Re: [TLS] DTLSv1.3: Record Number in AEAD computation

Hi all, I am also struggling a bit with the nonce construction for DTLS 1.3 now that we have moved to a 128-bit record_number. The TLS 1.3 per-record nonce for the AEAD construction is formed as follows: https://datatracker.ietf.org/doc/html/rfc8446#section-5.3 1. The 64-bit record sequence

[TLS] DTLS 1.3 Sequence number reconstruction?

Hi, I've a query on the reconstruction of the sequence number from the DTLS 1.3 specification: https://www.rfc-editor.org/rfc/rfc9147.html#name-reconstructing-the-sequence "If the epoch bits match those of the current epoch, then implementations SHOULD reconstruct the sequence number by computi

[TLS] DTLS AAD length usage clarification?

Greetings all. I was wondering could someone help clarify my understanding on the use of length fields for DTLS 1.2 + CID with respect to TLS1.3, specifically with the additional data input to the AEAD functions. If we start with the DTLS1.2 + CID's RFC: https://www.rfc-editor.org/rfc/rfc9146