torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

correct the key material paragraph

Browse Source 
svn:r5748
This commit is contained in:
Roger Dingledine
2006-01-07 02:05:22 +00:00
parent af54b73985
commit 4c64138d71
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/tor-spec.txt
+6 -6
View File
@@ -268,12 +268,12 @@ when do we rotate which keys (tls, link, etc)?
If CREATE_FAST is used, the client and server base their key material on
K0=X|Y.
From the base key material g^xy, they compute derivative key material as
follows. Next, the server computes 100 bytes of key data as K = SHA1(K0
| [00]) | SHA1(K0 | [01]) | ... SHA1(K0 | [04]) where "00" is a single
octet whose value is zero, [01] is a single octet whose value is one, etc.
The first 20 bytes of K form KH, bytes 21-40 form the forward digest Df,
41-60 form the backward digest Db, 61-76 form Kf, and 77-92 form Kb.
From the base key material K0, they compute 100 bytes of derivative
key data as K = SHA1(K0 | [00]) | SHA1(K0 | [01]) | ... SHA1(K0 |
[04]) where "00" is a single octet whose value is zero, [01] is a
single octet whose value is one, etc. The first 20 bytes of K form
KH, bytes 21-40 form the forward digest Df, 41-60 form the backward
digest Db, 61-76 form Kf, and 77-92 form Kb.
KH is used in the handshake response to demonstrate knowledge of the
computed shared key. Df is used to seed the integrity-checking hash