Re: [TLS] Updated TLS 1.2 I-D

"Anyang Ren" <anyang.ren@gmail.com> writes:

> On 6/27/06, Eric Rescorla <ekr@networkresonance.com> wrote:
>> "Anyang Ren" <anyang.ren@gmail.com> writes:
>>
>> > Are you going to replace the MD5/SHA-1 combination in the
>> > verify_data field of the Finished message?
>>
>> It's already done. The PRF is used to create the verify_data.
>
> I was referring to the definition of verify_data in Section 7.4.10.
> Finished on page 65:
>
>        struct {
>            opaque verify_data[12];
>        } Finished;
>
>        verify_data
>            PRF(master_secret, finished_label, MD5(handshake_messages) +
>            SHA-1(handshake_messages)) [0..11];
>
> The input to the PRF still contains the concatenation of MD5 and SHA-1 hashes.

No, we're going to feed in the handshake messages directly. I just
forgot to change that.

-Ekr

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls