mirror of
https://code.briarproject.org/briar/briar.git
synced 2026-03-08 22:48:18 +01:00
akwizgran created page: BTP
16
BTP.markdown
16
BTP.markdown
@@ -38,10 +38,10 @@ The key derivation function takes an input key *k*, a label *p*, and zero or mor
|
||||
|
||||
Each device derives four initial keys from *S*:
|
||||
|
||||
*ack = KDF(*S*, "ALICE_CIPHER_KEY")*
|
||||
*bck = KDF(*S*, "BOB_CIPHER_KEY")*
|
||||
*atk = KDF(*S*, "ALICE_TAG_KEY")*
|
||||
*btk = KDF(*S*, "BOB_TAG_KEY")*
|
||||
* *ack = KDF(*S*, "ALICE_CIPHER_KEY")*
|
||||
* *bck = KDF(*S*, "BOB_CIPHER_KEY")*
|
||||
* *atk = KDF(*S*, "ALICE_TAG_KEY")*
|
||||
* *btk = KDF(*S*, "BOB_TAG_KEY")*
|
||||
|
||||
Alice sets *ock = ack*, *ick = bck*, *otk = atk*, and *itk = btk*. Bob sets *ock = bck*, *ick = ack*, *otk = btk*, and *itk = atk*. Thus Alice's outgoing keys (*ock* and *otk*) are the same as Bob's incoming keys (*ick* and *itk*) and vice versa.
|
||||
|
||||
@@ -55,7 +55,7 @@ If a sender starts sending a stream at time *t* according to the sender's clock,
|
||||
|
||||
The four initial keys derived from *S* are the keys for period *P - 1*. The keys for each subsequent period *i* are derived from the previous period's keys as follows:
|
||||
|
||||
*next_ock = KDF(ock, "ROTATE", int(64, i))*
|
||||
*next_ick = KDF(ick, "ROTATE", int(64, i))*
|
||||
*next_otk = KDF(otk, "ROTATE", int(64, i))*
|
||||
*next_itk = KDF(itk, "ROTATE", int(64, i))*
|
||||
* *next_ock = KDF(ock, "ROTATE", int(64, i))*
|
||||
* *next_ick = KDF(ick, "ROTATE", int(64, i))*
|
||||
* *next_otk = KDF(otk, "ROTATE", int(64, i))*
|
||||
* *next_itk = KDF(itk, "ROTATE", int(64, i))*
|
||||
|
||||
Reference in New Issue
Block a user