Re: [TLS] TLS v1.2 performance (was Re: TLSv1.2 with DSA client cert and

[Nikos Mavrogiannopoulos <[e-mail]>]

On Thu, Feb 17, 2011 at 1:54 PM, Yngve N. Pettersen (Developer Opera
Software ASA) <[e-mail]> wrote:
>> Agreed. I can't recall if we discussed this when this feature was being
>> designed
>> for 5246 but ISTM that the only way to have this work that didn't have
>> this property would be for the client to offer all his certificates
>> up-front and the
>> server to select one, since it's possible that each cert comes with a
>> specific
>> hash algorithm tied to it.
> How about removing the need to calculated the verify message based on a
> specific hash of the handshake message?
> Currently the verify message is defined as
>      struct {
>           digitally-signed struct {
>               opaque handshake_messages[handshake_messages_length];
>           }
>      } CertificateVerify;
> How about changing that to this?
>      struct {
>           digitally-signed struct {
>                PRF(master_secret, verify_label, Hash(handshake_messages))
>                          [0..f(Cert_Hash)-1];
>           }
>      } CertificateVerify;

This is a nice idea for 1.3. (I'd replace Cert_Hash with selected_hash though).

regards,
Nikos