|
1051 | 1051 | </tr></thead> |
1052 | 1052 | <tfoot><tr> |
1053 | 1053 | <td class="left">Benjamin, et al.</td> |
1054 | | -<td class="center">Expires 18 April 2026</td> |
| 1054 | +<td class="center">Expires 19 April 2026</td> |
1055 | 1055 | <td class="right">[Page]</td> |
1056 | 1056 | </tr></tfoot> |
1057 | 1057 | </table> |
|
1064 | 1064 | <dd class="internet-draft">draft-davidben-tls-merkle-tree-certs-latest</dd> |
1065 | 1065 | <dt class="label-published">Published:</dt> |
1066 | 1066 | <dd class="published"> |
1067 | | -<time datetime="2025-10-15" class="published">15 October 2025</time> |
| 1067 | +<time datetime="2025-10-16" class="published">16 October 2025</time> |
1068 | 1068 | </dd> |
1069 | 1069 | <dt class="label-intended-status">Intended Status:</dt> |
1070 | 1070 | <dd class="intended-status">Experimental</dd> |
1071 | 1071 | <dt class="label-expires">Expires:</dt> |
1072 | | -<dd class="expires"><time datetime="2026-04-18">18 April 2026</time></dd> |
| 1072 | +<dd class="expires"><time datetime="2026-04-19">19 April 2026</time></dd> |
1073 | 1073 | <dt class="label-authors">Authors:</dt> |
1074 | 1074 | <dd class="authors"> |
1075 | 1075 | <div class="author"> |
@@ -1129,7 +1129,7 @@ <h2 id="name-status-of-this-memo"> |
1129 | 1129 | time. It is inappropriate to use Internet-Drafts as reference |
1130 | 1130 | material or to cite them other than as "work in progress."<a href="#section-boilerplate.1-3" class="pilcrow">¶</a></p> |
1131 | 1131 | <p id="section-boilerplate.1-4"> |
1132 | | - This Internet-Draft will expire on 18 April 2026.<a href="#section-boilerplate.1-4" class="pilcrow">¶</a></p> |
| 1132 | + This Internet-Draft will expire on 19 April 2026.<a href="#section-boilerplate.1-4" class="pilcrow">¶</a></p> |
1133 | 1133 | </section> |
1134 | 1134 | </div> |
1135 | 1135 | <div id="copyright"> |
@@ -2892,7 +2892,7 @@ <h4 id="name-example-subtree-consistency"> |
2892 | 2892 | <a href="#name-an-example-subtree-consiste" class="selfRef">An example subtree consistency proof for a subtree that is directly contained in the full tree</a> |
2893 | 2893 | </figcaption></figure> |
2894 | 2894 | </div> |
2895 | | -<p id="section-4.4.2-3">The subtree consistency proof for <code>[8, 13)</code> and a tree of size 14 contains <code>MTH({d[12]})</code>, <code>MTH({d[12]})</code>, <code>MTH(D[8:12])</code>, and <code>MTH(D[0:8])</code>, depicted in <a href="#fig-subtree-consistency-example-2" class="auto internal xref">Figure 8</a>. <code>[8, 13)</code> is not directly contained in the tree, so the proof must include sufficient nodes to reconstruct both hashes.<a href="#section-4.4.2-3" class="pilcrow">¶</a></p> |
| 2895 | +<p id="section-4.4.2-3">The subtree consistency proof for <code>[8, 13)</code> and a tree of size 14 contains <code>MTH({d[12]})</code>, <code>MTH({d[13]})</code>, <code>MTH(D[8:12])</code>, and <code>MTH(D[0:8])</code>, depicted in <a href="#fig-subtree-consistency-example-2" class="auto internal xref">Figure 8</a>. <code>[8, 13)</code> is not directly contained in the tree, so the proof must include sufficient nodes to reconstruct both hashes.<a href="#section-4.4.2-3" class="pilcrow">¶</a></p> |
2896 | 2896 | <span id="name-an-example-subtree-consisten"></span><div id="fig-subtree-consistency-example-2"> |
2897 | 2897 | <figure id="figure-8"> |
2898 | 2898 | <div id="section-4.4.2-4.1"> |
@@ -5485,7 +5485,7 @@ <h3 id="name-consistency-proof-structure"> |
5485 | 5485 | <p id="appendix-B.3-1">A subtree consistency proof for <code>[start, end)</code> and the tree of <code>n</code> elements is similar to an inclusion proof for element <code>end - 1</code>. If one starts from <code>end - 1</code>'s hash, incorporating the whole inclusion proof should reconstruct <code>root_hash</code> and incorporating a subset of the inclusion proof should reconstruct <code>node_hash</code>. Thus <code>end - 1</code>'s hash and this inclusion proof can prove consistency. A subtree consistency proof in this document applies two optimizations over this construction:<a href="#appendix-B.3-1" class="pilcrow">¶</a></p> |
5486 | 5486 | <ol start="1" type="1" class="normal type-1" id="appendix-B.3-2"> |
5487 | 5487 | <li id="appendix-B.3-2.1"> |
5488 | | - <p id="appendix-B.3-2.1.1">Instead of starting at level 0 with <code>end - 1</code>, the proof can start at a higher level. Any ancestor of <code>end - 1</code> shared by both the subtree and the overall tree will <code>node_hash</code> and <code>root_hash</code>. Use the highest level with a commmon ancestor. This truncates the inclusion proof portion of the consistency proof.<a href="#appendix-B.3-2.1.1" class="pilcrow">¶</a></p> |
| 5488 | + <p id="appendix-B.3-2.1.1">Instead of starting at level 0 with <code>end - 1</code>, the proof can start at a higher level. Any ancestor of <code>end - 1</code> shared by both the subtree and the overall tree is a valid starting node to reconstruct <code>node_hash</code> and <code>root_hash</code>. Use the highest level with a commmon ancestor. This truncates the inclusion proof portion of the consistency proof.<a href="#appendix-B.3-2.1.1" class="pilcrow">¶</a></p> |
5489 | 5489 | </li> |
5490 | 5490 | <li id="appendix-B.3-2.2"> |
5491 | 5491 | <p id="appendix-B.3-2.2.1">If this starting node is the entire subtree, omit its hash from the consistency proof. The verifier is assumed to already know <code>node_hash</code>.<a href="#appendix-B.3-2.2.1" class="pilcrow">¶</a></p> |
|
0 commit comments