[CFRG] new draft modifying HPKE

Dan Harkins <dharkins@lounge.org> Mon, 14 June 2021 18:08 UTC

Date: Mon, 14 Jun 2021 11:08:03 -0700
From: Dan Harkins <dharkins@lounge.org>
To: cfrg@irtf.org
Message-id: <ac30b613-d9db-7d43-4e11-f82a880a41e0@lounge.org>
MIME-version: 1.0
Content-type: text/plain; charset="utf-8"; format="flowed"
Content-language: en-US
Content-transfer-encoding: 8bit
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.0) Gecko/20100101 Thunderbird/78.7.1
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/GDwTJGfD-FnsfgYigWJ3thJP6ZI>
Subject: [CFRG] new draft modifying HPKE
Precedence: list

   Hello,

   I know the cement on HPKE isn't quite dry yet but I wanted to get 
something ready
for when it is. As I've discussed on this list before I want to add 2 
things to HPKE:

   - compact output of the NIST curves
   - deterministic authenticated encryption

There's a new draft in the repository proposing just that:

     https://datatracker.ietf.org/doc/draft-harkins-cfrg-dnhpke/

Please take a look. Comments are welcome.

   Also, I implemented this in my HPKE code: 
https://github.com/danharkins/hpke-wrap.
The test vectors there are basically copied from the standard ones but I 
replaced
the KEM with the new KEM, compacted serialization, and encrypted with 
AES-SIV. I'd
welcome any attempts at interoperation.

   regards,

   Dan.

-- 
"The object of life is not to be on the side of the majority, but to
escape finding oneself in the ranks of the insane." -- Marcus Aurelius

[CFRG] new draft modifying HPKE Dan Harkins
Re: [CFRG] new draft modifying HPKE John Mattsson