Re: [TLS] Quest for Unified Solution to TLS Renegotiation

[Martin Rex <[e-mail]>]

I would really prefer the previous_verify_data to be covered by the
signature of the ClientVerify message.

It would be OK for me to add the verify_data of the Client.Finished
message to the renegotiation handshake before the ClientHello
(but the Server.Finished needs to go later, so that the
handshake roundtrip optimization is not killed by this).

-Martin

Blumenthal, Uri - 0662 - MITLL wrote:
> 
> Yes, previous_verify_data MUST be a part of the input to the PRF. What Yoav
> Nir said (XOR-ing it with the master_secret), should work (out of hand -
> anybody sees a problem with it?).
> 
>     What David-Sarah said, but you could XOR it with
>     the master_secret as input to the PRF, or even better,
>     use it instead of the finished_label.