RE: [TLS] Verifying the PRF output

<Pasi.Eronen@nokia.com> Wed, 20 September 2006 07:48 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1GPwor-00083i-Nu; Wed, 20 Sep 2006 03:48:33 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1GPwoq-00083b-Bx for tls@lists.ietf.org; Wed, 20 Sep 2006 03:48:32 -0400
Received: from mgw-ext14.nokia.com ([131.228.20.173]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1GPwon-0002mq-KQ for tls@lists.ietf.org; Wed, 20 Sep 2006 03:48:32 -0400
Received: from esebh107.NOE.Nokia.com (esebh107.ntc.nokia.com [172.21.143.143]) by mgw-ext14.nokia.com (Switch-3.1.10/Switch-3.1.10) with ESMTP id k8K7mScv008018; Wed, 20 Sep 2006 10:48:28 +0300
Received: from esebh103.NOE.Nokia.com ([172.21.143.33]) by esebh107.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 20 Sep 2006 10:48:28 +0300
Received: from esebe105.NOE.Nokia.com ([172.21.143.53]) by esebh103.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 20 Sep 2006 10:48:27 +0300
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [TLS] Verifying the PRF output
Date: Wed, 20 Sep 2006 10:48:27 +0300
Message-ID: <B356D8F434D20B40A8CEDAEC305A1F240325C73E@esebe105.NOE.Nokia.com>
In-Reply-To: <9E5FED3D-7071-4E12-9062-3D2380A9AC11@yahoo.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [TLS] Verifying the PRF output
Thread-Index: AcbcND6srHl0eix0RaiE3G5eE5kX7gAVCKwg
From: Pasi.Eronen@nokia.com
To: reefedjib@yahoo.com, tls@lists.ietf.org
X-OriginalArrivalTime: 20 Sep 2006 07:48:27.0898 (UTC) FILETIME=[28C09DA0:01C6DC89]
X-Spam-Score: 0.2 (/)
X-Scan-Signature: 08170828343bcf1325e4a0fb4584481c
Cc:
X-BeenThere: tls@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/tls>
List-Post: <mailto:tls@lists.ietf.org>
List-Help: <mailto:tls-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=subscribe>
Errors-To: tls-bounces@lists.ietf.org

Robert Withers wrote:
> 
> Is there any sample input and output so I can check that my PRF is  
> functioning correctly?   I am getting MAC errors both as the client  
> and as the server, so I suspect the encryption is hokey, and that  
> points to a key_block problem.

I once had a similar problem, and this is what I did: I downloaded
OpenSSL source code, and added some debugging printf's to ssl/s3_enc.c
(ssl3_generate_master_secret and ssl3_generate_key_block functions),
and then tested my implementation against the openssl s_client/s_server
command line tools.

Best regards,
Pasi

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls