ietf-wg-ohai / oblivious-http

Oblivious HTTP
Other
23 stars 12 forks source link

Unclear that the client can choose from a list of HPKE algorithms #271

Closed Nikhar closed 1 year ago

Nikhar commented 1 year ago

Following up from https://github.com/ietf-wg-ohai/oblivious-http/issues/270

It seems like the key configuration lists a set of potential HPKE algorithms that the client can use.

The section https://www.ietf.org/archive/id/draft-ietf-ohai-ohttp-06.html#section-4.3 does say "a selected combination of KDF, identified by kdf_id, and AEAD, identified by aead_id", but it's easy to miss the selected word and even then its not apparent as to what the selection is from.

I think it could be made clearer that the client can choose from a list of HPKE algorithms specified in the Key Configuration.