[TLS] What is the KDF of the combined classical and PQC keys i n TLS 1.3 PQC hybrid?
Roger Grimes <[email protected]>
| Newsgroups | gmane.ietf.tls |
|---|---|
| Message-ID | <BL3PR04MB79779658BCA17A6BC3322B64CDD12@BL3PR04MB7977.namprd04.prod.outlook.com> |
I apologize in advance if this is the wrong forum for asking a technical question about the emerging standard.
Regarding RFC 9954 : https://datatracker.ietf.org/doc/rfc9954/
As I understand the process I'm interested in:
The client sends X25519 ephemeral public key and MLKEM768 encapsulation key to the server.
The server sends back its X25519 ephemeral public key and MLKEM768 ciphertext to the client.
They both, separately, generate both a shared classical key and a shared PQC key.
These keys are concatenated together to create a single shared key.
In the RFC, it states this:
concatenated_shared_secret = MyECDH.shared_secret
|| MyPQKEM.shared_secret
Is that concatenation simply appending one string to the other?
Roger
********************************************************************************************************************************************
*Roger A. Grimes
* e:[email protected], LinkedIn: https://www.linkedin.com/in/rogeragrimes/, Twitter:@rogeragrimes, Mastodon: infosec.exchange/@rogeragrimes<mailto:infosec.exchange/@rogeragrimes>, [email protected]
*Author or co-author of 16 books and over 1600 articles on cybersecurity
*Amazon Author Page: amazon.com/author/rogeragrimes
*past weekly InfoWorld and CSO columns: www.csoonline.com/author/Roger-A.-Grimes
*Any opinions expressed are purely mine and not of my employers
*
*Blatant book plugs:
*A Data-Driven Computer Security Defense (https://www.amazon.com/Data-Driven-Computer-Defense-Should-Using/dp/B0BR9KS3ZF)
*Latest book: How AI and Quantum Impact Cyber Threats and Defenses (https://www.amazon.com/dp/B0GGB7Y855)
*Ransomware Protection Playbook (https://www.amazon.com/Ransomware-Protection-Playbook-Roger-Grimes/dp/1119849128)
*Hacking Multifactor Authentication (https://www.amazon.com/Hacking-Multifactor-Authentication-Roger-Grimes/dp/1119650798)
*My quantum book, Cryptography Apocalypse (https://www.amazon.com/Cryptography-Apocalypse-Preparing-Quantum-Computing/dp/1119618193)
*Hacking the Hacker, (https://www.amazon.com/Hacking-Hacker-Learn-Experts-Hackers/dp/1119396212/)
*********************************************************************************************************************************************
_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]