5 ms·

Thanks, and yes, I've read about what hardness assumption is used. My confusion is about what pieces are concatenated. Is the same input processed twice (diffe

by cm3 10y ago

Thanks, and yes, I've read about what hardness assumption is used. My confusion is about what pieces are concatenated. Is the same input processed twice (different ciphers) and then concatenated, which is then the generated key?

tptacek 10y ago
The outputs of an RLWE and ECDH handshake are both fed into the TLS KDF.
- cm3 10y ago
  Thanks for the info. May I ask if you figured that out from the blog or BoringSSL code?
  - pbsd 10y ago
    The hybrid ciphersuite idea comes from [1, Section 5.2], though you could also chalk it up to common sense. I don't think the blog spells out how it's done. [1] https://eprint.iacr.org/2014/599 https://eprint.iacr.org/2014/599
  - wolf550e 10y ago
    Adam Langley answered this on HN: https://news.ycombinator.com/item?id=12051438 https://news.ycombinator.com/item?id=12051438