From e18d36ebae30536c77c61cd5da123991e0ca1629 Mon Sep 17 00:00:00 2001
From: Rasmus Dahlberg <rasmus@rgdd.se>
Date: Sun, 31 Dec 2023 09:39:25 +0100
Subject: Add drafty prototype

---
 docs/submission.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 docs/submission.md

(limited to 'docs/submission.md')

diff --git a/docs/submission.md b/docs/submission.md
new file mode 100644
index 0000000..357f07a
--- /dev/null
+++ b/docs/submission.md
@@ -0,0 +1,22 @@
+# Submission
+
+docdoc
+
+## Format
+
+    NAME MAC
+    <PEM CHAIN>
+    silent-ct:separator
+    ...
+    <PEM CHAIN>
+
+`NAME`: identifier that the monitor uses to locate the right secret.
+
+`MAC`: HMAC with SHA256 as the hash function, computed for line two and forward.
+The HMAC key is derived by the node and the monitor from their shared secret:
+
+    hkdf := hkdf.New(sha256.New, SECRET, []byte("silent-ct"), NAME)
+    key := make([]byte, 16)
+    io.ReadFull(hkdf, key)
+
+`<PEM CHAIN>`: certificate chain in PEM format the node considers legitimate.
-- 
cgit v1.2.3