Hi,
Please, find below some comments. I think the document is overall well
written and in a good shape.
Best,
/Marco
[General]
* Refer the AIF adopted draft rather than the individual submission.
* Some references are included twice side by side, e.g. RFC 4949 and RFC
7800.
[Section 1]
*
Hi,
Additional comments on the draft. Some of these require technical changes.
-
- "(as opposed to, e.g., a counter, that might leak some information about the
client)"
Using counters for N1 and N2 is not secure with the current Master Salt
construction as an