Dennis Jackson

Hi @emlun, I took a quick look over the extension draft and have some feedback on the crypto design which is below. Best, Dennis **Missing Requirements** It should be specified...

> Might it make sense, then, to include an EDH key agreement in the import/export exchange, and encrypt `S` with the agreed ephemeral key? It wouldn't prevent a malicious client...

> Am I missing some reason for why separate invocations of HKDF would be beneficial? My thinking here was implementation rather than any cryptographic properties. ``` cred_key = HKDF(...) mac_key...