Re: [TLS] Initial draft of DH-based key exchange

[Eric Rescorla <[e-mail]>]

On Fri, Mar 27, 2015 at 4:44 PM, Russ Housley <[e-mail]> wrote:

> Eric:
>
> At the interim discussed transitioning to a DH-based handshake (rather
> than a signature-based one) like that proposed by Hugo Krawczyk and
> Hoeteck Wee. The major rationale for this change is that any 0-RTT
> mode is inherently DH-based and so if we make that our basic mode,
> then we can simplify the protocol logic and key derivation model. This
> model also allows us to pull in PSK modes under the same basic
> structure.
>
>
> I was not at the interim, but I was at the TLS session at IETF 92 in
> Dallas.
>
> I was watching your presentation pretty carefully, and I do not recall a
> slide on support for PSK.  Can you point me to a description of "PSK modes
> under the same basic structure"?
>

The document I pointed to upthread contains a description of the key
schedule. I still have to write up the PSK negotiation syntax.


-Ekr


> Russ
>
>