Subject: [quicwg/base-drafts] Reordering of really old packets (#32)

From: Martin Thomson <[email-masked]>
Date: Sun, 27 Nov 2016 21:20:46 -0800

>From @janaiyengar:

> We need rules using
> packet numbers, such that an old packet with a key phase matching the
> current expected should not cause the connection to blow up.

With multiple key updates, there is a possibility that packets from epoch n could collide with packets that were sent in epoch n+2.  This is unlikely, but still something implementations need to handle.  It's not a problem as such unless you insist that connections blow up on decryption failure (which we shouldn't, that's a DoS vector).

It's also not a really bad problem because we have packet numbers that should identify the reordered packet as belonging to the older epoch.  We know what the keys were at that time (if we chose to retain them), so it's not even the case that we need to discard the packet every time.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/32