diff options
| author | Luke-Jr <luke_github1@dashjr.org> | 2016-08-07 21:09:59 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2016-08-07 21:09:59 +0000 |
| commit | 85805beee7169d779db140672d862947fd8e7838 (patch) | |
| tree | 23cabe803f9b0a01f4c8cc32351d2596ccfb4fbd | |
| parent | 30a0580e91a15d4a08776369a3451aeeec305a64 (diff) | |
| parent | 55163e45460d8aab14950724fe7e1b4260dbbada (diff) | |
| download | bips-85805beee7169d779db140672d862947fd8e7838.tar.xz | |
Merge pull request #430 from jonasschnelli/2017/08/bip151_rekey
[bip151] slightly increase robustness of the re-keying
| -rw-r--r-- | bip-0151.mediawiki | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/bip-0151.mediawiki b/bip-0151.mediawiki index a4c8b8e..cf221f2 100644 --- a/bip-0151.mediawiki +++ b/bip-0151.mediawiki @@ -39,7 +39,7 @@ Encryption initialization must happen before sending any other messages to the r The symmetric encryption cipher keys will be calculated with ECDH/HKDF by sharing the pubkeys of a ephemeral key. Once the ECDH secret is calculated on each side, the symmetric encryption cipher keys must be derived with HKDF [2] after the following specification: 1. HKDF extraction -<code>PRK = HKDF_EXTRACT(hash=SHA256, salt="bitcoinechd", ikm=ecdh_secret|cipher-type)</code>. +<code>PRK = HKDF_EXTRACT(hash=SHA256, salt="bitcoinecdh", ikm=ecdh_secret|cipher-type)</code>. 2. Derive Key1 <code>K_1 = HKDF_EXPAND(prk=PRK, hash=SHA256, info="BitcoinK1", L=32)</code> @@ -148,7 +148,7 @@ If more data is present, another message must be deserialized. There is no expli A responding peer can inform the requesting peer over a re-keying with a <code>encack</code> message containing 33byte of zeros to indicate that all encrypted message following after this <code>encack</code> message will be encrypted with ''the next symmetric cipher key''. -The new symmetric cipher key will be calculated by <code>SHA256(SHA256(old_symetric_cipher_key))</code>. +The new symmetric cipher key will be calculated by <code>SHA256(SHA256(session_id || old_symmetric_cipher_key))</code>. Re-Keying interval is a peer policy with a minimum timespan of 10 seconds. |