search

kazuho / draft-kazuho-quic-authenticated-handshake

Authenticated Handshake for QUIC (using ESNI)
https://kazuho.github.io/draft-kazuho-quic-authenticated-handshake/draft-kazuho-quic-authenticated-handshake.html
Other
2 stars 2 forks source link

Define the data inherited from ESNI #5

Open huitema opened 5 years ago

huitema commented 5 years ago

The definition of the HMAC key derivation is unclear. We need to make it much simpler. Also, we want to incorporate the ICID.

kazuho commented 5 years ago

I've added clarification re what Zx is.

Aside from that, I am not sure how much we can simplify the design. It's essentially adding a third expansion to what we already have in ESNI, which are:

   key = HKDF-Expand-Label(Zx, "esni key", Hash(ESNIContents), key_length)
   iv = HKDF-Expand-Label(Zx, "esni iv", Hash(ESNIContents), iv_length)

To me it seems that change anything other than the label would be a complication.