Re: HCR for key negotiation

2006-05-03 Thread Watson Ladd
On 5/2/06, Nick Mathewson [EMAIL PROTECTED] wrote: On Tue, May 02, 2006 at 07:07:56PM -0400, Watson Ladd wrote: First some background: The NSA's Suit B uses a key negotiation mutual authentication method MQV. This method was found to be insecure, and so HMQV was created. HMQV uses a signature

HCR for key negotiation

2006-05-02 Thread Watson Ladd
First some background:The NSA's Suit B uses a key negotiation mutual authentication method MQV. This method was found to be insecure, and so HMQV was created. HMQV uses a signature protocol called HCR twice in one exchange to generate a key. HCR can prove identy of one endpoint and negotiate a key

Re: HCR for key negotiation

2006-05-02 Thread Nick Mathewson
On Tue, May 02, 2006 at 07:07:56PM -0400, Watson Ladd wrote: First some background: The NSA's Suit B uses a key negotiation mutual authentication method MQV. This method was found to be insecure, and so HMQV was created. HMQV uses a signature protocol called HCR twice in one exchange to