encls2 spec update

This commit is contained in:
zzz
2019-05-25 14:33:14 +00:00
parent 9e5b6bb0d4
commit d232577ef3

View File

@@ -4,7 +4,7 @@ Encrypted LeaseSet Specification
.. meta::
:category: Protocols
:lastupdated: May 2019
:accuratefor: 0.9.40
:accuratefor: 0.9.41
.. contents::
@@ -675,6 +675,7 @@ authCookie = DECRYPT(clientKey_i, clientIV_i, clientCookie_i)
Pre-shared key client authorization
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Each client generates a secret 32-byte key ``psk_i``, and sends it to the server.
Alternatively, the server can generate the secret key, and send it to one or more clients.
Server processing
^^^^^^^^^^^^^^^^^
@@ -753,10 +754,13 @@ Downsides of DH client authorization
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- Requires N + 1 DH operations on the server side for N clients.
- Requires one DH operation on the client side.
- Requires the client to generate the secret key.
Advantages of PSK client authorization
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
- Requires no DH operations.
- Allows the server to generate the secret key.
- Allows the server to share the same key with multiple clients, if desired.
Downsides of PSK client authorization
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^