search

cfrg / draft-irtf-cfrg-hpke

Hybrid Public Key Encryption
Other
49 stars 29 forks source link

Prohibit the use of asymmetric keys with multiple KEMs #202

Closed martinthomson closed 3 years ago

martinthomson commented 3 years ago

It is going to be commonplace that a key pair will be used with multiple KDF or AEAD algorithms. See ECH for an example.

The design would seem to be robust against use in this way as the KEM ID is integrated into the label construction. However, it would make usage much less prone to mistakes if the asymmetric key pairs were not usable with other KEMs.

This is not a design change, but a request to add text saying "MUST NOT" which would make writing specifications that depend on HPKE easier.

chris-wood commented 3 years ago

@martinthomson can you please propose text?

chris-wood commented 3 years ago

Fixed in #215.