Skip to content

Commit

Permalink
Make it clear that one has to generate a PSK of min entropy.
Browse files Browse the repository at this point in the history
  • Loading branch information
pthatcherg committed Sep 4, 2019
1 parent ce7f775 commit c714572
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions index.bs
Expand Up @@ -534,10 +534,9 @@ advertising agent.

In the `psk-min-bits-of-entropy` field of the [=auth-capabilities=] messsage,
agents may specify the minimum bits of entropy it requires for a PSK, in the
range of 20 to 60 bits inclusive. Agents must terminate any connection
attempting to authenticate with a PSK with fewer than the minimum number of bits
of entropy and must not attempt to authenticate with an agent that advertises a
value outside the allowed range.
range of 20 to 60 bits inclusive, with a default of 20. The PSK presenter must
generate a PSK that has at least as many bits of entropy as it receives in this
field, and at least as many bits of entropy as it sends in this field.

Authentication with SPAKE2 {#authentication-with-spake2}
--------------------------
Expand Down

0 comments on commit c714572

Please sign in to comment.