Re: [TLS] Wrapping up cached info

[Martin Rex <[e-mail]>]

Joseph Salowey wrote:
> 
> I agree with Uri, that if you determine you need SHA-256 then you should
> plan for hash agility.  TLS 1.2 plans for hash agility.  
> 
> What about Nico's proposal where a checksum is used to identify the
> cached data and the actual handshake contains the actual data hashed
> with the algorithm used in the PRF negotiated with the cipher suite? 
> 
> This way we don't have to introduce hash agility into the extension, but
> we have cryptographic hash agility where it matters in the Finished
> computation.  Does it solve the problem?  

Yes, I think so.
This approach should solve the issue at the technical level.

Going more into detail, one would hash/mac only the data that got
actually replaced in the handshake, each prefixed by a (locally computed)
length field.

-Martin