[p2p-hackers] P2P Authentication

[nagendra modadugu]

* Kerry Bonin <kerry at vscape.com> [2005-10-25 08:28:25 -0700]:

> Another nice thing about certs is that you don't have to use SSL - if 
> you still want a UDP based protocol, just use the cert to sign your key 
> exchange, then use a stream cipher that can live w/ dropped packets.  
> I've got a simple protocol for this I need to turn into an RFC and 
> publish as open source, just too many other items in front of it at the 
> moment...

You may find Datagram TLS useful:
 
http://ietf.org/internet-drafts/draft-rescorla-dtls-05.txt
 
Datagram TLS is essentially a version of TLS that works over datagram
transport while respecting datagram semantics.  The handshake protocol
implements some rudimentary reliability, but otherwise functions as in
TLS.

OpenSSL 0.9.8 includes an implementation of DTLS.

nagendra