[AVT] RE: [MSEC] FW: Submission of draft-lehtovirta-srtp-rcc-01.txt

["Fries, Steffen" <steffen.fries at siemens.com>]

 Hi Vesa,

I just read your draft regarding the SRTP/MIKEY extension. It is a good enhancement to transmit the ROC in parts pof the SRTP payload. 
Nevertheless, I have a comment/question to the transform described in section 2. It is stated that TAG = ROC_sender || MAC. What is the reason that the TAG is constructed in that way, rather than TAG = MAC || ROC_sender?

>From my point of view there is an advantage for the latter case. This approach would provide a better backward compatibility for terminals which are not aware of the SRTP extension you are describing. If they get the ROC information by other means (e.g., seperate messages) there still would be able to handle the MAC verification correctly, as the MAC starts at the same position as described in RFC3711. When inserting the ROC before the MAC in the packet, older terminaly would take a part of the ROC as MAC, which would lead to errors in the MAC verification.

Would it influence the security in any way by choosing the TAG = MAC || ROC_sender?

Regards
	Steffen




> -----Original Message-----
> From: msec-bounces at securemulticast.org 
> [mailto:msec-bounces at securemulticast.org] On Behalf Of Vesa 
> Lehtovirta (JO/LMF)
> Sent: Tuesday, February 14, 2006 3:31 PM
> To: msec at securemulticast.org; avt at ietf.org
> Cc: Magnus Westerlund (KI/EAB)
> Subject: [MSEC] FW: Submission of draft-lehtovirta-srtp-rcc-01.txt
> 
> Dear all,
> 
> Forwarding on behalf of Karl.
> 
> -----Original Message-----
> From: Karl Norrman (KI/EAB)
> Sent: 13. helmikuuta 2006 18:04
> To: internet-drafts at ietf.org
> Cc: Vesa Lehtovirta (JO/LMF); Mats Näslund (KI/EAB)
> Subject: Submission of draft-lehtovirta-srtp-rcc-01.txt
> 
> Dear Editor,
> 
> Please submit the new version of draft-lehtovirta-srtp-rcc-01.txt.
> 
> Best Regards,
> Karl Norrman
> Ericsson
> 

_______________________________________________
Audio/Video Transport Working Group
avt at ietf.org
https://www1.ietf.org/mailman/listinfo/avt