[lsd0001] branch master updated: 96bit IV GCM standard

[gnunet]

This is an automated email from the git hooks/post-receive script.

martin-schanzenbach pushed a commit to branch master
in repository lsd0001.

The following commit(s) were added to refs/heads/master by this push:
     new 6a2f014  96bit IV GCM standard
6a2f014 is described below

commit 6a2f014fba26e886d07bcb0cf4773df1580211ca
Author: Martin Schanzenbach <mschanzenbach@posteo.de>
AuthorDate: Mon Oct 5 14:57:14 2020 +0200

    96bit IV GCM standard
---
 draft-schanzen-gns.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/draft-schanzen-gns.xml b/draft-schanzen-gns.xml
index 341e4b1..35d02e7 100644
--- a/draft-schanzen-gns.xml
+++ b/draft-schanzen-gns.xml
@@ -743,14 +743,14 @@ BDATA := C|T = GCM-AES-256(K, IV, RDATA)
 PRK_k := HKDF-Extract ("gns-aes-ctx-key", zk)
 PRK_n := HKDF-Extract ("gns-aes-ctx-iv", zk)
 K := HKDF-Expand (PRK_k, label, 256 / 8);
-IV := HKDF-Expand (PRK_n, label, 128 / 8)
+IV := HKDF-Expand (PRK_n, label, 96 / 8)
 ]]></artwork>
          <t>
            HKDF is a hash-based key derivation function as defined in
            <xref target="RFC5869" />. Specifically, HMAC-SHA512 is used for the
            extraction phase and HMAC-SHA256 for the expansion phase.
            The output keying material is 32 octets (256 bits) for the symmetric
-           key and 16 octets (128 bits) for the IV.
+           key and 12 octets (96 bits) for the IV.
            The symmetric key "K" is a 256-bit AES <xref target="RFC3826" /> 
key.
          </t>
        </section>

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.