[noise] Minor KDF concern
stephen at squareup.com
Sat Jul 5 02:34:18 PDT 2014
While writing a basic implementation of Noise Boxes, I realized that the
KDF doesn't mix the output length into the HMAC inputs. If you use the KDF
to produce two keys of different lengths with the same secret, extra_data,
and info parameters, the shorter key will be a prefix of the longer one.
Does it make sense to append the key length to the message that is HMACed?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Noise