commit f880ad5982ac5833b91fa7192ffa283feacfd9bf parent e88cda15136afccfa7c863acc18fe251950cc3d3 Author: Pedram Fardzadeh <p.fardzadeh@protonmail.com> Date: Wed, 17 Jul 2024 02:18:52 +0200 Test vectors for encap and decap Diffstat:
| M | draft-gnunet-communicators.xml | | | 65 | +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-- |
1 file changed, 63 insertions(+), 2 deletions(-)
diff --git a/draft-gnunet-communicators.xml b/draft-gnunet-communicators.xml @@ -1708,10 +1708,71 @@ SetupCipher(REC_ID, MSK): ]]></artwork> </section> <section> - <name>Encaps():</name> + <name>Encap():</name> + <t> + Refer to <xref target="elligator_dhkem"/> for the definition of the utilized Encap and Decap functions. Note + that the receivers public key (aka peer identity) is an Edwards Curve point and need to be transformed + into an X25519 public key. The denoted Representative is the elligator encoding of the ephemeral + public key for which the most significant bit and second most significant bit are set to zero (unserialized). + </t> + + <artwork name="" type="" align="left" alt=""><![CDATA[ + Receivers Edwards public key (little-endian): + 3f eb ad ac 12 2d 39 77 + 25 ff 58 0f 6c e9 a3 e1 + c1 c4 a7 de 19 80 7f 13 + d3 83 f2 f9 b6 46 71 36 + + Ephemeral private key sender (little-endian): + 09 39 59 66 d6 d1 c4 93 + b9 91 7d d1 2c 8d d2 4e + 2c 05 c0 81 c9 8a 67 eb + 2d 6d ff 62 2e c9 c0 69 + + Ephemeral public key sender (little-endian): + 3f 73 ee 0d d1 97 0f f9 + 57 f7 ec 15 e0 b5 15 11 + 66 be 30 46 e6 a8 b0 ee + 53 be ca 39 5b 74 e4 2c + + Representative (little-endian): + 1d 93 07 7a b5 e9 ae c4 + 93 1a 92 21 ad fa 48 a4 + 6f 40 1b 69 9b 8e e7 44 + a2 0b 07 e5 7e 5c c5 be + + Key Material (little-endian): + 68 6d 3c e6 08 a6 b8 77 + 42 4b a2 fb 71 b1 03 f2 + c0 d4 f7 ab e5 f1 e5 2b + 30 97 a8 4a 71 4a c7 7b + ]]></artwork> </section> <section> - <name>Decaps():</name> + <name>Decap():</name> + <t> + The depicted "receivers edwards private key" is the corresponding private key of the "receivers Edwards public key" + defined above. The resulting key material should therefore be the same for the same Representative. + </t> + <artwork name="" type="" align="left" alt=""><![CDATA[ + Receivers Edwards private key (little-endian): + f3 38 87 a8 56 2d ad 51 + 51 e9 28 9a 0a fa 13 01 + cc c6 98 91 78 50 d5 6e + a4 09 a9 94 94 97 ba a4 + + Representative (little-endian): + 1d 93 07 7a b5 e9 ae c4 + 93 1a 92 21 ad fa 48 a4 + 6f 40 1b 69 9b 8e e7 44 + a2 0b 07 e5 7e 5c c5 be + + Key Material (little-endian): + 68 6d 3c e6 08 a6 b8 77 + 42 4b a2 fb 71 b1 03 f2 + c0 d4 f7 ab e5 f1 e5 2b + 30 97 a8 4a 71 4a c7 7b + ]]></artwork> </section> </section> </back>