IETF Logo Mail Archive

Re: [hybi] "fresh" and "uniformly at random":

"Arman Djusupov" <arman@noemax.com> Mon, 20 June 2011 14:10 UTC

Return-Path: <arman@noemax.com>
X-Original-To: hybi@ietfa.amsl.com
Delivered-To: hybi@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4404811E80C3 for <hybi@ietfa.amsl.com>; Mon, 20 Jun 2011 07:10:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6BHFPLKimwLw for <hybi@ietfa.amsl.com>; Mon, 20 Jun 2011 07:10:40 -0700 (PDT)
Received: from mail.noemax.com (mail.noemax.com [64.34.201.8]) by ietfa.amsl.com (Postfix) with ESMTP id 6C3EE11E815C for <hybi@ietf.org>; Mon, 20 Jun 2011 07:10:40 -0700 (PDT)
Received: from ArmanLaptop by mail.noemax.com (IceWarp 9.4.1) with ASMTP (SSL) id DUE34339; Mon, 20 Jun 2011 17:10:39 +0300
From: Arman Djusupov <arman@noemax.com>
To: 'Adam Barth' <ietf@adambarth.com>, 'Denis Lagno' <dilmah@chromium.org>
References: <000401cc2cf3$106d37d0$3147a770$@noemax.com> <BANLkTim_-kytRUdG-X51fFZY+Gj4mcypnQ@mail.gmail.com> <BANLkTi=m_gOTxRjTiyz4S713rUexFrr+wg@mail.gmail.com> <BANLkTindEVpt9DE4LXYVSOg7C3RCvewi4Q@mail.gmail.com> <BANLkTimf=ateLuDO7R7yhOE4AE2m770PAg@mail.gmail.com> <BANLkTi=q3w6Z0odEWdzTkeNQ-7T1Svrkmg@mail.gmail.com> <BANLkTinkqF6dxTP6DdijJzNsxEXV1G+Nyg@mail.gmail.com> <BANLkTi=zmJCZZ5-D6zKE7DArQj2P1KJN7Q@mail.gmail.com>
In-Reply-To: <BANLkTi=zmJCZZ5-D6zKE7DArQj2P1KJN7Q@mail.gmail.com>
Date: Mon, 20 Jun 2011 17:09:35 +0300
Message-ID: <001c01cc2f53$b3812c80$1a838580$@noemax.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQH3vjT229jiJ5oHR6yUCTCCNK8IUgIiwQM3AcOnDBwCe5cnugGI3L8pAixj/l4BDv0B5wHxewfjlAZsfSA=
Content-Language: en-us
Cc: hybi@ietf.org
Subject: Re: [hybi] "fresh" and "uniformly at random":
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Jun 2011 14:10:41 -0000

I think you actually mean that the implementation should not intentionally
reuse a mask or part of a mask.

With best regards,
Arman

> -----Original Message-----
> From: Adam Barth [mailto:ietf@adambarth.com]
> Sent: Monday, June 20, 2011 11:05 AM
> To: Denis Lagno
> Cc: Arman Djusupov; hybi@ietf.org
> Subject: Re: [hybi] "fresh" and "uniformly at random":
> 
> Yeah, that was a confusing way of putting it.  I meant that the underlying
> coin-flips should not have been used previously.
> 
> Adam
> 
> 
> On Mon, Jun 20, 2011 at 12:34 AM, Denis Lagno <dilmah@chromium.org>
> wrote:
> > oh, well, so you'd better avoid phrase "not used previously" in the
> > first place.  It was highly misleading.
> >
> > On Mon, Jun 20, 2011 at 11:31 AM, Adam Barth <ietf@adambarth.com>
> wrote:
> >> You can sensibly apply the term fresh to 1-bit values if you like.
> >> The important aspect is independence from your previous choices.
> >>
> >> Adam
> >>
> >>
> >> On Mon, Jun 20, 2011 at 12:26 AM, Denis Lagno <dilmah@chromium.org>
> wrote:
> >>> maybe I miss something but in the text "fresh" is applied to 32-bit
> values..
> >>>
> >>> On Mon, Jun 20, 2011 at 6:57 AM, Adam Barth <ietf@adambarth.com>
> wrote:
> >>>> On Sat, Jun 18, 2011 at 12:34 AM, Denis Lagno <dilmah@chromium.org>
> wrote:
> >>>>> On Sat, Jun 18, 2011 at 10:27 AM, Adam Barth <ietf@adambarth.com>
> wrote:
> >>>>>> The term "fresh" is a term of art in cryptography.  It means,
> >>>>>> roughly, "not used previously."
> >>>>>
> >>>>> So this implies that client must keep track of already used keys?
> >>>>> it imposes limit on length of connection?
> >>>>> True it or false, It should be explicitly clarified in the text.
> >>>>
> >>>> The normal practice in cryptography is to just use large enough
> >>>> values such that the probably of collision is sufficiently small as
> >>>> to be acceptable.  For example, if you use a 20 byte nonce, the
> >>>> probably of collision is zero for all practical purposes.
> >>>>
> >>>> This stuff is all extremely normal.
> >>>>
> >>>> Adam
> >>>>
> >>>
> >>
> >

v2.23.0 | Report a Bug | By Email