Not sure if anyone here can help, but if so, sure would appreciate the help.
If we read the https://geti2p.net/spec/tunnel-creation documentation page on how I2P creates a tunnel, we can read on the Request Record Encryption chapter these lines: "Each 528-byte record is then iteratively encrypted (using AES decryption, with the reply key and reply IV for each hop) so that the router identity will only be in cleartext for the hop in question."
My question is, how to the next routers get these "reply key and reply IV" keys, if they are inside an already AES encrypted (using decrypt) block, that was encrypted (using decrypt) with those same keys?
The only reference to these keys I find is them being generated by the Outbound Gateway Router for each router, then encrypted with the router's ElGamal public key. Next and the outbound gateway adds a identity hash to go along this ElGamal block, AES encrypt it (using decrypt), and then, magically in the next chapter, the router only needs to find it by the identity hash.
Isn't the part were he decrypted the AES missing?
I have been reading stuff for three days and i can't find the answer, help please.
I can explain this better if not explained properly.