Symmetric-Key Key Agreement

• Derive and confirm new key K

• In SSL/TLS, three passes with MAC, KDF:

• Other approaches may be applied

NB

NA, MAC(W, 1||NA||NB)

MAC(W, 2||NA||NB)

K = KDF(W, NA||NB)

(some aspects simplified …)

Previous slide

Next slide

Back to first slide

View graphic version