search

core-wg / oscore-key-update

Other
0 stars 0 forks source link

Retain same flexibility as in OSCORE, don't lock user into HKDF-Expand hash function #59

Closed rikard-sics closed 1 year ago

rikard-sics commented 1 year ago

We may need to change the pseudocode in updateCtx(), and in general point to using the same method that OSCORE is using for the key derivation.

rikard-sics commented 1 year ago

This seems fine in general, OSCORE only uses HKDF, except we should clarify that the same hash function as used for the OSCORE KDF is used here.

rikard-sics commented 1 year ago

We may adapt the text to generalize things into a KUDOS-Expand, which depends on the KDF OSCORE is using (to be future proof).