From 1e75d6e2500a8e2c3b725e320bd6a247527adb06 Mon Sep 17 00:00:00 2001 From: zzz <zzz@mail.i2p> Date: Thu, 29 Sep 2016 21:20:32 +0000 Subject: [PATCH] prop 111 update --- i2p2www/spec/proposals/111-ntcp-2.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/i2p2www/spec/proposals/111-ntcp-2.rst b/i2p2www/spec/proposals/111-ntcp-2.rst index 312cbdf46..f6ab07439 100644 --- a/i2p2www/spec/proposals/111-ntcp-2.rst +++ b/i2p2www/spec/proposals/111-ntcp-2.rst @@ -5,7 +5,7 @@ NTCP 2 :author: zzz :created: 2014-02-13 :thread: http://zzz.i2p/topics/1577 - :lastupdated: 2016-09-27 + :lastupdated: 2016-09-29 :status: Open :supercedes: 106 @@ -63,8 +63,8 @@ Design Goals - Add resistance to malicious MitM TCP segmentation if possible - Don't add significantly to CPU required for connection setup; if possible, reduce it significantly -- Replace HMAC-MD5 with something more secure (see RFC 6151), - possibly HMAC-SHA256 or Poly1305 (see alternatives below). +- Add message authentication (MAC), possibly HMAC-SHA256 or Poly1305 + (see alternatives below), and remove Adler checksum - If possible, reduce the 4-message, two-round-trip handshake to a 3-message, one-round-trip handshake, as in SSU. This would require moving Bob's signature in message 4 to message 2. -- GitLab