W3C home > Mailing lists > Public > public-webauthn@w3.org > May 2021

Re: [webauthn] Can the private keys be used for other cryptographic operations? (#1595)

From: Emil Lundberg via GitHub <sysbot+gh@w3.org>
Date: Tue, 04 May 2021 18:29:27 +0000
To: public-webauthn@w3.org
Message-ID: <issue_comment.created-832152932-1620152965-sysbot+gh@w3.org>
I thought of an application I don't think the PRF extension covers: multi-party encryption (which seems pretty obvious in hindsight...). If the sender and recipient are the same, then a PRF can be used well enough to derive a symmetric key. But not so if the sender and recipient are not the same (and their PRFs are therefore different). For that I believe you would need direct access to some kind of Diffie-Hellman construct.

GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1595#issuecomment-832152932 using your GitHub account

Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Tuesday, 4 May 2021 18:29:28 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 07:26:43 UTC