Subject: [KEYPROV] DSKPP: K_MAC in four-pass

From: "Doherty, Andrea" <[email-masked]>
Date: Wed, 12 Sep 2007 14:51:43 -0400

It would be better if, instead of relying on a special "K_AUTH" (or even
K_TOKEN) in the 4-pass case, one would do something similar to two pass,
i.e. compute a K_MAC in addition to K_TOKEN. Something like:

K_TOKEN | K_MAC = DSKPP-PRF (R_C, "Key generation" || k || R_S, dsLen + 
macKeyLen)

and then use K_MAC for key confirmation purposes. This should take away 
the need for a special K_AUTH or re-use of K_TOKEN for multiple
purposes.

Comments are welcome.  I'll add this to the Issue Tracker.
Andrea

_______________________________________________
KEYPROV mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/keyprov