Re: [TLS] WG interest in draft-chudov-cryptopro-cptls-02.txt

Greetings!

On Mon, 28 Nov 2005, Russ Housley wrote:

> As written, the document needs the PRF agility that was discussed for TLS 1.2.
> So, I would think that this document would be a good candidate for a
> ciphersuite using the non-mandatory-to-implement PRF.  Having one in and while
> developing TLS 1.2 sounds very desirable to me.

What can you say about section 3.3 of draft-chudov-cryptopro-cptls-02.txt?
It describes a non-reasoned aberration from RFC 2246:

====================
   For all four cipher suites, the use of MAC is slighttly different
   from the one, described in section 6.2.3.1 of [TLS].  In [TLS], MAC
   is calculated from the following data:

     MACed_data[seq_num] = seq_num +
                           TLSCompressed.type +
                           TLSCompressed.version +
                           TLSCompressed.length +
                           TLSCompressed.fragment;

   These cipher suites use the same input for first record, but for each
   next record the input from all previous records is concatenated:

     MACed_data[0] + ... + MACed_data[n]
====================

-- 
SY, Dmitry Belyavsky (ICQ UIN 11116575)

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls