aboutsummaryrefslogtreecommitdiff
path: root/spec/tor-spec/setting-circuit-keys.md
diff options
context:
space:
mode:
Diffstat (limited to 'spec/tor-spec/setting-circuit-keys.md')
-rw-r--r--spec/tor-spec/setting-circuit-keys.md4
1 files changed, 3 insertions, 1 deletions
diff --git a/spec/tor-spec/setting-circuit-keys.md b/spec/tor-spec/setting-circuit-keys.md
index d566ff6..b49f75d 100644
--- a/spec/tor-spec/setting-circuit-keys.md
+++ b/spec/tor-spec/setting-circuit-keys.md
@@ -1,7 +1,9 @@
<a id="tor-spec.txt-5.2"></a>
+
## Setting circuit keys
<a id="tor-spec.txt-5.2.1"></a>
+
### KDF-TOR
This key derivation function is used by the TAP and CREATE_FAST
@@ -33,6 +35,7 @@ is used to encrypt the stream of data going from the OP to the OR, and
Kb is used to encrypt the stream of data going from the OR to the OP.
<a id="tor-spec.txt-5.2.2"></a>
+
### KDF-RFC5869
For newer KDF needs, Tor uses the key derivation function HKDF from
@@ -57,4 +60,3 @@ forward digest Df; the next HASH_LEN form the backward digest Db; the
next KEY_LEN form Kf, the next KEY_LEN form Kb, and the final
DIGEST_LEN bytes are taken as a nonce to use in the place of KH in the
hidden service protocol. Excess bytes from K are discarded.
-