[TLS] Diversification with multiple inputs
"Martin Thomson" <mt@lowentropy.net> Thu, 21 November 2019 03:10 UTC
Return-Path: <mt@lowentropy.net>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B876120924 for <tls@ietfa.amsl.com>; Wed, 20 Nov 2019 19:10:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level:
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=O/DTSvo3; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=DAn55pz+
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Ha5PwHDCXeT for <tls@ietfa.amsl.com>; Wed, 20 Nov 2019 19:10:13 -0800 (PST)
Received: from out2-smtp.messagingengine.com (out2-smtp.messagingengine.com [66.111.4.26]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 709D01207FF for <tls@ietf.org>; Wed, 20 Nov 2019 19:10:13 -0800 (PST)
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id 957C02240D; Wed, 20 Nov 2019 22:10:12 -0500 (EST)
Received: from imap2 ([10.202.2.52]) by compute1.internal (MEProxy); Wed, 20 Nov 2019 22:10:12 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=mime-version:message-id:date:from:to:subject:content-type; s= fm3; bh=miFJ37wQ2xoxUrH8+RgNX9Syr8w4gNpzj46PPEirWzw=; b=O/DTSvo3 RKF+A1Lg6MSejPb7cojOGYGG0VoI0IeHxFTejBrEcTH69NIJq/EfK7Y98IS6k/KH c4NCLDUHNn28AEbFXnTge+Dls8QVqPrGBKde112dIlOblCiaefhMYAU1ksPrvrFl SDGoWvkQghNln5fYIDD+Jw8nU8hrckTCiyJagFpq81Xssyu8Pat/dhXP35Czn3RK bEkLYi2PF6FdIH+AJ0txOMAZB+4WAm3nnPprb1KVWJgfagjlDrvCCdj6GAiBifDK nvopC7o21rhv8LjFHyJTdxojxvUWa1wEd//GV0RjEicOU786tzkFTV1zsR2wbnBu oC/rOY5Xqc6jkA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; bh=miFJ37wQ2xoxUrH8+RgNX9Syr8w4g Npzj46PPEirWzw=; b=DAn55pz+g9vYRH8qE9ESg+Y61WtEmSYMXmjZlcqV2f19c 0y98sKso20qvJvXntebzs7exWd+Ix6WMckKfPZcl78yycECemXnFjlUQfKw5YP7Z pYOMD5OEBITnXjYMQ9BiL5ykef+yl8yViNlMLTPceNUYg1rG6MhSQHSAMWEPEasa UwtlmJQCwT6zFrRBsewk9NTIxEelGSzqS0+WdJcp9dutl5Si+8ly/DRo21IU/VOB A4GTLIJEZFuHLCJkuHdU1822NBdE+7kVAQhwKEh9FjMtYCP3y5NmAicsFp+kXza2 UQj6Q3rsuVpNDxSVwGLVBtKTDvKjG/gwqjjeAiysA==
X-ME-Sender: <xms:FADWXZ9XsemCuoV4VCSi_IGQ4N3fmp7t1Sq7cP_g_IyN7b9VFOiH2A>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedufedrudehuddgheeiucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepofgfggfkfffhvffutgesthdtredtreertdenucfhrhhomhepfdforghrthhi nhcuvfhhohhmshhonhdfuceomhhtsehlohifvghnthhrohhphidrnhgvtheqnecurfgrrh grmhepmhgrihhlfhhrohhmpehmtheslhhofigvnhhtrhhophihrdhnvghtnecuvehluhhs thgvrhfuihiivgeptd
X-ME-Proxy: <xmx:FADWXfgTeIMPo_qAkEgLglDuDTV74ke-dtBLEs7FpCSmB9bSesLvUQ> <xmx:FADWXYx6FvPvfVFWwpPW70NlHqIJ1B_ep7Yah5fzRiWVxw-miA2hXw> <xmx:FADWXeq_3dtduIonnT97VLzgsd1tP6s4ObB8RMBHRi9178mvoehiWA> <xmx:FADWXe9BkWKB3ZiWl6e36CNr3iXcCrIosFamrhg47Pyp7YsOmahc3g>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 4C14BE00A3; Wed, 20 Nov 2019 22:10:12 -0500 (EST)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.1.7-578-g826f590-fmstable-20191119v1
Mime-Version: 1.0
Message-Id: <f4aeffaa-a5d8-49a0-8899-57a0f5aae4bd@www.fastmail.com>
Date: Thu, 21 Nov 2019 11:09:52 +0800
From: Martin Thomson <mt@lowentropy.net>
To: Jonathan Hoyland <jonathan.hoyland@gmail.com>, tls@ietf.org
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/XRpzEdtPupMhBbmkC1C-1EyFI-0>
Subject: [TLS] Diversification with multiple inputs
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Nov 2019 03:10:15 -0000
If we do the caveman thing and concatenate inputs to HKDF-Extract, what do you think we should do to the rest of the key schedule to ensure that there is diversity? In the PSK importer draft, we use a different binder label. Do we need diversification if there could be multiple inputs later in the key schedule? Or is that a problem unique to PSKs?
- [TLS] Diversification with multiple inputs Martin Thomson