> -----Original Message----- > From: Salz, Rich <rs...@akamai.com> > > > [DB] But NIST Draft SP 800-56Cr2 cites RFC 5869, which is HKDF, and > > says > HKDF > is a version of 56C Section 5.1. So, I had thought that 56C would allow > HKDF. > What am I missing? > > It cites it, but doesn't include it in the 800-56 doc.
To be clear, are you saying that RFC 5869 HKDF is not compatible with 800-56Cr2? (I had assumed they were compatible, but just used different notation for the same idea.) Looking just now, I see 800-56C refers to 800-108, whose Section 5.2, KDF in Feedback Mode looks really close to HKDF in RFC 5869. I see the same overall design, but some different orderings of inputs, which could cause non-interop. Is that the case? ---------------------------------------------------------------------- This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls