[Cfrg] Key Derivation Functions and Randomized Hashing from NIST

As many of you know, NIST has specified two standard KDFs for use with
key agreement algorithms (e.g., Diffie-Hellman or MQV) in NIST SP
800-56A. NIST is considering supplementing the 800-56A KDFs with a  
more broadly applicable KDF.  In particular, NIST is considering a proposal 
for an HMAC-based KDF.  Before committing resources to this effort, we would
like to get a better handle on the requirements seen by protocol  
developers and evaluate the level of support for such a standard.  We would 
also like to identify alternative designs that should be considered.

NIST also posted a draft publication of randomized hashing for public  
comment in July. This project was inspired by Shai Halevi and Hugo Krawczyk's
publication on randomized hashing, which can be found at
http://www.ee.technion.ac.il/~hugo/rhash/. The NIST draft is located at
http://csrc.nist.gov/publications/PubsDrafts.html#SP-800-106. The
randomization technique in this publication is slightly different  
from the technique designed by Shai Halevi and Hugo Krawczyk.  NIST is
currently seeking feedback with respect to the applicability of  
randomization techniques for IETF protocols, and the relative impediments to
implementation and deployment.

I will attend the IETF meeting in Vancouver Canada from the 2nd to  
the 7th of December 2007 and would like to take this opportunity to discuss  
the issues mentioned above with parties who have interest in these topics.

Quynh Dang
NIST
quynh.dang@nist.gov

_______________________________________________
Cfrg mailing list
Cfrg@ietf.org
https://www1.ietf.org/mailman/listinfo/cfrg