt
RCBBY3Rpb246IGRyYWZ0LWlldGYtYXZ0Y29yZS1zcnRwLWFlcy1nY20tDQo+IDExLnR4dA0KPiAN
Cj4gSm9objoNCj4gDQo+ICAgSGF2ZSB5b3UgZXZlciBoZWFyZCBvZiB0aGUgSm91cm5hbCBvZiBJ
cnJlcHJvZHVjaWJsZSBSZXN1bHRzPw0KPiBXaGVuIERhdmlkIGFuZCBJIHJldmlld2VkIHRoZSBQ
IE1BWCBmaWd1cmVzLCBuZWl0aGVyIG9mIHVzIGNvdWxkDQo+IHJlcHJvZHVjZSB0aGUgbG9naWMg
dGhhdCBsZWQgdG8gb25lZSBvZiB0aGUgUCBNQVggZmlndXJlcyBpbiB0aGUgZHJhZnQNCj4gKEkg
YmVsaWV2ZSBpdCB3YXMgdGhlIENDTSBmaWd1cmUpLg0KPiANCj4gUmF0aGVyIHRoYW4gcmlzayBw
dWJsaXNoaW5nIGFuIGVycm9uZW91cyBmaWd1cmUsIHdlIGRlY2lkZWQgdG8gYXZvaWQNCj4gdGhl
IGlzc3VlIGJ5IHJlbW92aW5nIGFsbCByZWZlcmVuY2VzIHRvIFAgTUFYLiBUaGUgdHdvIGZpZ3Vy
ZXMgd2UgaGFkDQo+IGNhbGN1bGF0ZWQgb25seSBkaWZmZXJlZCBieSBhIGZldyBieXRlcyBhbmQg
d2VyZSB2YXN0bHkgbGFyZ2VyIHRoYW4gdGhlDQo+IG1heGltdW0gZGF0YSBzaXplIG9uZSB3b3Vs
ZCBzZWUgaW4gU1JUUC4NCj4gQXBwYXJlbnRseSB3ZSBtaXNzZWQgYXQgbGVhc3Qgb25lIHJlZmVy
ZW5jZS4gIExldCBtZSBrbm93IHdoZXJlIHlvdQ0KPiBmb3VuZCBpdCBhbmQgSSB3aWxsIHJlbW92
ZSBpdC4NCj4gDQo+IE1lYSBjdWxwYS4NCj4gDQo+IA0KPiA+IC0tLS0tT3JpZ2luYWwgTWVzc2Fn
ZS0tLS0tDQo+ID4gRnJvbTogYXZ0IFttYWlsdG86YXZ0LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJl
aGFsZiBPZiBKb2huIE1hdHRzc29uDQo+ID4gU2VudDogRnJpZGF5LCBBcHJpbCAwNCwgMjAxNCAx
MDo0MiBBTQ0KPiA+IFRvOiBhdnRAaWV0Zi5vcmcNCj4gPiBTdWJqZWN0OiBSZTogW0FWVENPUkVd
IEktRCBBY3Rpb246IGRyYWZ0LWlldGYtYXZ0Y29yZS1zcnRwLWFlcy1nY20tDQo+ID4gMTEudHh0
DQo+ID4NCj4gPiBBZnRlciBjaGVja2luZyBtb3JlIGNhcmVmdWxseSBJIHNlZSB0aGF0IHNvbWUg
b2YgbXkgcHJldmlvdXMgY29tbWVudHMNCj4gPiB3ZXJlIG9ubHkgcGFydGx5IGZpeGVkLg0KPiA+
DQo+ID4gVGhlIFBfTUFYIG1pc2FsaWdubWVudCAob3I/KSB3aXRoIFJGQzUxMTYgbmVlZHMgdG8g
YmUgYWRkcmVzc2VkIGluDQo+ID4gc29tZSB3YXkuDQo+ID4NCj4gPiBDaGVlcnMgSm9obg0KPiA+
DQo+ID4NCj4gPiBQcmV2aW91cyBjb21tZW50cyBub3QgYWRkcmVzc2VkIG9yIG9ubHkgcGFydGx5
IGZpeGVkDQo+ID4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4NCj4gPiAtIFtSRkM1MTE2XSBz
dGF0ZXMgdGhhdCBQX01BWCBpcyAyXjI0IC0gMSBvY3RldHMgZm9yIENDTS4NCj4gPg0KPiA+IFdo
aWxlIHlvdXIgZHJhZnQgc3RhdGVzDQo+ID4gU2VjdGlvbiA2OiBQX01BWCA9IDJeMjgg4oCTIDE2
DQo+ID4gU2VjdGlvbiAxMTogQ19NQVggPSAyXjI4DQo+ID4gU2VjdGlvbiAxNDogTWF4aW11bSBi
bG9jayBjb3VudGVyID0gMl4yNC0xDQo+ID4NCj4gPiBBZnRlciByZWFkaW5nIHRoZSBOSVNUIHNw
ZWNpZmljYXRpb24gZm9yIENDTSBJIHNlZSB0aGF0IFBfTUFYIGlzIG5vdA0KPiA+IG9ubHkgYm91
bmQgYnkgdGhlIGxlbmd0aCBvZiB0aGUgYmxvY2sgY291bnRlciBidXQgYWxzbyB0aGUgdmFyaWFi
bGUNCj4gcSwNCj4gPiB3aGljaCBpbg0KPiA+IFJGQzUxMTYgaXMgc2V0IHRvIDMgPT4gUF9NQVgg
PCAyXjI0IC0gMSBvY3RldHMuIFRoZSB2YWx1ZXMgaW4gUkZDNTExNg0KPiA+IHRoZXJlZm9yZSBz
ZWVtIGNvcnJlY3QgdG8gbWUgYW5kIG11c3Qgbm90IGJlIGV4Y2VlZGVkICh1bmxlc3MgeW91DQo+
ID4gaW5jcmVhc2UgcSkuDQo+ID4NCj4gPiBUaGUgdmFsdWVzIGluIHlvdXIgZHJhZnQgc2hvdWxk
IHRoZXJlZm9yZSBwcm9iYWJseSBiZSAoYXNzdW1pbmcgeW91DQo+ID4gd2FudCBibG9jayBsZW5n
dGggYWxpZ25tZW50KToNCj4gPg0KPiA+IFBfTUFYIChhbmQga2V5c3RyZWFtKSA9IDJeMjQtMTYg
b2N0ZXRzIENfTUFYID0gMl4yNCBvY3RldHMgTWF4aW11bQ0KPiA+IGJsb2NrIGNvdW50ZXIgPSAy
XjIwLTENCj4gPg0KPiA+IEFzIHlvdSBoYXZlIG5vdCBmaXhlZCB0aGlzLCBjYW4geW91IHBsZWFz
ZSBjb21tZW50IGhvdyB0aGUgdmFsdWVzIGFyZQ0KPiA+IGluIGxpbmUgd2l0aCBSRkM1MTE2PyBV
bmxlc3MgdGhleSBhcmUsIHRoaXMgbmVlZHMgdG8gYmUgYWRkcmVzc2VkIGluDQo+ID4gc29tZSB3
YXkuDQo+ID4NCj4gPiA+IC0gVGhlIHZhbHVlcyBmb3IgdGhlIG1heGltdW0gbnVtYmVyIG9uIGlu
dm9jYXRpb25zICgyXjQ4IGFuZCAyXjMxKQ0KPiA+IGZvcg0KPiA+ID4gR0NNXzggZG8gbm90IHNl
ZW0gdG8gYWdyZWUgd2l0aCB0aGUgY29uc3RyYWludHMgaW4gQXBwZW5kaXggQyBvZg0KPiA+ID4g
ODAwLTM4RC4gVGhpcyBzZWVtcyB0byBiZSBtaXNzaW5nIGluIFJGQzUyODUgYXMgd2VsbC4NCj4g
Pg0KPiA+IFlvdSBoYXZlIG9ubHkgdXBkYXRlZCBwYXJ0cyBvZiB0aGUgZG9jdW1lbnQuIFNlY3Rp
b24gMTEgYW5kIFNlY3Rpb24NCj4gPiAxMy4xLCBzdGlsbCBoYXMgKDJeNDggYW5kIDJeMzEpIGZv
ciBHQ01fOCBhbmQgR0NNIGluIGdlbmVyYWwuIE1heWJlDQo+ID4gYWRkIGEgc3BlY2lmaWMgdmFs
dWUgZm9yIEdDTV84IGluIHNlY3Rpb24gMTEuDQo+ID4NCj4gPiA+IC0gVGhlIHZhbHVlcyBmb3Ig
dGhlIG1heGltdW0gQ2lwaGVydGV4dCBsZW5ndGggZm9yIEdDTV84IGRvIG5vdA0KPiBzZWVtDQo+
ID4gPiB0byBhZ3JlZSB3aXRoIHRoZSBjb25zdHJhaW50cyBpbiBBcHBlbmRpeCBDIG9mIDgwMC0z
OEQ6ICJGb3IgYW55DQo+ID4gPiBpbXBsZW1lbnRhdGlvbiB0aGF0IHN1cHBvcnRzIDMyLWJpdCBv
ciA2NC1iaXQgdGFncywgb25lIG9mIHRoZSByb3dzDQo+ID4gaW4NCj4gPiA+IFRhYmxlIDEgb3Ig
VGFibGUgMiwgcmVzcGVjdGl2ZWx5LCBzaGFsbCBiZSBlbmZvcmNlZC4iIFRoaXMgc2VlbXMgdG8N
Cj4gPiBiZQ0KPiA+ID4gbWlzc2luZyBpbiBSRkM1Mjg1IGFzIHdlbGwuDQo+ID4NCj4gPiBUbyBi
ZSBtb3JlIHNwZWNpZmljLCBJIG1lYW4gdGhlIGdlbmVyYWwgR0NNIHZhbHVlIDJeMzYtMTYgZ2l2
ZW4gaW4NCj4gPiBTZWN0aW9uIDExLiBNYXliZSBhZGQgYSBzcGVjaWZpYyB2YWx1ZSBmb3IgR0NN
XzguDQo+ID4NCj4gPiA+IC0gW3M5LjIsIHMxMC4yLCBzMTAuM10gVGhlIFNSVChDKVAgTUtJIGFu
ZCB0aGUgU1JUKEMpUA0KPiA+ID4gYXV0aGVudGljYXRpb24gdGFnIGJvdGggaGF2ZSB2YXJpYWJs
ZSBsZW5ndGhzIChpLmUuIG5vdCAzMiBiaXQpLg0KPiA+DQo+ID4gMTAuMiBzdGlsbCBzdGF0ZXM6
IOKAnFRoZSAzMi1iaXQgb3B0aW9uYWwgU1JUQ1AgTUtJIGluZGV4IGFuZCAzMi1iaXQNCj4gPiBT
UlRDUCBhdXRoZW50aWNhdGlvbiB0YWfigJ0NCj4gPg0KPiA+ID4gLSBbRmlndXJlIDIsNCw1XSBJ
IHN1Z2dlc3Qgd3JpdGluZyAiU1JUUCBhdXRoZW50aWNhdGlvbiB0YWciIGFuZA0KPiA+ID4gIlNS
VENQIGF1dGhlbnRpY2F0aW9uIHRhZyIgaW5zdGVhZCBvZiBqdXN0ICJhdXRoZW50aWNhdGlvbiB0
YWciLg0KPiA+DQo+ID4gRmlndXJlIDYgc3RpbGwgaGFzIOKAnGF1dGhlbnRpY2F0aW9uIHRhZ+KA
nSBpbnN0ZWFkIG9mIOKAnFNSVENQDQo+ID4gYXV0aGVudGljYXRpb24gdGFn4oCdDQo+ID4NCj4g
PiA+IC0gW3MxM10gSW4gdGhlIHRhYmxlcywgc2hvdWxkbuKAmXQg4oCdRGVmYXVsdCBrZXkgbGlm
ZXRpbWXigJ0gYmUg4oCdTWF4aW11bQ0KPiA+ID4ga2V5IGxpZmV0aW1l4oCdDQo+ID4NCj4gPiBZ
b3UgbWFkZSB0aGlzIGNoYW5nZSBpbiAxMy4yIGJ1dCBub3QgaW4gMTMuMQ0KPiA+DQo+ID4gPiAt
IFtzMTUuM10gSWYgdGhlcmUgaXMgYSBkZWZhdWx0IGtleSBsZW5ndGgsIHRoZXJlIHNob3VsZCBh
bHNvIGJlIGENCj4gPiA+IGRlZmF1bHQgIkFFQUQgYXV0aGVudGljYXRpb24gdGFnIGxlbmd0aCIN
Cj4gPg0KPiA+IFlvdSBoYXZlIGluc3RlYWQgYWRkZWQg4oCcRGVmYXVsdCBBdXRoIFRhZyBMZW5n
dGjigJ0gPSAxNiwgd2hpY2ggSSB0aGluaw0KPiA+IGlzIHdyb25nLiBUaGUgZGVmYXVsdCDigJxB
dXRoZW50aWNhdGlvbiB0YWcgbGVuZ3Ro4oCdIHdoZW4gdXNpbmcgQUVBRA0KPiA+IHNob3VsZCBi
ZSAwLg0KPiA+DQo+ID4gPiAtIFtzMTddIElmIHlvdSB3b3VsZCBsaWtlIHRvIHRoYW5rIG15IEVy
aWNzc29uIGNvbGxlYWd1ZXMsIHRoZWlyDQo+ID4gbmFtZXMNCj4gPiA+IGFyZSAiV2VzdGVybHVu
ZCIgYW5kICJPaGxzc29uIg0KPiA+DQo+ID4NCj4gPg0KPiA+DQo+ID4NCj4gPg0KPiA+IE9uIDA0
LzA0LzE0IDExOjM3LCAiSm9obiBNYXR0c3NvbiIgPGpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29t
Pg0KPiB3cm90ZToNCj4gPg0KPiA+ID5IaSwNCj4gPiA+DQo+ID4gPkluIGdlbmVyYWwgSSB0aGlu
ayB0aGlzIHVwZGF0ZWQgdmVyc2lvbiBsb29rcyBnb29kIQ0KPiA+ID4NCj4gPiA+SeKAmWxsIGhh
dmUgYXQgbGVhc3Qgb25lIHJlbWFpbmluZyBpc3N1ZSAocmVsYXRpbmcgdG8gUkZDNTExNikgdGhh
dCBJDQo+ID4gPmNvbW1lbnRlZCBvbiBiZWZvcmUgYW5kIGRpZCBub3QgZ2V0IGFueSByZXBseSBv
biwgYnV0IEnigJlsbCBtYWtlIGENCj4gPiA+c2VwYXJhdGUgcG9zdCBhYm91dCB0aGF0IHdoZW4g
SSBoYXZlIGxvb2tlZCB0aHJvdWdoIG15IHByZXZpb3VzDQo+ID4gY29tbWVudHMuDQo+ID4gPg0K
PiA+ID5DaGVlcnMgSm9obg0KPiA+ID4NCj4gPiA+DQo+ID4gPkhlcmUgYXJlIHNvbWUgY29tbWVu
dHMgb24gdGhlIG5ldyB0ZXh0Og0KPiA+ID4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiAtDQo+ID4gPg0KPiA+ID4t
IFtzM10g4oCcQUVTLUdDTSBhbmQgQUVTLUNDTSB0byB3b3JrIHdpdGggU0RFUywgRFRMUyBhbmQg
TUlLRVnigJ0NCj4gPiA+DQo+ID4gPi0+IOKAnEFFUy1HQ00gYW5kIEFFUy1DQ00gdG8gd29yayB3
aXRoIFNERVMsIERUTFMtU1JUUCBhbmQgTUlLRVnigJ0NCj4gPiA+DQo+ID4gPi0gW3M5LjJdIOKA
nFBheWxvYWQgVHlwZSBQVCAoOCBiaXRzKeKAnQ0KPiA+ID4tPiDigJxQYXlsb2FkIFR5cGUgUFQg
KDcgYml0cynigJ0NCj4gPiA+DQo+ID4gPi0gW3MxMC40XSDigJxTUlRDUCBjeWNsZXMgYmFjayB0
byB0aGUgc3RhcnRpbmcgdmFsdWXigJ0NCj4gPiA+LT4g4oCcU1JUQ1AgaW5kZXggY3ljbGVzIGJh
Y2sgdG8gdGhlIHN0YXJ0aW5nIHZhbHVl4oCdDQo+ID4gPg0KPiA+ID4tIOKAnFNSVENQIE1LSeKA
nSwgaXMgZm9yIHNvbWUgcmVhc29uIGNhbGxlZCDigJxTUlRDUCBNS0kgaW5kZXjigJ0/DQo+ID4g
Pg0KPiA+ID4tIOKAnG9wdGlvbmFs4oCdIGFuZCDigJxPUFRJT05BTOKAnSBpcyBib3RoIHVzZWQg
aW4gdGhlIGZpZ3VyZXM6DQo+ID4gPg0KPiA+ID7igJxTUlRQIE1LSSAoT1BUSU9OQUwp4oCdDQo+
ID4gPuKAnFNSVENQIE1LSSAob3B0aW9uYWwp4oCdDQo+ID4gPuKAnGNvbnRyaWJ1dGluZyBzb3Vy
Y2UgKENTUkMpIGlkZW50aWZpZXJzIChvcHRpb25hbCnigJ0NCj4gPiA+4oCcUlRQIGV4dGVuc2lv
biAoT1BUSU9OQUwp4oCdDQo+ID4gPg0KPiA+ID4tIFtzMTQuMV0g4oCcSVYgdW5pcXVlbmVzcyBp
cyBlbnN1cmVkIGJ5IHRoZSBpbmNsdXNpb24gb2YNCj4gPiAJU1NSQy9ST0MvU0VRIG9yDQo+ID4g
PlNSVENQIEluZGV4IGluIHRoZSBJVuKAnQ0KPiA+ID4NCj4gPiA+QXMgU1NSQyBpcyB1c2VkIGV2
ZW4gZm9yIFNSVENQLCBtYXliZSBiZXR0ZXIgdG8gd3JpdGUg4oCcU1NSQy9ST0MvU0VRDQo+ID4g
Pm9yIFNTUkMvU1JUQ1AgSW5kZXjigJ0NCj4gPiA+DQo+ID4gPi0gW3MxNC4xXSDigJx0aGUgZmly
c3QgYmxvY2sgb2Yga2V5IHByb2R1Y2Vk4oCdDQo+ID4gPi0+4oCcdGhlIGZpcnN0IGJsb2NrIG9m
IGtleXN0cmVhbSBwcm9kdWNlZOKAnQ0KPiA+ID4NCj4gPiA+LSBbVGFibGUgMTVdIEZvciAxNiBi
eXRlIHRhZ3MsIHRoZSB2YWx1ZXMgZm9yIENDTSBhbmQgR0NNIGFyZQ0KPiBzd2FwcGVkLg0KPiA+
ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4gPg0KPiA+ID5KT0hOIE1BVFRTU09ODQo+
ID4gPk1TYyBFbmdpbmVlcmluZyBQaHlzaWNzLCBNU2MgQnVzaW5lc3MgQWRtaW5pc3RyYXRpb24g
YW5kIEVjb25vbWljcw0KPiA+ID5Fcmljc3NvbiBJRVRGIFNlY3VyaXR5IENvb3JkaW5hdG9yIFNl
bmlvciBSZXNlYXJjaGVyLCBTZWN1cml0eQ0KPiA+ID4NCj4gPiA+RXJpY3Nzb24gQUINCj4gPiA+
U2VjdXJpdHkgUmVzZWFyY2gNCj4gPiA+RsOkcsO2Z2F0YW4gNg0KPiA+ID5TRS0xNjQgODAgU3Rv
Y2tob2xtLCBTd2VkZW4NCj4gPiA+UGhvbmUgKzQ2IDEwIDcxIDQzIDUwMQ0KPiA+ID5TTVMvTU1T
ICs0NiA3NiAxMSA1MyA1MDENCj4gPiA+am9obi5tYXR0c3NvbkBlcmljc3Nvbi5jb20NCj4gPiA+
d3d3LmVyaWNzc29uLmNvbSA8aHR0cDovL3d3dy5lcmljc3Nvbi5jb20vPg0KPiA+ID4NCj4gPiA+
DQo+ID4gPg0KPiA+ID4NCj4gPiA+DQo+ID4gPg0KPiA+ID5PbiAwMS8wNC8xNCAxNjoyNCwgIk1h
Z251cyBXZXN0ZXJsdW5kIg0KPiA+IDxtYWdudXMud2VzdGVybHVuZEBlcmljc3Nvbi5jb20+DQo+
ID4gPndyb3RlOg0KPiA+ID4NCj4gPiA+PldHLA0KPiA+ID4+DQo+ID4gPj5BcyByZXN1bHQgb2Yg
dGhlIEFEIHJldmlldyBhbmQgc29tZSBjb21tZW50cyB3aXRoaW4gdGhlIFdHLCBhDQo+IG51bWJl
cg0KPiA+ID4+b2YgY2hhbmdlcyBoYXMgYmVlbiBkb25lIHRvIHRoaXMgZG9jdW1lbnQuIEkgd2ls
bCBsZXQgdGhlIGF1dGhvcnMNCj4gPiA+PmNvbW1lbnQgb24gd2hhdCBjaGFuZ2VzIGhhcyBiZWVu
IGRvbmUuDQo+ID4gPj4NCj4gPiA+PkFueXdheSwgYmVmb3JlIHByb2dyZXNzaW5nIHRvIElFVEYg
bGFzdCBjYWxsLCBJIGxpa2UgdG8gaGF2ZSB0aGUgV0cNCj4gPiA+PmhhdmUgb25lIHdlZWsgdW50
aWwgdGhlIDh0aCBvZiBBcHJpbCB0byByZXZpZXcgdGhlIGNoYW5nZXMgdG8gdGhpcw0KPiA+IGRv
Y3VtZW50Lg0KPiA+ID4+U28gcGxlYXNlIGFueSBjb21tZW50cyBvbiB0aGVzZSBjaGFuZ2VzIGFz
IHNvb24gYXMgcG9zc2libGUuDQo+ID4gPj4NCj4gPiA+PkNoZWVycw0KPiA+ID4+DQo+ID4gPj5N
YWdudXMNCj4gPiA+Pg0KPiA+ID4+T24gMjAxNC0wNC0wMSAxNTo1NCwgaW50ZXJuZXQtZHJhZnRz
QGlldGYub3JnIHdyb3RlOg0KPiA+ID4+Pg0KPiA+ID4+PiBBIE5ldyBJbnRlcm5ldC1EcmFmdCBp
cyBhdmFpbGFibGUgZnJvbSB0aGUgb24tbGluZSBJbnRlcm5ldC0NCj4gRHJhZnRzDQo+ID4gPj4+
ZGlyZWN0b3JpZXMuDQo+ID4gPj4+ICBUaGlzIGRyYWZ0IGlzIGEgd29yayBpdGVtIG9mIHRoZSBB
dWRpby9WaWRlbyBUcmFuc3BvcnQgQ29yZQ0KPiA+ID4+Pk1haW50ZW5hbmNlIFdvcmtpbmcgR3Jv
dXAgb2YgdGhlIElFVEYuDQo+ID4gPj4+DQo+ID4gPj4+ICAgICAgICAgVGl0bGUgICAgICAgICAg
IDogQUVTLUdDTSBhbmQgQUVTLUNDTSBBdXRoZW50aWNhdGVkDQo+ID4gRW5jcnlwdGlvbg0KPiA+
ID4+PmluIFNlY3VyZSBSVFAgKFNSVFApDQo+ID4gPj4+ICAgICAgICAgQXV0aG9ycyAgICAgICAg
IDogRGF2aWQgQS4gTWNHcmV3DQo+ID4gPj4+ICAgICAgICAgICAgICAgICAgICAgICAgICAgS2V2
aW4gTS4gSWdvZQ0KPiA+ID4+PiAJRmlsZW5hbWUgICAgICAgIDogZHJhZnQtaWV0Zi1hdnRjb3Jl
LXNydHAtYWVzLWdjbS0xMS50eHQNCj4gPiA+Pj4gCVBhZ2VzICAgICAgICAgICA6IDM2DQo+ID4g
Pj4+IAlEYXRlICAgICAgICAgICAgOiAyMDE0LTA0LTAxDQo+ID4gPj4+DQo+ID4gPj4+IEFic3Ry
YWN0Og0KPiA+ID4+PiAgICBUaGlzIGRvY3VtZW50IGRlZmluZXMgaG93IEFFUy1HQ00gYW5kIEFF
Uy1DQ00gQXV0aGVudGljYXRlZA0KPiA+ID4+PiAgICBFbmNyeXB0aW9uIHdpdGggQXNzb2NpYXRl
ZCBEYXRhIGFsZ29yaXRobXMgY2FuIGJlIHVzZWQgdG8NCj4gPiBwcm92aWRlDQo+ID4gPj4+ICAg
IGNvbmZpZGVudGlhbGl0eSBhbmQgZGF0YSBhdXRoZW50aWNhdGlvbiBpbiB0aGUgU1JUUCBwcm90
b2NvbC4NCj4gPiA+Pj4NCj4gPiA+Pj4NCj4gPiA+Pj4NCj4gPiA+Pj4gVGhlIElFVEYgZGF0YXRy
YWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6DQo+ID4gPj4+IGh0dHBzOi8vZGF0
YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtYXZ0Y29yZS1zcnRwLWFlcy1nY20vDQo+
ID4gPj4+DQo+ID4gPj4+IFRoZXJlJ3MgYWxzbyBhIGh0bWxpemVkIHZlcnNpb24gYXZhaWxhYmxl
IGF0Og0KPiA+ID4+PiBodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWF2dGNv
cmUtc3J0cC1hZXMtZ2NtLTExDQo+ID4gPj4+DQo+ID4gPj4+IEEgZGlmZiBmcm9tIHRoZSBwcmV2
aW91cyB2ZXJzaW9uIGlzIGF2YWlsYWJsZSBhdDoNCj4gPiA+Pj4gaHR0cDovL3d3dy5pZXRmLm9y
Zy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1hdnRjb3JlLXNydHAtYWVzLWdjbS0NCj4gMQ0KPiA+
ID4+PiAxDQo+ID4gPj4+DQo+ID4gPj4+DQo+ID4gPj4+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5
IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mDQo+ID4gPj4+c3VibWlz
c2lvbiAgdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBh
dA0KPiA+ID4+PnRvb2xzLmlldGYub3JnLg0KPiA+ID4+Pg0KPiA+ID4+PiBJbnRlcm5ldC1EcmFm
dHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255bW91cyBGVFAgYXQ6DQo+ID4gPj4+IGZ0cDov
L2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvDQo+ID4gPj4+DQo+ID4gPj4+IF9fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gPj4+IEF1ZGlvL1Zp
ZGVvIFRyYW5zcG9ydCBDb3JlIE1haW50ZW5hbmNlIGF2dEBpZXRmLm9yZw0KPiA+ID4+PiBodHRw
czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2F2dA0KPiA+ID4+Pg0KPiA+ID4+Pg0K
PiA+ID4+DQo+ID4gPj4NCj4gPiA+Pi0tDQo+ID4gPj4NCj4gPiA+Pk1hZ251cyBXZXN0ZXJsdW5k
DQo+ID4gPj4NCj4gPiA+Pi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gLQ0KPiA+ID4+LQ0KPiA+IC0NCj4gPiA+PlNl
cnZpY2VzLCBNZWRpYSBhbmQgTmV0d29yayBmZWF0dXJlcywgRXJpY3Nzb24gUmVzZWFyY2ggRUFC
L1RYTQ0KPiA+ID4+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiAtDQo+ID4gPj4tDQo+ID4gLQ0KPiA+ID4+RXJpY3Nz
b24gQUIgICAgICAgICAgICAgICAgIHwgUGhvbmUgICs0NiAxMCA3MTQ4Mjg3DQo+ID4gPj5Gw6Ry
w7ZnYXRhbiA2ICAgICAgICAgICAgICAgICB8IE1vYmlsZSArNDYgNzMgMDk0OTA3OQ0KPiA+ID4+
U0UtMTY0IDgwIFN0b2NraG9sbSwgU3dlZGVuIHwgbWFpbHRvOg0KPiBtYWdudXMud2VzdGVybHVu
ZEBlcmljc3Nvbi5jb20NCj4gPiA+Pi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gLQ0KPiA+ID4+LQ0KPiA+IC0NCj4g
PiA+Pg0KPiA+ID4+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X18NCj4gPiA+PkF1ZGlvL1ZpZGVvIFRyYW5zcG9ydCBDb3JlIE1haW50ZW5hbmNlIGF2dEBpZXRm
Lm9yZw0KPiA+ID4+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hdnQNCj4g
PiA+DQo+ID4NCj4gPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fXw0KPiA+IEF1ZGlvL1ZpZGVvIFRyYW5zcG9ydCBDb3JlIE1haW50ZW5hbmNlIGF2dEBpZXRm
Lm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYXZ0DQo=


From nobody Tue Apr 22 16:03:53 2014
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D92B91A02AE for <avt@ietfa.amsl.com>; Tue, 22 Apr 2014 16:03:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.174
X-Spam-Level: 
X-Spam-Status: No, score=-102.174 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.272, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NBzwspMITzyt for <avt@ietfa.amsl.com>; Tue, 22 Apr 2014 16:03:46 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1900:3001:11::31]) by ietfa.amsl.com (Postfix) with ESMTP id 382161A02AC for <avt@ietf.org>; Tue, 22 Apr 2014 16:03:46 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 290D61801A5; Tue, 22 Apr 2014 16:02:55 -0700 (PDT)
To: mcgrew@cisco.com, ekr@rtfm.com, rlb@ipv.sx, alissa@cooperw.in, keith.drage@alcatel-lucent.com, roni.even@mail01.huawei.com
X-PHP-Originating-Script: 6000:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Message-Id: <20140422230255.290D61801A5@rfc-editor.org>
Date: Tue, 22 Apr 2014 16:02:55 -0700 (PDT)
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/OsykQFNTqoVcYmy3YVa8CSqj4yM
Cc: avt@ietf.org, rfc-editor@rfc-editor.org
Subject: [AVTCORE] [Technical Errata Reported] RFC5764 (3971)
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Apr 2014 23:03:51 -0000

The following errata report has been submitted for RFC5764,
"Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP)".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=5764&eid=3971

--------------------------------------
Type: Technical
Reported by: Martin Thomson <martin.thomson@gmail.com>

Section: 4.1.3

Original Text
-------------
   If the client detects a nonzero-length MKI in the server's response
   that is different than the one the client offered, then the client
   MUST abort the handshake and SHOULD send an invalid_parameter alert.

Corrected Text
--------------
   If the client detects a nonzero-length MKI in the server's response
   that is different than the one the client offered, then the client
   MUST abort the handshake and SHOULD send an illegal_parameter alert.

Notes
-----
invalid_parameter isn't defined anywhere; this probably means illegal_parameter(47), which is defined in RFC 5246.

Instructions:
-------------
This errata is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC5764 (draft-ietf-avt-dtls-srtp-07)
--------------------------------------
Title               : Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP)
Publication Date    : May 2010
Author(s)           : D. McGrew, E. Rescorla
Category            : PROPOSED STANDARD
Source              : Audio/Video Transport
Area                : Real-time Applications and Infrastructure
Stream              : IETF
Verifying Party     : IESG


From nobody Wed Apr 23 08:10:30 2014
Return-Path: <florob@babelmonkeys.de>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB7C91A064B for <avt@ietfa.amsl.com>; Tue, 22 Apr 2014 08:11:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.977
X-Spam-Level: 
X-Spam-Status: No, score=0.977 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FROM_12LTRDOM=0.099, HELO_EQ_DE=0.35, RP_MATCHES_RCVD=-0.272] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I0cM-JQOKo57 for <avt@ietfa.amsl.com>; Tue, 22 Apr 2014 08:11:29 -0700 (PDT)
Received: from babelmonkeys.de (babelmonkeys.de [IPv6:2a02:d40:3:1:10a1:5eff:fe52:509]) by ietfa.amsl.com (Postfix) with ESMTP id 726A81A0552 for <avt@ietf.org>; Tue, 22 Apr 2014 08:11:29 -0700 (PDT)
Received: from xdsl-87-79-85-93.netcologne.de ([87.79.85.93] helo=[192.168.0.140]) by babelmonkeys.de with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from <florob@babelmonkeys.de>) id 1WccM1-0007S9-TT for avt@ietf.org; Tue, 22 Apr 2014 17:11:25 +0200
Message-ID: <53568695.7090509@babelmonkeys.de>
Date: Tue, 22 Apr 2014 17:11:17 +0200
From: Florian Zeitz <florob@babelmonkeys.de>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: avt@ietf.org
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/q2RqNhPvQb5FcJfQrNklD4uFbI0
X-Mailman-Approved-At: Wed, 23 Apr 2014 08:10:29 -0700
Subject: [AVTCORE] Criticism on draft-ietf-avtcore-srtp-aes-gcm
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Apr 2014 15:11:39 -0000

Hello,

I'd like to call this working group's attention to the fact that
yesterday an article in german language[1] was published, harshly
criticising draft-ietf-avtcore-srtp-aes-gcm-11.

The draft is therein called the NSA's newest attempt at weakening
internet security.
The criticism is largely based on Niels Ferguson's 2005 paper
"Authentication weaknesses in GCM"[2].

In particular the points I can identify are:

Repeated from Ferguson's paper
* GCM should no longer be used
* if GCM has to be used, the authentication tag should be 128-bit
  (the draft currently mandates implementation of the 64-bit
   variant, the others are purely optional)
* the paper uses telephony as an example in it's "A disastrous scenario"
  section. Yet this draft recommends GCM for telephony

Attributed to Michael Kafka, a "security expert" from Vienna:
* mixing confidentiality and authentication makes attacks easier
* in practice performance gains are negligible on modern smartphones

The article also insinuates that David McGrew is deliberately
co-authoring a draft he knows to be insecure, somehow under the pressure
of the NSA.

While I do not necessarily personally agree with the criticism, or the
conclusions, I would like this working group and the authors to address
it in some way.

Regards,
Florian Zeitz

[1] http://fm4.orf.at/stories/1737330/
[2]
http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/comments/CWC-GCM/Ferguson2.pdf


From nobody Thu Apr 24 07:51:42 2014
Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 143B11A033D for <avt@ietfa.amsl.com>; Thu, 24 Apr 2014 07:51:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zkKVPzCB2LtV for <avt@ietfa.amsl.com>; Thu, 24 Apr 2014 07:51:37 -0700 (PDT)
Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) by ietfa.amsl.com (Postfix) with ESMTP id 236FB1A031E for <avt@ietf.org>; Thu, 24 Apr 2014 07:51:36 -0700 (PDT)
X-AuditID: c1b4fb25-f798a6d000005ede-ac-535924f22322
Received: from ESESSHC009.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id D9.64.24286.2F429535; Thu, 24 Apr 2014 16:51:30 +0200 (CEST)
Received: from [127.0.0.1] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.47) with Microsoft SMTP Server id 14.3.174.1; Thu, 24 Apr 2014 16:51:29 +0200
Message-ID: <535924F1.8000709@ericsson.com>
Date: Thu, 24 Apr 2014 16:51:29 +0200
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: Florian Zeitz <florob@babelmonkeys.de>, <avt@ietf.org>
References: <53568695.7090509@babelmonkeys.de>
In-Reply-To: <53568695.7090509@babelmonkeys.de>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrCLMWRmVeSWpSXmKPExsUyM+Jvje4nlchgg+1/xS1e9qxkt7g3fz6r A5PHhN5WRo8lS34yBTBFcdmkpOZklqUW6dslcGU87zjAUnBcqmLKg01MDYzbRLsYOTkkBEwk /jzYxQhhi0lcuLeerYuRi0NI4CijxJwt09khnOWMEvvfNbCAVPEKaEt8nT8FzGYRUJU4fnwG G4jNJmAhcfNHI5gtKhAssXTOYqh6QYmTM5+A2SICVhI9dw4zgdjCAs4St1o2AC3gAFqgJ/H8 dilImFNAX+LZ3SnMIGEJAXGJnsYgkDAzUMWUqy2MELa8RPPW2cwgthDQNQ1NHawTGAVnIVk2 C0nLLCQtCxiZVzGKFqcWJ+WmGxnrpRZlJhcX5+fp5aWWbGIEBuvBLb9VdzBefuN4iFGAg1GJ h5dNzS9YiDWxrLgy9xCjNAeLkjjvl1s+wUIC6YklqdmpqQWpRfFFpTmpxYcYmTg4pRoY07I2 ykfPWuZsM6uGUXZNl6Hwg9etrBd9tF482WW8/0zDl6lr2qUORV4qZwhpjTMs9TDXi5uxcYFO 80MG8aagp4zd8wL8HVaa/Gk+5L0ph5H3zPnMmFcMoc3P5ljNO9d5Oj99Beel+RYdN+9ccfP5 c8P0yJ6jR023n3+kkW3IN8c8Zw7r6hweJZbijERDLeai4kQAg1QdkjcCAAA=
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/DXVWEIbhezEqFjOw1E9fzlxGxOE
Subject: Re: [AVTCORE] Criticism on draft-ietf-avtcore-srtp-aes-gcm
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2014 14:51:40 -0000

Florian,

I would like to point out one factual error in your criticism:

The draft does mandate support for the longest 128 bit authentication
tag if one support the cipher at all. This is a quote from Section 13.1:

   Any implementation of AES-GCM SRTP MUST support both AEAD_AES_128_GCM
   and AEAD_AES_256_GCM (the versions with 16 octet AEAD authentication
   tags), and it MAY support the four other variants shown in table 1.

Similarly from 13.2 for AES-CCM

   Any implementation of AES-CCM SRTP/SRTCP MUST support both
   AEAD_AES_128_CCM and AEAD_AES_256_CCM (the versions with 16 octet
   AEAD authentication tags), and MAY support the other four variants.

But, to be fair this was changed very recently.

I would also note that the draft's security consideration section do
discuss the shorter than authentication tag length of actual
authentication protection for AES-GCM.

It is up to the WG to discuss if it thinks there should be any changes
based on your input. And I have to ask you what you think should be the
action based on your personal opinion.

Cheers

Magnus Westerlund
WG chair


On 2014-04-22 17:11, Florian Zeitz wrote:
> Hello,
> 
> I'd like to call this working group's attention to the fact that
> yesterday an article in german language[1] was published, harshly
> criticising draft-ietf-avtcore-srtp-aes-gcm-11.
> 
> The draft is therein called the NSA's newest attempt at weakening
> internet security.
> The criticism is largely based on Niels Ferguson's 2005 paper
> "Authentication weaknesses in GCM"[2].
> 
> In particular the points I can identify are:
> 
> Repeated from Ferguson's paper
> * GCM should no longer be used
> * if GCM has to be used, the authentication tag should be 128-bit
>   (the draft currently mandates implementation of the 64-bit
>    variant, the others are purely optional)
> * the paper uses telephony as an example in it's "A disastrous scenario"
>   section. Yet this draft recommends GCM for telephony
> 
> Attributed to Michael Kafka, a "security expert" from Vienna:
> * mixing confidentiality and authentication makes attacks easier
> * in practice performance gains are negligible on modern smartphones
> 
> The article also insinuates that David McGrew is deliberately
> co-authoring a draft he knows to be insecure, somehow under the pressure
> of the NSA.
> 
> While I do not necessarily personally agree with the criticism, or the
> conclusions, I would like this working group and the authors to address
> it in some way.
> 
> Regards,
> Florian Zeitz
> 
> [1] http://fm4.orf.at/stories/1737330/
> [2]
> http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/comments/CWC-GCM/Ferguson2.pdf
> 
> _______________________________________________
> Audio/Video Transport Core Maintenance
> avt@ietf.org
> https://www.ietf.org/mailman/listinfo/avt
> 
> 


-- 

Magnus Westerlund

----------------------------------------------------------------------
Services, Media and Network features, Ericsson Research EAB/TXM
----------------------------------------------------------------------
Ericsson AB                 | Phone  +46 10 7148287
Färögatan 6                 | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------


From nobody Thu Apr 24 16:21:20 2014
Return-Path: <florob@babelmonkeys.de>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 781C51A02A1 for <avt@ietfa.amsl.com>; Thu, 24 Apr 2014 16:21:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.822
X-Spam-Level: 
X-Spam-Status: No, score=-1.822 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, RP_MATCHES_RCVD=-0.272] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p-ZrtVN2LYPB for <avt@ietfa.amsl.com>; Thu, 24 Apr 2014 16:21:14 -0700 (PDT)
Received: from babelmonkeys.de (babelmonkeys.de [IPv6:2a02:d40:3:1:10a1:5eff:fe52:509]) by ietfa.amsl.com (Postfix) with ESMTP id 6BF0A1A0294 for <avt@ietf.org>; Thu, 24 Apr 2014 16:21:14 -0700 (PDT)
Received: from xdsl-87-79-136-79.netcologne.de ([87.79.136.79] helo=[192.168.0.140]) by babelmonkeys.de with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from <florob@babelmonkeys.de>) id 1WdSx3-0002GL-UW; Fri, 25 Apr 2014 01:21:10 +0200
Message-ID: <53599C5D.1020206@babelmonkeys.de>
Date: Fri, 25 Apr 2014 01:21:01 +0200
From: Florian Zeitz <florob@babelmonkeys.de>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: Magnus Westerlund <magnus.westerlund@ericsson.com>, avt@ietf.org
References: <53568695.7090509@babelmonkeys.de> <535924F1.8000709@ericsson.com>
In-Reply-To: <535924F1.8000709@ericsson.com>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/9lFbb4EjOOZnLs54UgxIuiVNFyo
Subject: Re: [AVTCORE] Criticism on draft-ietf-avtcore-srtp-aes-gcm
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2014 23:21:16 -0000

On 24.04.2014 16:51, Magnus Westerlund wrote:
> Florian,
> 
Hello Magnus,

> I would like to point out one factual error in your criticism:
> 
> The draft does mandate support for the longest 128 bit authentication
> tag if one support the cipher at all. This is a quote from Section 13.1:
> 
>    Any implementation of AES-GCM SRTP MUST support both AEAD_AES_128_GCM
>    and AEAD_AES_256_GCM (the versions with 16 octet AEAD authentication
>    tags), and it MAY support the four other variants shown in table 1.
> 
> Similarly from 13.2 for AES-CCM
> 
>    Any implementation of AES-CCM SRTP/SRTCP MUST support both
>    AEAD_AES_128_CCM and AEAD_AES_256_CCM (the versions with 16 octet
>    AEAD authentication tags), and MAY support the other four variants.
> 
> But, to be fair this was changed very recently.
> 
I'm admittedly a bit irritated, by you calling this my criticism.
Particularly after having pointed out I do not fully agree with it, but
am merely the messenger.
The parenthetical you refer to is my own analysis however. And in fact
it does appear I accidentally read the -10 version of the draft. I do
apologize for that mistake.

> I would also note that the draft's security consideration section do
> discuss the shorter than authentication tag length of actual
> authentication protection for AES-GCM.
> 
> It is up to the WG to discuss if it thinks there should be any changes
> based on your input. And I have to ask you what you think should be the
> action based on your personal opinion.
> 
I suspect you might be wondering why I'm bringing this up if I don't
fully agree with the criticism. The reason is quite simply that I still
believe in the IETF culture. In particular I believe that, unlike what
many media outlets are claiming recently, the IETF and its WGs are fully
capable of appropriately dealing with criticism, and not letting
themselves gag by any government agency. (I.e. in some way I'm trying to
prove a point here)

However, dealing with criticism is only possible, when it is actually
expressed towards the WG, which apparently neither Erich Möchel nor
Michael Kafka found necessary.

I see two ways to address this:
Either the WG agrees with the criticism, the logical consequence of
which would be removing GCM from the draft.
Or the authors/WG explain why they believe this draft to be reasonably
secure, despite the criticism, and proceed with the current wording.

David McGrew choose the second option, and I'm personally content with
that. Hearing a second opinion from other WG members would be
appreciated though.

Regards

Florian Zeitz


From nobody Thu Apr 24 23:31:17 2014
Return-Path: <mcgrew@cisco.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6148E1A038E for <avt@ietfa.amsl.com>; Thu, 24 Apr 2014 13:08:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.772
X-Spam-Level: 
X-Spam-Status: No, score=-14.772 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.272, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DSwwUds3633O for <avt@ietfa.amsl.com>; Thu, 24 Apr 2014 13:08:50 -0700 (PDT)
Received: from mtv-iport-3.cisco.com (mtv-iport-3.cisco.com [173.36.130.14]) by ietfa.amsl.com (Postfix) with ESMTP id D7EEF1A03E1 for <avt@ietf.org>; Thu, 24 Apr 2014 13:08:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=19190; q=dns/txt; s=iport; t=1398370124; x=1399579724; h=message-id:date:from:mime-version:to:subject; bh=pVVvnzU6oHvu9OtFrTZgT3F+GurMQpKffGfYlN/KInU=; b=PccJ1YKfNXcAgRuXj2tkcYod3zOJDS/2A3ZyFlj0hGTFnAhXmjNkaRwz Scbpv7DCI5kIk1HIKBPKxFopsdDohi5HKQY71Xzc+8LCKsrbAgaVLk+hW +Uhopvxnc5iYA1MY2nGelafOXKFjr4N7/aZKUGX4/3/iiLuIj9AFrNXaG w=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ak0QAIFuWVOrRDoJ/2dsb2JhbABPCoMGT4lDt06ECoEfFnSCJQEBAQIBbAEMBicDAQIKFhgDAgECAT0OAQwGAgKINQcOy0IXjXcGBAcBPx6EMwSYeYE4hSOLfoNNIYEsAgcXBg
X-IronPort-AV: E=Sophos;i="4.97,921,1389744000";  d="scan'208,217";a="108513970"
Received: from mtv-core-4.cisco.com ([171.68.58.9]) by mtv-iport-3.cisco.com with ESMTP; 24 Apr 2014 20:08:42 +0000
Received: from [10.0.2.15] (dhcp-10-33-176-74.cisco.com [10.33.176.74]) by mtv-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id s3OK8fbJ030091; Thu, 24 Apr 2014 20:08:41 GMT
Message-ID: <53596F49.3040004@cisco.com>
Date: Thu, 24 Apr 2014 16:08:41 -0400
From: David McGrew <mcgrew@cisco.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20131103 Icedove/17.0.10
MIME-Version: 1.0
To: avt@ietf.org, Magnus Westerlund <magnus.westerlund@ericsson.com>, florob@babelmonkeys.de
Content-Type: multipart/alternative; boundary="------------000009040804090203050303"
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/odaTmP_orQZ2dNJggKVtbqC83WQ
X-Mailman-Approved-At: Thu, 24 Apr 2014 23:31:15 -0700
Subject: [AVTCORE]  Criticism on draft-ietf-avtcore-srtp-aes-gcm
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2014 20:08:53 -0000

This is a multi-part message in MIME format.
--------------000009040804090203050303
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

Hi Florian,

thanks for calling this to the attention of the list.   I had not seen 
it before, and I had not been contacted by Erich Möchel (the author of 
the post you cite) or anyone else in regard to these speculations. The 
post is wrong on many important points; please see more inline:

> From: Florian Zeitz <florob@babelmonkeys.de>
> Subject: [AVTCORE] Criticism on draft-ietf-avtcore-srtp-aes-gcm
> Date: April 22, 2014 at 8:11:17 AM PDT
> To: avt@ietf.org
>
> Hello,
>
> I'd like to call this working group's attention to the fact that 
> yesterday an article in german language[1] was published, harshly 
> criticising draft-ietf-avtcore-srtp-aes-gcm-11.
>
> The draft is therein called the NSA's newest attempt at weakening 
> internet security. The criticism is largely based on Niels Ferguson's 
> 2005 paper "Authentication weaknesses in GCM"[2].
>

Ferguson's critique refers to the initial submission to NIST on GCM; 
please note that the submission was later revised and clarified. For 
background, see the comments on that work in Section 2 of the "GCM 
update" that was submitted to NIST along with the revised version of 
that specification back in 2005, which are online at 
http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/comments/CWC-GCM/gcm-update.pdf 
The reference on multiple-forgery attacks, which is cited in the NIST 
submission, is online at https://eprint.iacr.org/2005/161.pdf Also, the 
NIST specification of GCM, which is the authoritative one, includes 
guidance on tag lengths that was absent from the version of the 
specification to which the critique refers.

> In particular the points I can identify are:
>
> Repeated from Ferguson's paper
> * GCM should no longer be used
> * if GCM has to be used, the authentication tag should be 128-bit (the 
> draft currently mandates implementation of the 64-bit variant, the 
> others are purely optional)

The statement on tag lengths is wrong, as Magnus recently pointed out on 
the list.  Earlier versions of the draft had 64-bit tags as mandatory to 
implement and 128-bit tags as optional, but the current version reverses 
that.  We made this change after discussion between the authors, 
reviewers and the chairs.   In more detail: on 11/03, John Mattsson 
reviewed draft-ietf-avtcore-srtp-aes-gcm, and provided comments to 
Magnus Westerlund, Richard Barnes, Kevin Igoe, and myself.   John and 
Kevin decided that the mandatory-to-implement GCM tag size should be 
changed to 128 bits.  (John, Magnus, Richard and Kevin, please check for 
Kevin's email on this subject dated 2/19/14).

Of course, this is a working group draft and should reflect the 
consensus of AVTCORE.  But it currently has strong 
mandatory-to-implement options and good guidance on parameter choices, 
as noted below.

> * the paper uses telephony as an example in it's "A disastrous scenario"
> section. Yet this draft recommends GCM for telephony
>
> Attributed to Michael Kafka, a "security expert" from Vienna:
> * mixing confidentiality and authentication makes attacks easier

This statement is wrong.  Authenticated encryption as provided by 
dedicated algorithms like GCM is widely regarded as better than loosely 
bound authentication and encryption.   To appreciate why a loose binding 
between authentication and encryption is a bad idea, see for instance 
the padding oracle attacks against CBC in TLS and other protocols, which 
are possible because of the loose binding, as first described by 
Vaudenay and developed in BEAST and Lucky-13.

> * in practice performance gains are negligible on modern smartphones
>
> The article also insinuates that David McGrew is deliberately 
> co-authoring a draft he knows to be insecure, somehow under the 
> pressure of the NSA.

This is also not true.  I'm not under any pressure from the NSA, and the 
draft provides an adequate level of security.  Importantly, the draft 
very explicitly describes the authentication strength that one can 
expect from a given choice of tag length, in Section 14.2
http://tools.ietf.org/html/draft-ietf-avtcore-srtp-aes-gcm-11#section-14.2 
It would be disingenuous to suggest that the draft has some sort of 
hidden weakness regarding authentication strength, as the draft is very 
clear about the authentication strength one can expect for different 
parameter choices.

For perspective, one should also consider the authentication strength of 
some existing standards.  SDP Security Descriptions (RFC 4568) includes 
the option of a 32-bit authentication tag 
http://tools.ietf.org/html/rfc4568#section-6.2.2 And Secure RTP itself 
(RFC 3711) allows encryption with *no* authentication. The rationale for 
this is outlined in Section 7.5 of that RFC, and Section 9.5.1 outlines 
the security considerations of weak or NULL authentication in SRTP.  
Just to be clear: the standards cited above provide much less 
authentication strength than the weakest option in 
draft-ietf-avtcore-srtp-aes-gcm.

For more perspective, let's go through an example based on the table in 
the section of the GCM and CCM draft.  Consider an scenario in which a 
receiver in an audio session with a typical rate of 50 packets per 
second receives a steady stream of forged messages for an entire day, 
which are protected by 64-bit GCM authentication tags.  If the receiver 
is patient enough to listen to an entire day's worth of silence (due to 
the fact that SRTP will discard forged packets), the attacker will have 
a one in a billion probability of successfully forging
a message.  Many people would be OK with this level of risk.  Others 
would not, in which case they should use a larger GCM tag size, which 
they could choose from the table.  Or they could use CCM, which is also 
described in the draft, or SRTP with HMAC authentication. Please also 
note that the table in the draft takes the conservative approach of 
assuming that packets are large (and thus per-packet authentication is 
slightly weaker).

I personally favor the use of large authentication tags, both in SRTP 
and for GCM, but I grudgingly concede that short tags are adequate for 
some scenarios where bandwidth matters a lot. When SRTP was developed 
and standardized, around 2003, it was necessary to allow weak 
authentication options because of bandwidth constraints faced by some 
RTP users.   To put it plainly: some RTP users at the time said that 
they would not use SRTP if it required long authentication tags.   The 
discussions on this tradeoff took place within AVT and are well 
documented.   In any case, it is reasonable to debate whether or not 
short authentication tags are ever appropriate, but it would be wrong to 
claim that any version of draft-ietf-avtcore-srtp-aes-gcm described 
authentication options that are weaker than those already present in the 
SRTP standard.

This is somewhat off topic, but I did participate in some recent work 
that aims to provide better security within limited bandwidth, which was 
submitted to the IETF last year and presented at the last IRTF CFRG 
meeting: "Authenticated Encryption with Replay prOtection (AERO)" 
http://tools.ietf.org/html/draft-mcgrew-aero-01 and "Using Authenticated 
Encryption with Replay prOtection (AERO) in SRTP" 
http://tools.ietf.org/html/draft-mcgrew-srtp-aero-01.  Some more 
research needs to be done to refine and validate this approach, but it 
appears promising as a future direction (in scenarios in which the 
endpoints can afford some additional computation during encryption).

>
> While I do not necessarily personally agree with the criticism, or the 
> conclusions, I would like this working group and the authors to 
> address it in some way.
>

Thank you for calling this to the attention of the list, and thus giving 
me the opportunity to respond to the posting that you referenced.

regards,

David



--------------000009040804090203050303
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Hi Florian,
    <br>
    <br>
    thanks for calling this to the attention of the list.&nbsp;&nbsp; I had not
    seen it before,
    and I had not been contacted by Erich M&ouml;chel (the author of the post
    you cite)
    or anyone else in regard to these speculations.&nbsp;
    The post is wrong on many important points; please see more inline:
    <br>
    <br>
    <blockquote type="cite" style="color: #000000;">From: Florian Zeitz
      <a class="moz-txt-link-rfc2396E"
        href="mailto:florob@babelmonkeys.de">&lt;florob@babelmonkeys.de&gt;</a>
      <br>
      Subject: [AVTCORE] Criticism on draft-ietf-avtcore-srtp-aes-gcm
      <br>
      Date: April 22, 2014 at 8:11:17 AM PDT
      <br>
      To: <a class="moz-txt-link-abbreviated"
        href="mailto:avt@ietf.org">avt@ietf.org</a>
      <br>
      <br>
      Hello,
      <br>
      <br>
      I'd like to call this working group's attention to the fact that
      yesterday an article in german language[1] was published, harshly
      criticising draft-ietf-avtcore-srtp-aes-gcm-11.
      <br>
      <br>
      The draft is therein called the NSA's newest attempt at weakening
      internet security.&nbsp;
      The criticism is largely based on Niels Ferguson's 2005 paper
      "Authentication weaknesses in GCM"[2].
      <br>
      <br>
    </blockquote>
    <br>
    Ferguson's critique refers to the initial submission to NIST on GCM;
    please note that the submission was later revised and clarified.&nbsp;
    For background, see the comments on that work in Section 2 of
    the "GCM update" that was submitted to NIST along with the revised
    version of that specification back in 2005, which are online at
    <a class="moz-txt-link-freetext"
href="http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/comments/CWC-GCM/gcm-update.pdf">http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/comments/CWC-GCM/gcm-update.pdf</a>&nbsp;&nbsp;
The
    reference on multiple-forgery attacks, which is cited in the NIST
    submission,
    is online at <a class="moz-txt-link-freetext"
      href="https://eprint.iacr.org/2005/161.pdf">https://eprint.iacr.org/2005/161.pdf</a>&nbsp;&nbsp;&nbsp;
    Also, the NIST specification of GCM, which is the authoritative one,
    includes guidance on tag lengths that was absent from the version of
    the specification to which the critique refers.<br>
    <br>
    <blockquote type="cite" style="color: #000000;">In particular the
      points I can identify are:
      <br>
      <br>
      Repeated from Ferguson's paper
      <br>
      * GCM should no longer be used
      <br>
      * if GCM has to be used, the authentication tag should be 128-bit
      (the draft currently mandates implementation of the 64-bit
      variant, the others are purely optional)
      <br>
    </blockquote>
    <br>
    The statement on tag lengths is wrong, as Magnus recently pointed
    out on the list.&nbsp; Earlier versions of the draft had 64-bit tags as
    mandatory to implement and 128-bit tags as optional, but the current
    version reverses that.&nbsp; We made this change after discussion between
    the authors, reviewers and the chairs.&nbsp;&nbsp; In more detail: on 11/03,
    John Mattsson reviewed draft-ietf-avtcore-srtp-aes-gcm, and provided
    comments to Magnus Westerlund, Richard Barnes, Kevin Igoe, and
    myself.&nbsp;&nbsp; John
    and Kevin decided that the mandatory-to-implement GCM tag size
    should be changed
    to 128 bits.&nbsp; (John, Magnus, Richard and Kevin, please check for
    Kevin's email
    on this subject dated 2/19/14).
    <br>
    <br>
    Of course, this is a working group draft and should reflect the
    consensus of AVTCORE.&nbsp; But it currently has strong
    mandatory-to-implement options and good guidance on parameter
    choices, as noted below.&nbsp;&nbsp; <br>
    <br>
    <blockquote type="cite" style="color: #000000;">* the paper uses
      telephony as an example in it's "A disastrous scenario"
      <br>
      section. Yet this draft recommends GCM for telephony
      <br>
      <br>
      Attributed to Michael Kafka, a "security expert" from Vienna:
      <br>
      * mixing confidentiality and authentication makes attacks easier
      <br>
    </blockquote>
    <br>
    This statement is wrong.&nbsp; Authenticated encryption as provided by
    dedicated
    algorithms like GCM is widely regarded as better than loosely bound
    authentication and encryption.&nbsp;&nbsp; To appreciate why a loose binding
    between authentication and encryption is a bad idea, see for
    instance the
    padding oracle attacks against CBC in TLS and other protocols, which
    are possible because of the loose binding, as first described by
    Vaudenay and
    developed in BEAST and Lucky-13.
    <br>
    <br>
    <blockquote type="cite" style="color: #000000;">* in practice
      performance gains are negligible on modern smartphones
      <br>
      <br>
      The article also insinuates that David McGrew is deliberately
      co-authoring a draft he knows to be insecure, somehow under the
      pressure
      of the NSA.
      <br>
    </blockquote>
    <br>
    This is also not true.&nbsp; I'm not under any pressure from the NSA, and
    the draft
    provides an adequate level of security.&nbsp; Importantly, the draft very
    explicitly
    describes the authentication strength that one can expect from a
    given choice
    of tag length, in Section 14.2
    <br>
    <a class="moz-txt-link-freetext"
href="http://tools.ietf.org/html/draft-ietf-avtcore-srtp-aes-gcm-11#section-14.2">http://tools.ietf.org/html/draft-ietf-avtcore-srtp-aes-gcm-11#section-14.2</a>&nbsp;&nbsp;
It
    would be disingenuous to suggest that the draft has some sort of
    hidden
    weakness regarding authentication strength, as the draft is very
    clear about the authentication strength one can expect for different
    parameter choices.
    <br>
    <br>
    For perspective, one should also consider the authentication
    strength of
    some existing standards.&nbsp; SDP Security Descriptions (RFC 4568)
    includes
    the option of a 32-bit authentication tag
    <a class="moz-txt-link-freetext"
      href="http://tools.ietf.org/html/rfc4568#section-6.2.2">http://tools.ietf.org/html/rfc4568#section-6.2.2</a>&nbsp;&nbsp;
And
    Secure RTP itself (RFC 3711) allows encryption with <b
      class="moz-txt-star"><span class="moz-txt-tag">*</span>no<span
        class="moz-txt-tag">*</span></b> authentication.&nbsp;
    The rationale for this is outlined in Section 7.5 of that RFC, and
    Section 9.5.1 outlines the security considerations of weak or NULL
    authentication in SRTP.&nbsp; Just to be clear: the standards cited above
    provide much less authentication strength than the weakest option in
    draft-ietf-avtcore-srtp-aes-gcm.<br>
    <br>
    For more perspective, let's go through an example based on the table
    in the
    section of the GCM and CCM draft.&nbsp; Consider an scenario in which a
    receiver in an
    audio session with a typical rate of 50 packets per second receives
    a steady stream of forged messages for an entire day, which are
    protected by 64-bit GCM
    authentication tags.&nbsp; If the receiver is patient enough to listen to
    an entire
    day's worth of silence (due to the fact that SRTP will discard
    forged packets),
    the attacker will have a one in a billion probability of
    successfully forging
    <br>
    a message.&nbsp; Many people would be OK with this level of risk.&nbsp; Others
    would
    not, in which case they should use a larger GCM tag size, which they
    could choose from the table.&nbsp; Or they could use CCM, which is also
    described in the draft, or SRTP with HMAC authentication.&nbsp;&nbsp;
    Please also note that the table in the draft takes the conservative
    approach of assuming that packets are large (and thus per-packet
    authentication is slightly weaker).<br>
    <br>
    I personally favor the use of large authentication tags, both in
    SRTP and for GCM,
    but I grudgingly concede that short tags are adequate for some
    scenarios where
    bandwidth matters a lot.&nbsp;
    When SRTP was developed and standardized, around 2003, it was
    necessary to allow weak authentication options because of bandwidth
    constraints faced by some RTP users.&nbsp;&nbsp; To put it plainly: some RTP
    users at the time said that they would not use SRTP if it required
    long authentication tags.&nbsp;&nbsp; The discussions on this tradeoff took
    place within AVT and are well documented.&nbsp;&nbsp; In any case, it is
    reasonable to debate whether or not short authentication tags are
    ever appropriate, but it would be wrong to claim that any version of
    draft-ietf-avtcore-srtp-aes-gcm described authentication options
    that are weaker than those already present in the SRTP standard.&nbsp; <br>
    <br>
    This is somewhat off topic, but I did participate in some recent
    work that aims to provide better security within limited bandwidth,
    which was submitted to the IETF last year and presented at the last
    IRTF CFRG meeting: "Authenticated Encryption with Replay prOtection
    (AERO)<a class="moz-txt-link-rfc2396E" href="http://tools.ietf.org/html/draft-mcgrew-aero-01and">" http://tools.ietf.org/html/draft-mcgrew-aero-01 and "</a>Using
    Authenticated Encryption with Replay prOtection (AERO) in SRTP"
    <a class="moz-txt-link-freetext" href="http://tools.ietf.org/html/draft-mcgrew-srtp-aero-01">http://tools.ietf.org/html/draft-mcgrew-srtp-aero-01</a>.&nbsp; Some more
    research needs to be done to refine and validate this approach, but
    it appears promising as a future direction (in scenarios in which
    the endpoints can afford some additional computation during
    encryption).&nbsp; <br>
    <br>
    <blockquote type="cite" style="color: #000000;">
      <br>
      While I do not necessarily personally agree with the criticism, or
      the
      conclusions, I would like this working group and the authors to
      address
      it in some way.
      <br>
      <br>
    </blockquote>
    <br>
    Thank you for calling this to the attention of the list, and thus
    giving me the opportunity to respond to the posting that you
    referenced.
    <br>
    <br>
    regards,
    <br>
    <br>
    David
    <br>
    <br>
    <br>
  </body>
</html>

--------------000009040804090203050303--


From nobody Thu Apr 24 23:44:47 2014
Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86E0E1A0328 for <avt@ietfa.amsl.com>; Thu, 24 Apr 2014 23:44:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aFWHS-xqElFJ for <avt@ietfa.amsl.com>; Thu, 24 Apr 2014 23:44:41 -0700 (PDT)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) by ietfa.amsl.com (Postfix) with ESMTP id 0A82B1A0412 for <avt@ietf.org>; Thu, 24 Apr 2014 23:44:40 -0700 (PDT)
X-AuditID: c1b4fb30-f791c6d000005f7c-5c-535a0451fa3c
Received: from ESESSHC011.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id CF.53.24444.1540A535; Fri, 25 Apr 2014 08:44:33 +0200 (CEST)
Received: from [127.0.0.1] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.53) with Microsoft SMTP Server id 14.3.174.1; Fri, 25 Apr 2014 08:44:32 +0200
Message-ID: <535A0450.5020600@ericsson.com>
Date: Fri, 25 Apr 2014 08:44:32 +0200
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: Florian Zeitz <florob@babelmonkeys.de>, <avt@ietf.org>
References: <53568695.7090509@babelmonkeys.de> <535924F1.8000709@ericsson.com> <53599C5D.1020206@babelmonkeys.de>
In-Reply-To: <53599C5D.1020206@babelmonkeys.de>
X-Enigmail-Version: 1.6
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrKLMWRmVeSWpSXmKPExsUyM+JvjW4gS1SwwbJeM4uXPSvZLe7Nn8/q wOQxobeV0WPJkp9MAUxRXDYpqTmZZalF+nYJXBn9E+4zFvxRqHh/4QJbA+NKqS5GTg4JAROJ KWu+M0LYYhIX7q1n62Lk4hASOMoo8X7zCSYIZzmjxO5Hx9hBqngFtCU+//rGAmKzCKhK3Np+ iA3EZhOwkLj5oxHMFhUIllg6ZzELRL2gxMmZT8BsEQEriZ47h5lAbGEBZ4lbLRvAZgoJFEq8 +bwFrIZTQF/i985prF2MHEAXiUv0NAaBhJkF9CSmXG1hhLDlJZq3zmaGaNWWaGjqYJ3AKDgL ybZZSFpmIWlZwMi8ilG0OLU4KTfdyEgvtSgzubg4P08vL7VkEyMwXA9u+W2wg/Hlc8dDjAIc jEo8vMVfIoOFWBPLiitzDzFKc7AoifN+O+seLCSQnliSmp2aWpBaFF9UmpNafIiRiYNTqoGR LXmFROHbs5MNilVnu6+qZjo162Pqsddr958O/avtzXrqTP8NiSlSn9Xcn1+6xri4Ye3/8PzL ++cqPJaXLWSoNd2oY1r/8ov/aa21ZSJGMbnM9cKMyc1rKyqYP+i8up9UGBfJ6DFxeeJZvfya 96FFSqdePAxrnnjOVnGewcb8k+sXMa+WN/uoxFKckWioxVxUnAgAEu5ThDgCAAA=
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/AwX_q9534DBShCbvL4zLsjNAv8w
Subject: Re: [AVTCORE] Criticism on draft-ietf-avtcore-srtp-aes-gcm
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2014 06:44:43 -0000

Hi Florian and WG,

Please see inline.

On 2014-04-25 01:21, Florian Zeitz wrote:
> On 24.04.2014 16:51, Magnus Westerlund wrote:
>> Florian,
>>
> Hello Magnus,
> 
>> I would like to point out one factual error in your criticism:
>>
>> The draft does mandate support for the longest 128 bit authentication
>> tag if one support the cipher at all. This is a quote from Section 13.1:
>>
>>    Any implementation of AES-GCM SRTP MUST support both AEAD_AES_128_GCM
>>    and AEAD_AES_256_GCM (the versions with 16 octet AEAD authentication
>>    tags), and it MAY support the four other variants shown in table 1.
>>
>> Similarly from 13.2 for AES-CCM
>>
>>    Any implementation of AES-CCM SRTP/SRTCP MUST support both
>>    AEAD_AES_128_CCM and AEAD_AES_256_CCM (the versions with 16 octet
>>    AEAD authentication tags), and MAY support the other four variants.
>>
>> But, to be fair this was changed very recently.
>>
> I'm admittedly a bit irritated, by you calling this my criticism.
> Particularly after having pointed out I do not fully agree with it, but
> am merely the messenger.

Sorry, poorly worded to attribute it to you.

> The parenthetical you refer to is my own analysis however. And in fact
> it does appear I accidentally read the -10 version of the draft. I do
> apologize for that mistake.
> 
>> I would also note that the draft's security consideration section do
>> discuss the shorter than authentication tag length of actual
>> authentication protection for AES-GCM.
>>
>> It is up to the WG to discuss if it thinks there should be any changes
>> based on your input. And I have to ask you what you think should be the
>> action based on your personal opinion.
>>
> I suspect you might be wondering why I'm bringing this up if I don't
> fully agree with the criticism. The reason is quite simply that I still
> believe in the IETF culture. In particular I believe that, unlike what
> many media outlets are claiming recently, the IETF and its WGs are fully
> capable of appropriately dealing with criticism, and not letting
> themselves gag by any government agency. (I.e. in some way I'm trying to
> prove a point here)
> 
> However, dealing with criticism is only possible, when it is actually
> expressed towards the WG, which apparently neither Erich Möchel nor
> Michael Kafka found necessary.

Thanks for bringing it to the WG's attention. You are correct, that the
WG needs to be made aware and have the chance to discuss and consider this.

> 
> I see two ways to address this:
> Either the WG agrees with the criticism, the logical consequence of
> which would be removing GCM from the draft.
> Or the authors/WG explain why they believe this draft to be reasonably
> secure, despite the criticism, and proceed with the current wording.
> 
> David McGrew choose the second option, and I'm personally content with
> that. Hearing a second opinion from other WG members would be
> appreciated though.

I hope the WG participants are happy to review this criticism and
consider McGrew's response as well as what the current version of the
draft says in forming their own opinions, and hopefully state where they
stand. If people have proposals for corrections or clarifications to the
draft they can also be brought forward.

>From a process point of view, as this document is currently in a
publication has been requested state we can continue the WG discussion
while the AD performs her review. The WG will have to form some
concluding position at the end of the IETF review if not before.

I would hope that people can provide their input into this over the next
two weeks, i.e. by the 9th of May.

Regards

Magnus Westerlund
As WG chair

----------------------------------------------------------------------
Services, Media and Network features, Ericsson Research EAB/TXM
----------------------------------------------------------------------
Ericsson AB                 | Phone  +46 10 7148287
Färögatan 6                 | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------


From nobody Fri Apr 25 01:05:40 2014
Return-Path: <john.mattsson@ericsson.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4F211A0484 for <avt@ietfa.amsl.com>; Fri, 25 Apr 2014 01:05:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gi8WZZRvdfkY for <avt@ietfa.amsl.com>; Fri, 25 Apr 2014 01:05:34 -0700 (PDT)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) by ietfa.amsl.com (Postfix) with ESMTP id 3FFDC1A047D for <avt@ietf.org>; Fri, 25 Apr 2014 01:05:33 -0700 (PDT)
X-AuditID: c1b4fb30-f791c6d000005f7c-70-535a17466eb0
Received: from ESESSHC002.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 7C.EE.24444.6471A535; Fri, 25 Apr 2014 10:05:26 +0200 (CEST)
Received: from ESESSMB307.ericsson.se ([169.254.7.20]) by ESESSHC002.ericsson.se ([153.88.183.24]) with mapi id 14.03.0174.001; Fri, 25 Apr 2014 10:05:25 +0200
From: John Mattsson <john.mattsson@ericsson.com>
To: "Igoe, Kevin M." <kmigoe@nsa.gov>, "avt@ietf.org" <avt@ietf.org>
Thread-Topic: [AVTCORE] FW: I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
Thread-Index: AQHPTbHspUAtozygJEipKqGk6BItqZr9E8iAgARm7oCAAFT1AIASt6KQgAkcgNCABHsrAA==
Date: Fri, 25 Apr 2014 08:05:25 +0000
Message-ID: <CF7FE113.147A2%john.mattsson@ericsson.com>
References: <3C4AAD4B5304AB44A6BA85173B4675CABAA34EF5@MSMR-GH1-UEA03.corp.nsa.gov>
In-Reply-To: <3C4AAD4B5304AB44A6BA85173B4675CABAA34EF5@MSMR-GH1-UEA03.corp.nsa.gov>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.4.1.140326
x-originating-ip: [153.88.183.19]
Content-Type: text/plain; charset="utf-8"
Content-ID: <6CD41220E59DCE4E8E2AEC723979648E@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmphkeLIzCtJLcpLzFFi42KZGfG3RtdNPCrY4OxUGYuXPSvZLSaces3q wOSxZMlPJo/+XS9ZA5iiuGxSUnMyy1KL9O0SuDL2nFjAUvCspuJE+1XmBsYzlV2MnBwSAiYS J28dZ4awxSQu3FvP1sXIxSEkcJRR4t/vzYwQzmJGiYNL77CBVLEJGEjM3dMAZosIuEhMnbeU EcQWFgiQ+PfrCytEPFBi86q/LBB2mMSemZ/ZQWwWAVWJ1Z9egm3jFTCXeDJxJVivkECQxL4/ X8FsToFgibW/zoHNZwS66PupNUwgNrOAuMStJ/OZIC4VkFiy5zzU1aISLx//A9srKqAn8e44 TI2iRPvTBqCZHEC9mhLrd+lDjLGWaPr8lgXCVpSY0v2QHeIcQYmTM5+wTGAUn4Vk2yyE7llI umch6Z6FpHsBI+sqRtHi1OKk3HQjI73Uoszk4uL8PL281JJNjMBoO7jlt8EOxpfPHQ8xCnAw KvHwFn+JDBZiTSwrrsw9xCjNwaIkzvvtrHuwkEB6YklqdmpqQWpRfFFpTmrxIUYmDk6pBkZ/ v6uFy449bblx0051WdIRv6Vuk8XaH6xzuvuuKIvnxOkT63tm/P4z5+jHcOXEeS+inni80uPx 44lo3erGbDu/aK/gVZ0H1yS19lk5vhD92Pz/vpPH1lNSfEkqJkcnu3Un3Il8uM5gwdINdgwq Jx/KL//24cX/j2JR274aGu0JXZnMsv/VK4YtSizFGYmGWsxFxYkA5YNrzpcCAAA=
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/IATm5l5zyISiuPrhVdQZKDzLWRc
Subject: Re: [AVTCORE] FW: I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2014 08:05:38 -0000
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From nobody Fri Apr 25 04:10:38 2014
Return-Path: <kmigoe@nsa.gov>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 729A71A0366 for <avt@ietfa.amsl.com>; Fri, 25 Apr 2014 04:10:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.172
X-Spam-Level: 
X-Spam-Status: No, score=-7.172 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.272] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AoWPHhlXX2_j for <avt@ietfa.amsl.com>; Fri, 25 Apr 2014 04:10:29 -0700 (PDT)
Received: from emvm-gh1-uea08.nsa.gov (emvm-gh1-uea08.nsa.gov [63.239.67.9]) by ietfa.amsl.com (Postfix) with ESMTP id 323A41A0175 for <avt@ietf.org>; Fri, 25 Apr 2014 04:10:29 -0700 (PDT)
X-TM-IMSS-Message-ID: <14a8224e00072bdd@nsa.gov>
Received: from MSHT-GH1-UEA02.corp.nsa.gov ([10.215.227.181]) by nsa.gov ([63.239.67.9]) with ESMTP (TREND IMSS SMTP Service 7.1; TLSv1/SSLv3 AES128-SHA (128/128)) id 14a8224e00072bdd ; Fri, 25 Apr 2014 07:09:02 -0400
Received: from MSMR-GH1-UEA01.corp.nsa.gov (10.215.225.4) by MSHT-GH1-UEA02.corp.nsa.gov (10.215.227.181) with Microsoft SMTP Server (TLS) id 14.2.342.3; Fri, 25 Apr 2014 07:10:19 -0400
Received: from MSMR-GH1-UEA03.corp.nsa.gov ([10.215.224.3]) by MSMR-GH1-UEA01.corp.nsa.gov ([10.215.225.4]) with mapi id 14.02.0342.003; Fri, 25 Apr 2014 07:10:19 -0400
From: "Igoe, Kevin M." <kmigoe@nsa.gov>
To: 'John Mattsson' <john.mattsson@ericsson.com>, "avt@ietf.org" <avt@ietf.org>
Thread-Topic: [AVTCORE] FW: I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
Thread-Index: AQHPYF0f3xF1opadBU2F8c+S7gCrYZsiLNpg
Date: Fri, 25 Apr 2014 11:10:18 +0000
Message-ID: <3C4AAD4B5304AB44A6BA85173B4675CABAA3F753@MSMR-GH1-UEA03.corp.nsa.gov>
References: <3C4AAD4B5304AB44A6BA85173B4675CABAA34EF5@MSMR-GH1-UEA03.corp.nsa.gov> <CF7FE113.147A2%john.mattsson@ericsson.com>
In-Reply-To: <CF7FE113.147A2%john.mattsson@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.215.225.46]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/yAFviKmeWSw5hcF5-bgSo9btSNE
Subject: Re: [AVTCORE] FW: I-D Action: draft-ietf-avtcore-srtp-aes-gcm-11.txt
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Apr 2014 11:10:33 -0000
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From nobody Wed Apr 30 00:20:13 2014
Return-Path: <christer.holmberg@ericsson.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38AB21A6EF7 for <avt@ietfa.amsl.com>; Wed, 30 Apr 2014 00:19:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rVPOKYOqUCrw for <avt@ietfa.amsl.com>; Wed, 30 Apr 2014 00:19:54 -0700 (PDT)
Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) by ietfa.amsl.com (Postfix) with ESMTP id BE45D1A6EF5 for <avt@ietf.org>; Wed, 30 Apr 2014 00:19:53 -0700 (PDT)
X-AuditID: c1b4fb2d-f79036d00000126a-eb-5360a4176a7a
Received: from ESESSHC020.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id FD.1A.04714.714A0635; Wed, 30 Apr 2014 09:19:51 +0200 (CEST)
Received: from ESESSMB209.ericsson.se ([169.254.9.191]) by ESESSHC020.ericsson.se ([153.88.183.78]) with mapi id 14.03.0174.001; Wed, 30 Apr 2014 09:19:51 +0200
From: Christer Holmberg <christer.holmberg@ericsson.com>
To: "avt@ietf.org" <avt@ietf.org>
Thread-Topic: Errata on RFC 5764
Thread-Index: Ac9kRHBATYrInoBuTYKgxEuv0zupqw==
Date: Wed, 30 Apr 2014 07:19:49 +0000
Message-ID: <7594FB04B1934943A5C02806D1A2204B1D2E53A6@ESESSMB209.ericsson.se>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [153.88.183.147]
Content-Type: multipart/alternative; boundary="_000_7594FB04B1934943A5C02806D1A2204B1D2E53A6ESESSMB209erics_"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrGLMWRmVeSWpSXmKPExsUyM+Jvja74koRgg5dv5S1e9qxkd2D0WLLk J1MAYxSXTUpqTmZZapG+XQJXxtwLXWwFP8Qqtn7qYm1gPC7SxcjJISFgItH/toUVwhaTuHBv PVsXIxeHkMBRRol5R04xQzhLGCW2/jjN3sXIwcEmYCHR/U8bpEFEQFGi9dpnRhBbWEBaYvm9 t4wQcQWJxZd+skPYehJXDs5lAbFZBFQlbly7CmbzCvhK/Dz0F6yGEWjx91NrmEBsZgFxiVtP 5jNBHCQgsWTPeWYIW1Ti5eN/rCAnSAgoSUzbmgZRni9x51E3M8RIQYmTM5+wTGAUmoVk0iwk ZbOQlEHEdSQW7P7EBmFrSyxb+JoZxj5z4DETsvgCRvZVjKLFqcXFuelGxnqpRZnJxcX5eXp5 qSWbGIERcXDLb90djKtfOx5iFOBgVOLhLf4SGSzEmlhWXJl7iFGag0VJnLftrnewkEB6Yklq dmpqQWpRfFFpTmrxIUYmDk6pBkZPQd7LH6JOzpEpqEzybQi8cWepYOHvLQblHxa4rDk1f51N 1fknTab8J9ySTEKmnON+I9eVwbbpMuv+jac7ZLrF3xVKBmyefX1btO6BkOtPD8nL9S489cq2 OLzSoi/Q13jJQrdJr1bOmFh3MHL1178eMix6cxhc+IMWR7DVLnbfXde5c73pRz0lluKMREMt 5qLiRADudf5jaQIAAA==
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/e8g2RgKKtHjCYu8G0rYHhkLJSLo
Subject: [AVTCORE] Errata on RFC 5764
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Apr 2014 07:19:57 -0000

--_000_7594FB04B1934943A5C02806D1A2204B1D2E53A6ESESSMB209erics_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi,

Some time ago, Martin Thompson created the following errata on RFC 5764:

http://www.rfc-editor.org/errata_search.php?rfc=3D5764

In my understanding, the errata is still open.

Regards,

Christer

--_000_7594FB04B1934943A5C02806D1A2204B1D2E53A6ESESSMB209erics_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal">Hi,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Some time ago, Martin Thompson created the following=
 errata on RFC 5764:<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal"><a href=3D"http://www.rfc-editor.org/errata_search.p=
hp?rfc=3D5764">http://www.rfc-editor.org/errata_search.php?rfc=3D5764</a><o=
:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">In my understanding, the errata is still open.<o:p><=
/o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Regards,<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoNormal">Christer<o:p></o:p></p>
</div>
</body>
</html>

--_000_7594FB04B1934943A5C02806D1A2204B1D2E53A6ESESSMB209erics_--


From nobody Wed Apr 30 07:37:46 2014
Return-Path: <martin.thomson@gmail.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02DA51A6FA7 for <avt@ietfa.amsl.com>; Wed, 30 Apr 2014 07:37:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qj5KRMHHBhAk for <avt@ietfa.amsl.com>; Wed, 30 Apr 2014 07:37:43 -0700 (PDT)
Received: from mail-we0-x235.google.com (mail-we0-x235.google.com [IPv6:2a00:1450:400c:c03::235]) by ietfa.amsl.com (Postfix) with ESMTP id 6BC881A6F92 for <avt@ietf.org>; Wed, 30 Apr 2014 07:37:43 -0700 (PDT)
Received: by mail-we0-f181.google.com with SMTP id q58so1794559wes.12 for <avt@ietf.org>; Wed, 30 Apr 2014 07:37:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=u0jd2RfILG36bGauILgk3J5FXee64pC2GmoF/MzH07w=; b=oIREo8eWHyFHivwQPKY3fmePxg/KKYyYcWZg1IAeYcpnQurNAdHkHVGIw5GWRIXD5a bplcSZPZpBrFA+RLdTb9i1vXPGJLsRfrLjVunRWoebuIgYEb3z3hsheJI761hVhYkWrZ 5lXsaU8tl4aWbSapxJPc2b9qEymvC99sv7baH1NO7AFvaHdO/vxXuiDCQOyQsndRxCIs 0F1BYW7E0/O2twURZLELFEJgY+3ab0UnBTXbotjh3k8gA/HkeQu1lzluMMftsZCql2Pv pvsKGLNgqECKpsdmRXfkfXASzOW7xjoKahL04XKw5Q+ash6+fypku45XZRl83ZghLHHk Lwrg==
MIME-Version: 1.0
X-Received: by 10.194.171.167 with SMTP id av7mr4317678wjc.32.1398868661483; Wed, 30 Apr 2014 07:37:41 -0700 (PDT)
Received: by 10.227.77.10 with HTTP; Wed, 30 Apr 2014 07:37:41 -0700 (PDT)
Received: by 10.227.77.10 with HTTP; Wed, 30 Apr 2014 07:37:41 -0700 (PDT)
In-Reply-To: <7594FB04B1934943A5C02806D1A2204B1D2E53A6@ESESSMB209.ericsson.se>
References: <7594FB04B1934943A5C02806D1A2204B1D2E53A6@ESESSMB209.ericsson.se>
Date: Wed, 30 Apr 2014 07:37:41 -0700
Message-ID: <CABkgnnWK0jtXy1hAd7n2gEj6+ifdksZyT7QgNwqB0nje1Y4SpQ@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: Christer Holmberg <christer.holmberg@ericsson.com>
Content-Type: multipart/alternative; boundary=089e0122f2cea7c02304f8437df8
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/0a713R60EbggtOhXM0ZhgktAIvc
Cc: avt@ietf.org
Subject: Re: [AVTCORE] Errata on RFC 5764
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Apr 2014 14:37:45 -0000

--089e0122f2cea7c02304f8437df8
Content-Type: text/plain; charset=UTF-8

That's right. It is a small point, but worth clarifying.
On Apr 30, 2014 12:20 AM, "Christer Holmberg" <
christer.holmberg@ericsson.com> wrote:

>  Hi,
>
>
>
> Some time ago, Martin Thompson created the following errata on RFC 5764:
>
>
>
> http://www.rfc-editor.org/errata_search.php?rfc=5764
>
>
>
> In my understanding, the errata is still open.
>
>
>
> Regards,
>
>
>
> Christer
>
> _______________________________________________
> Audio/Video Transport Core Maintenance
> avt@ietf.org
> https://www.ietf.org/mailman/listinfo/avt
>
>

--089e0122f2cea7c02304f8437df8
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<p dir=3D"ltr">That&#39;s right. It is a small point, but worth clarifying.=
</p>
<div class=3D"gmail_quote">On Apr 30, 2014 12:20 AM, &quot;Christer Holmber=
g&quot; &lt;<a href=3D"mailto:christer.holmberg@ericsson.com">christer.holm=
berg@ericsson.com</a>&gt; wrote:<br type=3D"attribution"><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex">






<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div>
<p class=3D"MsoNormal">Hi,<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Some time ago, Martin Thompson created the following=
 errata on RFC 5764:<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal"><a href=3D"http://www.rfc-editor.org/errata_search.p=
hp?rfc=3D5764" target=3D"_blank">http://www.rfc-editor.org/errata_search.ph=
p?rfc=3D5764</a><u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">In my understanding, the errata is still open.<u></u=
><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Regards,<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Christer<u></u><u></u></p>
</div>
</div>

<br>_______________________________________________<br>
Audio/Video Transport Core Maintenance<br>
<a href=3D"mailto:avt@ietf.org">avt@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/avt" target=3D"_blank">htt=
ps://www.ietf.org/mailman/listinfo/avt</a><br>
<br></blockquote></div>

--089e0122f2cea7c02304f8437df8--


From nobody Wed Apr 30 08:56:37 2014
Return-Path: <worley@ariadne.com>
X-Original-To: avt@ietfa.amsl.com
Delivered-To: avt@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2FD01A08DD for <avt@ietfa.amsl.com>; Wed, 30 Apr 2014 08:56:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BxhFtqml2xSt for <avt@ietfa.amsl.com>; Wed, 30 Apr 2014 08:56:34 -0700 (PDT)
Received: from qmta06.westchester.pa.mail.comcast.net (qmta06.westchester.pa.mail.comcast.net [IPv6:2001:558:fe14:43:76:96:62:56]) by ietfa.amsl.com (Postfix) with ESMTP id 8DA0C1A6F36 for <avt@ietf.org>; Wed, 30 Apr 2014 08:56:34 -0700 (PDT)
Received: from omta11.westchester.pa.mail.comcast.net ([76.96.62.36]) by qmta06.westchester.pa.mail.comcast.net with comcast id wDXV1n00F0mv7h056FwY30; Wed, 30 Apr 2014 15:56:32 +0000
Received: from hobgoblin.ariadne.com ([24.34.72.61]) by omta11.westchester.pa.mail.comcast.net with comcast id wFwY1n00E1KKtkw3XFwYBj; Wed, 30 Apr 2014 15:56:32 +0000
Received: from hobgoblin.ariadne.com (hobgoblin.ariadne.com [127.0.0.1]) by hobgoblin.ariadne.com (8.14.7/8.14.7) with ESMTP id s3UFuVv6024406; Wed, 30 Apr 2014 11:56:31 -0400
Received: (from worley@localhost) by hobgoblin.ariadne.com (8.14.7/8.14.7/Submit) id s3UFuVOh024403; Wed, 30 Apr 2014 11:56:31 -0400
Date: Wed, 30 Apr 2014 11:56:31 -0400
Message-Id: <201404301556.s3UFuVOh024403@hobgoblin.ariadne.com>
From: worley@ariadne.com (Dale R. Worley)
Sender: worley@ariadne.com (Dale R. Worley)
To: Christer Holmberg <christer.holmberg@ericsson.com>
In-reply-to: <7594FB04B1934943A5C02806D1A2204B1D2E53A6@ESESSMB209.ericsson.se> (christer.holmberg@ericsson.com)
References: <7594FB04B1934943A5C02806D1A2204B1D2E53A6@ESESSMB209.ericsson.se>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20140121; t=1398873393; bh=n6TUY9sbYqasLc6ahPNWhkZMBBV2omHJGKrcwcZnPkQ=; h=Received:Received:Received:Received:Date:Message-Id:From:To: Subject; b=r4m2tYeAmI5rQ2iL7REdAu3G7CG5PLc4+CZvnrVfmwEY6qaxjEtrOJhklobahFY2A HLvFQWJLmsbzab3wTIlQE7Msi/aXIamzqtAif4Ytlt4PuxpxsRcjF4tKdeX7iNj2Je pK2w2lzVqRbsh8Or5tB+4ebGFVVRCWr4xyZbgqA+a9Q/i2NlPrnE6UdDDhjLA2NYgb WLHBelxLG2ejX6f4aatpmtEhKnqnIxHGRk40Ce7PilT3kNKebufUjre17pX3crDLOp ECsm241PS+bPT1p2TCMjAU7OuQSRz8n/5MqRcyHDTeKcM7Kp3N1CacEKqPVamjYaka L2s8X71wy8kfQ==
Archived-At: http://mailarchive.ietf.org/arch/msg/avt/OqRMgyxeIk68T_pEhUuTNp3YsSU
Cc: avt@ietf.org
Subject: Re: [AVTCORE] Errata on RFC 5764
X-BeenThere: avt@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Audio/Video Transport Core Maintenance <avt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/avt>, <mailto:avt-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/avt/>
List-Post: <mailto:avt@ietf.org>
List-Help: <mailto:avt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/avt>, <mailto:avt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Apr 2014 15:56:37 -0000

> From: Christer Holmberg <christer.holmberg@ericsson.com>
> 
> Some time ago, Martin Thompson created the following errata on RFC 5764:
> 
> http://www.rfc-editor.org/errata_search.php?rfc=5764
> 
> In my understanding, the errata is still open.

It seems like it might be worth specifying that STUN message types
aren't allowed to exceed 1279 (as a modification to STUN).  That
shouldn't be a practical constraint, but eliminates the demultiplexing
problem.

Dale

