You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
So an authentication algorithm for SCTP-AUTH should not be required to use HMAC. It appears better to have the algorithms define themselves if they are using HMAC or might be using some other way of deriving the authentication tag. This will require that the algorithms also define a KDF of the input key data if not using HMAC. As in many cases the input shared association key will be longer than the what the algorithm uses.
So an authentication algorithm for SCTP-AUTH should not be required to use HMAC. It appears better to have the algorithms define themselves if they are using HMAC or might be using some other way of deriving the authentication tag. This will require that the algorithms also define a KDF of the input key data if not using HMAC. As in many cases the input shared association key will be longer than the what the algorithm uses.
This was reported in Comments on draft-tuexen-tsvwg-rfc4895-bis-04.
The text was updated successfully, but these errors were encountered: