New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

TBD: Refine description of session_key encryption tunnel #147

Open

2 tasks

gijsvl opened this issue Nov 25, 2022 · 0 comments

Open

2 tasks

TBD: Refine description of session_key encryption tunnel #147

gijsvl opened this issue Nov 25, 2022 · 0 comments

gijsvl commented Nov 25, 2022

An encryption tunnel was added that uses an AEAD schema using the session_key. The description in the spec is somewhat out of date and incomplete: https://github.com/boltlabs-inc/key-mgmt-spec/blob/develop/systems-architecture.md#opening-the-application-layer-authenticated-channel

Make sure to incorporate the following points:

When transforming the session_key coming from the opaque protocol, we truncate it to use the first 32 bytes of the 64 provided bytes. Is this a good design or do we want to transform the 64 bytes into 32 bytes in another way?
Associated data for encryption of messages is empty at this point. Do we want to add any meaningful associated data?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment