On Fri, Jul 08, 2022 at 09:05:44AM +0000, Hannes Tschofenig wrote: > > Hi Ilari, > > At the IETF#113 in Vienna (see slide 9 in > https://datatracker.ietf.org/meeting/113/materials/slides-113-cose-draft-ietf-cose-hpke-00) > I suggested to remove Section 3.4 from the draft for the following > reasons: > > * HPKE itself defines ways to add extra info into the key > derivation function, and > * HPKE incorporates various fields in the key derivation process > already. > > If you are OK with it, I would delete Section 3.4 from the cose-hpke draft.
The info structure is exactly what is added as extra info to the HPKE key derivation function. And it is not quite redundant: In some cases, one might want to pull PartyUInfo from enveloping cose_signature0 or cose_mac0. And some applications might do something (non-interoprable) with SuppPubInfo.other/SuppPrivInfo. -Ilari _______________________________________________ COSE mailing list [email protected] https://www.ietf.org/mailman/listinfo/cose
