[Cfrg] I-D Action: draft-irtf-cfrg-hpke-06.txt

[Jean-Philippe Aumasson <[e-mail]>]

Hi!

quick comments on the new draft, as solicited by the chairs (thanks for
reminding me of this!):

as commented in my review, and as discussed more recently with Ben Lipp, I
just find that directly defining the KDR in terms extract/expand internal
operations will prevent the adoption of other KDFs than HKDF. The
construction could be defined in terms of a generic KDF block and retain
its security properties (KeySchedule() might have to be adapted).

Otherwise no objection :)

Cheers,

JP

--

A New Internet-Draft is available from the on-line Internet-Drafts
directories.
This draft is a work item of the Crypto Forum RG of the IRTF.

        Title           : Hybrid Public Key Encryption
        Authors         : Richard L. Barnes
                          Karthik Bhargavan
                          Benjamin Lipp
                          Christopher A. Wood
Filename        : draft-irtf-cfrg-hpke-06.txt
Pages           : 87
Date            : 2020-10-23

Abstract:
   This document describes a scheme for hybrid public-key encryption
   (HPKE).  This scheme provides authenticated public key encryption of
   arbitrary-sized plaintexts for a recipient public key.  HPKE works
   for any combination of an asymmetric key encapsulation mechanism
   (KEM), key derivation function (KDF), and authenticated encryption
   with additional data (AEAD) encryption function.  We provide
   instantiations of the scheme using widely-used and efficient
   primitives, such as Elliptic Curve Diffie-Hellman key agreement,
   HKDF, and SHA2.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-irtf-cfrg-hpke/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-irtf-cfrg-hpke-06.html

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-irtf-cfrg-hpke-06


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


[Cfrg] I-D Action: draft-irtf-cfrg-hpke-06.txt  internet-drafts