Connection Identifier for DTLS 1.2
RFC 9146, “Connection Identifier for DTLS 1.2”, is a Proposed Standard document published in March 2022 by E. Rescorla, H. Tschofenig, T. Fossati, A. Kraus. It updates RFC 6347. It has since been updated by RFC 9853. The canonical text is published by the RFC Editor.
Abstract
This document specifies the Connection ID (CID) construct for the Datagram Transport Layer Security (DTLS) protocol version 1.2.
A CID is an identifier carried in the record layer header that gives the recipient additional information for selecting the appropriate security association. In "classical" DTLS, selecting a security association of an incoming DTLS record is accomplished with the help of the 5-tuple. If the source IP address and/or source port changes during the lifetime of an ongoing DTLS session, then the receiver will be unable to locate the correct security context.
The new ciphertext record format with the CID also provides content type encryption and record layer padding.
This document updates RFC 6347.
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 9146 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9147 The Datagram Transport Layer Security Protocol Version 1.3
- RFC 9148 EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol
- RFC 9143 Negotiating Media Multiplexing Using the Session Description Protocol
- RFC 9149 TLS Ticket Requests
- RFC 9142 Key Exchange Method Updates and Recommendations for Secure Shell
- RFC 9150 TLS 1.3 Authentication and Integrity-Only Cipher Suites
- RFC 9151 Commercial National Security Algorithm Suite Profile for TLS and DTLS 1.2 and 1.3
- RFC 9152 Secure Object Delivery Protocol Server Interfaces: NSA's Profile for Delivery of Certificates, Certificate Revocation Lists , and Symmetric Keys to Clients