[bitcoin-dev] BIP 151 use of HMAC_SHA512
arthur.chen at btcc.com
Mon Jul 4 01:44:30 UTC 2016
On Mon, Jul 4, 2016 at 1:23 AM, Arthur Chen <arthur.chen at btcc.com> wrote:
> I strongly agree!
> In crypto we should always follow well-studied open standard rather than
> custom construction.
> On Fri, Jul 1, 2016 at 10:42 PM, Zooko Wilcox via bitcoin-dev <
> bitcoin-dev at lists.linuxfoundation.org> wrote:
>> I haven't been able to find the beginning of this thread, so apologies
>> if I've misunderstood what this is for, but it _sounds_ like we're
>> re-inventing HKDF.
>> I'd recommend reading the paper about HKDF. It stands out among crypto
>> papers for having a nice clear justification for each of its design
>> decisions, so you can see why they did it (very slightly) differently
>> than the various constructions proposed up-thread.
>> Also, of course, it is a great idea to re-use a standard
>> (https://tools.ietf.org/html/rfc5869) and widely-understood crypto
>> algorithm to reduce risk of both cryptographer errors and implementor
>> Of course, the cost of that is the you sometimes end up computing
>> something that is a tiny bit more complicated or inefficient than a
>> custom algorithm for our current use case. IMHO that's a cheap price
>> to pay.
>> bitcoin-dev mailing list
>> bitcoin-dev at lists.linuxfoundation.org
> Xuesong (Arthur) Chen
> Senior Principle Engineer
> BlockChain Technologist
Xuesong (Arthur) Chen
Senior Principle Engineer
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the bitcoin-dev