Re: [openssl-users] RFC5077 KWK

2018-04-05 Thread Henderson, Karl via openssl-users
Thanks On 4/5/18, 2:35 PM, "openssl-users on behalf of Viktor Dukhovni" wrote: > On Apr 5, 2018, at 2:29 PM, Henderson, Karl via openssl-users wrote: > >> TLS 1.3 unifies session tickets with (external) PSKs, perhaps you should recast your approach in terms of PSKs r

Re: [openssl-users] RFC5077 KWK

2018-04-05 Thread Viktor Dukhovni
> On Apr 5, 2018, at 2:29 PM, Henderson, Karl via openssl-users > wrote: > >> TLS 1.3 unifies session tickets with (external) PSKs, perhaps you should >> recast your approach in terms of PSKs rather than session tickets. > > Is there a good implementation example of this? I think you'd be t

Re: [openssl-users] RFC5077 KWK

2018-04-05 Thread Henderson, Karl via openssl-users
Thanks, > TLS 1.3 unifies session tickets with (external) PSKs, perhaps you should > recast your approach in terms of PSKs rather than session tickets. Is there a good implementation example of this? On 4/5/18, 2:19 PM, "openssl-users on behalf of Viktor Dukhovni" wrote: > On

Re: [openssl-users] RFC5077 KWK

2018-04-05 Thread Viktor Dukhovni
> On Apr 5, 2018, at 2:02 PM, Henderson, Karl via openssl-users > wrote: > > Is it possible to use 5077 with a key wrapping key in a Needham-Schroeder > scenario: > > • A is a Key Server > • C is say a web server > • A has a relationship with C and hence A has key KEYac >

[openssl-users] RFC5077 KWK

2018-04-05 Thread Henderson, Karl via openssl-users
Is it possible to use 5077 with a key wrapping key in a Needham-Schroeder scenario: * A is a Key Server * C is say a web server * A has a relationship with C and hence A has key KEYac * B wants to talk to C but doesn’t have a relationship with C * B has a relationship with A