Prop 111: SipHash keys little endian

This commit is contained in:
zzz
2018-06-21 15:52:24 +00:00
parent a81f2a32c8
commit 8e2928208f

View File

@@ -1565,15 +1565,15 @@ ck = from handshake phase
sip_master = (all zeros)
sipkeys_ab = HMAC-SHA256(temp_key, byte(0x01)).
sipk1_ab = sipkeys_ab[0:7], big endian
sipk2_ab = sipkeys_ab[8:15], big endian
sipk1_ab = sipkeys_ab[0:7], little endian
sipk2_ab = sipkeys_ab[8:15], little endian
sipiv_ab = sipkeys_ab[16:23]
Bob to Alice SipHash k1, k2, IV:
sipkeys_ba = HMAC-SHA256(temp_key, sipkeys_ab || byte(0x02)).
sipk1_ba = sipkeys_ba[0:7], big endian
sipk2_ba = sipkeys_ba[8:15], big endian
sipk1_ba = sipkeys_ba[0:7], little endian
sipk2_ba = sipkeys_ba[8:15], little endian
sipiv_ba = sipkeys_ba[16:23]
// overwrite the temp_key in memory, no longer needed