
From nobody Thu Oct  8 04:18:21 2015
Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 521EF1B2BDA for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 04:18:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MjvdtWzUgAeI for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 04:18:15 -0700 (PDT)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65F381B2B8F for <perc@ietf.org>; Thu,  8 Oct 2015 04:18:12 -0700 (PDT)
X-AuditID: c1b4fb30-f79626d000006adf-72-561650f22544
Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 18.08.27359.2F056165; Thu,  8 Oct 2015 13:18:10 +0200 (CEST)
Received: from ESESSMB309.ericsson.se ([169.254.9.97]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0248.002; Thu, 8 Oct 2015 13:18:10 +0200
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
To: "perc@ietf.org" <perc@ietf.org>
Thread-Topic: Review of needed information for inner security
Thread-Index: AdEBuoOigsVGsWtmR3iAEDjUPDtuQg==
Date: Thu, 8 Oct 2015 11:18:09 +0000
Message-ID: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
Accept-Language: sv-SE, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [153.88.183.150]
Content-Type: multipart/alternative; boundary="_000_52E4A8FC978E0241AE652516E24CAF00DADF30ESESSMB309ericsso_"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrKLMWRmVeSWpSXmKPExsUyM+Jvje6nALEwg7Z+U4vVC6czOjB6LFny kymAMYrLJiU1J7MstUjfLoEr4+z364wFm/YzV+xa9J61gXHaBOYuRk4OCQETiW9PDzNC2GIS F+6tZ+ti5OIQEjjKKHGybwI7hLOIUeLf8j5WkCo2AQuJmz8a2UBsEQFliW/b94DFmQVyJWb9 bmECsYWBao7cO8wOUWMrsaTxLSuErSdx7NANsBoWARWJ699msnQxcnDwCnhLzD8EFmYUkJW4 //0eC8RIcYlbT+YzQRwnILFkz3moo0UlXj7+xwphK0ms2H6JEaI+X2LF9PVgNbwCghInZz5h mcAoPAvJqFlIymYhKYOI60ncmDqFDcLWlli28DUzhK0rMePfIRZk8QWM7KsYRYtTi5Ny042M 9FKLMpOLi/Pz9PJSSzYxAuPl4JbfBjsYXz53PMQowMGoxMO70E4sTIg1say4MvcQozQHi5I4 bzPTg1AhgfTEktTs1NSC1KL4otKc1OJDjEwcnFINjK3bD65Z8qzqTsUtm85iM6dpbRHPrP0l ZYs4K7hedF5Lvv9X78Ppta1XXGeGL9i4Wni577ug/ovvCx3Zb6fNFMt5O+XZp0tTpNduvLD5 +fUnWxl7c+ZInpvy6UTW50DOhylTlzMmpDa2CviusrjNaGbyacN6+QLpI1dcxN13s+72rkpM OrzO87cSS3FGoqEWc1FxIgBzjMpNeAIAAA==
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/kWLQ_3qKjd1wXs_1uzp_RqKIzLU>
Cc: =?iso-8859-1?Q?Mats_N=E4slund?= <mats.naslund@ericsson.com>, John Mattsson <john.mattsson@ericsson.com>
Subject: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Oct 2015 11:18:19 -0000

--_000_52E4A8FC978E0241AE652516E24CAF00DADF30ESESSMB309ericsso_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,

John, Mats and I have spent some time reviewing what information we see
as needed for the RTP payload security, hence called inner security. We
also in the end have a proposal for how to include that information.

So we have considered the three topologies that are relevant for PERC.
These three as named in
https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-topologies-update/:

1. Relay - Transport Translator (Section 3.5.1)
2. Media Switching Mixer (Section 3.6.2)
3. Selective Forwarding Middlebox (Section 3.7)

First we look how the SSRCs are handled by these middleboxes. This is
important as it affects how one can track the media streams flowing
through the system.

So the Relay (1) performs no manipulation on the RTP level. Thus, a
packet being sent will arrive at the receiver except for transport
losses. This results in constant SSRCs end to end between sender and
receiver.


The Media Switching Mixer (2) has some important properties. As the
SSRCs used towards the receiver from the RTP mixer (MDD) is task/role
based, rather than related to original source, the inner security
context identification can't be made based on the SSRC, rather an
additional field has to be used. It is important to note that the
sequence of payloads for this stream is created by switching between the
available incoming streams. At any given point in time one specific
stream of inner payloads are forwarded for each task/role. Which it is can =
be changed at almost
any point. The CSRC would be the normal method for identifying the
original media contributor in a non PERC context. In a PERC context it
seems reasonable to also use CSRC. Especially, as there can't be any
media mixing due to the protected inner payloads, there can only be one
CSRC for any payload. So in this case the SSRC has no relation to the
media sources, and instead it is CSRC (or equivalent) that would have a
relation with the media source.

The SFM (3) although selectively forwarding media, it does have a one to on=
e
handling of SSRCs, one SSRC arriving at a SFM will have its own SSRC
going out. Note that remapping may occur so that incoming and outgoing
SSRC is different.

The remapping of SSRC could occur also in the switching RTP mixer,
although it is not a recommended behaviour.

What was discussed last design team meeting was the view that we want to
enable the remapping of SSRC when needed. It is a simple way of dealing
with SSRC collisions in SFMs for example. However, one need to be aware
of the potential downside. First, by allowing re-mapping we don't have a
global stable identifier towards the originating end-point and its
identification of the media stream. This is something that at least on a
higher layer is needed to prevent substitution attacks, where the MDD
attempts to replace one endpoint's media streams with another endpoints
stream.

We also note that if end-to-end protected RTCP messages are used, not
having a global coordinated SSRC space within a conference, there will
be identification issues, and likely some other id space would be needed.

The next RTP header field that we considered was the RTP sequence
number. At the sender side, the RTP sequence number will be directly
related to the inner payload. However, that relation is not retained
across an MDD. An RTP switching mixer, will create an RTP sequence
number solely related to the out going created stream. As that is a
switched combined stream the corresponding inner sequence number will
jump back and forth at each switch, and the relative offset will change
with each switch.

For the SFM the outer RTP sequence number for an outgoing stream will be
counting the inner payloads selected to be sent (forwarded). Thus, the
offset changes at each time a decision to forward or not forward is made.

The Payload Type field is dependent on the signalling, and likely have
local assignment only. Each joining endpoint will negotiate common sets
of payload types with the signaling server representing the conference.
However, the signalling server when using offer/answer not force an
endpoint to use a particular PT field value to represent a commonly used
codec configuration. Thus, PT rewriting will occur at the MDDs,
independently of the topology.

The RTP marker bit is actually a field owned by the payload format, and
thus are tightly connected to the inner payload. We see that this field
is not possible to modify by the MDD, instead it should be included part
of the payload's integrity protected data.


The padding flag is tightly connected to the inner payload and should

not be modified by the MDD, instead it should be included part

of the payload's integrity protected data.

The Timestamp field also relates to the presentation timeline for the
outgoing stream. Here there is a difference between the SFM, which
maintains the original senders timeline, and the RTP switching mixer
that needs to create its outgoing streams timeline in a consistent way.
This requires rewriting the timestamp, but maintain the inter spacing
between media frames within the inner payload.


Proposal for how to structure information
-----------------------------------------
Our proposal for how the above information should be handled and
maintained are the following.

The inner payload's crypto context is looked up based on the CSRC if
that field is present (for RTP switching mixers), else the SSRC.

The inner crypto context includes the necessary key (called transport
key below) and other crypto
information. To prevent attacks we also need a identifier for this
particular inner media stream. For this we want to have two parts, one
part identifying the endpoint, and another identifying the media stream.
The endpoint identifier can either be globally unique and assigned by
the master key server, thus enabling a compact field scaled to planned
maximum participation in a conference. Alternatively if significant
longer randomly picked. An endpoint id assigned by the master key server
seems preferable as that enables mapping between the endpoint id and
other identifiers meant for humans. The stream id is managed by the endpoin=
t. We
foresee that these two IDs are carried by EKT to establish this context.
The field lengths can be configurable and the used values provided in
the key-management protocol for the EKT master key. Thus enabling that
most conference to use 1 + 1 byte enabling 256 endpoints which each can
have 256 streams. Sufficient for most use cases, and for those use cases
that requires more participants or streams one can use longer fields
within the conference.

The Inner Payload gets an explicit sequence number. We propose 32 bits
that counts the number of sent packets using a specific transport key
used to protect this inner payload. It is part of the inner payload to
keep these close, and minimize the overhead. Using an RTP header
extension will in many case have more overhead.

We foresee that PERC systems will perform transport re-keying quite
frequently, that is why 32-bits will be sufficient, and if that is on
its way to wrap, the sending end-point will have to rekey its transport
key for this media stream. We note that 32-bits are sufficient also for
really high bit-rates. At 3 Gbps using 1200 bytes of payload one need to
rekey approximately every 3 hours. Using 24 bits would result in
rekeying every 53 seconds for this case.

To ensure that replay protection is present, and to prevent MDD reordering
of packets, one will need to have a sequence number also for the used
transport key. That way when one starts using a new transport key, one
can reset the inner payload sequence number, thus enabling long lived
sessions.

For the cases where one wants to prevent joining and leaving participant
to decrypt media prior or after joining and leaving respectively then we
forsee the need for master key rekeying. Also that needs to be tracked,
to prevent replay attacks. Thus also on this level one needs to have a
associated sequence number with the master key. When one
starts using a new master transport key, the transport key sequence
number is reset.

The inner payload identification will thus basically be
"Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr". The
first two will determined through the key management protocol and EKT.
Enabling the receiver to determine if a payload is less recent then the
latest received one. This enables one to have a short window for
accepting older packets to deal with re-order events thus preventing
replays. We note that the MDD will be able to delay packets. Thus when
switching back to a source select any point between the previous sent
and the latest received by the MDD, as the point of continuing
transmission. We likely need to discuss if that is a sufficient level of
protection. We need to deal with expected levels of transport delay.


To summarize our proposal:

As part of the inner RTP payload for a particular media stream:
- Explicit 32-bit sequence number
- Use CSRC/SSRC for context lookup on packet reception.

Use EKT for context population per media stream of the following
information:

-   Endpoint ID + Endpoint specific stream ID

-   Transport key used to protect payload

-   Transport key sequence number

Stream specific context also contain:
Highest seen inner payload identifier "Master Sequence nr : Transport
Sequence nr. : Packet Sequence nr" and replay window.

Key-management for EKT master key
- EKT Master key
- Master Key sequence number
- Field lengths for Endpoint Id and Endpoint Stream ID
- Endpoint ID

IV includes:
- Endpoint ID + Endpoint specific stream ID
- Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr
e2e integrity protected information

- padding flag

- marker bit

- payload + padding + pad count (also encrypted)

- IV (only Inner_Payload_Seq_nr sent in each packet)


Looking forward to feedback on this.

Cheers

Magnus Westerlund
John Mattson
Mats N=E4slund

--_000_52E4A8FC978E0241AE652516E24CAF00DADF30ESESSMB309ericsso_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Courier;
	panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0cm;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:Courier;
	mso-fareast-language:EN-US;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	margin-top:0cm;
	margin-right:0cm;
	margin-bottom:0cm;
	margin-left:36.0pt;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:Courier;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";
	mso-fareast-language:EN-US;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
	{page:WordSection1;}
/* List Definitions */
@list l0
	{mso-list-id:1220020514;
	mso-list-type:hybrid;
	mso-list-template-ids:1812363770 340148462 69009411 69009413 69009409 6900=
9411 69009413 69009409 69009411 69009413;}
@list l0:level1
	{mso-level-start-at:0;
	mso-level-number-format:bullet;
	mso-level-text:-;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Consolas;
	mso-fareast-font-family:"Times New Roman";
	mso-bidi-font-family:"Times New Roman";}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Courier New";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Courier New";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:\F0B7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:"Courier New";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:\F0A7;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Wingdings;}
ol
	{margin-bottom:0cm;}
ul
	{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"SV" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Hi,<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">John, Mats and I have spent =
some time reviewing what information we see<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">as needed for the RTP payloa=
d security, hence called inner security. We<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">also in the end have a propo=
sal for how to include that information.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">So we have considered the th=
ree topologies that are relevant for PERC.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">These three as named in<o:p>=
</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US"><=
a href=3D"https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-topologie=
s-update/"><span style=3D"font-size:10.0pt;font-family:Consolas;color:#0000=
E9">https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-topologies-upda=
te/</span></a></span><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-fa=
mily:Consolas">:<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">1. Relay - Transport Transla=
tor (Section 3.5.1)<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">2. Media Switching Mixer (Se=
ction 3.6.2)<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">3. Selective Forwarding Midd=
lebox (Section 3.7)<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">First we look how the SSRCs =
are handled by these middleboxes. This is<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">important as it affects how =
one can track the media streams flowing<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">through the system.<o:p></o:=
p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">So the Relay (1) performs no=
 manipulation on the RTP level. Thus, a<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">packet being sent will arriv=
e at the receiver except for transport<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">losses. This results in cons=
tant SSRCs end to end between sender and<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">receiver.<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The Media Switching Mixer (2=
) has some important properties. As the<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">SSRCs used towards the recei=
ver from the RTP mixer (MDD) is task/role<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">based, rather than related t=
o original source, the inner security<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">context identification can't=
 be made based on the SSRC, rather an<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">additional field has to be u=
sed. It is important to note that the<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">sequence of payloads for thi=
s stream is created by switching between the<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">available incoming streams. =
At any given point in time one specific<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">stream of inner payloads are=
 forwarded for each task/role. Which it is can be changed at almost<o:p></o=
:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">any point. The CSRC would be=
 the normal method for identifying the<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">original media contributor i=
n a non PERC context. In a PERC context it<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">seems reasonable to also use=
 CSRC. Especially, as there can't be any<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">media mixing due to the prot=
ected inner payloads, there can only be one<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">CSRC for any payload. So in =
this case the SSRC has no relation to the<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">media sources, and instead i=
t is CSRC (or equivalent) that would have a<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">relation with the media sour=
ce.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The SFM (3) although selecti=
vely forwarding media, it does have a one to one<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">handling of SSRCs, one SSRC =
arriving at a SFM will have its own SSRC<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">going out. Note that remappi=
ng may occur so that incoming and outgoing<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">SSRC is different.<o:p></o:p=
></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The remapping of SSRC could =
occur also in the switching RTP mixer,<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">although it is not a recomme=
nded behaviour.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">What was discussed last desi=
gn team meeting was the view that we want to<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">enable the remapping of SSRC=
 when needed. It is a simple way of dealing<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">with SSRC collisions in SFMs=
 for example. However, one need to be aware<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">of the potential downside. F=
irst, by allowing re-mapping we don't have a<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">global stable identifier tow=
ards the originating end-point and its<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">identification of the media =
stream. This is something that at least on a<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">higher layer is needed to pr=
event substitution attacks, where the MDD<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">attempts to replace one endp=
oint's media streams with another endpoints<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">stream.<o:p></o:p></span></p=
>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">We also note that if end-to-=
end protected RTCP messages are used, not<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">having a global coordinated =
SSRC space within a conference, there will<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">be identification issues, an=
d likely some other id space would be needed.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The next RTP header field th=
at we considered was the RTP sequence<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">number. At the sender side, =
the RTP sequence number will be directly<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">related to the inner payload=
. However, that relation is not retained<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">across an MDD. An RTP switch=
ing mixer, will create an RTP sequence<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">number solely related to the=
 out going created stream. As that is a<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">switched combined stream the=
 corresponding inner sequence number will<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">jump back and forth at each =
switch, and the relative offset will change<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">with each switch.<o:p></o:p>=
</span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">For the SFM the outer RTP se=
quence number for an outgoing stream will be<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">counting the inner payloads =
selected to be sent (forwarded). Thus, the<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">offset changes at each time =
a decision to forward or not forward is made.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The Payload Type field is de=
pendent on the signalling, and likely have<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">local assignment only. Each =
joining endpoint will negotiate common sets<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">of payload types with the si=
gnaling server representing the conference.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">However, the signalling serv=
er when using offer/answer not force an<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">endpoint to use a particular=
 PT field value to represent a commonly used<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">codec configuration. Thus, P=
T rewriting will occur at the MDDs,<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">independently of the topolog=
y.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The RTP marker bit is actual=
ly a field owned by the payload format, and<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">thus are tightly connected t=
o the inner payload. We see that this field<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">is not possible to modify by=
 the MDD, instead it should be included part<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">of the payload's integrity p=
rotected data.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<pre><span lang=3D"EN-US" style=3D"font-family:Consolas">The </span><span l=
ang=3D"EN-US" style=3D"color:black">padding flag is tightly connected to th=
e inner payload and should <o:p></o:p></span></pre>
<pre><span lang=3D"EN-US" style=3D"color:black">not be modified by the MDD,=
 instead it should be included part<o:p></o:p></span></pre>
<pre><span lang=3D"EN-US" style=3D"color:black">of the payload's integrity =
protected data.<o:p></o:p></span></pre>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The Timestamp field also rel=
ates to the presentation timeline for the<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">outgoing stream. Here there =
is a difference between the SFM, which<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">maintains the original sende=
rs timeline, and the RTP switching mixer<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">that needs to create its out=
going streams timeline in a consistent way.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">This requires rewriting the =
timestamp, but maintain the inter spacing<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">between media frames within =
the inner payload.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Proposal for how to structur=
e information<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">----------------------------=
-------------<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Our proposal for how the abo=
ve information should be handled and<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">maintained are the following=
.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The inner payload's crypto c=
ontext is looked up based on the CSRC if<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">that field is present (for R=
TP switching mixers), else the SSRC.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The inner crypto context inc=
ludes the necessary key (called transport
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">key below) and other crypto<=
o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">information. To prevent atta=
cks we also need a identifier for this<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">particular inner media strea=
m. For this we want to have two parts, one<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">part identifying the endpoin=
t, and another identifying the media stream.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The endpoint identifier can =
either be globally unique and assigned by<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">the master key server, thus =
enabling a compact field scaled to planned<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">maximum participation in a c=
onference. Alternatively if significant<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">longer randomly picked. An e=
ndpoint id assigned by the master key server
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">seems preferable as that ena=
bles mapping between the endpoint id and
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">other identifiers meant for =
humans. The stream id is managed by the endpoint. We
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">foresee that these two IDs a=
re carried by EKT to establish this context.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The field lengths can be con=
figurable and the used values provided in<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">the key-management protocol =
for the EKT master key. Thus enabling that<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">most conference to use 1 &#4=
3; 1 byte enabling 256 endpoints which each can<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">have 256 streams. Sufficient=
 for most use cases, and for those use cases<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">that requires more participa=
nts or streams one can use longer fields<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">within the conference.<o:p><=
/o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The Inner Payload gets an ex=
plicit sequence number. We propose 32 bits<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">that counts the number of se=
nt packets using a specific transport key<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">used to protect this inner p=
ayload. It is part of the inner payload to<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">keep these close, and minimi=
ze the overhead. Using an RTP header<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">extension will in many case =
have more overhead.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">We foresee that PERC systems=
 will perform transport re-keying quite<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">frequently, that is why 32-b=
its will be sufficient, and if that is on<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">its way to wrap, the sending=
 end-point will have to rekey its transport<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">key for this media stream. W=
e note that 32-bits are sufficient also for<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">really high bit-rates. At 3 =
Gbps using 1200 bytes of payload one need to<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">rekey approximately every 3 =
hours. Using 24 bits would result in<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">rekeying every 53 seconds fo=
r this case.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">To ensure that replay protec=
tion is present, and to prevent MDD reordering
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">of packets, one will need to=
 have a sequence number also for the used
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">transport key. That way when=
 one starts using a new transport key, one
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">can reset the inner payload =
sequence number, thus enabling long lived
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">sessions.<o:p></o:p></span><=
/p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">For the cases where one want=
s to prevent joining and leaving participant<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">to decrypt media prior or af=
ter joining and leaving respectively then we<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">forsee the need for master k=
ey rekeying. Also that needs to be tracked,<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">to prevent replay attacks. T=
hus also on this level one needs to have a<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">associated sequence number w=
ith the master key. When one<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">starts using a new master tr=
ansport key, the transport key sequence
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">number is reset.<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">The inner payload identifica=
tion will thus basically be<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">&quot;Master_Key_seq_nr : Tr=
ansport_Key_Seq_nr : Inner_Payload_Seq_nr&quot;. The<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">first two will determined th=
rough the key management protocol and EKT.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Enabling the receiver to det=
ermine if a payload is less recent then the<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">latest received one. This en=
ables one to have a short window for<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">accepting older packets to d=
eal with re-order events thus preventing<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">replays. We note that the MD=
D will be able to delay packets. Thus when<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">switching back to a source s=
elect any point between the previous sent<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">and the latest received by t=
he MDD, as the point of continuing<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">transmission. We likely need=
 to discuss if that is a sufficient level of<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">protection. We need to deal =
with expected levels of transport delay.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">To summarize our proposal:<o=
:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">As part of the inner RTP pay=
load for a particular media stream:<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">- Explicit 32-bit sequence n=
umber<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">- Use CSRC/SSRC for context =
lookup on packet reception.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Use EKT for context populati=
on per media stream of the following<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">information:<o:p></o:p></spa=
n></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1;text-autospace:none">
<![if !supportLists]><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-fa=
mily:Consolas"><span style=3D"mso-list:Ignore">-<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-US" style=3D"font-size:10.0=
pt;font-family:Consolas">Endpoint ID &#43; Endpoint specific stream ID<o:p>=
</o:p></span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1;text-autospace:none">
<![if !supportLists]><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-fa=
mily:Consolas"><span style=3D"mso-list:Ignore">-<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-US" style=3D"font-size:10.0=
pt;font-family:Consolas">Transport key used to protect payload<o:p></o:p></=
span></p>
<p class=3D"MsoListParagraph" style=3D"text-indent:-18.0pt;mso-list:l0 leve=
l1 lfo1;text-autospace:none">
<![if !supportLists]><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-fa=
mily:Consolas"><span style=3D"mso-list:Ignore">-<span style=3D"font:7.0pt &=
quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><![endif]><span lang=3D"EN-US" style=3D"font-size:10.0=
pt;font-family:Consolas">Transport key sequence number<o:p></o:p></span></p=
>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Stream specific context also=
 contain:<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Highest seen inner payload i=
dentifier &quot;Master Sequence nr : Transport<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Sequence nr. : Packet Sequen=
ce nr&quot; and replay window.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Key-management for EKT maste=
r key<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">- EKT Master key<o:p></o:p><=
/span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">- Master Key sequence number=
<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">- Field lengths for Endpoint=
 Id and Endpoint Stream ID<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">- Endpoint ID<o:p></o:p></sp=
an></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">IV includes:<o:p></o:p></spa=
n></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-family:Consolas">-
</span><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-family:Consolas"=
>Endpoint ID &#43; Endpoint specific stream ID<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">- Master_Key_seq_nr : Transp=
ort_Key_Seq_nr : Inner_Payload_Seq_nr<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">e2e integrity protected info=
rmation<o:p></o:p></span></p>
<pre><span lang=3D"EN-US" style=3D"font-family:Consolas">- </span><span lan=
g=3D"EN-US" style=3D"color:black">padding flag<o:p></o:p></span></pre>
<pre><span lang=3D"EN-US" style=3D"color:black">- marker bit<o:p></o:p></sp=
an></pre>
<pre><span lang=3D"EN-US" style=3D"color:black">- payload &#43; padding &#4=
3; pad count (also encrypted)<o:p></o:p></span></pre>
<pre><span lang=3D"EN-US" style=3D"color:black">- IV (only </span><span lan=
g=3D"EN-US" style=3D"font-family:Consolas">Inner_Payload_Seq_nr sent in eac=
h packet</span><span lang=3D"EN-US" style=3D"color:black">)<o:p></o:p></spa=
n></pre>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Looking forward to feedback =
on this.<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas">Cheers<o:p></o:p></span></p>
<p class=3D"MsoNormal" style=3D"text-autospace:none"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt;font-family:Consolas"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-=
family:Consolas">Magnus Westerlund</span><span lang=3D"EN-US" style=3D"font=
-size:10.0pt"><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt">John=
 Mattson<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US" style=3D"font-size:11.0pt">Mats=
 N=E4slund<o:p></o:p></span></p>
</div>
</body>
</html>

--_000_52E4A8FC978E0241AE652516E24CAF00DADF30ESESSMB309ericsso_--


From nobody Thu Oct  8 06:14:54 2015
Return-Path: <prvs=2723bcc4a6=jonathan@vidyo.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF15B1B3394 for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 06:14:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.496
X-Spam-Level: 
X-Spam-Status: No, score=-1.496 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_SORBS_WEB=0.77, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IFvLM-TlGMNU for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 06:14:47 -0700 (PDT)
Received: from mx0a-00198e01.pphosted.com (mx0a-00198e01.pphosted.com [67.231.149.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C71C1B3386 for <perc@ietf.org>; Thu,  8 Oct 2015 06:14:47 -0700 (PDT)
Received: from pps.filterd (m0073109.ppops.net [127.0.0.1]) by mx0a-00198e01.pphosted.com (8.15.0.59/8.15.0.59) with SMTP id t98D6owL006079; Thu, 8 Oct 2015 09:14:42 -0400
Received: from mail.vidyo.com ([162.209.16.214]) by mx0a-00198e01.pphosted.com with ESMTP id 1x4nmmepms-1 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Thu, 08 Oct 2015 09:14:42 -0400
Received: from 492132-EXCH1.vidyo.com ([fe80::50:56ff:fe85:4f77]) by 492133-EXCH2.vidyo.com ([fe80::50:56ff:fe85:6b62%13]) with mapi id 14.03.0195.001; Thu, 8 Oct 2015 08:14:40 -0500
From: Jonathan Lennox <jonathan@vidyo.com>
To: Magnus Westerlund <magnus.westerlund@ericsson.com>
Thread-Topic: [Perc] Review of needed information for inner security
Thread-Index: AdEBuoOigsVGsWtmR3iAEDjUPDtuQgAOrDeA
Date: Thu, 8 Oct 2015 13:14:39 +0000
Message-ID: <6A0AAEDF-7837-456C-B6B5-20787546A9F8@vidyo.com>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
In-Reply-To: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [160.79.219.114]
Content-Type: multipart/alternative; boundary="_000_6A0AAEDF7837456CB6B520787546A9F8vidyocom_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.14.151, 1.0.33,  0.0.0000 definitions=2015-10-08_10:2015-10-08,2015-10-08,1970-01-01 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 suspectscore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=7.0.1-1508030000 definitions=main-1510080163
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/zTAQc20UtDz-6Zpv5wBzIyN9v08>
Cc: "perc@ietf.org" <perc@ietf.org>, =?Windows-1252?Q?Mats_N=E4slund?= <mats.naslund@ericsson.com>, John Mattsson <john.mattsson@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Oct 2015 13:14:53 -0000

--_000_6A0AAEDF7837456CB6B520787546A9F8vidyocom_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


On Oct 8, 2015, at 7:18 AM, Magnus Westerlund <magnus.westerlund@ericsson.c=
om<mailto:magnus.westerlund@ericsson.com>> wrote:

The RTP marker bit is actually a field owned by the payload format, and
thus are tightly connected to the inner payload. We see that this field
is not possible to modify by the MDD, instead it should be included part
of the payload's integrity protected data.

This is certainly true for video, but is it true for audio?

There are other ways to detect talkspurt start for audio if the MDD can=92t=
 modify the marker bit (e.g., CSRC switch for a media switching mixer) but =
it=92s new behavior.

The inner payload's crypto context is looked up based on the CSRC if
that field is present (for RTP switching mixers), else the SSRC.

You mentioned that one of the motivations for letting the MDD rewrite SSRCs=
 was to allow it to handle SSRC collisions, but if the CSRC is the index to=
 the crypto context, we still have a collision problem =97 and it=92s not c=
lear to me that the originators of the colliding SSRC values would always b=
e able to see that there=92s a problem. How should this be handled?

I also notice you don=92t have any provisions for inner-encryption (end-to-=
end) header extensions.  I think this is correct =97 I don=92t see any use =
case for them at present =97 but do we actually have consensus on this at t=
his point?

=97
Jonathan Lennox
jonathan@vidyo.com<mailto:jonathan@vidyo.com>


--_000_6A0AAEDF7837456CB6B520787546A9F8vidyocom_
Content-Type: text/html; charset="Windows-1252"
Content-ID: <33654705E5187548A77CE4BA1DC90200@vidyo.com>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space;" class=3D"">
<br class=3D"">
<div>
<blockquote type=3D"cite" class=3D"">
<div class=3D"">On Oct 8, 2015, at 7:18 AM, Magnus Westerlund &lt;<a href=
=3D"mailto:magnus.westerlund@ericsson.com" class=3D"">magnus.westerlund@eri=
csson.com</a>&gt; wrote:</div>
<div class=3D"">
<div class=3D"WordSection1" style=3D"page: WordSection1; font-family: Helve=
tica; font-size: 12px; font-style: normal; font-variant: normal; font-weigh=
t: normal; letter-spacing: normal; line-height: normal; orphans: auto; text=
-align: start; text-indent: 0px; text-transform: none; white-space: normal;=
 widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<div style=3D"margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Calib=
ri, sans-serif;" class=3D"">
<span lang=3D"EN-US" style=3D"font-size: 10pt; font-family: Consolas;" clas=
s=3D"">&nbsp;</span></div>
<div style=3D"margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Calib=
ri, sans-serif;" class=3D"">
<span lang=3D"EN-US" style=3D"font-size: 10pt; font-family: Consolas;" clas=
s=3D"">The RTP marker bit is actually a field owned by the payload format, =
and<o:p class=3D""></o:p></span></div>
<div style=3D"margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Calib=
ri, sans-serif;" class=3D"">
<span lang=3D"EN-US" style=3D"font-size: 10pt; font-family: Consolas;" clas=
s=3D"">thus are tightly connected to the inner payload. We see that this fi=
eld<o:p class=3D""></o:p></span></div>
<div style=3D"margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Calib=
ri, sans-serif;" class=3D"">
<span lang=3D"EN-US" style=3D"font-size: 10pt; font-family: Consolas;" clas=
s=3D"">is not possible to modify by the MDD, instead it should be included =
part<o:p class=3D""></o:p></span></div>
<div style=3D"margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Calib=
ri, sans-serif;" class=3D"">
<span lang=3D"EN-US" style=3D"font-size: 10pt; font-family: Consolas;" clas=
s=3D"">of the payload's integrity protected data.</span></div>
</div>
</div>
</blockquote>
<div><br class=3D"">
</div>
<div>This is certainly true for video, but is it true for audio?</div>
<div><br class=3D"">
</div>
<div>There are other ways to detect talkspurt start for audio if the MDD ca=
n=92t modify the marker bit (e.g., CSRC switch for a media switching mixer)=
 but it=92s new behavior.</div>
<div><br class=3D"">
</div>
<blockquote type=3D"cite" class=3D"">
<div class=3D"WordSection1" style=3D"page: WordSection1; font-family: Helve=
tica; font-size: 12px; font-style: normal; font-variant: normal; font-weigh=
t: normal; letter-spacing: normal; line-height: normal; orphans: auto; text=
-align: start; text-indent: 0px; text-transform: none; white-space: normal;=
 widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<div style=3D"margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Calib=
ri, sans-serif;" class=3D"">
<span lang=3D"EN-US" style=3D"font-size: 10pt; font-family: Consolas;" clas=
s=3D"">The inner payload's crypto context is looked up based on the CSRC if=
<o:p class=3D""></o:p></span></div>
<div style=3D"margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Calib=
ri, sans-serif;" class=3D"">
<span lang=3D"EN-US" style=3D"font-size: 10pt; font-family: Consolas;" clas=
s=3D"">that field is present (for RTP switching mixers), else the SSRC.</sp=
an></div>
</div>
</blockquote>
<div><br class=3D"">
</div>
<div>You mentioned that one of the motivations for letting the MDD rewrite =
SSRCs was to allow it to handle SSRC collisions, but if the CSRC is the ind=
ex to the crypto context, we still have a collision problem =97 and it=92s =
not clear to me that the originators
 of the colliding SSRC values would always be able to see that there=92s a =
problem. How should this be handled?</div>
<div><br class=3D"">
</div>
<div>I also notice you don=92t have any provisions for inner-encryption (en=
d-to-end) header extensions. &nbsp;I think this is correct =97 I don=92t se=
e any use case for them at present =97 but do we actually have consensus on=
 this at this point?</div>
<div><br class=3D"">
</div>
</div>
=97&nbsp;
<div class=3D"">Jonathan Lennox</div>
<div class=3D""><a href=3D"mailto:jonathan@vidyo.com" class=3D"">jonathan@v=
idyo.com</a></div>
<div class=3D""><br class=3D"">
</div>
</body>
</html>

--_000_6A0AAEDF7837456CB6B520787546A9F8vidyocom_--


From nobody Thu Oct  8 06:44:26 2015
Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A64CD1B33EB for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 06:44:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jLjbqlbBRjPn for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 06:44:23 -0700 (PDT)
Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E58C1B33EA for <perc@ietf.org>; Thu,  8 Oct 2015 06:44:22 -0700 (PDT)
X-AuditID: c1b4fb25-f79a26d00000149a-74-561673345852
Received: from ESESSHC010.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 43.07.05274.43376165; Thu,  8 Oct 2015 15:44:20 +0200 (CEST)
Received: from [127.0.0.1] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.50) with Microsoft SMTP Server id 14.3.248.2; Thu, 8 Oct 2015 15:44:19 +0200
To: Jonathan Lennox <jonathan@vidyo.com>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se> <6A0AAEDF-7837-456C-B6B5-20787546A9F8@vidyo.com>
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
Message-ID: <5616732F.9090209@ericsson.com>
Date: Thu, 8 Oct 2015 15:44:15 +0200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <6A0AAEDF-7837-456C-B6B5-20787546A9F8@vidyo.com>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrELMWRmVeSWpSXmKPExsUyM+Jvja5JsViYwdFmIYv9i88zW6xeOJ3R gcljyZKfTB5tz+6wBzBFcdmkpOZklqUW6dslcGU8mLGcveCrVMWpvpIGxqOiXYycHBICJhKP l31ghrDFJC7cW88GYgsJHGWUeDtZsouRC8hexiix7ttHdpCEsICzxLVZJ8EaRAQ0JC4++wDV UCex78k0sDizQA+jxIcnTCA2m4CFxM0fjWA1vALaEnN/nGcEsVkEVCRWHvgCFhcViJF4v2kV I0SNoMTJmU9YQGxOAVuJpfevA83hAJppL/FgaxnEeHmJ5q2zmSHWaks0NHWwTmAUnIWkexZC xywkHQsYmVcxihanFiflphsZ66UWZSYXF+fn6eWllmxiBAbqwS2/VXcwXn7jeIhRgINRiYd3 gZ1YmBBrYllxZe4hRmkOFiVx3mamB6FCAumJJanZqakFqUXxRaU5qcWHGJk4OKUaGONnyCyK PHFKg9Hr2EbXnyJ5U6wehJ7zePH8+89ZnTtfHwmeorns1/f8b6emSH+T2cjtG16ddPWeQV69 RcjVhnkGEyZvSLecWZh7798nocZpTq/K8rbx+aXNkuhUZVsgMXUOUxlfV//uN6EqpyZMPuR/ 7B+b010T+Y0Lyl+ohLlunhXiUXQi0VOJpTgj0VCLuag4EQA72hWaNQIAAA==
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/eyCNbTJ5x8pvoExSy5ym_5_aHmU>
Cc: "perc@ietf.org" <perc@ietf.org>, =?UTF-8?Q?Mats_N=c3=a4slund?= <mats.naslund@ericsson.com>, John Mattsson <john.mattsson@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Oct 2015 13:44:24 -0000

Den 2015-10-08 kl. 15:14, skrev Jonathan Lennox:
>
>> On Oct 8, 2015, at 7:18 AM, Magnus Westerlund
>> <magnus.westerlund@ericsson.com
>> <mailto:magnus.westerlund@ericsson.com>> wrote:
>> The RTP marker bit is actually a field owned by the payload format, and
>> thus are tightly connected to the inner payload. We see that this field
>> is not possible to modify by the MDD, instead it should be included part
>> of the payload's integrity protected data.
>
> This is certainly true for video, but is it true for audio?

I would claim so. It is still owned by payload format.

The semantics that this is a good starting point and that you retune 
your jitter buffer at this point that would have to be indicated somehow 
else. The frame marking header extension would be one possibility. Your 
CSRC switch idea below is also a possibility.

>
> There are other ways to detect talkspurt start for audio if the MDD
> can’t modify the marker bit (e.g., CSRC switch for a media switching
> mixer) but it’s new behavior.
>
>> The inner payload's crypto context is looked up based on the CSRC if
>> that field is present (for RTP switching mixers), else the SSRC.
>
> You mentioned that one of the motivations for letting the MDD rewrite
> SSRCs was to allow it to handle SSRC collisions, but if the CSRC is the
> index to the crypto context, we still have a collision problem — and
> it’s not clear to me that the originators of the colliding SSRC values
> would always be able to see that there’s a problem. How should this be
> handled?

For an RTP switching mixer that does SSRC rewriting, may also have to 
rewrite the CSRC. I think the point you may be missing is that SSRC/CSRC 
is only used as crypto context reference in the receiver. There are no 
hard binding between the actual SSRC/CSRC value and the crypto context. 
You establish the crypto context based on the EKT packets included in 
the flow. It is basically a soft state binding between the SSRC/CSRC and 
the crypto context. If one fouls this up a new EKT packet can actually 
overwrite the crypto context.

>
> I also notice you don’t have any provisions for inner-encryption
> (end-to-end) header extensions.  I think this is correct — I don’t see
> any use case for them at present — but do we actually have consensus on
> this at this point?

Yes, we should have considered this. However, I think one can make the 
assumption that any E2E header extension would be directly connected 
with the inner payload and be protected using the same crypto context.

Not having run this by John and Mats, but one can create an IV that is 
different from the inner payload by having a extension header flag and 
the header extension ID and use that for protecting the header 
extension. That way one can protect each header extension independently 
and not care about MDD reordering E2E header extensions. This is just a 
quick idea.

Cheers

Magnus Westerlund

----------------------------------------------------------------------
Services, Media and Network features, Ericsson Research EAB/TXM
----------------------------------------------------------------------
Ericsson AB                 | Phone  +46 10 7148287
Färögatan 6                 | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------


From nobody Thu Oct  8 11:36:44 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDB1F1A6F3F for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 11:36:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.701
X-Spam-Level: 
X-Spam-Status: No, score=-1.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rupU8rrHaB-6 for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 11:36:37 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 500321A1ADF for <perc@ietf.org>; Thu,  8 Oct 2015 11:36:37 -0700 (PDT)
Received: from [IPv6:2607:fb90:1741:c442:0:37:7b7a:3c01] (mf45036d0.tmodns.net [208.54.80.244]) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t98IaVGV031564 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 8 Oct 2015 14:36:32 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1444329393; bh=xn22Eu85BF0JrbafrWP369tOdT5rKgtH+MrH4grlbeM=; h=In-Reply-To:References:Subject:From:Date:To:CC; b=X0NY5+aTON6qI3RzG7Atx4Bfm/xUv2g7Tg3rGF67NXq9rTSLUmwFlL5MtiTF9ZJ6c uCzM5/nyUvEH9bsX+Vr+lls5A5X7edgu/DFEUTsQY33oWlpPs6zqqNftQ9jWrht8wb rhBVVgxgd8MDWJDmyCNP7aGhO/PgJfOsgcPoCl4g=
User-Agent: K-9 Mail for Android
In-Reply-To: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----TUG1RRWKT0VNCSIDHODIU7K5O3LWSV"
Content-Transfer-Encoding: 8bit
From: "Paul E. Jones" <paulej@packetizer.com>
Date: Thu, 08 Oct 2015 13:36:27 -0500
To: Magnus Westerlund <magnus.westerlund@ericsson.com>, "perc@ietf.org" <perc@ietf.org>
Message-ID: <AB452416-B1A0-4EC1-9FB1-272D19E9E5F5@packetizer.com>
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Thu, 08 Oct 2015 14:36:33 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/8I_gfqPuClZdWktdS8WS_9kQ220>
Cc: =?ISO-8859-1?Q?Mats_N=E4slund?= <mats.naslund@ericsson.com>, John Mattsson <john.mattsson@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Oct 2015 18:36:43 -0000

------TUG1RRWKT0VNCSIDHODIU7K5O3LWSV
Content-Transfer-Encoding: 8bit
Content-Type: text/plain;
 charset=UTF-8

Magnus,

Thanks for that. I'd like to go through this point by point in the meeting.

For now, I'll just thought out a few thoughts and questions.

Given the focus of perc to provide E2E confidentiality of media, do we even need to authenticate anything in the RTP header E2E? Changes to that information doesn't weaken media confidentiality.

If we assume that, I think work for RTP is very simple.  We merely encrypt the media content using an E2E key.  We then follow normal SRTP procedures to provide HBH integrity (even double-encrypting if we wanted).  That yields a solution following the SRTP spec pretty closely, modulo the inner encryption.

The only to pieces of information that we need to not create a lot of new machinery is the SSRC and SEQ fields.  We could easily put those in either a header extension or payload.  If we insert them always, that inflates each packet by 64 bits.  Periodically, we would need to convey the ROC, but the frequency of that could be limited.  The MDD could modify anything in the header. We retain all properties of SRTP for each hop.

The only special treatment at the receiver is to decrypt the inner media content.  By preserving the SSRC, SEQ and ROC, we can largely reuse what's defined in AES-GCM for RTP. We can also detect replay of packets where a compromised MDD sends data it sent previously since we have the SSRC, SEQ, and ROC.

I think defining the steps following SRTP very closely will help address security concerns.  My only concern is inflating each packet by 64 bits.

In terms of implementation, I would use SRTP to authenticate that packet as usual, then locate contextual information for the inner part in relation to that outer part. That is, the outer SSRC might be associated with many crypto contexts (one for each sender).  A concern, though, is that some complex topologies where, say, A(SSRC=1) and B(SSRC=1) sends media to different MDDs, each of which rewrites the SSRC to 3 and 4, respectively.  Those flows then go to a next hop MDD that rewrites those SSRCs to a new value 5. The receiver might use 5 to process the outer part, but then uses SSRC 1 for the inner part. Problem is, both senders use the same inner SSRC value of 1.

I'm worried that we'll have the same issue with using the CSRC field as you've described it for the same reason.  Or, do you think this can be avoided somehow?  (Given even more hops, I'm feeling skeptical.)

The positive aspect is we have similar thinking on inner/outer.  We just have to be careful to ensure that inner crypto context will not be confused with another and that, to the extent possible, we minimize changes to SRTP.

Inner "uniqueness" is one motivation for our current proposal, though I appreciate folks want to change the SSRCs.  That nonetheless complicates things a lot.

Anyway, I'd love to go through some slides on the call.  I think that's going to be more helpful in exchanging ideas on this.

Paul


-------- Original Message --------
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
Sent: October 8, 2015 6:18:09 AM CDT
To: "perc@ietf.org" <perc@ietf.org>
Cc: "Mats NÃ¤slund" <mats.naslund@ericsson.com>, John Mattsson <john.mattsson@ericsson.com>
Subject: [Perc] Review of needed information for inner security

Hi,

John, Mats and I have spent some time reviewing what information we see
as needed for the RTP payload security, hence called inner security. We
also in the end have a proposal for how to include that information.

So we have considered the three topologies that are relevant for PERC.
These three as named in
https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-topologies-update/:

1. Relay - Transport Translator (Section 3.5.1)
2. Media Switching Mixer (Section 3.6.2)
3. Selective Forwarding Middlebox (Section 3.7)

First we look how the SSRCs are handled by these middleboxes. This is
important as it affects how one can track the media streams flowing
through the system.

So the Relay (1) performs no manipulation on the RTP level. Thus, a
packet being sent will arrive at the receiver except for transport
losses. This results in constant SSRCs end to end between sender and
receiver.


The Media Switching Mixer (2) has some important properties. As the
SSRCs used towards the receiver from the RTP mixer (MDD) is task/role
based, rather than related to original source, the inner security
context identification can't be made based on the SSRC, rather an
additional field has to be used. It is important to note that the
sequence of payloads for this stream is created by switching between the
available incoming streams. At any given point in time one specific
stream of inner payloads are forwarded for each task/role. Which it is can be changed at almost
any point. The CSRC would be the normal method for identifying the
original media contributor in a non PERC context. In a PERC context it
seems reasonable to also use CSRC. Especially, as there can't be any
media mixing due to the protected inner payloads, there can only be one
CSRC for any payload. So in this case the SSRC has no relation to the
media sources, and instead it is CSRC (or equivalent) that would have a
relation with the media source.

The SFM (3) although selectively forwarding media, it does have a one to one
handling of SSRCs, one SSRC arriving at a SFM will have its own SSRC
going out. Note that remapping may occur so that incoming and outgoing
SSRC is different.

The remapping of SSRC could occur also in the switching RTP mixer,
although it is not a recommended behaviour.

What was discussed last design team meeting was the view that we want to
enable the remapping of SSRC when needed. It is a simple way of dealing
with SSRC collisions in SFMs for example. However, one need to be aware
of the potential downside. First, by allowing re-mapping we don't have a
global stable identifier towards the originating end-point and its
identification of the media stream. This is something that at least on a
higher layer is needed to prevent substitution attacks, where the MDD
attempts to replace one endpoint's media streams with another endpoints
stream.

We also note that if end-to-end protected RTCP messages are used, not
having a global coordinated SSRC space within a conference, there will
be identification issues, and likely some other id space would be needed.

The next RTP header field that we considered was the RTP sequence
number. At the sender side, the RTP sequence number will be directly
related to the inner payload. However, that relation is not retained
across an MDD. An RTP switching mixer, will create an RTP sequence
number solely related to the out going created stream. As that is a
switched combined stream the corresponding inner sequence number will
jump back and forth at each switch, and the relative offset will change
with each switch.

For the SFM the outer RTP sequence number for an outgoing stream will be
counting the inner payloads selected to be sent (forwarded). Thus, the
offset changes at each time a decision to forward or not forward is made.

The Payload Type field is dependent on the signalling, and likely have
local assignment only. Each joining endpoint will negotiate common sets
of payload types with the signaling server representing the conference.
However, the signalling server when using offer/answer not force an
endpoint to use a particular PT field value to represent a commonly used
codec configuration. Thus, PT rewriting will occur at the MDDs,
independently of the topology.

The RTP marker bit is actually a field owned by the payload format, and
thus are tightly connected to the inner payload. We see that this field
is not possible to modify by the MDD, instead it should be included part
of the payload's integrity protected data.


The padding flag is tightly connected to the inner payload and should

not be modified by the MDD, instead it should be included part

of the payload's integrity protected data.

The Timestamp field also relates to the presentation timeline for the
outgoing stream. Here there is a difference between the SFM, which
maintains the original senders timeline, and the RTP switching mixer
that needs to create its outgoing streams timeline in a consistent way.
This requires rewriting the timestamp, but maintain the inter spacing
between media frames within the inner payload.


Proposal for how to structure information
-----------------------------------------
Our proposal for how the above information should be handled and
maintained are the following.

The inner payload's crypto context is looked up based on the CSRC if
that field is present (for RTP switching mixers), else the SSRC.

The inner crypto context includes the necessary key (called transport
key below) and other crypto
information. To prevent attacks we also need a identifier for this
particular inner media stream. For this we want to have two parts, one
part identifying the endpoint, and another identifying the media stream.
The endpoint identifier can either be globally unique and assigned by
the master key server, thus enabling a compact field scaled to planned
maximum participation in a conference. Alternatively if significant
longer randomly picked. An endpoint id assigned by the master key server
seems preferable as that enables mapping between the endpoint id and
other identifiers meant for humans. The stream id is managed by the endpoint. We
foresee that these two IDs are carried by EKT to establish this context.
The field lengths can be configurable and the used values provided in
the key-management protocol for the EKT master key. Thus enabling that
most conference to use 1 + 1 byte enabling 256 endpoints which each can
have 256 streams. Sufficient for most use cases, and for those use cases
that requires more participants or streams one can use longer fields
within the conference.

The Inner Payload gets an explicit sequence number. We propose 32 bits
that counts the number of sent packets using a specific transport key
used to protect this inner payload. It is part of the inner payload to
keep these close, and minimize the overhead. Using an RTP header
extension will in many case have more overhead.

We foresee that PERC systems will perform transport re-keying quite
frequently, that is why 32-bits will be sufficient, and if that is on
its way to wrap, the sending end-point will have to rekey its transport
key for this media stream. We note that 32-bits are sufficient also for
really high bit-rates. At 3 Gbps using 1200 bytes of payload one need to
rekey approximately every 3 hours. Using 24 bits would result in
rekeying every 53 seconds for this case.

To ensure that replay protection is present, and to prevent MDD reordering
of packets, one will need to have a sequence number also for the used
transport key. That way when one starts using a new transport key, one
can reset the inner payload sequence number, thus enabling long lived
sessions.

For the cases where one wants to prevent joining and leaving participant
to decrypt media prior or after joining and leaving respectively then we
forsee the need for master key rekeying. Also that needs to be tracked,
to prevent replay attacks. Thus also on this level one needs to have a
associated sequence number with the master key. When one
starts using a new master transport key, the transport key sequence
number is reset.

The inner payload identification will thus basically be
"Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr". The
first two will determined through the key management protocol and EKT.
Enabling the receiver to determine if a payload is less recent then the
latest received one. This enables one to have a short window for
accepting older packets to deal with re-order events thus preventing
replays. We note that the MDD will be able to delay packets. Thus when
switching back to a source select any point between the previous sent
and the latest received by the MDD, as the point of continuing
transmission. We likely need to discuss if that is a sufficient level of
protection. We need to deal with expected levels of transport delay.


To summarize our proposal:

As part of the inner RTP payload for a particular media stream:
- Explicit 32-bit sequence number
- Use CSRC/SSRC for context lookup on packet reception.

Use EKT for context population per media stream of the following
information:

-   Endpoint ID + Endpoint specific stream ID

-   Transport key used to protect payload

-   Transport key sequence number

Stream specific context also contain:
Highest seen inner payload identifier "Master Sequence nr : Transport
Sequence nr. : Packet Sequence nr" and replay window.

Key-management for EKT master key
- EKT Master key
- Master Key sequence number
- Field lengths for Endpoint Id and Endpoint Stream ID
- Endpoint ID

IV includes:
- Endpoint ID + Endpoint specific stream ID
- Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr
e2e integrity protected information

- padding flag

- marker bit

- payload + padding + pad count (also encrypted)

- IV (only Inner_Payload_Seq_nr sent in each packet)


Looking forward to feedback on this.

Cheers

Magnus Westerlund
John Mattson
Mats NÃ¤slund


------------------------------------------------------------------------

_______________________________________________
Perc mailing list
Perc@ietf.org
https://www.ietf.org/mailman/listinfo/perc

------TUG1RRWKT0VNCSIDHODIU7K5O3LWSV
Content-Type: text/html;
 charset=utf-8
Content-Transfer-Encoding: 8bit

<html v="urn:schemas-microsoft-com:vml" o="urn:schemas-microsoft-com:office:office" w="urn:schemas-microsoft-com:office:word" m="http://schemas.microsoft.com/office/2004/12/omml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><meta name="Generator" content="Microsoft Word 14 (filtered medium)" /><style><!--
/* Font Definitions */
@font-face
 {font-family:Courier;
 panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
 {font-family:Wingdings;
 panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
 {font-family:Wingdings;
 panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
 {font-family:Calibri;
 panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
 {font-family:Consolas;
 panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
 {margin:0cm;
 margin-bottom:.0001pt;
 font-size:12.0pt;
 font-family:"Calibri","sans-serif";
 mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
 {mso-style-priority:99;
 color:blue;
 text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
 {mso-style-priority:99;
 color:purple;
 text-decoration:underline;}
pre
 {mso-style-priority:99;
 mso-style-link:"HTML Preformatted Char";
 margin:0cm;
 margin-bottom:.0001pt;
 font-size:10.0pt;
 font-family:Courier;
 mso-fareast-language:EN-US;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
 {mso-style-priority:34;
 margin-top:0cm;
 margin-right:0cm;
 margin-bottom:0cm;
 margin-left:36.0pt;
 margin-bottom:.0001pt;
 font-size:12.0pt;
 font-family:"Calibri","sans-serif";
 mso-fareast-language:EN-US;}
span.EmailStyle17
 {mso-style-type:personal-compose;
 font-family:"Calibri","sans-serif";
 color:windowtext;}
span.HTMLPreformattedChar
 {mso-style-name:"HTML Preformatted Char";
 mso-style-priority:99;
 mso-style-link:"HTML Preformatted";
 font-family:Courier;}
.MsoChpDefault
 {mso-style-type:export-only;
 font-family:"Calibri","sans-serif";
 mso-fareast-language:EN-US;}
@page WordSection1
 {size:612.0pt 792.0pt;
 margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
 {page:WordSection1;}
/* List Definitions */
@list l0
 {mso-list-id:1220020514;
 mso-list-type:hybrid;
 mso-list-template-ids:1812363770 340148462 69009411 69009413 69009409 69009411 69009413 69009409 69009411 69009413;}
@list l0:level1
 {mso-level-start-at:0;
 mso-level-number-format:bullet;
 mso-level-text:-;
 mso-level-tab-stop:none;
 mso-level-number-position:left;
 text-indent:-18.0pt;
 font-family:Consolas;
 mso-fareast-font-family:"Times New Roman";
 mso-bidi-font-family:"Times New Roman";}
@list l0:level2
 {mso-level-number-format:bullet;
 mso-level-text:o;
 mso-level-tab-stop:none;
 mso-level-number-position:left;
 text-indent:-18.0pt;
 font-family:"Courier New";}
@list l0:level3
 {mso-level-number-format:bullet;
 mso-level-text:\F0A7;
 mso-level-tab-stop:none;
 mso-level-number-position:left;
 text-indent:-18.0pt;
 font-family:Wingdings;}
@list l0:level4
 {mso-level-number-format:bullet;
 mso-level-text:\F0B7;
 mso-level-tab-stop:none;
 mso-level-number-position:left;
 text-indent:-18.0pt;
 font-family:Symbol;}
@list l0:level5
 {mso-level-number-format:bullet;
 mso-level-text:o;
 mso-level-tab-stop:none;
 mso-level-number-position:left;
 text-indent:-18.0pt;
 font-family:"Courier New";}
@list l0:level6
 {mso-level-number-format:bullet;
 mso-level-text:\F0A7;
 mso-level-tab-stop:none;
 mso-level-number-position:left;
 text-indent:-18.0pt;
 font-family:Wingdings;}
@list l0:level7
 {mso-level-number-format:bullet;
 mso-level-text:\F0B7;
 mso-level-tab-stop:none;
 mso-level-number-position:left;
 text-indent:-18.0pt;
 font-family:Symbol;}
@list l0:level8
 {mso-level-number-format:bullet;
 mso-level-text:o;
 mso-level-tab-stop:none;
 mso-level-number-position:left;
 text-indent:-18.0pt;
 font-family:"Courier New";}
@list l0:level9
 {mso-level-number-format:bullet;
 mso-level-text:\F0A7;
 mso-level-tab-stop:none;
 mso-level-number-position:left;
 text-indent:-18.0pt;
 font-family:Wingdings;}
ol
 {margin-bottom:0cm;}
ul
 {margin-bottom:0cm;}
--></style></head><body lang="SV" link="blue" vlink="purple">Magnus,<br>
<br>
Thanks for that. I&#39;d like to go through this point by point in the meeting.<br>
<br>
For now, I&#39;ll just thought out a few thoughts and questions.<br>
<br>
Given the focus of perc to provide E2E confidentiality of media, do we even need to authenticate anything in the RTP header E2E? Changes to that information doesn&#39;t weaken media confidentiality.<br>
<br>
If we assume that, I think work for RTP is very simple.  We merely encrypt the media content using an E2E key.  We then follow normal SRTP procedures to provide HBH integrity (even double-encrypting if we wanted).  That yields a solution following the SRTP spec pretty closely, modulo the inner encryption.<br>
<br>
The only to pieces of information that we need to not create a lot of new machinery is the SSRC and SEQ fields.  We could easily put those in either a header extension or payload.  If we insert them always, that inflates each packet by 64 bits.  Periodically, we would need to convey the ROC, but the frequency of that could be limited.  The MDD could modify anything in the header. We retain all properties of SRTP for each hop.<br>
<br>
The only special treatment at the receiver is to decrypt the inner media content.  By preserving the SSRC, SEQ and ROC, we can largely reuse what&#39;s defined in AES-GCM for RTP. We can also detect replay of packets where a compromised MDD sends data it sent previously since we have the SSRC, SEQ, and ROC.<br>
<br>
I think defining the steps following SRTP very closely will help address security concerns.  My only concern is inflating each packet by 64 bits.<br>
<br>
In terms of implementation, I would use SRTP to authenticate that packet as usual, then locate contextual information for the inner part in relation to that outer part. That is, the outer SSRC might be associated with many crypto contexts (one for each sender).  A concern, though, is that some complex topologies where, say, A(SSRC=1) and B(SSRC=1) sends media to different MDDs, each of which rewrites the SSRC to 3 and 4, respectively.  Those flows then go to a next hop MDD that rewrites those SSRCs to a new value 5. The receiver might use 5 to process the outer part, but then uses SSRC 1 for the inner part. Problem is, both senders use the same inner SSRC value of 1.<br>
<br>
I&#39;m worried that we&#39;ll have the same issue with using the CSRC field as you&#39;ve described it for the same reason.  Or, do you think this can be avoided somehow?  (Given even more hops, I&#39;m feeling skeptical.)<br>
<br>
The positive aspect is we have similar thinking on inner/outer.  We just have to be careful to ensure that inner crypto context will not be confused with another and that, to the extent possible, we minimize changes to SRTP.<br>
<br>
Inner &quot;uniqueness&quot; is one motivation for our current proposal, though I appreciate folks want to change the SSRCs.  That nonetheless complicates things a lot.<br>
<br>
Anyway, I&#39;d love to go through some slides on the call.  I think that&#39;s going to be more helpful in exchanging ideas on this.<br>
<br>
Paul<br><br><div style='font-size:10.0pt;font-family:"Tahoma","sans-serif";padding:3.0pt 0in 0in 0in'>
<hr style='border:none;border-top:solid #E1E1E1 1.0pt'>
<b>From:</b> Magnus Westerlund &lt;magnus.westerlund@ericsson.com&gt;<br>
<b>Sent:</b> October 8, 2015 6:18:09 AM CDT<br>
<b>To:</b> &quot;perc@ietf.org&quot; &lt;perc@ietf.org&gt;<br>
<b>Cc:</b> &quot;Mats NÃ¤slund&quot; &lt;mats.naslund@ericsson.com&gt;, John Mattsson &lt;john.mattsson@ericsson.com&gt;<br>
<b>Subject:</b> [Perc] Review of needed information for inner security<br>
</div>
<br>




<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->


<div class="WordSection1">
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Hi,<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">John, Mats and I have spent some time reviewing what information we see<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">as needed for the RTP payload security, hence called inner security. We<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">also in the end have a proposal for how to include that information.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">So we have considered the three topologies that are relevant for PERC.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">These three as named in<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US"><a href="https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-topologies-update/"><span style="font-size:10.0pt;font-family:Consolas;color:#0000E9">https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-topologies-update/</span></a></span><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">:<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">1. Relay - Transport Translator (Section 3.5.1)<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">2. Media Switching Mixer (Section 3.6.2)<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">3. Selective Forwarding Middlebox (Section 3.7)<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">First we look how the SSRCs are handled by these middleboxes. This is<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">important as it affects how one can track the media streams flowing<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">through the system.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">So the Relay (1) performs no manipulation on the RTP level. Thus, a<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">packet being sent will arrive at the receiver except for transport<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">losses. This results in constant SSRCs end to end between sender and<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">receiver.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The Media Switching Mixer (2) has some important properties. As the<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">SSRCs used towards the receiver from the RTP mixer (MDD) is task/role<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">based, rather than related to original source, the inner security<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">context identification can't be made based on the SSRC, rather an<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">additional field has to be used. It is important to note that the<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">sequence of payloads for this stream is created by switching between the<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">available incoming streams. At any given point in time one specific<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">stream of inner payloads are forwarded for each task/role. Which it is can be changed at almost<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">any point. The CSRC would be the normal method for identifying the<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">original media contributor in a non PERC context. In a PERC context it<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">seems reasonable to also use CSRC. Especially, as there can't be any<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">media mixing due to the protected inner payloads, there can only be one<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">CSRC for any payload. So in this case the SSRC has no relation to the<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">media sources, and instead it is CSRC (or equivalent) that would have a<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">relation with the media source.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The SFM (3) although selectively forwarding media, it does have a one to one<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">handling of SSRCs, one SSRC arriving at a SFM will have its own SSRC<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">going out. Note that remapping may occur so that incoming and outgoing<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">SSRC is different.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The remapping of SSRC could occur also in the switching RTP mixer,<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">although it is not a recommended behaviour.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">What was discussed last design team meeting was the view that we want to<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">enable the remapping of SSRC when needed. It is a simple way of dealing<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">with SSRC collisions in SFMs for example. However, one need to be aware<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">of the potential downside. First, by allowing re-mapping we don't have a<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">global stable identifier towards the originating end-point and its<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">identification of the media stream. This is something that at least on a<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">higher layer is needed to prevent substitution attacks, where the MDD<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">attempts to replace one endpoint's media streams with another endpoints<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">stream.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">We also note that if end-to-end protected RTCP messages are used, not<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">having a global coordinated SSRC space within a conference, there will<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">be identification issues, and likely some other id space would be needed.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The next RTP header field that we considered was the RTP sequence<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">number. At the sender side, the RTP sequence number will be directly<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">related to the inner payload. However, that relation is not retained<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">across an MDD. An RTP switching mixer, will create an RTP sequence<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">number solely related to the out going created stream. As that is a<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">switched combined stream the corresponding inner sequence number will<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">jump back and forth at each switch, and the relative offset will change<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">with each switch.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">For the SFM the outer RTP sequence number for an outgoing stream will be<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">counting the inner payloads selected to be sent (forwarded). Thus, the<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">offset changes at each time a decision to forward or not forward is made.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The Payload Type field is dependent on the signalling, and likely have<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">local assignment only. Each joining endpoint will negotiate common sets<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">of payload types with the signaling server representing the conference.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">However, the signalling server when using offer/answer not force an<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">endpoint to use a particular PT field value to represent a commonly used<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">codec configuration. Thus, PT rewriting will occur at the MDDs,<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">independently of the topology.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The RTP marker bit is actually a field owned by the payload format, and<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">thus are tightly connected to the inner payload. We see that this field<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">is not possible to modify by the MDD, instead it should be included part<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">of the payload's integrity protected data.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<pre><span lang="EN-US" style="font-family:Consolas">The </span><span lang="EN-US" style="color:black">padding flag is tightly connected to the inner payload and should <p></p></span></pre>
<pre><span lang="EN-US" style="color:black">not be modified by the MDD, instead it should be included part<p></p></span></pre>
<pre><span lang="EN-US" style="color:black">of the payload's integrity protected data.<p></p></span></pre>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The Timestamp field also relates to the presentation timeline for the<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">outgoing stream. Here there is a difference between the SFM, which<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">maintains the original senders timeline, and the RTP switching mixer<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">that needs to create its outgoing streams timeline in a consistent way.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">This requires rewriting the timestamp, but maintain the inter spacing<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">between media frames within the inner payload.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Proposal for how to structure information<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">-----------------------------------------<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Our proposal for how the above information should be handled and<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">maintained are the following.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The inner payload's crypto context is looked up based on the CSRC if<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">that field is present (for RTP switching mixers), else the SSRC.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The inner crypto context includes the necessary key (called transport
<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">key below) and other crypto<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">information. To prevent attacks we also need a identifier for this<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">particular inner media stream. For this we want to have two parts, one<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">part identifying the endpoint, and another identifying the media stream.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The endpoint identifier can either be globally unique and assigned by<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">the master key server, thus enabling a compact field scaled to planned<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">maximum participation in a conference. Alternatively if significant<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">longer randomly picked. An endpoint id assigned by the master key server
<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">seems preferable as that enables mapping between the endpoint id and
<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">other identifiers meant for humans. The stream id is managed by the endpoint. We
<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">foresee that these two IDs are carried by EKT to establish this context.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The field lengths can be configurable and the used values provided in<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">the key-management protocol for the EKT master key. Thus enabling that<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">most conference to use 1 &#43; 1 byte enabling 256 endpoints which each can<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">have 256 streams. Sufficient for most use cases, and for those use cases<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">that requires more participants or streams one can use longer fields<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">within the conference.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The Inner Payload gets an explicit sequence number. We propose 32 bits<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">that counts the number of sent packets using a specific transport key<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">used to protect this inner payload. It is part of the inner payload to<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">keep these close, and minimize the overhead. Using an RTP header<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">extension will in many case have more overhead.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">We foresee that PERC systems will perform transport re-keying quite<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">frequently, that is why 32-bits will be sufficient, and if that is on<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">its way to wrap, the sending end-point will have to rekey its transport<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">key for this media stream. We note that 32-bits are sufficient also for<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">really high bit-rates. At 3 Gbps using 1200 bytes of payload one need to<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">rekey approximately every 3 hours. Using 24 bits would result in<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">rekeying every 53 seconds for this case.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">To ensure that replay protection is present, and to prevent MDD reordering
<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">of packets, one will need to have a sequence number also for the used
<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">transport key. That way when one starts using a new transport key, one
<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">can reset the inner payload sequence number, thus enabling long lived
<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">sessions.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">For the cases where one wants to prevent joining and leaving participant<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">to decrypt media prior or after joining and leaving respectively then we<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">forsee the need for master key rekeying. Also that needs to be tracked,<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">to prevent replay attacks. Thus also on this level one needs to have a<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">associated sequence number with the master key. When one<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">starts using a new master transport key, the transport key sequence
<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">number is reset.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">The inner payload identification will thus basically be<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">&quot;Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr&quot;. The<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">first two will determined through the key management protocol and EKT.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Enabling the receiver to determine if a payload is less recent then the<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">latest received one. This enables one to have a short window for<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">accepting older packets to deal with re-order events thus preventing<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">replays. We note that the MDD will be able to delay packets. Thus when<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">switching back to a source select any point between the previous sent<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">and the latest received by the MDD, as the point of continuing<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">transmission. We likely need to discuss if that is a sufficient level of<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">protection. We need to deal with expected levels of transport delay.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">To summarize our proposal:<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">As part of the inner RTP payload for a particular media stream:<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">- Explicit 32-bit sequence number<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">- Use CSRC/SSRC for context lookup on packet reception.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Use EKT for context population per media stream of the following<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">information:<p></p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1;text-autospace:none">
<span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><span style="mso-list:Ignore">-<span style="font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Endpoint ID &#43; Endpoint specific stream ID<p></p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1;text-autospace:none">
<span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><span style="mso-list:Ignore">-<span style="font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Transport key used to protect payload<p></p></span></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo1;text-autospace:none">
<span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><span style="mso-list:Ignore">-<span style="font:7.0pt &quot;Times New Roman&quot;">&nbsp;&nbsp;
</span></span></span><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Transport key sequence number<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Stream specific context also contain:<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Highest seen inner payload identifier &quot;Master Sequence nr : Transport<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Sequence nr. : Packet Sequence nr&quot; and replay window.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Key-management for EKT master key<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">- EKT Master key<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">- Master Key sequence number<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">- Field lengths for Endpoint Id and Endpoint Stream ID<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">- Endpoint ID<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">IV includes:<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-family:Consolas">-
</span><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Endpoint ID &#43; Endpoint specific stream ID<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">- Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">e2e integrity protected information<p></p></span></p>
<pre><span lang="EN-US" style="font-family:Consolas">- </span><span lang="EN-US" style="color:black">padding flag<p></p></span></pre>
<pre><span lang="EN-US" style="color:black">- marker bit<p></p></span></pre>
<pre><span lang="EN-US" style="color:black">- payload &#43; padding &#43; pad count (also encrypted)<p></p></span></pre>
<pre><span lang="EN-US" style="color:black">- IV (only </span><span lang="EN-US" style="font-family:Consolas">Inner_Payload_Seq_nr sent in each packet</span><span lang="EN-US" style="color:black">)<p></p></span></pre>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Looking forward to feedback on this.<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Cheers<p></p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas"><p>&nbsp;</p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:Consolas">Magnus Westerlund</span><span lang="EN-US" style="font-size:10.0pt"><p></p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">John Mattson<p></p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">Mats NÃ¤slund<p></p></span></p>
</div>


<p style="margin-top: 2.5em; margin-bottom: 1em; border-bottom: 1px solid #000"></p><pre class="k9mail"><hr /><br />Perc mailing list<br />Perc@ietf.org<br /><a href="https://www.ietf.org/mailman/listinfo/perc">https://www.ietf.org/mailman/listinfo/perc</a><br /></pre></body></html>
------TUG1RRWKT0VNCSIDHODIU7K5O3LWSV--


From nobody Thu Oct  8 15:42:18 2015
Return-Path: <fluffy@iii.ca>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD7FC1B2E2D for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 15:42:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I4d0247ITd-U for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 15:42:14 -0700 (PDT)
Received: from smtp85.ord1c.emailsrvr.com (smtp85.ord1c.emailsrvr.com [108.166.43.85]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D15BB1B2E2C for <perc@ietf.org>; Thu,  8 Oct 2015 15:42:13 -0700 (PDT)
Received: from smtp11.relay.ord1c.emailsrvr.com (localhost.localdomain [127.0.0.1]) by smtp11.relay.ord1c.emailsrvr.com (SMTP Server) with ESMTP id F4102280084 for <perc@ietf.org>; Thu,  8 Oct 2015 18:42:12 -0400 (EDT)
Received: by smtp11.relay.ord1c.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id 877C028017D for <perc@ietf.org>; Thu,  8 Oct 2015 18:42:11 -0400 (EDT)
X-Sender-Id: fluffy@iii.ca
Received: from [192.168.4.100] ([UNAVAILABLE]. [128.107.241.164]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:465 (trex/5.4.2); Thu, 08 Oct 2015 22:42:12 GMT
From: Cullen Jennings <fluffy@iii.ca>
Content-Type: multipart/mixed; boundary="Apple-Mail=_EB32F196-19D5-4684-A755-776B71316A83"
Message-Id: <9BBE35DE-EE33-403F-BE04-B45DB8E13493@iii.ca>
Date: Thu, 8 Oct 2015 16:42:10 -0600
To: perc@ietf.org
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
X-Mailer: Apple Mail (2.2104)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/El0Lq2WOSQ027jo1ZN7Db3u3d5c>
Subject: [Perc] Slides to help expain things
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Oct 2015 22:42:16 -0000

--Apple-Mail=_EB32F196-19D5-4684-A755-776B71316A83
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii


I've been bouncing around some slides to help explain what I think the =
WG is trying to accomplish and the various drafts. They are probably =
best discussed on a call but thought I would send them here to help us =
get on the same page about what the open issues are.=20

Cullen



--Apple-Mail=_EB32F196-19D5-4684-A755-776B71316A83
Content-Disposition: inline;
	filename=PercSecurityContexts_v2.pdf
Content-Type: application/pdf;
	x-unix-mode=0644;
	name="PercSecurityContexts_v2.pdf"
Content-Transfer-Encoding: base64
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--Apple-Mail=_EB32F196-19D5-4684-A755-776B71316A83
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii




--Apple-Mail=_EB32F196-19D5-4684-A755-776B71316A83--


From nobody Thu Oct  8 17:53:05 2015
Return-Path: <Christian.Groves@nteczone.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8F2C1B2ED4 for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 17:53:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.701
X-Spam-Level: 
X-Spam-Status: No, score=-0.701 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SnoRcqkfm_r0 for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 17:53:02 -0700 (PDT)
Received: from cserver5.myshophosting.com (cserver5.myshophosting.com [175.107.161.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A739B1B2ED3 for <perc@ietf.org>; Thu,  8 Oct 2015 17:53:02 -0700 (PDT)
Received: from ppp118-209-33-227.lns20.mel4.internode.on.net ([118.209.33.227]:51552 helo=[192.168.1.22]) by cserver5.myshophosting.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128) (Exim 4.85) (envelope-from <Christian.Groves@nteczone.com>) id 1ZkLvf-002Bxd-3e for perc@ietf.org; Fri, 09 Oct 2015 11:52:59 +1100
To: perc@ietf.org
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
From: Christian Groves <Christian.Groves@nteczone.com>
Message-ID: <56170FE4.3030507@nteczone.com>
Date: Fri, 9 Oct 2015 11:52:52 +1100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cserver5.myshophosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nteczone.com
X-Get-Message-Sender-Via: cserver5.myshophosting.com: authenticated_id: christian.groves@nteczone.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/yGr3SV7DIzVcbHH1JDnOokJNBfc>
Subject: [Perc] Deisgn team Re: Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Oct 2015 00:53:04 -0000

On 8/10/2015 10:18 PM, Magnus Westerlund wrote:
>
> What was discussed last design team meeting was the view that we want to
>
> enable the remapping of SSRC when needed.
>
Is there a PERC design team now established? Did that get notified to 
the WG list?

Christian


From nobody Thu Oct  8 20:24:15 2015
Return-Path: <suhasietf@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16C8A1B30E6 for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 20:24:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1sTGndZbhQzF for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 20:24:12 -0700 (PDT)
Received: from mail-vk0-x22b.google.com (mail-vk0-x22b.google.com [IPv6:2607:f8b0:400c:c05::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 568881B30E5 for <perc@ietf.org>; Thu,  8 Oct 2015 20:24:12 -0700 (PDT)
Received: by vkgd64 with SMTP id d64so44227483vkg.0 for <perc@ietf.org>; Thu, 08 Oct 2015 20:24:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=gGIrufyTCWfuJCiu4NeH2+ojFeGVCzwE6huIW7Utmeg=; b=LHXOa8+PF76OfdtLPLD7dCCl3IYddP9WRaTidIcJY3BVauVdzgp5uAj47MAI0BffBT VVegbS5Rp+1P/yEK45Fkbmkql3vTJQ97dlAOiUHWcRyft7DXjw2iS9igj2GFCVf+Oe+U jAVNf/c5DpvR3Gu4yCtx8VHCVX6gzlsrMTuPG/V9BVOi32mAKspj0kDnKrNbblsOjVq6 MVORhp69Dp5Icu0TX8Yv2VIHyvvAdz2DPSsiS3sLy34A+/ofj46bgQaj8tyEr0zmCim2 y6ndPtaIyIQZut8Z6FBho05wSNQDGNB4yqS6H87e1KIAqmUOkm8kqMZil+CuBDpgWD8T FAQQ==
MIME-Version: 1.0
X-Received: by 10.31.156.82 with SMTP id f79mr7178712vke.25.1444361051466; Thu, 08 Oct 2015 20:24:11 -0700 (PDT)
Received: by 10.31.172.151 with HTTP; Thu, 8 Oct 2015 20:24:11 -0700 (PDT)
In-Reply-To: <56170FE4.3030507@nteczone.com>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se> <56170FE4.3030507@nteczone.com>
Date: Thu, 8 Oct 2015 20:24:11 -0700
Message-ID: <CAMRcRGT-DTNM3rGY7vzggrrwcjRVShUx7mWpsmhB4sbKY0-1Ug@mail.gmail.com>
From: Suhas Nandakumar <suhasietf@gmail.com>
To: Christian Groves <Christian.Groves@nteczone.com>
Content-Type: multipart/alternative; boundary=001a113d2d5e6694420521a3838e
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/eYgjW0FrYhA3Lyp389MUgdKlxHk>
Cc: perc@ietf.org
Subject: Re: [Perc] Deisgn team Re: Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Oct 2015 03:24:14 -0000

--001a113d2d5e6694420521a3838e
Content-Type: text/plain; charset=UTF-8

Hello Christan

  Yes. there was one design meeting held with attendees who had volunteered
during IETF 93.  My apologies if I missed your name.

The next design meeting will be on 10/12 , 10 AM EST. I will be sending out
the meeting details to the list to ensure we don't miss anyone.

Thanks
Suhas

On Thu, Oct 8, 2015 at 5:52 PM, Christian Groves <
Christian.Groves@nteczone.com> wrote:

>
> On 8/10/2015 10:18 PM, Magnus Westerlund wrote:
>
>>
>> What was discussed last design team meeting was the view that we want to
>>
>> enable the remapping of SSRC when needed.
>>
>> Is there a PERC design team now established? Did that get notified to the
> WG list?
>
> Christian
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc
>

--001a113d2d5e6694420521a3838e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hello Christan<div><br></div><div>=C2=A0 Yes. there was on=
e design meeting held with attendees who had volunteered during IETF 93.=C2=
=A0 My apologies if I missed your name.=C2=A0</div><div><br></div><div>The =
next design meeting will be on 10/12 , 10 AM EST. I will be sending out the=
 meeting details to the list to ensure we don&#39;t miss anyone.</div><div>=
<br></div><div>Thanks</div><div>Suhas</div></div><div class=3D"gmail_extra"=
><br><div class=3D"gmail_quote">On Thu, Oct 8, 2015 at 5:52 PM, Christian G=
roves <span dir=3D"ltr">&lt;<a href=3D"mailto:Christian.Groves@nteczone.com=
" target=3D"_blank">Christian.Groves@nteczone.com</a>&gt;</span> wrote:<br>=
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><br>
On 8/10/2015 10:18 PM, Magnus Westerlund wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
<br>
What was discussed last design team meeting was the view that we want to<br=
>
<br>
enable the remapping of SSRC when needed.<br>
<br>
</blockquote>
Is there a PERC design team now established? Did that get notified to the W=
G list?<br>
<br>
Christian<br>
<br>
_______________________________________________<br>
Perc mailing list<br>
<a href=3D"mailto:Perc@ietf.org" target=3D"_blank">Perc@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/perc" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/listinfo/perc</a><br>
</blockquote></div><br></div>

--001a113d2d5e6694420521a3838e--


From nobody Thu Oct  8 20:35:46 2015
Return-Path: <suhasietf@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A49CF1B312C for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 20:35:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kk5VKXZ0iD1s for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 20:35:43 -0700 (PDT)
Received: from mail-vk0-x22a.google.com (mail-vk0-x22a.google.com [IPv6:2607:f8b0:400c:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C8C01B312A for <perc@ietf.org>; Thu,  8 Oct 2015 20:35:43 -0700 (PDT)
Received: by vkat63 with SMTP id t63so44025376vka.1 for <perc@ietf.org>; Thu, 08 Oct 2015 20:35:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:date:message-id:subject:from:to:content-type; bh=yDe3kCriEDQoTph3d61ijD8Et2GloV14CGQe5RKf1Uc=; b=K10XsM+30Ce4QerjILZZFMmQaF0MCEhGqUDTVUkWexvvSvmHAMkCdby2+Hac0Afut6 mmukrdblqBE3s+d7R/a+idx2sVkjSvuOPtWa6+5xX2iJ3+foNYqdQKEOaR4BoZF1G3ct pDaRSXAy460wKtFhaal4TqO0XlXVKMM1H8zfjbnqHwG9p9kI+XxNj6PMmWVVJbLzEHc/ 2Sap4KgHqt/7vLGNZJSG+IXC8a/+/YSeoiTejrZIWrnBcqYSr4VaGa0wPGC7QN+Igu91 w825IEqIfbWZ9ALuCgiqxdKdK955Npybzdi1CFFydL7QqzqnLarw1vbzsKfgqkhARyDz 5Y/Q==
MIME-Version: 1.0
X-Received: by 10.31.10.8 with SMTP id 8mr6951697vkk.157.1444361742398; Thu, 08 Oct 2015 20:35:42 -0700 (PDT)
Received: by 10.31.172.151 with HTTP; Thu, 8 Oct 2015 20:35:42 -0700 (PDT)
Date: Thu, 8 Oct 2015 20:35:42 -0700
Message-ID: <CAMRcRGS6BS1d-ukt=4irr6DkFqfO1ATDTZ0ZjTXNK-J07JYcXw@mail.gmail.com>
From: Suhas Nandakumar <suhasietf@gmail.com>
To: perc@ietf.org
Content-Type: multipart/alternative; boundary=001a11454dbc953a910521a3ace0
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/aoM0OMfJNIZQloPRWyCYNejPJ0E>
Subject: [Perc] Design Meeting 2 - 10/12 - 10 AM EST
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Oct 2015 03:35:44 -0000

--001a11454dbc953a910521a3ace0
Content-Type: text/plain; charset=UTF-8

Hello All

   Our next design meeting will be on 10/12 (12th October, Monday) at 10 AM
EST time.

*   The WebEx link for the same is :*

*       https://go.webex.com/meet/snandaku
<https://go.webex.com/meet/snandaku>*


Look forward for the discussions


Cheers
Richard/Suhas

--001a11454dbc953a910521a3ace0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><font face=3D"tahoma, sans-serif">Hello All</font><div><fo=
nt face=3D"tahoma, sans-serif"><br></font></div><div><font face=3D"tahoma, =
sans-serif">=C2=A0 =C2=A0Our next design meeting will be on 10/12 (12th Oct=
ober, Monday) at 10 AM EST time.=C2=A0</font></div><div><b><font face=3D"ta=
homa, sans-serif"><br></font></b></div><div><b><font face=3D"tahoma, sans-s=
erif">=C2=A0 =C2=A0The WebEx link for the same is :</font></b></div><div><b=
><font face=3D"tahoma, sans-serif"><br></font></b></div><div><b><font face=
=3D"tahoma, sans-serif">=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://go.we=
bex.com/meet/snandaku">https://go.webex.com/meet/snandaku</a></font></b></d=
iv><div><font face=3D"tahoma, sans-serif"><br></font></div><div><font face=
=3D"tahoma, sans-serif"><br></font></div><div><font face=3D"tahoma, sans-se=
rif">Look forward for the discussions</font></div><div><font face=3D"tahoma=
, sans-serif"><br></font></div><div><font face=3D"tahoma, sans-serif"><br><=
/font></div><div><font face=3D"tahoma, sans-serif">Cheers</font></div><div>=
<font face=3D"tahoma, sans-serif">Richard/Suhas</font></div></div>

--001a11454dbc953a910521a3ace0--


From nobody Thu Oct  8 22:31:43 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1941A1B34BD for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 22:31:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.712
X-Spam-Level: 
X-Spam-Status: No, score=-2.712 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G39PKkVrhg7v for <perc@ietfa.amsl.com>; Thu,  8 Oct 2015 22:31:40 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B8221B34BB for <perc@ietf.org>; Thu,  8 Oct 2015 22:31:40 -0700 (PDT)
Received: from [192.168.1.20] (cpe-098-122-181-215.nc.res.rr.com [98.122.181.215] (may be forged)) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t995VcHE014620 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO) for <perc@ietf.org>; Fri, 9 Oct 2015 01:31:39 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1444368699; bh=G4pGsKx5zqScY6dQboM6s74aQz+dCrtrjpZJpUoDsqs=; h=From:To:Subject:Date:Reply-To; b=Rc1Jsg1/Yi5pMLx3cROQeQZV2XnC/6RRnlqDSQbsQ1mGzOWkB/lh/1q/Lh+DWXOcn ElP4/1HX85zppiS742BJkAhTfnyR0n9K6Ec6DemJEjQup4kXRvqyrdcq5K23tIXfuc ckCaGfnxzXzaW/iz6PU+7sbyvx+4OYlRJV1O8D/8=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "perc@ietf.org" <perc@ietf.org>
Date: Fri, 09 Oct 2015 05:31:47 +0000
Message-Id: <em137311fe-c79d-4133-9be7-548e6f063e58@sydney>
User-Agent: eM_Client/6.0.23181.0
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Fri, 09 Oct 2015 01:31:39 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/ad0GaXJ7fDGj512qf5Q0538y9lE>
Subject: [Perc] Fw: New Version Notification for draft-jones-perc-private-media-framework-01.txt
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Oct 2015 05:31:42 -0000

Folks,

I published a slightly revised version of our draft.  There is nothing=20
substantially different than what was published previously, the=20
highlights being:
1) Removal of the MKI field in the payload
2) Note that part of the header is used as associated data (for E2E)
3) Clarify that some bits in the header are zeroed when consuming=20
associated data
4) Expand on the EEIV usage and placement

It's doesn't attempt to tackle the larger issues we are discussing in=20
the design team meetings, so don't assume it does.  This is just a=20
modest update of our current proposal.

Paul

------ Forwarded Message ------
From: internet-drafts@ietf.org
To: "Nermeen Ismail" <nermeen@cisco.com>; "David Benham"=20
<dbenham@cisco.com>; "Paul E. Jones" <paulej@packetizer.com>; "Paul=20
Jones" <paulej@packetizer.com>
Sent: 10/9/2015 1:23:30 AM
Subject: New Version Notification for=20
draft-jones-perc-private-media-framework-01.txt


A new version of I-D, draft-jones-perc-private-media-framework-01.txt
has been successfully submitted by Paul E. Jones and posted to the
IETF repository.

Name: draft-jones-perc-private-media-framework
Revision: 01
Title: A Solution Framework for Private Media in Privacy Enhanced RTP=20
Conferencing
Document date: 2015-10-09
Group: Individual Submission
Pages: 19
URL:           =20
https://www.ietf.org/internet-drafts/draft-jones-perc-private-media-framewo=
rk-01.txt
Status:        =20
https://datatracker.ietf.org/doc/draft-jones-perc-private-media-framework/
Htmlized:      =20
https://tools.ietf.org/html/draft-jones-perc-private-media-framework-01
Diff:          =20
https://www.ietf.org/rfcdiff?url2=3Ddraft-jones-perc-private-media-framewor=
k-01

Abstract:
    This document describes a solution framework for ensuring that media
    confidentiality and integrity are maintained end-to-end within the
    context of a switched conferencing environment where media
    distribution devices are not trusted with the end-to-end media
    encryption keys.  The solution aims to build upon existing security
    mechanisms defined for the real-time transport protocol (RTP).




Please note that it may take a couple of minutes from the time of=20
submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


From nobody Fri Oct  9 00:24:30 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD59B1A6F62 for <perc@ietfa.amsl.com>; Fri,  9 Oct 2015 00:24:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.711
X-Spam-Level: 
X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MyaXCVs1xAbz for <perc@ietfa.amsl.com>; Fri,  9 Oct 2015 00:24:27 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 577DC1A6F61 for <perc@ietf.org>; Fri,  9 Oct 2015 00:24:27 -0700 (PDT)
Received: from [192.168.1.20] (cpe-098-122-181-215.nc.res.rr.com [98.122.181.215] (may be forged)) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t997OPVK022273 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 9 Oct 2015 03:24:26 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1444375466; bh=Yy0lUsxKVYFYbJAJEstVaoDPlo2R6ySlPOrWP3mYQOY=; h=From:To:Subject:Date:In-Reply-To:Reply-To; b=YzPuN3p44elSsGhNoJhWNx9kzRo75h43yYyzf3Y+11ajEShRBgUDSZtARE96yLv+1 xBFISBBCv2fc0w29W5y/OoBJ6PCiJ+4G7+3GX1NmkfvAmZT4Iu5q00BTDJQvsV1jnE ILiecFkW+rVwqJ9K+Q/Hsqh1i700Q2ecn9jzWv9w=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "Cullen Jennings" <fluffy@iii.ca>, perc@ietf.org
Date: Fri, 09 Oct 2015 07:24:34 +0000
Message-Id: <em10f1c302-9e42-4979-a340-85768db0e1d1@sydney>
In-Reply-To: <9BBE35DE-EE33-403F-BE04-B45DB8E13493@iii.ca>
User-Agent: eM_Client/6.0.23181.0
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------=_MB14D290A4-28F5-40C6-A6DB-10FA9EC2C692"
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Fri, 09 Oct 2015 03:24:26 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/cSxDDIrhJ9fQSJCGJKJsLOkRygg>
Subject: Re: [Perc] Slides to help expain things
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Oct 2015 07:24:29 -0000

--------=_MB14D290A4-28F5-40C6-A6DB-10FA9EC2C692
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Cullen,

I really appreciate you putting this into pictures.

I'm a little confused about slide #8.  Many of those attributes would be=
=20
E2E authenticated using AES-GCM per the spec you mentioned.  We=20
attempted to do the same in the jones draft.  However, it wasn't clear=20
from that chart which draft does and does not provide E2E auth for these=
=20
various fields.  In the slide, I think you're not speaking of either the=
=20
jones or mattsson draft, but of what the aes-gcm spec for SRTP says,=20
right?

It might be helpful to have 3 columns: what does=20
draft-ietf-avtcore-srtp-aes-gcm say vs. the two perc drafts we're=20
considering.

Perhaps the same for HBH Encrypted / Authenticated, too.  I cannot tell=20
from this slide what is YES/NO from existing SRTP (and=20
draft-ietf-avtcore-srtp-aes-gcm) vs. the two proposals.

Paul

------ Original Message ------
From: "Cullen Jennings" <fluffy@iii.ca>
To: perc@ietf.org
Sent: 10/8/2015 6:42:10 PM
Subject: [Perc] Slides to help expain things

>
>I've been bouncing around some slides to help explain what I think the=20
>WG is trying to accomplish and the various drafts. They are probably=20
>best discussed on a call but thought I would send them here to help us=20
>get on the same page about what the open issues are.
>
>Cullen
>
>
--------=_MB14D290A4-28F5-40C6-A6DB-10FA9EC2C692
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD>
<STYLE id=3DeMClientCss>blockquote.cite { margin-left: 5px; margin-right:=
 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc=
 }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px;=
 padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; paddin=
g-top: 0px; }
.plain pre, .plain tt { font-family: monospace; font-size: 100%; font-weigh=
t: normal; font-style: normal; white-space: pre-wrap; }
a img { border: 0px; }body {font-family: Calibri;font-size: 11pt;}
.plain pre, .plain tt {font-family: Calibri;font-size: 11pt;}
</STYLE>

<STYLE></STYLE>

<META content=3Dtext/html;charset=3Dutf-8 http-equiv=3DContent-Type></HEAD>
<BODY scroll=3Dauto class>
<DIV>Cullen,</DIV>
<DIV>&nbsp;</DIV>
<DIV>I really appreciate you putting this into pictures.</DIV>
<DIV>&nbsp;</DIV>
<DIV>I'm a little confused about slide #8.&nbsp; Many of those attributes=
 would be E2E authenticated using AES-GCM per the spec you mentioned.&nbsp;=
 We attempted to do the same in the jones draft.&nbsp; However, it wasn't=
 clear from that chart which draft does and does not provide E2E auth for=
 these various fields.&nbsp; In the slide, I think you're not speaking of=
 either the jones or mattsson draft, but of what the aes-gcm spec for SRTP=
 says, right?</DIV>
<DIV>&nbsp;</DIV>
<DIV>It might be helpful to have 3 columns: what does&nbsp;draft-ietf-avtco=
re-srtp-aes-gcm say vs. the two perc drafts we're considering.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Perhaps the same for HBH Encrypted / Authenticated, too.&nbsp; I canno=
t tell from this slide what is YES/NO from existing SRTP (and draft-ietf-av=
tcore-srtp-aes-gcm) vs. the two proposals.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Paul</DIV>
<DIV>&nbsp;</DIV>
<DIV>------ Original Message ------</DIV>
<DIV>From: "Cullen Jennings" &lt;<A href=3D"mailto:fluffy@iii.ca">fluffy@ii=
i.ca</A>&gt;</DIV>
<DIV>To: <A href=3D"mailto:perc@ietf.org">perc@ietf.org</A></DIV>
<DIV>Sent: 10/8/2015 6:42:10 PM</DIV>
<DIV>Subject: [Perc] Slides to help expain things</DIV>
<DIV>&nbsp;</DIV>
<DIV id=3Dx0cd428e852684bc180e98442dde528d9 class=3Dplain>
<BLOCKQUOTE class=3Dcite2 cite=3D9BBE35DE-EE33-403F-BE04-B45DB8E13493@iii.c=
a type=3D"cite"><TT>
<DIV>&nbsp;</DIV>
<DIV>I've been bouncing around some slides to help explain what I think =
the WG is trying to accomplish and the various drafts. They are probably=
 best discussed on a call but thought I would send them here to help us =
get on the same page about what the open issues are.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Cullen</DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV></TT></BLOCKQUOTE></DIV></BODY></HTML>
--------=_MB14D290A4-28F5-40C6-A6DB-10FA9EC2C692--


From nobody Sun Oct 11 02:18:14 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63C3C1B2AA7 for <perc@ietfa.amsl.com>; Sun, 11 Oct 2015 02:18:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.011
X-Spam-Level: 
X-Spam-Status: No, score=-0.011 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YQv28e-Ud6Ab for <perc@ietfa.amsl.com>; Sun, 11 Oct 2015 02:18:11 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B14BC1B2AA6 for <perc@ietf.org>; Sun, 11 Oct 2015 02:18:11 -0700 (PDT)
Received: from [156.106.228.13] ([156.106.228.13]) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t9B9I5px013099 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 11 Oct 2015 05:18:07 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1444555088; bh=EwdqPUjQ6Luh9Ei/6tsZTGgA25Pcxk92gFKNKzQgUdE=; h=From:To:Subject:Cc:Date:In-Reply-To:Reply-To; b=L3olk3Dy7TOJQzoaidQMDvUj7saeZ5QRLMgQLBFOkqbuQGDf9O7IGUEQzcZgPakwt yjeoXd066FrHvV6XKItiiMniihmkOplI4zF3X2dint1ji6zZJdLQwH5Oe0Lz+C/ysd na/pWzuz7fPgz+fuYS+Loh33JTEGGgRXQ6if7XCM=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "John Mattsson" <john.mattsson@ericsson.com>, "Magnus Westerlund" <magnus.westerlund@ericsson.com>, "perc@ietf.org" <perc@ietf.org>
Date: Sun, 11 Oct 2015 09:18:04 +0000
Message-Id: <eme8db4fc7-0259-4f71-964e-d6507d91cc0f@helsinki>
In-Reply-To: <D23E9EBA.3D753%john.mattsson@ericsson.com>
User-Agent: eM_Client/6.0.23181.0
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------=_MBE44E3CA5-1F0F-4CC8-AE23-BA45F363F726"
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Sun, 11 Oct 2015 05:18:08 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/dxpZqXrdc2Ezezq4fonpXh8j0G4>
Cc: =?utf-8?q?Mats=20N=c3=a4slund?= <mats.naslund@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 11 Oct 2015 09:18:13 -0000

--------=_MBE44E3CA5-1F0F-4CC8-AE23-BA45F363F726
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable

John,


>Yes =E2=80=9Cinner ID uniqueness=E2=80=9D is a must, even if ID collisions=
 do not lead=20
>to two time pads (EKT and random SRTP master keys fixes this). Just as=20
>your analysis above shows, random 32-bit SSRCs are in many scenarios to=
=20
>short to give uniqueness. As stated, we therefore suggest that the Key=20
>Management Function assigns an =E2=80=9CEndpoint ID=E2=80=9D when endpoint=
 requests the=20
>"e2e key=E2=80=9D. This is something the KMF would do internally anyway.=
 In our=20
>proposal, SSRC/CSRC would not be used for e2e protection, they would=20
>only be used as an context identifier for the receiver. This leads to=20
>the requirement that SSRC/CSRC must be unique for the receiver and that=
=20
>several senders using the same SSRC/CSRC is fine (as in your example).=20
>Our current understanding is that this would give a e2e ID solution=20
>with no changes to RTP SSRC handling, no packet overhead (except when=20
>CSRC is used), Inner ID uniqueness, and the possibility to map e2e=20
>identities to more human readable names.

I think you're likely right.  With the approach we were taking, each=20
endpoint would need to be assigned a unique SSRC (versus simply=20
selecting one at random).  There is already an RFC for that to signal it=
=20
in SDP -- I think.  JL wrote that, so perhaps he can tell me if it's not=
=20
suitable for this application.

So long as the endpoints have that unique value -- whatever it is -- to=20
construct the IV, then I think that eases my concerns over manipulating=20
the SSRC by the MDD.

Paul



--------=_MBE44E3CA5-1F0F-4CC8-AE23-BA45F363F726
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD>
<STYLE id=3DeMClientCss>blockquote.cite { margin-left: 5px; margin-right:=
 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc=
 }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px;=
 padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; paddin=
g-top: 0px; }
.plain pre, .plain tt { font-family: monospace; font-size: 100%; font-weigh=
t: normal; font-style: normal; white-space: pre-wrap; }
a img { border: 0px; }body {font-family: Calibri;font-size: 11pt;}
.plain pre, .plain tt {font-family: Calibri;font-size: 11pt;}
</STYLE>

<STYLE></STYLE>
</HEAD>
<BODY scroll=3Dauto class>
<DIV>John,</DIV>
<DIV><BR>&nbsp;</DIV>
<DIV id=3Dxb7dadab278024dada9a5b26ed702712c style=3D"FONT-SIZE: 14px; WORD-=
WRAP: break-word; FONT-FAMILY: Calibri, sans-serif; COLOR: rgb(0,0,0); -web=
kit-nbsp-mode: space; -webkit-line-break: after-white-space">
<BLOCKQUOTE class=3Dcite2 cite=3DD23E9EBA.3D753%john.mattsson@ericsson.com=
 type=3D"cite">
<DIV>Yes =E2=80=9Cinner ID uniqueness=E2=80=9D is a must, even if ID collis=
ions do not lead to two time pads (EKT and random SRTP master keys fixes=
 this). Just as your analysis above shows, random 32-bit SSRCs are in many=
 scenarios to short to give uniqueness. As stated, we therefore suggest =
that the Key Management Function assigns an =E2=80=9CEndpoint ID=E2=80=9D=
 when endpoint requests the "e2e key=E2=80=9D. This is something the KMF=
 would do internally anyway. In our proposal, SSRC/CSRC would not be used=
 for e2e protection, they would only be used as an context identifier for=
 the receiver. This leads to the requirement that SSRC/CSRC must be unique=
 for the receiver and that several senders using the same SSRC/CSRC is fine=
 (as in your example). Our current understanding is that this would give=
 a e2e ID solution with no changes to RTP SSRC handling, no packet overhead=
 (except when CSRC is used), Inner ID uniqueness, and the possibility to=
 map e2e identities to more human readable names.&nbsp;</DIV></BLOCKQUOTE>
<DIV>&nbsp;</DIV>
<DIV><SPAN id=3DOLK_SRC_BODY_SECTION>I think you're likely right.&nbsp; =
With the approach we were taking, each endpoint would need to be assigned=
 a unique SSRC (versus simply selecting one at random).&nbsp; There is alre=
ady an RFC for that to signal it in SDP -- I think.&nbsp; JL wrote that,=
 so perhaps he can tell me if it's not suitable for this application.</SPAN=
></DIV>
<DIV><SPAN></SPAN>&nbsp;</DIV>
<DIV><SPAN>So long as the endpoints have that unique value -- whatever it=
 is -- to construct the IV, then I think that eases my concerns over manipu=
lating the SSRC by the MDD.</SPAN></DIV>
<DIV><SPAN></SPAN>&nbsp;</DIV>
<DIV><SPAN>Paul</SPAN></DIV>
<DIV><SPAN></SPAN>&nbsp;</DIV>
<DIV><SPAN></SPAN>&nbsp;</DIV>
<DIV><SPAN>&nbsp;</DIV></SPAN></DIV></BODY></HTML>
--------=_MBE44E3CA5-1F0F-4CC8-AE23-BA45F363F726--


From nobody Mon Oct 12 06:05:36 2015
Return-Path: <fluffy@iii.ca>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5036F1B2CCF for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 06:05:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.501
X-Spam-Level: 
X-Spam-Status: No, score=-0.501 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z8Av-DuZNxav for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 06:05:34 -0700 (PDT)
Received: from smtp77.iad3a.emailsrvr.com (smtp77.iad3a.emailsrvr.com [173.203.187.77]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 197CB1B2CC2 for <perc@ietf.org>; Mon, 12 Oct 2015 06:05:34 -0700 (PDT)
Received: from smtp10.relay.iad3a.emailsrvr.com (localhost.localdomain [127.0.0.1]) by smtp10.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id 340A028057D for <perc@ietf.org>; Mon, 12 Oct 2015 09:05:33 -0400 (EDT)
Received: by smtp10.relay.iad3a.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id C932028059F for <perc@ietf.org>; Mon, 12 Oct 2015 09:05:32 -0400 (EDT)
X-Sender-Id: fluffy@iii.ca
Received: from [192.168.4.100] ([UNAVAILABLE]. [128.107.241.171]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:465 (trex/5.4.2); Mon, 12 Oct 2015 13:05:33 GMT
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Cullen Jennings <fluffy@iii.ca>
In-Reply-To: <9BBE35DE-EE33-403F-BE04-B45DB8E13493@iii.ca>
Date: Mon, 12 Oct 2015 07:05:32 -0600
Content-Transfer-Encoding: quoted-printable
Message-Id: <8925FC5E-169E-4509-A3FE-F0E2FF0475A4@iii.ca>
References: <9BBE35DE-EE33-403F-BE04-B45DB8E13493@iii.ca>
To: perc@ietf.org
X-Mailer: Apple Mail (2.2104)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/1FyJaP-IfllyrWANvZcmhdFnyhY>
Subject: Re: [Perc] Slides to help expain things
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Oct 2015 13:05:35 -0000

Ah, yes, I should have been cleared. I meant that table on slide 8 to be =
the requirements of what we need for the solution and not necessarily a =
list of what either of the proposals are.=20


> On Oct 8, 2015, at 4:42 PM, Cullen Jennings <fluffy@iii.ca> wrote:
>=20
>=20
> I've been bouncing around some slides to help explain what I think the =
WG is trying to accomplish and the various drafts. They are probably =
best discussed on a call but thought I would send them here to help us =
get on the same page about what the open issues are.=20
>=20
> Cullen
>=20
>=20
> <PercSecurityContexts_v2.pdf>
>=20
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc


From nobody Mon Oct 12 06:29:21 2015
Return-Path: <fluffy@iii.ca>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0ED61B31D2 for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 06:29:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.501
X-Spam-Level: 
X-Spam-Status: No, score=-0.501 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qry07w-z16ZZ for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 06:29:17 -0700 (PDT)
Received: from smtp117.ord1c.emailsrvr.com (smtp117.ord1c.emailsrvr.com [108.166.43.117]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D6631B31D0 for <perc@ietf.org>; Mon, 12 Oct 2015 06:29:16 -0700 (PDT)
Received: from smtp15.relay.ord1c.emailsrvr.com (localhost.localdomain [127.0.0.1]) by smtp15.relay.ord1c.emailsrvr.com (SMTP Server) with ESMTP id 57C60380A80; Mon, 12 Oct 2015 09:29:16 -0400 (EDT)
Received: by smtp15.relay.ord1c.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id 4146238069B;  Mon, 12 Oct 2015 09:29:15 -0400 (EDT)
X-Sender-Id: fluffy@iii.ca
Received: from [192.168.4.100] ([UNAVAILABLE]. [128.107.241.171]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:465 (trex/5.4.2); Mon, 12 Oct 2015 13:29:16 GMT
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Cullen Jennings <fluffy@iii.ca>
In-Reply-To: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
Date: Mon, 12 Oct 2015 07:29:14 -0600
Content-Transfer-Encoding: quoted-printable
Message-Id: <D9F8A59D-94F4-46C0-A96D-F1F292C681C7@iii.ca>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
To: Magnus Westerlund <magnus.westerlund@ericsson.com>
X-Mailer: Apple Mail (2.2104)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/976o4LMWARobmL5LXXIUoTXUKu0>
Cc: "perc@ietf.org" <perc@ietf.org>, =?iso-8859-1?Q?Mats_N=E4slund?= <mats.naslund@ericsson.com>, John Mattsson <john.mattsson@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Oct 2015 13:29:20 -0000

> On Oct 8, 2015, at 5:18 AM, Magnus Westerlund =
<magnus.westerlund@ericsson.com> wrote:
>=20
> Hi,
> =20
> John, Mats and I have spent some time reviewing what information we =
see
> as needed for the RTP payload security, hence called inner security. =
We
> also in the end have a proposal for how to include that information.
> =20
> So we have considered the three topologies that are relevant for PERC.
> These three as named in
> =
https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-topologies-update/=
:
> =20
> 1. Relay - Transport Translator (Section 3.5.1)
> 2. Media Switching Mixer (Section 3.6.2)
> 3. Selective Forwarding Middlebox (Section 3.7)
> =20
> First we look how the SSRCs are handled by these middleboxes. This is
> important as it affects how one can track the media streams flowing
> through the system.
> =20
> So the Relay (1) performs no manipulation on the RTP level. Thus, a
> packet being sent will arrive at the receiver except for transport
> losses. This results in constant SSRCs end to end between sender and
> receiver.
> =20
> =20
> The Media Switching Mixer (2) has some important properties. As the
> SSRCs used towards the receiver from the RTP mixer (MDD) is task/role
> based, rather than related to original source, the inner security
> context identification can't be made based on the SSRC, rather an
> additional field has to be used. It is important to note that the
> sequence of payloads for this stream is created by switching between =
the
> available incoming streams. At any given point in time one specific
> stream of inner payloads are forwarded for each task/role. Which it is =
can be changed at almost
> any point. The CSRC would be the normal method for identifying the
> original media contributor in a non PERC context. In a PERC context it
> seems reasonable to also use CSRC. Especially, as there can't be any
> media mixing due to the protected inner payloads, there can only be =
one
> CSRC for any payload. So in this case the SSRC has no relation to the
> media sources, and instead it is CSRC (or equivalent) that would have =
a
> relation with the media source.
> =20
> The SFM (3) although selectively forwarding media, it does have a one =
to one
> handling of SSRCs, one SSRC arriving at a SFM will have its own SSRC
> going out. Note that remapping may occur so that incoming and outgoing
> SSRC is different.
> =20
> The remapping of SSRC could occur also in the switching RTP mixer,
> although it is not a recommended behaviour.
> =20
> What was discussed last design team meeting was the view that we want =
to
> enable the remapping of SSRC when needed. It is a simple way of =
dealing
> with SSRC collisions in SFMs for example. However, one need to be =
aware
> of the potential downside. First, by allowing re-mapping we don't have =
a
> global stable identifier towards the originating end-point and its
> identification of the media stream. This is something that at least on =
a
> higher layer is needed to prevent substitution attacks, where the MDD
> attempts to replace one endpoint's media streams with another =
endpoints
> stream.
> =20
> We also note that if end-to-end protected RTCP messages are used, not
> having a global coordinated SSRC space within a conference, there will
> be identification issues, and likely some other id space would be =
needed.
> =20
> The next RTP header field that we considered was the RTP sequence
> number. At the sender side, the RTP sequence number will be directly
> related to the inner payload. However, that relation is not retained
> across an MDD. An RTP switching mixer, will create an RTP sequence
> number solely related to the out going created stream. As that is a
> switched combined stream the corresponding inner sequence number will
> jump back and forth at each switch, and the relative offset will =
change
> with each switch.
> =20
> For the SFM the outer RTP sequence number for an outgoing stream will =
be
> counting the inner payloads selected to be sent (forwarded). Thus, the
> offset changes at each time a decision to forward or not forward is =
made.
> =20
> The Payload Type field is dependent on the signalling, and likely have
> local assignment only. Each joining endpoint will negotiate common =
sets
> of payload types with the signaling server representing the =
conference.
> However, the signalling server when using offer/answer not force an
> endpoint to use a particular PT field value to represent a commonly =
used
> codec configuration. Thus, PT rewriting will occur at the MDDs,
> independently of the topology.
> =20
> The RTP marker bit is actually a field owned by the payload format, =
and
> thus are tightly connected to the inner payload. We see that this =
field
> is not possible to modify by the MDD, instead it should be included =
part
> of the payload's integrity protected data.
> =20
> The padding flag is tightly connected to the inner payload and should=20=

> not be modified by the MDD, instead it should be included part
> of the payload's integrity protected data.
> =20
> The Timestamp field also relates to the presentation timeline for the
> outgoing stream. Here there is a difference between the SFM, which
> maintains the original senders timeline, and the RTP switching mixer
> that needs to create its outgoing streams timeline in a consistent =
way.
> This requires rewriting the timestamp, but maintain the inter spacing
> between media frames within the inner payload.

I agree with above and let me summarize as requirements are the MDD can =
optionally modify

SSRC, Seq_no, PT, timestamp, CC, CSRC

But can not modify: (M) Marker, (P) Padding.=20

I'm never clear on the many different meanings the M bit has been used =
for so bit harder for me to decide but we can figure that out and ditto =
for padding but what you are proposing sounds like it would work for me.=20=


We should probably make sure we know what we want for V, X,

I would propose V is that as a future extensibility we might allow V to =
modified by MDD but I don't really care.=20

I think the X bit we need to be modified by MDD so that it can insert =
things like mixer to client levels.=20


> =20
> =20
> Proposal for how to structure information
> -----------------------------------------
> Our proposal for how the above information should be handled and
> maintained are the following.
> =20
> The inner payload's crypto context is looked up based on the CSRC if
> that field is present (for RTP switching mixers), else the SSRC.

I view this as for the E3E, we need to be able to find all the bits that =
are used in normal E2E crypto from some new place in the packet. I'm =
fine with finding the original SSRC in CSRC.=20

> =20
> The inner crypto context includes the necessary key (called transport
> key below) and other crypto
> information. To prevent attacks we also need a identifier for this
> particular inner media stream. For this we want to have two parts, one
> part identifying the endpoint, and another identifying the media =
stream.
> The endpoint identifier can either be globally unique and assigned by
> the master key server, thus enabling a compact field scaled to planned
> maximum participation in a conference. Alternatively if significant
> longer randomly picked. An endpoint id assigned by the master key =
server
> seems preferable as that enables mapping between the endpoint id and
> other identifiers meant for humans. The stream id is managed by the =
endpoint. We
> foresee that these two IDs are carried by EKT to establish this =
context.
> The field lengths can be configurable and the used values provided in
> the key-management protocol for the EKT master key. Thus enabling that
> most conference to use 1 + 1 byte enabling 256 endpoints which each =
can
> have 256 streams. Sufficient for most use cases, and for those use =
cases
> that requires more participants or streams one can use longer fields
> within the conference.
> =20
> The Inner Payload gets an explicit sequence number. We propose 32 bits
> that counts the number of sent packets using a specific transport key
> used to protect this inner payload. It is part of the inner payload to
> keep these close, and minimize the overhead. Using an RTP header
> extension will in many case have more overhead.
> =20
> We foresee that PERC systems will perform transport re-keying quite
> frequently, that is why 32-bits will be sufficient, and if that is on
> its way to wrap, the sending end-point will have to rekey its =
transport
> key for this media stream. We note that 32-bits are sufficient also =
for
> really high bit-rates. At 3 Gbps using 1200 bytes of payload one need =
to
> rekey approximately every 3 hours. Using 24 bits would result in
> rekeying every 53 seconds for this case.
> =20
> To ensure that replay protection is present, and to prevent MDD =
reordering
> of packets, one will need to have a sequence number also for the used
> transport key. That way when one starts using a new transport key, one
> can reset the inner payload sequence number, thus enabling long lived
> sessions.
> =20
> For the cases where one wants to prevent joining and leaving =
participant
> to decrypt media prior or after joining and leaving respectively then =
we
> forsee the need for master key rekeying. Also that needs to be =
tracked,
> to prevent replay attacks. Thus also on this level one needs to have a
> associated sequence number with the master key. When one
> starts using a new master transport key, the transport key sequence
> number is reset.
> =20
> The inner payload identification will thus basically be
> "Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr". The
> first two will determined through the key management protocol and EKT.
> Enabling the receiver to determine if a payload is less recent then =
the
> latest received one. This enables one to have a short window for
> accepting older packets to deal with re-order events thus preventing
> replays. We note that the MDD will be able to delay packets. Thus when
> switching back to a source select any point between the previous sent
> and the latest received by the MDD, as the point of continuing
> transmission. We likely need to discuss if that is a sufficient level =
of
> protection. We need to deal with expected levels of transport delay.
> =20
> =20
> To summarize our proposal:
> =20
> As part of the inner RTP payload for a particular media stream:
> - Explicit 32-bit sequence number
> - Use CSRC/SSRC for context lookup on packet reception.
> =20
> Use EKT for context population per media stream of the following
> information:
> -   Endpoint ID + Endpoint specific stream ID
> -   Transport key used to protect payload
> -   Transport key sequence number
> =20
> Stream specific context also contain:
> Highest seen inner payload identifier "Master Sequence nr : Transport
> Sequence nr. : Packet Sequence nr" and replay window.
> =20
> Key-management for EKT master key
> - EKT Master key
> - Master Key sequence number
> - Field lengths for Endpoint Id and Endpoint Stream ID
> - Endpoint ID
> =20
> IV includes:
> - Endpoint ID + Endpoint specific stream ID
> - Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr
> e2e integrity protected information
> - padding flag
> - marker bit
> - payload + padding + pad count (also encrypted)
> - IV (only Inner_Payload_Seq_nr sent in each packet)
> =20
> =20
> Looking forward to feedback on this.

This is inventing a new security scheme for the HBH. My questions is =
first can we just use SRTP for HBH? Any reason it would not work?  It =
seems to me that it will work and if it does, then I get a bit antsy =
about it inventing something new will have any significant advantages.=20=







From nobody Mon Oct 12 06:33:30 2015
Return-Path: <fluffy@iii.ca>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE7B31B31FE for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 06:33:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bQu-H-urhDQn for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 06:33:27 -0700 (PDT)
Received: from smtp125.ord1c.emailsrvr.com (smtp125.ord1c.emailsrvr.com [108.166.43.125]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5208E1B31F5 for <perc@ietf.org>; Mon, 12 Oct 2015 06:33:27 -0700 (PDT)
Received: from smtp16.relay.ord1c.emailsrvr.com (localhost.localdomain [127.0.0.1]) by smtp16.relay.ord1c.emailsrvr.com (SMTP Server) with ESMTP id 9B9BD1811FD; Mon, 12 Oct 2015 09:33:26 -0400 (EDT)
Received: by smtp16.relay.ord1c.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id CC10D1812DB;  Mon, 12 Oct 2015 09:33:25 -0400 (EDT)
X-Sender-Id: fluffy@iii.ca
Received: from [192.168.4.100] ([UNAVAILABLE]. [128.107.241.171]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:465 (trex/5.4.2); Mon, 12 Oct 2015 13:33:26 GMT
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Cullen Jennings <fluffy@iii.ca>
In-Reply-To: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
Date: Mon, 12 Oct 2015 07:33:25 -0600
Content-Transfer-Encoding: quoted-printable
Message-Id: <B3D76AB1-5B9B-4F7C-A569-3DA9D5D20E63@iii.ca>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se>
To: Magnus Westerlund <magnus.westerlund@ericsson.com>
X-Mailer: Apple Mail (2.2104)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/kJbF3mb4bm4bi5S6oF0rapqn8wI>
Cc: "perc@ietf.org" <perc@ietf.org>, =?iso-8859-1?Q?Mats_N=E4slund?= <mats.naslund@ericsson.com>, John Mattsson <john.mattsson@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Oct 2015 13:33:28 -0000

> On Oct 8, 2015, at 5:18 AM, Magnus Westerlund =
<magnus.westerlund@ericsson.com> wrote:
>=20
> We foresee that PERC systems will perform transport re-keying quite
> frequently,

for systems that rekey on participants joining or leaving that seems =
likely, but I think we also need to support systems that do not do and =
have one key for the whole session



From nobody Mon Oct 12 07:09:20 2015
Return-Path: <ron.even.tlv@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EA8041B32DA for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 07:09:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GuH6fXXhjf8l for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 07:09:11 -0700 (PDT)
Received: from mail-wi0-x22c.google.com (mail-wi0-x22c.google.com [IPv6:2a00:1450:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 934101B32D7 for <perc@ietf.org>; Mon, 12 Oct 2015 07:09:10 -0700 (PDT)
Received: by wicgb1 with SMTP id gb1so51972124wic.1 for <perc@ietf.org>; Mon, 12 Oct 2015 07:09:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:content-type:content-transfer-encoding:thread-index :content-language; bh=BOXYbUcAWCuq7VGa+p6X7fOQsiNmkVkdAcCytKZ1VnI=; b=0rQQRruFl5jdD4h2GHGh4Usj0m2EXqboNQ72rd0UL/DGy8NgCHj8Qhcft5ZMi0EzGi Dx/P/eRMPgiQlA3FtbiRv1tMnWDeePgpyjOJfc9Z7VupjTttjyDV6ZQzl/5BkZmKAQUl RlDFhiiyaajY8vtB1zmZ3mey1HHzV/tqpw5ZTYKyH+8PW9CqS4x8wks9uVqjE5159Oza iCtq7cVWcySi4BQwvFN/cx+45PD9JTkWAJ/yAHn2UGPXejsGzUSjgqNnp0kalg8cNviE 8KXjkhI6/TEHZKYzn4pGcl+fcCiW3D6l0u/qugWVXEKYk3IcrzE4sxj1pS03GnXKxcnp 8yww==
X-Received: by 10.180.105.234 with SMTP id gp10mr13556623wib.51.1444658948946;  Mon, 12 Oct 2015 07:09:08 -0700 (PDT)
Received: from RoniPC (bzq-109-65-15-14.red.bezeqint.net. [109.65.15.14]) by smtp.gmail.com with ESMTPSA id bf8sm20078198wjc.22.2015.10.12.07.09.06 (version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 12 Oct 2015 07:09:07 -0700 (PDT)
From: "Roni Even" <ron.even.tlv@gmail.com>
To: "'Cullen Jennings'" <fluffy@iii.ca>, "'Magnus Westerlund'" <magnus.westerlund@ericsson.com>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se> <D9F8A59D-94F4-46C0-A96D-F1F292C681C7@iii.ca>
In-Reply-To: <D9F8A59D-94F4-46C0-A96D-F1F292C681C7@iii.ca>
Date: Mon, 12 Oct 2015 17:09:05 +0300
Message-ID: <031e01d104f7$8eb5fe20$ac21fa60$@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQHqP37iO9Fj1UVhlHDD6Ayu6ezwawD7Q9vani2VbyA=
Content-Language: he
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/QVLnwJuTGh5c5dc9CLLR6GJpJVg>
Cc: perc@ietf.org, =?iso-8859-1?Q?'Mats_N=E4slund'?= <mats.naslund@ericsson.com>, 'John Mattsson' <john.mattsson@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Oct 2015 14:09:17 -0000

Hi,
Quick question about finding the original SSRC in the CSRC, what will =
happen
if going through cascaded media switching mixers?=20

Roni

-----Original Message-----
From: Perc [mailto:perc-bounces@ietf.org] On Behalf Of Cullen Jennings
Sent: Monday, October 12, 2015 4:29 PM
To: Magnus Westerlund
Cc: perc@ietf.org; Mats N=E4slund; John Mattsson
Subject: Re: [Perc] Review of needed information for inner security


> On Oct 8, 2015, at 5:18 AM, Magnus Westerlund
<magnus.westerlund@ericsson.com> wrote:
>=20
> Hi,
> =20
> John, Mats and I have spent some time reviewing what information we=20
> see as needed for the RTP payload security, hence called inner=20
> security. We also in the end have a proposal for how to include that
information.
> =20
> So we have considered the three topologies that are relevant for PERC.
> These three as named in
>
https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-topologies-update=
/:
> =20
> 1. Relay - Transport Translator (Section 3.5.1) 2. Media Switching=20
> Mixer (Section 3.6.2) 3. Selective Forwarding Middlebox (Section 3.7)
> =20
> First we look how the SSRCs are handled by these middleboxes. This is=20
> important as it affects how one can track the media streams flowing=20
> through the system.
> =20
> So the Relay (1) performs no manipulation on the RTP level. Thus, a=20
> packet being sent will arrive at the receiver except for transport=20
> losses. This results in constant SSRCs end to end between sender and=20
> receiver.
> =20
> =20
> The Media Switching Mixer (2) has some important properties. As the=20
> SSRCs used towards the receiver from the RTP mixer (MDD) is task/role=20
> based, rather than related to original source, the inner security=20
> context identification can't be made based on the SSRC, rather an=20
> additional field has to be used. It is important to note that the=20
> sequence of payloads for this stream is created by switching between=20
> the available incoming streams. At any given point in time one=20
> specific stream of inner payloads are forwarded for each task/role.=20
> Which it is can be changed at almost any point. The CSRC would be the=20
> normal method for identifying the original media contributor in a non=20
> PERC context. In a PERC context it seems reasonable to also use CSRC.=20
> Especially, as there can't be any media mixing due to the protected=20
> inner payloads, there can only be one CSRC for any payload. So in this =

> case the SSRC has no relation to the media sources, and instead it is=20
> CSRC (or equivalent) that would have a relation with the media source.
> =20
> The SFM (3) although selectively forwarding media, it does have a one=20
> to one handling of SSRCs, one SSRC arriving at a SFM will have its own =

> SSRC going out. Note that remapping may occur so that incoming and=20
> outgoing SSRC is different.
> =20
> The remapping of SSRC could occur also in the switching RTP mixer,=20
> although it is not a recommended behaviour.
> =20
> What was discussed last design team meeting was the view that we want=20
> to enable the remapping of SSRC when needed. It is a simple way of=20
> dealing with SSRC collisions in SFMs for example. However, one need to =

> be aware of the potential downside. First, by allowing re-mapping we=20
> don't have a global stable identifier towards the originating=20
> end-point and its identification of the media stream. This is=20
> something that at least on a higher layer is needed to prevent=20
> substitution attacks, where the MDD attempts to replace one endpoint's =

> media streams with another endpoints stream.
> =20
> We also note that if end-to-end protected RTCP messages are used, not=20
> having a global coordinated SSRC space within a conference, there will =

> be identification issues, and likely some other id space would be =
needed.
> =20
> The next RTP header field that we considered was the RTP sequence=20
> number. At the sender side, the RTP sequence number will be directly=20
> related to the inner payload. However, that relation is not retained=20
> across an MDD. An RTP switching mixer, will create an RTP sequence=20
> number solely related to the out going created stream. As that is a=20
> switched combined stream the corresponding inner sequence number will=20
> jump back and forth at each switch, and the relative offset will=20
> change with each switch.
> =20
> For the SFM the outer RTP sequence number for an outgoing stream will=20
> be counting the inner payloads selected to be sent (forwarded). Thus,=20
> the offset changes at each time a decision to forward or not forward =
is
made.
> =20
> The Payload Type field is dependent on the signalling, and likely have =

> local assignment only. Each joining endpoint will negotiate common=20
> sets of payload types with the signaling server representing the
conference.
> However, the signalling server when using offer/answer not force an=20
> endpoint to use a particular PT field value to represent a commonly=20
> used codec configuration. Thus, PT rewriting will occur at the MDDs,=20
> independently of the topology.
> =20
> The RTP marker bit is actually a field owned by the payload format,=20
> and thus are tightly connected to the inner payload. We see that this=20
> field is not possible to modify by the MDD, instead it should be=20
> included part of the payload's integrity protected data.
> =20
> The padding flag is tightly connected to the inner payload and should=20
> not be modified by the MDD, instead it should be included part of the=20
> payload's integrity protected data.
> =20
> The Timestamp field also relates to the presentation timeline for the=20
> outgoing stream. Here there is a difference between the SFM, which=20
> maintains the original senders timeline, and the RTP switching mixer=20
> that needs to create its outgoing streams timeline in a consistent =
way.
> This requires rewriting the timestamp, but maintain the inter spacing=20
> between media frames within the inner payload.

I agree with above and let me summarize as requirements are the MDD can
optionally modify

SSRC, Seq_no, PT, timestamp, CC, CSRC

But can not modify: (M) Marker, (P) Padding.=20

I'm never clear on the many different meanings the M bit has been used =
for
so bit harder for me to decide but we can figure that out and ditto for
padding but what you are proposing sounds like it would work for me.=20

We should probably make sure we know what we want for V, X,

I would propose V is that as a future extensibility we might allow V to
modified by MDD but I don't really care.=20

I think the X bit we need to be modified by MDD so that it can insert =
things
like mixer to client levels.=20


> =20
> =20
> Proposal for how to structure information
> -----------------------------------------
> Our proposal for how the above information should be handled and=20
> maintained are the following.
> =20
> The inner payload's crypto context is looked up based on the CSRC if=20
> that field is present (for RTP switching mixers), else the SSRC.

I view this as for the E3E, we need to be able to find all the bits that =
are
used in normal E2E crypto from some new place in the packet. I'm fine =
with
finding the original SSRC in CSRC.=20

> =20
> The inner crypto context includes the necessary key (called transport=20
> key below) and other crypto information. To prevent attacks we also=20
> need a identifier for this particular inner media stream. For this we=20
> want to have two parts, one part identifying the endpoint, and another =

> identifying the media stream.
> The endpoint identifier can either be globally unique and assigned by=20
> the master key server, thus enabling a compact field scaled to planned =

> maximum participation in a conference. Alternatively if significant=20
> longer randomly picked. An endpoint id assigned by the master key=20
> server seems preferable as that enables mapping between the endpoint=20
> id and other identifiers meant for humans. The stream id is managed by =

> the endpoint. We foresee that these two IDs are carried by EKT to
establish this context.
> The field lengths can be configurable and the used values provided in=20
> the key-management protocol for the EKT master key. Thus enabling that =

> most conference to use 1 + 1 byte enabling 256 endpoints which each=20
> can have 256 streams. Sufficient for most use cases, and for those use =

> cases that requires more participants or streams one can use longer=20
> fields within the conference.
> =20
> The Inner Payload gets an explicit sequence number. We propose 32 bits =

> that counts the number of sent packets using a specific transport key=20
> used to protect this inner payload. It is part of the inner payload to =

> keep these close, and minimize the overhead. Using an RTP header=20
> extension will in many case have more overhead.
> =20
> We foresee that PERC systems will perform transport re-keying quite=20
> frequently, that is why 32-bits will be sufficient, and if that is on=20
> its way to wrap, the sending end-point will have to rekey its=20
> transport key for this media stream. We note that 32-bits are=20
> sufficient also for really high bit-rates. At 3 Gbps using 1200 bytes=20
> of payload one need to rekey approximately every 3 hours. Using 24=20
> bits would result in rekeying every 53 seconds for this case.
> =20
> To ensure that replay protection is present, and to prevent MDD=20
> reordering of packets, one will need to have a sequence number also=20
> for the used transport key. That way when one starts using a new=20
> transport key, one can reset the inner payload sequence number, thus=20
> enabling long lived sessions.
> =20
> For the cases where one wants to prevent joining and leaving=20
> participant to decrypt media prior or after joining and leaving=20
> respectively then we forsee the need for master key rekeying. Also=20
> that needs to be tracked, to prevent replay attacks. Thus also on this =

> level one needs to have a associated sequence number with the master=20
> key. When one starts using a new master transport key, the transport=20
> key sequence number is reset.
> =20
> The inner payload identification will thus basically be=20
> "Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr". The =

> first two will determined through the key management protocol and EKT.
> Enabling the receiver to determine if a payload is less recent then=20
> the latest received one. This enables one to have a short window for=20
> accepting older packets to deal with re-order events thus preventing=20
> replays. We note that the MDD will be able to delay packets. Thus when =

> switching back to a source select any point between the previous sent=20
> and the latest received by the MDD, as the point of continuing=20
> transmission. We likely need to discuss if that is a sufficient level=20
> of protection. We need to deal with expected levels of transport =
delay.
> =20
> =20
> To summarize our proposal:
> =20
> As part of the inner RTP payload for a particular media stream:
> - Explicit 32-bit sequence number
> - Use CSRC/SSRC for context lookup on packet reception.
> =20
> Use EKT for context population per media stream of the following
> information:
> -   Endpoint ID + Endpoint specific stream ID
> -   Transport key used to protect payload
> -   Transport key sequence number
> =20
> Stream specific context also contain:
> Highest seen inner payload identifier "Master Sequence nr : Transport=20
> Sequence nr. : Packet Sequence nr" and replay window.
> =20
> Key-management for EKT master key
> - EKT Master key
> - Master Key sequence number
> - Field lengths for Endpoint Id and Endpoint Stream ID
> - Endpoint ID
> =20
> IV includes:
> - Endpoint ID + Endpoint specific stream ID
> - Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr e2e=20
> integrity protected information
> - padding flag
> - marker bit
> - payload + padding + pad count (also encrypted)
> - IV (only Inner_Payload_Seq_nr sent in each packet)
> =20
> =20
> Looking forward to feedback on this.

This is inventing a new security scheme for the HBH. My questions is =
first
can we just use SRTP for HBH? Any reason it would not work?  It seems to =
me
that it will work and if it does, then I get a bit antsy about it =
inventing
something new will have any significant advantages.=20





_______________________________________________
Perc mailing list
Perc@ietf.org
https://www.ietf.org/mailman/listinfo/perc


From nobody Mon Oct 12 07:34:45 2015
Return-Path: <prvs=2727ba1d97=jonathan@vidyo.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F7D61B33A3 for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 07:34:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.496
X-Spam-Level: 
X-Spam-Status: No, score=-1.496 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_SORBS_WEB=0.77, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TS1HWprZpGSe for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 07:34:43 -0700 (PDT)
Received: from mx0a-00198e01.pphosted.com (mx0a-00198e01.pphosted.com [67.231.149.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 857BE1B33A1 for <perc@ietf.org>; Mon, 12 Oct 2015 07:34:43 -0700 (PDT)
Received: from pps.filterd (m0073109.ppops.net [127.0.0.1]) by mx0a-00198e01.pphosted.com (8.15.0.59/8.15.0.59) with SMTP id t9CEUgX9004212; Mon, 12 Oct 2015 10:34:38 -0400
Received: from mail.vidyo.com ([162.209.16.214]) by mx0a-00198e01.pphosted.com with ESMTP id 1xenkss404-1 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Mon, 12 Oct 2015 10:34:38 -0400
Received: from 492132-EXCH1.vidyo.com ([fe80::50:56ff:fe85:4f77]) by 492133-EXCH2.vidyo.com ([fe80::50:56ff:fe85:6b62%13]) with mapi id 14.03.0195.001; Mon, 12 Oct 2015 09:34:37 -0500
From: Jonathan Lennox <jonathan@vidyo.com>
To: "Paul E. Jones" <paulej@packetizer.com>
Thread-Topic: [Perc] Review of needed information for inner security
Thread-Index: AQHRBPf6qmcSuug4E0ChQsgiuJR1TZ5oQB+A
Date: Mon, 12 Oct 2015 14:34:36 +0000
Message-ID: <0B4291CA-FDF7-48ED-BFBB-94A6C3D3B8C7@vidyo.com>
References: <eme8db4fc7-0259-4f71-964e-d6507d91cc0f@helsinki>
In-Reply-To: <eme8db4fc7-0259-4f71-964e-d6507d91cc0f@helsinki>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [160.79.219.114]
Content-Type: multipart/alternative; boundary="_000_0B4291CAFDF748EDBFBB94A6C3D3B8C7vidyocom_"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.14.151, 1.0.33,  0.0.0000 definitions=2015-10-12_08:2015-10-12,2015-10-12,1970-01-01 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 suspectscore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=7.0.1-1508030000 definitions=main-1510120170
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/NVcKcltibHR6UCm19LtXkAxv2G4>
Cc: Magnus Westerlund <magnus.westerlund@ericsson.com>, "perc@ietf.org" <perc@ietf.org>, =?utf-8?B?TWF0cyBOw6RzbHVuZA==?= <mats.naslund@ericsson.com>, John Mattsson <john.mattsson@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Oct 2015 14:34:44 -0000

--_000_0B4291CAFDF748EDBFBB94A6C3D3B8C7vidyocom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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==

--_000_0B4291CAFDF748EDBFBB94A6C3D3B8C7vidyocom_
Content-Type: text/html; charset="utf-8"
Content-ID: <B652E75EB3CE214FA644C9568990F8E5@vidyo.com>
Content-Transfer-Encoding: base64
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--_000_0B4291CAFDF748EDBFBB94A6C3D3B8C7vidyocom_--


From nobody Mon Oct 12 09:44:25 2015
Return-Path: <suhasietf@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3F1F1A8893 for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 09:44:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.599
X-Spam-Level: 
X-Spam-Status: No, score=-0.599 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id coB7nUuB-RWc for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 09:44:22 -0700 (PDT)
Received: from mail-vk0-x22d.google.com (mail-vk0-x22d.google.com [IPv6:2607:f8b0:400c:c05::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CEE91A1B03 for <perc@ietf.org>; Mon, 12 Oct 2015 09:44:22 -0700 (PDT)
Received: by vkgc187 with SMTP id c187so25794762vkg.3 for <perc@ietf.org>; Mon, 12 Oct 2015 09:44:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:date:message-id:subject:from:to:content-type; bh=SASVaZcad6N2I8zyXmIH0GdFGRvWoLXN+1H4FQtx0lw=; b=ylasmspqxM87ybN1HNpnXCN3ZO7XYs1ZcYWSajW0wEHuLBnvXdxD5daZDkR6b1ZqxC MWpUzhN7PMCml9LhxCRUU4VrWbNlh3oJ+CGPGp1LLDYVXFH4I5yAjcHLYv9zQQlLDiWG 564+/NyjnhJCUjUStUw8U4m3j46Rkx3fOa+nh37luPi5ZPhqjiRGzKPZgZe2P3meCM8v WGph1SWRgZY6EldZu2it9/n7P3tm2l+Lckw+JeAroykPmGs11gdpbMx6UJQ/Yw5zeQen tIym6jnsXQHJO0bja4rRHvigkD1FKpPcJocaAtCr1zY0rz0HdmJW5B/S1aqDLGb9vk8L cH+A==
MIME-Version: 1.0
X-Received: by 10.31.0.132 with SMTP id 126mr11275769vka.152.1444668261636; Mon, 12 Oct 2015 09:44:21 -0700 (PDT)
Received: by 10.31.172.151 with HTTP; Mon, 12 Oct 2015 09:44:21 -0700 (PDT)
Date: Mon, 12 Oct 2015 09:44:21 -0700
Message-ID: <CAMRcRGRyFgV384q3wkyCeCtQj73Bpgp4YXfOfnjwBfgTj8LR6A@mail.gmail.com>
From: Suhas Nandakumar <suhasietf@gmail.com>
To: perc@ietf.org
Content-Type: multipart/alternative; boundary=001a113dccc28da3410521eb0ad2
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/YiqZw2U9cSE4HeJdakfg4e3Y2wQ>
Subject: [Perc] Design Meeting 2 - WebEx Recording
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Oct 2015 16:44:24 -0000

--001a113dccc28da3410521eb0ad2
Content-Type: text/plain; charset=UTF-8

Hello All

   Here is the WebEx recording from our design meeting today. Sharing it to
have early access on the raw meeting recording before the chairs send out
summary notes from the meeting

*Play recording*
<https://go.webex.com/go/ldr.php?RCID=96be77d4e5673e8f5412368d95494e31> (1
hr 51 min)

Please let me know if you can't access it.


Thanks
Suhas/Richard

--001a113dccc28da3410521eb0ad2
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_quote">Hello All</div><div class=3D"gm=
ail_quote"><br>=C2=A0 =C2=A0Here is the WebEx recording from our design mee=
ting today. Sharing it to have early access on the raw meeting recording be=
fore the chairs send out summary notes from the meeting</div><div class=3D"=
gmail_quote"><br></div><div class=3D"gmail_quote"><div><table style=3D"padd=
ing:0;margin:0" width=3D"100%" align=3D"left"><tbody><tr><td style=3D"paddi=
ng-top:5px"><table style=3D"width:525px;margin-left:5px" align=3D"left"><tb=
ody><tr><td valign=3D"top"><table style=3D"width:auto;width:auto!important"=
><tbody><tr><td colspan=3D"2" style=3D"color:#00aff9;font-size:16px"><a hre=
f=3D"https://go.webex.com/go/ldr.php?RCID=3D96be77d4e5673e8f5412368d95494e3=
1" style=3D"text-decoration:none;font-size:16px;color:#00aff9;font-family:A=
rial" target=3D"_blank"><b>Play recording</b></a><font style=3D"font-size:1=
5px;font-family:Arial;color:#666666"> (1 hr 51 min)</font>
		</td>
	</tr>
</tbody></table><br><br>Please let me know if you can&#39;t access it.<br><=
br><br>Thanks=C2=A0<br>Suhas/Richard
                  </td>
               </tr>
            </tbody></table>
         </td>
      </tr>
   </tbody></table>
</div></div><br></div>

--001a113dccc28da3410521eb0ad2--


From nobody Mon Oct 12 10:36:55 2015
Return-Path: <fluffy@iii.ca>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13AE91A0545 for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 10:36:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ErBBDF8aoF1C for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 10:36:52 -0700 (PDT)
Received: from smtp117.ord1c.emailsrvr.com (smtp117.ord1c.emailsrvr.com [108.166.43.117]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC5011A8ACD for <perc@ietf.org>; Mon, 12 Oct 2015 10:36:49 -0700 (PDT)
Received: from smtp15.relay.ord1c.emailsrvr.com (localhost.localdomain [127.0.0.1]) by smtp15.relay.ord1c.emailsrvr.com (SMTP Server) with ESMTP id 57F1838078A for <perc@ietf.org>; Mon, 12 Oct 2015 13:36:49 -0400 (EDT)
Received: by smtp15.relay.ord1c.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id DAD3338075D for <perc@ietf.org>; Mon, 12 Oct 2015 13:36:47 -0400 (EDT)
X-Sender-Id: fluffy@iii.ca
Received: from [192.168.4.100] ([UNAVAILABLE]. [128.107.241.171]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:465 (trex/5.4.2); Mon, 12 Oct 2015 17:36:49 GMT
From: Cullen Jennings <fluffy@iii.ca>
Content-Type: multipart/mixed; boundary="Apple-Mail=_184A9555-FD24-483F-8EBD-E7CFC0665373"
Message-Id: <B4102957-F4C4-43E6-AC4B-A7BF4A161F0F@iii.ca>
Date: Mon, 12 Oct 2015 11:36:47 -0600
To: perc@ietf.org
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
X-Mailer: Apple Mail (2.2104)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/u6CnPNotPf3BblKoKVt7GCmJxaU>
Subject: [Perc] updates of slides after today's call
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Oct 2015 17:36:54 -0000

--Apple-Mail=_184A9555-FD24-483F-8EBD-E7CFC0665373
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii


Probably the only sides worth looking at here are 2, 3, and 4. I think I =
got them inline with what we discussed on the design team call.



--Apple-Mail=_184A9555-FD24-483F-8EBD-E7CFC0665373
Content-Disposition: inline;
	filename=PercSecurityContexts_v3.pdf
Content-Type: application/pdf;
	x-unix-mode=0644;
	name="PercSecurityContexts_v3.pdf"
Content-Transfer-Encoding: base64
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--Apple-Mail=_184A9555-FD24-483F-8EBD-E7CFC0665373--


From nobody Mon Oct 12 10:37:02 2015
Return-Path: <fluffy@iii.ca>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2AE01A8ADB for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 10:37:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id srEAHmX36Hem for <perc@ietfa.amsl.com>; Mon, 12 Oct 2015 10:37:01 -0700 (PDT)
Received: from smtp117.ord1c.emailsrvr.com (smtp117.ord1c.emailsrvr.com [108.166.43.117]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52ABE1A8ADF for <perc@ietf.org>; Mon, 12 Oct 2015 10:37:00 -0700 (PDT)
Received: from smtp15.relay.ord1c.emailsrvr.com (localhost.localdomain [127.0.0.1]) by smtp15.relay.ord1c.emailsrvr.com (SMTP Server) with ESMTP id D83F13808DA for <perc@ietf.org>; Mon, 12 Oct 2015 13:36:59 -0400 (EDT)
Received: by smtp15.relay.ord1c.emailsrvr.com (Authenticated sender: fluffy-AT-iii.ca) with ESMTPSA id 8C3D03807A2 for <perc@ietf.org>; Mon, 12 Oct 2015 13:36:59 -0400 (EDT)
X-Sender-Id: fluffy@iii.ca
Received: from [192.168.4.100] ([UNAVAILABLE]. [128.107.241.171]) (using TLSv1 with cipher DHE-RSA-AES256-SHA) by 0.0.0.0:465 (trex/5.4.2); Mon, 12 Oct 2015 17:36:59 GMT
From: Cullen Jennings <fluffy@iii.ca>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Message-Id: <2F84CB70-866A-426F-B44C-370753EAC529@iii.ca>
Date: Mon, 12 Oct 2015 11:37:00 -0600
To: perc@ietf.org
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
X-Mailer: Apple Mail (2.2104)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/T1zG1RpN_n3kklrbY_ikhXGAkCE>
Subject: [Perc] E2E auth of RTP M bit
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Oct 2015 17:37:02 -0000

The M bit means one things for video ( frame marker) and different =
things for audio ( talk spurt).=20

The question is should it be end to end authenticated. For video, it can =
be considered part of the payload data and the answer is likely yes. For =
audio, a mixer might want to set it.=20

The proposal on design team call today was we do E2E auth for it and =
when in PERC conferences, use something else to take the actions that =
the m bit for audio was used for. For example, seeing a change in CSRC =
might be a good indication of same thing.=20

Thoughts? Sound reasonable?=20




From nobody Tue Oct 13 00:30:47 2015
Return-Path: <suhasietf@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CA051B3919 for <perc@ietfa.amsl.com>; Tue, 13 Oct 2015 00:30:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.399
X-Spam-Level: 
X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_42=0.6, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jjZ40o-ymrGa for <perc@ietfa.amsl.com>; Tue, 13 Oct 2015 00:30:39 -0700 (PDT)
Received: from mail-vk0-x233.google.com (mail-vk0-x233.google.com [IPv6:2607:f8b0:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BEF91B3652 for <perc@ietf.org>; Tue, 13 Oct 2015 00:30:39 -0700 (PDT)
Received: by vkat63 with SMTP id t63so5192147vka.1 for <perc@ietf.org>; Tue, 13 Oct 2015 00:30:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:date:message-id:subject:from:to:content-type; bh=VY/G0VbsIMjKkHS2ISZaxU3wzsVZm57WxlNaIRgIlWY=; b=fy0XCo1eTDMrsHuyJIF8Xhufd4xJ7VVoRueFFTPCEPohd9KNx7FC4ajFqiMBnhqUvK 5Kwn7ILOWAdbRT3YJmLphU9P2ZM9ih9XxcpFjOOBmXAf5Z+vRdErgSrI1BAAnmtinohb ebl03RXmU7gnUNn1PINiyPEM/peUtit+pHqfh3CqMM/Lxv+7zsKZ9y6hWW2KYvt5qxdF lYgvYxRN6WcE4CHpAs3acbW3pEqPCIg/esow4dfSKL+NBZ4FTdSpwurezHij3bHls/ND dXPezOMYpc5pTje3kIZ+F5JFiOu5Ywg1MZmawJECTzjaM85dB3z3k5KwVwREbvdqQkPu JKJw==
MIME-Version: 1.0
X-Received: by 10.31.52.214 with SMTP id b205mr20796984vka.122.1444721438290;  Tue, 13 Oct 2015 00:30:38 -0700 (PDT)
Received: by 10.31.172.151 with HTTP; Tue, 13 Oct 2015 00:30:38 -0700 (PDT)
Date: Tue, 13 Oct 2015 00:30:38 -0700
Message-ID: <CAMRcRGQksNzKtozxSkAJCq5FFCZfhLFfR7T095p11su9H+c7ew@mail.gmail.com>
From: Suhas Nandakumar <suhasietf@gmail.com>
To: perc@ietf.org
Content-Type: multipart/alternative; boundary=001a1143f93220fce80521f76c28
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/nhYKVGC4p4uqbEp-SUkVUi0yGGQ>
Subject: [Perc] Design Meeting Notes
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Oct 2015 07:30:47 -0000

--001a1143f93220fce80521f76c28
Content-Type: text/plain; charset=UTF-8

Hello All

    Many thanks for a fruitful and engaging design team discussion today.

   Also apologies for messing up the meeting time and thanks to the group
for being patient in that regard.


Below, I have included my raw notes with some corrections (based on the
recording).  Please also refer to Cullen's updated slide deck that captures
some of conclusions from meeting today

Here is the WebEx Link : *Play recording*
<https://go.webex.com/go/ldr.php?RCID=96be77d4e5673e8f5412368d95494e31> (1
hr 51 min)



*PERC Design Meeting 2 *

*Attendees*: Paul Jones, Magnus Westerlund,  Cullen Jennings, Roni Even, Mo
Zanaty, John Mattson, Jonathan Lennox, Ram Mohan, Richard Barnes, Suhas
Nandakumar

Cullen presented background slides as an attempt to get everyone on the
same page for the problem space


*General Discussions / Agreements*

  - Trust Model of E2E Conference is we don't trust the middle box.

  - Don't change the security properties of the SRTP unless it is required
for the
    RTP aspects the correspond to security context. [[ref: Security
weakness and lot of thinking went in the design of SRTP]]

  - There are conferences today where MDD doesn't really change the data
while forwarding and with SFU and MSM coming into the picture there might
be few MDDs that will change some aspects of RTP packet. The design should
consider both the scenarios.

  - For E2E there are certain RTP fields (sorry for this nomenclature) that
need to be integrity protected E2E (ex: SeqNo, SSRC/source identifier).
These needs to be placed at some place in the packet. The location for the
placement is not yet finalized.

  - HBH will be based on standard SRTP as the default solution. Future
proposals may be defined  to use non SRTP HBH but the WG needs to decide on
it. For now the discussion is tabled till  the WG tackles core PERC & SRTP
design issues.


*Specific Topics Discussions*

*  Source Identification in the PERC Conference*

   The fundamental point of discussion was to agree upon the definition of
inner source identifier. Options on the table were
      a) locally generated SSRC
      b) out of band assigned Endpoint Source identifier.

   - opening question was - "Does SSRC suffices or do we need a new space
(identifier) as the global scope?".

   Discussion points :

      --  Needed in the context of MDD remapping SSRC and needing to have
the source  identifier binding to the end-point. this enables the receiver
to get the full context of source stream to source end-point identity
mapping

      -- If the trust chain is based on the source identifier mapped to a
DTLS Context mapped to the fingerprint which is in turn identified to an
EndPoint Identity mechanism,then SSRC can serve the purpose of source
identification.

      -- Regardless of what the identifier we call it as, there is need for
some global source identifier space that needs to be maintained E2E

     -- If SSRC is used as source identifiers, we need to have either
global SSRC space or a way of assigning SSRCs to avoid collisions. This
will protect against SSRC rewriting by  the MDD and maintains global SSRC
space for Inner/E2E layer.

      -- Since SSRCs are handled within DTLS context that allows
overlapping, SSRC should be  good enough. DTLS context between the End
point and the KMF should ensure the uniqueness   properties for SSRC across
the conference.



  Conclusions:
      -- Use SSRC as end-point source identifiers as a global scope.
      -- Ensure that the DTLS layer handing over the EKT master key will
partition the SSRC space or maintains the SSRC uniqueness property across
the conference.
      -- How the SSRCs are derived from the above needs to be defined.
      -- The conference topology that perc supports must ensure that the
original SSRC be unique.
      -- two possible options for MDDs that might rewrite the original SSRC
         1. Don't let the MDD rewrite it
         2. Place it outside - say in EKT for example
         OR Copy the original SSRC into CSRC field in the cases of SFU/MSM
      -- In general for the MDD cascaded topologies the original SSRCs need
to be preserved.




*    E2E Authentication Scope Discussions*

     This discussion focussed on what fields in the RTP packets are E2E
authenticated.

      -- Payload : needs to e2e encrypted and authenticated

      -- Padding : payload specific. It is authenticated E2E either
implicitly/explicitly.

      -- Marker Bit : unclear and needs more discussion.

      -- Header Extensions : Requires more evaluation per RTP Header
extension.

      -- Timestamp : Needs to be E2E authenticated and the original values
needs to be  maintained e2E to avoid delay attacks. Does need more
discussion on  defining efficient replay protection and clock skew changes.

      -- Seq No : We need E2E sequence number and it needs to be e2e
authenticated.

      -- CRSC,CC : Not needed to be E2E authenticated.

      -- SSRC : The original SSRCS needs to be E2E authenticated and
preserved and globally unique

      -- V : Must be 2 .

      -- PT: Probably e2E authenticated. Needs more discussion. Having no
signaling information at the  receiver results in not having mapping
between RTP PT value and its mime type in the  signaling [ this is however
related to high level metadata authentication and exists  outside RTP
packet].
             We need to document this problem and write up.


*Next Steps :*

  Magnus to write a draft documenting today's discussions/requirements.


*Open/Other Pending Topics that needs more discussion:*

  - Marker bit & Timestamp values needs more discussions on E2E
authenticated or not.
  - Placement of E2E context data - In RTP header or after RTP Payload.
  - Identify E2E RTCP requirements and if it is needed for PERC
  - Analyze each RTP header extension to identify its scope for E2E
Encryption & authentication
  - HBH encryption design - SRTP vs Non-SRTP pros and cons


Please let us know if there are any omissions and mistakes.

Thanks
Suhas

--001a1143f93220fce80521f76c28
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hello All<div><br></div><div>=C2=A0 =C2=A0 Many thanks for=
 a fruitful and engaging design team discussion today.=C2=A0</div><div><br>=
</div><div>=C2=A0 =C2=A0Also apologies for messing up the meeting time and =
thanks to the group for being patient in that regard.=C2=A0</div><div><br><=
/div><div><br></div><div>Below, I have included my raw notes with some corr=
ections (based on the recording).=C2=A0 Please also refer to Cullen&#39;s u=
pdated slide deck that captures some of conclusions from meeting today</div=
><div><br></div><div>Here is the WebEx Link :=C2=A0<a href=3D"https://go.we=
bex.com/go/ldr.php?RCID=3D96be77d4e5673e8f5412368d95494e31" target=3D"_blan=
k" style=3D"color:rgb(0,175,249);text-decoration:none;font-size:16px;font-f=
amily:Arial"><b>Play recording</b></a><font style=3D"font-size:15px;font-fa=
mily:Arial;color:rgb(102,102,102)">=C2=A0(1 hr 51 min)</font></div><div><fo=
nt style=3D"font-size:15px;font-family:Arial;color:rgb(102,102,102)"><br></=
font></div><div><br></div><div><b>PERC Design Meeting 2=C2=A0<br></b></div>=
<div><div><br></div><div><b>Attendees</b>: Paul Jones, Magnus Westerlund, =
=C2=A0Cullen Jennings, Roni Even, Mo Zanaty, John Mattson, Jonathan Lennox,=
 Ram Mohan, Richard Barnes, Suhas Nandakumar</div><div><br></div><div>Culle=
n presented background slides as an attempt to get everyone on the same pag=
e for the problem space</div><div><br></div><div><br></div><div><b>General =
Discussions / Agreements</b></div><div><br></div><div>=C2=A0 - Trust Model =
of E2E Conference is we don&#39;t trust the middle box.</div><div><br></div=
><div>=C2=A0 - Don&#39;t change the security properties of the SRTP unless =
it is required for the=C2=A0</div><div>=C2=A0 =C2=A0 RTP aspects the corres=
pond to security context. [[ref: Security weakness and lot of thinking went=
 in the design of SRTP]]</div><div><br></div><div>=C2=A0 - There are confer=
ences today where MDD doesn&#39;t really change the data while forwarding a=
nd with SFU and MSM coming into the picture there might be few MDDs that wi=
ll change some aspects of RTP packet. The design should consider both the s=
cenarios.</div><div><br></div><div>=C2=A0 - For E2E there are certain RTP f=
ields (sorry for this nomenclature) that need to be integrity protected E2E=
 (ex: SeqNo, SSRC/source identifier). These needs to be placed at some plac=
e in the packet. The location for the placement is not yet finalized.=C2=A0=
</div><div>=C2=A0=C2=A0</div><div>=C2=A0 - HBH will be based on standard SR=
TP as the default solution. Future proposals may be defined =C2=A0to use no=
n SRTP HBH but the WG needs to decide on it. For now the discussion is tabl=
ed till =C2=A0the WG tackles core PERC &amp; SRTP design issues.</div><div>=
<br></div><div>=C2=A0=C2=A0</div><div><b>Specific Topics Discussions</b></d=
iv><div><br></div><div><b>=C2=A0 Source Identification in the PERC Conferen=
ce</b></div><div><br></div><div>=C2=A0 =C2=A0The fundamental point of discu=
ssion was to agree upon the definition of inner source identifier. Options =
on the table were=C2=A0</div><div>=C2=A0 =C2=A0 =C2=A0 a) locally generated=
 SSRC=C2=A0</div><div>=C2=A0 =C2=A0 =C2=A0 b) out of band assigned Endpoint=
 Source identifier.</div><div><br></div><div>=C2=A0 =C2=A0- opening questio=
n was - &quot;Does SSRC suffices or do we need a new space (identifier) as =
the global scope?&quot;.=C2=A0</div><div><br></div><div>=C2=A0 =C2=A0Discus=
sion points :</div><div>=C2=A0 =C2=A0 =C2=A0=C2=A0</div><div>=C2=A0 =C2=A0 =
=C2=A0 -- =C2=A0Needed in the context of MDD remapping SSRC and needing to =
have the source =C2=A0identifier binding to the end-point. this enables the=
 receiver to get the full context of source stream to source end-point iden=
tity mapping</div><div><br></div><div>=C2=A0 =C2=A0 =C2=A0 -- If the trust =
chain is based on the source identifier mapped to a DTLS Context mapped to =
the fingerprint which is in turn identified to an EndPoint Identity mechani=
sm,then SSRC can serve the purpose of source identification.</div><div><br>=
</div><div>=C2=A0 =C2=A0 =C2=A0 -- Regardless of what the identifier we cal=
l it as, there is need for some global source identifier space that needs t=
o be maintained E2E=C2=A0</div><div><br></div><div>=C2=A0 =C2=A0<span class=
=3D"" style=3D"white-space:pre">	</span> =C2=A0-- If SSRC is used as source=
 identifiers, we need to have either global SSRC space or a way of assignin=
g SSRCs to avoid collisions. This will protect against SSRC rewriting by =
=C2=A0the MDD and maintains global SSRC space for Inner/E2E layer.</div><di=
v><br></div><div>=C2=A0 =C2=A0 =C2=A0 -- Since SSRCs are handled within DTL=
S context that allows overlapping, SSRC should be =C2=A0good enough. DTLS c=
ontext between the End point and the KMF should ensure the uniqueness =C2=
=A0 properties for SSRC across the conference.=C2=A0</div><div><br></div><d=
iv><br></div><div><br></div><div>=C2=A0 Conclusions:</div><div>=C2=A0 =C2=
=A0 =C2=A0 -- Use SSRC as end-point source identifiers as a global scope.=
=C2=A0</div><div>=C2=A0 =C2=A0 =C2=A0 -- Ensure that the DTLS layer handing=
 over the EKT master key will partition the SSRC space or maintains the SSR=
C uniqueness property across the conference.</div><div>=C2=A0 =C2=A0 =C2=A0=
 -- How the SSRCs are derived from the above needs to be defined.</div><div=
>=C2=A0 =C2=A0 =C2=A0 -- The conference topology that perc supports must en=
sure that the original SSRC be unique.</div><div>=C2=A0 =C2=A0 =C2=A0 -- tw=
o possible options for MDDs that might rewrite the original SSRC</div><div>=
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A01. Don&#39;t let the MDD rewrite it</div>=
<div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A02. Place it outside - say in EKT for=
 example</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0OR Copy the original S=
SRC into CSRC field in the cases of SFU/MSM</div><div>=C2=A0 =C2=A0 =C2=A0 =
-- In general for the MDD cascaded topologies the original SSRCs need to be=
 preserved.</div><div>=C2=A0 =C2=A0 =C2=A0=C2=A0</div><div><br></div><div>=
=C2=A0=C2=A0</div><div>=C2=A0 =C2=A0=C2=A0</div><div><b>=C2=A0 =C2=A0 E2E A=
uthentication Scope Discussions</b></div><div><br></div><div>=C2=A0 =C2=A0 =
=C2=A0This discussion focussed on what fields in the RTP packets are E2E au=
thenticated.</div><div><br></div><div>=C2=A0 =C2=A0 =C2=A0 -- Payload : nee=
ds to e2e encrypted and authenticated</div><div><br></div><div>=C2=A0 =C2=
=A0 =C2=A0 -- Padding : payload specific. It is authenticated E2E either im=
plicitly/explicitly.</div><div><br></div><div>=C2=A0 =C2=A0 =C2=A0 -- Marke=
r Bit : unclear and needs more discussion.</div><div><br></div><div>=C2=A0 =
=C2=A0 =C2=A0 -- Header Extensions : Requires more evaluation per RTP Heade=
r extension.</div><div><br></div><div>=C2=A0 =C2=A0 =C2=A0 -- Timestamp : N=
eeds to be E2E authenticated and the original values needs to be =C2=A0main=
tained e2E to avoid delay attacks. Does need more discussion on =C2=A0defin=
ing efficient replay protection and clock skew changes.</div><div><br></div=
><div>=C2=A0 =C2=A0 =C2=A0 -- Seq No : We need E2E sequence number and it n=
eeds to be e2e authenticated.</div><div>=C2=A0 =C2=A0 =C2=A0=C2=A0</div><di=
v>=C2=A0 =C2=A0 =C2=A0 -- CRSC,CC : Not needed to be E2E authenticated.</di=
v><div>=C2=A0 =C2=A0 =C2=A0=C2=A0</div><div>=C2=A0 =C2=A0 =C2=A0 -- SSRC : =
The original SSRCS needs to be E2E authenticated and preserved and globally=
 unique</div><div>=C2=A0 =C2=A0 =C2=A0=C2=A0</div><div>=C2=A0 =C2=A0 =C2=A0=
 -- V : Must be 2 .</div><div><br></div><div>=C2=A0 =C2=A0 =C2=A0 -- PT: Pr=
obably e2E authenticated. Needs more discussion. Having no signaling inform=
ation at the =C2=A0receiver results in not having mapping between RTP PT va=
lue and its mime type in the =C2=A0signaling [ this is however related to h=
igh level metadata authentication and exists =C2=A0outside RTP packet].</di=
v><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0We need to document =
this problem and write up.</div><div><br></div><div><br></div><div><b>Next =
Steps :</b></div><div><br></div><div>=C2=A0 Magnus to write a draft documen=
ting today&#39;s discussions/requirements.</div><div><br></div><div><br></d=
iv><div><b>Open/Other Pending Topics that needs more discussion:</b></div><=
div><br></div><div>=C2=A0 - Marker bit &amp; Timestamp values needs more di=
scussions on E2E authenticated or not.</div><div>=C2=A0 - Placement of E2E =
context data - In RTP header or after RTP Payload.</div><div>=C2=A0 - Ident=
ify E2E RTCP requirements and if it is needed for PERC</div><div>=C2=A0 - A=
nalyze each RTP header extension to identify its scope for E2E Encryption &=
amp; authentication</div><div>=C2=A0 - HBH encryption design - SRTP vs Non-=
SRTP pros and cons=C2=A0</div><div><br></div><div>=C2=A0=C2=A0</div></div><=
div>Please let us know if there are any omissions and mistakes.</div><div><=
br></div><div>Thanks</div><div>Suhas</div><div><br></div><div><br></div><di=
v><br></div></div>

--001a1143f93220fce80521f76c28--


From nobody Tue Oct 13 01:47:44 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8ABE1A1AA1 for <perc@ietfa.amsl.com>; Tue, 13 Oct 2015 01:47:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.711
X-Spam-Level: 
X-Spam-Status: No, score=-0.711 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, J_CHICKENPOX_42=0.6, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aYT8dhJ-rIMH for <perc@ietfa.amsl.com>; Tue, 13 Oct 2015 01:47:38 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABC351A1A9A for <perc@ietf.org>; Tue, 13 Oct 2015 01:47:38 -0700 (PDT)
Received: from [156.106.228.231] ([156.106.228.231]) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t9D8lYMa006308 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 13 Oct 2015 04:47:36 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1444726057; bh=172l5RaXAA/L/6y+u4/WmcQ7ghQwt9RzJ3cjj85XTzk=; h=From:To:Subject:Date:In-Reply-To:Reply-To; b=FyrYwSqbYfy53YWC9qniBSBmut2gz6lR9Y0MNuHv58e2AUm/nwEKbxSj84a2sbstU UshqZTsP4CsVFtSOOIqX89i/jmKZqigHWvgWXxvp0SGhEyu0fJcSmhpn+2znhjqXHG Hjv8/p8lIICB5sCICOCzKP8GPcEdLqI/Nv3G9Jto=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "Suhas Nandakumar" <suhasietf@gmail.com>, perc@ietf.org
Date: Tue, 13 Oct 2015 08:47:36 +0000
Message-Id: <em09631ae8-34b7-471e-99bb-6a7457338d7f@helsinki>
In-Reply-To: <CAMRcRGQksNzKtozxSkAJCq5FFCZfhLFfR7T095p11su9H+c7ew@mail.gmail.com>
User-Agent: eM_Client/6.0.23181.0
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------=_MBE442149B-FCA6-49ED-A547-8DD07B99FD55"
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Tue, 13 Oct 2015 04:47:37 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/MBZzOOWU_Z-9LV0LKgStSLoMY2c>
Subject: Re: [Perc] Design Meeting Notes
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Oct 2015 08:47:43 -0000

--------=_MBE442149B-FCA6-49ED-A547-8DD07B99FD55
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Suhas,

Questions:
"How the SSRCs are derived from the above needs to be defined."

If the SSRC is delivered over a secure connection like DTLS, do we=20
really need to define how they are derived?  If the KMF is allocating=20
them, then it is not sufficient for our work to simply state that the=20
KMF must assign unique SSRCs for each RTP session?

In the conclusions relating to SSRC, wasn't it concluded that at least=20
in one topology the SSRC will be changed by an MDD, so therefore must be=
=20
preserved?  If so, then I would suggest we say that as a conclusion; the=
=20
text now leaves that open for discussion, I think.

Let me express that I appreciate Magnus taking the action to write up a=20
draft on the RTP fields that need or don't need to be E2E protected.  I=20
think this is important to discuss further to get right.  I that,=20
because I know I'm going to sound contrary, but my intentions are good=20
:-)  We really need to think carefully about what we attempt to=20
preserve.  Every bit will increase the packet size and I question the=20
security benefit given that the unique packet identifiers will be=20
present E2E, which should allow an endpoint to determine if media is=20
replayed, etc. I get the impression that most of the fields, if changed,=
=20
do nothing but disrupt service and do not reveal information about the=20
content (i.e., media content confidentiality is not compromised); I=20
think media content confidentiality is the prime objective.  So to keep=20
the system as simple as possible without sacrificing security, I'd like=20
to make sure we think twice about the disposition of every field.

Paul

------ Original Message ------
From: "Suhas Nandakumar" <suhasietf@gmail.com>
To: perc@ietf.org
Sent: 10/13/2015 3:30:38 AM
Subject: [Perc] Design Meeting Notes

>Hello All
>
>     Many thanks for a fruitful and engaging design team discussion=20
>today.
>
>    Also apologies for messing up the meeting time and thanks to the=20
>group for being patient in that regard.
>
>
>Below, I have included my raw notes with some corrections (based on the=
=20
>recording).  Please also refer to Cullen's updated slide deck that=20
>captures some of conclusions from meeting today
>
>Here is the WebEx Link : Play recording (1 hr 51 min)
>
>
>PERC Design Meeting 2
>
>Attendees: Paul Jones, Magnus Westerlund,  Cullen Jennings, Roni Even,=20
>Mo Zanaty, John Mattson, Jonathan Lennox, Ram Mohan, Richard Barnes,=20
>Suhas Nandakumar
>
>Cullen presented background slides as an attempt to get everyone on the=
=20
>same page for the problem space
>
>
>General Discussions / Agreements
>
>   - Trust Model of E2E Conference is we don't trust the middle box.
>
>   - Don't change the security properties of the SRTP unless it is=20
>required for the
>     RTP aspects the correspond to security context. [[ref: Security=20
>weakness and lot of thinking went in the design of SRTP]]
>
>   - There are conferences today where MDD doesn't really change the=20
>data while forwarding and with SFU and MSM coming into the picture=20
>there might be few MDDs that will change some aspects of RTP packet.=20
>The design should consider both the scenarios.
>
>   - For E2E there are certain RTP fields (sorry for this nomenclature)=
=20
>that need to be integrity protected E2E (ex: SeqNo, SSRC/source=20
>identifier). These needs to be placed at some place in the packet. The=20
>location for the placement is not yet finalized.
>
>   - HBH will be based on standard SRTP as the default solution. Future=
=20
>proposals may be defined  to use non SRTP HBH but the WG needs to=20
>decide on it. For now the discussion is tabled till  the WG tackles=20
>core PERC & SRTP design issues.
>
>
>Specific Topics Discussions
>
>   Source Identification in the PERC Conference
>
>    The fundamental point of discussion was to agree upon the definition=
=20
>of inner source identifier. Options on the table were
>       a) locally generated SSRC
>       b) out of band assigned Endpoint Source identifier.
>
>    - opening question was - "Does SSRC suffices or do we need a new=20
>space (identifier) as the global scope?".
>
>    Discussion points :
>
>       --  Needed in the context of MDD remapping SSRC and needing to=20
>have the source  identifier binding to the end-point. this enables the=20
>receiver to get the full context of source stream to source end-point=20
>identity mapping
>
>       -- If the trust chain is based on the source identifier mapped to=
=20
>a DTLS Context mapped to the fingerprint which is in turn identified to=
=20
>an EndPoint Identity mechanism,then SSRC can serve the purpose of=20
>source identification.
>
>       -- Regardless of what the identifier we call it as, there is need=
=20
>for some global source identifier space that needs to be maintained E2E
>
>     -- If SSRC is used as source identifiers, we need to have either=20
>global SSRC space or a way of assigning SSRCs to avoid collisions. This=
=20
>will protect against SSRC rewriting by  the MDD and maintains global=20
>SSRC space for Inner/E2E layer.
>
>       -- Since SSRCs are handled within DTLS context that allows=20
>overlapping, SSRC should be  good enough. DTLS context between the End=20
>point and the KMF should ensure the uniqueness   properties for SSRC=20
>across the conference.
>
>
>
>   Conclusions:
>       -- Use SSRC as end-point source identifiers as a global scope.
>       -- Ensure that the DTLS layer handing over the EKT master key=20
>will partition the SSRC space or maintains the SSRC uniqueness property=
=20
>across the conference.
>       -- How the SSRCs are derived from the above needs to be defined.
>       -- The conference topology that perc supports must ensure that=20
>the original SSRC be unique.
>       -- two possible options for MDDs that might rewrite the original=
=20
>SSRC
>          1. Don't let the MDD rewrite it
>          2. Place it outside - say in EKT for example
>          OR Copy the original SSRC into CSRC field in the cases of=20
>SFU/MSM
>       -- In general for the MDD cascaded topologies the original SSRCs=
=20
>need to be preserved.
>
>
>
>
>     E2E Authentication Scope Discussions
>
>      This discussion focussed on what fields in the RTP packets are E2E=
=20
>authenticated.
>
>       -- Payload : needs to e2e encrypted and authenticated
>
>       -- Padding : payload specific. It is authenticated E2E either=20
>implicitly/explicitly.
>
>       -- Marker Bit : unclear and needs more discussion.
>
>       -- Header Extensions : Requires more evaluation per RTP Header=20
>extension.
>
>       -- Timestamp : Needs to be E2E authenticated and the original=20
>values needs to be  maintained e2E to avoid delay attacks. Does need=20
>more discussion on  defining efficient replay protection and clock skew=
=20
>changes.
>
>       -- Seq No : We need E2E sequence number and it needs to be e2e=20
>authenticated.
>
>       -- CRSC,CC : Not needed to be E2E authenticated.
>
>       -- SSRC : The original SSRCS needs to be E2E authenticated and=20
>preserved and globally unique
>
>       -- V : Must be 2 .
>
>       -- PT: Probably e2E authenticated. Needs more discussion. Having=
=20
>no signaling information at the  receiver results in not having mapping=
=20
>between RTP PT value and its mime type in the  signaling [ this is=20
>however related to high level metadata authentication and exists =20
>outside RTP packet].
>              We need to document this problem and write up.
>
>
>Next Steps :
>
>   Magnus to write a draft documenting today's discussions/requirements.
>
>
>Open/Other Pending Topics that needs more discussion:
>
>   - Marker bit & Timestamp values needs more discussions on E2E=20
>authenticated or not.
>   - Placement of E2E context data - In RTP header or after RTP Payload.
>   - Identify E2E RTCP requirements and if it is needed for PERC
>   - Analyze each RTP header extension to identify its scope for E2E=20
>Encryption & authentication
>   - HBH encryption design - SRTP vs Non-SRTP pros and cons
>
>
>Please let us know if there are any omissions and mistakes.
>
>Thanks
>Suhas
>
>
>
--------=_MBE442149B-FCA6-49ED-A547-8DD07B99FD55
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD>
<STYLE id=3DeMClientCss>blockquote.cite { margin-left: 5px; margin-right:=
 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc=
 }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px;=
 padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; paddin=
g-top: 0px; }
.plain pre, .plain tt { font-family: monospace; font-size: 100%; font-weigh=
t: normal; font-style: normal; white-space: pre-wrap; }
a img { border: 0px; }body {font-family: Calibri;font-size: 11pt;}
.plain pre, .plain tt {font-family: Calibri;font-size: 11pt;}
</STYLE>

<STYLE></STYLE>
</HEAD>
<BODY scroll=3Dauto class>
<DIV>Suhas,</DIV>
<DIV>&nbsp;</DIV>
<DIV>Questions:</DIV>
<DIV>"How the SSRCs are derived from the above needs to be defined."</DIV>
<DIV>&nbsp;</DIV>
<DIV>If the SSRC is delivered over a secure connection like DTLS, do we =
really need to define how they are derived?&nbsp; If the KMF is allocating=
 them, then it is not sufficient for our work to simply state that the KMF=
 must assign unique SSRCs&nbsp;for each&nbsp;RTP session?</DIV>
<DIV>&nbsp;</DIV>
<DIV>In the conclusions relating to SSRC, wasn't it concluded that at least=
 in one topology the SSRC will be changed by an MDD, so therefore must be=
 preserved?&nbsp; If so, then I would suggest we say that as a conclusion;=
 the text now leaves that open for discussion, I think.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Let me express that I appreciate Magnus taking the action to write =
up a draft on the RTP fields that need or don't need to be E2E protected.&n=
bsp; I think this is important to discuss further to get right.&nbsp; I =
that, because I know I'm going to sound contrary, but my intentions are =
good :-)&nbsp; We really need to think carefully about what we attempt to=
 preserve.&nbsp; Every bit will increase the packet size and I question =
the security benefit given that the unique packet identifiers will be prese=
nt E2E, which should allow an endpoint to determine if media is replayed,=
 etc. I get the impression that most of the fields, if changed, do nothing=
 but disrupt service and do not reveal information about the content (i.e.,=
 media&nbsp;content confidentiality is not compromised); I think media cont=
ent confidentiality is the&nbsp;prime objective.&nbsp; So to keep the syste=
m as simple as possible without sacrificing security, I'd like to make sure=
 we think twice about the disposition of every field.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Paul</DIV>
<DIV>&nbsp;</DIV>
<DIV>------ Original Message ------</DIV>
<DIV>From: "Suhas Nandakumar" &lt;<A href=3D"mailto:suhasietf@gmail.com">su=
hasietf@gmail.com</A>&gt;</DIV>
<DIV>To: <A href=3D"mailto:perc@ietf.org">perc@ietf.org</A></DIV>
<DIV>Sent: 10/13/2015 3:30:38 AM</DIV>
<DIV>Subject: [Perc] Design Meeting Notes</DIV>
<DIV>&nbsp;</DIV>
<DIV id=3Dx28f6bc186e5946b5bbed6d6e79269e4e>
<BLOCKQUOTE class=3Dcite2 cite=3DCAMRcRGQksNzKtozxSkAJCq5FFCZfhLFfR7T095p11=
su9H+c7ew@mail.gmail.com type=3D"cite">
<DIV dir=3Dltr>Hello All=20
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; Many thanks for a fruitful and engaging design team disc=
ussion today.&nbsp;</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp;Also apologies for messing up the meeting time and thanks=
 to the group for being patient in that regard.&nbsp;</DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV>Below, I have included my raw notes with some corrections (based on=
 the recording).&nbsp; Please also refer to Cullen's updated slide deck =
that captures some of conclusions from meeting today</DIV>
<DIV><BR></DIV>
<DIV>Here is the WebEx Link :&nbsp;<A style=3D"FONT-SIZE: 16px; TEXT-DECORA=
TION: none; FONT-FAMILY: Arial; COLOR: rgb(0,175,249)" href=3D"https://go.w=
ebex.com/go/ldr.php?RCID=3D96be77d4e5673e8f5412368d95494e31"><B>Play record=
ing</B></A><FONT style=3D"FONT-SIZE: 15px; FONT-FAMILY: Arial; COLOR: rgb(1=
02,102,102)">&nbsp;(1 hr 51 min)</FONT></DIV>
<DIV><FONT style=3D"FONT-SIZE: 15px; FONT-FAMILY: Arial; COLOR: rgb(102,102=
,102)"><BR></FONT></DIV>
<DIV><BR></DIV>
<DIV><B>PERC Design Meeting 2&nbsp;<BR></B></DIV>
<DIV>
<DIV><BR></DIV>
<DIV><B>Attendees</B>: Paul Jones, Magnus Westerlund, &nbsp;Cullen Jennings=
, Roni Even, Mo Zanaty, John Mattson, Jonathan Lennox, Ram Mohan, Richard=
 Barnes, Suhas Nandakumar</DIV>
<DIV><BR></DIV>
<DIV>Cullen presented background slides as an attempt to get everyone on=
 the same page for the problem space</DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV><B>General Discussions / Agreements</B></DIV>
<DIV><BR></DIV>
<DIV>&nbsp; - Trust Model of E2E Conference is we don't trust the middle=
 box.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; - Don't change the security properties of the SRTP unless it=
 is required for the&nbsp;</DIV>
<DIV>&nbsp; &nbsp; RTP aspects the correspond to security context. [[ref:=
 Security weakness and lot of thinking went in the design of SRTP]]</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; - There are conferences today where MDD doesn't really change=
 the data while forwarding and with SFU and MSM coming into the picture =
there might be few MDDs that will change some aspects of RTP packet. The=
 design should consider both the scenarios.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; - For E2E there are certain RTP fields (sorry for this nomencla=
ture) that need to be integrity protected E2E (ex: SeqNo, SSRC/source ident=
ifier). These needs to be placed at some place in the packet. The location=
 for the placement is not yet finalized.&nbsp;</DIV>
<DIV>&nbsp;&nbsp;</DIV>
<DIV>&nbsp; - HBH will be based on standard SRTP as the default solution.=
 Future proposals may be defined &nbsp;to use non SRTP HBH but the WG needs=
 to decide on it. For now the discussion is tabled till &nbsp;the WG tackle=
s core PERC &amp; SRTP design issues.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp;&nbsp;</DIV>
<DIV><B>Specific Topics Discussions</B></DIV>
<DIV><BR></DIV>
<DIV><B>&nbsp; Source Identification in the PERC Conference</B></DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp;The fundamental point of discussion was to agree upon =
the definition of inner source identifier. Options on the table were&nbsp;<=
/DIV>
<DIV>&nbsp; &nbsp; &nbsp; a) locally generated SSRC&nbsp;</DIV>
<DIV>&nbsp; &nbsp; &nbsp; b) out of band assigned Endpoint Source identifie=
r.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp;- opening question was - "Does SSRC suffices or do we =
need a new space (identifier) as the global scope?".&nbsp;</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp;Discussion points :</DIV>
<DIV>&nbsp; &nbsp; &nbsp;&nbsp;</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- &nbsp;Needed in the context of MDD remapping=
 SSRC and needing to have the source &nbsp;identifier binding to the end-po=
int. this enables the receiver to get the full context of source stream =
to source end-point identity mapping</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- If the trust chain is based on the source iden=
tifier mapped to a DTLS Context mapped to the fingerprint which is in turn=
 identified to an EndPoint Identity mechanism,then SSRC can serve the purpo=
se of source identification.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Regardless of what the identifier we call it=
 as, there is need for some global source identifier space that needs to=
 be maintained E2E&nbsp;</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp;<SPAN style=3D"WHITE-SPACE: pre"> </SPAN>&nbsp;-- If SSRC=
 is used as source identifiers, we need to have either global SSRC space=
 or a way of assigning SSRCs to avoid collisions. This will protect against=
 SSRC rewriting by &nbsp;the MDD and maintains global SSRC space for Inner/=
E2E layer.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Since SSRCs are handled within DTLS context=
 that allows overlapping, SSRC should be &nbsp;good enough. DTLS context=
 between the End point and the KMF should ensure the uniqueness &nbsp; prop=
erties for SSRC across the conference.&nbsp;</DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV>&nbsp; Conclusions:</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Use SSRC as end-point source identifiers as=
 a global scope.&nbsp;</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Ensure that the DTLS layer handing over the=
 EKT master key will partition the SSRC space or maintains the SSRC uniquen=
ess property across the conference.</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- How the SSRCs are derived from the above needs=
 to be defined.</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- The conference topology that perc supports =
must ensure that the original SSRC be unique.</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- two possible options for MDDs that might rewri=
te the original SSRC</DIV>
<DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1. Don't let the MDD rewrite it</DIV=
>
<DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2. Place it outside - say in EKT =
for example</DIV>
<DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;OR Copy the original SSRC into CSRC=
 field in the cases of SFU/MSM</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- In general for the MDD cascaded topologies =
the original SSRCs need to be preserved.</DIV>
<DIV>&nbsp; &nbsp; &nbsp;&nbsp;</DIV>
<DIV><BR></DIV>
<DIV>&nbsp;&nbsp;</DIV>
<DIV>&nbsp; &nbsp;&nbsp;</DIV>
<DIV><B>&nbsp; &nbsp; E2E Authentication Scope Discussions</B></DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp;This discussion focussed on what fields in the =
RTP packets are E2E authenticated.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Payload : needs to e2e encrypted and authentic=
ated</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Padding : payload specific. It is authenticate=
d E2E either implicitly/explicitly.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Marker Bit : unclear and needs more discussion=
.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Header Extensions : Requires more evaluation=
 per RTP Header extension.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Timestamp : Needs to be E2E authenticated and=
 the original values needs to be &nbsp;maintained e2E to avoid delay attack=
s. Does need more discussion on &nbsp;defining efficient replay protection=
 and clock skew changes.</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- Seq No : We need E2E sequence number and it=
 needs to be e2e authenticated.</DIV>
<DIV>&nbsp; &nbsp; &nbsp;&nbsp;</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- CRSC,CC : Not needed to be E2E authenticated.<=
/DIV>
<DIV>&nbsp; &nbsp; &nbsp;&nbsp;</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- SSRC : The original SSRCS needs to be E2E auth=
enticated and preserved and globally unique</DIV>
<DIV>&nbsp; &nbsp; &nbsp;&nbsp;</DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- V : Must be 2 .</DIV>
<DIV><BR></DIV>
<DIV>&nbsp; &nbsp; &nbsp; -- PT: Probably e2E authenticated. Needs more =
discussion. Having no signaling information at the &nbsp;receiver results=
 in not having mapping between RTP PT value and its mime type in the &nbsp;=
signaling [ this is however related to high level metadata authentication=
 and exists &nbsp;outside RTP packet].</DIV>
<DIV>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;We need to document=
 this problem and write up.</DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV><B>Next Steps :</B></DIV>
<DIV><BR></DIV>
<DIV>&nbsp; Magnus to write a draft documenting today's discussions/require=
ments.</DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV><B>Open/Other Pending Topics that needs more discussion:</B></DIV>
<DIV><BR></DIV>
<DIV>&nbsp; - Marker bit &amp; Timestamp values needs more discussions on=
 E2E authenticated or not.</DIV>
<DIV>&nbsp; - Placement of E2E context data - In RTP header or after RTP=
 Payload.</DIV>
<DIV>&nbsp; - Identify E2E RTCP requirements and if it is needed for PERC</=
DIV>
<DIV>&nbsp; - Analyze each RTP header extension to identify its scope for=
 E2E Encryption &amp; authentication</DIV>
<DIV>&nbsp; - HBH encryption design - SRTP vs Non-SRTP pros and cons&nbsp;<=
/DIV>
<DIV><BR></DIV>
<DIV>&nbsp;&nbsp;</DIV></DIV>
<DIV>Please let us know if there are any omissions and mistakes.</DIV>
<DIV><BR></DIV>
<DIV>Thanks</DIV>
<DIV>Suhas</DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV><BR></DIV></DIV></BLOCKQUOTE></DIV></BODY></HTML>
--------=_MBE442149B-FCA6-49ED-A547-8DD07B99FD55--


From nobody Tue Oct 13 05:20:29 2015
Return-Path: <sperreault@jive.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 629BE1B2FBC for <perc@ietfa.amsl.com>; Tue, 13 Oct 2015 05:20:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RxsQvDqbqJ1Z for <perc@ietfa.amsl.com>; Tue, 13 Oct 2015 05:20:26 -0700 (PDT)
Received: from mail-oi0-f48.google.com (mail-oi0-f48.google.com [209.85.218.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5426F1B2FBB for <perc@ietf.org>; Tue, 13 Oct 2015 05:20:26 -0700 (PDT)
Received: by oiar126 with SMTP id r126so8235540oia.0 for <perc@ietf.org>; Tue, 13 Oct 2015 05:20:25 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-type :content-transfer-encoding; bh=GxBsSYYzMxI7p87WCIAD8YEsx1OWXviP58voMwjB7m4=; b=j/NFZsV/qsHtqGsRJdhSUxI5Lng8feuccsfeWXWMKbq0lFLmzZ1xL6xKIH0tqFVQJL v6ktVzhaDKiqVMHQppCIMEePKEEJh4gaXarDpAC4ZkFAPTHpQgyBcahgNtWNzoMEi4J9 5erPxL46EgMsO1zqMeQWtQ9sxVI0LG3aU+JsLqKLE4AHs6UVrjR2Sl0dh1PlErHVKWtF 9rD6UWDjUDe7oChukcPZWZ8NAOYiNAtS+vXkNmi1BbywQSjM+Jv9YitDhEuCe0Hp6MOM y2ryKHhKyTtObFwL6GKqxV8oRSaJnwc5tFPBMHBtKMlkdjLho0T1ICYb/fd+chCuIe+b SG/Q==
X-Gm-Message-State: ALoCoQmQ4GCKjI1nRoRJxWEYDYNd17HaQLfwZ9FNuY+oSRjx3fD9gpqhI/hrcoUldf2irf/aod8T
X-Received: by 10.202.240.4 with SMTP id o4mr18280350oih.24.1444738825519; Tue, 13 Oct 2015 05:20:25 -0700 (PDT)
Received: from Simons-MacBook-Air.local (modemcable164.157-22-96.mc.videotron.ca. [96.22.157.164]) by smtp.googlemail.com with ESMTPSA id my2sm1375808obb.17.2015.10.13.05.20.24 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 13 Oct 2015 05:20:24 -0700 (PDT)
To: Cullen Jennings <fluffy@iii.ca>, perc@ietf.org
References: <2F84CB70-866A-426F-B44C-370753EAC529@iii.ca>
From: Simon Perreault <sperreault@jive.com>
Message-ID: <561CF707.6040302@jive.com>
Date: Tue, 13 Oct 2015 08:20:23 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <2F84CB70-866A-426F-B44C-370753EAC529@iii.ca>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 8bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/gStn6kg1Z3AVYfDrz2_TYJI7Suc>
Subject: Re: [Perc] E2E auth of RTP M bit
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Oct 2015 12:20:27 -0000

Le 2015-10-12 13:37, Cullen Jennings a écrit :
> 
> The M bit means one things for video ( frame marker) and different things for audio ( talk spurt). 
> 
> The question is should it be end to end authenticated. For video, it can be considered part of the payload data and the answer is likely yes. For audio, a mixer might want to set it. 
> 
> The proposal on design team call today was we do E2E auth for it and when in PERC conferences, use something else to take the actions that the m bit for audio was used for. For example, seeing a change in CSRC might be a good indication of same thing. 
> 
> Thoughts? Sound reasonable? 

As I was not in the call, I'll just say this sounds reasonable to me.
Much more reasonable, in fact, than I generally expect of proposals in
this group. ;)

Simon


From nobody Tue Oct 13 10:20:04 2015
Return-Path: <suhasietf@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51CE71B4BEC for <perc@ietfa.amsl.com>; Tue, 13 Oct 2015 10:20:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id paJO0a7OcJVW for <perc@ietfa.amsl.com>; Tue, 13 Oct 2015 10:20:01 -0700 (PDT)
Received: from mail-vk0-x229.google.com (mail-vk0-x229.google.com [IPv6:2607:f8b0:400c:c05::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 247351B4BE3 for <perc@ietf.org>; Tue, 13 Oct 2015 10:20:01 -0700 (PDT)
Received: by vkat63 with SMTP id t63so14543208vka.1 for <perc@ietf.org>; Tue, 13 Oct 2015 10:20:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:date:message-id:subject:from:to:content-type; bh=lFI9tC0WMRAsZNjrxm7hKlE7yLGYqR63QH7YI7Ozk3A=; b=XfbaHxYj4jA+WstXQf6S+CDc8GlVfZDMQ7D4jrnY9OxYQDdrva1tHldclABlVgPlgb ed8qPVPw9z5y53z9DySIr6ELLFQpqeJ4kXE0PFRfYqYb07xLgex2uYEidc7F8PHQnJet RP5lRdjZF2vkn+1xgnGJ2vk/emEo9SiKzzDWIwkI75+zLZvNlszQANnwnYlFx5qF91NY rQZxQHpuGTkudAHMI5L5793lOlDNloq6nwk2xonVK+RN4IxnBB9HeHvePOMUDsMj3ME5 EY5aQQ/VgS/ZKVRjT5Qo28Sqc3M8voeh+m04ggeyn3cqm4Fwy19X/pwLrXEq2m614SoU 3M8Q==
MIME-Version: 1.0
X-Received: by 10.31.156.75 with SMTP id f72mr6495544vke.25.1444756800295; Tue, 13 Oct 2015 10:20:00 -0700 (PDT)
Received: by 10.31.172.151 with HTTP; Tue, 13 Oct 2015 10:20:00 -0700 (PDT)
Date: Tue, 13 Oct 2015 10:20:00 -0700
Message-ID: <CAMRcRGTpf0VxU3gqXdO=ibMsdJeZeRchi+_PCS7PWVh1nciLMg@mail.gmail.com>
From: Suhas Nandakumar <suhasietf@gmail.com>
To: perc@ietf.org
Content-Type: multipart/alternative; boundary=001a1141d9f0de5c8d0521ffa7f2
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/uEBePEkN94FO8M9idOs8_BXG8DM>
Subject: [Perc] Request for Agenda Timeslots at ITEF94
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Oct 2015 17:20:02 -0000

--001a1141d9f0de5c8d0521ffa7f2
Content-Type: text/plain; charset=UTF-8

The preliminary agenda is out for IETF94 and we would want to gather
requests for agenda items.

Please let me and Richard known as soon as possible so that we can get our
preliminary agenda ready.


Thanks
Perc Chairs

--001a1141d9f0de5c8d0521ffa7f2
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><br></div><div>The preliminary agenda is out for IETF=
94 and we would want to gather requests for agenda items.</div><div><br></d=
iv><div>Please let me and Richard known as soon as possible so that we can =
get our preliminary agenda ready.</div><br style=3D"font-size:12.8px"><div>=
<br></div><div>Thanks</div><div>Perc Chairs</div></div>

--001a1141d9f0de5c8d0521ffa7f2--


From nobody Tue Oct 13 14:01:50 2015
Return-Path: <john.mattsson@ericsson.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 575671B35A9 for <perc@ietfa.amsl.com>; Sat, 10 Oct 2015 05:05:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P9VyUWbdER1R for <perc@ietfa.amsl.com>; Sat, 10 Oct 2015 05:04:55 -0700 (PDT)
Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E68CD1B35A7 for <perc@ietf.org>; Sat, 10 Oct 2015 05:04:53 -0700 (PDT)
X-AuditID: c1b4fb25-f79a26d00000149a-ae-5618fee30965
Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id E0.93.05274.4EEF8165; Sat, 10 Oct 2015 14:04:52 +0200 (CEST)
Received: from ESESSMB307.ericsson.se ([169.254.7.184]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0248.002; Sat, 10 Oct 2015 14:04:51 +0200
From: John Mattsson <john.mattsson@ericsson.com>
To: "perc@ietf.org" <perc@ietf.org>
Thread-Topic: [Perc] Review of needed information for inner security
Thread-Index: AdEBuoOigsVGsWtmR3iAEDjUPDtuQgALPaWAAFW06wAABWRLgA==
Date: Sat, 10 Oct 2015 12:04:51 +0000
Message-ID: <D23ECB11.3D7A9%john.mattsson@ericsson.com>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se> <AB452416-B1A0-4EC1-9FB1-272D19E9E5F5@packetizer.com> <D23E9EBA.3D753%john.mattsson@ericsson.com>
In-Reply-To: <D23E9EBA.3D753%john.mattsson@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.5.4.150722
x-originating-ip: [153.88.183.150]
Content-Type: multipart/alternative; boundary="_000_D23ECB113D7A9johnmattssonericssoncom_"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpnkeLIzCtJLcpLzFFi42KZGfG3RvfJP4kwg5Y1vBarF05ndGD0WLLk J1MAYxSXTUpqTmZZapG+XQJXxqynxxgLHjSyVTRPuMzewPjyLWsXIyeHhICJxP8XH9ggbDGJ C/fWA9lcHEICRxkldnUdYQRJCAksYZT4uV4axGYTMJCYu6cBrEFEQFni2/Y9YIOEBZwl2jq2 skLEXSS2rNnKAmE7SRza9QLMZhFQlVjSspsJxOYVMJe4NWkxC8SyjYwSk2/NZu5i5ODgFLCQ WH6LG6SGEeig76fWgNUzC4hL3HoynwniUAGJJXvOM0PYohIvH/9jBWkVFdCT2LNcEiKsJLFi +yVGiNYYiR3njrBArBWUODnzCcsERtFZSKbOQlI2C0nZLKCpzAKaEut36UOUKEpM6X7IDmFr SLTOmQtlWwO1TmVCVrOAkWMVo2hxanFSbrqRsV5qUWZycXF+nl5easkmRmDMHdzyW3UH4+U3 jocYBTgYlXh4FQolwoRYE8uKK3MPMUpzsCiJ8zYzPQgVEkhPLEnNTk0tSC2KLyrNSS0+xMjE wSnVwOj1pu2D4sTVP2ZaKeatUvtwaN2Nk5LfV6UpLvhlKZ/P4mx5b97BlCaVZVMu/JrxqDSn 4K/CkjYLX2l9vphXVx/l/nva6a2b2MKlq7v37mP/6B/+3yVm9dhxFqUtYNpwj1cy7+G/Jzt3 5kjekK7tbTmtG/r+RNyMh7ZXOhv62k/aMB9nzFRft0uJpTgj0VCLuag4EQAl8nXomgIAAA==
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/5uZ5GIV1ilQU-jAbw_4gaDRAqXU>
X-Mailman-Approved-At: Tue, 13 Oct 2015 14:01:47 -0700
Subject: [Perc] FW:  Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 10 Oct 2015 12:05:01 -0000

--_000_D23ECB113D7A9johnmattssonericssoncom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_D23ECB113D7A9johnmattssonericssoncom_
Content-Type: text/html; charset="utf-8"
Content-ID: <FF625BE468F60B43BCFA725BBDB6A902@ericsson.com>
Content-Transfer-Encoding: base64
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--_000_D23ECB113D7A9johnmattssonericssoncom_--


From nobody Wed Oct 14 04:35:40 2015
Return-Path: <john.mattsson@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3F351A1A5D for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 04:35:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aVzETCqnJYZH for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 04:35:38 -0700 (PDT)
Received: from mail-vk0-x22f.google.com (mail-vk0-x22f.google.com [IPv6:2607:f8b0:400c:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36AEE1A1A40 for <perc@ietf.org>; Wed, 14 Oct 2015 04:35:38 -0700 (PDT)
Received: by vkha6 with SMTP id a6so27527846vkh.2 for <perc@ietf.org>; Wed, 14 Oct 2015 04:35:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:date:message-id:subject:from:to:content-type; bh=9Tr9k/V92Ewel88uo//zenJyoeVPaJYCcpM+kOBS3vg=; b=oKo/mwJ71CROr4w1rP29z9knKz2purbMvaaaf9Ot56SK7ksvjMphwEulh71nOFlisy b+GGcJqe1gLj8+A3ji7hNYcvD/2jA89DOpDhVjv2cmIzOGH6UInEE0Jz3gFlNNiXZmkf BaVCt7upg5kfxPPseXOjX5vnam+2pdLFErOmE4uoICvoZUjC6Ni3/bO9ODYV9edVU7TG hBSfCcMlh3oVVBUxzZ/bRpi6zddvcUGPK/acJ0EELN8p+FdQ3plUmAdrSEw05Qk3koWq dVBvvF/MpAnB8ZBJ+i0RsGNkyaDHuJSOtac0rxDF2NhZ2vDuiGqxGNpxH/1ftzAlT/dZ trDg==
MIME-Version: 1.0
X-Received: by 10.31.141.149 with SMTP id p143mr1428064vkd.18.1444822537292; Wed, 14 Oct 2015 04:35:37 -0700 (PDT)
Received: by 10.31.142.14 with HTTP; Wed, 14 Oct 2015 04:35:37 -0700 (PDT)
Date: Wed, 14 Oct 2015 13:35:37 +0200
Message-ID: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com>
From: John Mattsson <john.mattsson@gmail.com>
To: perc@ietf.org
Content-Type: text/plain; charset=UTF-8
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/bOTF7ZBhb8OSRNSKKlkwTwNVaFU>
Subject: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 11:35:40 -0000

During the last IETF meeting and at the design team meetings, several
new attacks and security related requirements have been identified and
discussed. Below is a list of requirements I have collected and that I
think should be fulfilled by PERC:

- The e2e replay protection MUST be provided for the whole duration of
the conference.

- It SHALL be infeasible for the MDD to spoof the identity of a packet
sender, including making packets from two different sending endpoints
look like they originated from a single sending endpoint.

- The solution SHALL make it possible for a receiving endpoint to
detect if the MDD delays packets for significantly longer than the
network delay.

- The MDD MUST authenticate and authorize the endpoints joining the
conference, ensuring that the endpoint has been invited to the
conference.

- Endpoint joining the conference MUST authenticate the MDD.

- The e2e layer SHALL NOT be dependent on the hbh layer. It shall in
the future be possible to use e.g. hbh DTLS for increased
confidentiality and privacy.

- The service provider shall be able to enforce end-to-end security
using a specific key.

- The end-to-end keying material shall stored securely in the endpoint
and usage restricted so that it is infeasible to extracted or used the
key for anything else that EKT.

If agreeable, I suggest adding the above requirements to
draft-jones-perc-private-media-reqts.

Cheers,
John


From nobody Wed Oct 14 06:05:35 2015
Return-Path: <ekr@rtfm.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B91DD1A6F1E for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 06:05:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level: 
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jjVJqMET5aRn for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 06:05:32 -0700 (PDT)
Received: from mail-yk0-f177.google.com (mail-yk0-f177.google.com [209.85.160.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D440A1A6EDE for <perc@ietf.org>; Wed, 14 Oct 2015 06:05:31 -0700 (PDT)
Received: by ykfy204 with SMTP id y204so23455444ykf.1 for <perc@ietf.org>; Wed, 14 Oct 2015 06:05:31 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=Auu+s8gWsApC1Py30ONSIw2jpbDnNFYWn4xfxE9sZig=; b=TBTm+byVMptEmiaN0vUDW3wpi8bb7YLSRtHe3i+1541TK3PzxK9KtKkeHZHUK9B1D1 G/xZoKV22ouDxon0gnyvmKaNicuthBPv2UE2eomBvJ9H7jr0JVqWxEtBw87BVBataq74 cgYnED1dzmfBA7tAlZcOg8x5yUOLvLbfceOaVtuJhfAlz5917+vGLXUtkYGQIyCcM/Ms RLgFHv1Yp8Jdv9KS8iKkKavjHb8uAX1fw/rAosK1lIkk6zOLJpzqrJK4Mh64d0zuGv6y jEjWvZOa9hwhP5wD8b/ZSAeRUj5VFHKd6WtEohMTFDsKYI80ztVrPkTbMl0cYkQ/88Ly 8A+Q==
X-Gm-Message-State: ALoCoQlv+wwrhSXR8C0wYmsTNZElBsHtbmY3JmYyxQiScNWnoGSF46Rr7O1arNbLuBCC3qKt+GqK
X-Received: by 10.13.214.195 with SMTP id y186mr2115684ywd.81.1444827931037; Wed, 14 Oct 2015 06:05:31 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.129.114.85 with HTTP; Wed, 14 Oct 2015 06:04:51 -0700 (PDT)
In-Reply-To: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Wed, 14 Oct 2015 06:04:51 -0700
Message-ID: <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com>
To: John Mattsson <john.mattsson@gmail.com>
Content-Type: multipart/alternative; boundary=001a114fcea897a631052210371e
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/EhnKt2rS55I2jJlLUNFq0-ehXT4>
Cc: perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 13:05:33 -0000

--001a114fcea897a631052210371e
Content-Type: text/plain; charset=UTF-8

On Wed, Oct 14, 2015 at 4:35 AM, John Mattsson <john.mattsson@gmail.com>
wrote:

> During the last IETF meeting and at the design team meetings, several
> new attacks and security related requirements have been identified and
> discussed. Below is a list of requirements I have collected and that I
> think should be fulfilled by PERC:
>
> - The e2e replay protection MUST be provided for the whole duration of
> the conference.
>
> - It SHALL be infeasible for the MDD to spoof the identity of a packet
> sender, including making packets from two different sending endpoints
> look like they originated from a single sending endpoint.
>

I assume you mean without collusion from one of the senders?


- The solution SHALL make it possible for a receiving endpoint to
> detect if the MDD delays packets for significantly longer than the
> network delay.
>
> - The MDD MUST authenticate and authorize the endpoints joining the
> conference, ensuring that the endpoint has been invited to the
> conference.
>

I'm not convinced that this is a necessary requirement as stated. Someone
must, yes, but maybe not the MDD. Why is that needed?

-Ekr


> - Endpoint joining the conference MUST authenticate the MDD.
>
> - The e2e layer SHALL NOT be dependent on the hbh layer. It shall in
> the future be possible to use e.g. hbh DTLS for increased
> confidentiality and privacy.
>
> - The service provider shall be able to enforce end-to-end security
> using a specific key.
>
> - The end-to-end keying material shall stored securely in the endpoint
> and usage restricted so that it is infeasible to extracted or used the
> key for anything else that EKT.
>
> If agreeable, I suggest adding the above requirements to
> draft-jones-perc-private-media-reqts.
>
> Cheers,
> John
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc
>

--001a114fcea897a631052210371e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Wed, Oct 14, 2015 at 4:35 AM, John Mattsson <span dir=3D"ltr">&lt;<a=
 href=3D"mailto:john.mattsson@gmail.com" target=3D"_blank">john.mattsson@gm=
ail.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D=
"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">During the =
last IETF meeting and at the design team meetings, several<br>
new attacks and security related requirements have been identified and<br>
discussed. Below is a list of requirements I have collected and that I<br>
think should be fulfilled by PERC:<br>
<br>
- The e2e replay protection MUST be provided for the whole duration of<br>
the conference.<br>
<br>
- It SHALL be infeasible for the MDD to spoof the identity of a packet<br>
sender, including making packets from two different sending endpoints<br>
look like they originated from a single sending endpoint.<br></blockquote><=
div><br></div><div>I assume you mean without collusion from one of the send=
ers?</div><div><br></div><div><br></div><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
- The solution SHALL make it possible for a receiving endpoint to<br>
detect if the MDD delays packets for significantly longer than the<br>
network delay.<br>
<br>
- The MDD MUST authenticate and authorize the endpoints joining the<br>
conference, ensuring that the endpoint has been invited to the<br>
conference.<br></blockquote><div><br></div><div>I&#39;m not convinced that =
this is a necessary requirement as stated. Someone</div><div>must, yes, but=
 maybe not the MDD. Why is that needed?</div><div><br></div><div>-Ekr</div>=
<div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8=
ex;border-left:1px #ccc solid;padding-left:1ex">
- Endpoint joining the conference MUST authenticate the MDD.<br>
<br>
- The e2e layer SHALL NOT be dependent on the hbh layer. It shall in<br>
the future be possible to use e.g. hbh DTLS for increased<br>
confidentiality and privacy.<br>
<br>
- The service provider shall be able to enforce end-to-end security<br>
using a specific key.<br>
<br>
- The end-to-end keying material shall stored securely in the endpoint<br>
and usage restricted so that it is infeasible to extracted or used the<br>
key for anything else that EKT.<br>
<br>
If agreeable, I suggest adding the above requirements to<br>
draft-jones-perc-private-media-reqts.<br>
<br>
Cheers,<br>
John<br>
<br>
_______________________________________________<br>
Perc mailing list<br>
<a href=3D"mailto:Perc@ietf.org" target=3D"_blank">Perc@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/perc" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/listinfo/perc</a><br>
</blockquote></div><br></div></div>

--001a114fcea897a631052210371e--


From nobody Wed Oct 14 07:33:22 2015
Return-Path: <hallam@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7BB81A88AD for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 07:33:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.277
X-Spam-Level: 
X-Spam-Status: No, score=-1.277 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1beP82Lru4OH for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 07:33:20 -0700 (PDT)
Received: from mail-lb0-x22c.google.com (mail-lb0-x22c.google.com [IPv6:2a00:1450:4010:c04::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07EDB1A88A5 for <perc@ietf.org>; Wed, 14 Oct 2015 07:33:20 -0700 (PDT)
Received: by lbwr8 with SMTP id r8so47601422lbw.2 for <perc@ietf.org>; Wed, 14 Oct 2015 07:33:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=foE0pVFMS1Z+9dI5f4EfBXsXAoI0g6hkcqZR9g+v6VU=; b=hsHNhjtnL7eeht4XH2dNtRpJU7aTC4tVBR1b+6nC9HSKX1cx/gWBTuwigAi7AtltHA hCHoMrUBlIvDcurQpKWL/Uhu7oZXCT2MMLPg1phFTdkmy2YH3ZO3HhPrFvGEMKwz1sjt LMT7eXtVSCkf5HdqZRUGO2cvCJ1M/6P1EJeRerJFExFCd/IBm2owaaNmq+fTuQKCmDad +oBmJvgikRr8DTm/64B9SHBhmnMrFMRmF/z1bP77xJuU5BChU/P6hVey7P+YOs9JKIcH 2tcIjK4nvRNFKxf+FL01cTb8IxV+dV0/I0ktp8DK2cN3M849nPHXHG7y4zkYypBTfvDR EBTA==
MIME-Version: 1.0
X-Received: by 10.112.166.102 with SMTP id zf6mr1827988lbb.124.1444833198245;  Wed, 14 Oct 2015 07:33:18 -0700 (PDT)
Sender: hallam@gmail.com
Received: by 10.112.213.75 with HTTP; Wed, 14 Oct 2015 07:33:18 -0700 (PDT)
In-Reply-To: <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com>
Date: Wed, 14 Oct 2015 10:33:18 -0400
X-Google-Sender-Auth: A3zGSWvh0jB5sqcFIJ5nVgT_wac
Message-ID: <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com>
From: Phillip Hallam-Baker <phill@hallambaker.com>
To: Eric Rescorla <ekr@rtfm.com>
Content-Type: multipart/alternative; boundary=001a11c38cde8a90f60522117150
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/fBjvvenmm1KyLcr7-EpocQwxY8g>
Cc: John Mattsson <john.mattsson@gmail.com>, perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 14:33:21 -0000

--001a11c38cde8a90f60522117150
Content-Type: text/plain; charset=UTF-8

On Wed, Oct 14, 2015 at 9:04 AM, Eric Rescorla <ekr@rtfm.com> wrote:

>
>
> On Wed, Oct 14, 2015 at 4:35 AM, John Mattsson <john.mattsson@gmail.com>
> wrote:
>
>> During the last IETF meeting and at the design team meetings, several
>> new attacks and security related requirements have been identified and
>> discussed. Below is a list of requirements I have collected and that I
>> think should be fulfilled by PERC:
>>
>> - The e2e replay protection MUST be provided for the whole duration of
>> the conference.
>>
>> - It SHALL be infeasible for the MDD to spoof the identity of a packet
>> sender, including making packets from two different sending endpoints
>> look like they originated from a single sending endpoint.
>>
>
> I assume you mean without collusion from one of the senders?
>
>
> - The solution SHALL make it possible for a receiving endpoint to
>> detect if the MDD delays packets for significantly longer than the
>> network delay.
>>
>> - The MDD MUST authenticate and authorize the endpoints joining the
>> conference, ensuring that the endpoint has been invited to the
>> conference.
>>
>
> I'm not convinced that this is a necessary requirement as stated. Someone
> must, yes, but maybe not the MDD. Why is that needed?
>
> -Ekr
>

+1

That is an architecture statement, not requirements.

I don't want a trusted MDD. If you have to trust the service you haven't
got end-to-end by definition.


Each conference is set up by someone. Call them the administrator. Someone
wants to join, give them a key from the administrator machine. If the
administrator leaves, rekey to a new administrator.

If you want to have a standing chat room, there are techniques that allow
for multiparty key agreement based on a predetermined list of participants
set by an administrator. See Matt Blaze's proxy re-encryption.


-PHB

--001a11c38cde8a90f60522117150
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Wed, Oct 14, 2015 at 9:04 AM, Eric Rescorla <span dir=3D"ltr">&lt;<a=
 href=3D"mailto:ekr@rtfm.com" target=3D"_blank">ekr@rtfm.com</a>&gt;</span>=
 wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor=
der-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><br><div class=
=3D"gmail_extra"><br><div class=3D"gmail_quote"><span class=3D"">On Wed, Oc=
t 14, 2015 at 4:35 AM, John Mattsson <span dir=3D"ltr">&lt;<a href=3D"mailt=
o:john.mattsson@gmail.com" target=3D"_blank">john.mattsson@gmail.com</a>&gt=
;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =
.8ex;border-left:1px #ccc solid;padding-left:1ex">During the last IETF meet=
ing and at the design team meetings, several<br>
new attacks and security related requirements have been identified and<br>
discussed. Below is a list of requirements I have collected and that I<br>
think should be fulfilled by PERC:<br>
<br>
- The e2e replay protection MUST be provided for the whole duration of<br>
the conference.<br>
<br>
- It SHALL be infeasible for the MDD to spoof the identity of a packet<br>
sender, including making packets from two different sending endpoints<br>
look like they originated from a single sending endpoint.<br></blockquote><=
div><br></div></span><div>I assume you mean without collusion from one of t=
he senders?</div><span class=3D""><div><br></div><div><br></div><blockquote=
 class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc soli=
d;padding-left:1ex">
- The solution SHALL make it possible for a receiving endpoint to<br>
detect if the MDD delays packets for significantly longer than the<br>
network delay.<br>
<br>
- The MDD MUST authenticate and authorize the endpoints joining the<br>
conference, ensuring that the endpoint has been invited to the<br>
conference.<br></blockquote><div><br></div></span><div>I&#39;m not convince=
d that this is a necessary requirement as stated. Someone</div><div>must, y=
es, but maybe not the MDD. Why is that needed?</div><div><br></div><div>-Ek=
r</div></div></div></div></blockquote><div><br></div><div>+1</div><div><br>=
</div><div>That is an architecture statement, not requirements.</div><div><=
br></div><div>I don&#39;t want a trusted MDD. If you have to trust the serv=
ice you haven&#39;t got end-to-end by definition.</div><div><br></div><div>=
<br></div><div>Each conference is set up by someone. Call them the administ=
rator. Someone wants to join, give them a key from the administrator machin=
e. If the administrator leaves, rekey to a new administrator.</div><div><br=
></div><div>If you want to have a standing chat room, there are techniques =
that allow for multiparty key agreement based on a predetermined list of pa=
rticipants set by an administrator. See Matt Blaze&#39;s proxy re-encryptio=
n.</div><div><br></div><div><br></div><div>-PHB</div><div><br></div></div><=
/div></div>

--001a11c38cde8a90f60522117150--


From nobody Wed Oct 14 07:57:58 2015
Return-Path: <pkyzivat@alum.mit.edu>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A0711A9142 for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 07:57:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.235
X-Spam-Level: 
X-Spam-Status: No, score=-1.235 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I-XjR9z4Mn4v for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 07:57:56 -0700 (PDT)
Received: from resqmta-ch2-05v.sys.comcast.net (resqmta-ch2-05v.sys.comcast.net [IPv6:2001:558:fe21:29:69:252:207:37]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1376F1A911F for <perc@ietf.org>; Wed, 14 Oct 2015 07:57:55 -0700 (PDT)
Received: from resomta-ch2-20v.sys.comcast.net ([69.252.207.116]) by resqmta-ch2-05v.sys.comcast.net with comcast id V2wi1r0032XD5SV012xu1n; Wed, 14 Oct 2015 14:57:54 +0000
Received: from Paul-Kyzivats-MacBook-Pro.local ([50.138.229.151]) by resomta-ch2-20v.sys.comcast.net with comcast id V2xu1r0023Ge9ey012xuT5; Wed, 14 Oct 2015 14:57:54 +0000
To: perc@ietf.org
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com>
From: Paul Kyzivat <pkyzivat@alum.mit.edu>
Message-ID: <561E6D71.2080407@alum.mit.edu>
Date: Wed, 14 Oct 2015 10:57:53 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20140121; t=1444834674; bh=09lVBd5CxqkCR1jj8R9rmIbPB5Jm2380fU7l+o1btfY=; h=Received:Received:Subject:To:From:Message-ID:Date:MIME-Version: Content-Type; b=RcFKvllCGQoSqB0zfkUeLIPWDdiRuX358H3M5elMoXdEO5aSR2a+ScKAb1NLjS7Pm lBSCTNjuyFCPK20cEFGiA2pvtG8rL6U1jv45bCNPOrIhMRqMkvLhRlZRewikDEDJfj uYtCXFd4E8IWuGRijQ/HMT1C2Cjk9ta13y3evQJKgGsMAa2HRs8zmYM0OuKooUqqoa HhpjnPyHeSMpzFQyaVfs1mzyBiKqlhM5b2yG0A36t9wgeKD7NeBguupatPzJQ4oM/v 7m49fW0jFiZuO+r3eSPfR0O7VnlyhkS6a4KFSv0MckBJMGJR/jzVs+eskUpghL1MUG smL8MTm4iONrw==
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/tN6lMTaYTv3zauLASm1wNhgwzTs>
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 14:57:57 -0000

On 10/14/15 10:33 AM, Phillip Hallam-Baker wrote:

> I don't want a trusted MDD. If you have to trust the service you haven't
> got end-to-end by definition.

Surely you must trust it to *some* extent. In particular you trust it to 
allow the intended participants to connect, and to do the switching 
according to the policy you give it.

The issue is to properly divide up the responsibilities and trust in a 
reasonable way.

	Thanks,
	Paul


From nobody Wed Oct 14 09:04:57 2015
Return-Path: <john.mattsson@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 794751ACD21 for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 09:04:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lvSmpeoSjcbk for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 09:04:53 -0700 (PDT)
Received: from mail-vk0-x233.google.com (mail-vk0-x233.google.com [IPv6:2607:f8b0:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F1D0C1ACD15 for <perc@ietf.org>; Wed, 14 Oct 2015 09:04:52 -0700 (PDT)
Received: by vkex70 with SMTP id x70so25426949vke.3 for <perc@ietf.org>; Wed, 14 Oct 2015 09:04:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=QY96ppK3UhSIhMKpMiiq8fiAObiIOp5j6zFIjOtwCsk=; b=RtiPqaiGZWWDkgaxRracqpb4n34iyMLuspucIP/4Hlb8Id1QJ9n917Tc7L8A/X5Llj 2O6kCTBOJjROX14bQmvuYL3wvjciKs4+c3siMD8JlpNQMVvysv+roDj7MPmqRcbNvLfF q/xKn87dlY+HXSCc3hwOvX6HRGlbp8HTboBGfpu01gGrAvedZ5BXHQNoBpm+DWUAQdaH IxNt+BUQ0KDrWzIzhhLHgX1/E9BHZclX7tgPIdOTgmJrvogy0ispPETODEoCFH4MTeeE Ij6PvKPDArDq78Z7f2/3NEzEcm319Q8/YY0kkwL+XA36m5MtvJFqvi4PV/RG0RBCMPcs L9Bw==
MIME-Version: 1.0
X-Received: by 10.31.165.132 with SMTP id o126mr2317499vke.101.1444838692189;  Wed, 14 Oct 2015 09:04:52 -0700 (PDT)
Received: by 10.31.142.14 with HTTP; Wed, 14 Oct 2015 09:04:52 -0700 (PDT)
In-Reply-To: <561E6D71.2080407@alum.mit.edu>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu>
Date: Wed, 14 Oct 2015 18:04:52 +0200
Message-ID: <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com>
From: John Mattsson <john.mattsson@gmail.com>
To: perc@ietf.org
Content-Type: text/plain; charset=UTF-8
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/l02Pwna5IKsG0QbzWawq8_UdZcs>
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 16:04:55 -0000

Another requirement that should be discussed and concluded upon is the
wish to have the KMF integrated in one of the endpoints (e.g. a WebRTC
browser). As this may have large impacts on the protocol used to the
KMF, it would be good to get an agreement early as well as listing any
consequences.


On Wed, Oct 14, 2015 at 9:04 AM, Eric Rescorla wrote:

>> - It SHALL be infeasible for the MDD to spoof the identity of a packet
>> sender, including making packets from two different sending endpoints
>> look like they originated from a single sending endpoint.

>I assume you mean without collusion from one of the senders?'

Yes. The agreement during the last design meeting was to use SSRC as
the e2e cryptographic identity. If the MDD in any can affect the SSRC
assignment, it can cause SSRC collision. Such collision would likely
enable the MDD to mix packets from different senders, making it look
like they originated from a single sender.


>> - The MDD MUST authenticate and authorize the endpoints joining the
>> conference, ensuring that the endpoint has been invited to the
>> conference.

>I'm not convinced that this is a necessary requirement as stated. Someone
>must, yes, but maybe not the MDD. Why is that needed?

The attack would be an DoS attack where an external endpoint (not
invited) joins the conference and starts sending RTP packets with the
audio level RTP header saying "I AM SCREAMING". It the MDD is only
forwarding one audio stream, this would completely silence the
conference. I do not find it acceptable that anybody (even off-path)
so easily can perform an DoS attack.

The authentication protocol could be run by the party controlling the
KMF, is this what you mean? Improved text:
"Endpoints connecting to the MDD MUST be authenticated and authorized,
ensuring that the endpoint has been invited to the conference by a
trusted party."

Cheers,
John



On Wed, Oct 14, 2015 at 4:57 PM, Paul Kyzivat <pkyzivat@alum.mit.edu> wrote:
> On 10/14/15 10:33 AM, Phillip Hallam-Baker wrote:
>
>> I don't want a trusted MDD. If you have to trust the service you haven't
>> got end-to-end by definition.
>
>
> Surely you must trust it to *some* extent. In particular you trust it to
> allow the intended participants to connect, and to do the switching
> according to the policy you give it.
>
> The issue is to properly divide up the responsibilities and trust in a
> reasonable way.
>
>         Thanks,
>         Paul
>
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc


From nobody Wed Oct 14 09:09:43 2015
Return-Path: <ekr@rtfm.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDDDE1ACD57 for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 09:09:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level: 
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jq8OkYcrfH4Q for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 09:09:39 -0700 (PDT)
Received: from mail-yk0-f176.google.com (mail-yk0-f176.google.com [209.85.160.176]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7BB71ACD4D for <perc@ietf.org>; Wed, 14 Oct 2015 09:09:16 -0700 (PDT)
Received: by ykaz22 with SMTP id z22so26145761yka.2 for <perc@ietf.org>; Wed, 14 Oct 2015 09:09:16 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=9MSSG9oKhm5KGccpEXpi/cRN43KqR4woeisjnsn8Kfo=; b=ZCnFpzXityvwSH6knhVZ9jysw5NvZefAg4TVB+Qjuw3/qHJG/JGur33/L1obQtGc3Z r7UTBgdtTOhSbaateRF0Owdnjocvrq0vm9pEYswAwJbagXhzZNJv63Ni2gartB6t0YRX S2ZMC1GBeypWEf8y0dTs60pklYeoKKLm1d568j+djf/QBqu+ADCgZ5M+DI2LQoTWiQoW hiTXeFt0pHShAvtMXqj0gmOCflMT95TYajBWpeMLvCfiIHKhVWT7qMBTN4hVDxrr1HcH n76zig35umMoRmFQi1zAWpdcJhkIhWkuoOS/chheaOAKiF5XZI7UXgApcRRElM0lx6Lk Bd9w==
X-Gm-Message-State: ALoCoQl8TKTtfe7GbWJaaykVSLW0bhUnh4vI12KnqkU3dl/TyhEVdab+tVXjYw2WMjOl/m/bP85d
X-Received: by 10.13.193.133 with SMTP id c127mr2880339ywd.79.1444838956022; Wed, 14 Oct 2015 09:09:16 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.129.114.85 with HTTP; Wed, 14 Oct 2015 09:08:36 -0700 (PDT)
In-Reply-To: <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu> <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Wed, 14 Oct 2015 09:08:36 -0700
Message-ID: <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com>
To: John Mattsson <john.mattsson@gmail.com>
Content-Type: multipart/alternative; boundary=001a114e761ebb7309052212c81f
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/1DIC9RreQZ8m_EjHHxhXB9NGyB8>
Cc: perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 16:09:42 -0000

--001a114e761ebb7309052212c81f
Content-Type: text/plain; charset=UTF-8

On Wed, Oct 14, 2015 at 9:04 AM, John Mattsson <john.mattsson@gmail.com>
wrote:

> Another requirement that should be discussed and concluded upon is the
> wish to have the KMF integrated in one of the endpoints (e.g. a WebRTC
> browser).


Yes, I think this is a requirement.



> >> - It SHALL be infeasible for the MDD to spoof the identity of a packet
> >> sender, including making packets from two different sending endpoints
> >> look like they originated from a single sending endpoint.
>
> >I assume you mean without collusion from one of the senders?'
>
> Yes. The agreement during the last design meeting was to use SSRC as
> the e2e cryptographic identity. If the MDD in any can affect the SSRC
> assignment, it can cause SSRC collision. Such collision would likely
> enable the MDD to mix packets from different senders, making it look
> like they originated from a single sender.


Right, but my point is that absent signature, you can't stop them if they
collude
with any user.



> >> - The MDD MUST authenticate and authorize the endpoints joining the
> >> conference, ensuring that the endpoint has been invited to the
> >> conference.
>
> >I'm not convinced that this is a necessary requirement as stated. Someone
> >must, yes, but maybe not the MDD. Why is that needed?
>
> The attack would be an DoS attack where an external endpoint (not
> invited) joins the conference and starts sending RTP packets with the
> audio level RTP header saying "I AM SCREAMING".


How does it get the keys to do that. Is that what you mean by "authorized"?

-Ekr


> It the MDD is only
> forwarding one audio stream, this would completely silence the
> conference. I do not find it acceptable that anybody (even off-path)
> so easily can perform an DoS attack.
>
> The authentication protocol could be run by the party controlling the
> KMF, is this what you mean? Improved text:
> "Endpoints connecting to the MDD MUST be authenticated and authorized,
> ensuring that the endpoint has been invited to the conference by a
> trusted party."
>
> Cheers,
> John
>
>
>
> On Wed, Oct 14, 2015 at 4:57 PM, Paul Kyzivat <pkyzivat@alum.mit.edu>
> wrote:
> > On 10/14/15 10:33 AM, Phillip Hallam-Baker wrote:
> >
> >> I don't want a trusted MDD. If you have to trust the service you haven't
> >> got end-to-end by definition.
> >
> >
> > Surely you must trust it to *some* extent. In particular you trust it to
> > allow the intended participants to connect, and to do the switching
> > according to the policy you give it.
> >
> > The issue is to properly divide up the responsibilities and trust in a
> > reasonable way.
> >
> >         Thanks,
> >         Paul
> >
> >
> > _______________________________________________
> > Perc mailing list
> > Perc@ietf.org
> > https://www.ietf.org/mailman/listinfo/perc
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc
>

--001a114e761ebb7309052212c81f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Wed, Oct 14, 2015 at 9:04 AM, John Mattsson <span dir=3D"ltr">&lt;<a=
 href=3D"mailto:john.mattsson@gmail.com" target=3D"_blank">john.mattsson@gm=
ail.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D=
"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Another req=
uirement that should be discussed and concluded upon is the<br>
wish to have the KMF integrated in one of the endpoints (e.g. a WebRTC<br>
browser). </blockquote><div><br></div><div>Yes, I think this is a requireme=
nt.</div><div><br></div><div>=C2=A0</div><blockquote class=3D"gmail_quote" =
style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><sp=
an class=3D"">&gt;&gt; - It SHALL be infeasible for the MDD to spoof the id=
entity of a packet<br>
&gt;&gt; sender, including making packets from two different sending endpoi=
nts<br>
&gt;&gt; look like they originated from a single sending endpoint.<br>
<br>
</span>&gt;I assume you mean without collusion from one of the senders?&#39=
;<br>
<br>
Yes. The agreement during the last design meeting was to use SSRC as<br>
the e2e cryptographic identity. If the MDD in any can affect the SSRC<br>
assignment, it can cause SSRC collision. Such collision would likely<br>
enable the MDD to mix packets from different senders, making it look<br>
like they originated from a single sender.</blockquote><div><br></div><div>=
Right, but my point is that absent signature, you can&#39;t stop them if th=
ey collude</div><div>with any user.</div><div><br></div><div>=C2=A0</div><b=
lockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px =
#ccc solid;padding-left:1ex"><span class=3D"">
&gt;&gt; - The MDD MUST authenticate and authorize the endpoints joining th=
e<br>
&gt;&gt; conference, ensuring that the endpoint has been invited to the<br>
&gt;&gt; conference.<br>
<br>
&gt;I&#39;m not convinced that this is a necessary requirement as stated. S=
omeone<br>
&gt;must, yes, but maybe not the MDD. Why is that needed?<br>
<br>
</span>The attack would be an DoS attack where an external endpoint (not<br=
>
invited) joins the conference and starts sending RTP packets with the<br>
audio level RTP header saying &quot;I AM SCREAMING&quot;. </blockquote><div=
><br></div><div>How does it get the keys to do that. Is that what you mean =
by &quot;authorized&quot;?</div><div><br></div><div>-Ekr</div><div>=C2=A0</=
div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-lef=
t:1px #ccc solid;padding-left:1ex">It the MDD is only<br>
forwarding one audio stream, this would completely silence the<br>
conference. I do not find it acceptable that anybody (even off-path)<br>
so easily can perform an DoS attack.<br>
<br>
The authentication protocol could be run by the party controlling the<br>
KMF, is this what you mean? Improved text:<br>
&quot;Endpoints connecting to the MDD MUST be authenticated and authorized,=
<br>
ensuring that the endpoint has been invited to the conference by a<br>
trusted party.&quot;<br>
<br>
Cheers,<br>
John<br>
<div class=3D"HOEnZb"><div class=3D"h5"><br>
<br>
<br>
On Wed, Oct 14, 2015 at 4:57 PM, Paul Kyzivat &lt;<a href=3D"mailto:pkyziva=
t@alum.mit.edu">pkyzivat@alum.mit.edu</a>&gt; wrote:<br>
&gt; On 10/14/15 10:33 AM, Phillip Hallam-Baker wrote:<br>
&gt;<br>
&gt;&gt; I don&#39;t want a trusted MDD. If you have to trust the service y=
ou haven&#39;t<br>
&gt;&gt; got end-to-end by definition.<br>
&gt;<br>
&gt;<br>
&gt; Surely you must trust it to *some* extent. In particular you trust it =
to<br>
&gt; allow the intended participants to connect, and to do the switching<br=
>
&gt; according to the policy you give it.<br>
&gt;<br>
&gt; The issue is to properly divide up the responsibilities and trust in a=
<br>
&gt; reasonable way.<br>
&gt;<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Thanks,<br>
&gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Paul<br>
&gt;<br>
&gt;<br>
&gt; _______________________________________________<br>
&gt; Perc mailing list<br>
&gt; <a href=3D"mailto:Perc@ietf.org">Perc@ietf.org</a><br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/perc" rel=3D"noreferr=
er" target=3D"_blank">https://www.ietf.org/mailman/listinfo/perc</a><br>
<br>
_______________________________________________<br>
Perc mailing list<br>
<a href=3D"mailto:Perc@ietf.org">Perc@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/perc" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/listinfo/perc</a><br>
</div></div></blockquote></div><br></div></div>

--001a114e761ebb7309052212c81f--


From nobody Wed Oct 14 09:10:01 2015
Return-Path: <john.mattsson@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC3AF1ACD47 for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 09:09:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DC12oMxmw7xn for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 09:09:58 -0700 (PDT)
Received: from mail-vk0-x233.google.com (mail-vk0-x233.google.com [IPv6:2607:f8b0:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC03E1ACD48 for <perc@ietf.org>; Wed, 14 Oct 2015 09:09:42 -0700 (PDT)
Received: by vkex70 with SMTP id x70so25521009vke.3 for <perc@ietf.org>; Wed, 14 Oct 2015 09:09:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=lV8zHY93SQGZz7/5JjX0qvWEXif+/ABQXhdin90hwKM=; b=sF6+PS6rCKEbKF3eSrEyLsQ9AIFwHeKN2zgxPbOkswgaEdJpwojqeVrkvVlUBPOsp/ 8KPb9nIfoOaKse5FcwnFOZyQKpDOaB+BPxXHHR2t/mbZuZ7+PtN8cQrO6DiFxr5qkQtb 3HY5JUAhCefaftggO4YlTKpxXUGFH8PgAdJs5tYqFNeZA+puE6NJPuA4YOuYeAbVzail ZDIYdVqa8O2/UNM+EjF1nNtukwKPLc/ULdGj5FVFF3vWGUEkEd5WKPIPMTiKZ8CLcs0F OXAHjnfpsnz6fOn0zatqNPToHvUjyQeS5C0KkAWr5sUHeT7ElACfNoC/Mqxbz4rV1lwd soEg==
MIME-Version: 1.0
X-Received: by 10.31.188.208 with SMTP id m199mr2381003vkf.36.1444838982200; Wed, 14 Oct 2015 09:09:42 -0700 (PDT)
Received: by 10.31.142.14 with HTTP; Wed, 14 Oct 2015 09:09:42 -0700 (PDT)
In-Reply-To: <CABQOnqn8rL8+UdPgB1NC0qrCqpG14dbHv0EbGP=4iu9YEg4x3Q@mail.gmail.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu> <CABQOnqn8rL8+UdPgB1NC0qrCqpG14dbHv0EbGP=4iu9YEg4x3Q@mail.gmail.com>
Date: Wed, 14 Oct 2015 18:09:42 +0200
Message-ID: <CABQOnqkaDBx3bPFMs5iNwvkLRaSNYkv46u-bQxiVPbVUkghnxw@mail.gmail.com>
From: John Mattsson <john.mattsson@gmail.com>
To: perc@ietf.org
Content-Type: text/plain; charset=UTF-8
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/LsGRsieD9Mj5lvb7DDOxZwGH_jE>
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 16:09:59 -0000

Paul Kyzivat wrote:

>> I don't want a trusted MDD. If you have to trust the service you haven't
>> got end-to-end by definition.

>Surely you must trust it to *some* extent. In particular you trust it to allow the intended participants >to connect, and to do the switching according to the policy you give it.

>The issue is to properly divide up the responsibilities and trust in a reasonable way.

+1

On Wed, Oct 14, 2015 at 6:08 PM, John Mattsson <john.mattsson@gmail.com> wrote:
> Paul Kyzivat wrote:
>
>>> I don't want a trusted MDD. If you have to trust the service you haven't
>>> got end-to-end by definition.
>
>>Surely you must trust it to *some* extent. In particular you trust it to allow the intended participants >to connect, and to do the switching according to the policy you give it.
>
>>The issue is to properly divide up the responsibilities and trust in a reasonable way.
>
> +1
>
> On Wed, Oct 14, 2015 at 4:57 PM, Paul Kyzivat <pkyzivat@alum.mit.edu> wrote:
>> On 10/14/15 10:33 AM, Phillip Hallam-Baker wrote:
>>
>>> I don't want a trusted MDD. If you have to trust the service you haven't
>>> got end-to-end by definition.
>>
>>
>> Surely you must trust it to *some* extent. In particular you trust it to
>> allow the intended participants to connect, and to do the switching
>> according to the policy you give it.
>>
>> The issue is to properly divide up the responsibilities and trust in a
>> reasonable way.
>>
>>         Thanks,
>>         Paul
>>
>>
>> _______________________________________________
>> Perc mailing list
>> Perc@ietf.org
>> https://www.ietf.org/mailman/listinfo/perc


From nobody Wed Oct 14 09:47:44 2015
Return-Path: <pkyzivat@alum.mit.edu>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18DD11ACDFA for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 09:47:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.235
X-Spam-Level: 
X-Spam-Status: No, score=-1.235 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1e4SXwhirbhp for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 09:47:39 -0700 (PDT)
Received: from resqmta-ch2-10v.sys.comcast.net (resqmta-ch2-10v.sys.comcast.net [IPv6:2001:558:fe21:29:69:252:207:42]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4C9C1ACDC0 for <perc@ietf.org>; Wed, 14 Oct 2015 09:45:00 -0700 (PDT)
Received: from resomta-ch2-18v.sys.comcast.net ([69.252.207.114]) by resqmta-ch2-10v.sys.comcast.net with comcast id V4kB1r0042Udklx014kzyC; Wed, 14 Oct 2015 16:44:59 +0000
Received: from Paul-Kyzivats-MacBook-Pro.local ([50.138.229.151]) by resomta-ch2-18v.sys.comcast.net with comcast id V4kz1r00G3Ge9ey014kzLs; Wed, 14 Oct 2015 16:44:59 +0000
To: perc@ietf.org
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu> <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com> <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com>
From: Paul Kyzivat <pkyzivat@alum.mit.edu>
Message-ID: <561E868A.90502@alum.mit.edu>
Date: Wed, 14 Oct 2015 12:44:58 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20140121; t=1444841099; bh=o9NewcUN7R7HlxP7jookTjo6r1wEUsZ9mT/UecNqklA=; h=Received:Received:Subject:To:From:Message-ID:Date:MIME-Version: Content-Type; b=vJ5hqP2jvIvPhgcuvU+o0u0EzrVpJIhRKdIJyCkoMVs36c2Or+qciyq3hRILcsy2i /sEXU8N8D0iLV0z0A+pAqXH01de+Dhofc7YAPEr0nxyawACbqWbZ+ylUj6zAcQymlI acapQrO38iNxL8GRlRkdngkPAaj/4xLl6UQ2XNc8sulZDyA3XZ+ertHHmH1vC02qu+ s/JSqoKFtPN6ne4WnCNHQwuvunk2PYq9Cma/FQBkpW3qLlQF1SU9L22gpbA0+gCMf/ JWNJ+N1wZOD+zsTlWjKn/QAeo52sZul8ORvfWtWBeZn+/kJmygoCg0uTG5RXBf2DCJ oR7K66NnPeTKw==
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/h1SK7YX-X6sW-3KP3w64yKAbUYw>
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 16:47:40 -0000

On 10/14/15 12:08 PM, Eric Rescorla wrote:
>
>
> On Wed, Oct 14, 2015 at 9:04 AM, John Mattsson <john.mattsson@gmail.com
> <mailto:john.mattsson@gmail.com>> wrote:
>
>     Another requirement that should be discussed and concluded upon is the
>     wish to have the KMF integrated in one of the endpoints (e.g. a WebRTC
>     browser).
>
>
> Yes, I think this is a requirement.
>
>     >> - It SHALL be infeasible for the MDD to spoof the identity of a packet
>     >> sender, including making packets from two different sending endpoints
>     >> look like they originated from a single sending endpoint.
>
>      >I assume you mean without collusion from one of the senders?'
>
>     Yes. The agreement during the last design meeting was to use SSRC as
>     the e2e cryptographic identity. If the MDD in any can affect the SSRC
>     assignment, it can cause SSRC collision. Such collision would likely
>     enable the MDD to mix packets from different senders, making it look
>     like they originated from a single sender.
>
>
> Right, but my point is that absent signature, you can't stop them if
> they collude
> with any user.

Do you mean that if the MDD collaborates with a user then it can 
impersonate *that* user?

I don't see that as a problem. In that case the MDD is acting properly 
as an agent of the user, just as the user's own UA is.

	Thanks,
	Paul


From nobody Wed Oct 14 10:04:55 2015
Return-Path: <ekr@rtfm.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1D1B1ACE9B for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 10:04:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level: 
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WZw5HX1GZdfv for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 10:04:52 -0700 (PDT)
Received: from mail-yk0-f180.google.com (mail-yk0-f180.google.com [209.85.160.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 272031ACEAB for <perc@ietf.org>; Wed, 14 Oct 2015 10:04:52 -0700 (PDT)
Received: by ykoo7 with SMTP id o7so53496232yko.0 for <perc@ietf.org>; Wed, 14 Oct 2015 10:04:51 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=SVQS1e3502VUlSkp+n8dJXaWCKGuY5nx5AU8QfTD8Wc=; b=Tw8iM/jhXvkVppaRk5X2lI9kCnShWfF73B1QE4/sQ1huwxNW8s+88RGW+Nj6T1LPPI 5wJf1+80frAO0YvPvjVUKh3HAnFwvetAtdxLD/OzpRsv3BErYKO97aLFo0jDag/H35Eu NzGvheJouhZeCGnUFJJKW4TI8ImPQKZ4Jqr8S3U8UHL0OTxkXOvvwBv+l//Jy6ANUnYT 7nKoW7Aif02GQAdW8jqdYQ7Mgk0IWgkK+IhnNhycY+i8yN8GKj2Hu83zjcN6+eMDSKou ppm3RZvW2ClnVjiy1+9cQE9NqV8ARVJ2JzCbjSc7/AfjMozeuEFojfCHbt+37gHIUevi sWNA==
X-Gm-Message-State: ALoCoQkhvx+BLvm7kMq/AHy9cgosyMNbQ1s6kV/z+WjXbMg3k79hFdegtCLcRyZ76AuySE1/Dnme
X-Received: by 10.13.193.133 with SMTP id c127mr3090295ywd.79.1444842291378; Wed, 14 Oct 2015 10:04:51 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.129.114.85 with HTTP; Wed, 14 Oct 2015 10:04:11 -0700 (PDT)
In-Reply-To: <561E868A.90502@alum.mit.edu>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu> <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com> <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com> <561E868A.90502@alum.mit.edu>
From: Eric Rescorla <ekr@rtfm.com>
Date: Wed, 14 Oct 2015 10:04:11 -0700
Message-ID: <CABcZeBP8B3k27b5T6-qyDJcckFsPS+PR-Pw_f41FRjejTvubcA@mail.gmail.com>
To: Paul Kyzivat <pkyzivat@alum.mit.edu>
Content-Type: multipart/alternative; boundary=001a114e761e88e2970522138f50
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/euQ-ulKSsDoQCA42CB1GeNn-EGI>
Cc: perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 17:04:54 -0000

--001a114e761e88e2970522138f50
Content-Type: text/plain; charset=UTF-8

On Wed, Oct 14, 2015 at 9:44 AM, Paul Kyzivat <pkyzivat@alum.mit.edu> wrote:

> On 10/14/15 12:08 PM, Eric Rescorla wrote:
>
>>
>>
>> On Wed, Oct 14, 2015 at 9:04 AM, John Mattsson <john.mattsson@gmail.com
>> <mailto:john.mattsson@gmail.com>> wrote:
>>
>>     Another requirement that should be discussed and concluded upon is the
>>     wish to have the KMF integrated in one of the endpoints (e.g. a WebRTC
>>     browser).
>>
>>
>> Yes, I think this is a requirement.
>>
>>     >> - It SHALL be infeasible for the MDD to spoof the identity of a
>> packet
>>     >> sender, including making packets from two different sending
>> endpoints
>>     >> look like they originated from a single sending endpoint.
>>
>>      >I assume you mean without collusion from one of the senders?'
>>
>>     Yes. The agreement during the last design meeting was to use SSRC as
>>     the e2e cryptographic identity. If the MDD in any can affect the SSRC
>>     assignment, it can cause SSRC collision. Such collision would likely
>>     enable the MDD to mix packets from different senders, making it look
>>     like they originated from a single sender.
>>
>>
>> Right, but my point is that absent signature, you can't stop them if
>> they collude
>> with any user.
>>
>
> Do you mean that if the MDD collaborates with a user then it can
> impersonate *that* user?
>

No. I mean that if the MDD collaborates as a user, it can impersonate any
user.

-Ekr

I don't see that as a problem. In that case the MDD is acting properly as
> an agent of the user, just as the user's own UA is.
>
>
>         Thanks,
>         Paul
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc
>

--001a114e761e88e2970522138f50
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Wed, Oct 14, 2015 at 9:44 AM, Paul Kyzivat <span dir=3D"ltr">&lt;<a =
href=3D"mailto:pkyzivat@alum.mit.edu" target=3D"_blank">pkyzivat@alum.mit.e=
du</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=3D""=
>On 10/14/15 12:08 PM, Eric Rescorla wrote:<br>
</span><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-=
left:1px #ccc solid;padding-left:1ex"><span class=3D"">
<br>
<br>
On Wed, Oct 14, 2015 at 9:04 AM, John Mattsson &lt;<a href=3D"mailto:john.m=
attsson@gmail.com" target=3D"_blank">john.mattsson@gmail.com</a><br></span>=
<span class=3D"">
&lt;mailto:<a href=3D"mailto:john.mattsson@gmail.com" target=3D"_blank">joh=
n.mattsson@gmail.com</a>&gt;&gt; wrote:<br>
<br>
=C2=A0 =C2=A0 Another requirement that should be discussed and concluded up=
on is the<br>
=C2=A0 =C2=A0 wish to have the KMF integrated in one of the endpoints (e.g.=
 a WebRTC<br>
=C2=A0 =C2=A0 browser).<br>
<br>
<br>
Yes, I think this is a requirement.<br>
<br>
=C2=A0 =C2=A0 &gt;&gt; - It SHALL be infeasible for the MDD to spoof the id=
entity of a packet<br>
=C2=A0 =C2=A0 &gt;&gt; sender, including making packets from two different =
sending endpoints<br>
=C2=A0 =C2=A0 &gt;&gt; look like they originated from a single sending endp=
oint.<br>
<br>
=C2=A0 =C2=A0 =C2=A0&gt;I assume you mean without collusion from one of the=
 senders?&#39;<br>
<br>
=C2=A0 =C2=A0 Yes. The agreement during the last design meeting was to use =
SSRC as<br>
=C2=A0 =C2=A0 the e2e cryptographic identity. If the MDD in any can affect =
the SSRC<br>
=C2=A0 =C2=A0 assignment, it can cause SSRC collision. Such collision would=
 likely<br>
=C2=A0 =C2=A0 enable the MDD to mix packets from different senders, making =
it look<br>
=C2=A0 =C2=A0 like they originated from a single sender.<br>
<br>
<br>
Right, but my point is that absent signature, you can&#39;t stop them if<br=
>
they collude<br>
with any user.<br>
</span></blockquote>
<br>
Do you mean that if the MDD collaborates with a user then it can impersonat=
e *that* user?<br></blockquote><div><br></div><div>No. I mean that if the M=
DD collaborates as a user, it can impersonate any user.</div><div><br></div=
><div>-Ekr</div><div><br></div><blockquote class=3D"gmail_quote" style=3D"m=
argin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I don&#39;t see that as a problem. In that case the MDD is acting properly =
as an agent of the user, just as the user&#39;s own UA is.<div class=3D"HOE=
nZb"><div class=3D"h5"><br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Thanks,<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Paul<br>
<br>
_______________________________________________<br>
Perc mailing list<br>
<a href=3D"mailto:Perc@ietf.org" target=3D"_blank">Perc@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/perc" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/listinfo/perc</a><br>
</div></div></blockquote></div><br></div></div>

--001a114e761e88e2970522138f50--


From nobody Wed Oct 14 10:53:11 2015
Return-Path: <pkyzivat@alum.mit.edu>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E5C51AD0B3 for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 10:53:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.235
X-Spam-Level: 
X-Spam-Status: No, score=-1.235 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7nKrNirAKV5S for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 10:53:08 -0700 (PDT)
Received: from resqmta-ch2-06v.sys.comcast.net (resqmta-ch2-06v.sys.comcast.net [IPv6:2001:558:fe21:29:69:252:207:38]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 789B31AD0AF for <perc@ietf.org>; Wed, 14 Oct 2015 10:53:08 -0700 (PDT)
Received: from resomta-ch2-18v.sys.comcast.net ([69.252.207.114]) by resqmta-ch2-06v.sys.comcast.net with comcast id V5sc1r0012Udklx015t79H; Wed, 14 Oct 2015 17:53:07 +0000
Received: from Paul-Kyzivats-MacBook-Pro.local ([50.138.229.151]) by resomta-ch2-18v.sys.comcast.net with comcast id V5t71r0083Ge9ey015t73q; Wed, 14 Oct 2015 17:53:07 +0000
To: Eric Rescorla <ekr@rtfm.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu> <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com> <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com> <561E868A.90502@alum.mit.edu> <CABcZeBP8B3k27b5T6-qyDJcckFsPS+PR-Pw_f41FRjejTvubcA@mail.gmail.com>
From: Paul Kyzivat <pkyzivat@alum.mit.edu>
Message-ID: <561E9682.3040706@alum.mit.edu>
Date: Wed, 14 Oct 2015 13:53:06 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <CABcZeBP8B3k27b5T6-qyDJcckFsPS+PR-Pw_f41FRjejTvubcA@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20140121; t=1444845187; bh=rN8BMqMYapqjZvANGjvOh2ZS+3k2kI/OphhI2qnz0TA=; h=Received:Received:Subject:To:From:Message-ID:Date:MIME-Version: Content-Type; b=uW3QTrT0d545R4FzBL49TxbFc7oytGNdTxbSaJ3XBXiycGk4qOi+w6GGUAvn3RHin xnwLSPssLEmB7Msy+N9QvjEyvdcsa/1mzaMf5UAlJjEUvoc7K4NQ1DdEoGxAGHdCyb j401xQRTm863Mhg7dnrRrIVpXkxb+srTibISUjtNInKEUaSuWN5vDqVrFUhP+YhO3c W7bRgyx0Ms4jvrPxrnL35Kv1O+6xTrPnrmLpJCZH8YcO8ePa4YQ3unHsR1AC1jdoP1 Ww7R/EMJ/vQv+zKAxerWqo9I7nXwrIiTKimPKm5d4/a6/99Jm19p9WjjICEeCo4ars lRT3dUt3LkFMQ==
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/i5YxyoaeuCVZPYpn0BeRdYGtR50>
Cc: perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 17:53:09 -0000

On 10/14/15 1:04 PM, Eric Rescorla wrote:

>         Right, but my point is that absent signature, you can't stop them if
>         they collude
>         with any user.
>
>     Do you mean that if the MDD collaborates with a user then it can
>     impersonate *that* user?
>
> No. I mean that if the MDD collaborates as a user, it can impersonate
> any user.

That is unfortunate! (It seems like a highly plausible scenario - that 
the operator of the MDD could arrange to get permitted to participate.) 
I don't understand how that works. If that is possible, doesn't it also 
mean than any user can impersonate any other user?

	Thanks,
	Paul


From nobody Wed Oct 14 11:06:47 2015
Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C2201AD09C for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 11:06:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zjhm56uWrawV for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 11:06:45 -0700 (PDT)
Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9E511A90F0 for <perc@ietf.org>; Wed, 14 Oct 2015 11:06:44 -0700 (PDT)
X-AuditID: c1b4fb2d-f79626d000004282-01-561e99b27b6c
Received: from ESESSHC021.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 00.19.17026.2B99E165; Wed, 14 Oct 2015 20:06:42 +0200 (CEST)
Received: from [127.0.0.1] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.83) with Microsoft SMTP Server id 14.3.248.2; Wed, 14 Oct 2015 20:06:42 +0200
To: Paul Kyzivat <pkyzivat@alum.mit.edu>, Eric Rescorla <ekr@rtfm.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu> <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com> <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com> <561E868A.90502@alum.mit.edu> <CABcZeBP8B3k27b5T6-qyDJcckFsPS+PR-Pw_f41FRjejTvubcA@mail.gmail.com> <561E9682.3040706@alum.mit.edu>
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
Message-ID: <561E99B0.2070000@ericsson.com>
Date: Wed, 14 Oct 2015 20:06:40 +0200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <561E9682.3040706@alum.mit.edu>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrHLMWRmVeSWpSXmKPExsUyM+Jvje6mmXJhBp8nW1useH2O3WL1wumM Fis2HGB1YPb4+/4Dk8eSJT+ZPCY/bmMOYI7isklJzcksSy3St0vgypi0dwtrQaNAxeG1PYwN jKd4uhg5OSQETCSaNr9jgrDFJC7cW8/WxcjFISRwlFFi4cHLbCAJIYHljBJPOoNBbGEBW4mj r8+BNYgIuEl8fzyLFaJhOovE/m0rwBLMAsIS71atYwax2QQsJG7+aAQbxCugLXF0zVZGEJtF QFXi5tMesHpRgRiJ95tWMULUCEqcnPmEBcTmFNCRON0NUs8BNNNe4sHWMojx8hLNW2czQ9ym LdHQ1ME6gVFwFpLuWQgds5B0LGBkXsUoWpxaXJybbmSsl1qUmVxcnJ+nl5dasokRGMAHt/zW 3cG4+rXjIUYBDkYlHl6F7bJhQqyJZcWVuYcYpTlYlMR5W5gehAoJpCeWpGanphakFsUXleak Fh9iZOLglGpgrM9nf8RfM3fDXvdo0Vtb186M4RUUecZ6dO3jK1nTljNt+ntv7xelSzEppTtY Gyed22djnsmxtP1v/Yc9ktLfTv7Tyf83/XRYY8+pNP1Pk2b+PRn7aENaB3fV79zmD1/vxs8y MKxtmb7+ptp/qW3zzdv8qpjPV7x62HMp2XTxO64vJ74dq1r1RkyJpTgj0VCLuag4EQDDTN/s QQIAAA==
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/qNIAo_TBm2rxAAcT3x7yC797m1s>
Cc: perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 18:06:46 -0000

Den 2015-10-14 kl. 19:53, skrev Paul Kyzivat:
> On 10/14/15 1:04 PM, Eric Rescorla wrote:
>
>>         Right, but my point is that absent signature, you can't stop
>> them if
>>         they collude
>>         with any user.
>>
>>     Do you mean that if the MDD collaborates with a user then it can
>>     impersonate *that* user?
>>
>> No. I mean that if the MDD collaborates as a user, it can impersonate
>> any user.
>
> That is unfortunate! (It seems like a highly plausible scenario - that
> the operator of the MDD could arrange to get permitted to participate.)
> I don't understand how that works. If that is possible, doesn't it also
> mean than any user can impersonate any other user?
>

Yes, that is downside of having to work with group keys. If I remember 
correctly it was EKR that brought up that with the improvements in 
processing and in crypto it is now feasible to provide identity 
signatures on RTP packet level, but there is of course overhead.

The security of the conference really hinges on that you perform secure 
authorization when handling out the EKT master key. However we already 
now know we will have multiple models for this.

One need the adhoc WebRTC conference to work, where everyone may only 
have a secret token as proof or rights to join.

We want to have cases where users have identities they can assert to be 
checked against a participant roster.

There are going to be differences here. But the actual security 
properties will depend on who you give the master key to.

Cheers

Magnus Westerlund

----------------------------------------------------------------------
Services, Media and Network features, Ericsson Research EAB/TXM
----------------------------------------------------------------------
Ericsson AB                 | Phone  +46 10 7148287
Färögatan 6                 | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------


From nobody Wed Oct 14 11:40:59 2015
Return-Path: <ekr@rtfm.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 905841B29BE for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 11:40:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level: 
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jcYrYAlFaaAC for <perc@ietfa.amsl.com>; Wed, 14 Oct 2015 11:40:56 -0700 (PDT)
Received: from mail-yk0-f180.google.com (mail-yk0-f180.google.com [209.85.160.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3FD01A6EFB for <perc@ietf.org>; Wed, 14 Oct 2015 11:40:55 -0700 (PDT)
Received: by ykey125 with SMTP id y125so56071935yke.3 for <perc@ietf.org>; Wed, 14 Oct 2015 11:40:55 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=0Z+YCs0QLLTBd/uNow4syyWxheAFFAVs8D7yRM+lku4=; b=eBCOGPSqZA95W9EhS46RkBCrg3KxNJhv9zgX47u8/QV9m0TOhZGqEtatlQIXjjiOx1 lpdV23F+D/g4Prq7tnzZAGaC6dvMJBAzA0JMPyeLjip7TN6rQ6woEjopr19Ae1IJ+A3m VHeFLV2Hc3PcZqO5Ylli2HZV3SimSz0PmezIwp2c9nwtsLJG0OkOQgkE1BlrZj2pDnCT 7hnyFw5ISTMoJ9ekLVEfxrsbINTrKgyFsOPiqLsmqCs7mSpqw2I3LZ2DGOZy4vmfNVeB 3jiCWNcxl+FUKJwOWAlvKw9UEhvmerLSCpRmq7ooseuMxMXZKs5SzvtSXW051T677wCo 5jDA==
X-Gm-Message-State: ALoCoQl8udyOFT42hv8m34c5aMDAhKjcXu6bDnigk2plwaQbGnx4NtgwAnuSs/A1lVBPkZt9IP+O
X-Received: by 10.13.193.133 with SMTP id c127mr3429472ywd.79.1444848055160; Wed, 14 Oct 2015 11:40:55 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.129.114.85 with HTTP; Wed, 14 Oct 2015 11:40:15 -0700 (PDT)
In-Reply-To: <561E9682.3040706@alum.mit.edu>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu> <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com> <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com> <561E868A.90502@alum.mit.edu> <CABcZeBP8B3k27b5T6-qyDJcckFsPS+PR-Pw_f41FRjejTvubcA@mail.gmail.com> <561E9682.3040706@alum.mit.edu>
From: Eric Rescorla <ekr@rtfm.com>
Date: Wed, 14 Oct 2015 11:40:15 -0700
Message-ID: <CABcZeBMi3NiWxQGF2p0hg5edjAtOfE6b=16WZ=_cU8ovDR1AdA@mail.gmail.com>
To: Paul Kyzivat <pkyzivat@alum.mit.edu>
Content-Type: multipart/alternative; boundary=001a114e761e154652052214e76b
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/O4eeHbFmTToeGZ7EYlsmh_esD5c>
Cc: perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Oct 2015 18:40:57 -0000

--001a114e761e154652052214e76b
Content-Type: text/plain; charset=UTF-8

On Wed, Oct 14, 2015 at 10:53 AM, Paul Kyzivat <pkyzivat@alum.mit.edu>
wrote:

> On 10/14/15 1:04 PM, Eric Rescorla wrote:
>
>         Right, but my point is that absent signature, you can't stop them
>> if
>>         they collude
>>         with any user.
>>
>>     Do you mean that if the MDD collaborates with a user then it can
>>     impersonate *that* user?
>>
>> No. I mean that if the MDD collaborates as a user, it can impersonate
>> any user.
>>
>
> That is unfortunate! (It seems like a highly plausible scenario - that the
> operator of the MDD could arrange to get permitted to participate.)


I thought it was common knowledge that this was a property of symmetric-key
systems.



> I don't understand how that works.


Because integrity is provided by MACs, in order to verify your message, I
also need to be able to generate a valid message. I therefore construct
a message with your identity (SSRC) in it and send it to the MDD who
forwards it.


If that is possible, doesn't it also mean than any user can impersonate any
> other user?
>

If the MDD has hop-by-hop authentication it can filter out messages with
bogus claimed identities. If not, then yes, this attack is possible.

-Ekr


        Thanks,
>         Paul
>
>

--001a114e761e154652052214e76b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Wed, Oct 14, 2015 at 10:53 AM, Paul Kyzivat <span dir=3D"ltr">&lt;<a=
 href=3D"mailto:pkyzivat@alum.mit.edu" target=3D"_blank">pkyzivat@alum.mit.=
edu</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=3D"=
">On 10/14/15 1:04 PM, Eric Rescorla wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Right, but my point is that absent signature, y=
ou can&#39;t stop them if<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 they collude<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 with any user.<br>
<br>
=C2=A0 =C2=A0 Do you mean that if the MDD collaborates with a user then it =
can<br>
=C2=A0 =C2=A0 impersonate *that* user?<br>
<br>
No. I mean that if the MDD collaborates as a user, it can impersonate<br>
any user.<br>
</blockquote>
<br></span>
That is unfortunate! (It seems like a highly plausible scenario - that the =
operator of the MDD could arrange to get permitted to participate.)</blockq=
uote><div><br></div><div>I thought it was common knowledge that this was a =
property of symmetric-key</div><div>systems.</div><div><br></div><div>=C2=
=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;borde=
r-left:1px #ccc solid;padding-left:1ex"> I don&#39;t understand how that wo=
rks.</blockquote><div><br></div><div>Because integrity is provided by MACs,=
 in order to verify your message, I</div><div>also need to be able to gener=
ate a valid message. I therefore construct</div><div>a message with your id=
entity (SSRC) in it and send it to the MDD who</div><div>forwards it.</div>=
<div><br></div><div><br></div><blockquote class=3D"gmail_quote" style=3D"ma=
rgin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> If that is po=
ssible, doesn&#39;t it also mean than any user can impersonate any other us=
er?<br></blockquote><div><br></div><div>If the MDD has hop-by-hop authentic=
ation it can filter out messages with</div><div>bogus claimed identities. I=
f not, then yes, this attack is possible.</div><div><br></div><div>-Ekr</di=
v><div><br></div><div><br></div><blockquote class=3D"gmail_quote" style=3D"=
margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Thanks,<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Paul<br>
<br>
</blockquote></div><br></div></div>

--001a114e761e154652052214e76b--


From nobody Thu Oct 15 07:29:09 2015
Return-Path: <ron.even.tlv@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DFA51B32C2 for <perc@ietfa.amsl.com>; Thu, 15 Oct 2015 07:29:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.1
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9JhPWlH_xO_o for <perc@ietfa.amsl.com>; Thu, 15 Oct 2015 07:29:06 -0700 (PDT)
Received: from mail-lf0-x22d.google.com (mail-lf0-x22d.google.com [IPv6:2a00:1450:4010:c07::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46C051B32C3 for <perc@ietf.org>; Thu, 15 Oct 2015 07:29:06 -0700 (PDT)
Received: by lfaz124 with SMTP id z124so29569449lfa.1 for <perc@ietf.org>; Thu, 15 Oct 2015 07:29:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=from:to:subject:date:message-id:mime-version:content-type :thread-index:content-language; bh=kv0fPlWXsVD4KHvxZrw5y8uSkqdKkUuF+FtMlV4Awl0=; b=MKV7CYDWvZcOWsrfInJFLp6rdqCDzfRXfrEwg7IOHK1MTmIE7ae6I5NCHAZ0pMn4RC 0vnzYgN5Y/4DzbxpEp38q16umES7JjmquZy7uECuz/4xyAEKlNEyC6ySM7VF6oc7yPlB SHC5MWnV4KcuQ7HRP453sY2aFkca4kmJjP6knJH5eHXuw7oMfnQMJij3+6OUmzR/9uUb mZ0XryNM/VrvQKV+3Pu6RtFNav7mns5xiSZh4tIVi/0FoNnVe/GFaucSONvJ9c+YylxQ ebrneP5pmLmyqPB5t9Q7vUFxCqMJSdsE3R4okW5PMrlsVNbfpvYDtnJQx5KA7zMPrH1/ zHmw==
X-Received: by 10.25.20.24 with SMTP id k24mr2564567lfi.117.1444919343361; Thu, 15 Oct 2015 07:29:03 -0700 (PDT)
Received: from RoniPC (bzq-109-65-15-14.red.bezeqint.net. [109.65.15.14]) by smtp.gmail.com with ESMTPSA id e13sm2127838lfb.4.2015.10.15.07.29.01 for <perc@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 15 Oct 2015 07:29:02 -0700 (PDT)
From: "Roni Even" <ron.even.tlv@gmail.com>
To: <perc@ietf.org>
Date: Thu, 15 Oct 2015 17:28:58 +0300
Message-ID: <05be01d10755$d54f1780$7fed4680$@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_05BF_01D1076E.FA9DD620"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AdEHVdRhid8IC46CRwKUVqlZZbaCOQ==
Content-Language: he
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/SOKMBM7hzGpjSIo4EzXdwxMeFIU>
Subject: [Perc] MDD conference managment and poilcies requirements
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Oct 2015 14:29:08 -0000

This is a multipart message in MIME format.

------=_NextPart_000_05BF_01D1076E.FA9DD620
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,

Looking at the discussion on the security requirement I was trying to
understand if we are discussing an MDD (media distribution device) that is
only handling media and has no conference control layer. 

The discussion on the requirements goes to users authentication and
conference roster and not only to media distribution. 

So is we are talking also about the conference management (framework mention
voice activated and other policies e.g. user selected) than it will be good
to agree what is the trust level of the conference management, is it part of
the MDD which will make it more of an MCU or is conference roster or user
authentication out of scope?

 

Roni


------=_NextPart_000_05BF_01D1076E.FA9DD620
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta =
http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 14 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue =
vlink=3Dpurple><div class=3DWordSection1><p =
class=3DMsoNormal>Hi,<o:p></o:p></p><p class=3DMsoNormal>Looking at the =
discussion on the security requirement I was trying to understand if we =
are discussing an MDD (media distribution device) that is only handling =
media and has no conference control layer. <o:p></o:p></p><p =
class=3DMsoNormal>The discussion on the requirements goes to users =
authentication and conference roster and not only to media distribution. =
<o:p></o:p></p><p class=3DMsoNormal>So is we are talking also about the =
conference management (framework mention voice activated and other =
policies e.g. user selected) than it will be good to agree what is the =
trust level of the conference management, is it part of the MDD which =
will make it more of an MCU or is conference roster or user =
authentication out of scope?<o:p></o:p></p><p =
class=3DMsoNormal><o:p>&nbsp;</o:p></p><p =
class=3DMsoNormal>Roni<o:p></o:p></p></div></body></html>
------=_NextPart_000_05BF_01D1076E.FA9DD620--


From nobody Thu Oct 15 07:39:15 2015
Return-Path: <ron.even.tlv@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 436531B3315 for <perc@ietfa.amsl.com>; Thu, 15 Oct 2015 07:39:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a0b-oQxROpy7 for <perc@ietfa.amsl.com>; Thu, 15 Oct 2015 07:39:12 -0700 (PDT)
Received: from mail-lf0-x234.google.com (mail-lf0-x234.google.com [IPv6:2a00:1450:4010:c07::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE3AF1B3321 for <perc@ietf.org>; Thu, 15 Oct 2015 07:39:11 -0700 (PDT)
Received: by lffy185 with SMTP id y185so30061403lff.2 for <perc@ietf.org>; Thu, 15 Oct 2015 07:39:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=from:to:references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding:thread-index :content-language; bh=xDziKIIBUNKnIhzuTlX68wwxaXlhZOLMo5RetaAmNYw=; b=kcxwpyWiMwbE/mVeiolOR1kIoHlWJRxHkicaJSDBMTsCa0NDMQ5SV8tN53VHtvC7fY RIuFotLsJ4byFnYyPsrj7jYX7Iqx9BBuVh6XorUt7sUwqoXKnEq6V0JNfXdLIO93nxk/ F5wECj+n4ANitv0Ax5JIQ2o1nRw9hOg9RIfUSiPoPQA+RMAYpae+sTOWEWF1gQvMHwyK fwQvYyrw8y6gZ9i4y8gMs22xxOZt1qUysGAcg3vFbmzFxd8+HZu2DdsQHUCGZ+pYVSL7 ah8UfojKJzME1m/uZb2xb/MpdwWaqDU57IobkbqjD5t45yHeEFpspqNSFkueuhcsHb7j d31Q==
X-Received: by 10.25.16.195 with SMTP id 64mr3157472lfq.62.1444919949764; Thu, 15 Oct 2015 07:39:09 -0700 (PDT)
Received: from RoniPC (bzq-109-65-15-14.red.bezeqint.net. [109.65.15.14]) by smtp.gmail.com with ESMTPSA id wv7sm2089506lbb.45.2015.10.15.07.39.08 (version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 15 Oct 2015 07:39:08 -0700 (PDT)
From: "Roni Even" <ron.even.tlv@gmail.com>
To: "'Paul Kyzivat'" <pkyzivat@alum.mit.edu>, <perc@ietf.org>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu>
In-Reply-To: <561E6D71.2080407@alum.mit.edu>
Date: Thu, 15 Oct 2015 17:39:05 +0300
Message-ID: <05c301d10757$3edb3e80$bc91bb80$@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQHGigODeYfyficAHiGmmj/aX0+hVAHNVsTWAUCcnMABDr0rW55gs+nQ
Content-Language: he
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/9a_l4aSzM3695KB1vsQYHxmUaMc>
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Oct 2015 14:39:14 -0000

On 10/14/15 10:33 AM, Phillip Hallam-Baker wrote:

> I don't want a trusted MDD. If you have to trust the service you 
> haven't got end-to-end by definition.

Surely you must trust it to *some* extent. In particular you trust it to
allow the intended participants to connect, and to do the switching
according to the policy you give it.

Roni: The MDD does not connect users, it is a media layer distribution point
using some policy from a conference management entity that should be trusted
to some extent, I feel that this part of the solution architecture is not
specified also in Paul Jones framework document.

The issue is to properly divide up the responsibilities and trust in a
reasonable way.

	Thanks,
	Paul

_______________________________________________
Perc mailing list
Perc@ietf.org
https://www.ietf.org/mailman/listinfo/perc


From nobody Thu Oct 15 14:26:06 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 577C01A21B9 for <perc@ietfa.amsl.com>; Thu, 15 Oct 2015 14:26:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.711
X-Spam-Level: 
X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IOv2Or27OT2B for <perc@ietfa.amsl.com>; Thu, 15 Oct 2015 14:26:03 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3C031A2182 for <perc@ietf.org>; Thu, 15 Oct 2015 14:26:02 -0700 (PDT)
Received: from [156.106.229.228] ([156.106.229.228]) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t9FLQ07w025661 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 15 Oct 2015 17:26:01 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1444944361; bh=mejzDs1wh/iQXJAngO1F/JNURczPDsq7gwyV0tOEalE=; h=From:To:Subject:Cc:Date:Reply-To; b=Q5oB8qyJXstG2zeaB9CjNA+giEd/6O7MzIJGXBd3crQ0zDtHkqA11+gRLtvPCocwZ vhCvNKcKhCaksQG/mKeq5J8p5Rw13Xr0UC5hulqkO+KXvd0eqxWY1tt4dOizANdYJU Z1aF43e8YPuWmIztMaRrAoSQag/Jtu2ZmEg9tAeM=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "perc@ietf.org" <perc@ietf.org>
Date: Thu, 15 Oct 2015 21:26:02 +0000
Message-Id: <ema7661f0a-5d18-4db4-8b70-1c36f728dd59@helsinki>
User-Agent: eM_Client/6.0.23421.0
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------=_MB96BF7235-0C63-4EF3-8814-E603ED5EC66C"
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Thu, 15 Oct 2015 17:26:01 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/Wf6zD7qePCDAMq7b5rtKGHpw5Pc>
Cc: Eric Rescorla <ekr@rtfm.com>
Subject: [Perc] Requirements document in markdown on GitHub
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Oct 2015 21:26:04 -0000

--------=_MB96BF7235-0C63-4EF3-8814-E603ED5EC66C
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Folks,

Some wanted to be able to make edits by way of pull requests.  I've=20
moved the requirements document from Word to markdown.  The tool I=20
decided to use was mmark, as it most closely resembled the syntax on=20
GitHub.  I put the .md source and the derived .xml and .txt files into=20
the repository here: https://github.com/paulej/perc-requirements.

Paul

--------=_MB96BF7235-0C63-4EF3-8814-E603ED5EC66C
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD>
<STYLE id=3DeMClientCss>
blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px;=
 padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px;=
 padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; paddin=
g-top: 0px; }
.plain pre, .plain tt { font-family: monospace; font-size: 100%; font-weigh=
t: normal; font-style: normal; white-space: pre-wrap; }
a img { border: 0px; }body {font-family: Calibri;font-size: 11pt;}
.plain pre, .plain tt {font-family: Calibri;font-size: 11pt;}</STYLE>
</HEAD>
<BODY>Folks,<BR>&nbsp;<BR>Some wanted to be able to make edits by way of=
 pull requests.&nbsp; I've moved the requirements document from Word to =
markdown.&nbsp; The tool I decided to use was mmark, as it most closely =
resembled the syntax on GitHub.&nbsp; I put the .md source and the derived=
 .xml and .txt files into the repository here: <A href=3D"https://github.co=
m/paulej/perc-requirements">https://github.com/paulej/perc-requirements</A>=
.<BR>&nbsp;<BR>Paul<BR>&nbsp;</BODY></HTML>
--------=_MB96BF7235-0C63-4EF3-8814-E603ED5EC66C--


From nobody Fri Oct 16 02:19:27 2015
Return-Path: <tommy@huawei.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD6511B347C for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 02:19:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.211
X-Spam-Level: 
X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O0x881ZjY0eR for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 02:19:23 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D73DC1B3474 for <perc@ietf.org>; Fri, 16 Oct 2015 02:19:22 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BYW62067; Fri, 16 Oct 2015 09:19:20 +0000 (GMT)
Received: from SZXEMA412-HUB.china.huawei.com (10.82.72.71) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 16 Oct 2015 10:19:05 +0100
Received: from SZXEMA508-MBS.china.huawei.com ([169.254.8.169]) by SZXEMA412-HUB.china.huawei.com ([10.82.72.71]) with mapi id 14.03.0235.001; Fri, 16 Oct 2015 17:18:02 +0800
From: "Yangweiwei (Tommy)" <tommy@huawei.com>
To: "perc@ietf.org" <perc@ietf.org>
Thread-Topic: New Version Notification for draft-groves-perc-clue-00.txt
Thread-Index: AQHRB+rKaKSN3UTS9EaSuIaAPaj8Zp5txlA6
Date: Fri, 16 Oct 2015 09:18:02 +0000
Message-ID: <993C82EC399524478C759A9B293D96EEA04D6649@szxema508-mbs.china.huawei.com>
References: <20151016081504.11564.67164.idtracker@ietfa.amsl.com>
In-Reply-To: <20151016081504.11564.67164.idtracker@ietfa.amsl.com>
Accept-Language: en-US, zh-CN
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.47.87.12]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/GmbMxaLDUOsWzG8FjCIUilZ7LaM>
Cc: "rlb@ipv.sx" <rlb@ipv.sx>, "suhasietf@gmail.com" <suhasietf@gmail.com>
Subject: [Perc] New Version Notification for draft-groves-perc-clue-00.txt
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Oct 2015 09:19:25 -0000

Hello PERC experts,=0A=
=0A=
We have just submitted a new draft to PERC working group, to formulate an i=
nitial discussion of the relationship between PERC and CLUE.=0A=
=0A=
The issue of telepresence endpoints using CLUE in PERC architecture is docu=
mented in the Charter of PERC. The idea of this draft is to show the backgr=
ound to CLUE and clarify the relations.=0A=
=0A=
Please read the draft, and let we know your interests.=0A=
=0A=
@Suhas, Richard, we also like to show the ideas of this draft at the IETF#9=
4, please help to reserve a slot for it.=0A=
=0A=
Thanks.=0A=
=0A=
Best Regards,=0A=
Tommy=0A=
=0A=
________________________________________=0A=
From: internet-drafts@ietf.org [internet-drafts@ietf.org]=0A=
Sent: Friday, October 16, 2015 16:15=0A=
To: Roni Even; Yangweiwei (Tommy); Roni Even; Yangweiwei (Tommy); Christian=
 Groves; Christian Groves=0A=
Subject: New Version Notification for draft-groves-perc-clue-00.txt=0A=
=0A=
A new version of I-D, draft-groves-perc-clue-00.txt=0A=
has been successfully submitted by Christian Groves and posted to the=0A=
IETF repository.=0A=
=0A=
Name:           draft-groves-perc-clue=0A=
Revision:       00=0A=
Title:          Usage of CLUE with PERC=0A=
Document date:  2015-10-16=0A=
Group:          Individual Submission=0A=
Pages:          13=0A=
URL:            https://www.ietf.org/internet-drafts/draft-groves-perc-clue=
-00.txt=0A=
Status:         https://datatracker.ietf.org/doc/draft-groves-perc-clue/=0A=
Htmlized:       https://tools.ietf.org/html/draft-groves-perc-clue-00=0A=
=0A=
=0A=
Abstract:=0A=
   This document provides an initial discussion of the relationship=0A=
   between PERC and CLUE.  It seeks to identify any potential impacts=0A=
   or/and enhancement to the way that CLUE is used in the PERC=0A=
   architecture.=0A=
=0A=
=0A=
=0A=
=0A=
Please note that it may take a couple of minutes from the time of submissio=
n=0A=
until the htmlized version and diff are available at tools.ietf.org.=0A=
=0A=
The IETF Secretariat=0A=
=0A=


From nobody Fri Oct 16 02:24:03 2015
Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46C561B3480 for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 02:24:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mpNyDxzB4YQg for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 02:23:59 -0700 (PDT)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CFB91B343D for <perc@ietf.org>; Fri, 16 Oct 2015 02:23:58 -0700 (PDT)
X-AuditID: c1b4fb30-f79626d000006adf-0f-5620c22c8ca7
Received: from ESESSHC001.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 2B.B6.27359.C22C0265; Fri, 16 Oct 2015 11:23:56 +0200 (CEST)
Received: from [127.0.0.1] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.23) with Microsoft SMTP Server id 14.3.248.2; Fri, 16 Oct 2015 11:23:56 +0200
To: Roni Even <ron.even.tlv@gmail.com>, 'Cullen Jennings' <fluffy@iii.ca>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se> <D9F8A59D-94F4-46C0-A96D-F1F292C681C7@iii.ca> <031e01d104f7$8eb5fe20$ac21fa60$@gmail.com>
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
Message-ID: <5620C22B.60001@ericsson.com>
Date: Fri, 16 Oct 2015 11:23:55 +0200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <031e01d104f7$8eb5fe20$ac21fa60$@gmail.com>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrDLMWRmVeSWpSXmKPExsUyM+Jvja7OIYUwg62LNC0+rP/BaLF64XRG i7/tzA7MHjtn3WX3WLLkJ5PH5fMfGQOYo7hsUlJzMstSi/TtErgytje8Zi34mVGx/NR0tgbG FSFdjJwcEgImEg175jFB2GISF+6tZ+ti5OIQEjjKKDHvVAsThLOcUWL25CnsIFXCAs4S12ad ZO5i5OAQEfCUuHkOqmYlo8SyO88YQWqYBRoYJZqP2YLYbAIWEjd/NLKB2LwCmhL7Hi5gAell EVCVOPVZByQsKhAj8X7TKkaIEkGJkzOfsIDYnECtdy58YwMpZxawl3iwtQxiurxE89bZzCC2 kIC2RENTB+sERsFZSLpnIXTMQtKxgJF5FaNocWpxUm66kZFealFmcnFxfp5eXmrJJkZg8B7c 8ttgB+PL546HGAU4GJV4eBWiFMKEWBPLiitzDzFKc7AoifM2Mz0IFRJITyxJzU5NLUgtii8q zUktPsTIxMEp1cDY+a/muEJer1DYXs92mdyTDdcSdyUaP74zg7XJcO9nG7aV99J+vuGzZeZg CYmYnSL9q8vm6ssdxyfdf/qo484sji9sU/mTj/k+MZ1kVSS9t+hp+j1Rfm2mLZ2LWDvfb5v0 Vt1w7Y6Di/7fzN/Oqbsl81xOVLzelTOs00QaosIlp+yIl7b6tm2yEktxRqKhFnNRcSIAjiX8 +T8CAAA=
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/M3CWm1acwADRICGAotgvPdt9ynE>
Cc: perc@ietf.org, =?UTF-8?Q?'Mats_N=c3=a4slund'?= <mats.naslund@ericsson.com>, 'John Mattsson' <john.mattsson@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Oct 2015 09:24:02 -0000

Den 2015-10-12 kl. 16:09, skrev Roni Even:
> Hi,
> Quick question about finding the original SSRC in the CSRC, what will happen
> if going through cascaded media switching mixers?

Hi,

I expect that the second MDD to copy the CSRC field from the incoming 
packet to the outgoing to maintain the original. It MUST not use the 
SSRC from the incoming as the value, when the incoming packet has an 
CSRC value, to put in the CSRC field for the outgoing.

Cheers

Magnus

>
> Roni
>
> -----Original Message-----
> From: Perc [mailto:perc-bounces@ietf.org] On Behalf Of Cullen Jennings
> Sent: Monday, October 12, 2015 4:29 PM
> To: Magnus Westerlund
> Cc: perc@ietf.org; Mats Näslund; John Mattsson
> Subject: Re: [Perc] Review of needed information for inner security
>
>
>> On Oct 8, 2015, at 5:18 AM, Magnus Westerlund
> <magnus.westerlund@ericsson.com> wrote:
>>
>> Hi,
>>
>> John, Mats and I have spent some time reviewing what information we
>> see as needed for the RTP payload security, hence called inner
>> security. We also in the end have a proposal for how to include that
> information.
>>
>> So we have considered the three topologies that are relevant for PERC.
>> These three as named in
>>
> https://datatracker.ietf.org/doc/draft-ietf-avtcore-rtp-topologies-update/:
>>
>> 1. Relay - Transport Translator (Section 3.5.1) 2. Media Switching
>> Mixer (Section 3.6.2) 3. Selective Forwarding Middlebox (Section 3.7)
>>
>> First we look how the SSRCs are handled by these middleboxes. This is
>> important as it affects how one can track the media streams flowing
>> through the system.
>>
>> So the Relay (1) performs no manipulation on the RTP level. Thus, a
>> packet being sent will arrive at the receiver except for transport
>> losses. This results in constant SSRCs end to end between sender and
>> receiver.
>>
>>
>> The Media Switching Mixer (2) has some important properties. As the
>> SSRCs used towards the receiver from the RTP mixer (MDD) is task/role
>> based, rather than related to original source, the inner security
>> context identification can't be made based on the SSRC, rather an
>> additional field has to be used. It is important to note that the
>> sequence of payloads for this stream is created by switching between
>> the available incoming streams. At any given point in time one
>> specific stream of inner payloads are forwarded for each task/role.
>> Which it is can be changed at almost any point. The CSRC would be the
>> normal method for identifying the original media contributor in a non
>> PERC context. In a PERC context it seems reasonable to also use CSRC.
>> Especially, as there can't be any media mixing due to the protected
>> inner payloads, there can only be one CSRC for any payload. So in this
>> case the SSRC has no relation to the media sources, and instead it is
>> CSRC (or equivalent) that would have a relation with the media source.
>>
>> The SFM (3) although selectively forwarding media, it does have a one
>> to one handling of SSRCs, one SSRC arriving at a SFM will have its own
>> SSRC going out. Note that remapping may occur so that incoming and
>> outgoing SSRC is different.
>>
>> The remapping of SSRC could occur also in the switching RTP mixer,
>> although it is not a recommended behaviour.
>>
>> What was discussed last design team meeting was the view that we want
>> to enable the remapping of SSRC when needed. It is a simple way of
>> dealing with SSRC collisions in SFMs for example. However, one need to
>> be aware of the potential downside. First, by allowing re-mapping we
>> don't have a global stable identifier towards the originating
>> end-point and its identification of the media stream. This is
>> something that at least on a higher layer is needed to prevent
>> substitution attacks, where the MDD attempts to replace one endpoint's
>> media streams with another endpoints stream.
>>
>> We also note that if end-to-end protected RTCP messages are used, not
>> having a global coordinated SSRC space within a conference, there will
>> be identification issues, and likely some other id space would be needed.
>>
>> The next RTP header field that we considered was the RTP sequence
>> number. At the sender side, the RTP sequence number will be directly
>> related to the inner payload. However, that relation is not retained
>> across an MDD. An RTP switching mixer, will create an RTP sequence
>> number solely related to the out going created stream. As that is a
>> switched combined stream the corresponding inner sequence number will
>> jump back and forth at each switch, and the relative offset will
>> change with each switch.
>>
>> For the SFM the outer RTP sequence number for an outgoing stream will
>> be counting the inner payloads selected to be sent (forwarded). Thus,
>> the offset changes at each time a decision to forward or not forward is
> made.
>>
>> The Payload Type field is dependent on the signalling, and likely have
>> local assignment only. Each joining endpoint will negotiate common
>> sets of payload types with the signaling server representing the
> conference.
>> However, the signalling server when using offer/answer not force an
>> endpoint to use a particular PT field value to represent a commonly
>> used codec configuration. Thus, PT rewriting will occur at the MDDs,
>> independently of the topology.
>>
>> The RTP marker bit is actually a field owned by the payload format,
>> and thus are tightly connected to the inner payload. We see that this
>> field is not possible to modify by the MDD, instead it should be
>> included part of the payload's integrity protected data.
>>
>> The padding flag is tightly connected to the inner payload and should
>> not be modified by the MDD, instead it should be included part of the
>> payload's integrity protected data.
>>
>> The Timestamp field also relates to the presentation timeline for the
>> outgoing stream. Here there is a difference between the SFM, which
>> maintains the original senders timeline, and the RTP switching mixer
>> that needs to create its outgoing streams timeline in a consistent way.
>> This requires rewriting the timestamp, but maintain the inter spacing
>> between media frames within the inner payload.
>
> I agree with above and let me summarize as requirements are the MDD can
> optionally modify
>
> SSRC, Seq_no, PT, timestamp, CC, CSRC
>
> But can not modify: (M) Marker, (P) Padding.
>
> I'm never clear on the many different meanings the M bit has been used for
> so bit harder for me to decide but we can figure that out and ditto for
> padding but what you are proposing sounds like it would work for me.
>
> We should probably make sure we know what we want for V, X,
>
> I would propose V is that as a future extensibility we might allow V to
> modified by MDD but I don't really care.
>
> I think the X bit we need to be modified by MDD so that it can insert things
> like mixer to client levels.
>
>
>>
>>
>> Proposal for how to structure information
>> -----------------------------------------
>> Our proposal for how the above information should be handled and
>> maintained are the following.
>>
>> The inner payload's crypto context is looked up based on the CSRC if
>> that field is present (for RTP switching mixers), else the SSRC.
>
> I view this as for the E3E, we need to be able to find all the bits that are
> used in normal E2E crypto from some new place in the packet. I'm fine with
> finding the original SSRC in CSRC.
>
>>
>> The inner crypto context includes the necessary key (called transport
>> key below) and other crypto information. To prevent attacks we also
>> need a identifier for this particular inner media stream. For this we
>> want to have two parts, one part identifying the endpoint, and another
>> identifying the media stream.
>> The endpoint identifier can either be globally unique and assigned by
>> the master key server, thus enabling a compact field scaled to planned
>> maximum participation in a conference. Alternatively if significant
>> longer randomly picked. An endpoint id assigned by the master key
>> server seems preferable as that enables mapping between the endpoint
>> id and other identifiers meant for humans. The stream id is managed by
>> the endpoint. We foresee that these two IDs are carried by EKT to
> establish this context.
>> The field lengths can be configurable and the used values provided in
>> the key-management protocol for the EKT master key. Thus enabling that
>> most conference to use 1 + 1 byte enabling 256 endpoints which each
>> can have 256 streams. Sufficient for most use cases, and for those use
>> cases that requires more participants or streams one can use longer
>> fields within the conference.
>>
>> The Inner Payload gets an explicit sequence number. We propose 32 bits
>> that counts the number of sent packets using a specific transport key
>> used to protect this inner payload. It is part of the inner payload to
>> keep these close, and minimize the overhead. Using an RTP header
>> extension will in many case have more overhead.
>>
>> We foresee that PERC systems will perform transport re-keying quite
>> frequently, that is why 32-bits will be sufficient, and if that is on
>> its way to wrap, the sending end-point will have to rekey its
>> transport key for this media stream. We note that 32-bits are
>> sufficient also for really high bit-rates. At 3 Gbps using 1200 bytes
>> of payload one need to rekey approximately every 3 hours. Using 24
>> bits would result in rekeying every 53 seconds for this case.
>>
>> To ensure that replay protection is present, and to prevent MDD
>> reordering of packets, one will need to have a sequence number also
>> for the used transport key. That way when one starts using a new
>> transport key, one can reset the inner payload sequence number, thus
>> enabling long lived sessions.
>>
>> For the cases where one wants to prevent joining and leaving
>> participant to decrypt media prior or after joining and leaving
>> respectively then we forsee the need for master key rekeying. Also
>> that needs to be tracked, to prevent replay attacks. Thus also on this
>> level one needs to have a associated sequence number with the master
>> key. When one starts using a new master transport key, the transport
>> key sequence number is reset.
>>
>> The inner payload identification will thus basically be
>> "Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr". The
>> first two will determined through the key management protocol and EKT.
>> Enabling the receiver to determine if a payload is less recent then
>> the latest received one. This enables one to have a short window for
>> accepting older packets to deal with re-order events thus preventing
>> replays. We note that the MDD will be able to delay packets. Thus when
>> switching back to a source select any point between the previous sent
>> and the latest received by the MDD, as the point of continuing
>> transmission. We likely need to discuss if that is a sufficient level
>> of protection. We need to deal with expected levels of transport delay.
>>
>>
>> To summarize our proposal:
>>
>> As part of the inner RTP payload for a particular media stream:
>> - Explicit 32-bit sequence number
>> - Use CSRC/SSRC for context lookup on packet reception.
>>
>> Use EKT for context population per media stream of the following
>> information:
>> -   Endpoint ID + Endpoint specific stream ID
>> -   Transport key used to protect payload
>> -   Transport key sequence number
>>
>> Stream specific context also contain:
>> Highest seen inner payload identifier "Master Sequence nr : Transport
>> Sequence nr. : Packet Sequence nr" and replay window.
>>
>> Key-management for EKT master key
>> - EKT Master key
>> - Master Key sequence number
>> - Field lengths for Endpoint Id and Endpoint Stream ID
>> - Endpoint ID
>>
>> IV includes:
>> - Endpoint ID + Endpoint specific stream ID
>> - Master_Key_seq_nr : Transport_Key_Seq_nr : Inner_Payload_Seq_nr e2e
>> integrity protected information
>> - padding flag
>> - marker bit
>> - payload + padding + pad count (also encrypted)
>> - IV (only Inner_Payload_Seq_nr sent in each packet)
>>
>>
>> Looking forward to feedback on this.
>
> This is inventing a new security scheme for the HBH. My questions is first
> can we just use SRTP for HBH? Any reason it would not work?  It seems to me
> that it will work and if it does, then I get a bit antsy about it inventing
> something new will have any significant advantages.
>
>
>
>
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc
>
>


-- 

Magnus Westerlund

----------------------------------------------------------------------
Services, Media and Network features, Ericsson Research EAB/TXM
----------------------------------------------------------------------
Ericsson AB                 | Phone  +46 10 7148287
Färögatan 6                 | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------


From nobody Fri Oct 16 02:44:57 2015
Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C20B31B34BB for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 02:44:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MRehK6zZMpCa for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 02:44:54 -0700 (PDT)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F8551B34AD for <perc@ietf.org>; Fri, 16 Oct 2015 02:44:53 -0700 (PDT)
X-AuditID: c1b4fb30-f79626d000006adf-32-5620c714b9f3
Received: from ESESSHC017.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 51.9B.27359.417C0265; Fri, 16 Oct 2015 11:44:52 +0200 (CEST)
Received: from [127.0.0.1] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.71) with Microsoft SMTP Server id 14.3.248.2; Fri, 16 Oct 2015 11:44:51 +0200
To: Cullen Jennings <fluffy@iii.ca>
References: <52E4A8FC978E0241AE652516E24CAF00DADF30@ESESSMB309.ericsson.se> <B3D76AB1-5B9B-4F7C-A569-3DA9D5D20E63@iii.ca>
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
Message-ID: <5620C713.8040901@ericsson.com>
Date: Fri, 16 Oct 2015 11:44:51 +0200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <B3D76AB1-5B9B-4F7C-A569-3DA9D5D20E63@iii.ca>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrMLMWRmVeSWpSXmKPExsUyM+Jvja7IcYUwg1uTRCw+rP/BaLF64XRG ByaPJUt+MnlcPv+RMYApissmJTUnsyy1SN8ugStjet9i5oLPYhUXF09iamDcJ9TFyMkhIWAi sf3gFXYIW0ziwr31bF2MXBxCAkcZJfqvvgNLCAksZ5RY8YgXxBYWcJa4NuskM4gtIqAscW7H XWaImmqJB9f/s4HYzAI9jBIfnjCB2GwCFhI3fzSCxXkFtCWaP6xgBbFZBFQl7t3+BRYXFYiR eL9pFSNEjaDEyZlPWEBsTgEriZ7vt4DmcADNtJd4sLUMYry8RPPW2VBrtSUamjpYJzAKzkLS PQuhYxaSjgWMzKsYRYtTi5Ny042M9FKLMpOLi/Pz9PJSSzYxAkP14JbfBjsYXz53PMQowMGo xMOrEKUQJsSaWFZcmXuIUZqDRUmct5npQaiQQHpiSWp2ampBalF8UWlOavEhRiYOTqkGRt8W /9t31xdfXl3/tuHQJ/vgANdpb5ZzfA347nRITf7Q9AVuTmqyfxKr3lRpn/MNN5nRf7ei9MSM i59yPp3xz7OsmD5HYo7H/vNiQVdcZ628eaZhx/f/U1RXWL2Tu9zNWvX4/oyU1Tz+SxYu/rO3 rm7Z0k8WwQycL7WCX7xo2+6q3PXt4DZZNSUlluKMREMt5qLiRADXb9cHNgIAAA==
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/c4EODkw7sJLtA-7_Utv9RIHfyVA>
Cc: "perc@ietf.org" <perc@ietf.org>, =?UTF-8?Q?Mats_N=c3=a4slund?= <mats.naslund@ericsson.com>, John Mattsson <john.mattsson@ericsson.com>
Subject: Re: [Perc] Review of needed information for inner security
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Oct 2015 09:44:55 -0000

Den 2015-10-12 kl. 15:33, skrev Cullen Jennings:
>
>> On Oct 8, 2015, at 5:18 AM, Magnus Westerlund
>> <magnus.westerlund@ericsson.com> wrote:
>>
>> We foresee that PERC systems will perform transport re-keying
>> quite frequently,
>
> for systems that rekey on participants joining or leaving that seems
> likely, but I think we also need to support systems that do not do
> and have one key for the whole session
>

I agree that there will be a set of conferences that don't need the 
protection against a joining endpoint retrospectively decrypt what 
happened prior to it joining.

However, when I say transport key, I really mean the key used the 
end-to-end protection for a specific stream. That is the key we put in 
the inband key-distribution mechanism (EKT). As that must be present and 
capable of handling participants joining, i.e. repeated distribution of 
the key the originating endpoint uses. Thus, performing a rekeying of 
particular stream's key protecting end-to-end will require no 
substantial changes, and it will be a necessary for the higher security 
target. Thus, I assume that EKT will support rekeying.

With that assumption in place, I don't see an issue with using it for 
rekyeing when a end-to-end sequence number wraps. Sure, one probably 
shouldn't need to rekey to frequently, but using every couple of minutes 
for a high-bandwidth flow should have no negative effect.

We derived 32-bits as sufficient based on the highest bit-rate RTP 
payload format that has any bounds, and that is the SMPTE 292M (RFC 
3497) (Yes, raw uncompressed format can go higher) but 3 Bbps appears 
sufficient as a calculation example. Using regular 1500-bytes Ethernet 
with good safety margin we assumed 1200 bytes of payload. That results 
in 312500 packets per second. Using a 32 sequence number would allow it 
to wrap in 13743,9 seconds. So that is clearly sufficient. Using 24 bits 
would wrap it in 53,7 seconds. Which probably works, but a bit short. 
For more modest flows like HQ video at 25 mbps, then the packet rate 
becomes in the order of 2600 packets per second. A 24 bit sequence 
number would last 6450 seconds, i.e. almost 1.8 hours. I note that the 
16-bit sequence number wraps every 25 seconds here.

The idea was really to not have to deal with a ROC in the IV, and 
instead have sufficient amount of bits present in the end-to-end 
sequence number.

Cheers

Magnus Westerlund

----------------------------------------------------------------------
Services, Media and Network features, Ericsson Research EAB/TXM
----------------------------------------------------------------------
Ericsson AB                 | Phone  +46 10 7148287
Färögatan 6                 | Mobile +46 73 0949079
SE-164 80 Stockholm, Sweden | mailto: magnus.westerlund@ericsson.com
----------------------------------------------------------------------


From nobody Fri Oct 16 10:54:35 2015
Return-Path: <pkyzivat@alum.mit.edu>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 325B71B328F for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 10:54:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.235
X-Spam-Level: 
X-Spam-Status: No, score=-1.235 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_SOFTFAIL=0.665] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id avwABQBho6Vi for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 10:54:32 -0700 (PDT)
Received: from resqmta-ch2-12v.sys.comcast.net (resqmta-ch2-12v.sys.comcast.net [IPv6:2001:558:fe21:29:69:252:207:44]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A15141B329B for <perc@ietf.org>; Fri, 16 Oct 2015 10:54:30 -0700 (PDT)
Received: from resomta-ch2-15v.sys.comcast.net ([69.252.207.111]) by resqmta-ch2-12v.sys.comcast.net with comcast id VtuV1r0072Qkjl901tuVv7; Fri, 16 Oct 2015 17:54:29 +0000
Received: from Paul-Kyzivats-MacBook-Pro.local ([50.138.229.151]) by resomta-ch2-15v.sys.comcast.net with comcast id VtuV1r00K3Ge9ey01tuVQS; Fri, 16 Oct 2015 17:54:29 +0000
To: perc@ietf.org
References: <20151016081504.11564.67164.idtracker@ietfa.amsl.com> <993C82EC399524478C759A9B293D96EEA04D6649@szxema508-mbs.china.huawei.com>
From: Paul Kyzivat <pkyzivat@alum.mit.edu>
Message-ID: <562139D4.4010302@alum.mit.edu>
Date: Fri, 16 Oct 2015 13:54:28 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <993C82EC399524478C759A9B293D96EEA04D6649@szxema508-mbs.china.huawei.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20140121; t=1445018069; bh=akj6CHhne0ZJR4wtrPwlmBCB5DeoKpAPcxx28s4z+dg=; h=Received:Received:Subject:To:From:Message-ID:Date:MIME-Version: Content-Type; b=d66spZ1JMOBFtlZbxk32mNMJoJOz48nXjnvCYdzS2FGtuWZU8et5m0QMkjmZj0ebm +CAAL/WhrnvsBay8VaKrLT+DEJKt5bWuFiwfp7l+JlC6NSijvnL4dA5D3H/GURK3Ok 2oho35JIr53GbvmHi+tl2mY8GIsrY508g0oADAC8txwi7qNnX0tE/F7vcE/DlkkhQn CzgzLMLH+bnoYzdMC82bMbPIMCUsT18eYazwj8CmOdWZShHUsARk4g1+D7Hs0hqaBr b35uwz6k4NpXhxFZA/5ePpGPcUz8wdQ3XI7vtkpQJyQvyKQRxVw5V8Fu7f3wpzDKC8 E0uh1bnaDNIHw==
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/CAqI8zuqXpfne3W68zYOhA-nRQ4>
Subject: Re: [Perc] New Version Notification for draft-groves-perc-clue-00.txt
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Oct 2015 17:54:34 -0000

(Those not well informed of CLUE may wish to ignore this message.)

(Disclaimer - I quickly read the document. I might not have fully 
understood it. And I *don't* understand section 5.1.)

IIUC, what is described more or less equates the CLUE MCU with the perc 
MDD. And then the constraints placed on the MDD severely cripple the 
CLUE functionality.

I think this can be improved upon by breaking that association. Instead, 
decompose the CLUE MCU:
- merge the CLUE protocol handling into the trusted KMF for the
   conference.
- put any capture *composition* functions into a trusted device,
   possibly combined with the KMF, or could be separate.
- assign capture *switching* and media distribution functions to
   the MDD.
- expose a control interface between the MCU and the MDD, so that
   the MCC can tell the MDD how to switch and distribute the media.

This means that there is some media processing that can't be delegated 
to the MDD, but it is reduced to what is necessary for composition. This 
is unavoidable since you must examine media to compose it. But it is 
only necessary to generate one copy of each distinct composition - the 
MDD can distribute it to multiple participants.

	Thanks,
	Paul

On 10/16/15 5:18 AM, Yangweiwei (Tommy) wrote:
> Hello PERC experts,
>
> We have just submitted a new draft to PERC working group, to formulate an initial discussion of the relationship between PERC and CLUE.
>
> The issue of telepresence endpoints using CLUE in PERC architecture is documented in the Charter of PERC. The idea of this draft is to show the background to CLUE and clarify the relations.
>
> Please read the draft, and let we know your interests.
>
> @Suhas, Richard, we also like to show the ideas of this draft at the IETF#94, please help to reserve a slot for it.
>
> Thanks.
>
> Best Regards,
> Tommy
>
> ________________________________________
> From: internet-drafts@ietf.org [internet-drafts@ietf.org]
> Sent: Friday, October 16, 2015 16:15
> To: Roni Even; Yangweiwei (Tommy); Roni Even; Yangweiwei (Tommy); Christian Groves; Christian Groves
> Subject: New Version Notification for draft-groves-perc-clue-00.txt
>
> A new version of I-D, draft-groves-perc-clue-00.txt
> has been successfully submitted by Christian Groves and posted to the
> IETF repository.
>
> Name:           draft-groves-perc-clue
> Revision:       00
> Title:          Usage of CLUE with PERC
> Document date:  2015-10-16
> Group:          Individual Submission
> Pages:          13
> URL:            https://www.ietf.org/internet-drafts/draft-groves-perc-clue-00.txt
> Status:         https://datatracker.ietf.org/doc/draft-groves-perc-clue/
> Htmlized:       https://tools.ietf.org/html/draft-groves-perc-clue-00
>
>
> Abstract:
>     This document provides an initial discussion of the relationship
>     between PERC and CLUE.  It seeks to identify any potential impacts
>     or/and enhancement to the way that CLUE is used in the PERC
>     architecture.
>
>
>
>
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc
>


From nobody Fri Oct 16 11:06:21 2015
Return-Path: <dbenham@cisco.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4383E1B32D5 for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 11:06:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.511
X-Spam-Level: 
X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jlHJYjUrJxuD for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 11:06:19 -0700 (PDT)
Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB8E81B32D3 for <perc@ietf.org>; Fri, 16 Oct 2015 11:06:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3454; q=dns/txt; s=iport; t=1445018778; x=1446228378; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=cAzCt7/KoCAQ5eBoj/VYIzdZh5TXLnMs9OnODOCFKLs=; b=gpQdhamN4qIFjO2MeXkD5WqIu9Z+R9CWHdyyZHhymwwP7eSWg8ezH/w4 PdbYTYW4a4Q4oPn41H08/cGwNafZyZVxDEmUr4VSstufROXOywp/JDZL2 QY96UCbPec6t/qt3+IbZMiDLD/LLnUUMhVqmVCKRbq4PKGBk+0SW96uO2 Q=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AVAgBWPCFW/4gNJK1VCYMmgUi5RoQhAQ2BWYYeAhyBHDgUAQEBAQEBAYEKhCYBAQEDASMRNBEFCwIBCBoCJgICAjAVEAIEDg0TiAsHAbBKkxkBAQEBAQEBAQEBAQEBAQEBAQEBGYEihVSEfoQxXAeCaYFFBZYdAYgIhQucFgEfAQFChAOFUoEGAQEB
X-IronPort-AV: E=Sophos;i="5.17,689,1437436800"; d="scan'208";a="41432015"
Received: from alln-core-3.cisco.com ([173.36.13.136]) by rcdn-iport-2.cisco.com with ESMTP; 16 Oct 2015 18:05:52 +0000
Received: from XCH-RCD-017.cisco.com (xch-rcd-017.cisco.com [173.37.102.27]) by alln-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id t9GI5q9x017089 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 16 Oct 2015 18:05:52 GMT
Received: from xch-rcd-020.cisco.com (173.37.102.30) by XCH-RCD-017.cisco.com (173.37.102.27) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Fri, 16 Oct 2015 13:05:36 -0500
Received: from xch-rcd-020.cisco.com ([173.37.102.30]) by XCH-RCD-020.cisco.com ([173.37.102.30]) with mapi id 15.00.1104.000; Fri, 16 Oct 2015 13:05:36 -0500
From: "David Benham (dbenham)" <dbenham@cisco.com>
To: John Mattsson <john.mattsson@gmail.com>
Thread-Topic: [Perc] Additional security requirements for PERC
Thread-Index: AQHRBpq6K+4Vn3L3VEeNjh3mofYhMp5uZ38Q
Date: Fri, 16 Oct 2015 18:05:36 +0000
Message-ID: <9d77c4ba7421488b9acf35d77a3e76fa@XCH-RCD-020.cisco.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com>
In-Reply-To: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [171.68.20.33]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/m9rED_gDgZ7Li5-0y2gAKF9GQtM>
Cc: "perc@ietf.org" <perc@ietf.org>
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Oct 2015 18:06:20 -0000

PiBEdXJpbmcgdGhlIGxhc3QgSUVURiBtZWV0aW5nIGFuZCBhdCB0aGUgZGVzaWduIHRlYW0gbWVl
dGluZ3MsIHNldmVyYWwNCj4gbmV3IGF0dGFja3MgYW5kIHNlY3VyaXR5IHJlbGF0ZWQgcmVxdWly
ZW1lbnRzIGhhdmUgYmVlbiBpZGVudGlmaWVkIGFuZA0KPiBkaXNjdXNzZWQuIEJlbG93IGlzIGEg
bGlzdCBvZiByZXF1aXJlbWVudHMgSSBoYXZlIGNvbGxlY3RlZCBhbmQgdGhhdCBJDQo+IHRoaW5r
IHNob3VsZCBiZSBmdWxmaWxsZWQgYnkgUEVSQzoNCj4gDQo+IC0gVGhlIGUyZSByZXBsYXkgcHJv
dGVjdGlvbiBNVVNUIGJlIHByb3ZpZGVkIGZvciB0aGUgd2hvbGUgZHVyYXRpb24gb2YNCj4gdGhl
IGNvbmZlcmVuY2UuDQo+IA0KPiAtIEl0IFNIQUxMIGJlIGluZmVhc2libGUgZm9yIHRoZSBNREQg
dG8gc3Bvb2YgdGhlIGlkZW50aXR5IG9mIGEgcGFja2V0DQo+IHNlbmRlciwgaW5jbHVkaW5nIG1h
a2luZyBwYWNrZXRzIGZyb20gdHdvIGRpZmZlcmVudCBzZW5kaW5nIGVuZHBvaW50cw0KPiBsb29r
IGxpa2UgdGhleSBvcmlnaW5hdGVkIGZyb20gYSBzaW5nbGUgc2VuZGluZyBlbmRwb2ludC4NCg0K
V2hhdCAiaWRlbnRpdHkiIG9mIHRoZSBwYWNrZXQgc2VuZGVyIGRvIHlvdSBtZWFuPw0KDQo+IC0g
VGhlIHNvbHV0aW9uIFNIQUxMIG1ha2UgaXQgcG9zc2libGUgZm9yIGEgcmVjZWl2aW5nIGVuZHBv
aW50IHRvDQo+IGRldGVjdCBpZiB0aGUgTUREIGRlbGF5cyBwYWNrZXRzIGZvciBzaWduaWZpY2Fu
dGx5IGxvbmdlciB0aGFuIHRoZQ0KPiBuZXR3b3JrIGRlbGF5Lg0KDQpCeSAic2lnbmlmaWNhbnRs
eSBsb25nZXIiIHlvdSBtZWFuIG9uIHRoZSBvcmRlciBvZiBtaW51dGVzIG9yIGhvdXJzIGxhdGVy
Pw0KDQo+IC0gVGhlIE1ERCBNVVNUIGF1dGhlbnRpY2F0ZSBhbmQgYXV0aG9yaXplIHRoZSBlbmRw
b2ludHMgam9pbmluZyB0aGUNCj4gY29uZmVyZW5jZSwgZW5zdXJpbmcgdGhhdCB0aGUgZW5kcG9p
bnQgaGFzIGJlZW4gaW52aXRlZCB0byB0aGUNCj4gY29uZmVyZW5jZS4NCg0KUGVyIG91ciBjaGFy
dGVyLCBhbmQgbGFuZ3VhZ2UgdXNlZCBpbiB0aGUgcmVxdWlyZW1lbnRzIHRvbywgdGhlIE1ERCBp
cyBOT1QgVFJVU1RFRCB3aXRoIHByaXZhdGUgaW5mbyAvIG1lZGlhLiAgVGhlIE1ERCBhbiBlbnRl
cnByaXNlIG1pZ2h0IGJlIHJlbnRpbmcgd291bGQgbm90IGJlIHRydXN0ZWQgd2l0aCBrbm93aW5n
IHRoYXQgSm9obiBDYW1iZXIncyBlbmRwb2ludCB3YXMgaW52aXRlZC9hdXRob3JpemVkIHRvIGNv
bmZlcmVuY2Ugd2l0aCBIYW5zIFZlc3RiZXJnJ3MgZW5kcG9pbnQgKG5vciBjYW4gaXQgaGF2ZSB0
aGUga2V5cyB0byBsZWFybiB0aGV5IHdlcmUgaW5kZWVkIHRhbGtpbmcgYWJvdXQgeW91LCBKb2hu
KS4gIA0KDQpJIGFncmVlIHdpdGggRUtSIGFuZCBvdGhlcnMgdGhhdCBzaG91bGQgTk9UIGJlIGEg
cmVxdWlyZW1lbnQgYXMgd3JpdHRlbi4gICBXYXMgdGhpcyByZWFsbHkgYWJvdXQgYXV0aGVudGlj
YXRpbmcgdGhlIHBhY2tldHMgb3I/DQoNCj4gLSBFbmRwb2ludCBqb2luaW5nIHRoZSBjb25mZXJl
bmNlIE1VU1QgYXV0aGVudGljYXRlIHRoZSBNREQuDQo+IA0KPiAtIFRoZSBlMmUgbGF5ZXIgU0hB
TEwgTk9UIGJlIGRlcGVuZGVudCBvbiB0aGUgaGJoIGxheWVyLiBJdCBzaGFsbCBpbg0KPiB0aGUg
ZnV0dXJlIGJlIHBvc3NpYmxlIHRvIHVzZSBlLmcuIGhiaCBEVExTIGZvciBpbmNyZWFzZWQNCj4g
Y29uZmlkZW50aWFsaXR5IGFuZCBwcml2YWN5Lg0KPiANCj4gLSBUaGUgc2VydmljZSBwcm92aWRl
ciBzaGFsbCBiZSBhYmxlIHRvIGVuZm9yY2UgZW5kLXRvLWVuZCBzZWN1cml0eQ0KPiB1c2luZyBh
IHNwZWNpZmljIGtleS4NCg0KIlNlcnZpY2UgUHJvdmlkZXIiID8NCg0KPiAtIFRoZSBlbmQtdG8t
ZW5kIGtleWluZyBtYXRlcmlhbCBzaGFsbCBzdG9yZWQgc2VjdXJlbHkgaW4gdGhlIGVuZHBvaW50
DQo+IGFuZCB1c2FnZSByZXN0cmljdGVkIHNvIHRoYXQgaXQgaXMgaW5mZWFzaWJsZSB0byBleHRy
YWN0ZWQgb3IgdXNlZCB0aGUNCj4ga2V5IGZvciBhbnl0aGluZyBlbHNlIHRoYXQgRUtULg0KDQpX
aGlsZSB0aGF0J3MgdGhlIGNvcnJlY3QgZ29hbCBhcyBhbiBpbXBsZW1lbnRlciwgSSBkb24ndCB0
aGluayB3ZSBjYW4gYXNzdXJlIG9yIHZlcmlmeSB0aGUgdGFtcGVyLW9yLXRoZWZ0LW9mLWtleXMt
cmVzaXN0YW5jZSBvZiBhbiBlbmRwb2ludCB2aWEgb3VyIG91dHB1dCBoZXJlIGluIFBFUkMuICAg
IElzIHRoaXMgYmV0dGVyIHdvcmRlZCBhcyBhIGRlc2lnbiBjcml0ZXJpYSBmb3IgUEVSQyAuLi4g
dGhhdCB3ZSB3b3VsZCBhdm9pZCBwaWNraW5nIHRlY2ggb3IgYXBwcm9hY2hlcyBkZWVtZWQgb3Ig
a25vd24gdG8gYmUgdnVsbmVyYWJsZSB0byB0aGVmdCBvZiBrZXlpbmcgbWF0ZXJpYWw/DQoNCj4g
SWYgYWdyZWVhYmxlLCBJIHN1Z2dlc3QgYWRkaW5nIHRoZSBhYm92ZSByZXF1aXJlbWVudHMgdG8N
Cj4gZHJhZnQtam9uZXMtcGVyYy1wcml2YXRlLW1lZGlhLXJlcXRzLg0KPiANCj4gQ2hlZXJzLA0K
PiBKb2huDQo+IA0KDQo=


From nobody Fri Oct 16 13:22:25 2015
Return-Path: <ron.even.tlv@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC7D71A011D for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 13:22:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MpLWkuR-5qcX for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 13:22:21 -0700 (PDT)
Received: from mail-wi0-x22e.google.com (mail-wi0-x22e.google.com [IPv6:2a00:1450:400c:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 135381A013B for <perc@ietf.org>; Fri, 16 Oct 2015 13:22:14 -0700 (PDT)
Received: by wicll6 with SMTP id ll6so24954025wic.0 for <perc@ietf.org>; Fri, 16 Oct 2015 13:22:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=from:to:references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding:thread-index :content-language; bh=k52fkhxx9q89cFBK5UGAyUHYspHJjG/DRmy59q+n0a8=; b=MYUIHUUwt/uc41k0mTAcDvBxgTYoe7d/XISHuICpdCr0wDyi7di2BGIO/54CqfSEcL N/sAQPQPilt+3irU9kMTTLeCNBjDFl2Hc455HJHqwDFR4QFXBU+k5x/uNS0jR5YSt9Q3 olWNbHmCGrw+73k3ZoH3sZYVjWmqDVw+KZ92jICH7/v/yq0u6Iz+4zoeL+2NTzXD6Gbo v/SCJgSyNZqBmhOociA37AyMFPnZOkPGR6RvgE08hjZlIgjx62rcqdJloJCxq7OS9tC+ d+peemsfX58z77aNknjlPE0z94IPOrTlbWycQRg5wBE3Sivec8etQ2Zg3uBoNJ4clLgO En8w==
X-Received: by 10.180.93.199 with SMTP id cw7mr6908369wib.4.1445026932673; Fri, 16 Oct 2015 13:22:12 -0700 (PDT)
Received: from RoniPC (bzq-109-65-15-14.red.bezeqint.net. [109.65.15.14]) by smtp.gmail.com with ESMTPSA id m6sm4479646wif.11.2015.10.16.13.22.11 (version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 16 Oct 2015 13:22:11 -0700 (PDT)
From: "Roni Even" <ron.even.tlv@gmail.com>
To: "'Paul Kyzivat'" <pkyzivat@alum.mit.edu>, <perc@ietf.org>
References: <20151016081504.11564.67164.idtracker@ietfa.amsl.com> <993C82EC399524478C759A9B293D96EEA04D6649@szxema508-mbs.china.huawei.com> <562139D4.4010302@alum.mit.edu>
In-Reply-To: <562139D4.4010302@alum.mit.edu>
Date: Fri, 16 Oct 2015 23:22:08 +0300
Message-ID: <074401d10850$55843a70$008caf50$@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQI4uQbbLNi7JQ/n4Y/UhPVA+7Zb6QFwuW50ASC6tZediqJYcA==
Content-Language: he
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/9opf60e-1XP6LZ-8XSSyao0rK7c>
Subject: Re: [Perc] New Version Notification for	draft-groves-perc-clue-00.txt
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Oct 2015 20:22:23 -0000

Hi Paul,
Some of these points are not CLUE specific and PERC does not address the MCU
decomposition, this is why I sent a question to the mailing list asking for
clarification about the authentication of users. The MKF is not the
conference manager pat of an MCU
Roni

-----Original Message-----
From: Perc [mailto:perc-bounces@ietf.org] On Behalf Of Paul Kyzivat
Sent: Friday, October 16, 2015 8:54 PM
To: perc@ietf.org
Subject: Re: [Perc] New Version Notification for
draft-groves-perc-clue-00.txt

(Those not well informed of CLUE may wish to ignore this message.)

(Disclaimer - I quickly read the document. I might not have fully understood
it. And I *don't* understand section 5.1.)

IIUC, what is described more or less equates the CLUE MCU with the perc MDD.
And then the constraints placed on the MDD severely cripple the CLUE
functionality.

I think this can be improved upon by breaking that association. Instead,
decompose the CLUE MCU:
- merge the CLUE protocol handling into the trusted KMF for the
   conference.
- put any capture *composition* functions into a trusted device,
   possibly combined with the KMF, or could be separate.
- assign capture *switching* and media distribution functions to
   the MDD.
- expose a control interface between the MCU and the MDD, so that
   the MCC can tell the MDD how to switch and distribute the media.

This means that there is some media processing that can't be delegated to
the MDD, but it is reduced to what is necessary for composition. This is
unavoidable since you must examine media to compose it. But it is only
necessary to generate one copy of each distinct composition - the MDD can
distribute it to multiple participants.

	Thanks,
	Paul

On 10/16/15 5:18 AM, Yangweiwei (Tommy) wrote:
> Hello PERC experts,
>
> We have just submitted a new draft to PERC working group, to formulate an
initial discussion of the relationship between PERC and CLUE.
>
> The issue of telepresence endpoints using CLUE in PERC architecture is
documented in the Charter of PERC. The idea of this draft is to show the
background to CLUE and clarify the relations.
>
> Please read the draft, and let we know your interests.
>
> @Suhas, Richard, we also like to show the ideas of this draft at the
IETF#94, please help to reserve a slot for it.
>
> Thanks.
>
> Best Regards,
> Tommy
>
> ________________________________________
> From: internet-drafts@ietf.org [internet-drafts@ietf.org]
> Sent: Friday, October 16, 2015 16:15
> To: Roni Even; Yangweiwei (Tommy); Roni Even; Yangweiwei (Tommy); 
> Christian Groves; Christian Groves
> Subject: New Version Notification for draft-groves-perc-clue-00.txt
>
> A new version of I-D, draft-groves-perc-clue-00.txt has been 
> successfully submitted by Christian Groves and posted to the IETF 
> repository.
>
> Name:           draft-groves-perc-clue
> Revision:       00
> Title:          Usage of CLUE with PERC
> Document date:  2015-10-16
> Group:          Individual Submission
> Pages:          13
> URL:
https://www.ietf.org/internet-drafts/draft-groves-perc-clue-00.txt
> Status:         https://datatracker.ietf.org/doc/draft-groves-perc-clue/
> Htmlized:       https://tools.ietf.org/html/draft-groves-perc-clue-00
>
>
> Abstract:
>     This document provides an initial discussion of the relationship
>     between PERC and CLUE.  It seeks to identify any potential impacts
>     or/and enhancement to the way that CLUE is used in the PERC
>     architecture.
>
>
>
>
> Please note that it may take a couple of minutes from the time of 
> submission until the htmlized version and diff are available at
tools.ietf.org.
>
> The IETF Secretariat
>
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc
>

_______________________________________________
Perc mailing list
Perc@ietf.org
https://www.ietf.org/mailman/listinfo/perc


From nobody Fri Oct 16 13:27:46 2015
Return-Path: <ron.even.tlv@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8503A1A0047 for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 13:27:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bKZ28dk_JtBD for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 13:27:44 -0700 (PDT)
Received: from mail-wi0-x234.google.com (mail-wi0-x234.google.com [IPv6:2a00:1450:400c:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4A521A0217 for <perc@ietf.org>; Fri, 16 Oct 2015 13:27:43 -0700 (PDT)
Received: by wicll6 with SMTP id ll6so27115026wic.1 for <perc@ietf.org>; Fri, 16 Oct 2015 13:27:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:content-type:content-transfer-encoding:thread-index :content-language; bh=CeH/FnVdx2PMjEeDN5yF9ruIOZo+onY+MB/CIM1aVTg=; b=AMtvGW+4R6noFo/bUtcJ8mOc/Gz85hzlwgucXwbltP2aAc3rabibYrFiYnM1USqGYi jmLuyd92L4E77Noik6oQuLnwFGltRr2+HpGV6NrK4PJWvZLN0sw0cEvB4H+bR5q+06RK viCtOofezqI6hphIDjUSGXnuQ0SV3r5FSpx6TQ8SbLBGSASx7CE13gSP1grV5eb65TDR 7LVKuuIK4TqyG0jxipd7tkA3lydrZoHQ7fcLf8Nd6lVBNTfWAX889hVGX4oOQBCmTMSN Yh8bNE3H69TL5I7HfDrhlBCnAgFrJlIz+wo98SwB9zxvMi8OAYQj1gcAjrKGAT2bBqEh Aipw==
X-Received: by 10.194.78.34 with SMTP id y2mr19362269wjw.91.1445027262287; Fri, 16 Oct 2015 13:27:42 -0700 (PDT)
Received: from RoniPC (bzq-109-65-15-14.red.bezeqint.net. [109.65.15.14]) by smtp.gmail.com with ESMTPSA id p4sm4489676wia.15.2015.10.16.13.27.40 (version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 16 Oct 2015 13:27:40 -0700 (PDT)
From: "Roni Even" <ron.even.tlv@gmail.com>
To: "'David Benham \(dbenham\)'" <dbenham@cisco.com>, "'John Mattsson'" <john.mattsson@gmail.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <9d77c4ba7421488b9acf35d77a3e76fa@XCH-RCD-020.cisco.com>
In-Reply-To: <9d77c4ba7421488b9acf35d77a3e76fa@XCH-RCD-020.cisco.com>
Date: Fri, 16 Oct 2015 23:27:37 +0300
Message-ID: <074501d10851$199e8f50$4cdbadf0$@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQHGigODeYfyficAHiGmmj/aX0+hVAHA0KjinnWGoIA=
Content-Language: he
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/-IRH_AUe0r9wnJ0EFAXJ0BEMAWg>
Cc: perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Oct 2015 20:27:45 -0000

> - The MDD MUST authenticate and authorize the endpoints joining the 
> conference, ensuring that the endpoint has been invited to the 
> conference.

Per our charter, and language used in the requirements too, the MDD is NOT
TRUSTED with private info / media.  The MDD an enterprise might be renting
would not be trusted with knowing that John Camber's endpoint was
invited/authorized to conference with Hans Vestberg's endpoint (nor can it
have the keys to learn they were indeed talking about you, John).  

I agree with EKR and others that should NOT be a requirement as written.
Was this really about authenticating the packets or?

Roni: I agree that this is not for the MDD but the KMF must provide the end
to end keys only to authorized users.  What is missing here is a
decomposition of an MCU to MDD and conference manager who manage the
conference roster and should have an interface with the KMF

> - Endpoint joining the conference MUST authenticate the MDD. 
> Cheers,
> John
> 

_______________________________________________
Perc mailing list
Perc@ietf.org
https://www.ietf.org/mailman/listinfo/perc


From nobody Fri Oct 16 23:56:12 2015
Return-Path: <john.mattsson@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D0541A8896 for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 23:56:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kBpLbkFRwF1x for <perc@ietfa.amsl.com>; Fri, 16 Oct 2015 23:56:10 -0700 (PDT)
Received: from mail-vk0-x22c.google.com (mail-vk0-x22c.google.com [IPv6:2607:f8b0:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2A4B1A8894 for <perc@ietf.org>; Fri, 16 Oct 2015 23:56:08 -0700 (PDT)
Received: by vkaw128 with SMTP id w128so80163061vka.0 for <perc@ietf.org>; Fri, 16 Oct 2015 23:56:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=tKVUO5aIIjX6TtDiJ3nRVwuhaGzllAN3OV6w7YWwP3A=; b=ZZgAh81ArBVQboT9fhfTsG3jI9f/hkx+/wk60p7hRuoVuU6dcXOYEmtG0RnpSj6Q/L 786byWrl+Y/BvPNBE/qujAZXvpFFA4rUfsI2a4kb1Su+iJnTMWMM28ygFilv9lzdwN52 yxzldD9YTsxNaKd9J5jCLtJCYltdbvVBjX05EzLFmcphxRbhGdkEi3zNBAQfjNkeVAxd PU49xdUMhf/Q05XaWJ0Ir7ITEwsI9wzg62WMtRjy3zY5YI5R3SX/AWB6GYJXxsfYXF0S aw8pIAxF9iZ1hrSOo5bwldoZ8Z6OziYLTUoTPN9cVImxsai+HpZiZWw+PLKwwNz9j7W+ uGCw==
MIME-Version: 1.0
X-Received: by 10.31.165.132 with SMTP id o126mr13518217vke.101.1445064967930;  Fri, 16 Oct 2015 23:56:07 -0700 (PDT)
Received: by 10.31.142.14 with HTTP; Fri, 16 Oct 2015 23:56:07 -0700 (PDT)
In-Reply-To: <074501d10851$199e8f50$4cdbadf0$@gmail.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <9d77c4ba7421488b9acf35d77a3e76fa@XCH-RCD-020.cisco.com> <074501d10851$199e8f50$4cdbadf0$@gmail.com>
Date: Sat, 17 Oct 2015 08:56:07 +0200
Message-ID: <CABQOnqmq-PcPi0WHpe7OKk-J363H63JPPqbO1TNxFrWpJH=1+w@mail.gmail.com>
From: John Mattsson <john.mattsson@gmail.com>
To: Roni Even <ron.even.tlv@gmail.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/HAK3eUimCY_OEekwqDFONiyZo8M>
Cc: "David Benham \(dbenham\)" <dbenham@cisco.com>, perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 17 Oct 2015 06:56:11 -0000

>> - The MDD MUST authenticate and authorize the endpoints joining the
>> conference, ensuring that the endpoint has been invited to the
>> conference.

>Per our charter, and language used in the requirements too, the MDD is NOT
>TRUSTED with private info / media.  The MDD an enterprise might be renting
>would not be trusted with knowing that John Camber's endpoint was
>invited/authorized to conference with Hans Vestberg's endpoint (nor can it
>have the keys to learn they were indeed talking about you, John).

>I agree with EKR and others that should NOT be a requirement as written.
>Was this really about authenticating the packets or?

David, you are the one talking about private info. Authentication is
about verifying claims (see for example RFC4949), the claims in this
case would be =E2=80=9DI am conference endpoint X=E2=80=9D or maybe even =
=E2=80=9CI am a
member in the group of invited conference endpoints=E2=80=9D.

The ONLY thing I want is to mitigate the attack I described to EKR,
let me completely reformulate the suggested requirement to:
=E2=80=9CThe MDD SHALL not forward media from third parties.=E2=80=9D


>Roni: I agree that this is not for the MDD but the KMF must provide the en=
d
>to end keys only to authorized users.  What is missing here is a
>decomposition of an MCU to MDD and conference manager who manage the
>conference roster and should have an interface with the KMF

Agree with you Roni, the group should agree on some common
architecture and terminology for the involved nodes. The abbreviations
MKF for the trusted key-management function and MDD for the
(semi-trusted / untrusted) Media distribution device seems to have
become established. Would MCU be the correct term for the
(semi-trusted / untrusted) conference manager?



On Fri, Oct 16, 2015 at 10:27 PM, Roni Even <ron.even.tlv@gmail.com> wrote:
>
>> - The MDD MUST authenticate and authorize the endpoints joining the
>> conference, ensuring that the endpoint has been invited to the
>> conference.
>
> Per our charter, and language used in the requirements too, the MDD is NO=
T
> TRUSTED with private info / media.  The MDD an enterprise might be rentin=
g
> would not be trusted with knowing that John Camber's endpoint was
> invited/authorized to conference with Hans Vestberg's endpoint (nor can i=
t
> have the keys to learn they were indeed talking about you, John).
>
> I agree with EKR and others that should NOT be a requirement as written.
> Was this really about authenticating the packets or?
>
> Roni: I agree that this is not for the MDD but the KMF must provide the e=
nd
> to end keys only to authorized users.  What is missing here is a
> decomposition of an MCU to MDD and conference manager who manage the
> conference roster and should have an interface with the KMF
>
>> - Endpoint joining the conference MUST authenticate the MDD.
>> Cheers,
>> John
>>
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc
>


From nobody Sat Oct 17 23:56:10 2015
Return-Path: <john.mattsson@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E638A1B2D95 for <perc@ietfa.amsl.com>; Sat, 17 Oct 2015 23:56:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EBB7okIAZeu6 for <perc@ietfa.amsl.com>; Sat, 17 Oct 2015 23:56:03 -0700 (PDT)
Received: from mail-vk0-x231.google.com (mail-vk0-x231.google.com [IPv6:2607:f8b0:400c:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14F3E1B2D98 for <perc@ietf.org>; Sat, 17 Oct 2015 23:56:03 -0700 (PDT)
Received: by vkaw128 with SMTP id w128so89021700vka.0 for <perc@ietf.org>; Sat, 17 Oct 2015 23:56:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=PsqBS/xrjdWbSR2MuHPdyCz5ShklT6+8u9MYp7WmIdI=; b=TYPRBpBDvp1DN3yM0Z/Y8/Ilg0x9fmMH6SZIhN17RwKhqDzfbXE9VZkCaim7CX10pI 1iDYGo50GmAZ3LeoX8tMPtrYSHQz6Iq4F+fBJnS7ihFwahyZ2L0anJHdeVtUaVWHYueI Vu6VzQkt6iREecTcpU72S46PyCrSw+GV7KnFuHUTB45vCSzvUQdpfx7qe3sMUHyf2b1E GKoW+u0A90qVJ6ySd9pL5OjTNY9uw3MpzpRBNaxMAff+yECy1oz81AVVEBuhueaUD/rb YppRDPDcGRqKN1PcZesjSiTT3v8xFQRJmJ04BrExqRxf82qiKpYorTqEQIOuj5WJFIXi zLfQ==
MIME-Version: 1.0
X-Received: by 10.31.137.83 with SMTP id l80mr16429182vkd.38.1445151362208; Sat, 17 Oct 2015 23:56:02 -0700 (PDT)
Received: by 10.31.142.14 with HTTP; Sat, 17 Oct 2015 23:56:02 -0700 (PDT)
In-Reply-To: <CABQOnqmq-PcPi0WHpe7OKk-J363H63JPPqbO1TNxFrWpJH=1+w@mail.gmail.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <9d77c4ba7421488b9acf35d77a3e76fa@XCH-RCD-020.cisco.com> <074501d10851$199e8f50$4cdbadf0$@gmail.com> <CABQOnqmq-PcPi0WHpe7OKk-J363H63JPPqbO1TNxFrWpJH=1+w@mail.gmail.com>
Date: Sun, 18 Oct 2015 08:56:02 +0200
Message-ID: <CABQOnqmGWWHS+BEJ8HPtqUMKZdQ_SqZzroE3QrJ5n0WyupSmSw@mail.gmail.com>
From: John Mattsson <john.mattsson@gmail.com>
To: Roni Even <ron.even.tlv@gmail.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/Y9bUfhs6afeG5Oh7FGwqAhLXWLs>
Cc: "David Benham \(dbenham\)" <dbenham@cisco.com>, perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 18 Oct 2015 06:56:09 -0000

Thanks David, good comments.

>> - It SHALL be infeasible for the MDD to spoof the identity of a packet
>> sender, including making packets from two different sending endpoints
>> look like they originated from a single sending endpoint.

>What "identity" of the packet sender do you mean?

The unique e2e identity, the last design meeting decided the unique
e2e identity should be SSRC (but SSRC is not a good term to use as it
is also a RTP field that will be changed by some MDDs)


>> - The solution SHALL make it possible for a receiving endpoint to
>> detect if the MDD delays packets for significantly longer than the
>> network delay.

>By "significantly longer" you mean on the order of minutes or hours later?

The shorter the better. But I don=E2=80=99t have any answer on what can be
achieved. But only detecting delays of several hours would probably
not have that much value.


>> - The service provider shall be able to enforce end-to-end security
>> using a specific key.

>"Service Provider" ?

Service provider was the term we used in
draft-westerlund-perc-webrtc-use-cases. Agree that service provider is
vague without a definition.

What about =E2=80=9CThe solution SHALL enforce end-end security using a spe=
cific key=E2=80=9D.

What I want to state is that the trusted party controlling the
conference must be able to enforce this. With today=E2=80=99s mechanisms, i=
t
is easy to see solutions where the semi-trusted parties could
influence the protection to ordinary hbh protection or e2e protection
using a different e2e key.


>> - The end-to-end keying material shall stored securely in the endpoint
>> and usage restricted so that it is infeasible to extracted or used the
>> key for anything else that EKT.

>While that's the correct goal as an implementer, I don't think we can assu=
re or verify the tamper-
>or-theft-of-keys-resistance of an endpoint via our output here in PERC.   =
 Is this better worded as
>a design criteria for PERC ... that we would avoid picking tech or approac=
hes deemed or known
>to be vulnerable to theft of keying material?

Most key storage technologies are, and in this case the e2e key here
may have a longer lifetime than the DTLS PreMasterSecret. if we take a
WebRTC client, the semi-trusted parties are able to use the EKT key to
set up a peer connection, but they shall not be able to extract the
key nor use it for anything else. Letting a semi-trusted party use the
key for AES-CTR would e.g. reveal old plaintext. Most key storages
have flags controlling usage. In this case the key would need to have
the flags =E2=80=9Cnot extractable=E2=80=9D and =E2=80=9Conly ekt=E2=80=9D.=
 Even if the key is
delivered to the endpoint using DTLS when setting up the conference,
the key may be stored in the client with a keyID to resuse if the
endpoint lost connection and needed to reconnect.

I see now that PM-04 in draft-jones-perc-private-media-reqts is
covering some (but not all) parts of this.

PM-04:  Keys used for end-to-end encryption and authentication of RTP
payloads and other information deemed unsuitable for access
by the switching media distribution device MUST NOT be
generated by or accessible to any component that is not
trusted.

The requirement should be expanded to make clear that parties that are
not trusted must also not be able to use the end-to-end keying
material in any other way than expected.



On Sat, Oct 17, 2015 at 8:56 AM, John Mattsson <john.mattsson@gmail.com> wr=
ote:
>>> - The MDD MUST authenticate and authorize the endpoints joining the
>>> conference, ensuring that the endpoint has been invited to the
>>> conference.
>
>>Per our charter, and language used in the requirements too, the MDD is NO=
T
>>TRUSTED with private info / media.  The MDD an enterprise might be rentin=
g
>>would not be trusted with knowing that John Camber's endpoint was
>>invited/authorized to conference with Hans Vestberg's endpoint (nor can i=
t
>>have the keys to learn they were indeed talking about you, John).
>
>>I agree with EKR and others that should NOT be a requirement as written.
>>Was this really about authenticating the packets or?
>
> David, you are the one talking about private info. Authentication is
> about verifying claims (see for example RFC4949), the claims in this
> case would be =E2=80=9DI am conference endpoint X=E2=80=9D or maybe even =
=E2=80=9CI am a
> member in the group of invited conference endpoints=E2=80=9D.
>
> The ONLY thing I want is to mitigate the attack I described to EKR,
> let me completely reformulate the suggested requirement to:
> =E2=80=9CThe MDD SHALL not forward media from third parties.=E2=80=9D
>
>
>>Roni: I agree that this is not for the MDD but the KMF must provide the e=
nd
>>to end keys only to authorized users.  What is missing here is a
>>decomposition of an MCU to MDD and conference manager who manage the
>>conference roster and should have an interface with the KMF
>
> Agree with you Roni, the group should agree on some common
> architecture and terminology for the involved nodes. The abbreviations
> MKF for the trusted key-management function and MDD for the
> (semi-trusted / untrusted) Media distribution device seems to have
> become established. Would MCU be the correct term for the
> (semi-trusted / untrusted) conference manager?
>
>
>
> On Fri, Oct 16, 2015 at 10:27 PM, Roni Even <ron.even.tlv@gmail.com> wrot=
e:
>>
>>> - The MDD MUST authenticate and authorize the endpoints joining the
>>> conference, ensuring that the endpoint has been invited to the
>>> conference.
>>
>> Per our charter, and language used in the requirements too, the MDD is N=
OT
>> TRUSTED with private info / media.  The MDD an enterprise might be renti=
ng
>> would not be trusted with knowing that John Camber's endpoint was
>> invited/authorized to conference with Hans Vestberg's endpoint (nor can =
it
>> have the keys to learn they were indeed talking about you, John).
>>
>> I agree with EKR and others that should NOT be a requirement as written.
>> Was this really about authenticating the packets or?
>>
>> Roni: I agree that this is not for the MDD but the KMF must provide the =
end
>> to end keys only to authorized users.  What is missing here is a
>> decomposition of an MCU to MDD and conference manager who manage the
>> conference roster and should have an interface with the KMF
>>
>>> - Endpoint joining the conference MUST authenticate the MDD.
>>> Cheers,
>>> John
>>>
>>
>> _______________________________________________
>> Perc mailing list
>> Perc@ietf.org
>> https://www.ietf.org/mailman/listinfo/perc
>>


From nobody Sun Oct 18 07:31:50 2015
Return-Path: <john.mattsson@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BB971A89A7 for <perc@ietfa.amsl.com>; Sun, 18 Oct 2015 07:31:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RbrmTpqi8nwU for <perc@ietfa.amsl.com>; Sun, 18 Oct 2015 07:31:47 -0700 (PDT)
Received: from mail-vk0-x22e.google.com (mail-vk0-x22e.google.com [IPv6:2607:f8b0:400c:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE5191A89A6 for <perc@ietf.org>; Sun, 18 Oct 2015 07:31:46 -0700 (PDT)
Received: by vkfw189 with SMTP id w189so7667112vkf.2 for <perc@ietf.org>; Sun, 18 Oct 2015 07:31:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=3ZMWerHQLagIEPqshXaoQ1rJNvljT/VSw3p6WpjzSqw=; b=nRoevymib1t9kSZbRAHQy72+sc9LvoP8i7a9W2wCbXc4K9V9w59rYYEOAwUJkKQN5/ Sg7VP6I//2E7kENv9ip8mPG5khfLywqrGOYq0G+zu9UPFIY7EpdZAOtTNFR1hFnJUxoq GqTcIyiuuTxRo5ahppGCNsJRsHkypSbJaqtP5XFZOOFULpu8Wa/50ZGjmPLON0rFtolK ph4zcw4Vo7KqMleCLfo/qIQEu/mcG1rTGEiLXyqcvV89XETQi2xEp1UXdA7Gjv+w7LgY iprvmAQkjIMbiWrm+TTo2dT+p277sSdbH7B7/vsJhyMAKbLjyiKa6T4oWgNGZs7gUR3d MSNA==
MIME-Version: 1.0
X-Received: by 10.31.165.132 with SMTP id o126mr17423581vke.101.1445178705884;  Sun, 18 Oct 2015 07:31:45 -0700 (PDT)
Received: by 10.31.142.14 with HTTP; Sun, 18 Oct 2015 07:31:45 -0700 (PDT)
Date: Sun, 18 Oct 2015 16:31:45 +0200
Message-ID: <CABQOnqm9+OO+sidec7LkHFmmTobbGxP+=4Rok47ZHoUP8+=R+A@mail.gmail.com>
From: John Mattsson <john.mattsson@gmail.com>
To: perc@ietf.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/8dVsCkAKrvwnJBzitG5KaTCAXAA>
Subject: Re: [Perc] Design Meeting Notes
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 18 Oct 2015 14:31:48 -0000

Hi Suhas,

While the conclusions, and next steps in the end of your mail are
fine, the =E2=80=9Cagreements=E2=80=9D in the beginning of your mail are no=
t:


>Don't change the security properties of the SRTP unless it is required for=
 the
>RTP aspects the correspond to security context. [[ref: Security weakness a=
nd l
>of thinking went in the design of SRTP]]

Is =E2=80=9Csecurity weakness went in the design of SRTP=E2=80=9D, really w=
hat you meant? ;)

SRTP was designed for point-to-point security, NOT e2e secure
conferencing, it relies on the RTP layer for security critical input
such as SSRC and SEQ, and the privacy properties is nowhere near
modern standards. We SHOULD and NEED to change SRTP to fulfil the
security aspects of PERC.


>HBH will be based on standard SRTP as the default solution. Future
>proposals may be defined  to use non SRTP HBH but the WG needs to decide o=
n
>it. For now the discussion is tabled till  the WG tackles core PERC & SRTP
>design issues.

I have certainly not agreed to this, and it goes completely against
the agreed next step =E2=80=9CHBH encryption design - SRTP vs Non-SRTP pros
and cons=E2=80=9D.


Some minor comments on next steps:

> Ensure that the DTLS layer handing over the EKT master

We have not agreed to use DTLS for this.

> Placement of E2E context data - In RTP header or after RTP Payload.

Comment: Here I would like to add RTCP and EKT, which both do not need
to be sent for each RTP packet. In fact EKT for PERC might be better
with the MDD storing and forwarding the full EKT field. The MDD likely
has a better understanding of when an endpoint needs the full EKT
field.

Cheers,
John


From nobody Mon Oct 19 07:07:49 2015
Return-Path: <magnus.westerlund@ericsson.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 511B91A1B19 for <perc@ietfa.amsl.com>; Mon, 19 Oct 2015 07:07:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wGNc7blPMsJd for <perc@ietfa.amsl.com>; Mon, 19 Oct 2015 07:07:46 -0700 (PDT)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 320921A6F12 for <perc@ietf.org>; Mon, 19 Oct 2015 07:07:40 -0700 (PDT)
X-AuditID: c1b4fb3a-f79136d0000071e2-58-5624f92a1d50
Received: from ESESSHC014.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id F2.22.29154.A29F4265; Mon, 19 Oct 2015 16:07:38 +0200 (CEST)
Received: from [127.0.0.1] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.62) with Microsoft SMTP Server id 14.3.248.2; Mon, 19 Oct 2015 16:07:37 +0200
References: <20151019121355.18840.85280.idtracker@ietfa.amsl.com>
To: "perc@ietf.org" <perc@ietf.org>
From: Magnus Westerlund <magnus.westerlund@ericsson.com>
X-Forwarded-Message-Id: <20151019121355.18840.85280.idtracker@ietfa.amsl.com>
Message-ID: <5624F929.6070908@ericsson.com>
Date: Mon, 19 Oct 2015 16:07:37 +0200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <20151019121355.18840.85280.idtracker@ietfa.amsl.com>
Content-Type: multipart/mixed; boundary="------------000000080202040400080408"
X-Brightmail-Tracker: H4sIAAAAAAAAA12SfSzUcRzHfe/hdz/HzbdDPpEeLrXlsaQxyVxbD/+0bBVSVodfWOdwv+tK 04Y2Sm2Rme7SjqIWiyiu0ZEzVmMoCSuNdZvNkG6umId19/tdm/rv9Xl8v7+ffUmuuJfvSaYp VJRSIZNLCCFPE7eaE+C75BOzxzjuFVZXVY6i0LHq6iVONIoXRiRT8jQ1pQyKvCBM7S9eFWQ+ 3HW1rnIa5aJ324uQIwk4BApvm/gsb4TBbw1EERKSYtyNYLip2h48RVDV/pvpEmMpjE0akI1d cSKYl6eZvBveAb/0bxgmcBiMLeYR7Nbj0DH1kWNjEfaDF6X1ViZJHt4Jt7ShtrQ7Pgc/mmoR 27IB3mtMPBs74kMwMWthmIujYWWqR8Ba8IPc/Jv8YoS160a069pYDgONbgCxvBX0sxVclq9D vaFE8G9eaOVyBE8K1ggtY9sFCnv7mIIYNyJ4+bafo7VfbLT3A4ctlHFgRn/HHpQi0DW2W8dJ 667d0NAa9L80gbfB9M9njLQbloP2cStjzxUngHnugV3ADeaGJ7kse0DZQj3DCG+BxZ7vTA/G GNbuDfLY50tB1/KZYdtRq0wVhM0P4AEnyBsqYobF1sL8UKeAXXoQBsqb7QL+MFPyVzgCxruN gvU3rUTetcidpmg6PSU4OJBSpiXRdIYiUEGpmpD193W+Wg5/jTqnpEaESSRxFk0U+MSI+TI1 nZ1uRF4kT+IhusGZOC3GKTIVdYmiMinleeVlOUUbEYd09MxFWf01Tj0hfV6b7juYqy9aHn3d pzHO5PupWywBvn5d3noP1HW2Le9ErCBW0p2Uc1SkNnQYRuPLFea7n744HD6wuuAyEk5kn1Hr Zcn+xrERl8KJI9pEU9xzlYUfxXdKmN9/qnIyUtfYlnGlRuocsRIcGpkQe3LU01wbsjnmWnNW goRHp8r2+nKVtOwPWM98tV4DAAA=
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/KOP7VN6NzLt1dahGeI1oCBtpI3A>
Subject: [Perc] Fwd: New Version Notification for draft-westerlund-perc-rtp-field-considerations-00.txt
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Oct 2015 14:07:47 -0000

--------------000000080202040400080408
Content-Type: text/plain; charset="utf-8"; format=flowed
Content-Transfer-Encoding: 7bit

Hi,

I have produced a draft that discusses all the RTP fields from what we 
need to consider in PERC WG. Please review and provide feedback. This is 
a working document intended as common background when we continue to 
discuss the solution for end-to-end media protection.

Cheers

Magnus

--------------000000080202040400080408
Content-Type: message/rfc822; name="New Version Notification for
 draft-westerlund-perc-rtp-field-considerations-00_txt.eml"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename*0="New Version Notification for draft-westerlund-perc-rtp-field";
	filename*1="-considerations-00_txt.eml"

X-Mozilla-Keys: 
Received: from sesbmg12.ericsson.net (153.88.183.153) by
 smtp.internal.ericsson.com (153.88.183.49) with Microsoft SMTP Server id
 14.3.248.2; Mon, 19 Oct 2015 14:13:57 +0200
X-AuditID: c1b4fb28-f794a6d000000dd6-34-5624de835b40
Received: from mail.ietf.org (mail.ietf.org [4.31.198.44])	(using TLS with
 cipher AES256-SHA (256/256 bits))	(Client did not present a certificate)	by
 sesbmg12.ericsson.net (Symantec Mail Security) with SMTP id
 2D.9F.03542.58ED4265; Mon, 19 Oct 2015 14:13:57 +0200 (CEST)
Received: from ietfa.amsl.com (localhost [IPv6:::1])	by ietfa.amsl.com
 (Postfix) with ESMTP id AA8761A026E;	Mon, 19 Oct 2015 05:13:55 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: <internet-drafts@ietf.org>
To: Magnus Westerlund <magnus.westerlund@ericsson.com>, Magnus Westerlund
	<magnus.westerlund@ericsson.com>
Subject: New Version Notification for
 draft-westerlund-perc-rtp-field-considerations-00.txt
X-Test-IDTracker: no
X-IETF-IDTracker: 6.6.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20151019121355.18840.85280.idtracker@ietfa.amsl.com>
Date: Mon, 19 Oct 2015 05:13:55 -0700
X-Brightmail-Tracker: H4sIAAAAAAAAA11TbUxTVxjmtAUvpWde2gKv3RjQuU0XJn7tMxsZ6gwmM7IEumSRSMFr29Fe
	SG/LaBaDOFdRYRpYF6yI0ozNsM0CQ2amla3bGMNNoYjWCY0i+6qOLciQj4zu3t5Ci3+at89z
	zvM873vfQwile8UKgio3UUZarVfGiEWilO70p9/zLVet7rz3xPMep0/wCsqe+XcwJge9KX5p
	J6XXlVHGjMwCsfZC55ygdJwod01/G70H/RNzEMUSQK4H78V+AV8nQp/PyeJiQkraBOC55BKF
	/iC4NvTLEu4UJuPhx6OjLEEQQnIlOL/K4GAhmQJf/tUg5OoY8lH41P8h4mo5WQo1l89Hc7WM
	zIfxsWMhMzmMDd4S8nUS2CZOB2vE3p3qvh08Q5IkzNX2iXjbLDjReTVYi8jHoWm0IeYIIu0R
	iezhRPaIRCeRsAUlMBRTaNCsWbuKMuqKGKaEXkVTpnbEDvCbjtkVZ9HhySw3IgmklOCb1uUq
	abS6jLEY3EhDCJQKLG9NVUllhSU7LVo1o93BmAsNOobRldDKBDzZyx5/aIEzmvUUo5TjLTdY
	GC/AhWZ9MSu0kUPDQjT1NqOnTOzXdKOHCZEyCXc3DedJSY3aRBVTVCll5PXcqIIgyJPVR64h
	hYguoSllMkZRUVHSRCOlocp36fSsRGQswCnDrFN8JM0nS8LNXpYhI5lguGQ8YGOJRYqR+QRE
	rBsVERLlMt5aypSqDYxOE2krx21DXNvzFG8pw7uvs6hkHg3aLcP93CwWVMJWvagGEef3Xf9c
	QLQP3B9C0mDH/K/iEZzBpUzgrmnN9OK2FUm4i/MnI9hgBEUipt0ssTSC4FKwcjl30xbLhYPM
	Py8PSlbI+KYl7Ccx6EyhxkK8H+0XsJsDeJAzj9fRpgfGIsNTHCMJMfxlKb7HDSAuBAaHAnj0
	RoREOMraZsQ+DV80eCYOCeGyyxoHzkBVHLR9Ny1j34s9Fb5oPJUKc/W2NKg/V/kkTFe+uwKu
	fBJIh9kzjauhceT3dTB2q+4FCFhtL0JPS38m2J2eLPDWt2yC9jNtm+GA48/NcKzNlQ2+1r+z
	ob7VsQ0O936UA9//6sqFo1O1eTBSfSIPZsd/U8H71p7tUDUzUACNkwfVcCgwuQvOnf1A52c3
	RBDeEJP6wVHI8Yg/jduQEDW/IQfupHEbEkJDG7KXAxdUwtNQ7EGK3HXJlo0TW/b1bbqk+Xp3
	19bRP2Kf/a+qrmNqW4HDtF2zofKzZ8ie/Q351aqKsiXprW+9nvfa1fuvWk57t67sqDHWvdO8
	dKhi+kJuxXqLY2bHbctN+mJO5xuSnsfMV7w/vax5zjH4c11mije/eO64KVAUfye1dvzj4bEu
	+tRxVZP/rvUHpYjRqtc8JTQy6v8Bampza5UFAAA=
Return-Path: internet-drafts@ietf.org
X-MS-Exchange-Organization-AuthSource: ESESSHC010.ericsson.se
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;1;0;0 0 0
MIME-Version: 1.0


A new version of I-D, draft-westerlund-perc-rtp-field-considerations-00.txt
has been successfully submitted by Magnus Westerlund and posted to the
IETF repository.

Name:		draft-westerlund-perc-rtp-field-considerations
Revision:	00
Title:		Handling Considerations for the RTP fields in PERC
Document date:	2015-10-19
Group:		Individual Submission
Pages:		19
URL:            https://www.ietf.org/internet-drafts/draft-westerlund-perc-rtp-field-considerations-00.txt
Status:         https://datatracker.ietf.org/doc/draft-westerlund-perc-rtp-field-considerations/
Htmlized:       https://tools.ietf.org/html/draft-westerlund-perc-rtp-field-considerations-00


Abstract:
   This draft discusses how the Privacy Enhanced RTP Conferencing
   solution will need consider the different RTP header fields in
   regards to both hop-by-hop and end-to-end security.

                                                                                  


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat



--------------000000080202040400080408--


From nobody Mon Oct 19 07:09:34 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 553B31A6FE2 for <perc@ietfa.amsl.com>; Mon, 19 Oct 2015 07:09:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.712
X-Spam-Level: 
X-Spam-Status: No, score=-2.712 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gQOvNq2S4F0n for <perc@ietfa.amsl.com>; Mon, 19 Oct 2015 07:09:30 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 919C01A6F93 for <perc@ietf.org>; Mon, 19 Oct 2015 07:09:30 -0700 (PDT)
Received: from [156.106.226.17] ([156.106.226.17]) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t9JE9QrB004618 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO) for <perc@ietf.org>; Mon, 19 Oct 2015 10:09:28 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1445263769; bh=AcZvBVdj7wxweTIxhwMc6UQwl/6BAcdv08BCBtnwt74=; h=From:To:Subject:Date:Reply-To; b=RrBQXp2/dOdQbok+M6CkTHVHPEQN1J6BNXOW5Ib1tuiay/YjsntG8Reb4p0mm3BZX QOSkMhD535KPCowDg8nUKt/wtrH9dGDxz64yPt0xXFc705IwZKPBYDp6F4/+t85NrJ 52HwV+wrO/rcwlLOxULej6B+ztVg2sS2eWs07RHc=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "perc@ietf.org" <perc@ietf.org>
Date: Mon, 19 Oct 2015 14:09:31 +0000
Message-Id: <em8ff4ab2c-6b6a-4304-bd8b-2f1d3ed83140@helsinki>
User-Agent: eM_Client/6.0.23421.0
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Mon, 19 Oct 2015 10:09:29 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/aM_Qy6pmsfH6iAGIR6TddaLM0cg>
Subject: [Perc] Fw: I-D Action: draft-jennings-perc-double-00.txt
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Oct 2015 14:09:32 -0000

FYI

------ Forwarded Message ------
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Sent: 10/18/2015 10:11:52 PM
Subject: I-D Action: draft-jennings-perc-double-00.txt


A New Internet-Draft is available from the on-line Internet-Drafts=20
directories.


         Title           : SRTP Double Encryption Procedures
         Authors         : Cullen Jennings
                           Paul E. Jones
                           Adam Roach
  Filename        : draft-jennings-perc-double-00.txt
  Pages           : 8
  Date            : 2015-10-18

Abstract:
    In some conferencing scenarios, it is desirable for an intermediary
    to be able to manipulate some RTP parameters, while still providing
    strong end-to-end security guarantees.  This document defines a SRTP
    procedures that uses two separate but related cryptographic contexts
    to provide "hop by hop" and "end to end" security guarantees.  Both
    the end-to-end and hop-by-hop cryptographic transforms can utilizes
    an authenticated encryption with associated data scheme or take
    advantage of future SRTP transforms with different properties.  SRTCP
    is encrypted hop-by-hop using an already-defined SRTCP cryptographic
    transform.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-jennings-perc-double/

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-jennings-perc-double-00


Please note that it may take a couple of minutes from the time of=20
submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt


From nobody Mon Oct 19 14:23:57 2015
Return-Path: <suhasietf@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D2D41ACD0C for <perc@ietfa.amsl.com>; Mon, 19 Oct 2015 14:23:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FEuzhXTjzxfg for <perc@ietfa.amsl.com>; Mon, 19 Oct 2015 14:23:35 -0700 (PDT)
Received: from mail-vk0-x22e.google.com (mail-vk0-x22e.google.com [IPv6:2607:f8b0:400c:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA6F61B2CCA for <perc@ietf.org>; Mon, 19 Oct 2015 14:23:23 -0700 (PDT)
Received: by vkex70 with SMTP id x70so105441295vke.3 for <perc@ietf.org>; Mon, 19 Oct 2015 14:23:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:date:message-id:subject:from:to:content-type; bh=yWQWu0nGKPkWEtdDifBGwt8wxpKEf5Po1bu//PQt8C8=; b=eKKkp/EBc9VE0hfD6WhPy6QEX4UbqX4z6U2ytF4pObIbvOpHnvyLYUkNLavFilkoSb mCbHX4q7PT0867nFnmrqyiMEakQVmSxgYksq40nwz8tE4NA9xdgeutIMIisy/D1S3+6b lqmIkPDfha9514krF7qXqFpTyMkCjs3gCAxHiLoOc9sXS3D4CsxzE7YFthVbVCtHRIYJ CyPhwUwtSO46kbfnvWQfK7aNyJ3yNp2tZQu+t6JfxkHDJoQtb+Ie/1pzQYhs4uDrpkaG A4DDYHXIT1YxZI3yG6PMjf16xaQIzDB+eEXFrHXLMCMEVJ6w31cIEt4p8TyYJrwdrb8x fAXg==
MIME-Version: 1.0
X-Received: by 10.31.56.140 with SMTP id f134mr21186596vka.108.1445289802835;  Mon, 19 Oct 2015 14:23:22 -0700 (PDT)
Received: by 10.31.95.3 with HTTP; Mon, 19 Oct 2015 14:23:22 -0700 (PDT)
Date: Mon, 19 Oct 2015 14:23:22 -0700
Message-ID: <CAMRcRGRBVPP7fvtbz5VTQJm4P=jY854-Z_8vqJOUg9qPQLJ9Pg@mail.gmail.com>
From: Suhas Nandakumar <suhasietf@gmail.com>
To: perc@ietf.org
Content-Type: multipart/alternative; boundary=001a1143f0cc4baafb05227bc160
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/FwSXDOF6vVRlFqulk6CR0sLPYDc>
Subject: [Perc] Preliminary Agenda
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Oct 2015 21:23:37 -0000

--001a1143f0cc4baafb05227bc160
Content-Type: text/plain; charset=UTF-8

Based on the requests received so far,  here is the preliminary agenda for
the perc meeting.

https://www.ietf.org/proceedings/94/agenda/agenda-94-perc

Please let us know if you have any questions/suggestions  by 10/23 (23rd
October)

Thanks
Richard/Suhas

--001a1143f0cc4baafb05227bc160
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><br></div><div>Based on the requests received so far,=
 =C2=A0here is the preliminary agenda for the perc meeting.<br></div><div><=
br></div><div><a href=3D"https://www.ietf.org/proceedings/94/agenda/agenda-=
94-perc">https://www.ietf.org/proceedings/94/agenda/agenda-94-perc</a><br><=
/div><div><br></div><div>Please let us know if you have any questions/sugge=
stions =C2=A0by 10/23 (23rd October)</div><div><br></div><div>Thanks</div><=
div>Richard/Suhas</div></div>

--001a1143f0cc4baafb05227bc160--


From nobody Mon Oct 19 14:54:50 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D2721B2D21 for <perc@ietfa.amsl.com>; Mon, 19 Oct 2015 14:54:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.711
X-Spam-Level: 
X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9IlbaqBu4w0N for <perc@ietfa.amsl.com>; Mon, 19 Oct 2015 14:54:48 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C95D81B2D2D for <perc@ietf.org>; Mon, 19 Oct 2015 14:54:47 -0700 (PDT)
Received: from [10.54.74.173] (148.239.197.178.dynamic.wless.lssmb00p-cgnat.res.cust.swisscom.ch [178.197.239.148]) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t9JLsiHT009047 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 19 Oct 2015 17:54:46 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1445291686; bh=uauXoSJ9PPzR+6gxB/kYkZKdkhKGM6RHcgXqruq7biA=; h=From:To:Subject:Date:In-Reply-To:Reply-To; b=Ot+Gk4z2nYqTc5FinrDI6jr4nA7DexG4izxrDkThaG8Tyy7Uakn5DfNaFkutwhXu4 QNKujBcK8MDxBXYpc73liqaOqYeZWhITAw/vT1Uim6jcOUCL1yW3TOKCfG/lLXmDxn 6qIjLixLx8WN7q3hwaTUs4/omDLGLeTT+TOyliU4=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "Suhas Nandakumar" <suhasietf@gmail.com>, perc@ietf.org
Date: Mon, 19 Oct 2015 21:54:50 +0000
Message-Id: <em7f35faee-6f6c-4af5-83d0-a12e82df67b2@helsinki>
In-Reply-To: <CAMRcRGRBVPP7fvtbz5VTQJm4P=jY854-Z_8vqJOUg9qPQLJ9Pg@mail.gmail.com>
User-Agent: eM_Client/6.0.23421.0
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------=_MB617A44AC-72F5-4F88-92BD-839138891117"
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Mon, 19 Oct 2015 17:54:46 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/-XReAP_hPGYT1IjOy7JtdRCdnJg>
Subject: Re: [Perc] Preliminary Agenda
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Oct 2015 21:54:49 -0000

--------=_MB617A44AC-72F5-4F88-92BD-839138891117
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Suhas,

I think it might be useful to nail down any additional requirements.  I=20
did not revise the requirements document, yet, since a lot of ideas were=
=20
thrown out without full consensus.  I can collect those new suggestions=20
and perhaps run through them during the meeting.

Of course, more dialog between now and then might help to solidify them.

Paul

------ Original Message ------
From: "Suhas Nandakumar" <suhasietf@gmail.com>
To: perc@ietf.org
Sent: 10/19/2015 5:23:22 PM
Subject: [Perc] Preliminary Agenda

>
>Based on the requests received so far,  here is the preliminary agenda=20
>for the perc meeting.
>
>https://www.ietf.org/proceedings/94/agenda/agenda-94-perc
>
>Please let us know if you have any questions/suggestions  by 10/23=20
>(23rd October)
>
>Thanks
>Richard/Suhas
--------=_MB617A44AC-72F5-4F88-92BD-839138891117
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD>
<STYLE id=3DeMClientCss>blockquote.cite { margin-left: 5px; margin-right:=
 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc=
 }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px;=
 padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; paddin=
g-top: 0px; }
.plain pre, .plain tt { font-family: monospace; font-size: 100%; font-weigh=
t: normal; font-style: normal; white-space: pre-wrap; }
a img { border: 0px; }body {font-family: Calibri;font-size: 11pt;}
.plain pre, .plain tt {font-family: Calibri;font-size: 11pt;}
</STYLE>

<STYLE></STYLE>
</HEAD>
<BODY scroll=3Dauto class>
<DIV>Suhas,</DIV>
<DIV>&nbsp;</DIV>
<DIV>I think it might be useful to nail down any additional requirements.&n=
bsp; I did not revise the requirements document, yet, since a lot of ideas=
 were thrown out without full consensus.&nbsp; I can collect those new sugg=
estions and perhaps run through them during the meeting.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Of course, more dialog between now and then might help to solidify =
them.</DIV>
<DIV>&nbsp;</DIV>
<DIV>Paul</DIV>
<DIV>&nbsp;</DIV>
<DIV>------ Original Message ------</DIV>
<DIV>From: "Suhas Nandakumar" &lt;<A href=3D"mailto:suhasietf@gmail.com">su=
hasietf@gmail.com</A>&gt;</DIV>
<DIV>To: <A href=3D"mailto:perc@ietf.org">perc@ietf.org</A></DIV>
<DIV>Sent: 10/19/2015 5:23:22 PM</DIV>
<DIV>Subject: [Perc] Preliminary Agenda</DIV>
<DIV>&nbsp;</DIV>
<DIV id=3Dxfc0856fc000d40ca805ac45346f3e4a1>
<BLOCKQUOTE class=3Dcite2 cite=3DCAMRcRGRBVPP7fvtbz5VTQJm4P=3DjY854-Z_8vqJO=
Ug9qPQLJ9Pg@mail.gmail.com type=3D"cite">
<DIV dir=3Dltr>
<DIV><BR></DIV>
<DIV>Based on the requests received so far, &nbsp;here is the preliminary=
 agenda for the perc meeting.<BR></DIV>
<DIV><BR></DIV>
<DIV><A href=3D"https://www.ietf.org/proceedings/94/agenda/agenda-94-perc">=
https://www.ietf.org/proceedings/94/agenda/agenda-94-perc</A><BR></DIV>
<DIV><BR></DIV>
<DIV>Please let us know if you have any questions/suggestions &nbsp;by 10/2=
3 (23rd October)</DIV>
<DIV><BR></DIV>
<DIV>Thanks</DIV>
<DIV>Richard/Suhas</DIV></DIV></BLOCKQUOTE></DIV></BODY></HTML>
--------=_MB617A44AC-72F5-4F88-92BD-839138891117--


From nobody Tue Oct 20 15:06:42 2015
Return-Path: <john.mattsson@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 438E31B3544 for <perc@ietfa.amsl.com>; Tue, 20 Oct 2015 15:06:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MjUfYAPZmH8J for <perc@ietfa.amsl.com>; Tue, 20 Oct 2015 15:06:39 -0700 (PDT)
Received: from mail-vk0-x22a.google.com (mail-vk0-x22a.google.com [IPv6:2607:f8b0:400c:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D1551B3546 for <perc@ietf.org>; Tue, 20 Oct 2015 15:06:39 -0700 (PDT)
Received: by vkgy127 with SMTP id y127so18980664vkg.0 for <perc@ietf.org>; Tue, 20 Oct 2015 15:06:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=6C8LUPWjNFLx4Zre3N3l3YYffgDCLQVFRTSZcpxtQSg=; b=sHkvQMqiu/WmBtMoV4ukGwND2RuKj9eY9bKnaZ17BNC5LuPohNAajN7wSzeR2mFNmL WDRbTU9nK7n7SCprJSupgo2wAsgT3BfCZDmDazWr3Tzn5ozHswFOwBvxfYYloMVEsakf Qwbf0pyHG/RWbRg5G5fXimwD365NaGOOcdicvs8X0qUOnWU07GOvqBhNeaOjlFH4tv6t Stoy0ANtYZOMxC/ICvEDoEG3R4jEKSqIA+Hx+6duRSuEi7RhAFflBr1+i20vqmMkwH2A AXvjg7F070diZJNevE94f38wi5Y5QLRHXMtmnIIbRfQ/YOIS1NbSfd1zyeeebvW1HjHy NtyA==
MIME-Version: 1.0
X-Received: by 10.31.10.8 with SMTP id 8mr3664250vkk.157.1445378798401; Tue, 20 Oct 2015 15:06:38 -0700 (PDT)
Received: by 10.31.142.66 with HTTP; Tue, 20 Oct 2015 15:06:38 -0700 (PDT)
In-Reply-To: <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu> <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com> <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com>
Date: Wed, 21 Oct 2015 00:06:38 +0200
Message-ID: <CABQOnqk-LLn=OQj3ikCAypAy9+MpMJPbedkD5W52ftu3wHPfrA@mail.gmail.com>
From: John Mattsson <john.mattsson@gmail.com>
To: Eric Rescorla <ekr@rtfm.com>
Content-Type: text/plain; charset=UTF-8
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/CvhFZk3PtuRJZc9p2PlEl6EjRb8>
Cc: perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Oct 2015 22:06:41 -0000

Eric Rescorla wrote:

>Right, but my point is that absent signature, you can't stop them if they collude
>with any user.

Would be interesting to see when your signature based solution would
be feasible. But I think the processing and packet overhead makes in
unsuitable as the general solution. Maybe as a future extension?

With a fast algorithm like Ed25519 the processing could be acceptable
(assuming some normal bitrates) even for smartphones. The tag would be
64 bytes instead of 16 bytes and public keys would have to be
distributed. Assuming the KMF pushes out a participant list, SSRCs,
and participant <-> SSRC bindings to everybody, it could push out a
list of all the other participants fingerprints (and the MDD). If new
participants joined, the KMF would have to push out fingerprint/public
key to everybody before they could validate packets from the new
joiner.


On Wed, Oct 14, 2015 at 6:08 PM, Eric Rescorla <ekr@rtfm.com> wrote:
>
>
> On Wed, Oct 14, 2015 at 9:04 AM, John Mattsson <john.mattsson@gmail.com>
> wrote:
>>
>> Another requirement that should be discussed and concluded upon is the
>> wish to have the KMF integrated in one of the endpoints (e.g. a WebRTC
>> browser).
>
>
> Yes, I think this is a requirement.
>
>
>>
>> >> - It SHALL be infeasible for the MDD to spoof the identity of a packet
>> >> sender, including making packets from two different sending endpoints
>> >> look like they originated from a single sending endpoint.
>>
>> >I assume you mean without collusion from one of the senders?'
>>
>> Yes. The agreement during the last design meeting was to use SSRC as
>> the e2e cryptographic identity. If the MDD in any can affect the SSRC
>> assignment, it can cause SSRC collision. Such collision would likely
>> enable the MDD to mix packets from different senders, making it look
>> like they originated from a single sender.
>
>
> Right, but my point is that absent signature, you can't stop them if they
> collude
> with any user.
>
>
>>
>> >> - The MDD MUST authenticate and authorize the endpoints joining the
>> >> conference, ensuring that the endpoint has been invited to the
>> >> conference.
>>
>> >I'm not convinced that this is a necessary requirement as stated. Someone
>> >must, yes, but maybe not the MDD. Why is that needed?
>>
>> The attack would be an DoS attack where an external endpoint (not
>> invited) joins the conference and starts sending RTP packets with the
>> audio level RTP header saying "I AM SCREAMING".
>
>
> How does it get the keys to do that. Is that what you mean by "authorized"?
>
> -Ekr
>
>>
>> It the MDD is only
>> forwarding one audio stream, this would completely silence the
>> conference. I do not find it acceptable that anybody (even off-path)
>> so easily can perform an DoS attack.
>>
>> The authentication protocol could be run by the party controlling the
>> KMF, is this what you mean? Improved text:
>> "Endpoints connecting to the MDD MUST be authenticated and authorized,
>> ensuring that the endpoint has been invited to the conference by a
>> trusted party."
>>
>> Cheers,
>> John
>>
>>
>>
>> On Wed, Oct 14, 2015 at 4:57 PM, Paul Kyzivat <pkyzivat@alum.mit.edu>
>> wrote:
>> > On 10/14/15 10:33 AM, Phillip Hallam-Baker wrote:
>> >
>> >> I don't want a trusted MDD. If you have to trust the service you
>> >> haven't
>> >> got end-to-end by definition.
>> >
>> >
>> > Surely you must trust it to *some* extent. In particular you trust it to
>> > allow the intended participants to connect, and to do the switching
>> > according to the policy you give it.
>> >
>> > The issue is to properly divide up the responsibilities and trust in a
>> > reasonable way.
>> >
>> >         Thanks,
>> >         Paul
>> >
>> >
>> > _______________________________________________
>> > Perc mailing list
>> > Perc@ietf.org
>> > https://www.ietf.org/mailman/listinfo/perc
>>
>> _______________________________________________
>> Perc mailing list
>> Perc@ietf.org
>> https://www.ietf.org/mailman/listinfo/perc
>
>


From nobody Tue Oct 20 15:41:08 2015
Return-Path: <ekr@rtfm.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05EE11B35B2 for <perc@ietfa.amsl.com>; Tue, 20 Oct 2015 15:41:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.977
X-Spam-Level: 
X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JbvmRPh9EAE8 for <perc@ietfa.amsl.com>; Tue, 20 Oct 2015 15:41:04 -0700 (PDT)
Received: from mail-yk0-f177.google.com (mail-yk0-f177.google.com [209.85.160.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 43BC51B35C8 for <perc@ietf.org>; Tue, 20 Oct 2015 15:39:38 -0700 (PDT)
Received: by yknn9 with SMTP id n9so31899832ykn.0 for <perc@ietf.org>; Tue, 20 Oct 2015 15:39:37 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=nDpXALM6yVsaI2qcNlzmur4J+9VVoKVZagFkWVxzFkc=; b=MNEW+1azji5gQz4R489Ej1X08ov1si8vjda9opmhS4algsmDxKSHNJBab60qEfYIe8 4yr1ysVDtNBwKfzqTKCKxhWFHH7MsA94cLNuCZ7RLDda5DZTWOA0jhandcLZfbkoxcZY UMOrmzZ0wZqNEZAidzGH3mIWUk4j1eRYxku1als++kOC1WEuQTa8dy6ADzYqynY2b8AF Oo8bfHFr3HvijEegZL40vZeON9pFtlnBKJ+q8Nvf72RxdWpALaAlKYTGRu5juO3Fnhwm xzyFEnPkpDYRkz9Bm/8kYga54erAXPq1BXb52ltix/ufU8viruAKrapZj/1maYru7Qln FrVQ==
X-Gm-Message-State: ALoCoQnybkU1xiXD0wULONFPdKEoCCe76huActtAMOuNd5P4/1TO/q6OTpn1Ai3YsE1jbogcevJQ
X-Received: by 10.129.154.67 with SMTP id r64mr4241093ywg.166.1445380777525; Tue, 20 Oct 2015 15:39:37 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.129.114.85 with HTTP; Tue, 20 Oct 2015 15:38:58 -0700 (PDT)
In-Reply-To: <CABQOnqk-LLn=OQj3ikCAypAy9+MpMJPbedkD5W52ftu3wHPfrA@mail.gmail.com>
References: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com> <CABcZeBNdft=VNB6h89HK3N8uqciibiGdEyrr2bzF9mgTOuAkfQ@mail.gmail.com> <CAMm+Lwj5M7DQQd0CXtS4Phd59pDzo+R31Pf62d0PeOb-=VYEgQ@mail.gmail.com> <561E6D71.2080407@alum.mit.edu> <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com> <CABcZeBOG4do2tQB+zzLyqBcAAa1h2Osq9=6b2BMhLWW1PWJrCA@mail.gmail.com> <CABQOnqk-LLn=OQj3ikCAypAy9+MpMJPbedkD5W52ftu3wHPfrA@mail.gmail.com>
From: Eric Rescorla <ekr@rtfm.com>
Date: Tue, 20 Oct 2015 15:38:58 -0700
Message-ID: <CABcZeBNUSivivAy-iiY4pfO5_zi0cOf6vJLSYP5C+Ezyno4izA@mail.gmail.com>
To: John Mattsson <john.mattsson@gmail.com>
Content-Type: multipart/alternative; boundary=94eb2c0b84cccf763a052290ef67
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/oD0gwCZx-DR2ho0LCgVES620H48>
Cc: perc@ietf.org
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Oct 2015 22:41:07 -0000

--94eb2c0b84cccf763a052290ef67
Content-Type: text/plain; charset=UTF-8

On Tue, Oct 20, 2015 at 3:06 PM, John Mattsson <john.mattsson@gmail.com>
wrote:

> Eric Rescorla wrote:
>
> >Right, but my point is that absent signature, you can't stop them if they
> collude
> >with any user.
>
> Would be interesting to see when your signature based solution would
> be feasible.


Note, I'm not claiming that it's feasible, just that absent the signatures
you have this problem.



> But I think the processing and packet overhead makes in
> unsuitable as the general solution. Maybe as a future extension?
>
> With a fast algorithm like Ed25519 the processing could be acceptable
> (assuming some normal bitrates) even for smartphones. The tag would be
> 64 bytes instead of 16 bytes and public keys would have to be
> distributed.


Yep. Maybe there's some way to aggregate at the cost of increased
risk.



> Assuming the KMF pushes out a participant list, SSRCs,
> and participant <-> SSRC bindings to everybody, it could push out a
> list of all the other participants fingerprints (and the MDD). If new
> participants joined, the KMF would have to push out fingerprint/public
> key to everybody before they could validate packets from the new
> joiner.


Yep...

-Ekr


>
> On Wed, Oct 14, 2015 at 6:08 PM, Eric Rescorla <ekr@rtfm.com> wrote:
> >
> >
> > On Wed, Oct 14, 2015 at 9:04 AM, John Mattsson <john.mattsson@gmail.com>
> > wrote:
> >>
> >> Another requirement that should be discussed and concluded upon is the
> >> wish to have the KMF integrated in one of the endpoints (e.g. a WebRTC
> >> browser).
> >
> >
> > Yes, I think this is a requirement.
> >
> >
> >>
> >> >> - It SHALL be infeasible for the MDD to spoof the identity of a
> packet
> >> >> sender, including making packets from two different sending endpoints
> >> >> look like they originated from a single sending endpoint.
> >>
> >> >I assume you mean without collusion from one of the senders?'
> >>
> >> Yes. The agreement during the last design meeting was to use SSRC as
> >> the e2e cryptographic identity. If the MDD in any can affect the SSRC
> >> assignment, it can cause SSRC collision. Such collision would likely
> >> enable the MDD to mix packets from different senders, making it look
> >> like they originated from a single sender.
> >
> >
> > Right, but my point is that absent signature, you can't stop them if they
> > collude
> > with any user.
> >
> >
> >>
> >> >> - The MDD MUST authenticate and authorize the endpoints joining the
> >> >> conference, ensuring that the endpoint has been invited to the
> >> >> conference.
> >>
> >> >I'm not convinced that this is a necessary requirement as stated.
> Someone
> >> >must, yes, but maybe not the MDD. Why is that needed?
> >>
> >> The attack would be an DoS attack where an external endpoint (not
> >> invited) joins the conference and starts sending RTP packets with the
> >> audio level RTP header saying "I AM SCREAMING".
> >
> >
> > How does it get the keys to do that. Is that what you mean by
> "authorized"?
> >
> > -Ekr
> >
> >>
> >> It the MDD is only
> >> forwarding one audio stream, this would completely silence the
> >> conference. I do not find it acceptable that anybody (even off-path)
> >> so easily can perform an DoS attack.
> >>
> >> The authentication protocol could be run by the party controlling the
> >> KMF, is this what you mean? Improved text:
> >> "Endpoints connecting to the MDD MUST be authenticated and authorized,
> >> ensuring that the endpoint has been invited to the conference by a
> >> trusted party."
> >>
> >> Cheers,
> >> John
> >>
> >>
> >>
> >> On Wed, Oct 14, 2015 at 4:57 PM, Paul Kyzivat <pkyzivat@alum.mit.edu>
> >> wrote:
> >> > On 10/14/15 10:33 AM, Phillip Hallam-Baker wrote:
> >> >
> >> >> I don't want a trusted MDD. If you have to trust the service you
> >> >> haven't
> >> >> got end-to-end by definition.
> >> >
> >> >
> >> > Surely you must trust it to *some* extent. In particular you trust it
> to
> >> > allow the intended participants to connect, and to do the switching
> >> > according to the policy you give it.
> >> >
> >> > The issue is to properly divide up the responsibilities and trust in a
> >> > reasonable way.
> >> >
> >> >         Thanks,
> >> >         Paul
> >> >
> >> >
> >> > _______________________________________________
> >> > Perc mailing list
> >> > Perc@ietf.org
> >> > https://www.ietf.org/mailman/listinfo/perc
> >>
> >> _______________________________________________
> >> Perc mailing list
> >> Perc@ietf.org
> >> https://www.ietf.org/mailman/listinfo/perc
> >
> >
>

--94eb2c0b84cccf763a052290ef67
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Tue, Oct 20, 2015 at 3:06 PM, John Mattsson <span dir=3D"ltr">&lt;<a=
 href=3D"mailto:john.mattsson@gmail.com" target=3D"_blank">john.mattsson@gm=
ail.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D=
"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=
=3D"">Eric Rescorla wrote:<br>
<br>
&gt;Right, but my point is that absent signature, you can&#39;t stop them i=
f they collude<br>
&gt;with any user.<br>
<br>
</span>Would be interesting to see when your signature based solution would=
<br>
be feasible. </blockquote><div><br></div><div>Note, I&#39;m not claiming th=
at it&#39;s feasible, just that absent the signatures</div><div>you have th=
is problem.</div><div><br></div><div>=C2=A0<br></div><blockquote class=3D"g=
mail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-l=
eft:1ex">But I think the processing and packet overhead makes in<br>
unsuitable as the general solution. Maybe as a future extension?<br>
<br>
With a fast algorithm like Ed25519 the processing could be acceptable<br>
(assuming some normal bitrates) even for smartphones. The tag would be<br>
64 bytes instead of 16 bytes and public keys would have to be<br>
distributed. </blockquote><div><br></div><div>Yep. Maybe there&#39;s some w=
ay to aggregate at the cost of increased</div><div>risk.</div><div><br></di=
v><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =
.8ex;border-left:1px #ccc solid;padding-left:1ex">Assuming the KMF pushes o=
ut a participant list, SSRCs,<br>
and participant &lt;-&gt; SSRC bindings to everybody, it could push out a<b=
r>
list of all the other participants fingerprints (and the MDD). If new<br>
participants joined, the KMF would have to push out fingerprint/public<br>
key to everybody before they could validate packets from the new<br>
joiner.</blockquote><div><br></div><div>Yep...</div><div><br></div><div>-Ek=
r</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0=
 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class=3D"HOEnZb=
"><div class=3D"h5">
<br>
On Wed, Oct 14, 2015 at 6:08 PM, Eric Rescorla &lt;<a href=3D"mailto:ekr@rt=
fm.com">ekr@rtfm.com</a>&gt; wrote:<br>
&gt;<br>
&gt;<br>
&gt; On Wed, Oct 14, 2015 at 9:04 AM, John Mattsson &lt;<a href=3D"mailto:j=
ohn.mattsson@gmail.com">john.mattsson@gmail.com</a>&gt;<br>
&gt; wrote:<br>
&gt;&gt;<br>
&gt;&gt; Another requirement that should be discussed and concluded upon is=
 the<br>
&gt;&gt; wish to have the KMF integrated in one of the endpoints (e.g. a We=
bRTC<br>
&gt;&gt; browser).<br>
&gt;<br>
&gt;<br>
&gt; Yes, I think this is a requirement.<br>
&gt;<br>
&gt;<br>
&gt;&gt;<br>
&gt;&gt; &gt;&gt; - It SHALL be infeasible for the MDD to spoof the identit=
y of a packet<br>
&gt;&gt; &gt;&gt; sender, including making packets from two different sendi=
ng endpoints<br>
&gt;&gt; &gt;&gt; look like they originated from a single sending endpoint.=
<br>
&gt;&gt;<br>
&gt;&gt; &gt;I assume you mean without collusion from one of the senders?&#=
39;<br>
&gt;&gt;<br>
&gt;&gt; Yes. The agreement during the last design meeting was to use SSRC =
as<br>
&gt;&gt; the e2e cryptographic identity. If the MDD in any can affect the S=
SRC<br>
&gt;&gt; assignment, it can cause SSRC collision. Such collision would like=
ly<br>
&gt;&gt; enable the MDD to mix packets from different senders, making it lo=
ok<br>
&gt;&gt; like they originated from a single sender.<br>
&gt;<br>
&gt;<br>
&gt; Right, but my point is that absent signature, you can&#39;t stop them =
if they<br>
&gt; collude<br>
&gt; with any user.<br>
&gt;<br>
&gt;<br>
&gt;&gt;<br>
&gt;&gt; &gt;&gt; - The MDD MUST authenticate and authorize the endpoints j=
oining the<br>
&gt;&gt; &gt;&gt; conference, ensuring that the endpoint has been invited t=
o the<br>
&gt;&gt; &gt;&gt; conference.<br>
&gt;&gt;<br>
&gt;&gt; &gt;I&#39;m not convinced that this is a necessary requirement as =
stated. Someone<br>
&gt;&gt; &gt;must, yes, but maybe not the MDD. Why is that needed?<br>
&gt;&gt;<br>
&gt;&gt; The attack would be an DoS attack where an external endpoint (not<=
br>
&gt;&gt; invited) joins the conference and starts sending RTP packets with =
the<br>
&gt;&gt; audio level RTP header saying &quot;I AM SCREAMING&quot;.<br>
&gt;<br>
&gt;<br>
&gt; How does it get the keys to do that. Is that what you mean by &quot;au=
thorized&quot;?<br>
&gt;<br>
&gt; -Ekr<br>
&gt;<br>
&gt;&gt;<br>
&gt;&gt; It the MDD is only<br>
&gt;&gt; forwarding one audio stream, this would completely silence the<br>
&gt;&gt; conference. I do not find it acceptable that anybody (even off-pat=
h)<br>
&gt;&gt; so easily can perform an DoS attack.<br>
&gt;&gt;<br>
&gt;&gt; The authentication protocol could be run by the party controlling =
the<br>
&gt;&gt; KMF, is this what you mean? Improved text:<br>
&gt;&gt; &quot;Endpoints connecting to the MDD MUST be authenticated and au=
thorized,<br>
&gt;&gt; ensuring that the endpoint has been invited to the conference by a=
<br>
&gt;&gt; trusted party.&quot;<br>
&gt;&gt;<br>
&gt;&gt; Cheers,<br>
&gt;&gt; John<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; On Wed, Oct 14, 2015 at 4:57 PM, Paul Kyzivat &lt;<a href=3D"mailt=
o:pkyzivat@alum.mit.edu">pkyzivat@alum.mit.edu</a>&gt;<br>
&gt;&gt; wrote:<br>
&gt;&gt; &gt; On 10/14/15 10:33 AM, Phillip Hallam-Baker wrote:<br>
&gt;&gt; &gt;<br>
&gt;&gt; &gt;&gt; I don&#39;t want a trusted MDD. If you have to trust the =
service you<br>
&gt;&gt; &gt;&gt; haven&#39;t<br>
&gt;&gt; &gt;&gt; got end-to-end by definition.<br>
&gt;&gt; &gt;<br>
&gt;&gt; &gt;<br>
&gt;&gt; &gt; Surely you must trust it to *some* extent. In particular you =
trust it to<br>
&gt;&gt; &gt; allow the intended participants to connect, and to do the swi=
tching<br>
&gt;&gt; &gt; according to the policy you give it.<br>
&gt;&gt; &gt;<br>
&gt;&gt; &gt; The issue is to properly divide up the responsibilities and t=
rust in a<br>
&gt;&gt; &gt; reasonable way.<br>
&gt;&gt; &gt;<br>
&gt;&gt; &gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Thanks,<br>
&gt;&gt; &gt;=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Paul<br>
&gt;&gt; &gt;<br>
&gt;&gt; &gt;<br>
&gt;&gt; &gt; _______________________________________________<br>
&gt;&gt; &gt; Perc mailing list<br>
&gt;&gt; &gt; <a href=3D"mailto:Perc@ietf.org">Perc@ietf.org</a><br>
&gt;&gt; &gt; <a href=3D"https://www.ietf.org/mailman/listinfo/perc" rel=3D=
"noreferrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/perc</=
a><br>
&gt;&gt;<br>
&gt;&gt; _______________________________________________<br>
&gt;&gt; Perc mailing list<br>
&gt;&gt; <a href=3D"mailto:Perc@ietf.org">Perc@ietf.org</a><br>
&gt;&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/perc" rel=3D"nore=
ferrer" target=3D"_blank">https://www.ietf.org/mailman/listinfo/perc</a><br=
>
&gt;<br>
&gt;<br>
</div></div></blockquote></div><br></div></div>

--94eb2c0b84cccf763a052290ef67--


From nobody Wed Oct 21 03:17:05 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C7C81A1BB5 for <perc@ietfa.amsl.com>; Wed, 21 Oct 2015 03:17:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.712
X-Spam-Level: 
X-Spam-Status: No, score=-2.712 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LR2SAboOY5dc for <perc@ietfa.amsl.com>; Wed, 21 Oct 2015 03:17:02 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 493441A1BBE for <perc@ietf.org>; Wed, 21 Oct 2015 03:17:02 -0700 (PDT)
Received: from [156.106.219.120] ([156.106.219.120]) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t9LAGwfx012349 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 21 Oct 2015 06:16:59 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1445422620; bh=5Y381MDjKWN0uTuzsTaEO9rKx4QDcWPFZT7DOk4tUmU=; h=From:To:Subject:Date:In-Reply-To:Reply-To; b=kKIlx1oLZh05MoM89eZ7y/BdqPdUP6uKXVBAuiIqbWJ6BhX1KfJUIxhle+JT3hiHQ IT6TbAG1pSuGW805kL30mMNHjXtILG9haNhUZaS1Dz3QotCy8ZgTVnnumwNFNU92Kd xv+YEAbyq6s19LNe0O9ImO3Ufdc81aCSj3XDJdtg=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "John Mattsson" <john.mattsson@gmail.com>, perc@ietf.org
Date: Wed, 21 Oct 2015 10:17:04 +0000
Message-Id: <em8460e703-024d-4ad9-b271-4583b739fa44@helsinki>
In-Reply-To: <CABQOnqm9+OO+sidec7LkHFmmTobbGxP+=4Rok47ZHoUP8+=R+A@mail.gmail.com>
User-Agent: eM_Client/6.0.23421.0
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Wed, 21 Oct 2015 06:17:00 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/70_E_LUx1a9Y3fTXYALI_w_F8WY>
Subject: Re: [Perc] Design Meeting Notes
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Oct 2015 10:17:03 -0000

John,


>We have not agreed to use DTLS for this.
>
>>  Placement of E2E context data - In RTP header or after RTP Payload.
>
>Comment: Here I would like to add RTCP and EKT, which both do not need
>to be sent for each RTP packet. In fact EKT for PERC might be better
>with the MDD storing and forwarding the full EKT field. The MDD likely
>has a better understanding of when an endpoint needs the full EKT
>field.
>

I would think the endpoint would.  If it sends an I-Frame, send the full=
=20
EKT field, for example.  However, I have no objection to storing the EKT=
=20
field so long as it caches and sends the right one.  Now that we are=20
removing ISN and MKI, then it's even more important that the right value=
=20
be put into packets.

Paul


From nobody Wed Oct 21 03:17:13 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24F221A1BC0 for <perc@ietfa.amsl.com>; Wed, 21 Oct 2015 03:17:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.712
X-Spam-Level: 
X-Spam-Status: No, score=-2.712 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JVBAUcuouNP1 for <perc@ietfa.amsl.com>; Wed, 21 Oct 2015 03:17:06 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00F871A1BB9 for <perc@ietf.org>; Wed, 21 Oct 2015 03:17:05 -0700 (PDT)
Received: from [156.106.219.120] ([156.106.219.120]) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t9LAH2Eu012377 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 21 Oct 2015 06:17:04 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1445422624; bh=JwdO9yMvZ3x2kzAbUNOzOrZog6SVaDqDoTMWzj0dxfI=; h=From:To:Subject:Date:In-Reply-To:Reply-To; b=PJme6gZ2DeC8HdDPOoZG4QZer2YvDVAfHukqroPfNxfArKY7Ut4a4Ilkvm51jznVl 8eLnEOneVy9vt7Th47SScFRe3D6bKPygGxzuJIwsEsCJhDw9eiY9tGPxlyZTdNOq+z lEGaJxOm74tkh1/bmh/ynR8ZYrY8QwMzxonu3ctg=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "John Mattsson" <john.mattsson@gmail.com>, perc@ietf.org
Date: Wed, 21 Oct 2015 10:17:08 +0000
Message-Id: <emd4ba812e-8c26-445f-8527-4eab147e0508@helsinki>
In-Reply-To: <CABQOnqmOz6cJS+JCY332VfjPBunSYVHuBXhDFnn1ZtqFJBsZ+g@mail.gmail.com>
User-Agent: eM_Client/6.0.23421.0
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Wed, 21 Oct 2015 06:17:04 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/61Ph50DFL0xlICPC8Eehxyxc7UE>
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Oct 2015 10:17:07 -0000

John,


>>>  - The MDD MUST authenticate and authorize the endpoints joining the
>>>  conference, ensuring that the endpoint has been invited to the
>>>  conference.
>
>>I'm not convinced that this is a necessary requirement as stated.=20
>>Someone
>>must, yes, but maybe not the MDD. Why is that needed?
>
>The attack would be an DoS attack where an external endpoint (not
>invited) joins the conference and starts sending RTP packets with the
>audio level RTP header saying "I AM SCREAMING". It the MDD is only
>forwarding one audio stream, this would completely silence the
>conference. I do not find it acceptable that anybody (even off-path)
>so easily can perform an DoS attack.
>
>The authentication protocol could be run by the party controlling the
>KMF, is this what you mean? Improved text:
>"Endpoints connecting to the MDD MUST be authenticated and authorized,
>ensuring that the endpoint has been invited to the conference by a
>trusted party."
>

Since we have HBH auth, the MDD would fail to authenticate packets from=20
a non-participant.  So, only invited participants could pull off this=20
attack.  We don't have to explicitly authenticate endpoints at the MDD. =
=20
The HBH auth should simply fail.

I guess this raises the question of how the MDD knows the HBH key.  It=20
was our intent in our draft that the KMF would tell the MDD the HBH key=20
for each participant.

Paul


From nobody Wed Oct 21 03:21:39 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C32901A1BC8 for <perc@ietfa.amsl.com>; Wed, 21 Oct 2015 03:21:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.712
X-Spam-Level: 
X-Spam-Status: No, score=-2.712 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F0rNP1obRtsD for <perc@ietfa.amsl.com>; Wed, 21 Oct 2015 03:21:37 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9D4F1A1BAF for <perc@ietf.org>; Wed, 21 Oct 2015 03:21:37 -0700 (PDT)
Received: from [156.106.219.120] ([156.106.219.120]) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t9LALY9a012726 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 21 Oct 2015 06:21:35 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1445422896; bh=PGyAiFEIBAzzaPn53id2Ic8pQRVcw/kr1FuxrdnO17g=; h=From:To:Subject:Date:In-Reply-To:Reply-To; b=B2tL3SQFtp5G8oAS30vzpVdL1cAB8JG88RepyfTPGZy4lmOTeycXfzFDxi2/Rrlkl o676L1Dn8/ilr4eYckTdP1EdE3sOvE8J6zp3SUnm9P/iOhbz6xrpWWtnTwy6UBFpYW 9Jfgc81z07Vak12YBT6oAyNSA8rAzxGYwRLhnbsE=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "John Mattsson" <john.mattsson@gmail.com>, perc@ietf.org
Date: Wed, 21 Oct 2015 10:21:40 +0000
Message-Id: <em563d926b-1c93-43b0-9e42-c11e7358539d@helsinki>
In-Reply-To: <CABQOnq==D_+Ka_5vvbLV3=yA_h4wjcLv6ctVH6Z3d4Eaf651Jw@mail.gmail.com>
User-Agent: eM_Client/6.0.23421.0
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Wed, 21 Oct 2015 06:21:36 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/nTHywOGQCGlA4TfKB-7hgTKNMAc>
Subject: Re: [Perc] Additional security requirements for PERC
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Oct 2015 10:21:38 -0000

John,

I'm OK with most of these and I've taken notes (I hope are accurate)=20
where folks expressed concern on some.  But, I want to ask about one=20
that did not get enough discussion:

>- It SHALL be infeasible for the MDD to spoof the identity of a packet
>sender, including making packets from two different sending endpoints
>look like they originated from a single sending endpoint.

The MDD could not do this unless, as EKR suggested, there is collusion=20
with an endpoint.  In fact, there would have to be at least two=20
endpoints colluding.  And if they are working together to present=20
spoofed media, they could just as well do it at the endpoint.

I'm skeptical that this requirement is really useful.

Paul


From nobody Wed Oct 21 09:39:45 2015
Return-Path: <Christian.Groves@nteczone.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63A491AC41B for <perc@ietfa.amsl.com>; Wed, 21 Oct 2015 09:39:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DIh3UyEgbue1 for <perc@ietfa.amsl.com>; Wed, 21 Oct 2015 09:39:42 -0700 (PDT)
Received: from cserver5.myshophosting.com (cserver5.myshophosting.com [175.107.161.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06E121AC40E for <perc@ietf.org>; Wed, 21 Oct 2015 09:39:42 -0700 (PDT)
Received: from [156.106.225.28] (port=49366) by cserver5.myshophosting.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128) (Exim 4.86) (envelope-from <Christian.Groves@nteczone.com>) id 1ZowQN-000RLh-LP for perc@ietf.org; Thu, 22 Oct 2015 03:39:40 +1100
From: Christian Groves <Christian.Groves@nteczone.com>
To: perc@ietf.org
References: <20151016081504.11564.67164.idtracker@ietfa.amsl.com> <993C82EC399524478C759A9B293D96EEA04D6649@szxema508-mbs.china.huawei.com> <562139D4.4010302@alum.mit.edu>
Message-ID: <5627BFC7.50005@nteczone.com>
Date: Wed, 21 Oct 2015 18:39:35 +0200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
In-Reply-To: <562139D4.4010302@alum.mit.edu>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cserver5.myshophosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nteczone.com
X-Get-Message-Sender-Via: cserver5.myshophosting.com: authenticated_id: christian.groves@nteczone.com
X-Authenticated-Sender: cserver5.myshophosting.com: christian.groves@nteczone.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/D9G__wugWLItmNUbPNUCvdrTSSk>
Subject: Re: [Perc] New Version Notification for draft-groves-perc-clue-00.txt
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Oct 2015 16:39:44 -0000

Hello Paul,

Please see my replies below.

Regards, Christian

On 16/10/2015 7:54 PM, Paul Kyzivat wrote:
> (Those not well informed of CLUE may wish to ignore this message.)
>
> (Disclaimer - I quickly read the document. I might not have fully 
> understood it. And I *don't* understand section 5.1.)
[CNG] Section 5.1 is trying to show that most of the mechanics of CLUE 
can work through a MDD with minimal privacy issues even if certain 
attributes are encrypted.

>
> IIUC, what is described more or less equates the CLUE MCU with the 
> perc MDD. 
[CNG] I think that's a reasonable starting point.

> And then the constraints placed on the MDD severely cripple the CLUE 
> functionality.
[CNG] Its trying to provide an analysis of the issues with trying to run 
CLUE through an MDD. Its given that a MDD can only provide switching so 
this limits what a MDD can advertise. If you're running PERC you 
probably aren't too worried about composition. How much endpoints trust 
the MDD with the CLUE attribute data is another factor on how much the 
functionality of CLUE is reduced.

>
> I think this can be improved upon by breaking that association. 
> Instead, decompose the CLUE MCU:
> - merge the CLUE protocol handling into the trusted KMF for the
>   conference.
[CNG] I had assumed that the KMF was a virtual function for key 
management. CLUE protocol handling would be another virtual function. It 
would be strange to merge CLUE into the KMF.

> - put any capture *composition* functions into a trusted device,
>   possibly combined with the KMF, or could be separate.
> - assign capture *switching* and media distribution functions to
>   the MDD.
> - expose a control interface between the MCU and the MDD, so that
>   the MCC can tell the MDD how to switch and distribute the media.
[CNG] These points don't seem CLUE specific. A non-CLUE MCU also does 
composition and switching.

>
> This means that there is some media processing that can't be delegated 
> to the MDD, but it is reduced to what is necessary for composition. 
> This is unavoidable since you must examine media to compose it. But it 
> is only necessary to generate one copy of each distinct composition - 
> the MDD can distribute it to multiple participants.
>
>     Thanks,
>     Paul
>
> On 10/16/15 5:18 AM, Yangweiwei (Tommy) wrote:
>> Hello PERC experts,
>>
>> We have just submitted a new draft to PERC working group, to 
>> formulate an initial discussion of the relationship between PERC and 
>> CLUE.
>>
>> The issue of telepresence endpoints using CLUE in PERC architecture 
>> is documented in the Charter of PERC. The idea of this draft is to 
>> show the background to CLUE and clarify the relations.
>>
>> Please read the draft, and let we know your interests.
>>
>> @Suhas, Richard, we also like to show the ideas of this draft at the 
>> IETF#94, please help to reserve a slot for it.
>>
>> Thanks.
>>
>> Best Regards,
>> Tommy
>>
>> ________________________________________
>> From: internet-drafts@ietf.org [internet-drafts@ietf.org]
>> Sent: Friday, October 16, 2015 16:15
>> To: Roni Even; Yangweiwei (Tommy); Roni Even; Yangweiwei (Tommy); 
>> Christian Groves; Christian Groves
>> Subject: New Version Notification for draft-groves-perc-clue-00.txt
>>
>> A new version of I-D, draft-groves-perc-clue-00.txt
>> has been successfully submitted by Christian Groves and posted to the
>> IETF repository.
>>
>> Name:           draft-groves-perc-clue
>> Revision:       00
>> Title:          Usage of CLUE with PERC
>> Document date:  2015-10-16
>> Group:          Individual Submission
>> Pages:          13
>> URL: https://www.ietf.org/internet-drafts/draft-groves-perc-clue-00.txt
>> Status: https://datatracker.ietf.org/doc/draft-groves-perc-clue/
>> Htmlized: https://tools.ietf.org/html/draft-groves-perc-clue-00
>>
>>
>> Abstract:
>>     This document provides an initial discussion of the relationship
>>     between PERC and CLUE.  It seeks to identify any potential impacts
>>     or/and enhancement to the way that CLUE is used in the PERC
>>     architecture.
>>
>>
>>
>>
>> Please note that it may take a couple of minutes from the time of 
>> submission
>> until the htmlized version and diff are available at tools.ietf.org.
>>
>> The IETF Secretariat
>>
>>
>> _______________________________________________
>> Perc mailing list
>> Perc@ietf.org
>> https://www.ietf.org/mailman/listinfo/perc
>>
>
> _______________________________________________
> Perc mailing list
> Perc@ietf.org
> https://www.ietf.org/mailman/listinfo/perc
>


From nobody Fri Oct 23 14:59:11 2015
Return-Path: <suhasietf@gmail.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A62831B2C3E for <perc@ietfa.amsl.com>; Fri, 23 Oct 2015 14:59:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id udyhWwJ0lkfh for <perc@ietfa.amsl.com>; Fri, 23 Oct 2015 14:59:08 -0700 (PDT)
Received: from mail-vk0-x230.google.com (mail-vk0-x230.google.com [IPv6:2607:f8b0:400c:c05::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 557701B2C56 for <perc@ietf.org>; Fri, 23 Oct 2015 14:59:06 -0700 (PDT)
Received: by vkex70 with SMTP id x70so71192671vke.3 for <perc@ietf.org>; Fri, 23 Oct 2015 14:59:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:date:message-id:subject:from:to:content-type; bh=Ug0nqGpuJa+vNEZcFZ1G/xclnRESoX1ArgHOBYHAbz0=; b=SZge9snX1VM/Wv1X6tVF0RI5yS3jdsuyADeAJMV6Qc+Ay29Hz07wfgOrXlqs0uJCp7 kUQ5tv9S4Ppz3eKvFaK3GLwExPGgYlDe/b+lcGe/qvSwETV08foNo7stDtGU63cjAhmX y2EBXzkbgtINsVUxB3KWqo8qMbceHzXH4CMBcR7J7YlmhnyLK8G2pj35r/43X8iuuo8T KWe0Yaqc1zWA3At+Q8qj5/MZl7sJzyLxa7FsXuGsErwwJV+fcMd4vRHxbCQLlQ/l8av6 reZO+YdLonEmTCGGsyzYQOsj69mpjRs/EvYXv+ydQFZc9wUT+Vf/lBdhIcjDDdTNy1VT dfRg==
MIME-Version: 1.0
X-Received: by 10.31.0.132 with SMTP id 126mr15308697vka.152.1445637545411; Fri, 23 Oct 2015 14:59:05 -0700 (PDT)
Received: by 10.31.95.3 with HTTP; Fri, 23 Oct 2015 14:59:05 -0700 (PDT)
Date: Fri, 23 Oct 2015 14:59:05 -0700
Message-ID: <CAMRcRGS3Qjnh3=mPp-gRm=h7Feo725=FkVHG-Whs4FZuCGdSZA@mail.gmail.com>
From: Suhas Nandakumar <suhasietf@gmail.com>
To: perc@ietf.org
Content-Type: multipart/alternative; boundary=001a113dccc25e50760522ccb809
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/lshAGXo03meQHr3sryHsRWR1hjs>
Subject: [Perc] Updated Agenda
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Oct 2015 21:59:09 -0000

--001a113dccc25e50760522ccb809
Content-Type: text/plain; charset=UTF-8

[as chair]


  Here is the updated agenda for the PERC Slot a@IETF94

   https://datatracker.ietf.org/meeting/94/agenda/perc/


Please give it a read and let Richard or me know if you have questions.


Cheers
Richard/Suhas

--001a113dccc25e50760522ccb809
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">[as chair]<div><br><div><br></div><div>=C2=A0 Here is the =
updated agenda for the PERC Slot a@IETF94</div><div><br></div><div>=C2=A0 =
=C2=A0<a href=3D"https://datatracker.ietf.org/meeting/94/agenda/perc/">http=
s://datatracker.ietf.org/meeting/94/agenda/perc/</a></div><div><br></div><d=
iv><br></div><div>Please give it a read and let Richard or me know if you h=
ave questions.</div><div><br></div><div><br></div><div>Cheers</div><div>Ric=
hard/Suhas</div></div></div>

--001a113dccc25e50760522ccb809--


From nobody Thu Oct 29 07:59:03 2015
Return-Path: <paulej@packetizer.com>
X-Original-To: perc@ietfa.amsl.com
Delivered-To: perc@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B909F1A8765 for <perc@ietfa.amsl.com>; Thu, 29 Oct 2015 07:59:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.813
X-Spam-Level: 
X-Spam-Status: No, score=-0.813 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YCZWzbVYg9gB for <perc@ietfa.amsl.com>; Thu, 29 Oct 2015 07:59:01 -0700 (PDT)
Received: from dublin.packetizer.com (dublin.packetizer.com [75.101.130.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 936BC1A8767 for <perc@ietf.org>; Thu, 29 Oct 2015 07:59:00 -0700 (PDT)
Received: from [192.168.1.20] (cpe-098-122-181-215.nc.res.rr.com [98.122.181.215] (may be forged)) (authenticated bits=0) by dublin.packetizer.com (8.15.2/8.15.2) with ESMTPSA id t9TEwvwJ029298 (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO) for <perc@ietf.org>; Thu, 29 Oct 2015 10:58:59 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetizer.com; s=dublin; t=1446130739; bh=gOFCXiNihE5/8avoMg8t5zS+/ANwALzcZgaLAqbvyG8=; h=From:To:Subject:Date:Reply-To; b=ag4ochsDeiJZZUxS1jul5WrLeJSH9mFETI3vBrnE9H7mLovdJzS+syy696NzZa7YL jPCpZVhjWJWexnuB0a6IvOphIT6zgA0NPOyUzV4OdwIHtgcHT3yrdf4XBQiuRH5XB+ kXcVxCLdyls17YyCBTlQtdV+5b7DmuXAPRYBccuM=
From: "Paul E. Jones" <paulej@packetizer.com>
To: "perc@ietf.org" <perc@ietf.org>
Date: Thu, 29 Oct 2015 14:59:03 +0000
Message-Id: <em9d063455-e0cd-431b-97a7-e51bd3736b26@sydney>
User-Agent: eM_Client/6.0.23421.0
Mime-Version: 1.0
Content-Type: text/plain; format=flowed; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.5.12 (dublin.packetizer.com [10.109.150.103]); Thu, 29 Oct 2015 10:58:59 -0400 (EDT)
Archived-At: <http://mailarchive.ietf.org/arch/msg/perc/P7xoDMv12CoJP4FbqF7aMdqnZig>
Subject: [Perc] Follow-up on John's suggested requirement additions
X-BeenThere: perc@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: "Paul E. Jones" <paulej@packetizer.com>
List-Id: Privacy Enhanced RTP Conferencing <perc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perc>, <mailto:perc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perc/>
List-Post: <mailto:perc@ietf.org>
List-Help: <mailto:perc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perc>, <mailto:perc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Oct 2015 14:59:02 -0000

Folks,

John suggested the addition of several new requirements.  I captured=20
notes on what was proposed and comments received.  If I missed anything=20
important, please bring that to my attention.

These didn't seem to receive any objections.  Shall we add these?

A. The e2e replay protection MUST be provided for the whole duration of=20
the conference.
B. The solution SHALL make it possible for a receiving endpoint to=20
detect if the MDD delays packets for significantly longer than the=20
network delay.
C. Endpoint joining the conference MUST authenticate the MDD.
D. The e2e layer SHALL NOT be dependent on the hbh layer. [Shall we use=20
the word "layer"?]
E. It shall in the future be possible to use e.g. hbh DTLS for increased=
=20
confidentiality and privacy.
F. The end-to-end keying material shall be stored securely in the=20
endpoint and usage restricted so that it is infeasible to extracted or=20
used the key for anything else that EKT.

We had several that received more comments.  They are...

G. It SHALL be infeasible for the MDD to spoof the identity of a packet=20
sender, including making packets from two different sending endpoints=20
look like they originated from a single sending endpoint.

John clarified that by "identity" he meant "the unique e2e identity, the=
=20
last design meeting decided the unique
e2e identity should be SSRC (but SSRC is not a good term to use as it is=
=20
also a RTP field that will be changed by some MDDs)."

Given that, I would generally say this is acceptable since the MDD does=20
not have the keys used by the endpoint.  That said, EKR asked whether we=
=20
need to worry about collusion between an endpoint and the MDD.  I don't=20
think we can do anything about that, though, since we are building a=20
system that places trust in the endpoint.  So, shall we add this?

Another was:

H. The MDD MUST authenticate and authorize the endpoints joining the=20
conference, ensuring that the endpoint has been invited to the=20
conference.

People did not seem favorable to adding this one.  Shall we abandon it?

Another was:

J. The service provider shall be able to enforce end-to-end security=20
using a specific key.
("I" was skipped on purpose to avoid confusion with 1 and l.)

This caused some confusion, so John offered this alternative wording for=
=20
"C":

"The solution SHALL enforce end-end security using a specific key"

I'm unclear about what that means.  Does that mean a shared key, as=20
we've discussed doing?  If so, sure.  Is there some other meaning?

Another was:

K. It MUST be possible for the KMF to an function within a participating=
=20
endpoint

That was not proposed wording presented before, but was a question=20
raised an answered.  Shall we add that?

Lastly, John said this regarding the current requirement #4:

M. The requirement should be expanded to make clear that parties that=20
are not trusted must also not be able to use the end-to-end keying=20
material in any other way than expected.
("L" was skipped on purpose to avoid confusion with 1 and I.)

The text in #4 already says end-to-end keys shall not be generated or=20
accessible by anything that is not trusted.  Do we really need this? =20
I'm missing what would change in the requirement.

If we can get closure on at least some of these, I'll try to prepare a=20
draft to publish at the start of the meeting.

Lastly, when I converted the requirements to markdown, I found numbering=
=20
requirements without the "PM-" prefix is simpler and cleaner.  If that's=
=20
OK, I'll just number them without the "PM-" prefix.

Paul

