From 5d336cd3e9cf8bbbfc05a5f2a56a2b15f3a8b9f6 Mon Sep 17 00:00:00 2001 From: Joseph Henry Date: Tue, 24 Oct 2023 20:13:49 -0700 Subject: [PATCH] Minor grammar tweak to improve readability --- whitepaper/zssp.tex | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/whitepaper/zssp.tex b/whitepaper/zssp.tex index 822f531..04fefc2 100644 --- a/whitepaper/zssp.tex +++ b/whitepaper/zssp.tex @@ -470,7 +470,7 @@ At the end of this section we will have defined $\zeta$, which is the high-level \item States $A_1$, $B_2$ and $A_3$ always set their timeout timer to 10 seconds. \item States $S_1$, $R_1$ and $R_2$ always set their timeout timer to 1 minute. \item State $S_2$ sets its timeout timer to a uniform random number in the range 50 minutes to 1 hour. This amount of time is randomly generated each time $\zeta$ enters state $S_2$. - \item In states $A_1$, $A_3$, $S_1$, $R_1$ and $R_2$, $\zeta$ runs an additional ``resend timer''. Whenever this timer triggers, a copy of the respective packet this state generated is sent, and the resend timer is reset. Packets $C_1$, $K_1$ and $K_2$ are re-encrypted under the key exchange key \texttt{kek}, and a fresh encryption counter. States $B_2$ and $S_2$ do not have a resend timer and do not resend packets. The resend timer is always set to 1 second. + \item In states $A_1$, $A_3$, $S_1$, $R_1$ and $R_2$, $\zeta$ runs an additional ``resend timer''. Whenever this timer triggers, a copy of the respective packet that this state generated is sent, and the resend timer is reset. Packets $C_1$, $K_1$ and $K_2$ are re-encrypted under the key exchange key \texttt{kek}, and a fresh encryption counter. States $B_2$ and $S_2$ do not have a resend timer and do not resend packets. The resend timer is always set to 1 second. \item Any state may trigger timeout early for any reason. In particular it is recommended to timeout state $B_2$ early if memory is being filled with unfinished handshakes. This prevents memory exhaustion attacks. \end{itemize} The timer system has the property that all timers are generated locally, checked locally, and are never sent ``over the wire''. This has the advantage of making it difficult to impossible for a remote attacker to manipulate a peer's timers. The system has also been intentionally designed to make it impossible for $\zeta$ to ever get indefinitely stuck in one state. If it could, it would open up the possibility that an attacker could intentionally cause this to happen, which would be a form of a DOS attack. The rekeying timer for state $S_1$ is randomized to deter traffic analysis of ZSSP, and to prevent peers from simultaneously entering state $R_1$, which would be redundant and inefficient.