Re: [TLS] Adding an additional step to exporters

2017-02-26 Thread Martin Thomson
On 24 February 2017 at 21:02, Ilari Liusvaara wrote: > This technique seems to assume there is some fixed known set of exporter > labels that are used. Since if you don't know the full set, you need to > keep the master exporter secret around anyway. This is correct. I assume here that many appl

Re: [TLS] Adding an additional step to exporters

2017-02-26 Thread Martin Thomson
Hi Hugo, On 25 February 2017 at 03:47, Hugo Krawczyk wrote: > Martin, > > Which of these two derivation schemes are you proposing? I mean the latter of your two, where you have effectively three layers of HKDF-Expand from the master secret. master secret -> exporter secret exporter secret + e