Re: #25 [**] prf (section 8)

>>>>> "KAMADA" == KAMADA Ken'ichi <[email protected]> writes:

    KAMADA> IKE requires the very PRF to generate IPsec keys, so using
    KAMADA> PRFs provided by kcrypto is appropriate here.  kcrypto
    KAMADA> also says "The PRF output string should be suitable for
    KAMADA> use in key generation,..."

The kcrypto PNRF is certainly usable for generating keys; that's its
point.  The working group was concerned about the PRF for kcrypto
mainly because they needed to take a DH output and get a random bit
string.  The kcrypto PRF requires a key.

The only problem I can see with using the kcrypto PRF in kink is
details of the PFS if Kink ends up supporting PFS.  If you don't ever
run into a situation where you want to use the PRF but there is no
appropriate key to feed into it, then everything is fine.

--Sam