Fix bug in NTCP 2 proposal (thanks David Fifield!)

This commit is contained in:
str4d
2017-07-02 12:07:31 +00:00
parent 8f1c41bfc1
commit 9cb6dd9769

View File

@@ -279,13 +279,12 @@ Alice Bob
X --------------------------------> X -------------------------------->
<-----------------Y, E_K(S_B(X, Y)) <-----------------Y, E_K(S_B(X, Y))
E_K(S_B(X, Y))--------------------> E_K(S_A(X, Y))-------------------->
{% endhighlight %} {% endhighlight %}
where ``K = KDF(X^y) = KDF(Y^x)`` where ``S_J(M)`` is the signature of ``M`` by party ``J``, and the session key
is ``K = KDF(X^y) = KDF(Y^x)``. KDF is assumed to be a key derivation function,
KDF is assumed to be a key derivation function, the choice of which is in the choice of which is in principle arbitrary.
principle arbitrary.
Some notes on the above protocol, which are also discussed in [STS]_ are listed Some notes on the above protocol, which are also discussed in [STS]_ are listed
below: below: