Timeline for What are the safe ways to derive HMAC key using block cipher?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 27, 2012 at 19:07 | vote | accept | dchest | ||
| Aug 27, 2012 at 19:02 | comment | added | poncho | @dchest: that would work as well. The key that this process derives is effectively independent of the CBC encryption process (with high probability); it follows that anything derived from this key is also independent of the CBC encryption. | |
| Aug 27, 2012 at 18:30 | comment | added | dchest | Thank you! Regarding your last point: would it make sense (assuming that we can use block cipher with our own keys) to derive an intermediate key like you said, and then run block cipher with this key in CTR mode to generate the final MAC key of the requested length? | |
| Aug 27, 2012 at 14:27 | history | answered | poncho | CC BY-SA 3.0 |