kytv/I2P_Website
1
0
Fork 0
forked from I2P_Developers/i2p.www
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

prop. 144 fixes from chisana

Browse Source
This commit is contained in:
zzz
2019-06-16 21:51:15 +00:00
parent 7365d93a8a
commit ca84a14da1
1 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
i2p2www/spec/proposals/144-ecies-x25519-aead-ratchet.rst
View File

@@ -2,10 +2,10 @@
ECIES-X25519-AEAD-Ratchet ECIES-X25519-AEAD-Ratchet
========================= =========================
.. meta:: .. meta::
:author: zzz :author: zzz, chisana
:created: 2018-11-22 :created: 2018-11-22
:thread: http://zzz.i2p/topics/2639 :thread: http://zzz.i2p/topics/2639
:lastupdated: 2019-05-29 :lastupdated: 2019-06-16
:status: Open :status: Open
.. contents:: .. contents::
@@ -780,7 +780,7 @@ flags :: 2 bytes
bit order: 15 14 .. 3210 bit order: 15 14 .. 3210
bit 0: 1 if ephemeral key is to be used, 0 if not bit 0: 1 if ephemeral key is to be used, 0 if not
bit 1: 1 if Static Key Section follows, 0 if not bit 1: 1 if Static Key Section follows, 0 if not
bits 15-1: Unused, set to 0 for future compatibility bits 15-2: Unused, set to 0 for future compatibility
num :: Message number, 2 bytes num :: Message number, 2 bytes
unused :: 4 bytes unused :: 4 bytes
key :: the originator's ephemeral key, 32 bytes. key :: the originator's ephemeral key, 32 bytes.
@@ -1352,12 +1352,12 @@ Inputs:
Initialization: Initialization:
keydata = HKDF(sessTag_ck, ZEROLEN, "STInitialization", 64) keydata = HKDF(sessTag_ck, ZEROLEN, "STInitialization", 64)
// Output 1: Next chain key // Output 1: Next chain key
sessTag_ck = keydata[0:31] sessTag_chainKey = keydata[0:31]
// Output 2: The constant // Output 2: The constant
SESSTAG_CONSTANT = keydata[32:63] SESSTAG_CONSTANT = keydata[32:63]
// KDF_ST(ck, constant) // KDF_ST(ck, constant)
keydata_0 = HKDF(sessTag_ck, SESSTAG_CONSTANT, "SessionTagKeyGen", 64) keydata_0 = HKDF(sessTag_chainkey, SESSTAG_CONSTANT, "SessionTagKeyGen", 64)
// Output 1: Next chain key // Output 1: Next chain key
sessTag_chainKey_0 = keydata_0[0:31] sessTag_chainKey_0 = keydata_0[0:31]
// Output 2: The session tag // Output 2: The session tag
@@ -1365,7 +1365,7 @@ Inputs:
tag_0 = keydata_0[32:39] tag_0 = keydata_0[32:39]
// repeat as necessary to get to tag_n // repeat as necessary to get to tag_n
keydata_n = HKDF(chainKey_(n-1), SESSTAG_CONSTANT, "SessionTagKeyGen", 64) keydata_n = HKDF(sessTag_chainKey_(n-1), SESSTAG_CONSTANT, "SessionTagKeyGen", 64)
// Output 1: Next chain key // Output 1: Next chain key
sessTag_chainKey_n = keydata_n[0:31] sessTag_chainKey_n = keydata_n[0:31]
// Output 2: The session tag // Output 2: The session tag
@@ -1950,8 +1950,8 @@ any message sent to that key constitutes an ack, no explicit ack is required.
{% highlight lang='dataspec' %} {% highlight lang='dataspec' %}
+----+----+----+----+----+----+----+----+ +----+----+----+----+----+----+----+----+
| 9 | size |flg | | | 9 | size | sessionID |flg |
+----+----+----+----+ + +----+----+----+----+----+----+----+----+
| Garlic Clove Delivery Instructions | | Garlic Clove Delivery Instructions |
~ . . . ~ ~ . . . ~
| | | |
@@ -1959,7 +1959,7 @@ any message sent to that key constitutes an ack, no explicit ack is required.
blk :: 9 blk :: 9
size :: varies, typically 100 size :: varies, typically 100
session ID :: reverse session ID, length TBD session ID :: reverse session ID, length 4 bytes big endian
flg :: 1 byte flags flg :: 1 byte flags
bit order: 76543210 bit order: 76543210
bits 7-0: Unused, set to 0 for future compatibility bits 7-0: Unused, set to 0 for future compatibility