-
Notifications
You must be signed in to change notification settings - Fork 136
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
enhancement request: implement KDF (SDHI and/or Naor-Reingold) #423
Comments
Implementing either algorithm can benefit from using CIRCL's group interface, as they only require conventional elliptic curve arithmetic. We would like to hear other use cases. I leave this ticket open in case anyone wants to contribute with the implementation. |
hey @armfazh 👋 If someone hasn't started already - can I take this up, please? |
One question here is whether these KDFs can be implemented using the CIRCL's public API, i.e., without including the KDFs as part of CIRCL. If so, then these can be implemented elsewhere using CIRCL as a dependency. OTOH, if, for some reason, the KDFs need to play with the internals of CIRCL to make them work, then we may consider add support to these KDFs. Let's figure out this first, open for comments. |
By way of backround, this request is based on my reading about Meta Anonymous Credential Service which they recently open-sourced (unfortunately in C !) https://github.com/facebookresearch/acs.
Anyways ... TL;DR, the curious beast in me thought I might have a go at re-implementing it in Go so I can play around with it.
Obviously Go stdlib doesn't provide many of the necessary building crypto building blocks, but
circl
does:But unfortunately .....
"attribute-based key derivation function" ❌
Meta say in their blog post:
We recommend Strong Diffie–Hellman Inversion (SDHI) or Naor-Reingold for better key transparency.
Hence this request 😉
( espcially as my github searches seem to show nobody else has a Go implementation of either of those KDFs either)
Perhaps see also comments in the header files re: SDHI and Naor-Reingold:
kdf/kdf_sdhi.h
kdf/kdf_naor_reingold.h
The text was updated successfully, but these errors were encountered: