forked from I2P_Developers/i2p.www
encls2 spec update
This commit is contained in:
@@ -4,7 +4,7 @@ Encrypted LeaseSet Specification
|
||||
.. meta::
|
||||
:category: Protocols
|
||||
:lastupdated: May 2019
|
||||
:accuratefor: 0.9.40
|
||||
:accuratefor: 0.9.41
|
||||
|
||||
.. contents::
|
||||
|
||||
@@ -675,6 +675,7 @@ authCookie = DECRYPT(clientKey_i, clientIV_i, clientCookie_i)
|
||||
Pre-shared key client authorization
|
||||
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||
Each client generates a secret 32-byte key ``psk_i``, and sends it to the server.
|
||||
Alternatively, the server can generate the secret key, and send it to one or more clients.
|
||||
|
||||
Server processing
|
||||
^^^^^^^^^^^^^^^^^
|
||||
@@ -753,10 +754,13 @@ Downsides of DH client authorization
|
||||
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
||||
- Requires N + 1 DH operations on the server side for N clients.
|
||||
- Requires one DH operation on the client side.
|
||||
- Requires the client to generate the secret key.
|
||||
|
||||
Advantages of PSK client authorization
|
||||
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
||||
- Requires no DH operations.
|
||||
- Allows the server to generate the secret key.
|
||||
- Allows the server to share the same key with multiple clients, if desired.
|
||||
|
||||
Downsides of PSK client authorization
|
||||
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
||||
|
Reference in New Issue
Block a user