otrv4 / otrv4

Off-the-Record Messaging Protocol version 4. -This is a draft- This repository is a mirror of http://bugs.otr.im/otrv4/otrv4

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Clarify what it means to "Send new Auth-R message with new values"

cobratbq opened this issue · comments

In section Receiving an Identity Message, "If the state is WAITING_AUTH_I:" it says the following:

If validation succeeds:

  • Forget the old their_ecdh, their_dh, their_ecdh_first, their_dh_first and Client Profile from the previously received Identity message.
  • Send a new Auth-R message with the new values received in the Indentity message.

Could you explain what "sending a new Auth-R message with the new values received ..." means? Does this include replacing our own previously generated keys our_dh and our_ecdh (and the firsts)? (I.e. according to generating public keys section.) If so, I could not be sure from this description. If not, then these values will already have been cleared earlier in the process, IIUC.

Thank you :-)