Skip to content

Improve Nonce description #644

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mirjak wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Improve Nonce description #644

Changes from 2 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
e2644ea
Improve Nonce description
mirjak Feb 6, 2026
90fbea8
Add TLS presentation for PPN
mirjak Feb 13, 2026
e0e6222
reference to new PPN figure
mirjak Feb 13, 2026
bce3c44
Add more TLS illustrations
mirjak Feb 13, 2026
f1237b5
missing word
mirjak Feb 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 19 additions & 3 deletions draft-ietf-quic-multipath.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -295,9 +295,25 @@ is left-padded with zeros to the size of the IV. The exclusive OR of the padded
packet number and the IV forms the AEAD nonce. An AEAD algorithm where the nonce length
is less than 12 bytes cannot be used with the QUIC multipath extension.

~~~
Path And Packet Number {
Path Identifier (32),
Zeroes (2) = 0b00,
Packet Number (62)
}
~~~
{: #fig-path-and-packet-number title="96 Bits Path-And-Packet-Number"}

For example, assuming the IV value is `0x6b26114b9cba2b63a9e8dd4f`,
the path ID is `3`, and the packet number is `54321` (hex value `0xd431`),
the nonce will be set to `0x6b2611489cba2b63a9e8097e`.
the nonce will be set to `0x6b2611489cba2b63a9e8097e`, as illustrated in the
following table:

| Type | Value |
| -------------------- | ---------------------------------------------------------- |
| padded packet number | 0x3 (32 bits) + 0x0 (2 bits) + 0xd431 (62 bits) |
| IV | 0x6b26114b9cba2b63a9e8dd4f (96 bits with optional padding) |
| AEAD nonce | 0x6b2611489cba2b63a9e8097e |

## Key Phase Update Process {#multipath-key-update}

Expand Down Expand Up @@ -1574,8 +1590,8 @@ The limits as discussed on {{Appendix B of QUIC-TLS}}
apply to the total number of packets sent on all paths,
not each path separately.

This specification changes the AEAD calculation by using the path ID as part of
AEAD nonce (see {{nonce}}). To ensure unique nonces, path IDs
This specification changes the AEAD nonce calculation by including the path ID
as part of the calculation (see {{nonce}}). To ensure unique nonces, path IDs
are limited to 32 bits and cannot be reused for another path of the same connection.

# Acknowledgments
Expand Down
Loading