Re: [Cfrg] On using ROs for analyzing randomness extraction functions

["D. J. Bernstein" <djb at cr.yp.to>]

John Wilkinson writes:
> 2.3) K_i = PRF( UH( R, SV ), i || context )
> 2.3 seems to be the only one that offers security in the standard model,

You've been misled. That construction does _not_ guarantee secure key
derivation under standard assumptions.

---D. J. Bernstein, Professor, Mathematics, Statistics,
and Computer Science, University of Illinois at Chicago

_______________________________________________
Cfrg mailing list
Cfrg at ietf.org
https://www1.ietf.org/mailman/listinfo/cfrg