Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 17
Abstract: This document describes unknown key-share attacks on the use of Datagram Transport Layer Security for the Secure Real-Time Transport Protocol (DTLS-SRTP). Similar attacks are described on the use of DTLS-SRTP with the identity bindings used in Web Real-Time Communications (WebRTC) and SIP identity. These attacks are difficult to mount, but they cause a victim to be misled about the identity of a communicating peer. This document defines mitigation techniques that implementations of RFC 8122 are encouraged to deploy.
Publication Date: 2021-01-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8844
Link: https://doi.org/10.17487/RFC8844
Author(s): Martin Thomson
Eric Rescorla
Keyword(s): Unknown Key-Share Attack, SDP, DTLS-SRTP, WebRTC, STIR

Latest version of IETF RFC 8844

Document Versions — IETF RFC 8844

▶ IETF RFC 8844 (2021-01-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 20 [Active*]
IETF RFC 2119 [Active*]
IETF RFC 3629 [Active*]
IETF RFC 3711 [Active*]
IETF RFC 4566 [Superseded*]
IETF RFC 4648 [Active*]
RFC5763 — RFC5763 EXTERNAL
IETF RFC 6234 [Active*]
IETF RFC 6347 [Superseded*]
IETF RFC 8122 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8224 [Active*]
RFC8225 — RFC8225 EXTERNAL
IETF RFC 8259 [Active*]
IETF RFC 8446 [Superseded*]
RFC8827 — RFC8827 EXTERNAL
RFC8842 — RFC8842 EXTERNAL

Bibliographic Reference(s)

10.1007-3-540-49162-7_12 — UKS EXTERNAL
10.1007-978-3-540-45146-4_24 — SIGMA EXTERNAL
IETF RFC 3550 [Active*]
IETF RFC 3725 [Active*]
IETF RFC 5761 [Active*]
RFC6189 — RFC6189 EXTERNAL
IETF RFC 7696 [Active*]
RFC8445 — RFC8445 EXTERNAL
W3C.webrtc — WEBRTC EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8844.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8844, Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP). Available at https://doi.org/10.17487/RFC8844

Snippet:

IETF RFC 8844, Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP). Available at https://doi.org/10.17487/RFC8844

HTML (ISO 690 compliant)

Preview:

IETF RFC 8844, Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP). Available at https://doi.org/10.17487/RFC8844

Snippet:

<span class="citation"><cite>IETF RFC 8844</cite>, Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP). Available at <a href="https://doi.org/10.17487/RFC8844" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8844</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8844, Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)
doi: 10.17487/RFC8844
url: https://doi.org/10.17487/RFC8844

Snippet:

<li>
<cite id="bib-rfc8844">IETF RFC 8844</cite>, Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)
<span class="doi">10.17487/RFC8844</span>
</li>

Referenced By

IETF RFC 9846 [Active*]