akwizgran
2016-01-12 10:17:20 +00:00
parent 41490b8888
commit 1a77f8513c

@@ -94,7 +94,7 @@ To avoid reusing tags, which would allow the adversary to distinguish BTP traffi
### Stream header
The pseudo-random tag is followed by the stream header, which consists of a random nonce followed by an ephemeral key encrypted and authenticated with the sender's outgoing header key and the nonce. The stream header is NONCE_LEN + KEY_LEN + AUTH_LEN bytes long. The ephemeral key is used for encrypting and authenticating the rest of the stream.
The pseudo-random tag is followed by the stream header, which consists of a random initialisation vector followed by an ephemeral key encrypted and authenticated with the sender's outgoing header key, using the random IV as the nonce. The stream header is NONCE_LEN + KEY_LEN + AUTH_LEN bytes long. The ephemeral key is used for encrypting and authenticating the rest of the stream.
### Frames