Groups - pkcs11-kdf-ecdh.docx uploaded

[Michael StJohns<msj@nthpermutation.com>]

        Submitter's message
        This document was triggered due to the proposal by Doran for an EC/AES based key wrapping mechanism.  That proposal depends on the structure and approach defined for CKM_ECDH1_DERIVE et al, but that mechanism should probably be deprecated for a number of reasons including the fix we applied to it for 2.30 was probably a bad approach to fixing the underspecification.

Also, we're starting to get a lot of KDF approaches - this is an attempt to at least get those down to family definitions rather than family and underlying PRF combinations each as individual mechanisms
        
-- Michael StJohns

Document Name: pkcs11-kdf-ecdh.docx

---

Description
Deprecates CKM_ECDH1_DERIVE and CKM_ECDH1_COFACTOR_DERIVE due to
under/mis-specification. Adds multi-key versions of ECDH as well as
replacement for deprecated mechanisms. Adds a more generic KDF structure
both for use with the new ECDH mechanisms and as general KDFs.
Download Latest Revision
Public Download Link

---

Submitter: Michael StJohns
Group: OASIS PKCS 11 TC
Folder: Working Drafts
Date submitted: 2013-06-16 12:55:05