X-Git-Url: http://git.silcnet.org/gitweb/?a=blobdiff_plain;f=TODO-SILC;h=164bb41fd5de21f42e6e7e974f7a0999d5ddcfb0;hb=b201d0cbb8b7ee3dab88be3ee7c187d93fed358c;hp=751ac92b77060472e03445d936c4abe67429985a;hpb=f78d6c000af2f0d829563ccf4db24f08a06c53ae;p=crypto.git

diff --git a/TODO-SILC b/TODO-SILC
index 751ac92b..164bb41f 100644
--- a/TODO-SILC
+++ b/TODO-SILC
@@ -19,9 +19,24 @@ point.
  o Group Diffie-Hellman protocol for establishig key with two or more
    users on a channel.
 
- o Define that with CTR mode PFS MUST be enabled in SKE.  CTR rekey
-   cannot be done without PFS because the counter block requires fresh
-   HASH value which requires PFS in rekey.
+ o Change CTR mode description:
+
+    Truncated HASH from SKE (4 bytes) - This value is the first 4
+    bytes from the HASH value that was computed as a result of SKE
+    protocol.  This acts as session identifier and each rekey MUST
+    produce a new HASH value.
+
+   to
+
+    Truncated HASH from SKE (4 bytes) - This value is the first 4
+    bytes from the HASH value that was computed in SKE.  In each rekey 
+    the value MUST be recomputed as follows:
+
+      HASH = hash(new Sending/Receiving IV from SKE)
+
+    The hash function is the one used in SKE.  The 'new Sending/Receiving 
+    IV from SKE' is the first 8 bytes of the new value computed during 
+    rekey.  The first 4 bytes are used from the recomputed HASH.
 
  o Extend the Channel ID port to be actually a counter, allowing the
    2^32 channels per cell, instead of 2^16 like now.  The port with