Add TODO about session-key reuse in SEIPDv2

This commit is contained in:
Paul Schaub 2023-11-28 23:26:37 +01:00 committed by Heiko Schaefer
parent 509abf7ee9
commit 217f1ed507
No known key found for this signature in database
GPG key ID: DAE9A9050FCCF1EB

View file

@ -129,6 +129,14 @@ The session-key can use a different symmetric algorithm than the message-key.
With SEIPDv2, the message-key is derived from the session-key in an extra step.
```
```{admonition} TODO
:class: warning
Explain, that with SEIPDv2, a session-key can essentially protect more than one message by reusing the same session-key and *ESK packets with a fresh, per-message salt.
This might very well go into the advanced topics section though.
```
## Advanced topics
### Encrypt to multiple/single subkey per certificate?