[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [TLS] shared secrets from passwords

Several RFC's have such a recommendation. RFC 4306 (IKEv2) has this construction to make a shared secret out of a password (section 2.15): 

  prf(Shared Secret,"Key Pad for IKEv2")
The idea is that this shared secret has the properties that (a) it can't be used for anything other than IKEv2 so storing it is presumably OK (why?), and (b) it looks random. The RFC goes on to state this: 

                               As noted above, deriving the shared
  secret from a password is not secure.  This construction is used
  because it is anticipated that people will do it anyway.


On Jan 29, 2008, at 6:11 PM, Mohamad Badra wrote:


Dear all,
Is there any RFC with recommendations for deriving shared secrets from passwords? 

Thanks!
--
Mohamad Badra
CNRS - LIMOS Laboratory



_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls

Scanned by Check Point Total Security Gateway.





_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls