akwizgran created page: BTP

akwizgran
2015-03-16 18:13:28 +00:00
parent 76b788f1f0
commit 851a19166f

@@ -38,10 +38,10 @@ The key derivation function takes an input key *k*, a label *p*, and zero or mor
Each device derives four initial keys from *S*: Each device derives four initial keys from *S*:
*ack = KDF(*S*, "ALICE_CIPHER_KEY")* * *ack = KDF(*S*, "ALICE_CIPHER_KEY")*
*bck = KDF(*S*, "BOB_CIPHER_KEY")* * *bck = KDF(*S*, "BOB_CIPHER_KEY")*
*atk = KDF(*S*, "ALICE_TAG_KEY")* * *atk = KDF(*S*, "ALICE_TAG_KEY")*
*btk = KDF(*S*, "BOB_TAG_KEY")* * *btk = KDF(*S*, "BOB_TAG_KEY")*
Alice sets *ock = ack*, *ick = bck*, *otk = atk*, and *itk = btk*. Bob sets *ock = bck*, *ick = ack*, *otk = btk*, and *itk = atk*. Thus Alice's outgoing keys (*ock* and *otk*) are the same as Bob's incoming keys (*ick* and *itk*) and vice versa. Alice sets *ock = ack*, *ick = bck*, *otk = atk*, and *itk = btk*. Bob sets *ock = bck*, *ick = ack*, *otk = btk*, and *itk = atk*. Thus Alice's outgoing keys (*ock* and *otk*) are the same as Bob's incoming keys (*ick* and *itk*) and vice versa.
@@ -55,7 +55,7 @@ If a sender starts sending a stream at time *t* according to the sender's clock,
The four initial keys derived from *S* are the keys for period *P - 1*. The keys for each subsequent period *i* are derived from the previous period's keys as follows: The four initial keys derived from *S* are the keys for period *P - 1*. The keys for each subsequent period *i* are derived from the previous period's keys as follows:
*next_ock = KDF(ock, "ROTATE", int(64, i))* * *next_ock = KDF(ock, "ROTATE", int(64, i))*
*next_ick = KDF(ick, "ROTATE", int(64, i))* * *next_ick = KDF(ick, "ROTATE", int(64, i))*
*next_otk = KDF(otk, "ROTATE", int(64, i))* * *next_otk = KDF(otk, "ROTATE", int(64, i))*
*next_itk = KDF(itk, "ROTATE", int(64, i))* * *next_itk = KDF(itk, "ROTATE", int(64, i))*