summaryrefslogtreecommitdiffstats
path: root/doc/source/crypto/fhmqvc.rst
diff options
context:
space:
mode:
authorMatthias Schiffer <mschiffer@universe-factory.net>2014-10-27 02:58:56 +0100
committerMatthias Schiffer <mschiffer@universe-factory.net>2014-10-27 02:58:56 +0100
commit3d34679f28d63e1a2172d1e64b99a2ed7b684190 (patch)
tree4e3d97164dbfe34ecc59bd570949ad504109fcc0 /doc/source/crypto/fhmqvc.rst
parentd8a73a26112fd7bd2c0bdab4fc6daf105d7eae3e (diff)
downloadfastd-3d34679f28d63e1a2172d1e64b99a2ed7b684190.tar
fastd-3d34679f28d63e1a2172d1e64b99a2ed7b684190.zip
docs: fixes for PDF build
Diffstat (limited to 'doc/source/crypto/fhmqvc.rst')
-rw-r--r--doc/source/crypto/fhmqvc.rst14
1 files changed, 5 insertions, 9 deletions
diff --git a/doc/source/crypto/fhmqvc.rst b/doc/source/crypto/fhmqvc.rst
index aa6f0cc..e3af6d4 100644
--- a/doc/source/crypto/fhmqvc.rst
+++ b/doc/source/crypto/fhmqvc.rst
@@ -75,11 +75,9 @@ following definitions for these functions:
.. math::
- \begin{align}
- d|e &= \text{SHA256}(Y|X|\hat{B}|\hat{A}) \\
- K_1 &= \textit{KDF}_1(\sigma,\hat{A},\hat{B},X,Y) = \text{HKDF-SHA256}(\texttt{0x00}^{32}, \sigma, \hat{A}|\hat{B}|X|Y, 32) \\
- K_2 &= \textit{KDF}_2(\sigma,\hat{A},\hat{B},X,Y) = \text{HKDF-SHA256}(K_1, \sigma, \hat{A}|\hat{B}|X|Y|\textit{method}, *)
- \end{align}
+ d|e &= \text{SHA256}(Y|X|\hat{B}|\hat{A}) \\
+ K_1 &= \textit{KDF}_1(\sigma,\hat{A},\hat{B},X,Y) = \text{HKDF-SHA256}(\texttt{0x00}^{32}, \sigma, \hat{A}|\hat{B}|X|Y, 32) \\
+ K_2 &= \textit{KDF}_2(\sigma,\hat{A},\hat{B},X,Y) = \text{HKDF-SHA256}(K_1, \sigma, \hat{A}|\hat{B}|X|Y|\textit{method}, *)
where :math:`V|W` designates the concatenation of the binary strings :math:`V` and :math:`W` and
@@ -96,10 +94,8 @@ as
.. math::
- \begin{align}
- d = \bar{H}(X|Y|\hat{A}|\hat{B}) \\
- e = \bar{H}(Y|X|\hat{A}|\hat{B})
- \end{align}
+ d &= \bar{H}(X|Y|\hat{A}|\hat{B}) \\
+ e &= \bar{H}(Y|X|\hat{A}|\hat{B})
fastd uses a single 256 bit hash :math:`\text{SHA256}(Y|X|\hat{B}|\hat{A})` instead and cuts it into two 128 bit pieces
which are used as :math:`d` and :math:`e`. This optimization allows reusing the SHA256 implementation that is already used for