Subject: [KEYPROV] [issue19] PSKC: clarify the key generation for HMAC value of a secret data when a PBE is used for encryption

From: Mingliang Pei <[email-masked]>
Date: Wed, 20 Jun 2007 14:19:52 +0000

New submission from Mingliang Pei <[email-masked]>:

Currently, PSKC SecretContainer contains an encryption method for data 
encryption including an secret in DataType. 

<complexType name="DataType">
     <sequence>
       <element name="Value" type="base64Binary"/>
       <element name="ValueDigest" type="base64Binary" minOccurs="0"/>
       <attribute name="Name" type="string" use="required"/>
     </sequence>
   </complexType>

"The digest MUST be calculated on the unencrypted value and MUST use one 
of the Digest algorithms specified in DigestMethodType element of the 
SecretContainer."

<complexType name="DigestMethodType">
     <sequence>
       <element name="DigestKeyLabel" minOccurs="0"/>
     </sequence>
     <attribute name="algorithm" type="oath-pskc:DigestAlgorithmType"
     use="required"/>
   </complexType>

When PBE is used as encryption and HMAC-SHA1 as digest algorithm, it isn't 
clear whether one should use the password value as the key for HMAC or PBE 
derived encryption key as the HMAC key.

It is worthywhile to clarify this in the document for inter-op clarify.

----------
assignedto: mpei
messages: 34
nosy: keyprov, mpei
priority: feature
status: chatting
title: PSKC: clarify the key generation for HMAC value of a secret data when a PBE is used for encryption

_________________________________________________________
KEYPROV Roundup Issue Tracker <[email-masked]>
<http://www.tschofenig.priv.at:8080/keyprov/issue19>
_________________________________________________________

_______________________________________________
KEYPROV mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/keyprov