Re: [Pana] "PRF key" in RFC 5191 Section 8.5

Yoshi,

I think your interpretation is correct, as the "e.g." examples confirm.

Alper

On Jan 21, 2013, at 3:27 AM, Yoshihiro Ohba wrote:

> I got a question from my colleague about meaning of "PRF key" in the
> following text in Section 8.5:
> 
> "
> 1. The PaC and the PAA each are likely to be able to compute a
> random nonce (according to [RFC4086]). The length of the nonce
> has to be 1/2 the length of the PRF key (e.g., 10 octets in the
> case of HMAC-SHA1).
> 
> 2. The PaC and the PAA each are not trusted with regard to the
> computation of a random nonce (according to [RFC4086]). The
> length of the nonce has to have the full length of the PRF key
> (e.g., 20 octets in the case of HMAC-SHA1).
> "
> 
> As far as I remember, "PRF key" means "output block of the negotiated
> pseudo-random function used in prf+". So HMAC-SHA1 is prf, the output
> block length is 20 octets.
> 
> Please let me know if you interpret "PRF key" in the above text in other
> ways.
> 
> Best Regards,
> Yoshihiro Ohba
> 
> 
> 
> _______________________________________________
> Pana mailing list
> Pana@ietf.org
> https://www.ietf.org/mailman/listinfo/pana