Re: cipher suites for DTLSv1

2013-02-18 Thread Joel Dice
On Fri, 15 Feb 2013, Joel Dice wrote: On Fri, 15 Feb 2013, Joel Dice wrote: On Thu, 14 Feb 2013, Dr. Stephen Henson wrote: On Thu, Feb 14, 2013, Joel Dice wrote: Although OpenSSL seems to allow CBC-based suites with DTLS, from what I've read a block in a CBC stream can't b

Re: cipher suites for DTLSv1

2013-02-15 Thread Joel Dice
On Fri, 15 Feb 2013, Joel Dice wrote: On Thu, 14 Feb 2013, Dr. Stephen Henson wrote: On Thu, Feb 14, 2013, Joel Dice wrote: Although OpenSSL seems to allow CBC-based suites with DTLS, from what I've read a block in a CBC stream can't be properly decoded without the prior b

Re: cipher suites for DTLSv1

2013-02-15 Thread Joel Dice
On Thu, 14 Feb 2013, Dr. Stephen Henson wrote: On Thu, Feb 14, 2013, Joel Dice wrote: Although OpenSSL seems to allow CBC-based suites with DTLS, from what I've read a block in a CBC stream can't be properly decoded without the prior block being available (http://en.wikipedi

Re: DTLS over an alternate transport

2013-02-15 Thread Joel Dice
On Thu, 14 Feb 2013, Tom Cocagne wrote: Thanks for the quick reply Joe. I am definitely interested in seeing your example, I've been unable to find many DTLS examples at all and certainly none that use an alternative transport mechanism. Also, have you taken into account the timer for dropped s

cipher suites for DTLSv1

2013-02-15 Thread Joel Dice
Hi all, I've been experimenting with the DTLS support in OpenSSL recently and discovered that my application was receiving garbage data when packets were lost or reordered. Closer inspection explained why: I was only enabling cipher suites which either used stream ciphers like RC4 or block c

Re: DTLS over an alternate transport

2013-02-14 Thread Joel Dice
On Thu, 14 Feb 2013, Tom Cocagne wrote: I've seen examples where BIO pairs are used send SSL traffic over application-controlled data streams instead of using raw file descriptors. Is this possible with DTLS as well? Yes, that's what I'm doing. It seems to work perfectly as long as no packet

cipher suites for DTLSv1

2013-02-14 Thread Joel Dice
Hi all, I've been experimenting with the DTLS support in OpenSSL recently and discovered that my application was receiving garbage plaintext when packets were lost or reordered. Closer inspection suggested a possible cause: I was only enabling cipher suites which either used stream ciphers l