Re: [hybi] "fresh" and "uniformly at random":

Adam Barth <ietf@adambarth.com> Mon, 20 June 2011 02:57 UTC

Return-Path: <ietf@adambarth.com>
X-Original-To: hybi@ietfa.amsl.com
Delivered-To: hybi@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F49911E80AA for <hybi@ietfa.amsl.com>; Sun, 19 Jun 2011 19:57:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.269
X-Spam-Level:
X-Spam-Status: No, score=-3.269 tagged_above=-999 required=5 tests=[AWL=-0.292, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yVYGs6BxmyKM for <hybi@ietfa.amsl.com>; Sun, 19 Jun 2011 19:57:44 -0700 (PDT)
Received: from mail-gx0-f172.google.com (mail-gx0-f172.google.com [209.85.161.172]) by ietfa.amsl.com (Postfix) with ESMTP id EA5FB11E809D for <hybi@ietf.org>; Sun, 19 Jun 2011 19:57:43 -0700 (PDT)
Received: by gxk19 with SMTP id 19so2901994gxk.31 for <hybi@ietf.org>; Sun, 19 Jun 2011 19:57:43 -0700 (PDT)
Received: by 10.236.28.2 with SMTP id f2mr4856409yha.387.1308538663197; Sun, 19 Jun 2011 19:57:43 -0700 (PDT)
Received: from mail-yx0-f172.google.com (mail-yx0-f172.google.com [209.85.213.172]) by mx.google.com with ESMTPS id g5sm3267836yhm.40.2011.06.19.19.57.41 (version=SSLv3 cipher=OTHER); Sun, 19 Jun 2011 19:57:41 -0700 (PDT)
Received: by yxt33 with SMTP id 33so3381833yxt.31 for <hybi@ietf.org>; Sun, 19 Jun 2011 19:57:41 -0700 (PDT)
Received: by 10.90.42.15 with SMTP id p15mr5066265agp.13.1308538661145; Sun, 19 Jun 2011 19:57:41 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.90.65.13 with HTTP; Sun, 19 Jun 2011 19:57:11 -0700 (PDT)
In-Reply-To: <BANLkTi=m_gOTxRjTiyz4S713rUexFrr+wg@mail.gmail.com>
References: <000401cc2cf3$106d37d0$3147a770$@noemax.com> <BANLkTim_-kytRUdG-X51fFZY+Gj4mcypnQ@mail.gmail.com> <BANLkTi=m_gOTxRjTiyz4S713rUexFrr+wg@mail.gmail.com>
From: Adam Barth <ietf@adambarth.com>
Date: Sun, 19 Jun 2011 19:57:11 -0700
Message-ID: <BANLkTindEVpt9DE4LXYVSOg7C3RCvewi4Q@mail.gmail.com>
To: Denis Lagno <dilmah@chromium.org>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Cc: hybi@ietf.org
Subject: Re: [hybi] "fresh" and "uniformly at random":
X-BeenThere: hybi@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Server-Initiated HTTP <hybi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hybi>, <mailto:hybi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hybi>
List-Post: <mailto:hybi@ietf.org>
List-Help: <mailto:hybi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hybi>, <mailto:hybi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Jun 2011 02:57:44 -0000

On Sat, Jun 18, 2011 at 12:34 AM, Denis Lagno <dilmah@chromium.org> wrote:
> On Sat, Jun 18, 2011 at 10:27 AM, Adam Barth <ietf@adambarth.com> wrote:
>> The term "fresh" is a term of art in cryptography.  It means, roughly,
>> "not used previously."
>
> So this implies that client must keep track of already used keys? it
> imposes limit on length of connection?
> True it or false, It should be explicitly clarified in the text.

The normal practice in cryptography is to just use large enough values
such that the probably of collision is sufficiently small as to be
acceptable.  For example, if you use a 20 byte nonce, the probably of
collision is zero for all practical purposes.

This stuff is all extremely normal.

Adam