Re: [TLS] draft-urien-tls-keygen-00.txt

[Pascal Urien <Pascal.Urien@xxxxxxx>]

Hi All,

 - There is a common point between the two proposals, i.e. use of 
TLS for key generation

 - In draft-ietf-tls-extractor-01.txt the TLS PRF function is used
 - In draft-urien-tls-keygen-00.txt a separate KDF function is used.
   Krawczyk, H (one of the HMAC designer) wrote a very interesting 
paper about tthe design of KDF functions
  "On Extract-then-Expand Key Derivation Functions and an HMAC-based 
KDF", http://www.ee.technion.ac.il/~hugo/kdf/, March 2008

  - The point that is not addressed by 
draft-ietf-tls-extractor-01.txt, is the case for which keys are 
pushed by server and not computed by
    both parties (client and server)

Pascal




At 14:20 23/06/2008, Simon Josefsson wrote:
> It is a good idea to use different labels for different key usage.
> Further, I would consider interactions between your document and the
> following WG document:
>
> http://www.ietf.org/internet-drafts/draft-ietf-tls-extractor-01.txt
>
> You could refer to this for key label discussions.
>
> /Simon
>
> Pascal Urien <Pascal.Urien@xxxxxxx> writes:
>
> > Hi Mike,
> >
> >   I agree on that point.
> >
> >    Maybe the label used with KDF could be different according
> >   to different uses
> >
> > Pascal
> >
> > At 20:24 22/06/2008, Mike wrote:
> >>It might be better to use a label other than "key expansion" in the KDF
> >>since that is already used in TLS.
> >>
> >>Mike
> >>
> >>
> >>Pascal Urien wrote:
> >>>Dear all,
> >>>The draft 
> http://www.ietf.org/internet-drafts/draft-urien-tls-keygen-00.txt
> >>>  proposes a  keying infrastructure based on the TLS protocol.
> >>>  It suggests defining an additional Key Distribution Function (KDF)
> >>>  in order to deliver a set of cryptographic keys.
> >>>   In a peer to peer mode keys are directly produced as inputs of
> >>> the KDF functions.
> >>>   For centralized architectures they are delivered through containers,
> >>>   secured with keys derived from the KDF function.
> >>>   I will attend to the next IETF meeting in Dublin, and i hope to present
> >>>   more precisely the scope of this proposal
> >>>Best Regards
> >>>Pascal
> >>_______________________________________________
> >>TLS mailing list
> >>TLS@xxxxxxxx
> >>https://www.ietf.org/mailman/listinfo/tls


_______________________________________________
TLS mailing list
TLS@xxxxxxxx
https://www.ietf.org/mailman/listinfo/tls