0

I am learning the PKC topics and would like to understand about the master and session key generation process regarding NTRU.

Let's make it a scenario, if a user wants to register during the registration process, the information obtained from the user is the user's id, password and biometric (for multi-factor authentication). These elements are then hashed and sent to the server. After the authentication process, then the server will start generating the master key and share to the user.

My question is:

  1. How the master key will be generated? Is it based on a random number with NTRU (which the algorithm I selected)?
  2. After this process, the master key will be used as communication between the user and the server OR the server will generate session key and sent to the user, so the connection of server with the user can be established?

The session key can be derived based on a master key. Therefore, I am seeking for help as I am not sure how the key derivation functions work on NTRU.

Improve this question
6
  • There's a lot in your question that has nothing to do with generating keys. And I think that there are going to be some underlying questions about your entire approach to the project at a fundamental level. For instance, why are you taking ID password and biometric information hashing them and sending them to the server for a single authentication process?
    – schroeder ♦
    Commented Jun 11 at 7:58
  • For the key generation, is for the next phase which is generating the master key to allow communication for user and server to communicate. The id, password, and biometric is for user to register in the server.
    – Chris Lo
    Commented Jun 11 at 8:10
  • Oh no. Please look up how to do authentication properly, and how to do MFA. Your proposed authentication design is broken.
    – schroeder ♦
    Commented Jun 11 at 8:24
  • The authentication I didnt explain much because the purpose of the post is just want to know how the master key and session key is generated tho.
    – Chris Lo
    Commented Jun 11 at 8:29
  • Then to avoid distraction you should probably limit the questions details to only the relevant ones.
    – schroeder ♦
    Commented Jun 11 at 8:33

0

Reset to default

You must log in to answer this question.