diff --git a/better-diagram/draft-ietf-sframe-enc.html b/better-diagram/draft-ietf-sframe-enc.html index 6619136..6d592d2 100644 --- a/better-diagram/draft-ietf-sframe-enc.html +++ b/better-diagram/draft-ietf-sframe-enc.html @@ -2037,24 +2037,24 @@

before packetizing it, the necessary media metadata will be moved out of the encoded frame buffer, to be sent in some channel visible to the SFU (e.g., an RTP header extension).

-
+
- - + + - + - + - + @@ -2070,20 +2070,20 @@

- - - - - + + + + + - + - + plaintext sframe_key @@ -2096,15 +2096,17 @@

metadata AAD AEAD.Encrypt - SFrame - Header - ciphertext + SFrame + Ciphertext + SFrame + Header + ciphertext

Figure 4: -Encryption flow +Encrypting an SFrame Ciphertext
@@ -2143,74 +2145,76 @@

other reason, the client MUST discard the ciphertext. Invalid ciphertexts SHOULD be discarded in a way that is indistinguishable (to an external observer) from having processed a valid ciphertext.

-
+
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + - SFrame - Header - ciphertext - sframe_key - Key - KID - sframe_salt - Nonce - CTR - metadata - AAD - AEAD.Decrypt - | - plaintext + SFrame + Ciphertext + SFrame + Header + ciphertext + sframe_key + Key + KID + sframe_salt + Nonce + CTR + metadata + AAD + AEAD.Decrypt + | + plaintext
Figure 5: -Decryption flow +Decrypting an SFrame Ciphertext
diff --git a/better-diagram/draft-ietf-sframe-enc.txt b/better-diagram/draft-ietf-sframe-enc.txt index 006c704..65b9aa1 100644 --- a/better-diagram/draft-ietf-sframe-enc.txt +++ b/better-diagram/draft-ietf-sframe-enc.txt @@ -566,6 +566,7 @@ Alice | (per-frame) (per-packet) | | | | | | AEAD.Encrypt | | + | SFrame Ciphertext | | +---------------+ | +-------------->| SFrame Header | | +---------------+ | @@ -576,7 +577,7 @@ Alice | (per-frame) (per-packet) | | | | | +---------------+ - Figure 4: Encryption flow + Figure 4: Encrypting an SFrame Ciphertext 4.4.4. Decryption @@ -612,6 +613,7 @@ Alice | (per-frame) (per-packet) | | | in a way that is indistinguishable (to an external observer) from having processed a valid ciphertext. + SFrame Ciphertext +---------------+ +---------------| SFrame Header | | +---------------+ @@ -649,7 +651,7 @@ Alice | (per-frame) (per-packet) | | | | | +---------------+ - Figure 5: Decryption flow + Figure 5: Decrypting an SFrame Ciphertext 4.5. Cipher Suites