commit dc3cc9fe787086c067aadc20bc18598dd048c02b
parent 78b598eab33cadda1d937821ce9b98062e106b61
Author: Martin Schanzenbach <mschanzenbach@posteo.de>
Date: Wed, 23 Sep 2020 18:01:53 +0200
bits
Diffstat:
1 file changed, 8 insertions(+), 9 deletions(-)
diff --git a/draft-schanzen-gns.xml b/draft-schanzen-gns.xml
@@ -1008,22 +1008,21 @@ q := SHA512 (HDKD-Public(zk, label))
</t>
<artwork name="" type="" align="left" alt=""><![CDATA[
PRK_k := HKDF-Extract ("gns-aes-ctx-key", zk)
-PRK_iv := HKDF-Extract ("gns-aes-ctx-iv", zk)
+PRK_n := HKDF-Extract ("gns-aes-ctx-iv", zk)
K := HKDF-Expand (PRK_k, label, 256 / 8);
-NONCE := HKDF-Expand (PRK_iv, label, 32 / 8)
-IV := EXPIRATION
+NONCE := HKDF-Expand (PRK_n, label, 32 / 8)
]]></artwork>
<t>
HKDF is a hash-based key derivation function as defined in
<xref target="RFC5869" />. Specifically, HMAC-SHA512 is used for the
extraction phase and HMAC-SHA256 for the expansion phase.
- The output keying material is 32 octets (256 bit) for the symmetric
- key and 4 octets (32 bit) for the nonce.
- The symmetric key "K" is a 256 bit AES <xref target="RFC3826" /> key:
+ The output keying material is 32 octets (256 bits) for the symmetric
+ key and 4 octets (32 bits) for the nonce.
+ The symmetric key "K" is a 256-bit AES <xref target="RFC3826" /> key:
</t>
<t>
- The nonce is combined with a 64 bit initialization vector and a
- 32 bit block counter as defined in <xref target="RFC3686" />.
+ The nonce is combined with a 64-bit initialization vector and a
+ 32-bit block counter as defined in <xref target="RFC3686" />.
The block counter begins with the value of one,i and it is incremented
to generate subsequent portions of the key stream.
The block counter is a 32-bit integer value in network byte order.
@@ -1538,7 +1537,7 @@ NICK: john (Supplemental)
</dd>
</dl>
<t>
- The signature over the public key covers a 32 bit pseudo header
+ The signature over the public key covers a 32-bit pseudo header
conceptually prefixed to the public key. The pseudo header includes
the key length and signature purpose:
</t>
