bytedisorder

Nerdical recommendations, and musings — more questions than answers — for engineers

DTLS v1.3: An Introduction

The folks over at WolfSSL, the cryptography library used by MariaDB since 10.4.6, put together an amazing introduction to DTLS 1.3. The presentation is fitting for both those familiar with DTLS and those new to the topic.

UDP-based protocols are becoming more common and robust in recent years, leading even HTTP to change to UDP in HTTP/3. DTLS, a new TLS protocol designed for UDP, secures generic protocols using UDP packets.

If you thought TLS could only be applied to TCP connections, or are surprised to hear that people care about UDP these days, now is a good time to catch up. Learn in this presentation how UDP-based services can provide security over connectionless protocols, resume TLS sessions after periods of inactivity without handshakes, and scale past the connection count limits of TCP.

Watch: Everything You Need to Know About DTLS 1.3 :: 46m

For a detailed view of the protocol Michael Driscoll provides a byte by byte breakdown. There you can view the hex dump of a real handshake and hover over hex values to see information about the different fields of the messages.

Visit: The Illustrated DTLS Connection