RFC Errata


Errata Search

 
Source of RFC  
Summary Table Full Records

Found 1 record.

Status: Reported (1)

RFC 6188, "The Use of AES-192 and AES-256 in Secure RTP", March 2011

Source of RFC: avt (rai)

Errata ID: 8394
Status: Reported
Type: Technical
Publication Format(s) : TEXT

Reported By: Daniel Frużyński
Date Reported: 2025-04-26

Section 4, tables 1-4 says:

   | Default key lifetime         | 2^31 packets                       |

It should say:

   | Maximum key lifetime (SRTP)  | 2^48 packets                       |
   | Maximum key lifetime (SRTCP) | 2^31 packets                       |

Notes:

RFC 3711 and RFC 7714 specifies different maximum key lifetime values for SRTP and SRTCP (2^48 and 2^31). Additionally word "Default" suggests that higher values are also allowed, what may lead to two-time pad vulnerability for a very long streams.

Report New Errata



Advanced Search