Skip to content

Correct KDF naming to BLAKE2b #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
neuromechanist merged 1 commit into from
Jun 23, 2026
Merged

Correct KDF naming to BLAKE2b #5

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion liblsl/include/lsl_security.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
*
* Security Model:
* - Ed25519 for device identity and signatures
* - X25519 + HKDF for session key derivation
* - X25519 + BLAKE2b for session key derivation
* - ChaCha20-Poly1305 for authenticated encryption
* - Unified security: all-secure or all-insecure network
*
Expand Down
5 changes: 1 addition & 4 deletions liblsl/src/lsl_security.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,10 +19,7 @@ namespace lsl {
namespace security {

// Internal constants
constexpr size_t HKDF_CONTEXT_SIZE = 8;
constexpr char HKDF_CONTEXT[] = "lsl-sess";
// Domain-separation context for the ephemeral-exchange session key, kept
// distinct from HKDF_CONTEXT so the two derivations can never collide.
// Domain-separation context for the ephemeral-exchange session key.
constexpr char EPH_CONTEXT[] = "lsl-esk1";
constexpr uint64_t SESSION_KEY_SUBKEY_ID = 1;

Expand Down
Loading