Question about DTLS implementations

Seung-bum Jin <[email protected]> Fri, 8 Nov 2019 17:32:07 +0900
Newsgroups gmane.comp.encryption.bouncy-castle.devel
Message-ID <CANzR=_VBqf4wJ04twnFzvYq7XjaPNGFRtc4oYwW7M9xjG-OckQ@mail.gmail.com>
--000000000000bee5b80596d19e14
Content-Type: text/plain; charset="UTF-8"

--------------------------------------------------------------
       From: Seung-bum Jin <[email protected]>
         To: [email protected]
    Subject: Question about DTLS implementations

Hi All,

We are trying to use the BouncyCastle 1.63 java source to implement DTLS
protcol on our JSSE provider.

While review the source code, we found code stuffs handling
HandshakeType.new_session_ticket,
but it's not mentioned in RFC-6347 4.3.2. (Handshake Protocol), 4.2.4.
(Figure 2).

We have question about that is the implementation correct?

And the DTLSServerProtocol does not sends hello_verify_request. In the
point of design approach, it seemed to be right way to handle the request
in clinet and server protocol class, not in DTLSVerifier class, regrdless
of synchronous or aynchronous processing.

And the code in the DTLSClient.java may works when no hello_verify_request
received. We have also question about is that right.

Regards,


Seung-Bum Jin.



Driector, Research & Development Dept.

Peoplecar,

Replublic Of Korea.
--------------------------------------------------------------

--000000000000bee5b80596d19e14
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">----------------------------------------------------------=
----<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0From: Seung-bum Jin &lt;<a href=3D"mailt=
o:[email protected]" target=3D"_blank">[email protected]</a>&gt;<br>=C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0To:=C2=A0<a href=3D"mailto:dev-crypto@bouncy=
castle.org" target=3D"_blank">[email protected]</a><br>=C2=A0 =C2=
=A0 Subject: Question about DTLS implementations<br><br><p style=3D"margin:=
0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-va=
riant-east-asian:inherit;font-stretch:inherit;font-size:12pt;line-height:24=
px;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20px">=
Hi All,</p><p style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-v=
ariant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit=
;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-al=
ign:baseline;min-height:20px">We are trying to use the BouncyCastle 1.63 ja=
va source to implement DTLS protcol on our JSSE provider.</p><p style=3D"ma=
rgin:0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;fo=
nt-variant-east-asian:inherit;font-stretch:inherit;font-size:12pt;line-heig=
ht:24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:2=
0px">While review the source code, we found code stuffs handling=C2=A0<span=
 style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;=
font-variant:inherit;font-weight:inherit;font-stretch:inherit;font-size:12p=
t;line-height:24px;vertical-align:baseline">HandshakeType.new_session_ticke=
t, but it&#39;s not mentioned in RFC-6347 4.3.2. (Handshake Protocol), 4.2.=
4. (Figure 2).</span></p><p style=3D"margin:0px;padding:0px;border:0px;outl=
ine:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-s=
tretch:inherit;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=
=BC;vertical-align:baseline;min-height:20px"><span style=3D"margin:0px;padd=
ing:0px;border:0px;outline:0px;font-style:inherit;font-variant:inherit;font=
-weight:inherit;font-stretch:inherit;font-size:12pt;line-height:24px;vertic=
al-align:baseline">We have question about that is the implementation correc=
t?=C2=A0</span></p><p style=3D"margin:0px;padding:0px;border:0px;outline:0p=
x;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch=
:inherit;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;ver=
tical-align:baseline;min-height:20px"><span style=3D"margin:0px;padding:0px=
;border:0px;outline:0px;font-style:inherit;font-variant:inherit;font-weight=
:inherit;font-stretch:inherit;font-size:12pt;line-height:24px;vertical-alig=
n:baseline">And the DTLSServerProtocol does not sends=C2=A0</span><span sty=
le=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;font=
-variant:inherit;font-weight:inherit;font-stretch:inherit;font-size:12pt;li=
ne-height:24px;vertical-align:baseline">hello_verify_request. In the point =
of design approach, it seemed to be right way to handle the request in clin=
et and server protocol class, not in DTLSVerifier class, regrdless of synch=
ronous or aynchronous processing.</span></p><p style=3D"margin:0px;padding:=
0px;border:0px;outline:0px;font-variant-numeric:inherit;font-variant-east-a=
sian:inherit;font-stretch:inherit;font-size:12pt;line-height:24px;font-fami=
ly:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20px"><span style=
=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;font-v=
ariant:inherit;font-weight:inherit;font-stretch:inherit;font-size:12pt;line=
-height:24px;vertical-align:baseline">And the code in the DTLSClient.java m=
ay works when no=C2=A0</span><span style=3D"margin:0px;padding:0px;border:0=
px;outline:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;=
font-stretch:inherit;font-size:12pt;line-height:24px;vertical-align:baselin=
e">hello_verify_request received. We have also question about is that right=
.</span></p><p style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-=
variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inheri=
t;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-a=
lign:baseline;min-height:20px"><span style=3D"margin:0px;padding:0px;border=
:0px;outline:0px;font-style:inherit;font-variant:inherit;font-weight:inheri=
t;font-stretch:inherit;font-size:12pt;line-height:24px;vertical-align:basel=
ine">Regards,</span></p><p style=3D"margin:0px;padding:0px;border:0px;outli=
ne:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-st=
retch:inherit;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=
=BC;vertical-align:baseline;min-height:20px"><span style=3D"margin:0px;padd=
ing:0px;border:0px;outline:0px;font-style:inherit;font-variant:inherit;font=
-weight:inherit;font-stretch:inherit;font-size:12pt;line-height:24px;vertic=
al-align:baseline"><br></span></p><p style=3D"margin:0px;padding:0px;border=
:0px;outline:0px;font-variant-numeric:inherit;font-variant-east-asian:inher=
it;font-stretch:inherit;font-size:10pt;line-height:20px;font-family:=EB=8F=
=8B=EC=9B=80;vertical-align:baseline;min-height:20px">Seung-Bum Jin.</p><p =
style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-variant-numeric=
:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:12p=
t;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;m=
in-height:20px">=C2=A0</p><p style=3D"margin:0px;padding:0px;border:0px;out=
line:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-=
stretch:inherit;font-size:10pt;line-height:20px;font-family:=EB=8F=8B=EC=9B=
=80;vertical-align:baseline;min-height:20px">Driector, Research &amp; Devel=
opment Dept.</p><p style=3D"margin:0px;padding:0px;border:0px;outline:0px;f=
ont-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:in=
herit;font-size:10pt;line-height:20px;font-family:=EB=8F=8B=EC=9B=80;vertic=
al-align:baseline;min-height:20px">Peoplecar,</p><p style=3D"margin:0px;pad=
ding:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-variant-e=
ast-asian:inherit;font-stretch:inherit;font-size:10pt;line-height:20px;font=
-family:=EB=8F=8B=EC=9B=80;vertical-align:baseline;min-height:20px">Replubl=
ic Of Korea.</p>-----------------------------------------------------------=
---=C2=A0=C2=A0<div class=3D"gmail-yj6qo"></div><div class=3D"gmail-adL"><b=
r></div></div>

--000000000000bee5b80596d19e14--