Tell me more ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.
up vote 2 down vote favorite

It seems like the pre-master secret generated during the SRP protocol would make a good source to generate a shared private key using a secure hash to compress it down into a 128/256 symmetric key. The random values that get hashed into it seem to make it good for that purpose.

share|improve this question

1 Answer

up vote 3 down vote accepted

From the RFC:

SRP also supplies a shared secret at the end of the authentication sequence that can be used to generate encryption keys.

It seems from my quick look over the RFC that that shared secret is the premaster secret, so you are correct.

share|improve this answer
Ack! I even remember reading that now. I think i was wondering if it was uniform enough, or if I needed to HMAC it to death to be sure. – Grant BlahaErath Apr 4 '12 at 0:29

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.