Re: [TLS] New drafts: adding input to the TLS master secret

[Paul Hoffman <[e-mail]>]

At 3:03 PM -0600 2/2/10, Brian Smith wrote:
>Anyway, please disregard my mention of channel binding. What I really meant
>is that it's hard to understand and evaluate
>draft-hoffman-tls-master-secret-input without seeing the definitions of the
>other kinds of additional input--in particular, whether or not those kinds
>of additional input are better put before or after the first
>change_cipher_spec message (consequently, before or after an initial master
>secret is calculated).

Nothing in draft-hoffman-tls-master-secret-input prevents someone from writing an extension that uses data exchange after the change_cipher_spec message. Folks have been welcome to write such extensions before now, and will continue to be welcome to after this. This proposed protocol change is only relevant to scenarios where there is a cryptographic reason to mix inherently non-sensitive data passed before the change_cipher_spec message into the master secret.

--Paul Hoffman, Director
--VPN Consortium