Timeline for DTLS Session Keys life time
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 7, 2021 at 6:58 | history | edited | CommunityBot |
replaced http://tools.ietf.org/html/rfc with https://www.rfc-editor.org/rfc/rfc
|
|
| Jul 30, 2014 at 6:54 | comment | added | dave_thompson_085 | Agree it's probably unneeded but: as you(!) answered in security.stackexchange.com/questions/30170/… for CBC it's desirable though not vital to rekey at the birthday bound; AES $2^68$ is safely out of reach but 3DES $2^35$ is not. Also DTLS takes 16bits to count CCSs (= renegotiations) because datagrams could be reordered across them; the remaining 48bits is still big but not unthinkable: 100B records on a 10Gbps link could reach it in about a year. | |
| Apr 30, 2014 at 13:59 | history | answered | Tom Leek | CC BY-SA 3.0 |