diff --git a/book/source/10-encryption.md b/book/source/10-encryption.md index b21cc27..34d5174 100644 --- a/book/source/10-encryption.md +++ b/book/source/10-encryption.md @@ -76,6 +76,13 @@ The [version 2 SEIPD](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto- In version 2 SEIPD, the *session key* is transformed into a *message key*, based on a salt value in the v2 SEIPD packet. +```{figure} drawio/SEIPDv2-PKESK.png +:name: fig-encryption-seipdv2-pkesk +:alt: TODO + +With SEIPDv2, the message-key is derived from the session-key in an extra step. +``` + ### v1 SEIPD, based on MDC The [version 1 SEIPD](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-12.html#version-one-seipd) mechanism is supported by all modern OpenPGP version 4 implementations. It was introduced in [RFC 4880](https://www.rfc-editor.org/rfc/rfc4880.html#section-5.13). diff --git a/book/source/drawio/SEIPDv2-PKESK.drawio b/book/source/drawio/SEIPDv2-PKESK.drawio new file mode 100644 index 0000000..9a4a400 --- /dev/null +++ b/book/source/drawio/SEIPDv2-PKESK.drawio @@ -0,0 +1,94 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/book/source/drawio/SEIPDv2-PKESK.png b/book/source/drawio/SEIPDv2-PKESK.png new file mode 100644 index 0000000..f3151ca Binary files /dev/null and b/book/source/drawio/SEIPDv2-PKESK.png differ