[Hipsec] FWD: [Cfrg] HKDF paper

Robert Moskowitz <rgm@htt-consult.com> Tue, 11 May 2010 16:57 UTC

Message-ID: <4BE98C4A.1080805@htt-consult.com>
Date: Tue, 11 May 2010 12:56:42 -0400
From: Robert Moskowitz <rgm@htt-consult.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.9) Gecko/20100330 Fedora/3.0.4-1.fc12 Thunderbird/3.0.4
MIME-Version: 1.0
To: HIP WG <hipsec@ietf.org>
Content-Type: multipart/alternative; boundary="------------060506060908080108010704"
Subject: [Hipsec] FWD: [Cfrg] HKDF paper
Precedence: list

Frowarded from Hugo:

================================================================

In anticipation of the publication of HKDF as an RFC (which will happen 
very shortly) and of the publication of the HKDF paper in Crypto'2010 I 
finally updated the paper and posted it to the IACR eprint repository:

The new title for the paper is "Cryptographic Extraction and Key 
Derivation: The HKDF Scheme", and its URL is http://eprint.iacr.org/2010/264

The paper is heavier on the technical side than a previous version (that 
I still keep under http://webee.technion.ac.il/~hugo/kdf/ 
<http://webee.technion.ac.il/%7Ehugo/kdf/> for those less technically 
inclined).
In particular, it answers requests for quantitative statements of 
security (answering, among others, good questions by David McGrew).

There is an attempt in the paper to reflect many of the many-many 
discussions on this list regarding KDF security. I am sure that there 
will be more questions but the paper is too long already...

Hopefully the combination of the RFC and the extensive rationale in the 
paper will encourage people to use this KDF.

Hugo

[Hipsec] FWD: [Cfrg] HKDF paper Robert Moskowitz