From 2fdec5ae0583d23f98bd723810084410df4939b8 Mon Sep 17 00:00:00 2001
From: George Kadianakis <desnacked@riseup.net>
Date: Thu, 6 Sep 2018 13:58:39 +0300
Subject: HSv3: Include HS public identity key to the client auth KDF.

---
 rend-spec-v3.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'rend-spec-v3.txt')

diff --git a/rend-spec-v3.txt b/rend-spec-v3.txt
index 1718b22..03b45d9 100644
--- a/rend-spec-v3.txt
+++ b/rend-spec-v3.txt
@@ -1214,7 +1214,7 @@ Table of contents:
       And here is what the hidden service computes:
 
           SECRET_SEED = x25519(hs_y, client_X)
-          KEYS = KDF(SECRET_SEED, 40)
+          KEYS = KDF(subcredential | SECRET_SEED, 40)
           CLIENT-ID = fist 8 bytes of KEYS
           COOKIE-KEY = last 32 bytes of KEYS
 
-- 
cgit v1.2.3-54-g00ecf