Re: A Method of Session Key Generation

New Message Reply About this list Date view Thread view Subject view Author view

David Jablon (dpj@world.std.com)
Thu, 28 Jan 1999 09:32:26 -0500


At 09:48 AM 1/28/99 +0100, Mok-Kong Shen wrote:

> Generation of session keys appears to be comparatively little
> treated in the literature. I like to propose [...]

As others will continue to point out, there is a *lot* of
literature on the subject of negotiating session keys.
Even in the special case of negotiating a session key based
on small shared secrets, the domain of EKE-style methods,
many papers are on-line at <http://world.std.com/~dpj/links.html>.

It's not clear from your proposal whether hashing *all* prior
shared plaintext is meant to increase the entropy of the
derived key. If so, I should point out that introducing
randomness is an essential component of the strong methods.

-- dpj


New Message Reply About this list Date view Thread view Subject view Author view

 
All trademarks and copyrights are the property of their respective owners.

Other Directory Sites: SeekWonder | Directory Owners Forum

The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:18:06