Re: [TLS] Wrapping up cached info (and PRF WTF)

[Nicolas Williams <[e-mail]>]

On Mon, May 17, 2010 at 03:45:19PM -0400, Kemp, David P. wrote:
> >> [Nico] Paul Hoffman proposes an extension to add inputs to the
> Finished 
> >> message computation.  There's no objection yet to Paul's proposal on 
> >> the grounds you state.
> >
> > [Marsh] I'm not sure the discussion got that far, so it's not evidence
> of much.
> 
> 
> Was this a verbal proposal?  Paul has submitted the following I-Ds:
> 
> draft-hoffman-tls-additional-random-ext-01  -- Additional Random
> Extension to TLS
> draft-hoffman-tls-master-secret-input-01    -- Additional Master Secret
> Inputs for TLS

draft-hoffman-tls-master-secret-input-01.

> but nothing that would add inputs to the Finished computation other than
> what was actually transmitted over the wire.

It changes the computation of the master secret, therefore it changes
the computation of the Finished message.

But none of that matters now because IMO the simplest fix here is to add
a handshake message that has a cryptographic hash of all the cached
objects' data -- or something along those lines.

Nico
--