RE: pre-established key mode as additional requirement?

["Dan Wing" <dwing@xxxxxxxxx>]

> It seems eminently reasonable to support key management schemes for  
> rtpsec that can leverage cached/stored keying material from prior  
> sessions to derive new keys for the current session without 
> requiring expensive cryptographic authentication operations.
> 
> Are you thinking of this as a MAY, a SHOULD, or a MUST?

It feels like a MAY or SHOULD, because it is 'merely' an optimization, and
requires a trade-off of state storage (how long do you keep this
information) versus computational effort. 

I would like to hear others expectations.

> Would you consider the TLS "session restart" machinery as qualifying  
> to meet this requirement?

Yes, I expect so.

-d