You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: 04-Protocol-Security.md
-33
Original file line number
Diff line number
Diff line change
@@ -287,39 +287,6 @@ signature is constructed for
287
287
288
288
Signature itself is concatenation of an EC point `R` and an integer `s` (note that each item is serialized as 32 bytes array) for which identity `s⋅G = R + HASH(R || P || m)⋅P` holds.
289
289
290
-
### 4.5.4 Cipher upgrade part 1: `-> AEAD_CIPHERS`
291
-
292
-
Initiator provides list of AEAD ciphers other than ChaChaPoly that it supports
293
-
294
-
| Field name | Description |
295
-
| ---------- | ----------- |
296
-
| SEQ0_32[u32]| List of AEAD cipher functions other than ChaChaPoly that the client supports |
297
-
298
-
Message length: 1 + _n_\* 4 bytes, where n is the length byte of the SEQ0_32 field, at most 129
299
-
300
-
possible cipher codes:
301
-
302
-
| cipher code | Cipher description |
303
-
| ----------- | ------------------ |
304
-
| 0x47534541 (b"AESG") | AES-256 with with GCM from [7]|
305
-
306
-
[\[7\]](#reference-7) - Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC
307
-
308
-
### 4.5.5 Cipher upgrade part 2: `<- CIPHER_CHOICE`
309
-
310
-
Responder acknowledges receiving `AEAD_CIPHERS` message with `CIPHER_CHOICE`. There are two possible cases
311
-
312
-
1.`CIPHER_CHOICE` is empty: In this case continue using current established encrypted session
313
-
2.`CIPHER_CHOICE` is non-empty - Restart encrypted session using the new AEAD-cipher
314
-
315
-
##### CIPHER_CHOICE
316
-
317
-
| Field name | Description |
318
-
| ---------- | ----------- |
319
-
| OPTION[u32]| Request to upgrade to a given AEAD-cipher |
0 commit comments