[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [GNUnet-developers] HKDF usage in GNS block encryption
From: |
Bernd Fix |
Subject: |
Re: [GNUnet-developers] HKDF usage in GNS block encryption |
Date: |
Mon, 16 Sep 2019 18:59:38 +0000 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.7.2 |
On 9/16/19 6:02 PM, Christian Grothoff wrote:
> It is not intended, but AFAIK also has no security implications.
> Nevertheless, we should probably plan to fix the swap when we next break
> compatibility.
Maybe not swapping, but adding a salt (as 2nd arg to hkdf) - that would
be in line to the other usages (derive_h uses "key-derivation" as a
salt, maybe even use that?) >Y<