allocation of key material into keys

[Ran Atkinson <[e-mail]>]

I'm not sure what other folks think, but I've been persuaded by various people
that we need some standard and clearly stated way of transforming a "blob" of
key material generated by key management (e.g. the D-H exponentiation) into
one or more actual session keys.

I'd like to propose that the key management protocol specifications only
be responsible for generating a "blob" of key material with sufficient
bits of entropy.  

Each transform would need to specify how many bits of entropy are needed from
key management for an SA and precisely how to transform a single "blob" of key
material into one or more session keys.

Does this seem OK to people ?

Ran
[e-mail]


--