Fix bug in NTCP 2 proposal (thanks David Fifield!)

This commit is contained in:
str4d
2017-07-02 12:07:31 +00:00
parent 8f1c41bfc1
commit 9cb6dd9769

View File

@@ -279,13 +279,12 @@ Alice Bob
X -------------------------------->
<-----------------Y, E_K(S_B(X, Y))
E_K(S_B(X, Y))-------------------->
E_K(S_A(X, Y))-------------------->
{% endhighlight %}
where ``K = KDF(X^y) = KDF(Y^x)``
KDF is assumed to be a key derivation function, the choice of which is in
principle arbitrary.
where ``S_J(M)`` is the signature of ``M`` by party ``J``, and the session key
is ``K = KDF(X^y) = KDF(Y^x)``. KDF is assumed to be a key derivation function,
the choice of which is in principle arbitrary.
Some notes on the above protocol, which are also discussed in [STS]_ are listed
below: