Post #4033230

2026-07-21 13:58 UTC

@silverpill@mitra.social The primitive choices are sensible. The "aad" is sent in the clear (or just public as it is now) so you could do something like "fep-0806-aad" | ':' | | ':' | |':' | . If the proof covers all of that then it's not strictly needed, but it's cheap paranoia. I was going to say add version info to the labels, but fep0806:cipherAlgorithm covers that.

Replies (1)

@silverpill@mitra.social 2026-07-22 07:23

@greyarea@mitra.vpclmulqdq.moe >If the proof covers all of that then it's not strictly needed, but it's cheap paranoia. Do you mean id/actor/to of a plaintext activity, or of an envelope (EncryptedActivity)? My understanding is that the properties of an envelope have no effect on security. It can even have a different actor. I added an example of a plaintext activity: https://codeberg.org/silverpill/feps/src/branch/main/0806/fep-0806.md#plaintext-activity Also added HPKE mode to the parameter list - mode_base.

Open ##4033229