David Jablon (dpj@world.std.com)
Thu, 28 Jan 1999 09:32:26 -0500
At 09:48 AM 1/28/99 +0100, Mok-Kong Shen wrote:
> Generation of session keys appears to be comparatively little
> treated in the literature. I like to propose [...]
As others will continue to point out, there is a *lot* of
literature on the subject of negotiating session keys.
Even in the special case of negotiating a session key based
on small shared secrets, the domain of EKE-style methods,
many papers are on-line at <http://world.std.com/~dpj/links.html>.
It's not clear from your proposal whether hashing *all* prior
shared plaintext is meant to increase the entropy of the
derived key. If so, I should point out that introducing
randomness is an essential component of the strong methods.
-- dpj
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:18:06