Skip to content

Commit

Permalink
Rename section "Using HMAC to adapt a KEM without {integrity protecti…
Browse files Browse the repository at this point in the history
…on => ciphertext integrity}"
  • Loading branch information
emlun committed May 28, 2024
1 parent da7d5dc commit 915e1ce
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions draft-bradleylundberg-cfrg-arkg.md
Original file line number Diff line number Diff line change
Expand Up @@ -526,11 +526,11 @@ BL-Blind-Private-Key(sk, tau, info) -> sk_tau
~~~


## Using HMAC to adapt a KEM without integrity protection {#hmac-kem}
## Using HMAC to adapt a KEM without ciphertect integrity {#hmac-kem}

Not all key encapsulation mechanisms guarantee ciphertext integrity,
meaning that a valid KEM ciphertext can be created only with knowledge of the KEM public key.
This section defines a general formula for adapting any KEM to include integrity protection
This section defines a general formula for adapting any KEM to guarantee ciphertext integrity
by prepending a MAC to the KEM ciphertext.

For example, ECDH does not guarantee ciphertext integrity - any elliptic curve point is a valid ECDH ciphertext
Expand Down Expand Up @@ -1233,4 +1233,6 @@ TODO
- Added curve/edwards25519/448 instances.
- Added proposal for COSE bindings and key reference types.

- 03 Fixed info argument to HMAC in section "Using HMAC to adapt a KEM without integrity protection"
- 03
- Renamed section "Using HMAC to adapt a KEM without {integrity protection => ciphertext integrity}"
- Fixed info argument to HMAC in section "Using HMAC to adapt a KEM without ciphertext integrity"

0 comments on commit 915e1ce

Please sign in to comment.