Re: [TLS] TLS Digest, Vol 65, Issue 86

Michael D'Errico <mike-list@pobox.com> Sun, 20 December 2009 02:47 UTC

DomainKey-Signature: a=rsa-sha1; c=nofws; d=pobox.com; h=message-id:date :from:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; q=dns; s=sasl; b=riKg9o HLwofVISxHtUi0knjgNCIk9fdH2wIiYpRlmIdyHhxirU3Wxr9MWwQdnmuejAxkmv 9TubUsWv2ND3i/yZkY+32QuorAUgZec5csNLYUa9rUQDmY+ZnJN7he9gzpKj+0X4 4Rus8Ue1ssreieTDmPmY2sO7NKA+2+TZk9D8w=
Message-ID: <4B2D90BA.9030003@pobox.com>
Date: Sat, 19 Dec 2009 18:49:30 -0800
From: Michael D'Errico <mike-list@pobox.com>
User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812)
MIME-Version: 1.0
To: tls@ietf.org
References: <mailman.5940.1261270629.32729.tls@ietf.org> <3561bdcc0912191724h4b6721c6x5f9145f7e1d8524c@mail.gmail.com>
In-Reply-To: <3561bdcc0912191724h4b6721c6x5f9145f7e1d8524c@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [TLS] TLS Digest, Vol 65, Issue 86
Precedence: list

Ravi Ganesan wrote:
> ....  If by renegotiation one means "brand new keying 
> material"  then the abbreviated handshake does not achieve it, as there 
> is no new master_secret.

A renegotiation is a _handshake_ that occurs after the initial handshake.

First, you perform an initial handshake to establish a secure channel.
Then if you ever perform a handshake over this previously-established
secure channel, you are renegotiating.

The initial handshake may be full or abbreviated, and the renegotiation
may be full or abbreviated.  TLS does not require the renegotiation
handshake to be related in any way to the initial handshake (except now
we are adding the Renegotiation_Info extension to prevent man-in-the-
middle attacks).

A full handshake creates a new master secret and an abbreviated handshake
reuses one.  All handshakes generate new keying material based on the
master secret.

Mike

Re: [TLS] TLS Digest, Vol 65, Issue 86 Ravi Ganesan
Re: [TLS] TLS Digest, Vol 65, Issue 86 Michael D'Errico