Skip to content
uencoder

DTLS

DTLS (Datagram TLS, RFC 9147) provides TLS-grade security over UDP, used for WebRTC signaling and SRTP key negotiation.

Purpose

It brings encryption, authentication, and integrity to unreliable UDP, and it is the mandatory key negotiation protocol in WebRTC.

Mechanism

The TLS record layer is adapted to UDP, handling loss, retransmission, and reordering. Handshake messages gain sequence numbers and fragment offsets to cope with UDP's unreliability. The DTLS-SRTP profile negotiates SRTP keys.

Use cases

  • WebRTC key negotiation
  • CoAP IoT security
  • Low-latency TLS

Related tools

References