IETF Logo Mail Archive

Re: [TLS] draft-ietf-tls-tls13-21 posted

Kazu Yamamoto ( 山本和彦 ) <kazu@iij.ad.jp> Thu, 06 July 2017 02:19 UTC

Return-Path: <kazu@iij.ad.jp>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CD6512EBFF for <tls@ietfa.amsl.com>; Wed, 5 Jul 2017 19:19:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level:
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=iij.ad.jp
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RiCY_CdIhu1a for <tls@ietfa.amsl.com>; Wed, 5 Jul 2017 19:19:21 -0700 (PDT)
Received: from omgo.iij.ad.jp (mo900.iij.ad.jp [202.232.31.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FC0F12EC4D for <tls@ietf.org>; Wed, 5 Jul 2017 19:19:21 -0700 (PDT)
DKIM-Signature: v=1;a=rsa-sha256;c=relaxed/simple;d=iij.ad.jp;h=Date: Message-Id:To:Subject:From:In-Reply-To:References:Mime-Version:Content-Type: Content-Transfer-Encoding; i=kazu@iij.ad.jp; s=omgo2; t=1499307560; x=1500517160; bh=CmOh2luBPjEYESyWcPofjcuFPH9CTq5oRD03G6TMOWg=; b=vEJsBY7Rg3aNL0A1Ufzh5JKZU0d vMfW9I2v1NV1CLx2HbCNhieWoTiLul1xCvZB+ANq6zaZ9ilqR7DlnVy/88GKnYt6VAI8Ss2nHV/+b eQqflQfCm98n0f2Dtf2DJpeJ/Gg9mbp7jbhD+MZcfMB+j1OtNLA8jcGA9B12G9y/1bc98n+1XZAxX +aWpxrdlRw0ypjOU4YGZBPLs+2WVA3MkHhixIGKSeY3+S7fpWwYkFKHo+cjaonyW1Pqr4pROVEBcq RinvX5Ut3WDA+YafeJEFV7wkVFC5ddJAultmGTZ7xZLKbbv95OYGVgXcMory8BOm284KDRNdnOIuJ hsfvyIA==;
Received: by omgo.iij.ad.jp (mo900) id v662JKpj016918; Thu, 6 Jul 2017 11:19:20 +0900
X-Iguazu-Qid: 33PuoJClv5lzxQ3RJI
Date: Thu, 06 Jul 2017 11:19:18 +0900
Message-Id: <20170706.111918.990342802355467009.kazu@iij.ad.jp>
To: tls@ietf.org
From: Kazu Yamamoto <kazu@iij.ad.jp>
In-Reply-To: <CABcZeBMgYNAfjD6_mDCQ4OmvifEXXP6R_FzA6o5BCRPm78kj0Q@mail.gmail.com>
References: <CABcZeBO3frWHntziM5Kvubfy-jdrhwSFBMbG_uL1_TOX_9gXWQ@mail.gmail.com> <CABkgnnU+Eepcu-rMmxd4bQnUrmRVQ7xm9VU3-zB+ep+y8f1a8Q@mail.gmail.com> <CABcZeBMgYNAfjD6_mDCQ4OmvifEXXP6R_FzA6o5BCRPm78kj0Q@mail.gmail.com>
X-Mailer: Mew version 6.7 on Emacs 25.1 / Mule 6.0 (HANACHIRUSATO)
Mime-Version: 1.0
Content-Type: Text/Plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/MpVhOS0FQvbQZYX80OQHaCVGkr0>
Subject: Re: [TLS] draft-ietf-tls-tls13-21 posted
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Jul 2017 02:19:24 -0000

>> I think that would be best.  With the change to the transcript hash,
>> the context would then be:
>> 1. a transcript hash (size = hash function output)
>> 2. 0 (size = 0)
>> 3. ticket nonce (size = 1..255)
>>
> 
> Yeah, I can do a PR for this.

       HKDF-Expand-Label(Secret, Label, HashValue, Length) =
            HKDF-Expand(Secret, HkdfLabel, Length)

So, HashValue is not a hash value anymore.
It should be "Value" or something.
The definitions would be:

       HKDF-Expand-Label(Secret, Label, *Value*, Length) =
            HKDF-Expand(Secret, HkdfLabel, Length)

       struct {
           uint16 length = *Value.length*;
           opaque label<7..255> = "tls13 " + Label;
           opaque hash_value<0..255> = *Value*;
       } HkdfLabel;


--Kazu

v2.23.0 | Report a Bug | By Email