Unit III - XMPP

Extensible Messaging and Presence Protocol
(XMPP)
2
Extensible Messaging and Presence Protocol

(XMPP)
• A communication protocol based on XML.
• Designed to be extensible.
1999~2000 2011 2015

RFC 3920 RFC 6120
RFC 3921 RFC 6121
RFC 6122 RFC 7622
6
XMPP Architecture
• Distributed client-server architecture
cyberlink.co google.co
TC
m m
P
TC TC
TC
P P
P
sean@cyberlink.com bob@google.com
7
Jabber ID (JID)
• XMPP address
• Bare JID
▫ <localpart@domainpart>
▫ EX: sean@cyberlink.com
• Full JID
▫ <localpart@domainpart/resourcepart>
▫ EX: sean@cyberlink.com/123456789
8
XML Stanzas
• iq
▫ Info/query
• message
▫ Send a Message to a JID (a user or a group)
• presence
▫ Broadcast message
9
Open a Stream – Initial Stream

<?xml version=‘1.0’?>
<stream:stream
to='u.cyberlink.com'
xmlns:stream='http://etherx.jabber.org/streams'
xmlns='jabber:client‘
xml:lang
='en'
version='1.0'>
Port:5222
TC
P
sean@cyberlink.com cyberlink.co
m
10
Open a Stream – Response Stream

<?xml version >
<stream:stream
version="1.0"
from="u.cyberlink.com"
id="3053277074"
xml:lang="en“
xmlns:stream='http://et
herx.jabber.org/streams
'
xmlns='jabber:client‘
>
TC
P
m
11
Stream Negotiation - Presence
<presence ….>
<show/>
</presence>
TC
P
m
12
Stream Negotiation - iq
<iq id=“1” type=“get”> <iq id=“1” type=“result”>

… …
</iq> </iq>
TC
P
m
type: get, set, result, error

13
Stream Negotiation - message
<message….>
Hello
</message>
TC
P
m
14
Stream Negotiation – Close Stream
</stream> </stream>
TC
P
m
15
Client Server Communication Overview
<?xml version='1.0'?>
<stream
from=“samo@cyberlink.com”
to=“cyberlink.com”>
<presence
…>Online</presence>
<iq …>…</iq>
<message
…>Hello</message>
</stream>
16
Authentication for XMPP

• Transport Layer Security (TLS)
▫ Secure the stream from tampering and eavesdropping.
▫ MUST send a new initial stream header after finish.
• Simple Authentication and Security Layer
(SASL)
▫ Authenticate a stream. (U: base64(id+token))
▫ MUST send a new initial stream header after finish.
17
Cryptography
• Symmetric
▫ Use the same key for encrypt/decrypt.
▫ Security: Poor
▫ Performance: Good
• Asymmetric
▫ Use public key for encryption and use private for decryption.
▫ Security: Good
▫ Performance: Poor
18
TLS
• TLS 1.0
• TLS 1.1
• TLS 1.2
• TLS 1.3 (draft)
• Employ a handshake using asymmetric cipher.
19
Stream Header
<?xml version='1.0'?> <?xml version='1.0'?>

<stream <stream id=“+
from=“sean@cyberlink.com” +TR84Sm6A3hnt3Q065SnAbbk3Y=”
to=“sean@cyberlink.com”
to=“cyberlink.com”> from=“cyberlink.com”>
TC
P
m
20
TLS Negotiation
<stream:features>
<starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'>
<required/>
</starttls>
</stream:features>
TC
P
m
21
<stream:features xmlns="http://etherx.jabber.org/streams">
<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls" /> R
<mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl">
<mechanism>PLAIN</mechanism>
</mechanisms>
</stream:features>
I
<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls" />
TLS Handshake Protocol
<proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls" />

or
<failure xmlns="urn:ietf:params:xml:ns:xmpp-tls" />
</stream:stream>
22
Client_hello(client_version, session_id, cipher_

suites, compression_methods, RNc )
TC
P
m
RNc RNc
PKc PrKc
Server_hello(client_version, session_id, cipher_ suites,

compression_methods, RNs )
TC
P
m
RNc RNc RNs
RNs
PKc PrKc PKs PrKs

24
Server_Certificate(CA, )
PKs
TC
P
m
RNc RNc RNs
RNs
PKc PrKc PKs PrKs

25
Check server certificate
TC
P
m
RNc RNs RNc RNs
PKc PrKc PKs PKs PrKs

26
Client_Certificate(CA,
) PKc
TC
P
m
RNc RNs RNc RNs
PKc PrKc PKs PKs PrKs

27
Generate random
pre-master-
PsMecSret
TC
P
m
RNc RNs PMS RNc RNs
PKc PrKc PKs PKc PKs PrKs

28
Encrypted PMS with

PKs
TC
P
m
RNc RNs PMS RNc RNs PMS
PKc PrKc PKs PKc PKs PrKs

29
Calculae Master-Secret MS from RNc RNs PMS
TC
P
m
RNc RNs PMS
MS
PKc PKs PrKs

30
Calculae Master-Secret MS from RNc RNs PMS
TC
P
m
MS MS
31
1. Change cipher spec

2. Client finish
TC
P
m
MS MS
32
1. Change cipher spec

2. Server finish
TC
P
m
MS MS
33
<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls" /> R
<mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl">
</mechanisms>
</stream:features>
I
<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls" />
<proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls" />

or
<failure xmlns="urn:ietf:params:xml:ns:xmpp-tls" />
</stream:stream>
34
Restarts stream
<stream
<stream
from=“samo@cyberlink.com” id=“++TR84Sm6A3hnt3Q065SnAbbk2Y=”
to=“samo@cyberlink.com”
to=“cyberlink.com”> from=“cyberlink.com”>
TC
P
m
35
Restarts
• On successful negotiation of a feature that necessitates a stream
restart, both parties MUST consider the previous stream to be
replaced but MUST NOT send a closing </stream> tag and MUST
NOT terminate the underlying TCP connection.
• The initiating entity then MUST send a new initial stream header.
36
37
SASL Negotiation
<stream:features
xmlns:stream="http://etherx.jabber.org/streams">
<mechanisms
xmlns="urn:ietf:params:xml:ns:xmpp-sasl">
<mechanism>SCRAM-SHA-1-PLUS</
mechanism>
<mechanism>SCRAM-SHA-1</
mechanism>
</
mechanism
s>
TC
</
P
sean@cyberlink.com stream:feat cyberlink.co
ures> m
38
SASL Negotiation
<mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"> R
</mechanisms>
</stream:features>
<auth xmlns="urn:ietf:params:xml:ns:xmpp-sasl“
I mechanism="PLAIN">
ADc2ODAwMQBkMGY2ZjllMi00YmRlLTQ2ZjItOGI2Yi1lNDM0OTk
2ZjczZGQ=
</auth>
R
<success xmlns="urn:ietf:params:xml:ns:xmpp-sasl" />
39
SASL Negotiation
• Restart
40
Resource Binding
<stream:features xmlns:stream="http://etherx.jabber.org/streams">
<bind xmlns="urn:ietf:params:xml:ns:xmpp-bind"/>
</stream:features>
TC
P
m
41
Resource Binding
<bind xmlns="urn:ietf:params:xml:ns:xmpp-bind" /> R
<session xmlns="urn:ietf:params:xml:ns:xmpp-session" />
</stream:features>
<iq type="set" id="97fe2b99-dfa6-4fa0-a963-f27e840b1adb-1">

I <bind xmlns="urn:ietf:params:xml:ns:xmpp-bind">
<resource>mobile</resource>
</bind>
</iq>
<iq type="result" id="97fe2b99-dfa6-4fa0-a963-f27e840b1adb-1">

<bind xmlns="urn:ietf:params:xml:ns:xmpp-bind"> R
<jid>juliet@im.example.com/mobile</jid>
</bind>
</iq>
42
Currently Design for U

• Remove the mechanism of RESTART.
• Add <CLResumed/> for doing SASL and binding again after reconnecting.
43
CLResume: server give info

<clresumed xmlns="urn:xmpp:custom:resume"
status="success"
sessionid="g2gEbQAAAAYzMTgwMDFtAAAAD3UuY3liZXJsa
W5rLmNvbW0AAAAkRjg5MjlFMzctRTAwMi00QzdGLTlEOTgt
RjkxNTFGNUQ3NEI5aANiAAAFkmIACeRcYgAM3cE="
expiration="2592000"/>
TC
P
m
44
Begin Resume
sessionid="g2gEbQAAAAYzMTgwMDFtAAAAD3UuY3liZX
JsaW5rLmNvbW0AAAAkRjg5MjlFMzctRTAwMi00QzdGL
TlEOTgtRjkxNTFGNUQ3NEI5aANiAAAFkmIACeRcYgAM3
cE=" />
TC
P
m
45
Resume success
status="success"
sessionid="g2gEbQAAAAYzMTgwMDFtAAAAD3UuY3liZXJsa
W5rLmNvbW0AAAAkRjg5MjlFMzctRTAwMi00QzdGLTlEOTgt
RjkxNTFGNUQ3NEI5aANiAAAFkmIACeRcYgAM3cE="
expiration="2592000"/>
TC
P
m
49
Q&A

Unit III - XMPP

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Unit III - XMPP

Uploaded by

Copyright:

Available Formats

Extensible Messaging and Presence Protocol

Extensible Messaging and Presence Protocol

1999~2000 2011 2015

Open a Stream – Initial Stream

Open a Stream – Response Stream

Stream Negotiation - Presence

<iq id=“1” type=“get”> <iq id=“1” type=“result”>

type: get, set, result, error

Stream Negotiation - message

Stream Negotiation – Close Stream

Client Server Communication Overview

Authentication for XMPP

<?xml version='1.0'?> <?xml version='1.0'?>

TLS Handshake Protocol

<proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls" />

TLS Handshake Protocol

Client_hello(client_version, session_id, cipher_

Server_hello(client_version, session_id, cipher_ suites,

PKc PrKc PKs PrKs

TLS Handshake Protocol

PKc PrKc PKs PrKs

TLS Handshake Protocol

Check server certificate

PKc PrKc PKs PKs PrKs

TLS Handshake Protocol

PKc PrKc PKs PKs PrKs

TLS Handshake Protocol

PKc PrKc PKs PKc PKs PrKs

TLS Handshake Protocol

Encrypted PMS with

PKc PrKc PKs PKc PKs PrKs

TLS Handshake Protocol

Calculae Master-Secret MS from RNc RNs PMS

PKc PKs PrKs

TLS Handshake Protocol

Calculae Master-Secret MS from RNc RNs PMS

TLS Handshake Protocol

1. Change cipher spec

TLS Handshake Protocol

1. Change cipher spec

TLS Handshake Protocol

<proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls" />

<iq type="set" id="97fe2b99-dfa6-4fa0-a963-f27e840b1adb-1">

<iq type="result" id="97fe2b99-dfa6-4fa0-a963-f27e840b1adb-1">

Currently Design for U

CLResume: server give info

You might also like