View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0005897 | GNUnet | GNS | public | 2019-09-17 07:52 | 2020-06-01 20:00 |
| Reporter | schanzen | Assigned To | schanzen | Due Date | |
| Priority | low | Severity | tweak | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Target Version | 0.12.0 | Fixed in Version | 0.12.0 | ||
| Summary | 0005897: Harmonize HKDF arguments for GNS block key derivations | ||||
| Description | So currently it looks like this in the code: PRK_h := HKDF-Extract ("key-derivation", x*P) h := HKDF-Expand (PRK_h, l | "gns", 512 / 8) d := h*x mod p PRK_kiv := HKDF-Extract (d*P, l) K := HKDF-Expand (PRK_kiv, "gns-aes-ctx-key", 512 / 8) IV := HKDF-Expand (PRK_kiv, "gns-aes-ctx-iv", 256 / 8) In the case of PRK_kiv we use d*P as the "salt" value. For PRK_h we use a static public string. I propose we modify the derivation of K and IV to: PRK_h := HKDF-Extract ("key-derivation", x*P) h := HKDF-Expand (PRK_h, l, 512 / 8) <== CHANGED: Removed "gns" d := h*x mod p PRK_k := HKDF-Extract ("gns-aes-ctx-key", d*P) <== CHANGED: Split into two PRKs and use string as salt and d*P as IKM PRK_iv := HKDF-Extract ("gns-aes-ctx-iv", d*P) <== CHANGED: Split into two PRKs and use string as salt and d*P as IKM K := HKDF-Expand (PRK_k, l, 512 / 8) <== CHANGED: Use only l as info IV := HKDF-Expand (PRK_iv, l, 256 / 8) <== CHANGED: Use only l as info we _may_ also change the "key-derivation" string to something else, suggestions welcome. This change will break backwards compatibility for GNS. | ||||
| Tags | No tags attached. | ||||
| Fixed in 8988b34f6d guarded by ifdefs for LSD001. | |
| Reopen until we remove ifdefs | |
| Flipped in 3a13f497b..b365e4d52 | |
| 0.12.0 released | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2019-09-17 07:52 | schanzen | New Issue | |
| 2019-11-30 20:09 | schanzen | Relationship added | child of 0005920 |
| 2019-12-01 11:59 | schanzen | Assigned To | => schanzen |
| 2019-12-01 11:59 | schanzen | Status | new => resolved |
| 2019-12-01 11:59 | schanzen | Resolution | open => fixed |
| 2019-12-01 11:59 | schanzen | Fixed in Version | => 0.12.0 |
| 2019-12-01 11:59 | schanzen | Note Added: 0015109 | |
| 2019-12-01 12:02 | schanzen | Status | resolved => assigned |
| 2019-12-01 12:02 | schanzen | Note Added: 0015110 | |
| 2019-12-07 13:49 | Christian Grothoff | Status | assigned => resolved |
| 2019-12-07 13:49 | Christian Grothoff | Note Added: 0015134 | |
| 2019-12-15 14:18 | schanzen | Note Added: 0015178 | |
| 2019-12-15 14:18 | schanzen | Status | resolved => closed |
| 2020-05-31 22:52 | Relationship added | child of 0006324 |