Skip to content

Commit

Permalink
Script updating gh-pages from 38482e0. [ci skip]
Browse files Browse the repository at this point in the history
  • Loading branch information
ID Bot committed Jul 6, 2024
1 parent 8a208c2 commit 8a5cb53
Show file tree
Hide file tree
Showing 3 changed files with 53 additions and 37 deletions.
68 changes: 37 additions & 31 deletions draft-tschofenig-tls-extended-key-update.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -1427,12 +1427,16 @@ <h2 id="name-extended-key-update-message">
the old keys. Additionally, both sides MUST enforce that a NewKeyUpdate
with the old key is received before accepting any messages encrypted
with the new key.<a href="#section-5-10" class="pilcrow"></a></p>
<p id="section-5-11">If implementations independently initiate the extended key update
procedure, and they cross in flight, the result is that each side
increments keys by two generations.<a href="#section-5-11" class="pilcrow"></a></p>
<p id="section-5-11">If TLS peers independently initiate the extended key update
procedure and the requests cross in flight, the ExtendedKeyUpdateRequest
message with the lower lexicographic order for the key_exchange value
in the KeyShareEntry will be discarded by the TLS peers. This approach prevents
each side incrementing keys by two generations.<a href="#section-5-11" class="pilcrow"></a></p>
<p id="section-5-12">Endpoints MAY handle an excessive number of ExtendedKeyUpdateRequest messages by
terminating the connection using a "too_many_extendedkeyupdate_requested" alert (alert number TBD).<a href="#section-5-12" class="pilcrow"></a></p>
<span id="name-handshake-structure"></span><div id="fig-handshake">
<figure id="figure-2">
<div class="alignLeft art-text artwork" id="section-5-12.1">
<div class="alignLeft art-text artwork" id="section-5-13.1">
<pre>
struct {
HandshakeType msg_type; /* handshake type */
Expand All @@ -1457,9 +1461,9 @@ <h2 id="name-extended-key-update-message">
<a href="#name-handshake-structure" class="selfRef">Handshake Structure.</a>
</figcaption></figure>
</div>
<p id="section-5-13">The ExtendedKeyUpdate and the KeyUpdates MAY be used in combination
<p id="section-5-14">The ExtendedKeyUpdate and the KeyUpdates MAY be used in combination
over the lifetime of a TLS communication session, depending on the
desired security properties.<a href="#section-5-13" class="pilcrow"></a></p>
desired security properties.<a href="#section-5-14" class="pilcrow"></a></p>
</section>
</div>
<div id="key_update">
Expand Down Expand Up @@ -1548,7 +1552,7 @@ <h2 id="name-example">
{CertificateVerify} | Auth
{Finished} v
&lt;--------
^ {Certificate
^ {Certificate}
Auth | {CertificateVerify}
v {Finished} --------&gt;
...
Expand Down Expand Up @@ -1619,42 +1623,44 @@ <h2 id="name-security-considerations">
<h2 id="name-iana-considerations">
<a href="#section-11" class="section-number selfRef">11. </a><a href="#name-iana-considerations" class="section-name selfRef">IANA Considerations</a>
</h2>
<p id="section-11-1">IANA is requested to add the following entry to the "TLS Flags"
extension registry <span>[<a href="#TLS-Ext-Registry" class="cite xref">TLS-Ext-Registry</a>]</span>:<a href="#section-11-1" class="pilcrow"></a></p>
<p id="section-11-1">IANA is requested to allocate value TBD for the "too_many_extendedkeyupdate_requested" alert
in the "TLS Alerts" registry. The value for the "DTLS-OK" column is "Y".<a href="#section-11-1" class="pilcrow"></a></p>
<p id="section-11-2">IANA is requested to add the following entry to the "TLS Flags"
extension registry <span>[<a href="#TLS-Ext-Registry" class="cite xref">TLS-Ext-Registry</a>]</span>:<a href="#section-11-2" class="pilcrow"></a></p>
<ul class="normal">
<li class="normal" id="section-11-2.1">
<p id="section-11-2.1.1">Value: TBD1<a href="#section-11-2.1.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-3.1">
<p id="section-11-3.1.1">Value: TBD1<a href="#section-11-3.1.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="section-11-2.2">
<p id="section-11-2.2.1">Flag Name: extended_key_update<a href="#section-11-2.2.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-3.2">
<p id="section-11-3.2.1">Flag Name: extended_key_update<a href="#section-11-3.2.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="section-11-2.3">
<p id="section-11-2.3.1">Messages: CH, EE<a href="#section-11-2.3.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-3.3">
<p id="section-11-3.3.1">Messages: CH, EE<a href="#section-11-3.3.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="section-11-2.4">
<p id="section-11-2.4.1">Recommended: Y<a href="#section-11-2.4.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-3.4">
<p id="section-11-3.4.1">Recommended: Y<a href="#section-11-3.4.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="section-11-2.5">
<p id="section-11-2.5.1">Reference: [This document]<a href="#section-11-2.5.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-3.5">
<p id="section-11-3.5.1">Reference: [This document]<a href="#section-11-3.5.1" class="pilcrow"></a></p>
</li>
</ul>
<p id="section-11-3">IANA is requested to add the following entry to the "TLS
HandshakeType" registry <span>[<a href="#TLS-Ext-Registry" class="cite xref">TLS-Ext-Registry</a>]</span>:<a href="#section-11-3" class="pilcrow"></a></p>
<p id="section-11-4">IANA is requested to add the following entry to the "TLS
HandshakeType" registry <span>[<a href="#TLS-Ext-Registry" class="cite xref">TLS-Ext-Registry</a>]</span>:<a href="#section-11-4" class="pilcrow"></a></p>
<ul class="normal">
<li class="normal" id="section-11-4.1">
<p id="section-11-4.1.1">Value: TBD2<a href="#section-11-4.1.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-5.1">
<p id="section-11-5.1.1">Value: TBD2<a href="#section-11-5.1.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="section-11-4.2">
<p id="section-11-4.2.1">Description: extended_key_update<a href="#section-11-4.2.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-5.2">
<p id="section-11-5.2.1">Description: extended_key_update<a href="#section-11-5.2.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="section-11-4.3">
<p id="section-11-4.3.1">DTLS-OK: Y<a href="#section-11-4.3.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-5.3">
<p id="section-11-5.3.1">DTLS-OK: Y<a href="#section-11-5.3.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="section-11-4.4">
<p id="section-11-4.4.1">Reference: [This document]<a href="#section-11-4.4.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-5.4">
<p id="section-11-5.4.1">Reference: [This document]<a href="#section-11-5.4.1" class="pilcrow"></a></p>
</li>
<li class="normal" id="section-11-4.5">
<p id="section-11-4.5.1">Comment:<a href="#section-11-4.5.1" class="pilcrow"></a></p>
<li class="normal" id="section-11-5.5">
<p id="section-11-5.5.1">Comment:<a href="#section-11-5.5.1" class="pilcrow"></a></p>
</li>
</ul>
</section>
Expand Down
18 changes: 14 additions & 4 deletions draft-tschofenig-tls-extended-key-update.txt
View file
Original file line number Diff line number Diff line change
Expand Up @@ -303,9 +303,15 @@ Table of Contents
NewKeyUpdate with the old key is received before accepting any
messages encrypted with the new key.

If implementations independently initiate the extended key update
procedure, and they cross in flight, the result is that each side
increments keys by two generations.
If TLS peers independently initiate the extended key update procedure
and the requests cross in flight, the ExtendedKeyUpdateRequest
message with the lower lexicographic order for the key_exchange value
in the KeyShareEntry will be discarded by the TLS peers. This
approach prevents each side incrementing keys by two generations.

Endpoints MAY handle an excessive number of ExtendedKeyUpdateRequest
messages by terminating the connection using a
"too_many_extendedkeyupdate_requested" alert (alert number TBD).

struct {
HandshakeType msg_type; /* handshake type */
Expand Down Expand Up @@ -402,7 +408,7 @@ Table of Contents
{CertificateVerify} | Auth
{Finished} v
<--------
^ {Certificate
^ {Certificate}
Auth | {CertificateVerify}
v {Finished} -------->
...
Expand Down Expand Up @@ -455,6 +461,10 @@ Table of Contents

11. IANA Considerations

IANA is requested to allocate value TBD for the
"too_many_extendedkeyupdate_requested" alert in the "TLS Alerts"
registry. The value for the "DTLS-OK" column is "Y".

IANA is requested to add the following entry to the "TLS Flags"
extension registry [TLS-Ext-Registry]:

Expand Down
4 changes: 2 additions & 2 deletions index.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -29,15 +29,15 @@ <h2>Preview for branch <a href="tireddy2-patch-1">tireddy2-patch-1</a></h2>
<tr>
<td><a href="tireddy2-patch-1/draft-tschofenig-tls-extended-key-update.html" class="html draft-tschofenig-tls-extended-key-update" title="Extended Key Update for Transport Layer Security (TLS) 1.3 (HTML)">Extended Key Update for TLS</a></td>
<td><a href="tireddy2-patch-1/draft-tschofenig-tls-extended-key-update.txt" class="txt draft-tschofenig-tls-extended-key-update" title="Extended Key Update for Transport Layer Security (TLS) 1.3 (Text)">plain text</a></td>
<td><a href="https://author-tools.ietf.org/api/iddiff?url_1=https://hannestschofenig.github.io/tls-key-update/draft-tschofenig-tls-extended-key-update.txt&amp;url_2=https://hannestschofenig.github.io/tls-key-update/tireddy2-patch-1/draft-tschofenig-tls-extended-key-update.txt" class="diff draft-tschofenig-tls-extended-key-update">diff with main</a></td>
<td>same as main</td>
</tr>
</table>
<h2>Preview for branch <a href="hannestschofenig-patch-1">hannestschofenig-patch-1</a></h2>
<table id="branch-hannestschofenig-patch-1">
<tr>
<td><a href="hannestschofenig-patch-1/draft-tschofenig-tls-extended-key-update.html" class="html draft-tschofenig-tls-extended-key-update" title="Extended Key Update for Transport Layer Security (TLS) 1.3 (HTML)">Extended Key Update for TLS</a></td>
<td><a href="hannestschofenig-patch-1/draft-tschofenig-tls-extended-key-update.txt" class="txt draft-tschofenig-tls-extended-key-update" title="Extended Key Update for Transport Layer Security (TLS) 1.3 (Text)">plain text</a></td>
<td>same as main</td>
<td><a href="https://author-tools.ietf.org/api/iddiff?url_1=https://hannestschofenig.github.io/tls-key-update/draft-tschofenig-tls-extended-key-update.txt&amp;url_2=https://hannestschofenig.github.io/tls-key-update/hannestschofenig-patch-1/draft-tschofenig-tls-extended-key-update.txt" class="diff draft-tschofenig-tls-extended-key-update">diff with main</a></td>
</tr>
</table>
<script>
Expand Down

0 comments on commit 8a5cb53

Please sign in to comment.