Home/ Questions/Q 3663222
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-19T01:30:20+00:00

What is the correct (acceptable) way to derive an, lets say 128 bit AES

  • 0

What is the correct (acceptable) way to derive an, lets say 128 bit AES key from the secret derived in a DH negotiation?

  • Use the first 128 bit
  • Hash the secret and use the first 128 bit
  • Use some more complicated derivation function

How would you derive a set of keys in a “correct” manner?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    For instance, in TLS used pseudo-random function, which is based on SHA1 and MD5 hash over shared secret (i.e. DH key exchange value), string label (to distinguish different cases for which key is generated, HMAC, cipher and so on), and shared random parameter (both client and server generates his own half of random parameter).

    So, i’d recommend to add some random data generated by both client and server, and hash it together with DH key exchange value.

    • 0