Services/Sync/P2P Key Exchange And Rotation: Difference between revisions

Services/Sync/P2P Key Exchange And Rotation (view source)

Revision as of 00:30, 18 December 2015

173 bytes added , 18 December 2015

Minor edits

Nickel chrome

113

edits

@@ Line 92: / Line 92: @@
 '''Protocol Sequence'''
 <ol start="0">
-<li>Each client publishes an identity key (AI, BI) and a set of ephemeral keys (AE{1..n}, BE{1..n})</li>
+<li>Each client publishes an identity key (AIp, BIp) and a set of ephemeral keys (AE{1..n}p, BE{1..n}p)</li>
-<li>Client A generates a new ephemeral key (AE) and randomly selects one of client B's ephemeral keys (BE). Using 3DHE and a KDF, client A generates the shared secret (S) then sends message including own ephemeral key (AE) and identifier for client B's ephemeral key (X). Client B can now also generate the shared secret (S) and hence the message body can be encrypted immediately.</li>
+<li>Client A generates a new ephemeral key (AEp) and randomly selects one of Client B's ephemeral keys (BEp). Using 3DHE and a KDF, client A generates the shared secret (SK) then sends message including own ephemeral key (AE) and an identifier for Client B's ephemeral key (BEp). Client B can now also generate the shared secret (SK) and hence the message body can be encrypted immediately.</li>
 </ol>
-Both Client A and Client B can now continue to communicate using the shared secret (S) as a session key.
+Both Client A and Client B can now continue to communicate using the shared secret (SK) as a session key.
 <pre>
@@ Line 106: / Line 106: @@
 t1         AIs                                    AIp, BIp         BIs
             AEs                                    AEp, BEp         BEs
-            S = KDF(3DHE(AIs, AEs, BIp, BEp))                       S = KDF(3DHE(BIs, BEs, AIp, AEp))
+            SK = KDF(3DHE(AIs, AEs, BIp, BEp))                      SK = KDF(3DHE(BIs, BEs, AIp, AEp))
+           PT = <message>                                          CT
+           CT = ENCRYPT(PT, SK)                                    PT = DECRYPT(PT, SK)
 </pre>