MarketDatagram Transport Layer Security
Company Profile

Datagram Transport Layer Security

Datagram Transport Layer Security (DTLS) is a communications protocol providing security to datagram-based applications by allowing them to communicate in a way designed to prevent eavesdropping, tampering, or message forgery. The DTLS protocol is based on the stream-oriented Transport Layer Security (TLS) protocol and is intended to provide similar security guarantees. The DTLS protocol datagram preserves the semantics of the underlying transport—the application does not suffer from the delays associated with stream protocols, but because it uses User Datagram Protocol (UDP) or Stream Control Transmission Protocol (SCTP), the application has to deal with packet reordering, loss of datagram and data larger than the size of a datagram network packet. Because DTLS uses UDP or SCTP rather than TCP it avoids the TCP meltdown problem when being used to create a VPN tunnel.

Definition
The following documents define DTLS: • from May 2008 for use with Datagram Congestion Control Protocol (DCCP) • from March 2009 for use with Control And Provisioning of Wireless Access Points (CAPWAP) • from May 2010 for use with Secure Real-time Transport Protocol (SRTP) subsequently called DTLS-SRTP in a draft with Secure Real-Time Transport Control Protocol (SRTCP) ==Implementations==
Implementations
Libraries ApplicationsCisco AnyConnect VPN Client uses TLS and invented DTLS-based VPN. and when forming off-cloud tunnels between Cato sockets. • ZScaler tunnel 2.0 for ZScaler Internet Access (ZIA) uses DTLS for tunneling. ZScaler Private Access (ZPA) does not support DTLS for WebRTC. Firefox 86 and onward does not support DTLS 1.0. • Remote Desktop Protocol 8.0 and onwards. ==Vulnerabilities==
Vulnerabilities
In February 2013 two researchers from Royal Holloway, University of London discovered a timing attack which allowed them to recover (parts of the) plaintext from a DTLS connection using the OpenSSL or GnuTLS implementation of DTLS when Cipher Block Chaining mode encryption was used. ==See also==
tickerdossier.comtickerdossier.substack.com