Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Check the smp and auth generation of scalars #180

Open
claucece opened this issue Dec 10, 2018 · 5 comments
Open

Check the smp and auth generation of scalars #180

claucece opened this issue Dec 10, 2018 · 5 comments
Assignees
@claucece
Labels
API cryptographic-issues importance high An issue that is absolutely necessary to have done before final release OTRv4 basics
Milestone
April

Comments

@claucece
Copy link
Member

They should all be hashed and pruned.
@claucece claucece added API OTRv4 basics importance high An issue that is absolutely necessary to have done before final release labels Dec 10, 2018
claucece added a commit that referenced this issue Dec 14, 2018
@claucece
Add documentation for auth and check the generation of scalars #180
7d66183
@claucece
Copy link
Member Author

Ok, this needs an email to be sent to Mike. Basically, my concern is:

  HashToScalar(0x05 || G3 * r5 || G * r5 + G2 * r6)

should that scalar be hashed as well? It does not come from randomness; but from fixed values.

@olabini
Copy link
Contributor

olabini commented Dec 19, 2018

I thought Ian in our call was pretty clear that you can't modify the scalar output of that - or did I misunderstand?

@olabini
Copy link
Contributor

olabini commented Mar 10, 2019

OK, so I was mistaken. @claucece said in offline conversations that this is different. It's blocked waiting on input from Mike.

@claucece
Copy link
Member Author

Yeah @olabini . Also Gustavo is looking into this :)

@olabini
Copy link
Contributor

olabini commented Mar 11, 2019

Great!

@claucece claucece added this to the cryptographic-issues milestone Oct 20, 2019
@claucece claucece modified the milestones: cryptographic-issues, April Feb 6, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@claucece claucece

Labels
API cryptographic-issues importance high An issue that is absolutely necessary to have done before final release OTRv4 basics
Projects
None yet
Milestone
April
Development

No branches or pull requests
2 participants
@olabini @claucece