⌕ Поиск по атласу

IETF · RFC · RFC8844

RFC8844 · Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)

Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)

This document describes unknown key-share attacks on the use of Datagram Transport Layer Security for the Secure Real-Time Transport Protocol (DTLS-SRTP). Similar attacks are described on the use of DTLS-SRTP with the identity bindings used in Web Real-Time Communications (WebRTC) and SIP identity. These attacks are difficult to mount, but they cause a victim to be misled about the identity of a communicating peer. This document defines mitigation techniques that implementations of RFC 8122 are encouraged to deploy.

Официальная английская аннотация

This document describes unknown key-share attacks on the use of Datagram Transport Layer Security for the Secure Real-Time Transport Protocol (DTLS-SRTP). Similar attacks are described on the use of DTLS-SRTP with the identity bindings used in Web Real-Time Communications (WebRTC) and SIP identity. These attacks are difficult to mount, but they cause a victim to be misled about the identity of a communicating peer. This document defines mitigation techniques that implementations of RFC 8122 are encouraged to deploy.

Связи документа

updates: RFC8122

Официальный источник · 2021-01-01

Полные импортированные сведения карточки
{
  "id": "RFC8844",
  "number": 8844,
  "title_en": "Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document describes unknown key-share attacks on the use of Datagram Transport Layer Security for the Secure Real-Time Transport Protocol (DTLS-SRTP). Similar attacks are described on the use of DTLS-SRTP with the identity bindings used in Web Real-Time Communications (WebRTC) and SIP identity. These attacks are difficult to mount, but they cause a victim to be misled about the identity of a communicating peer. This document defines mitigation techniques that implementations of RFC 8122 are encouraged to deploy.",
  "authors": [
    "M. Thomson",
    "E. Rescorla"
  ],
  "organizations": [],
  "publication_date": "2021-01-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "art",
  "area_ru": "Приложения и взаимодействие в реальном времени",
  "working_group": "mmusic",
  "source_draft": "draft-ietf-mmusic-sdp-uks-07",
  "page_count": 17,
  "doi": "10.17487/RFC8844",
  "keywords": [
    "Unknown Key-Share Attack",
    "SDP",
    "DTLS-SRTP",
    "WebRTC",
    "SIP identity"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [
      "RFC8122"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc8844/",
    "html": "https://www.rfc-editor.org/rfc/rfc8844.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc8844.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc8844/"
  }
}