Subject: [quicwg/base-drafts] 39c57e: Perform stateless reset token comparisons in const...

From: Martin Thomson <[email-masked]>
Date: Tue, 15 Oct 2019 16:45:54 -0700

Branch: refs/heads/ct-sr
  Home:   https://github.com/quicwg/base-drafts
  Commit: 39c57edf6215964673155837dcf97880cac2fb63
      https://github.com/quicwg/base-drafts/commit/39c57edf6215964673155837dcf97880cac2fb63
  Author: Martin Thomson <[email-masked]>
  Date:   2019-10-15 (Tue, 15 Oct 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Perform stateless reset token comparisons in constant time

Otherwise information about the token might leak.

As @mikkelfj says, there is no strict need to compare across the entire
set of values.  That could leaks two things: that the inbound packet was
dropped and the total number of stateless reset tokens.  Both are things
that we might care about, but will probably find prohibitive to protect.

Closes #2152.

  Commit: c42516d7681ebbd61839bf83910dd37fc05465b1
      https://github.com/quicwg/base-drafts/commit/c42516d7681ebbd61839bf83910dd37fc05465b1
  Author: Martin Thomson <[email-masked]>
  Date:   2019-10-15 (Tue, 15 Oct 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Be a little clearer about what is being protected

  Commit: 3bd85b455bad9d6e6196f6f04454701661d077f8
      https://github.com/quicwg/base-drafts/commit/3bd85b455bad9d6e6196f6f04454701661d077f8
  Author: Kazuho Oku <[email-masked]>
  Date:   2019-10-15 (Tue, 15 Oct 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  add example that uses PRF

  Commit: 03979a0235d6fd3ff79555911c79bc5c10e2b61a
      https://github.com/quicwg/base-drafts/commit/03979a0235d6fd3ff79555911c79bc5c10e2b61a
  Author: Martin Thomson <[email-masked]>
  Date:   2019-10-15 (Tue, 15 Oct 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Fix stateless reset ordering; use datagrams

This removes the strict requirement on processing order for stateless
reset.  This allows endpoints to decide whether to process every packet
this way or to just treat those that fail to be processed for other
reasons.

This also switches to detection on a *datagram* basis.

Closes #3085.

  Commit: 354183119367ddc2f08ae4604c1323600d5bfe4c
      https://github.com/quicwg/base-drafts/commit/354183119367ddc2f08ae4604c1323600d5bfe4c
  Author: Martin Thomson <[email-masked]>
  Date:   2019-10-15 (Tue, 15 Oct 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Reword again

  Commit: 562ac4e7deaf80d50082f89507e72d9b5b71ecc6
      https://github.com/quicwg/base-drafts/commit/562ac4e7deaf80d50082f89507e72d9b5b71ecc6
  Author: Martin Thomson <[email-masked]>
  Date:   2019-10-15 (Tue, 15 Oct 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  duplicates are just duplicate packet numbers

Co-Authored-By: Jana Iyengar <[email-masked]>

  Commit: a5ecd238daf0f59a35460085c8b05a2c6011243a
      https://github.com/quicwg/base-drafts/commit/a5ecd238daf0f59a35460085c8b05a2c6011243a
  Author: Martin Thomson <[email-masked]>
  Date:   2019-10-15 (Tue, 15 Oct 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  compares

Co-Authored-By: Jana Iyengar <[email-masked]>

  Commit: 0b654d69abd679010d3640b7a63d8488bc81f0ff
      https://github.com/quicwg/base-drafts/commit/0b654d69abd679010d3640b7a63d8488bc81f0ff
  Author: Martin Thomson <[email-masked]>
  Date:   2019-10-15 (Tue, 15 Oct 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  any packet

  Commit: 59a8238dd289a5c7e54a40ca9a791227ae69284d
      https://github.com/quicwg/base-drafts/commit/59a8238dd289a5c7e54a40ca9a791227ae69284d
  Author: Martin Thomson <[email-masked]>
  Date:   2019-10-15 (Tue, 15 Oct 2019)

  Changed paths:
    M draft-ietf-quic-transport.md

  Log Message:
  -----------
  Apply Jana's suggestion

Compare: https://github.com/quicwg/base-drafts/compare/b5dba271d4bd...59a8238dd289