Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-03-23 19:44:09 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

sas: clarify HKDF calculation uses base64-encoded keys

Browse source 
Signed-off-by: Sumner Evans <sumner@beeper.com>
This commit is contained in:
Sumner Evans 2024-01-29 23:33:54 -07:00
parent 9a5cacda90
commit 9b78c492e2
No known key found for this signature in database
GPG key ID: 8904527AB50022FD
2 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
changelogs/client_server/newsfragments/1719.clarification Normal file
View file

@ -0,0 +1 @@
Clarify that the HKDF calculation for SAS uses base64-encoded keys rather than the raw key bytes.

8
content/client-server-api/modules/end_to_end_encryption.md
View file

@ -836,15 +836,15 @@ is the concatenation of:
- The Device ID of the device which sent the - The Device ID of the device which sent the
`m.key.verification.start` message, followed by `|`. `m.key.verification.start` message, followed by `|`.
- The public key from the `m.key.verification.key` message sent by - The public key from the `m.key.verification.key` message sent by
the device which sent the `m.key.verification.start` message, the device which sent the `m.key.verification.start` message, encoded as
followed by `|`. unpadded base64, followed by `|`.
- The Matrix ID of the user who sent the `m.key.verification.accept` - The Matrix ID of the user who sent the `m.key.verification.accept`
message, followed by `|`. message, followed by `|`.
- The Device ID of the device which sent the - The Device ID of the device which sent the
`m.key.verification.accept` message, followed by `|`. `m.key.verification.accept` message, followed by `|`.
- The public key from the `m.key.verification.key` message sent by - The public key from the `m.key.verification.key` message sent by
the device which sent the `m.key.verification.accept` message, the device which sent the `m.key.verification.accept` message, encoded as
followed by `|`. unpadded base64, followed by `|`.
- The `transaction_id` being used. - The `transaction_id` being used.
When the `key_agreement_protocol` is the deprecated method `curve25519`, When the `key_agreement_protocol` is the deprecated method `curve25519`,