Hi Rich, Salz, Rich wrote: > * Introduction of (anonymous) Kerberos tickets as added entropy to mix > with ECDH, and thereby provide Quantum Relief; it generalises this idea > to allow for other ways of adding entropy > > Have you seen > https://datatracker.ietf.org/doc/draft-irtf-cfrg-randomness-improvements/ ?
I hadn't. Are you suggesting to insert the session key, or anything derived from it, into this CPRNG-alternative mechanism? The spec speaks of ways of communicating entropy, not necessarily having them available on two ends yet. That's a mild generalistion over the idea of passing a Kerberos ticket, which is essentially the pupose of this proposal. I am however listening here if the generalisation is useful. (I do have a few immature ideas that could use it.) -Rick _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls