RFC 8844: Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)

This document describes unknown key-share attacks on the use of Datagram Transport Layer Security for the Secure Real-Time Transport Protocol (DTLS-SRTP).…

Read RFC 8844 on the RFC Editor

Outgoing relationships (22 related RFCs)

Updates, Normative reference — RFC 8122: Connection-Oriented Media Transport over the Transport Layer Security (TLS) Protocol in the Session Description Protocol (SDP)
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 3629: UTF-8, a transformation format of ISO 10646
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 4566: SDP: Session Description Protocol
Normative reference — RFC 3711: The Secure Real-time Transport Protocol (SRTP)
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 8259: The JavaScript Object Notation (JSON) Data Interchange Format
Normative reference — RFC 20: ASCII format for network interchange
Normative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Normative reference — RFC 5763: Framework for Establishing a Secure Real-time Transport Protocol (SRTP) Security Context Using Datagram Transport Layer Security (DTLS)
Normative reference — RFC 8224: Authenticated Identity Management in the Session Initiation Protocol (SIP)
Normative reference — RFC 8225: PASSporT: Personal Assertion Token
Normative reference — RFC 8827: WebRTC Security Architecture
Normative reference — RFC 8842: Session Description Protocol (SDP) Offer/Answer Considerations for Datagram Transport Layer Security (DTLS) and Transport Layer Security (TLS)
Informative reference — RFC 3550: RTP: A Transport Protocol for Real-Time Applications
Informative reference — RFC 8445: Interactive Connectivity Establishment (ICE): A Protocol for Network Address Translator (NAT) Traversal
Informative reference — RFC 5761: Multiplexing RTP Data and Control Packets on a Single Port
Informative reference — RFC 3725: Best Current Practices for Third Party Call Control (3pcc) in the Session Initiation Protocol (SIP)
Informative reference — RFC 7696: Guidelines for Cryptographic Algorithm Agility and Selecting Mandatory-to-Implement Algorithms
Informative reference — RFC 6189: ZRTP: Media Path Key Agreement for Unicast Secure RTP

Incoming relationships (4 related RFCs)

Normatively referenced by — RFC 8827: WebRTC Security Architecture
Normatively referenced by — RFC 9185: DTLS Tunnel between a Media Distributor and Key Distributor to Facilitate Key Exchange
Informatively referenced by — RFC 8842: Session Description Protocol (SDP) Offer/Answer Considerations for Datagram Transport Layer Security (DTLS) and Transport Layer Security (TLS)
Informatively referenced by — RFC 9383: SPAKE2+, an Augmented Password-Authenticated Key Exchange (PAKE) Protocol