[noise] ASKs again: Dependent and Independent?

Trevor Perrin trevp at trevp.net
Tue Aug 14 01:42:42 PDT 2018


On Tue, Aug 14, 2018 at 8:25 AM, Trevor Perrin <trevp at trevp.net> wrote:
>
> So with our current HKDF symmetric crypto, this would look similar the
> simple dependent-key approach:
>
>   ask = HKDF(ck, h || label, info="askd)

Actually, it's not that similar, it would have be something like:

  ask = HKDF(ck, <input key material>, info="ask" || h || label)

This would share the initial HKDF-Extract HMAC with MixKey, only the
HKDF-Expand HMACs would be different due to the "info".


Trevor


More information about the Noise mailing list