Question about DTLS implementation

Seung-bum Jin <[email protected]> Fri, 8 Nov 2019 17:26:48 +0900
Newsgroups gmane.comp.encryption.bouncy-castle.devel
Message-ID <CANzR=_XCjxxvW2EGdCC8xTTvbtrDSg-KfFDyY5HMNBOUDTpRbw@mail.gmail.com>
--000000000000ace7570596d18b3f
Content-Type: text/plain; charset="UTF-8"

Hi All,

We are trying to use the BouncyCastle 1.63 java source to implement DTLS
protcol on our JSSE provider.

While review the source code, we found code stuffs handling
HandshakeType.new_session_ticket,
but it's not mentioned in RFC-6347 4.3.2. (Handshake Protocol), 4.2.4.
(Figure 2).

We have question about that is the implementation correct?

And the DTLSServerProtocol does not sends hello_verify_request. In the
point of design approach, it seemed to be right way to handle the request
in clinet and server protocol class, not in DTLSVerifier class, regrdless
of synchronous or aynchronous processing.

And the code in the DTLSClient.java may works when no hello_verify_request
received. We have also question about is that right.

Regards,


Seung-Bum Jin.



Driector, Research & Development Dept.

Peoplecar,

Replublic Of Korea.

--000000000000ace7570596d18b3f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><p style=3D"margin:0px;padding:0px;border:0px;outline:0px;=
font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:i=
nherit;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;verti=
cal-align:baseline;min-height:20px">Hi All,</p><p style=3D"margin:0px;paddi=
ng:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-variant-eas=
t-asian:inherit;font-stretch:inherit;font-size:12pt;line-height:24px;font-f=
amily:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20px">We are tr=
ying to use the BouncyCastle 1.63 java source to implement DTLS protcol on =
our JSSE provider.</p><p style=3D"margin:0px;padding:0px;border:0px;outline=
:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stre=
tch:inherit;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;=
vertical-align:baseline;min-height:20px">While review the source code, we f=
ound code stuffs handling=C2=A0<span style=3D"margin:0px;padding:0px;border=
:0px;outline:0px;font-style:inherit;font-variant:inherit;font-weight:inheri=
t;font-stretch:inherit;font-size:12pt;line-height:24px;vertical-align:basel=
ine">HandshakeType.new_session_ticket, but it&#39;s not mentioned in RFC-63=
47 4.3.2. (Handshake Protocol), 4.2.4. (Figure 2).</span></p><p style=3D"ma=
rgin:0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;fo=
nt-variant-east-asian:inherit;font-stretch:inherit;font-size:12pt;line-heig=
ht:24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:2=
0px"><span style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-styl=
e:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;fon=
t-size:12pt;line-height:24px;vertical-align:baseline">We have question abou=
t that is the implementation correct?=C2=A0</span></p><p style=3D"margin:0p=
x;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-vari=
ant-east-asian:inherit;font-stretch:inherit;font-size:12pt;line-height:24px=
;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20px"><s=
pan style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:inher=
it;font-variant:inherit;font-weight:inherit;font-stretch:inherit;font-size:=
12pt;line-height:24px;vertical-align:baseline">And the DTLSServerProtocol d=
oes not sends=C2=A0</span><span style=3D"margin:0px;padding:0px;border:0px;=
outline:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;fon=
t-stretch:inherit;font-size:12pt;line-height:24px;vertical-align:baseline">=
hello_verify_request. In the point of design approach, it seemed to be righ=
t way to handle the request in clinet and server protocol class, not in DTL=
SVerifier class, regrdless of synchronous or aynchronous processing.</span>=
</p><p style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-variant-=
numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-s=
ize:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:bas=
eline;min-height:20px"><span style=3D"margin:0px;padding:0px;border:0px;out=
line:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-s=
tretch:inherit;font-size:12pt;line-height:24px;vertical-align:baseline">And=
 the code in the DTLSClient.java may works when no=C2=A0</span><span style=
=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;font-v=
ariant:inherit;font-weight:inherit;font-stretch:inherit;font-size:12pt;line=
-height:24px;vertical-align:baseline">hello_verify_request received. We hav=
e also question about is that right.</span></p><p style=3D"margin:0px;paddi=
ng:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-variant-eas=
t-asian:inherit;font-stretch:inherit;font-size:12pt;line-height:24px;font-f=
amily:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20px"><span sty=
le=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;font=
-variant:inherit;font-weight:inherit;font-stretch:inherit;font-size:12pt;li=
ne-height:24px;vertical-align:baseline">Regards,</span></p><p style=3D"marg=
in:0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;font=
-variant-east-asian:inherit;font-stretch:inherit;font-size:12pt;line-height=
:24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20p=
x"><span style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:=
inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;font-=
size:12pt;line-height:24px;vertical-align:baseline"><br></span></p><p style=
=3D"margin:0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inhe=
rit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:10pt;lin=
e-height:20px;font-family:=EB=8F=8B=EC=9B=80;vertical-align:baseline;min-he=
ight:20px">Seung-Bum Jin.</p><p style=3D"margin:0px;padding:0px;border:0px;=
outline:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;fo=
nt-stretch:inherit;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=
=A6=BC;vertical-align:baseline;min-height:20px">=C2=A0</p><p style=3D"margi=
n:0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-=
variant-east-asian:inherit;font-stretch:inherit;font-size:10pt;line-height:=
20px;font-family:=EB=8F=8B=EC=9B=80;vertical-align:baseline;min-height:20px=
">Driector, Research &amp; Development Dept.</p><p style=3D"margin:0px;padd=
ing:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-variant-ea=
st-asian:inherit;font-stretch:inherit;font-size:10pt;line-height:20px;font-=
family:=EB=8F=8B=EC=9B=80;vertical-align:baseline;min-height:20px">Peopleca=
r,</p><p style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-varian=
t-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font=
-size:10pt;line-height:20px;font-family:=EB=8F=8B=EC=9B=80;vertical-align:b=
aseline;min-height:20px">Replublic Of Korea.</p><br class=3D"gmail-Apple-in=
terchange-newline"></div>

--000000000000ace7570596d18b3f--