Lines Matching full:derivation
71 4.3. Key Derivation . . . . . . . . . . . . . . . . . . . . . 26
72 4.3.1. Key Derivation Algorithm . . . . . . . . . . . . 26
73 4.3.2. SRTCP Key Derivation . . . . . . . . . . . . . . 28
78 5.3. Key Derivation: AES-CM PRF . . . . . . . . . . . . . . . 29
81 7.1. Key derivation . . . . . . . . . . . . . . . . . . . . . 30
122 B.3. Key Derivation Test Vectors. . . . . . . . . . . . . . . 53
244 derivation function (see Section 4.3), providing "session keys"
248 * In addition, the key derivation can be configured to periodically
473 * a master salt, to be used in the key derivation of session keys.
480 be a power of 2 simplifies the session-key derivation
508 the key derivation) are used but the session key(s) MUST NOT be so
535 All encryption, authentication/integrity, and key derivation
705 authentication (Section 4.2), and for the key derivation (Section
771 security and access control to media. Recurring key derivation by
1432 4.3. Key Derivation
1434 4.3.1. Key Derivation Algorithm
1439 implementations MUST use the SRTP key derivation to generate session
1440 keys. Once the key derivation rate is properly signaled at the start
1442 parties that use SRTP key derivation.
1455 Figure 5: SRTP key derivation.
1457 At least one initial key derivation SHALL be performed by SRTP, i.e.,
1458 the first key derivation is REQUIRED. Further applications of the
1459 key derivation MAY be performed, according to the
1461 derivation function SHALL initially be invoked before the first
1462 packet and then, when r > 0, a key derivation is performed whenever
1475 [HAC]. For the purpose of key derivation in SRTP, a secure PRF with
1494 Key derivation SHALL be defined as follows in terms of <label>, an
1532 derivation SHALL take place exactly once.
1535 For a non-zero t among the set of allowed key derivation rates, "a
1546 t. The derivation operation is further facilitated if the rates are
1552 derivation.
1554 4.3.2. SRTCP Key Derivation
1558 the definitions in Section 4.3.1 when applying session key derivation
1587 key derivation (PRF) AES-CM - AES-CM
1624 5.3. Key Derivation: AES-CM PRF
1626 The AES Counter Mode based key derivation and PRF defined in Sections
1629 SHALL be 112 bits and the default key-derivation rate SHALL be zero.
1649 derivation, whether sharing of keys between SRTP and SRTCP is allowed
1669 7.1. Key derivation
1671 Key derivation reduces the burden on the key establishment. As many
1678 application of the key derivation function).
1680 Multiple applications of the key derivation function are optional,
1687 Multiple applications of the key derivation function provide
1702 attacks on the key derivation that might otherwise reduce the
1869 pad due to the key derivation. Thus, SRTP and SRTCP corresponding to
2014 Key derivation PRF AES_CM AES_CM
2024 key derivation rate 0 0
2185 Key derivation limits the amount of plaintext that is encrypted with
2187 but key derivation does not extend the master key's lifetime. To see
2194 Note that with the key derivation, the effective key size is at most
2204 key in the key derivation. It was, however, chosen not to mandate
2206 key-derivation may not always support key-lengths other than 128
2461 round of the key derivation splits the master key into any or all of
2473 the MKI can be omitted. As the key-derivation in combination with
2476 an issue, we recommended to use low-rate key derivation.
2516 case key derivation is wanted for SRTP, the cryptographic context for
2971 B.3. Key Derivation Test Vectors
2973 This section provides test data for the default key derivation
2975 walk through the initial key derivation for the AES-128 Counter Mode
2980 Since this is the initial key derivation and the key derivation rate
2985 The inputs to the key derivation function are the 16 octet master key
