diff --git a/better-diagram/draft-ietf-sframe-enc.html b/better-diagram/draft-ietf-sframe-enc.html
index 6619136..6d592d2 100644
--- a/better-diagram/draft-ietf-sframe-enc.html
+++ b/better-diagram/draft-ietf-sframe-enc.html
@@ -2037,24 +2037,24 @@
before packetizing it, the necessary media metadata will be moved out of the
encoded frame buffer, to be sent in some channel visible to the SFU (e.g., an
RTP header extension).¶
-
+
-
-
+
+
-
+
-
+
-
+
@@ -2070,20 +2070,20 @@
-
-
-
-
-
+
+
+
+
+
-
+
-
+
plaintext
sframe_key
@@ -2096,15 +2096,17 @@
metadata
AAD
AEAD.Encrypt
- SFrame
- Header
- ciphertext
+ SFrame
+ Ciphertext
+ SFrame
+ Header
+ ciphertext
¶
Figure 4 :
-Encryption flow
+Encrypting an SFrame Ciphertext
@@ -2143,74 +2145,76 @@
other reason, the client MUST discard the ciphertext. Invalid ciphertexts SHOULD be
discarded in a way that is indistinguishable (to an external observer) from having
processed a valid ciphertext.¶
-
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
- SFrame
- Header
- ciphertext
- sframe_key
- Key
- KID
- sframe_salt
- Nonce
- CTR
- metadata
- AAD
- AEAD.Decrypt
- |
- plaintext
+ SFrame
+ Ciphertext
+ SFrame
+ Header
+ ciphertext
+ sframe_key
+ Key
+ KID
+ sframe_salt
+ Nonce
+ CTR
+ metadata
+ AAD
+ AEAD.Decrypt
+ |
+ plaintext
¶
Figure 5 :
-Decryption flow
+Decrypting an SFrame Ciphertext
diff --git a/better-diagram/draft-ietf-sframe-enc.txt b/better-diagram/draft-ietf-sframe-enc.txt
index 006c704..65b9aa1 100644
--- a/better-diagram/draft-ietf-sframe-enc.txt
+++ b/better-diagram/draft-ietf-sframe-enc.txt
@@ -566,6 +566,7 @@ Alice | (per-frame) (per-packet) | | |
| |
| AEAD.Encrypt
| |
+ | SFrame Ciphertext |
| +---------------+ |
+-------------->| SFrame Header | |
+---------------+ |
@@ -576,7 +577,7 @@ Alice | (per-frame) (per-packet) | | |
| |
+---------------+
- Figure 4: Encryption flow
+ Figure 4: Encrypting an SFrame Ciphertext
4.4.4. Decryption
@@ -612,6 +613,7 @@ Alice | (per-frame) (per-packet) | | |
in a way that is indistinguishable (to an external observer) from
having processed a valid ciphertext.
+ SFrame Ciphertext
+---------------+
+---------------| SFrame Header |
| +---------------+
@@ -649,7 +651,7 @@ Alice | (per-frame) (per-packet) | | |
| |
+---------------+
- Figure 5: Decryption flow
+ Figure 5: Decrypting an SFrame Ciphertext
4.5. Cipher Suites