[bitcoin-dev] BIP 151 use of HMAC_SHA512
arthur.chen at btcc.com
Mon Jul 4 01:23:14 UTC 2016
I strongly agree!
In crypto we should always follow well-studied open standard rather than
On Fri, Jul 1, 2016 at 10:42 PM, Zooko Wilcox via bitcoin-dev <
bitcoin-dev at lists.linuxfoundation.org> wrote:
> I haven't been able to find the beginning of this thread, so apologies
> if I've misunderstood what this is for, but it _sounds_ like we're
> re-inventing HKDF.
> I'd recommend reading the paper about HKDF. It stands out among crypto
> papers for having a nice clear justification for each of its design
> decisions, so you can see why they did it (very slightly) differently
> than the various constructions proposed up-thread.
> Also, of course, it is a great idea to re-use a standard
> (https://tools.ietf.org/html/rfc5869) and widely-understood crypto
> algorithm to reduce risk of both cryptographer errors and implementor
> Of course, the cost of that is the you sometimes end up computing
> something that is a tiny bit more complicated or inefficient than a
> custom algorithm for our current use case. IMHO that's a cheap price
> to pay.
> bitcoin-dev mailing list
> bitcoin-dev at lists.linuxfoundation.org
Xuesong (Arthur) Chen
Senior Principle Engineer
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the bitcoin-dev