Skip to content

Verify initial ciphertext #2

Description

@Wallman

In the Signal X3DH protocol one of the steps of initiateKeyAgreement is:

An initial ciphertext encrypted with some AEAD encryption scheme using AD as associated data and using an encryption key which is either SK or the output from some cryptographic PRF keyed by SK.

I believe this is not done or mentioned here? I would love an example in the Usage section how that could be done, thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions