aboutsummaryrefslogtreecommitdiff
path: root/proposals/224-rend-spec-ng.txt
diff options
context:
space:
mode:
Diffstat (limited to 'proposals/224-rend-spec-ng.txt')
-rw-r--r--proposals/224-rend-spec-ng.txt5
1 files changed, 3 insertions, 2 deletions
diff --git a/proposals/224-rend-spec-ng.txt b/proposals/224-rend-spec-ng.txt
index ae990d4..8bff173 100644
--- a/proposals/224-rend-spec-ng.txt
+++ b/proposals/224-rend-spec-ng.txt
@@ -209,10 +209,11 @@ Table of contents:
* Instantiate H with SHA3-256.
- * Instantiate MAC(key=k, message=m) with H(k || m).
-
* Instantiate KDF with SHAKE-256.
+ * Instantiate MAC(key=k, message=m) with H(k_len || k || m),
+ where k_len is htonll(len(k)).
+
For legacy purposes, we specify compatibility with older versions of
the Tor introduction point and rendezvous point protocols. These used
RSA1024, DH1024, AES128, and SHA1, as discussed in