4 ms·
As writing advice, it went from very understandable and approachable to stuff like: "You can get this property by stapling HKDF onto your protocol (once for ke
by llarsson 2y ago
As writing advice, it went from very understandable and approachable to stuff like:
"You can get this property by stapling HKDF onto your protocol (once for key derivation, again for commitment). See also: PASETO v3 and v4, or Version 2 of the AWS Encryption SDK.
It may be tempting to build a committing AEAD scheme out of, e.g., AES-CTR and HMAC, but take care that you don’t introduce canonicalization risks in your MAC."
I would almost suggest breaking stuff like this into two articles, one which is very technical and correct, and one that conveys the high-level message. The high-level one can link to the technically correct one whenever the urge would come to explain something more fully.