wholetrans/docs-matrix-spec
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sas: clarify HKDF calculation uses base64-encoded keys (#1719)

Browse source
This commit is contained in:
Sumner Evans 2024-02-26 09:24:52 -07:00 • committed by GitHub
parent c4e69d8cb1
commit 6096a28984
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

1
changelogs/client_server/newsfragments/1719.clarification Normal file
View file

@ -0,0 +1 @@
Clarify that the HKDF calculation for SAS uses base64-encoded keys rather than the raw key bytes.

8
content/client-server-api/modules/end_to_end_encryption.md
View file

@ -836,15 +836,15 @@ is the concatenation of:
- The Device ID of the device which sent the - The Device ID of the device which sent the
`m.key.verification.start` message, followed by `|`. `m.key.verification.start` message, followed by `|`.
- The public key from the `m.key.verification.key` message sent by - The public key from the `m.key.verification.key` message sent by
the device which sent the `m.key.verification.start` message, the device which sent the `m.key.verification.start` message, encoded as
followed by `|`. unpadded base64, followed by `|`.
- The Matrix ID of the user who sent the `m.key.verification.accept` - The Matrix ID of the user who sent the `m.key.verification.accept`
message, followed by `|`. message, followed by `|`.
- The Device ID of the device which sent the - The Device ID of the device which sent the
`m.key.verification.accept` message, followed by `|`. `m.key.verification.accept` message, followed by `|`.
- The public key from the `m.key.verification.key` message sent by - The public key from the `m.key.verification.key` message sent by
the device which sent the `m.key.verification.accept` message, the device which sent the `m.key.verification.accept` message, encoded as
followed by `|`. unpadded base64, followed by `|`.
- The `transaction_id` being used. - The `transaction_id` being used.
When the `key_agreement_protocol` is the deprecated method `curve25519`, When the `key_agreement_protocol` is the deprecated method `curve25519`,