Re: Some comments on JFK

[Ran Canetti <canetti@watson.ibm.com>]

Eric, thanks for your good comments. Two points:

* Regarding key derivation and expansion. This can be done in a number 
of standard ways.  For instance, the way it is done in IKEv1 is fine.
(To be specific, use HMAC in lieu of the generic PRF.)
Indeed, this should be specified.

* Regarding different keys for encryption by I and R. This is not really
necessary if you're using CBC with random IV, or any "decent" encryption
method. (And, yes, ECB mode is not really "decent" in this context.)

Ran

---

• Prev by Date: Re: compare-jfk-sigma.txt
• Next by Date: Re: On shared keys (was RE: SOI: identity protection and DOS)
• Prev by thread: Re: Some comments on JFK
• Next by thread: Re: Some comments on JFK
• Index(es):
  • Main
  • Thread